Lkft-triage

lkft-triage@lists.linaro.org

22 participants
34053 discussions

qemu-arm64: handle_futex_death - kernel/futex/core.c:661 - Unable to handle kernel unknown 43 at virtual address

by Naresh Kamboju

Following kernel crash noticed on qemu-arm64 while running LTP syscalls set_robust_list test case running Linux next 6.6.0-rc7-next-20231026 and 6.6.0-rc7-next-20231025. BAD: next-20231025 Good: next-20231024 Reported-by: Linux Kernel Functional Testing <lkft(a)linaro.org> Reported-by: Naresh Kamboju <naresh.kamboju(a)linaro.org> Log: ---- <1>[ 203.119139] Unable to handle kernel unknown 43 at virtual address 0001ffff9e2e7d78 <1>[ 203.119838] Mem abort info: <1>[ 203.120064] ESR = 0x000000009793002b <1>[ 203.121040] EC = 0x25: DABT (current EL), IL = 32 bits set_robust_list01 1 TPASS : set_robust_list: retval = -1 (expected -1), errno = 22 (expected 22) set_robust_list01 2 TPASS : set_robust_list: retval = 0 (expected 0), errno = 0 (expected 0) <1>[ 203.124496] SET = 0, FnV = 0 <1>[ 203.124778] EA = 0, S1PTW = 0 <1>[ 203.125029] FSC = 0x2b: unknown 43 <1>[ 203.126470] Data abort info: <1>[ 203.126710] Access size = 4 byte(s) <1>[ 203.126969] SSE = 0, SRT = 19 <1>[ 203.127708] SF = 0, AR = 0 <1>[ 203.128213] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 <1>[ 203.128788] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 <1>[ 203.130416] user pgtable: 4k pages, 52-bit VAs, pgdp=000000010606a780 <1>[ 203.130817] [0001ffff9e2e7d78] pgd=0000000000000000 <0>[ 203.132603] Internal error: Oops: 000000009793002b [#1] PREEMPT SMP <4>[ 203.133483] Modules linked in: btrfs blake2b_generic libcrc32c xor xor_neon raid6_pq zstd_compress crct10dif_ce sm3_ce sm3 sha3_ce sha512_ce sha512_arm64 fuse drm backlight dm_mod ip_tables x_tables <4>[ 203.135177] CPU: 1 PID: 653 Comm: set_robust_list Not tainted 6.6.0-rc7-next-20231026 #1 <4>[ 203.135642] Hardware name: linux,dummy-virt (DT) <4>[ 203.136609] pstate: 83400009 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) <4>[ 203.137028] pc : handle_futex_death (kernel/futex/core.c:661 (discriminator 6)) <4>[ 203.138844] lr : handle_futex_death (arch/arm64/include/asm/uaccess.h:46 (discriminator 1) kernel/futex/core.c:661 (discriminator 1)) <4>[ 203.139132] sp : ffff8000805c3c10 <4>[ 203.139356] x29: ffff8000805c3c10 x28: 0000ffffbf187740 x27: d53bd04035000220 <4>[ 203.140366] x26: 0000000000000000 x25: fff00000c6195280 x24: fff00000c6195280 <4>[ 203.141055] x23: 0000000000000001 x22: ffffa4e6aeef09d0 x21: 0001ffff9e2e7d78 <4>[ 203.141771] x20: 0001ffff9e2e7d78 x19: 0001ffff9e2e7d78 x18: ffff8000805c3cf8 <4>[ 203.142457] x17: 0000000000000000 x16: ffffa4e6aeae7078 x15: 000000000000000a <4>[ 203.143134] x14: 0000000000000000 x13: 1ffe000018258661 x12: ffff8000805c3cf8 <4>[ 203.143809] x11: 0000000000000000 x10: fff00000c12c3308 x9 : ffffa4e6ad0e5748 <4>[ 203.144504] x8 : ffff8000805c3c38 x7 : 0000000000000000 x6 : 0000000000000001 <4>[ 203.145186] x5 : 0000000000000000 x4 : fff00000c6195280 x3 : 0000000000000000 <4>[ 203.145929] x2 : 0000000000000000 x1 : 000ffffffffffffc x0 : 0001ffff9e2e7d78 <4>[ 203.147032] Call trace: <4>[ 203.147254] handle_futex_death (kernel/futex/core.c:661 (discriminator 6)) <4>[ 203.147560] exit_robust_list (kernel/futex/core.c:828) <4>[ 203.148348] futex_exit_release (kernel/futex/core.c:1035 (discriminator 1) kernel/futex/core.c:1131 (discriminator 1)) <4>[ 203.148891] exit_mm_release (kernel/fork.c:1657) <4>[ 203.149669] do_exit (kernel/exit.c:541 kernel/exit.c:858) <4>[ 203.149897] do_group_exit (kernel/exit.c:1002) <4>[ 203.150209] __arm64_sys_exit_group (kernel/exit.c:1032) <4>[ 203.150980] invoke_syscall (arch/arm64/include/asm/current.h:19 arch/arm64/kernel/syscall.c:56) <4>[ 203.151234] el0_svc_common.constprop.0 (include/linux/thread_info.h:127 (discriminator 2) arch/arm64/kernel/syscall.c:144 (discriminator 2)) <4>[ 203.151999] do_el0_svc (arch/arm64/kernel/syscall.c:156) <4>[ 203.152231] el0_svc (arch/arm64/include/asm/daifflags.h:28 arch/arm64/kernel/entry-common.c:133 arch/arm64/kernel/entry-common.c:144 arch/arm64/kernel/entry-common.c:679) <4>[ 203.152936] el0t_64_sync_handler (arch/arm64/kernel/entry-common.c:697) <4>[ 203.153518] el0t_64_sync (arch/arm64/kernel/entry.S:595) <0>[ 203.154424] Code: d50323bf d65f03c0 9248fa93 52800002 (b8400a73) All code ======== 0: d50323bf autiasp 4: d65f03c0 ret 8: 9248fa93 and x19, x20, #0xff7fffffffffffff c: 52800002 mov w2, #0x0 // #0 10:* b8400a73 ldtr w19, [x19] <-- trapping instruction Code starting with the faulting instruction =========================================== 0: b8400a73 ldtr w19, [x19] <4>[ 203.155308] ---[ end trace 0000000000000000 ]--- <1>[ 203.156234] Fixing recursive fault but reboot is needed! <3>[ 203.157116] BUG: using smp_processor_id() in preemptible [00000000] code: set_robust_list/653 <4>[ 203.158116] caller is debug_smp_processor_id (lib/smp_processor_id.c:61) <4>[ 203.158983] CPU: 1 PID: 653 Comm: set_robust_list Tainted: G D 6.6.0-rc7-next-20231026 #1 <4>[ 203.159451] Hardware name: linux,dummy-virt (DT) <4>[ 203.159990] Call trace: <4>[ 203.160394] dump_backtrace (arch/arm64/kernel/stacktrace.c:235) <4>[ 203.160625] show_stack (arch/arm64/kernel/stacktrace.c:242) <4>[ 203.160854] dump_stack_lvl (lib/dump_stack.c:107) <4>[ 203.161869] dump_stack (lib/dump_stack.c:114) <4>[ 203.162093] check_preemption_disabled (arch/arm64/include/asm/current.h:19 arch/arm64/include/asm/preempt.h:54 lib/smp_processor_id.c:53) <4>[ 203.162898] debug_smp_processor_id (lib/smp_processor_id.c:61) <4>[ 203.163176] __schedule (kernel/sched/core.c:6578 (discriminator 1)) <4>[ 203.163894] do_task_dead (kernel/sched/core.c:6705) <4>[ 203.164143] make_task_dead (arch/arm64/include/asm/atomic_ll_sc.h:95 (discriminator 3) arch/arm64/include/asm/atomic.h:49 (discriminator 3) include/linux/atomic/atomic-arch-fallback.h:747 (discriminator 3) include/linux/atomic/atomic-instrumented.h:253 (discriminator 3) include/linux/refcount.h:193 (discriminator 3) include/linux/refcount.h:250 (discriminator 3) include/linux/refcount.h:267 (discriminator 3) kernel/exit.c:979 (discriminator 3)) <4>[ 203.164871] die (arch/arm64/kernel/traps.c:239) <4>[ 203.165093] die_kernel_fault (arch/arm64/mm/fault.c:321) <4>[ 203.165905] do_mem_abort (arch/arm64/mm/fault.c:850) <4>[ 203.166149] el1_abort (arch/arm64/include/asm/daifflags.h:28 arch/arm64/kernel/entry-common.c:399) <4>[ 203.166864] el1h_64_sync_handler (arch/arm64/kernel/entry-common.c:486) <4>[ 203.167173] el1h_64_sync (arch/arm64/kernel/entry.S:590) <4>[ 203.167824] handle_futex_death (kernel/futex/core.c:661 (discriminator 6)) <4>[ 203.168329] exit_robust_list (kernel/futex/core.c:828) <4>[ 203.168829] futex_exit_release (kernel/futex/core.c:1035 (discriminator 1) kernel/futex/core.c:1131 (discriminator 1)) <4>[ 203.169375] exit_mm_release (kernel/fork.c:1657) <4>[ 203.169884] do_exit (kernel/exit.c:541 kernel/exit.c:858) <4>[ 203.170372] do_group_exit (kernel/exit.c:1002) <4>[ 203.170857] __arm64_sys_exit_group (kernel/exit.c:1032) <4>[ 203.171643] invoke_syscall (arch/arm64/include/asm/current.h:19 arch/arm64/kernel/syscall.c:56) <4>[ 203.172281] el0_svc_common.constprop.0 (include/linux/thread_info.h:127 (discriminator 2) arch/arm64/kernel/syscall.c:144 (discriminator 2)) <4>[ 203.172815] do_el0_svc (arch/arm64/kernel/syscall.c:156) <4>[ 203.173284] el0_svc (arch/arm64/include/asm/daifflags.h:28 arch/arm64/kernel/entry-common.c:133 arch/arm64/kernel/entry-common.c:144 arch/arm64/kernel/entry-common.c:679) <4>[ 203.173769] el0t_64_sync_handler (arch/arm64/kernel/entry-common.c:697) <4>[ 203.174052] el0t_64_sync (arch/arm64/kernel/entry.S:595) Links: - https://qa-reports.linaro.org/lkft/linux-next-master/build/next-20231026/te… - https://qa-reports.linaro.org/lkft/linux-next-master/build/next-20231026/te… - https://qa-reports.linaro.org/lkft/linux-next-master/build/next-20231026/te… -- Linaro LKFT https://lkft.linaro.org

