Hello,
kernel test robot noticed "BUG:unable_to_handle_page_fault_for_address" on:
commit: c8e00140fa86367e0840b148e5ad41f5ae6e24c8 ("fs: add infrastructure for multigrain timestamps")
https://git.kernel.org/cgit/linux/kernel/git/jlayton/linux.git kdevops
in testcase: boot
compiler: gcc-12
test machine: qemu-system-x86_64 -enable-kvm -cpu SandyBridge -smp 2 -m 16G
(please refer to attached dmesg/kmsg for entire log/backtrace)
+----------------------------------------------------------------------------------+------------+------------+
| | 84f0c2d484 | c8e00140fa |
+----------------------------------------------------------------------------------+------------+------------+
| BUG:unable_to_handle_page_fault_for_address | 0 | 6 |
| Oops:#[##] | 0 | 6 |
| EIP:percpu_counter_add_batch | 0 | 6 |
| Kernel_panic-not_syncing:Fatal_exception | 0 | 6 |
+----------------------------------------------------------------------------------+------------+------------+
If you fix the issue in a separate patch/commit (i.e. not just a new version of
the same patch/commit), kindly add following tags
| Reported-by: kernel test robot <oliver.sang@xxxxxxxxx>
| Closes: https://lore.kernel.org/oe-lkp/202310241644.67f17b98-oliver.sang@xxxxxxxxx
[ 0.988550][ T0] BUG: unable to handle page fault for address: 26a4c000
[ 0.990169][ T0] #PF: supervisor read access in kernel mode
[ 0.991590][ T0] #PF: error_code(0x0000) - not-present page
[ 0.991876][ T0] *pde = 00000000
[ 0.991876][ T0] Oops: 0000 [#1] SMP
[ 0.991876][ T0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.6.0-rc6-00092-gc8e00140fa86 #1
[ 0.991876][ T0] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 0.991876][ T0] EIP: percpu_counter_add_batch (lib/percpu_counter.c:93 (discriminator 1))
[ 0.991876][ T0] Code: 43 34 11 53 28 f7 de 64 01 30 89 d8 e8 ea 5e 5e 00 9c 58 f6 c4 02 74 ca e8 e2 6d 5d 00 eb c3 e8 5b 96 bd ff 8b 4b 34 8b 7d e0 <64> 8b 31 89 f0 99 03 45 e4 13 55 e8 89 55 f0 89 c2 89 45 ec 8b 45
All code
========
0: 43 34 11 rex.XB xor $0x11,%al
3: 53 push %rbx
4: 28 f7 sub %dh,%bh
6: de 64 01 30 fisubs 0x30(%rcx,%rax,1)
a: 89 d8 mov %ebx,%eax
c: e8 ea 5e 5e 00 call 0x5e5efb
11: 9c pushf
12: 58 pop %rax
13: f6 c4 02 test $0x2,%ah
16: 74 ca je 0xffffffffffffffe2
18: e8 e2 6d 5d 00 call 0x5d6dff
1d: eb c3 jmp 0xffffffffffffffe2
1f: e8 5b 96 bd ff call 0xffffffffffbd967f
24: 8b 4b 34 mov 0x34(%rbx),%ecx
27: 8b 7d e0 mov -0x20(%rbp),%edi
2a:* 64 8b 31 mov %fs:(%rcx),%esi <-- trapping instruction
2d: 89 f0 mov %esi,%eax
2f: 99 cltd
30: 03 45 e4 add -0x1c(%rbp),%eax
33: 13 55 e8 adc -0x18(%rbp),%edx
36: 89 55 f0 mov %edx,-0x10(%rbp)
39: 89 c2 mov %eax,%edx
3b: 89 45 ec mov %eax,-0x14(%rbp)
3e: 8b .byte 0x8b
3f: 45 rex.RB
Code starting with the faulting instruction
===========================================
0: 64 8b 31 mov %fs:(%rcx),%esi
3: 89 f0 mov %esi,%eax
5: 99 cltd
6: 03 45 e4 add -0x1c(%rbp),%eax
9: 13 55 e8 adc -0x18(%rbp),%edx
c: 89 55 f0 mov %edx,-0x10(%rbp)
f: 89 c2 mov %eax,%edx
