Hello, kernel test robot noticed "kernel_BUG_at_block/bdev.c" on: commit: b80d7798a6f9db2c094014570a73728ace8d844d ("[PATCH 5/9] Block: switch bd_prepare_to_claim to use ___wait_var_event()") url: https://github.com/intel-lab-lkp/linux/commits/NeilBrown/i915-remove-wake_up-on-I915_RESET_MODESET/20240819-134414 base: git://git.linux-nfs.org/projects/trondmy/linux-nfs.git linux-next patch link: https://lore.kernel.org/all/20240819053605.11706-6-neilb@xxxxxxx/ patch subject: [PATCH 5/9] Block: switch bd_prepare_to_claim to use ___wait_var_event() in testcase: boot compiler: clang-18 test machine: qemu-system-x86_64 -enable-kvm -cpu SandyBridge -smp 2 -m 16G (please refer to attached dmesg/kmsg for entire log/backtrace) +------------------------------------------+------------+------------+ | | 30a670cac3 | b80d7798a6 | +------------------------------------------+------------+------------+ | boot_successes | 9 | 0 | | boot_failures | 0 | 9 | | kernel_BUG_at_block/bdev.c | 0 | 9 | | Oops:invalid_opcode:#[##]PREEMPT_SMP_PTI | 0 | 9 | | RIP:bd_finish_claiming | 0 | 9 | | Kernel_panic-not_syncing:Fatal_exception | 0 | 9 | +------------------------------------------+------------+------------+ If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <oliver.sang@xxxxxxxxx> | Closes: https://lore.kernel.org/oe-lkp/202408211439.954a6d41-lkp@xxxxxxxxx [ 8.768327][ T2733] ------------[ cut here ]------------ [ 8.768333][ T2733] kernel BUG at block/bdev.c:583! [ 8.768342][ T2733] Oops: invalid opcode: 0000 [#1] PREEMPT SMP PTI [ 8.768348][ T2733] CPU: 1 UID: 0 PID: 2733 Comm: cdrom_id Not tainted 6.11.0-rc3-00005-gb80d7798a6f9 #1 [ 8.768352][ T2733] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 8.768355][ T2733] RIP: 0010:bd_finish_claiming (block/bdev.c:583) [ 8.768388][ T2733] Code: 48 c7 03 00 00 00 00 f0 83 44 24 fc 00 48 89 df e8 0f bc b1 ff 48 c7 c7 00 97 a0 82 5b 41 5c 41 5d 41 5e 41 5f e9 5a aa 95 00 <0f> 0b 0f 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 All code ======== 0: 48 c7 03 00 00 00 00 movq $0x0,(%rbx) 7: f0 83 44 24 fc 00 lock addl $0x0,-0x4(%rsp) d: 48 89 df mov %rbx,%rdi 10: e8 0f bc b1 ff call 0xffffffffffb1bc24 15: 48 c7 c7 00 97 a0 82 mov $0xffffffff82a09700,%rdi 1c: 5b pop %rbx 1d: 41 5c pop %r12 1f: 41 5d pop %r13 21: 41 5e pop %r14 23: 41 5f pop %r15 25: e9 5a aa 95 00 jmp 0x95aa84 2a:* 0f 0b ud2 <-- trapping instruction 2c: 0f 0b ud2 2e: 66 0f 1f 44 00 00 nopw 0x0(%rax,%rax,1) 34: 90 nop 35: 90 nop 36: 90 nop 37: 90 nop 38: 90 nop 39: 90 nop 3a: 90 nop 3b: 90 nop 3c: 90 nop 3d: 90 nop 3e: 90 nop 3f: 90 nop Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 0f 0b ud2 4: 66 0f 1f 44 00 00 nopw 0x0(%rax,%rax,1) a: 90 nop b: 90 nop c: 90 nop d: 90 nop e: 90 nop f: 90 nop 10: 90 nop 11: 90 nop 12: 90 nop 13: 90 nop 14: 90 nop 15: 90 nop [ 8.768392][ T2733] RSP: 0000:ffffc90000a5bc00 EFLAGS: 00010246 [ 8.768396][ T2733] RAX: 0000000000000000 RBX: ffff888125940000 RCX: 0000000000000000 [ 8.768398][ T2733] RDX: 0000000000000000 RSI: ffff88812a326800 RDI: ffff888125940000 [ 8.768400][ T2733] RBP: 000000000000000d R08: 0000000000000004 R09: 00000002f1ee446d [ 8.768402][ T2733] R10: 00646b636f6c6200 R11: ffffffffa0015f60 R12: ffff888125940000 [ 8.768404][ T2733] R13: 0000000000000000 R14: ffff88812a326800 R15: 0000000000000000 [ 8.768407][ T2733] FS: 0000000000000000(0000) GS:ffff88842fd00000(0063) knlGS:00000000f7d406c0 [ 8.768410][ T2733] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 8.768412][ T2733] CR2: 00000000f7d0315c CR3: 000000012a244000 CR4: 00000000000406f0 [ 8.768417][ T2733] Call Trace: [ 8.769866][ T2733] <TASK> [ 8.769875][ T2733] ? __die_body (arch/x86/kernel/dumpstack.c:421) [ 8.769884][ T2733] ? die (arch/x86/kernel/dumpstack.c:? arch/x86/kernel/dumpstack.c:447) [ 8.769888][ T2733] ? do_trap (arch/x86/kernel/traps.c:129) [ 8.769893][ T2733] ? bd_finish_claiming (block/bdev.c:583) [ 8.769898][ T2733] ? do_error_trap (arch/x86/kernel/traps.c:175) [ 8.769902][ T2733] ? bd_finish_claiming (block/bdev.c:583) [ 8.769905][ T2733] ? handle_invalid_op (arch/x86/kernel/traps.c:212) [ 8.769909][ T2733] ? bd_finish_claiming (block/bdev.c:583) [ 8.769912][ T2733] ? exc_invalid_op (arch/x86/kernel/traps.c:267) [ 8.769917][ T2733] ? asm_exc_invalid_op (arch/x86/include/asm/idtentry.h:621) [ 8.769926][ T2733] ? __pfx_sr_open (drivers/scsi/sr.c:593) sr_mod [ 8.769932][ T2733] ? bd_finish_claiming (block/bdev.c:583) [ 8.769936][ T2733] bdev_open (block/bdev.c:914) [ 8.769940][ T2733] ? iput (fs/inode.c:1821) [ 8.769945][ T2733] blkdev_open (block/fops.c:631) [ 8.769949][ T2733] ? __pfx_blkdev_open (block/fops.c:610) [ 8.769952][ T2733] do_dentry_open (fs/open.c:959) [ 8.769958][ T2733] vfs_open (fs/open.c:1089) [ 8.769962][ T2733] path_openat (fs/namei.c:3727) [ 8.769966][ T2733] ? call_rcu (kernel/rcu/tree.c:2996) [ 8.769972][ T2733] do_filp_open (fs/namei.c:3913) [ 8.769978][ T2733] do_sys_openat2 (fs/open.c:1416) [ 8.769982][ T2733] do_sys_open (fs/open.c:1431) [ 8.769986][ T2733] do_int80_emulation (arch/x86/entry/common.c:?) [ 8.769990][ T2733] ? irqentry_exit_to_user_mode (arch/x86/include/asm/processor.h:702 arch/x86/include/asm/entry-common.h:91 include/linux/entry-common.h:364 kernel/entry/common.c:233) [ 8.769994][ T2733] asm_int80_emulation (arch/x86/include/asm/idtentry.h:626) [ 8.769999][ T2733] RIP: 0023:0xf7f111b2 [ 8.770004][ T2733] Code: 89 c2 31 c0 89 d7 f3 aa 8b 44 24 1c 89 30 c6 40 04 00 83 c4 2c 89 f0 5b 5e 5f 5d c3 90 90 90 90 90 90 90 90 90 90 90 90 cd 80 <c3> 8d b6 00 00 00 00 8d bc 27 00 00 00 00 8b 1c 24 c3 8d b6 00 00 All code ======== 0: 89 c2 mov %eax,%edx 2: 31 c0 xor %eax,%eax 4: 89 d7 mov %edx,%edi 6: f3 aa rep stos %al,%es:(%rdi) 8: 8b 44 24 1c mov 0x1c(%rsp),%eax c: 89 30 mov %esi,(%rax) e: c6 40 04 00 movb $0x0,0x4(%rax) 12: 83 c4 2c add $0x2c,%esp 15: 89 f0 mov %esi,%eax 17: 5b pop %rbx 18: 5e pop %rsi 19: 5f pop %rdi 1a: 5d pop %rbp 1b: c3 ret 1c: 90 nop 1d: 90 nop 1e: 90 nop 1f: 90 nop 20: 90 nop 21: 90 nop 22: 90 nop 23: 90 nop 24: 90 nop 25: 90 nop 26: 90 nop 27: 90 nop 28: cd 80 int $0x80 2a:* c3 ret <-- trapping instruction 2b: 8d b6 00 00 00 00 lea 0x0(%rsi),%esi 31: 8d bc 27 00 00 00 00 lea 0x0(%rdi,%riz,1),%edi 38: 8b 1c 24 mov (%rsp),%ebx 3b: c3 ret 3c: 8d .byte 0x8d 3d: b6 00 mov $0x0,%dh ... Code starting with the faulting instruction =========================================== 0: c3 ret 1: 8d b6 00 00 00 00 lea 0x0(%rsi),%esi 7: 8d bc 27 00 00 00 00 lea 0x0(%rdi,%riz,1),%edi e: 8b 1c 24 mov (%rsp),%ebx 11: c3 ret 12: 8d .byte 0x8d 13: b6 00 mov $0x0,%dh The kernel config and materials to reproduce are available at: https://download.01.org/0day-ci/archive/20240821/202408211439.954a6d41-lkp@xxxxxxxxx -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki