On Tue, Jul 4, 2023, at 09:34, Naresh Kamboju wrote:
On Tue, 4 Jul 2023 at 00:26, Greg Kroah-Hartman [ 54.386939] hugefallocate01 (410): drop_caches: 3 g tests....... tst_hugepage.c:83: TINFO: 2 huge[ 54.396708] BUG: kernel NULL pointer dereference, address: 0000000000000034 [ 54.404495] #PF: supervisor write access in kernel mode [ 54.409718] #PF: error_code(0x0002) - not-present page [ 54.414849] PGD 800000010394a067 P4D 800000010394a067 PUD 1033ba067 PMD 0 [ 54.421721] Oops: 0002 [#1] PREEMPT SMP PTI [ 54.425900] CPU: 3 PID: 411 Comm: hugefallocate01 Not tainted 6.3.12-rc1 #1 [ 54.432860] Hardware name: Supermicro SYS-5019S-ML/X11SSH-F, BIOS 2.5 11/26/2020 [ 54.440244] RIP: 0010:hugetlbfs_fallocate+0x256/0x580 [ 54.445296] Code: 3d 6f 37 06 02 89 c3 48 c1 e3 05 48 01 df e8 71 fa cb 00 31 c9 31 d2 4c 89 e6 4c 89 f7 e8 72 a6 de ff 48 3d 00 f0 ff ff 77 53 <f0> ff 48 34 74 43 48 03 1d 3d 37 06 02 48 89 df e8 25 f0 cb 00 48 [ 54.464041] RSP: 0018:ffffab24409f7dc0 EFLAGS: 00010207 [ 54.469260] RAX: 0000000000000000 RBX: 0000000000000080 RCX: 0000000000000000 [ 54.476390] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff9fe006b253c0 [ 54.483514] RBP: ffffab24409f7ec0 R08: 0000000000000000 R09: 0000000000000000 [ 54.490640] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 54.497762] R13: ffff9fe006a68010 R14: ffff9fe006a68188 R15: 0000000000000000 [ 54.504887] FS: 00007f8bec2ff740(0000) GS:ffff9fe367b80000(0000) knlGS:0000000000000000 [ 54.512965] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.518702] CR2: 0000000000000034 CR3: 0000000101cd2003 CR4: 00000000003706e0 [ 54.525826] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 54.532950] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 54.540075] Call Trace: [ 54.542519] <TASK> [ 54.544618] ? show_regs+0x6e/0x80 [ 54.548022] ? __die+0x29/0x70 [ 54.551080] ? page_fault_oops+0x154/0x470 [ 54.555186] ? do_user_addr_fault+0x2f3/0x580 [ 54.559551] ? exc_page_fault+0x6b/0x170 [ 54.563502] ? asm_exc_page_fault+0x2b/0x30 [ 54.567686] ? hugetlbfs_fallocate+0x256/0x580
From your vmlinux file I see this hugetlbfs_fallocate+0x256/0x580 is folio_put(NULL):
ffffffff815bdd29: e8 72 a6 de ff call ffffffff813a83a0 <__filemap_get_folio> ffffffff815bdd2e: 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax ffffffff815bdd34: 77 53 ja ffffffff815bdd89 <hugetlbfs_fallocate+0x2a9> ffffffff815bdd36: f0 ff 48 34 lock decl 0x34(%rax)
/* See if already present in mapping to avoid alloc/free */ folio = filemap_get_folio(mapping, index); if (!IS_ERR(folio)) { folio_put(folio);
It looks like filemap_get_folio() has always returned NULL on error rather than an error pointer.
Arnd