11: 89 45 ec mov %eax,-0x14(%rbp)
14: 8b .byte 0x8b
15: 45 rex.RB
[ 0.991876][ T0] EAX: 00000001 EBX: c2df4ca0 ECX: 00000000 EDX: c15cef45
[ 0.991876][ T0] ESI: 00000020 EDI: 00000000 EBP: c212be18 ESP: c212bdf4
[ 0.991876][ T0] DS: 007b ES: 007b FS: 00d8 GS: 0000 SS: 0068 EFLAGS: 00210002
[ 0.991876][ T0] CR0: 80050033 CR2: 26a4c000 CR3: 02704000 CR4: 00000690
[ 0.991876][ T0] Call Trace:
[ 0.991876][ T0] ? show_regs (arch/x86/kernel/dumpstack.c:479 arch/x86/kernel/dumpstack.c:465)
[ 0.991876][ T0] ? __die (arch/x86/kernel/dumpstack.c:421 arch/x86/kernel/dumpstack.c:434)
[ 0.991876][ T0] ? page_fault_oops (arch/x86/mm/fault.c:707)
[ 0.991876][ T0] ? kernelmode_fixup_or_oops+0x78/0xd0
[ 0.991876][ T0] ? __bad_area_nosemaphore+0x11c/0x1f4
[ 0.991876][ T0] ? bad_area_nosemaphore (arch/x86/mm/fault.c:867)
[ 0.991876][ T0] ? do_user_addr_fault (arch/x86/mm/fault.c:1476)
[ 0.991876][ T0] ? exc_page_fault (arch/x86/include/asm/irqflags.h:26 arch/x86/include/asm/irqflags.h:67 arch/x86/include/asm/irqflags.h:127 arch/x86/mm/fault.c:1513 arch/x86/mm/fault.c:1561)
[ 0.991876][ T0] ? pvclock_clocksource_read_nowd (arch/x86/mm/fault.c:1518)
[ 0.991876][ T0] ? handle_exception (arch/x86/entry/entry_32.S:1056)
[ 0.991876][ T0] ? percpu_counter_add_batch (lib/percpu_counter.c:93 (discriminator 1))
[ 0.991876][ T0] ? sched_core_share_pid (kernel/sched/core_sched.c:225 (discriminator 16))
[ 0.991876][ T0] ? pvclock_clocksource_read_nowd (arch/x86/mm/fault.c:1518)
[ 0.991876][ T0] ? percpu_counter_add_batch (lib/percpu_counter.c:93 (discriminator 1))
[ 0.991876][ T0] ? sched_core_share_pid (kernel/sched/core_sched.c:225 (discriminator 16))
[ 0.991876][ T0] ? pvclock_clocksource_read_nowd (arch/x86/mm/fault.c:1518)
[ 0.991876][ T0] ? percpu_counter_add_batch (lib/percpu_counter.c:93 (discriminator 1))
[ 0.991876][ T0] ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:63)
[ 0.991876][ T0] ktime_get_mg_coarse_ts64 (kernel/time/timekeeping.c:2371)
[ 0.991876][ T0] ? __lock_release+0x4a/0x134
[ 0.991876][ T0] inode_set_ctime_current (fs/inode.c:2563 fs/inode.c:2576)
[ 0.991876][ T0] ? inode_sb_list_add (fs/inode.c:496)
[ 0.991876][ T0] simple_inode_init_ts (fs/libfs.c:1929)
[ 0.991876][ T0] __shmem_get_inode (mm/shmem.c:2459)
[ 0.991876][ T0] shmem_fill_super (mm/shmem.c:4356)
[ 0.991876][ T0] ? shmem_fill_super (mm/shmem.c:4356)
[ 0.991876][ T0] ? shmem_fileattr_set (mm/shmem.c:4267)
[ 0.991876][ T0] get_tree_nodev (fs/super.c:1335 fs/super.c:1354)
[ 0.991876][ T0] shmem_get_tree (mm/shmem.c:4375)
[ 0.991876][ T0] vfs_get_tree (fs/super.c:1750)
[ 0.991876][ T0] vfs_kern_mount (fs/namespace.c:4751)
[ 0.991876][ T0] ? shmem_parse_one (mm/shmem.c:4424)
[ 0.991876][ T0] kern_mount (fs/namespace.c:4754)
[ 0.991876][ T0] shmem_init (mm/shmem.c:4615)
[ 0.991876][ T0] mnt_init (fs/namespace.c:4738)
[ 0.991876][ T0] vfs_caches_init (fs/dcache.c:3351)
[ 0.991876][ T0] start_kernel (init/main.c:1053)
[ 0.991876][ T0] i386_start_kernel (??:?)
