From: kernel test robot <oliver.sang@intel.com>
To: Boqun Feng <boqun@kernel.org>
Cc: <oe-lkp@lists.linux.dev>, <lkp@intel.com>,
Joel Fernandes <joelagnelf@nvidia.com>,
Andrea Righi <arighi@nvidia.com>, Zqiang <qiang.zhang@linux.dev>,
<rcu@vger.kernel.org>, <oliver.sang@intel.com>
Subject: [rcu:rcu/dev] [rcu] 02bf38db37: kernel_BUG_at_kernel/irq_work.c
Date: Mon, 23 Mar 2026 14:34:42 +0800 [thread overview]
Message-ID: <202603230706.d0d75fea-lkp@intel.com> (raw)
Hello,
kernel test robot noticed "kernel_BUG_at_kernel/irq_work.c" on:
commit: 02bf38db37c44207e5fa4ee205148cea7588da7b ("rcu: Use an intermediate irq_work to start process_srcu()")
https://git.kernel.org/cgit/linux/kernel/git/rcu/linux.git rcu/dev
in testcase: boot
config: x86_64-rhel-9.4
compiler: gcc-14
test machine: qemu-system-x86_64 -enable-kvm -cpu SandyBridge -smp 2 -m 32G
(please refer to attached dmesg/kmsg for entire log/backtrace)
+-------------------------------------------------------+------------+------------+
| | 15d921a7bb | 02bf38db37 |
+-------------------------------------------------------+------------+------------+
| boot_successes | 6 | 0 |
| boot_failures | 0 | 7 |
| kernel_BUG_at_kernel/irq_work.c | 0 | 7 |
| Oops:invalid_opcode:#[##]SMP_PTI | 0 | 7 |
| RIP:irq_work_run_list | 0 | 7 |
| RIP:_raw_spin_unlock_irqrestore | 0 | 7 |
| Kernel_panic-not_syncing:Fatal_exception_in_interrupt | 0 | 7 |
+-------------------------------------------------------+------------+------------+
If you fix the issue in a separate patch/commit (i.e. not just a new version of
the same patch/commit), kindly add following tags
| Reported-by: kernel test robot <oliver.sang@intel.com>
| Closes: https://lore.kernel.org/oe-lkp/202603230706.d0d75fea-lkp@intel.com
[ 7.880152][ C1] ------------[ cut here ]------------
[ 7.881714][ C1] kernel BUG at kernel/irq_work.c:245!
[ 7.883180][ C1] Oops: invalid opcode: 0000 [#1] SMP PTI
[ 7.884704][ C1] CPU: 1 UID: 0 PID: 29 Comm: kworker/u8:1 Not tainted 7.0.0-rc3-00020-g02bf38db37c4 #1 PREEMPTLAZY
[ 7.887379][ C1] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 7.889736][ C1] Workqueue: events_unbound fsnotify_mark_destroy_workfn
[ 7.891397][ C1] RIP: 0010:irq_work_run_list (kernel/irq_work.c:245 (discriminator 1))
[ 7.892706][ C1] Code: f0 0f b1 53 08 48 8b 05 9d 71 f5 01 f6 c4 02 75 bc 48 8d 7b 18 e8 cf 7a e1 ff 4d 85 ed 75 b3 5b 5d 41 5c 41 5d e9 8f b7 e0 00 <0f> 0b 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 66 66 2e 0f 1f 84 00
All code
========
0: f0 0f b1 53 08 lock cmpxchg %edx,0x8(%rbx)
5: 48 8b 05 9d 71 f5 01 mov 0x1f5719d(%rip),%rax # 0x1f571a9
c: f6 c4 02 test $0x2,%ah
f: 75 bc jne 0xffffffffffffffcd
11: 48 8d 7b 18 lea 0x18(%rbx),%rdi
15: e8 cf 7a e1 ff call 0xffffffffffe17ae9
1a: 4d 85 ed test %r13,%r13
1d: 75 b3 jne 0xffffffffffffffd2
1f: 5b pop %rbx
20: 5d pop %rbp
21: 41 5c pop %r12
23: 41 5d pop %r13
25: e9 8f b7 e0 00 jmp 0xe0b7b9
2a:* 0f 0b ud2 <-- trapping instruction
2c: 66 66 2e 0f 1f 84 00 data16 cs nopw 0x0(%rax,%rax,1)
33: 00 00 00 00
37: 66 90 xchg %ax,%ax
39: 66 data16
3a: 66 data16
3b: 2e cs
3c: 0f .byte 0xf
3d: 1f (bad)
3e: 84 00 test %al,(%rax)
Code starting with the faulting instruction
===========================================
0: 0f 0b ud2
2: 66 66 2e 0f 1f 84 00 data16 cs nopw 0x0(%rax,%rax,1)
