On Thu, Nov 09, 2023 at 06:34:24PM +0530, Naresh Kamboju wrote: > Following kernel panic noticed while running selftests: memfd: run_fuse_test.sh > on arm64 Juno-r2 and x86 devices running Linux next-20231109. > > Reported-by: Linux Kernel Functional Testing <lkft@xxxxxxxxxx> > > log: > --- > # timeout set to 45 > # selftests: memfd: run_fuse_test.sh > # opening: ./mnt/memfd > # fuse: DONE > [ 1931.860330] Unable to handle kernel paging request at virtual > address 005a5a5a5a5a5a5a > [ 1931.868645] Mem abort info: > [ 1931.871505] ESR = 0x0000000096000021 > [ 1931.875311] EC = 0x25: DABT (current EL), IL = 32 bits > [ 1931.880805] SET = 0, FnV = 0 > [ 1931.883924] EA = 0, S1PTW = 0 > [ 1931.887563] FSC = 0x21: alignment fault > [ 1931.891618] Data abort info: > [ 1931.894542] ISV = 0, ISS = 0x00000021, ISS2 = 0x00000000 > [ 1931.900219] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 > [ 1931.905305] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 > [ 1931.910692] [005a5a5a5a5a5a5a] address between user and kernel address ranges > [ 1931.918091] Internal error: Oops: 0000000096000021 [#1] PREEMPT SMP > [ 1931.924375] Modules linked in: gpio_sim onboard_usb_hub tda998x > hdlcd crct10dif_ce cec drm_dma_helper dm_mod [last unloaded: > gpio_mockup] > [ 1931.936789] CPU: 1 PID: 20739 Comm: fusermount Not tainted > 6.6.0-next-20231109 #1 > [ 1931.944295] Hardware name: ARM Juno development board (r2) (DT) > [ 1931.950224] pstate: 40000005 (nZcv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) > [ 1931.957205] pc : fuse_evict_inode > (arch/arm64/include/asm/atomic_ll_sc.h:96 (discriminator 3) > arch/arm64/include/asm/atomic.h:51 (discriminator 3) > include/linux/atomic/atomic-arch-fallback.h:944 (discriminator 3) > include/linux/atomic/atomic-instrumented.h:401 (discriminator 3) > include/linux/refcount.h:272 (discriminator 3) > include/linux/refcount.h:315 (discriminator 3) > include/linux/refcount.h:333 (discriminator 3) fs/fuse/inode.c:137 > (discriminator 3) fs/fuse/inode.c:166 (discriminator 3)) > [ 1931.961586] lr : fuse_evict_inode (fs/fuse/inode.c:162) > [ 1931.965868] sp : ffff80008792ba90 > [ 1931.969189] x29: ffff80008792ba90 x28: ffff000800b58040 x27: 0000000000000000 > [ 1931.976358] x26: 0000000000000000 x25: ffff800080508f98 x24: ffff80008316a008 > [ 1931.983519] x23: ffff80008316a008 x22: ffff80008424a020 x21: ffff00082a514c00 > [ 1931.990679] x20: 5a5a5a5a5a5a5a5a x19: ffff000838828780 x18: 0000000000000000 > [ 1931.997840] x17: ffff80008050e610 x16: ffff80008050e5bc x15: ffff80008050e3e8 > [ 1932.005003] x14: ffff80008050df10 x13: ffff800080769c60 x12: ffff8000851f6388 > [ 1932.012165] x11: 0000000000000645 x10: 0000000000000645 x9 : ffff800081c0e0b4 > [ 1932.019332] x8 : ffff80008792b988 x7 : 0000000000000000 x6 : ffff800084a75fe8 > [ 1932.026495] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff80008424a968 > [ 1932.033659] x2 : 0000000000000002 x1 : ffff000800b58040 x0 : 0000000000000001 > [ 1932.040820] Call trace: > [ 1932.043272] fuse_evict_inode > (arch/arm64/include/asm/atomic_ll_sc.h:96 (discriminator 3) > arch/arm64/include/asm/atomic.h:51 (discriminator 3) > include/linux/atomic/atomic-arch-fallback.h:944 (discriminator 3) > include/linux/atomic/atomic-instrumented.h:401 (discriminator 3) > include/linux/refcount.h:272 (discriminator 3) > include/linux/refcount.h:315 (discriminator 3) > include/linux/refcount.h:333 (discriminator 3) fs/fuse/inode.c:137 > (discriminator 3) fs/fuse/inode.c:166 (discriminator 3)) > [ 1932.047296] evict (fs/inode.c:669) > [ 1932.050279] iput_final (fs/inode.c:1776) > [ 1932.053694] iput.part.0 (fs/inode.c:1803) > [ 1932.057280] iput (fs/inode.c:1803) > [ 1932.060085] dentry_unlink_inode (fs/dcache.c:402) > [ 1932.064281] __dentry_kill (arch/arm64/include/asm/current.h:19 > arch/arm64/include/asm/preempt.h:47 fs/dcache.c:610) > [ 1932.067956] shrink_dentry_list (include/linux/list.h:373 > (discriminator 2) fs/dcache.c:1179 (discriminator 2)) > [ 1932.072067] shrink_dcache_parent (fs/dcache.c:1652) > [ 1932.076433] shrink_dcache_for_umount (fs/dcache.c:1682 fs/dcache.c:1698) > [ 1932.081062] generic_shutdown_super (fs/super.c:647) > [ 1932.085518] kill_anon_super (fs/super.c:1254) > [ 1932.089277] fuse_kill_sb_anon (fs/fuse/fuse_i.h:895 fs/fuse/inode.c:1912) > [ 1932.093298] deactivate_locked_super (fs/super.c:489) > [ 1932.097753] deactivate_super (fs/super.c:522) > [ 1932.101599] cleanup_mnt (fs/namespace.c:139 fs/namespace.c:1257) > [ 1932.105097] __cleanup_mnt (fs/namespace.c:1264) > [ 1932.108680] task_work_run (kernel/task_work.c:182) > [ 1932.112266] do_notify_resume (include/linux/resume_user_mode.h:49 > arch/arm64/kernel/signal.c:1305) > [ 1932.116283] el0_svc (arch/arm64/kernel/entry-common.c:137 > arch/arm64/kernel/entry-common.c:144 > arch/arm64/kernel/entry-common.c:679) > [ 1932.119345] el0t_64_sync_handler (arch/arm64/kernel/entry-common.c:697) > [ 1932.123710] el0t_64_sync (arch/arm64/kernel/entry.S:595) > [ 1932.127383] Code: f9026a7f 17ffffd9 52800020 f9800291 (885f7e81) > All code > ======== > 0: f9026a7f str xzr, [x19, #1232] > 4: 17ffffd9 b 0xffffffffffffff68 > 8: 52800020 mov w0, #0x1 // #1 > c: f9800291 prfm pstl1strm, [x20] > 10:* 885f7e81 ldxr w1, [x20] <-- trapping instruction > > Code starting with the faulting instruction > =========================================== > 0: 885f7e81 ldxr w1, [x20] > [ 1932.133486] ---[ end trace 0000000000000000 ]--- > [ 1932.138111] Kernel panic - not syncing: Oops: Fatal exception > [ 1932.143867] SMP: stopping secondary CPUs > [ 1932.148008] Kernel Offset: disabled > [ 1932.151498] CPU features: 0x1,0000020c,3c020000,0100421b > [ 1932.156820] Memory Limit: none > [ 1932.159880] ---[ end Kernel panic - not syncing: Oops: Fatal exception ]--- > > > Links: > - https://lkft.validation.linaro.org/scheduler/job/7006578#L6164 > - https://lkft.validation.linaro.org/scheduler/job/7006482#L9235 > > metadata: > git_ref: master > git_repo: https://gitlab.com/Linaro/lkft/mirrors/next/linux-next > git_sha: b622d91ca201bf97582e9b09ebbaab005ecee86f > git_describe: next-20231109 > kernel_version: 6.6.0 > kernel-config: > https://storage.tuxsuite.com/public/linaro/lkft/builds/2Xv92VPrzXNNmQil9l8bJV2RQHs/config > artifact-location: > https://storage.tuxsuite.com/public/linaro/lkft/builds/2Xv92VPrzXNNmQil9l8bJV2RQHs/ > toolchain: gcc-13 Thanks for this report and apologies for the trouble this caused you. I'm in the process of preparing patch with a fix to send to Miklos. Hoping to send that out a little later today. -K