[ 0.991876][ T0] startup_32_smp (arch/x86/kernel/head_32.S:305)
[ 0.991876][ T0] Modules linked in:
[ 0.991876][ T0] CR2: 0000000026a4c000
[ 0.991876][ T0] ---[ end trace 0000000000000000 ]---
[ 0.991876][ T0] EIP: percpu_counter_add_batch (lib/percpu_counter.c:93 (discriminator 1))
[ 0.991876][ T0] Code: 43 34 11 53 28 f7 de 64 01 30 89 d8 e8 ea 5e 5e 00 9c 58 f6 c4 02 74 ca e8 e2 6d 5d 00 eb c3 e8 5b 96 bd ff 8b 4b 34 8b 7d e0 <64> 8b 31 89 f0 99 03 45 e4 13 55 e8 89 55 f0 89 c2 89 45 ec 8b 45
All code
========
0: 43 34 11 rex.XB xor $0x11,%al
3: 53 push %rbx
4: 28 f7 sub %dh,%bh
6: de 64 01 30 fisubs 0x30(%rcx,%rax,1)
a: 89 d8 mov %ebx,%eax
c: e8 ea 5e 5e 00 call 0x5e5efb
11: 9c pushf
12: 58 pop %rax
13: f6 c4 02 test $0x2,%ah
16: 74 ca je 0xffffffffffffffe2
18: e8 e2 6d 5d 00 call 0x5d6dff
1d: eb c3 jmp 0xffffffffffffffe2
1f: e8 5b 96 bd ff call 0xffffffffffbd967f
24: 8b 4b 34 mov 0x34(%rbx),%ecx
27: 8b 7d e0 mov -0x20(%rbp),%edi
2a:* 64 8b 31 mov %fs:(%rcx),%esi <-- trapping instruction
2d: 89 f0 mov %esi,%eax
2f: 99 cltd
30: 03 45 e4 add -0x1c(%rbp),%eax
33: 13 55 e8 adc -0x18(%rbp),%edx
36: 89 55 f0 mov %edx,-0x10(%rbp)
39: 89 c2 mov %eax,%edx
3b: 89 45 ec mov %eax,-0x14(%rbp)
3e: 8b .byte 0x8b
3f: 45 rex.RB
Code starting with the faulting instruction
===========================================
0: 64 8b 31 mov %fs:(%rcx),%esi
3: 89 f0 mov %esi,%eax
5: 99 cltd
6: 03 45 e4 add -0x1c(%rbp),%eax
9: 13 55 e8 adc -0x18(%rbp),%edx
c: 89 55 f0 mov %edx,-0x10(%rbp)
f: 89 c2 mov %eax,%edx
11: 89 45 ec mov %eax,-0x14(%rbp)
14: 8b .byte 0x8b
15: 45 rex.RB
The kernel config and materials to reproduce are available at:
https://download.01.org/0day-ci/archive/20231024/202310241644.67f17b98-oliver.sang@xxxxxxxxx
--
0-DAY CI Kernel Test Service
https://github.com/intel/lkp-tests/wiki
