Received-SPF: pass (google.com: domain of linux-kernel+bounces-26077-linux.lists.archive=gmail.com@vger.kernel.org designates 2604:1380:45e3:2400::1 as permitted sender) client-ip=2604:1380:45e3:2400::1;
Date: Mon, 15 Jan 2024 22:14:12 +0800
From: kernel test robot <oliver.sang@intel.com>
To: Steven Rostedt <rostedt@goodmis.org>
CC: <oe-lkp@lists.linux.dev>, <lkp@intel.com>, Linux Memory Management List
	<linux-mm@kvack.org>, Masami Hiramatsu <mhiramat@kernel.org>, Mark Rutland
	<mark.rutland@arm.com>, Mathieu Desnoyers <mathieu.desnoyers@efficios.com>,
	Linus Torvalds <torvalds@linux-foundation.org>, Ajay Kaher
	<akaher@vmware.com>, Al Viro <viro@zeniv.linux.org.uk>, Christian Brauner
	<brauner@kernel.org>, <linux-kernel@vger.kernel.org>,
	<linux-trace-kernel@vger.kernel.org>, <oliver.sang@intel.com>
Subject: [linux-next:master] [eventfs]  493ec81a8f: kernel_BUG_at_fs/dcache.c
Message-ID: <202401152142.bfc28861-oliver.sang@intel.com>
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
Precedence: bulk
MIME-Version: 1.0
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?cElPoJHdN+eho18DOwXGwAu6ATmTqgpZbWjiIkEoBxhLG7Y0uEzLHQBe6v07?=
 =?us-ascii?Q?lAasTnnW9Sfst4awxuAj7zzk6qlybnt2MHhc6/DJALaWkyVQlntcgqgzzfpy?=
 =?us-ascii?Q?Z3LVdQbIy66/E0j35Vr+ZRvyNYEFaToiiJscjzbdv/Na6SBisE0s+0soDnz+?=
 =?us-ascii?Q?tGOZFX3X1pZoa6EMKDJLApEuBSIdSDXF1swFkk187AXBjl+ba/omBFo8zYwE?=
 =?us-ascii?Q?5IUO2HKNtun4QjMFwwdfQN5EI4+u4LiZ3pfUpOQNI3duAJSc/yxX1LdwurQK?=
 =?us-ascii?Q?EXEVTken/3Mzadp5B7Ademi+evt4QXv63iJ4GAIKR225BmSf+BuwcNnsTEU8?=
 =?us-ascii?Q?ToRvD3eliCMImlEsF7WcNflxEBsJZqvO3v7NQ4wfbO7flpYQSHChjuOxtB5a?=
 =?us-ascii?Q?h4w45Bwdt/gmFLoxEu5XgOHFcmq7Fw9dV5NIM0Dl5bCiSPVOrkFdXjQqujiq?=
 =?us-ascii?Q?ucCaN9fRsxNu2v5Fj8SbV3QZm/34dLTUUq2xv4uSY5fXvfp6JgmdQkU6B+ui?=
 =?us-ascii?Q?N+NJFwu0TrRxc2GGAnTW3e9JlJ3/Bj/eYuEsbiPMW/uxhpmAaSA/cwlMHB4n?=
 =?us-ascii?Q?OWo40lI9vYsigqjX+Rn+t7qtL2GimdOC0tVU5yIy5jPwC8AfLt5EVZSZwjHG?=
 =?us-ascii?Q?Mk5+7n1pWR86Hvvno5xTk5KMZAcGzsR5OhdQX1Sm6gpuBUlXAPrq72At6o8G?=
 =?us-ascii?Q?OmyfLYiC0C9pukDSGyJ52ppjobGQI93fJO6S1I3AhxQZQyZhMnJeEjDMFPo4?=
 =?us-ascii?Q?d9VpKeLPSRlVvZoPINuJOiZSwzmnMeQSfjCbEaYu/6+CXJOmeVB8O72H7SPy?=
 =?us-ascii?Q?eE94XnsnGh/DilqMsszoX81DaznnY4oet0OkgzOdlbWsZkKeMAm/zew80vOK?=
 =?us-ascii?Q?ot6pUGnA841vHgXr71yIpUxuEJQxIgLQRI1EmtnxDoXthyzWiKJ03ee7bMkh?=
 =?us-ascii?Q?v8Frf/6YRZapBpQ5GBXYJT4aJ7aTwp5czj83+fqXjjzkLF4EJWOLGkGp4ISb?=
 =?us-ascii?Q?DcDpIZDysBTBT4NLlVEDT7dLV0lCusm6/9refUoklSfc97OCbahGbWhnBQN4?=
 =?us-ascii?Q?nxAv8yVRCGpouknZZOJObRkgmZH4nhva2Q6jB6yDnEePI3CyTGU0Yc9PMC9y?=
 =?us-ascii?Q?K6uymMGuqvdMjnAbCHwEgdYjHtA3ev/qYrC5O8UuFynhcsPgjDTKjjnBLCDE?=
 =?us-ascii?Q?hFVfvCYZLfKSr72O6FzvOHAcbW9uAlfokZfFclnDGyCtnydc6R+Ha2Y0Tz+u?=
 =?us-ascii?Q?bnx/lcKaSz5hzAnTWFEUuJ4kzmnb0jp4D1emFCZq0rpzNelrUH+jFa5caXRC?=
 =?us-ascii?Q?RrKmZhYoHXvZK3/+4MKD9q5yIrXJ2JXK8rr6x10UDlHQba9DPJWFi7lc1yqL?=
 =?us-ascii?Q?xXTAoRDPCUlmmUw+qSiA/6njPQPkRYiH9vwN6sn1fOqYDBDbr3O6jSjPC4E2?=
 =?us-ascii?Q?yKFi/u0gzjmXaG2raGKIqpNnaFjJpRSKzS2/d0R7LsrEQeCOatNHW0Q7PeCP?=
 =?us-ascii?Q?p9Z+ImVmmYDPW84Q1XHGqqAC7EM5MFxEUbBYPtj4CoUEs0UNyw+IfiQ9Adn5?=
 =?us-ascii?Q?Mg1xyliyL48iszvnEEFsYEs/pKn0m559KWD8Eh6MgL2MOER6wL6v80zQtJaT?=
 =?us-ascii?Q?bA=3D=3D?=
X-MS-Exchange-CrossTenant-Network-Message-Id: 700003a4-d816-4d31-836d-08dc15d445c5
X-MS-Exchange-CrossTenant-AuthSource: LV3PR11MB8603.namprd11.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 15 Jan 2024 14:14:23.0745
 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: 46c98d88-e344-4ed4-8496-4ed7712e255d
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: 1qlCi4WWEguCyyfXozoBt70FkjeOSgTxOXjfHJV4kAPb3G8UHQOwQP045TowTKogXZ65CxGDDLvnzOp6D62tzA==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN0PR11MB6253
X-OriginatorOrg: intel.com