2 years, 5 months

Daily cts/vts report for lkft - 2023-Oct-31

by lava＠validation.linaro.org

Total jobs: 32 Total errors: 6 (18.75%) LAVA errors: 0 (0.00%) Test errors: 4 (12.50%) Job errors: 2 (6.25%) Infra errors: 0 (0.00%) Canceled jobs: 0 (0.00%) Device type: dragonboard-845c Total jobs: 17 Total errors: 2 (11.76%) Error type: Job Error count: 2 (11.76%) Error: auto-login action timed out Count: 2 (11.76%) IDs: db845c-04: 6985009 db845c-10: 6985002 Device type: qrb5165-rb5 Total jobs: 11 Total errors: 4 (36.36%) Error type: Test Error count: 4 (36.36%) Error: No match for error type 'Test', message 'The network seems not available, as the ping command failed' Count: 1 (9.09%) IDs: rb5-05: 6985082 Error: No match for error type 'Test', message 'tradefed - adb device lost[4fc7b22]' Count: 1 (9.09%) IDs: rb5-06: 6985069 Error: No match for error type 'Test', message 'tradefed - adb device lost[74d67c95]' Count: 2 (18.18%) IDs: rb5-03: 6985053 6985066 Device type: x15 Total jobs: 1 Total errors: 0 (0.00%) Device type: x86 Total jobs: 1 Total errors: 0 (0.00%) Device type: bcm2711-rpi-4-b Total jobs: 1 Total errors: 0 (0.00%) Device type: e850-96 Total jobs: 1 Total errors: 0 (0.00%)

