Re: selftests: memfd: run_fuse_test.sh - fuse_evict_inode - fs/fuse/inode.c:162 - panic

From: Krister Johansen
Date: Thu Nov 09 2023 - 15:42:23 EST

Next message: Moger, Babu: "Re: [PATCH v7 15/24] x86/resctrl: Allow arch to allocate memory needed in resctrl_arch_rmid_read()"
Previous message: Moger, Babu: "Re: [PATCH v7 14/24] x86/resctrl: Allow resctrl_arch_rmid_read() to sleep"
In reply to: Naresh Kamboju: "selftests: memfd: run_fuse_test.sh - fuse_evict_inode - fs/fuse/inode.c:162 - panic"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Thu, Nov 09, 2023 at 06:34:24PM +0530, Naresh Kamboju wrote:
> Following kernel panic noticed while running selftests: memfd: run_fuse_test.sh
> on arm64 Juno-r2 and x86 devices running Linux next-20231109.
>
> Reported-by: Linux Kernel Functional Testing <lkft@xxxxxxxxxx>
>
> log:
> ---
> # timeout set to 45
> # selftests: memfd: run_fuse_test.sh
> # opening: ./mnt/memfd
> # fuse: DONE
> [ 1931.860330] Unable to handle kernel paging request at virtual
> address 005a5a5a5a5a5a5a
> [ 1931.868645] Mem abort info:
> [ 1931.871505] ESR = 0x0000000096000021
> [ 1931.875311] EC = 0x25: DABT (current EL), IL = 32 bits
> [ 1931.880805] SET = 0, FnV = 0
> [ 1931.883924] EA = 0, S1PTW = 0
> [ 1931.887563] FSC = 0x21: alignment fault
> [ 1931.891618] Data abort info:
> [ 1931.894542] ISV = 0, ISS = 0x00000021, ISS2 = 0x00000000
> [ 1931.900219] CM = 0, WnR = 0, TnD = 0, TagAccess = 0
> [ 1931.905305] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0
> [ 1931.910692] [005a5a5a5a5a5a5a] address between user and kernel address ranges
> [ 1931.918091] Internal error: Oops: 0000000096000021 [#1] PREEMPT SMP
> [ 1931.924375] Modules linked in: gpio_sim onboard_usb_hub tda998x
> hdlcd crct10dif_ce cec drm_dma_helper dm_mod [last unloaded:
> gpio_mockup]
> [ 1931.936789] CPU: 1 PID: 20739 Comm: fusermount Not tainted
> 6.6.0-next-20231109 #1
> [ 1931.944295] Hardware name: ARM Juno development board (r2) (DT)
> [ 1931.950224] pstate: 40000005 (nZcv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)
> [ 1931.957205] pc : fuse_evict_inode
> (arch/arm64/include/asm/atomic_ll_sc.h:96 (discriminator 3)
> arch/arm64/include/asm/atomic.h:51 (discriminator 3)
> include/linux/atomic/atomic-arch-fallback.h:944 (discriminator 3)
> include/linux/atomic/atomic-instrumented.h:401 (discriminator 3)
> include/linux/refcount.h:272 (discriminator 3)
> include/linux/refcount.h:315 (discriminator 3)
> include/linux/refcount.h:333 (discriminator 3) fs/fuse/inode.c:137
> (discriminator 3) fs/fuse/inode.c:166 (discriminator 3))
> [ 1931.961586] lr : fuse_evict_inode (fs/fuse/inode.c:162)
> [ 1931.965868] sp : ffff80008792ba90
> [ 1931.969189] x29: ffff80008792ba90 x28: ffff000800b58040 x27: 0000000000000000
> [ 1931.976358] x26: 0000000000000000 x25: ffff800080508f98 x24: ffff80008316a008
> [ 1931.983519] x23: ffff80008316a008 x22: ffff80008424a020 x21: ffff00082a514c00
> [ 1931.990679] x20: 5a5a5a5a5a5a5a5a x19: ffff000838828780 x18: 0000000000000000
> [ 1931.997840] x17: ffff80008050e610 x16: ffff80008050e5bc x15: ffff80008050e3e8
> [ 1932.005003] x14: ffff80008050df10 x13: ffff800080769c60 x12: ffff8000851f6388
> [ 1932.012165] x11: 0000000000000645 x10: 0000000000000645 x9 : ffff800081c0e0b4
> [ 1932.019332] x8 : ffff80008792b988 x7 : 0000000000000000 x6 : ffff800084a75fe8
> [ 1932.026495] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff80008424a968
> [ 1932.033659] x2 : 0000000000000002 x1 : ffff000800b58040 x0 : 0000000000000001
> [ 1932.040820] Call trace:
> [ 1932.043272] fuse_evict_inode
> (arch/arm64/include/asm/atomic_ll_sc.h:96 (discriminator 3)
> arch/arm64/include/asm/atomic.h:51 (discriminator 3)
> include/linux/atomic/atomic-arch-fallback.h:944 (discriminator 3)