Hello,

kernel test robot noticed "kernel_BUG_at_fs/dcache.c" on:

commit: 493ec81a8fb8e4ada6f223b8b73791a1280d4774 ("eventfs: Stop using dcache_readdir() for getdents()")
https://git.kernel.org/cgit/linux/kernel/git/next/linux-next.git master

[test failed on linux-next/master 8cb47d7cd090a690c1785385b2f3d407d4a53ad0]
[test failed on fix commit 1e4624eb5a0ecaae0d2c4e3019bece119725bb98]

in testcase: stress-ng
version: stress-ng-x86_64-3040a078a-1_20231212
with following parameters:

	nr_threads: 10%
	disk: 1HDD
	testtime: 60s
	fs: btrfs
	class: filesystem
	test: getdent
	cpufreq_governor: performance


compiler: gcc-12
test machine: 64 threads 2 sockets Intel(R) Xeon(R) Gold 6346 CPU @ 3.10GHz (Ice Lake) with 256G memory

(please refer to attached dmesg/kmsg for entire log/backtrace)


If you fix the issue in a separate patch/commit (i.e. not just a new version of
the same patch/commit), kindly add following tags
| Reported-by: kernel test robot <oliver.sang@intel.com>
| Closes: https://lore.kernel.org/oe-lkp/202401152142.bfc28861-oliver.sang@intel.com