9: 00 00 00 00
d: 66 90 xchg %ax,%ax
f: 66 data16
10: 66 data16
11: 2e cs
12: 0f .byte 0xf
13: 1f (bad)
14: 84 00 test %al,(%rax)
[ 7.896993][ C1] RSP: 0018:ffffcf20000f0fc0 EFLAGS: 00010206
[ 7.898320][ C1] RAX: ffff8b7e91a34000 RBX: ffffcf20000ffca8 RCX: 0000000000000001
[ 7.900113][ C1] RDX: 0000000000000020 RSI: 0000000000000002 RDI: ffff8b7e1fd2ad00
[ 7.901905][ C1] RBP: 0000000000000000 R08: 0000000000000400 R09: 0000000000000002
[ 7.903620][ C1] R10: ffff8b7e1fd31d80 R11: ffff8b7701401ad0 R12: 0000000000000000
[ 7.905254][ C1] R13: 0000000000000200 R14: 0000000000000000 R15: 0000000000000000
[ 7.906941][ C1] FS: 0000000000000000(0000) GS:ffff8b7e91a34000(0000) knlGS:0000000000000000
[ 7.908747][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 7.910001][ C1] CR2: 00007fe73c0c9170 CR3: 0000000100bb2000 CR4: 00000000000406f0
[ 7.911582][ C1] Call Trace:
[ 7.913403][ C1] <IRQ>
[ 7.914087][ C1] __sysvec_irq_work (arch/x86/include/asm/jump_label.h:37 arch/x86/include/asm/trace/irq_vectors.h:63 arch/x86/kernel/irq_work.c:23)
[ 7.915049][ C1] sysvec_irq_work (arch/x86/kernel/irq_work.c:17 (discriminator 35) arch/x86/kernel/irq_work.c:17 (discriminator 35))
[ 7.915965][ C1] </IRQ>
[ 7.916600][ C1] <TASK>
[ 7.917214][ C1] asm_sysvec_irq_work (arch/x86/include/asm/idtentry.h:733)
[ 7.918173][ C1] RIP: 0010:_raw_spin_unlock_irqrestore (include/linux/spinlock_api_smp.h:179 (discriminator 2) kernel/locking/spinlock.c:194 (discriminator 2))
[ 7.919364][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 0f 1f 44 00 00 c6 07 00 0f 1f 00 f7 c6 00 02 00 00 74 01 fb 65 ff 0d 41 c5 b9 01 <74> 05 c3 cc cc cc cc e8 d5 78 f4 fe c3 cc cc cc cc 90 90 90 90 90
All code
========
0: 90 nop
1: 90 nop
2: 90 nop
3: 90 nop
4: 90 nop
5: 90 nop
6: 90 nop
7: 90 nop
8: 90 nop
9: 90 nop
a: 90 nop
b: f3 0f 1e fa endbr64
f: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1)
14: c6 07 00 movb $0x0,(%rdi)
17: 0f 1f 00 nopl (%rax)
1a: f7 c6 00 02 00 00 test $0x200,%esi
20: 74 01 je 0x23
22: fb sti
23: 65 ff 0d 41 c5 b9 01 decl %gs:0x1b9c541(%rip) # 0x1b9c56b
2a:* 74 05 je 0x31 <-- trapping instruction
2c: c3 ret
2d: cc int3
2e: cc int3
2f: cc int3
30: cc int3
31: e8 d5 78 f4 fe call 0xfffffffffef4790b
36: c3 ret
37: cc int3
38: cc int3
39: cc int3
3a: cc int3
3b: 90 nop
3c: 90 nop
3d: 90 nop
3e: 90 nop
3f: 90 nop
Code starting with the faulting instruction
===========================================
0: 74 05 je 0x7
2: c3 ret
3: cc int3
4: cc int3
5: cc int3
6: cc int3
7: e8 d5 78 f4 fe call 0xfffffffffef478e1
c: c3 ret
d: cc int3
e: cc int3
f: cc int3
10: cc int3
11: 90 nop
12: 90 nop
13: 90 nop
14: 90 nop
15: 90 nop
The kernel config and materials to reproduce are available at:
https://download.01.org/0day-ci/archive/20260323/202603230706.d0d75fea-lkp@intel.com
--
0-DAY CI Kernel Test Service
https://github.com/intel/lkp-tests/wiki
reply other threads:[~2026-03-23 6:34 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=202603230706.d0d75fea-lkp@intel.com \
--to=oliver.sang@intel.com \
--cc=arighi@nvidia.com \
--cc=boqun@kernel.org \
--cc=joelagnelf@nvidia.com \
--cc=lkp@intel.com \
--cc=oe-lkp@lists.linux.dev \
--cc=qiang.zhang@linux.dev \
--cc=rcu@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox