Hello,
kernel test robot noticed "WARNING:at_mm/rmap.c:#unlink_anon_vmas" on:
commit: ae307233d6efc18c3d6015b127b099450ca8588e ("[PATCH] mm: vma remove the redundant avc binded with old folio")
url: https://github.com/intel-lab-lkp/linux/commits/Zhiguo-Jiang/mm-vma-remove-the-redundant-avc-binded-with-old-folio/20240820-223531
base: https://git.kernel.org/cgit/linux/kernel/git/akpm/mm.git mm-everything
patch link: https://lore.kernel.org/all/20240820143359.199-1-justinjiang@xxxxxxxx/
patch subject: [PATCH] mm: vma remove the redundant avc binded with old folio
in testcase: boot
compiler: gcc-12
test machine: qemu-system-x86_64 -enable-kvm -cpu SandyBridge -smp 2 -m 16G
(please refer to attached dmesg/kmsg for entire log/backtrace)
+----------------------------------------+------------+------------+
| | 75bee94793 | ae307233d6 |
+----------------------------------------+------------+------------+
| WARNING:at_mm/rmap.c:#unlink_anon_vmas | 0 | 6 |
| RIP:unlink_anon_vmas | 0 | 6 |
+----------------------------------------+------------+------------+
If you fix the issue in a separate patch/commit (i.e. not just a new version of
the same patch/commit), kindly add following tags
| Reported-by: kernel test robot <oliver.sang@xxxxxxxxx>
| Closes: https://lore.kernel.org/oe-lkp/202408230938.43f55b4-lkp@xxxxxxxxx
[ 36.655884][ T197] ------------[ cut here ]------------
[ 36.656843][ T197] WARNING: CPU: 1 PID: 197 at mm/rmap.c:443 unlink_anon_vmas (mm/rmap.c:443 (discriminator 1))
[ 36.658183][ T197] Modules linked in: sg ata_piix libata crc32_pclmul crc32c_intel scsi_mod polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 aesni_intel scsi_common cmdlinepart
[ 36.660508][ T197] CPU: 1 UID: 0 PID: 197 Comm: lkp-bootstrap Tainted: G T 6.11.0-rc3-00378-gae307233d6ef #1 5ff8330b382acbcd2719e520175822ac6c64d0eb
[ 36.662685][ T197] Tainted: [T]=RANDSTRUCT
[ 36.663288][ T197] RIP: 0010:unlink_anon_vmas (mm/rmap.c:443 (discriminator 1))
[ 36.668434][ T197] Code: 7f fe ff ff 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f 31 c0 31 d2 31 c9 31 f6 31 ff 45 31 c0 45 31 c9 c3 90 0f 0b 90 eb ad 90 <0f> 0b 90 eb 82 90 0f 0b 90 48 8d 7e 08 e8 2d a2 bf ff e9 ca fc ff
All code
========
0: 7f fe jg 0x0
2: ff (bad)
3: ff 48 83 decl -0x7d(%rax)
6: c4 (bad)
7: 28 5b 5d sub %bl,0x5d(%rbx)
a: 41 5c pop %r12
c: 41 5d pop %r13
e: 41 5e pop %r14
10: 41 5f pop %r15
12: 31 c0 xor %eax,%eax
14: 31 d2 xor %edx,%edx
16: 31 c9 xor %ecx,%ecx
18: 31 f6 xor %esi,%esi
1a: 31 ff xor %edi,%edi
1c: 45 31 c0 xor %r8d,%r8d
1f: 45 31 c9 xor %r9d,%r9d
22: c3 ret
23: 90 nop
24: 0f 0b ud2
26: 90 nop
27: eb ad jmp 0xffffffffffffffd6
29: 90 nop
2a:* 0f 0b ud2 <-- trapping instruction
2c: 90 nop
2d: eb 82 jmp 0xffffffffffffffb1
2f: 90 nop
30: 0f 0b ud2
32: 90 nop
33: 48 8d 7e 08 lea 0x8(%rsi),%rdi
37: e8 2d a2 bf ff call 0xffffffffffbfa269
3c: e9 .byte 0xe9
3d: ca fc ff lret $0xfffc
Code starting with the faulting instruction
===========================================
0: 0f 0b ud2
2: 90 nop
3: eb 82 jmp 0xffffffffffffff87
5: 90 nop
6: 0f 0b ud2
8: 90 nop
9: 48 8d 7e 08 lea 0x8(%rsi),%rdi
d: e8 2d a2 bf ff call 0xffffffffffbfa23f
12: e9 .byte 0xe9
13: ca fc ff lret $0xfffc
[ 36.671148][ T197] RSP: 0000:ffffc900019ffad8 EFLAGS: 00010202
[ 36.671931][ T197] RAX: 1ffff1102e73f0bf RBX: ffff888173c55ab0 RCX: 0000000000000000
[ 36.672880][ T197] RDX: 1ffff110241d68e2 RSI: 0000000000000000 RDI: ffff8881739f85f8
[ 36.673933][ T197] RBP: ffff888120eb4700 R08: 0000000000000000 R09: 0000000000000000
[ 36.675002][ T197] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8881739f8550
[ 36.676082][ T197] R13: ffff888173c55aa0 R14: dffffc0000000000 R15: ffff888120eb4710
[ 36.677134][ T197] FS: 0000000000000000(0000) GS:ffff8883af300000(0000) knlGS:0000000000000000
[ 36.678328][ T197] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033
[ 36.679207][ T197] CR2: 000000005663e33c CR3: 000000012021c000 CR4: 00000000000406b0
[ 36.680251][ T197] Call Trace:
[ 36.680681][ T197] <TASK>
[ 36.681079][ T197] ? __warn (kernel/panic.c:735)