[   41.602502][ T4375] ------------[ cut here ]------------
[   41.602519][ T4376] ------------[ cut here ]------------
[   41.602607][ T4374] ------------[ cut here ]------------
[   41.602607][ T4378] ------------[ cut here ]------------
[   41.602608][ T4374] kernel BUG at fs/dcache.c:2031!
[   41.602608][ T4378] kernel BUG at fs/dcache.c:2031!
[   41.602613][ T4374] invalid opcode: 0000 [#1] SMP NOPTI
[   41.602616][ T4374] CPU: 50 PID: 4374 Comm: stress-ng-getde Not tainted 6.7.0-rc2-00042-g493ec81a8fb8 #1
[   41.602618][ T4374] Hardware name: Inspur NF5180M6/NF5180M6, BIOS 06.00.04 04/12/2022
[ 41.602619][ T4374] RIP: 0010:d_instantiate (fs/dcache.c:2031 (discriminator 1)) 
[   41.602623][ T4377] ------------[ cut here ]------------
[ 41.602623][ T4374] Code: e8 92 c0 1c 00 4c 89 e7 e8 0a 79 b8 00 48 89 ef 48 89 de e8 7f fc ff ff 4c 89 e7 c6 07 00 0f 1f 00 5b 5d 41 5c c3 cc cc cc cc <0f> 0b 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00
All code
========
   0:	e8 92 c0 1c 00       	callq  0x1cc097
   5:	4c 89 e7             	mov    %r12,%rdi
   8:	e8 0a 79 b8 00       	callq  0xb87917
   d:	48 89 ef             	mov    %rbp,%rdi
  10:	48 89 de             	mov    %rbx,%rsi
  13:	e8 7f fc ff ff       	callq  0xfffffffffffffc97
  18:	4c 89 e7             	mov    %r12,%rdi
  1b:	c6 07 00             	movb   $0x0,(%rdi)
  1e:	0f 1f 00             	nopl   (%rax)
  21:	5b                   	pop    %rbx
  22:	5d                   	pop    %rbp
  23:	41 5c                	pop    %r12
  25:	c3                   	retq   
  26:	cc                   	int3   
  27:	cc                   	int3   
  28:	cc                   	int3   
  29:	cc                   	int3   
  2a:*	0f 0b                	ud2    		<-- trapping instruction
  2c:	66 66 2e 0f 1f 84 00 	data16 nopw %cs:0x0(%rax,%rax,1)
  33:	00 00 00 00 
  37:	66                   	data16
  38:	66                   	data16
  39:	2e                   	cs
  3a:	0f                   	.byte 0xf
  3b:	1f                   	(bad)  
  3c:	84 00                	test   %al,(%rax)
	...

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2    
   2:	66 66 2e 0f 1f 84 00 	data16 nopw %cs:0x0(%rax,%rax,1)
   9:	00 00 00 00 
   d:	66                   	data16
   e:	66                   	data16
   f:	2e                   	cs
  10:	0f                   	.byte 0xf
  11:	1f                   	(bad)  
  12:	84 00                	test   %al,(%rax)
	...
[   41.602625][ T4377] kernel BUG at fs/dcache.c:2031!
[   41.602625][ T4374] RSP: 0018:ffa000000fcdfcd0 EFLAGS: 00010286
[   41.602629][ T4374] RAX: 0000000000000002 RBX: ff11000109392980 RCX: 0000000000000000
[   41.602630][ T4374] RDX: 0000000000000000 RSI: ff1100405e46c6f0 RDI: ff1100405f05afc0
[   41.602631][ T4374] RBP: ff1100405f05afc0 R08: ffffffff830ad0e0 R09: 0000000000000000
[   41.602632][ T4374] R10: 0000000000000280 R11: ffffffff8162036a R12: 0000000000000000
[   41.602633][ T4374] R13: ff1100405e46c6f0 R14: ff1100405f05aff8 R15: 0000000000000000
[   41.602634][ T4374] FS:  00007f2582ff9740(0000) GS:ff1100407fa80000(0000) knlGS:0000000000000000
[   41.602635][ T4374] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   41.602635][ T4374] CR2: 00005624511f3328 CR3: 000000208a342006 CR4: 0000000000771ef0
[   41.602636][ T4374] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   41.602637][ T4374] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   41.602638][ T4374] PKRU: 55555554
[   41.602638][ T4374] Call Trace:
[   41.602640][ T4374]  <TASK>
[ 41.602642][ T4374] ? die (arch/x86/kernel/dumpstack.c:421 arch/x86/kernel/dumpstack.c:434 arch/x86/kernel/dumpstack.c:447) 
[ 41.602644][ T4374] ? do_trap (arch/x86/kernel/traps.c:112 arch/x86/kernel/traps.c:153) 
[ 41.602645][ T4374] ? d_instantiate (fs/dcache.c:2031 (discriminator 1)) 
[ 41.602647][ T4374] ? do_error_trap (arch/x86/include/asm/traps.h:59 arch/x86/kernel/traps.c:174) 
[ 41.602648][ T4374] ? d_instantiate (fs/dcache.c:2031 (discriminator 1)) 
[ 41.602649][ T4374] ? exc_invalid_op (arch/x86/kernel/traps.c:265) 
[ 41.602652][ T4374] ? d_instantiate (fs/dcache.c:2031 (discriminator 1)) 
[ 41.602653][ T4374] ? asm_exc_invalid_op (arch/x86/include/asm/idtentry.h:568) 
[ 41.602655][ T4374] ? tracefs_alloc_inode (fs/tracefs/inode.c:38) 
[ 41.602657][ T4374] ? d_instantiate (fs/dcache.c:2031 (discriminator 1)) 
[ 41.602659][ T4374] create_dir_dentry (fs/tracefs/event_inode.c:329 fs/tracefs/event_inode.c:516) 
[ 41.602661][ T4374] eventfs_root_lookup (fs/tracefs/event_inode.c:611) 
[ 41.602662][ T4374] ? terminate_walk (fs/namei.c:691) 
[ 41.602665][ T4374] __lookup_slow (fs/namei.c:1694) 
[ 41.602667][ T4374] lookup_one_len (fs/namei.c:2746 (discriminator 1)) 
[ 41.602669][ T4374] eventfs_start_creating (fs/tracefs/inode.c:536) 
[ 41.602671][ T4374] create_dir_dentry (fs/tracefs/event_inode.c:309 fs/tracefs/event_inode.c:516) 
[ 41.602673][ T4374] eventfs_iterate (fs/tracefs/event_inode.c:701) 
[ 41.602674][ T4374] ? atime_needs_update (fs/inode.c:1842 fs/inode.c:1994) 
[ 41.602677][ T4374] iterate_dir (fs/readdir.c:106) 
[ 41.602680][ T4374] __x64_sys_getdents (fs/readdir.c:323 fs/readdir.c:307 fs/readdir.c:307) 
[ 41.602682][ T4374] ? __pfx_filldir (fs/readdir.c:260) 
[ 41.602684][ T4374] do_syscall_64 (arch/x86/entry/common.c:51 arch/x86/entry/common.c:82) 
[ 41.602686][ T4374] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:129) 
[   41.602690][ T4374] RIP: 0033:0x7f2583190f29
[ 41.602691][ T4374] Code: 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 37 8f 0d 00 f7 d8 64 89 01 48
All code
========
   0:	00 c3                	add    %al,%bl
   2:	66 2e 0f 1f 84 00 00 	nopw   %cs:0x0(%rax,%rax,1)
   9:	00 00 00 
   c:	0f 1f 44 00 00       	nopl   0x0(%rax,%rax,1)
  11:	48 89 f8             	mov    %rdi,%rax
  14:	48 89 f7             	mov    %rsi,%rdi
  17:	48 89 d6             	mov    %rdx,%rsi
  1a:	48 89 ca             	mov    %rcx,%rdx
  1d:	4d 89 c2             	mov    %r8,%r10
  20:	4d 89 c8             	mov    %r9,%r8
  23:	4c 8b 4c 24 08       	mov    0x8(%rsp),%r9
  28:	0f 05                	syscall 
  2a:*	48 3d 01 f0 ff ff    	cmp    $0xfffffffffffff001,%rax		<-- trapping instruction
  30:	73 01                	jae    0x33
  32:	c3                   	retq   
  33:	48 8b 0d 37 8f 0d 00 	mov    0xd8f37(%rip),%rcx        # 0xd8f71
  3a:	f7 d8                	neg    %eax
  3c:	64 89 01             	mov    %eax,%fs:(%rcx)
  3f:	48                   	rex.W