> include/linux/atomic/atomic-instrumented.h:401 (discriminator 3)
> include/linux/refcount.h:272 (discriminator 3)
> include/linux/refcount.h:315 (discriminator 3)
> include/linux/refcount.h:333 (discriminator 3) fs/fuse/inode.c:137
> (discriminator 3) fs/fuse/inode.c:166 (discriminator 3))
> [ 1932.047296] evict (fs/inode.c:669)
> [ 1932.050279] iput_final (fs/inode.c:1776)
> [ 1932.053694] iput.part.0 (fs/inode.c:1803)
> [ 1932.057280] iput (fs/inode.c:1803)
> [ 1932.060085] dentry_unlink_inode (fs/dcache.c:402)
> [ 1932.064281] __dentry_kill (arch/arm64/include/asm/current.h:19
> arch/arm64/include/asm/preempt.h:47 fs/dcache.c:610)
> [ 1932.067956] shrink_dentry_list (include/linux/list.h:373
> (discriminator 2) fs/dcache.c:1179 (discriminator 2))
> [ 1932.072067] shrink_dcache_parent (fs/dcache.c:1652)
> [ 1932.076433] shrink_dcache_for_umount (fs/dcache.c:1682 fs/dcache.c:1698)
> [ 1932.081062] generic_shutdown_super (fs/super.c:647)
> [ 1932.085518] kill_anon_super (fs/super.c:1254)
> [ 1932.089277] fuse_kill_sb_anon (fs/fuse/fuse_i.h:895 fs/fuse/inode.c:1912)
> [ 1932.093298] deactivate_locked_super (fs/super.c:489)
> [ 1932.097753] deactivate_super (fs/super.c:522)
> [ 1932.101599] cleanup_mnt (fs/namespace.c:139 fs/namespace.c:1257)
> [ 1932.105097] __cleanup_mnt (fs/namespace.c:1264)
> [ 1932.108680] task_work_run (kernel/task_work.c:182)
> [ 1932.112266] do_notify_resume (include/linux/resume_user_mode.h:49
> arch/arm64/kernel/signal.c:1305)
> [ 1932.116283] el0_svc (arch/arm64/kernel/entry-common.c:137
> arch/arm64/kernel/entry-common.c:144
> arch/arm64/kernel/entry-common.c:679)
> [ 1932.119345] el0t_64_sync_handler (arch/arm64/kernel/entry-common.c:697)
> [ 1932.123710] el0t_64_sync (arch/arm64/kernel/entry.S:595)
> [ 1932.127383] Code: f9026a7f 17ffffd9 52800020 f9800291 (885f7e81)
> All code
> ========
> 0: f9026a7f str xzr, [x19, #1232]
> 4: 17ffffd9 b 0xffffffffffffff68
> 8: 52800020 mov w0, #0x1 // #1
> c: f9800291 prfm pstl1strm, [x20]
> 10:* 885f7e81 ldxr w1, [x20] <-- trapping instruction
>
> Code starting with the faulting instruction
> ===========================================
> 0: 885f7e81 ldxr w1, [x20]
> [ 1932.133486] ---[ end trace 0000000000000000 ]---
> [ 1932.138111] Kernel panic - not syncing: Oops: Fatal exception
> [ 1932.143867] SMP: stopping secondary CPUs
> [ 1932.148008] Kernel Offset: disabled
> [ 1932.151498] CPU features: 0x1,0000020c,3c020000,0100421b
> [ 1932.156820] Memory Limit: none
> [ 1932.159880] ---[ end Kernel panic - not syncing: Oops: Fatal exception ]---
>
>
> Links:
> - https://lkft.validation.linaro.org/scheduler/job/7006578#L6164
> - https://lkft.validation.linaro.org/scheduler/job/7006482#L9235
>
> metadata:
> git_ref: master
> git_repo: https://gitlab.com/Linaro/lkft/mirrors/next/linux-next
> git_sha: b622d91ca201bf97582e9b09ebbaab005ecee86f
> git_describe: next-20231109
> kernel_version: 6.6.0
> kernel-config:
> https://storage.tuxsuite.com/public/linaro/lkft/builds/2Xv92VPrzXNNmQil9l8bJV2RQHs/config
> artifact-location:
> https://storage.tuxsuite.com/public/linaro/lkft/builds/2Xv92VPrzXNNmQil9l8bJV2RQHs/
> toolchain: gcc-13

Thanks for this report and apologies for the trouble this caused you.
I'm in the process of preparing patch with a fix to send to Miklos.
Hoping to send that out a little later today.

-K

Next message: Moger, Babu: "Re: [PATCH v7 15/24] x86/resctrl: Allow arch to allocate memory needed in resctrl_arch_rmid_read()"
Previous message: Moger, Babu: "Re: [PATCH v7 14/24] x86/resctrl: Allow resctrl_arch_rmid_read() to sleep"
In reply to: Naresh Kamboju: "selftests: memfd: run_fuse_test.sh - fuse_evict_inode - fs/fuse/inode.c:162 - panic"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]