[ 36.681682][ T197] ? unlink_anon_vmas (mm/rmap.c:443 (discriminator 1))
[ 36.682312][ T197] ? report_bug (lib/bug.c:180 lib/bug.c:219)
[ 36.682920][ T197] ? handle_bug (arch/x86/kernel/traps.c:239)
[ 36.683494][ T197] ? exc_invalid_op (arch/x86/kernel/traps.c:260 (discriminator 1))
[ 36.684125][ T197] ? asm_exc_invalid_op (arch/x86/include/asm/idtentry.h:621)
[ 36.684804][ T197] ? unlink_anon_vmas (mm/rmap.c:443 (discriminator 1))
[ 36.685501][ T197] ? unlink_anon_vmas (mm/rmap.c:400)
[ 36.686185][ T197] free_pgtables (mm/memory.c:410)
[ 36.686819][ T197] ? free_pgd_range (mm/memory.c:367)
[ 36.687466][ T197] ? preempt_count_add (include/linux/ftrace.h:976 kernel/sched/core.c:5634 kernel/sched/core.c:5659)
[ 36.688179][ T197] exit_mmap (mm/mmap.c:1934)
[ 36.688758][ T197] ? trace_contention_end (include/trace/events/lock.h:122 (discriminator 52))
[ 36.689496][ T197] ? do_vma_munmap (mm/mmap.c:1895)
[ 36.690125][ T197] ? __mutex_lock (arch/x86/include/asm/preempt.h:103 kernel/locking/mutex.c:618 kernel/locking/mutex.c:752)
[ 36.690779][ T197] ? __mutex_unlock_slowpath (arch/x86/include/asm/atomic64_64.h:101 include/linux/atomic/atomic-arch-fallback.h:4329 include/linux/atomic/atomic-long.h:1506 include/linux/atomic/atomic-instrumented.h:4481 kernel/locking/mutex.c:929)
[ 36.691585][ T197] __mmput (kernel/fork.c:1346)
[ 36.692143][ T197] exit_mm (kernel/exit.c:572)
[ 36.692699][ T197] do_exit (arch/x86/include/asm/jump_label.h:27 include/linux/jump_label.h:207 include/trace/events/sched.h:333 kernel/exit.c:930)
[ 36.693256][ T197] ? do_raw_spin_lock (arch/x86/include/asm/atomic.h:107 include/linux/atomic/atomic-arch-fallback.h:2170 include/linux/atomic/atomic-instrumented.h:1302 include/asm-generic/qspinlock.h:111 kernel/locking/spinlock_debug.c:116)
[ 36.693947][ T197] ? stack_not_used (kernel/exit.c:878)
[ 36.694605][ T197] ? _raw_spin_unlock_irq (arch/x86/include/asm/irqflags.h:42 arch/x86/include/asm/irqflags.h:97 include/linux/spinlock_api_smp.h:159 kernel/locking/spinlock.c:202)
[ 36.695304][ T197] do_group_exit (kernel/exit.c:1069)
[ 36.695908][ T197] __ia32_sys_exit_group (kernel/exit.c:1097)
[ 36.696561][ T197] ia32_sys_call (??:?)
[ 36.697142][ T197] do_int80_emulation (arch/x86/entry/common.c:165 arch/x86/entry/common.c:253)
[ 36.697852][ T197] asm_int80_emulation (arch/x86/include/asm/idtentry.h:626)
[ 36.698504][ T197] RIP: 0023:0xf7f03092
[ 36.699039][ T197] Code: Unable to access opcode bytes at 0xf7f03068.
Code starting with the faulting instruction
===========================================
[ 36.699967][ T197] RSP: 002b:00000000ffcfddd8 EFLAGS: 00000296 ORIG_RAX: 00000000000000fc
[ 36.701055][ T197] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000003323d2f
[ 36.702120][ T197] RDX: 00000000ffcfde00 RSI: 0000000056633734 RDI: 00000000f7ef8000
[ 36.703147][ T197] RBP: 00000000ffcfdef8 R08: 0000000000000000 R09: 0000000000000000
[ 36.704165][ T197] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 36.705185][ T197] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 36.706281][ T197] </TASK>
[ 36.706698][ T197] irq event stamp: 10051
[ 36.707257][ T197] hardirqs last enabled at (10059): console_unlock (arch/x86/include/asm/irqflags.h:26 arch/x86/include/asm/irqflags.h:87 arch/x86/include/asm/irqflags.h:147 kernel/printk/printk.c:341 kernel/printk/printk.c:2801 kernel/printk/printk.c:3120)
[ 36.708455][ T197] hardirqs last disabled at (10066): console_unlock (kernel/printk/printk.c:339 kernel/printk/printk.c:2801 kernel/printk/printk.c:3120)
[ 36.709660][ T197] softirqs last enabled at (10006): handle_softirqs (arch/x86/include/asm/preempt.h:26 kernel/softirq.c:401 kernel/softirq.c:582)
[ 36.710805][ T197] softirqs last disabled at (9997): irq_exit_rcu (kernel/softirq.c:589 kernel/softirq.c:428 kernel/softirq.c:637 kernel/softirq.c:649)
[ 36.711941][ T197] ---[ end trace 0000000000000000 ]---
The kernel config and materials to reproduce are available at:
https://download.01.org/0day-ci/archive/20240823/202408230938.43f55b4-lkp@xxxxxxxxx
--
0-DAY CI Kernel Test Service
https://github.com/intel/lkp-tests/wiki