Code starting with the faulting instruction
===========================================
   0:	48 3d 01 f0 ff ff    	cmp    $0xfffffffffffff001,%rax
   6:	73 01                	jae    0x9
   8:	c3                   	retq   
   9:	48 8b 0d 37 8f 0d 00 	mov    0xd8f37(%rip),%rcx        # 0xd8f47
  10:	f7 d8                	neg    %eax
  12:	64 89 01             	mov    %eax,%fs:(%rcx)
  15:	48                   	rex.W
[   41.602692][ T4374] RSP: 002b:00007ffe038f3e28 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[   41.602694][ T4374] RAX: ffffffffffffffda RBX: 0000000000001000 RCX: 00007f2583190f29
[   41.602695][ T4374] RDX: 0000000000001000 RSI: 0000562451159150 RDI: 0000000000000008
[   41.602695][ T4374] RBP: 00007f2582fcd398 R08: 00007f2582fcd398 R09: 00007f2582fcd398
[   41.602696][ T4374] R10: 00007f2582fcd398 R11: 0000000000000246 R12: 00007f2582fcd398
[   41.602696][ T4374] R13: 0000562451159150 R14: 00007ffe038f80d8 R15: 0000000000000008
[   41.602697][ T4374]  </TASK>
[   41.602698][ T4374] Modules linked in: binfmt_misc dm_mod intel_rapl_msr intel_rapl_common btrfs blake2b_generic x86_pkg_temp_thermal xor coretemp raid6_pq libcrc32c kvm_intel ipmi_ssif kvm irqbypass nvme crct10dif_pclmul crc32_pclmul sd_mod crc32c_intel nvme_core sg ghash_clmulni_intel sha512_ssse3 ahci t10_pi rapl libahci ast intel_cstate mei_me crc64_rocksoft_generic drm_shmem_helper intel_uncore dax_hmem acpi_ipmi ioatdma i2c_i801 crc64_rocksoft megaraid_sas crc64 ipmi_si libata drm_kms_helper mei i2c_smbus intel_pch_thermal joydev dca wmi ipmi_devintf ipmi_msghandler acpi_power_meter drm fuse ip_tables
[   41.602723][ T4374] ---[ end trace 0000000000000000 ]---
[   41.602724][ T4378] invalid opcode: 0000 [#2] SMP NOPTI
[   41.602726][ T4378] CPU: 27 PID: 4378 Comm: stress-ng-getde Tainted: G      D            6.7.0-rc2-00042-g493ec81a8fb8 #1
[   41.602728][ T4378] Hardware name: Inspur NF5180M6/NF5180M6, BIOS 06.00.04 04/12/2022
[ 41.602729][ T4378] RIP: 0010:d_instantiate (fs/dcache.c:2031 (discriminator 1)) 
[ 41.602733][ T4378] Code: e8 92 c0 1c 00 4c 89 e7 e8 0a 79 b8 00 48 89 ef 48 89 de e8 7f fc ff ff 4c 89 e7 c6 07 00 0f 1f 00 5b 5d 41 5c c3 cc cc cc cc <0f> 0b 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00
All code
========
   0:	e8 92 c0 1c 00       	callq  0x1cc097
   5:	4c 89 e7             	mov    %r12,%rdi
   8:	e8 0a 79 b8 00       	callq  0xb87917
   d:	48 89 ef             	mov    %rbp,%rdi
  10:	48 89 de             	mov    %rbx,%rsi
  13:	e8 7f fc ff ff       	callq  0xfffffffffffffc97
  18:	4c 89 e7             	mov    %r12,%rdi
  1b:	c6 07 00             	movb   $0x0,(%rdi)
  1e:	0f 1f 00             	nopl   (%rax)
  21:	5b                   	pop    %rbx
  22:	5d                   	pop    %rbp
  23:	41 5c                	pop    %r12
  25:	c3                   	retq   
  26:	cc                   	int3   
  27:	cc                   	int3   
  28:	cc                   	int3   
  29:	cc                   	int3   
  2a:*	0f 0b                	ud2    		<-- trapping instruction
  2c:	66 66 2e 0f 1f 84 00 	data16 nopw %cs:0x0(%rax,%rax,1)
  33:	00 00 00 00 
  37:	66                   	data16
  38:	66                   	data16
  39:	2e                   	cs
  3a:	0f                   	.byte 0xf
  3b:	1f                   	(bad)  
  3c:	84 00                	test   %al,(%rax)
	...

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2    
   2:	66 66 2e 0f 1f 84 00 	data16 nopw %cs:0x0(%rax,%rax,1)
   9:	00 00 00 00 
   d:	66                   	data16
   e:	66                   	data16
   f:	2e                   	cs
  10:	0f                   	.byte 0xf
  11:	1f                   	(bad)  
  12:	84 00                	test   %al,(%rax)


The kernel config and materials to reproduce are available at:
https://download.01.org/0day-ci/archive/20240115/202401152142.bfc28861-oliver.sang@intel.com


-- 
0-DAY CI Kernel Test Service
https://github.com/intel/lkp-tests/wiki