2 years, 5 months

Daily report for validation - 2023-Oct-31

by lava＠validation.linaro.org

Total jobs: 188 Total errors: 43 (22.87%) LAVA errors: 0 (0.00%) Test errors: 10 (5.32%) Job errors: 31 (16.49%) Infra errors: 2 (1.06%) Canceled jobs: 0 (0.00%) Device type: beaglebone-black Total jobs: 20 Total errors: 0 (0.00%) Device type: bcm2837-rpi-3-b-32 Total jobs: 17 Total errors: 0 (0.00%) Device type: hi6220-hikey-r2 Total jobs: 1 Total errors: 0 (0.00%) Device type: dragonboard-820c Total jobs: 8 Total errors: 7 (87.50%) Error type: Infrastructure Error count: 1 (12.50%) Error: No match for error type 'Infrastructure', message 'wait-device-boardid timed out after 1717 seconds' Count: 1 (12.50%) IDs: dragonboard-820c-01: 4011786 Error type: Job Error count: 6 (75.00%) Error: No match for error type 'Job', message 'Unable to run 'docker' 'run' '--rm' '--init' '--workdir=/lava-downloads' '--device=/dev/kvm' '--mount=type=bind,source=/var/lib/lava/dispatcher/tmp/4011753/downloads/common,destination=/lava-downloads' 'linaro/kir:master' '/lava-downloads/postprocess.sh'' Count: 1 (12.50%) IDs: dragonboard-820c-01: 4011753 Error: No match for error type 'Job', message 'Unable to run 'docker' 'run' '--rm' '--init' '--workdir=/lava-downloads' '--device=/dev/kvm' '--mount=type=bind,source=/var/lib/lava/dispatcher/tmp/4011728/downloads/common,destination=/lava-downloads' 'linaro/kir:master' '/lava-downloads/postprocess.sh'' Count: 1 (12.50%) IDs: dragonboard-820c-01: 4011728 Error: No match for error type 'Job', message 'Unable to run 'docker' 'run' '--rm' '--init' '--workdir=/lava-downloads' '--device=/dev/kvm' '--mount=type=bind,source=/var/lib/lava/dispatcher/tmp/4011692/downloads/common,destination=/lava-downloads' 'linaro/kir:master' '/lava-downloads/postprocess.sh'' Count: 1 (12.50%) IDs: dragonboard-820c-01: 4011692 Error: No match for error type 'Job', message 'Unable to run 'docker' 'run' '--rm' '--init' '--workdir=/lava-downloads' '--device=/dev/kvm' '--mount=type=bind,source=/var/lib/lava/dispatcher/tmp/4011653/downloads/common,destination=/lava-downloads' 'linaro/kir:master' '/lava-downloads/postprocess.sh'' Count: 1 (12.50%) IDs: dragonboard-820c-01: 4011653 Error: No match for error type 'Job', message 'Unable to run 'docker' 'run' '--rm' '--init' '--workdir=/lava-downloads' '--device=/dev/kvm' '--mount=type=bind,source=/var/lib/lava/dispatcher/tmp/4011641/downloads/common,destination=/lava-downloads' 'linaro/kir:master' '/lava-downloads/postprocess.sh'' Count: 1 (12.50%) IDs: dragonboard-820c-01: 4011641 Error: No match for error type 'Job', message 'Unable to run 'docker' 'run' '--rm' '--init' '--workdir=/lava-downloads' '--device=/dev/kvm' '--mount=type=bind,source=/var/lib/lava/dispatcher/tmp/4011634/downloads/common,destination=/lava-downloads' 'linaro/kir:master' '/lava-downloads/postprocess.sh'' Count: 1 (12.50%) IDs: dragonboard-820c-01: 4011634 Device type: hi960-hikey Total jobs: 37 Total errors: 10 (27.03%) Error type: Test Error count: 10 (27.03%) Error: Device NOT found! Count: 9 (24.32%) IDs: hi960-hikey-03: 4011541 4011629 4011717 hi960-hikey-05: 4011610 4011618 4011741 4011742 4011743 4011785 Error: No match for error type 'Test', message 'tradefed - adb device lost[57DD383701799F9A]' Count: 1 (2.70%) IDs: hi960-hikey-05: 4011224 Device type: x86 Total jobs: 15 Total errors: 0 (0.00%) Device type: qemu Total jobs: 5 Total errors: 0 (0.00%) Device type: frdm-kw41z Total jobs: 2 Total errors: 0 (0.00%) Device type: frdm-k64f Total jobs: 3 Total errors: 0 (0.00%) Device type: docker Total jobs: 3 Total errors: 0 (0.00%) Device type: x15-bl Total jobs: 1 Total errors: 0 (0.00%) Device type: soca9 Total jobs: 2 Total errors: 0 (0.00%) Device type: x15 Total jobs: 40 Total errors: 20 (50.00%) Error type: Job Error count: 19 (47.50%) Error: wait for prompt timed out Count: 18 (45.00%) IDs: x15-01: 4011662 4011668 4011676 4011679 4011682 4011686 4011687 4011690 4011700 4011709 4011712 4011715 4011723 4011735 4011740 4011755 4011762 4011767 Error: No match for error type 'Job', message '[ 3.676544] Kernel panic - not syncing: Fatal exception in interrupt [ 3.682922] CPU1: stopping [ 3.682952] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G D 6.6.0-rc7-00270-g55bd4c6e40ad #1 [ 3.682952] Hardware name: Generic DRA74X (Flattened Device Tree) [ 3.682952] unwind_backtrace from show_stack+0x10/0x14 [ 3.682983] show_stack from dump_stack_lvl+0x40/0x4c [ 3.682983] dump_stack_lvl from do_handle_IPI+0x194/0x1f4 [ 3.683013] do_handle_IPI from ipi_handler+0x14/0x20 [ 3.683044] ipi_handler from handle_percpu_devid_irq+0x84/0x1d0 [ 3.683044] handle_percpu_devid_irq from handle_irq_desc+0x1c/0x2c [ 3.683074] handle_irq_desc from gic_handle_irq+0x6c/0x90 [ 3.683074] gic_handle_irq from generic_handle_arch_irq+0x2c/0x64 [ 3.683105] generic_handle_arch_irq from call_with_stack+0x18/0x20 [ 3.683135] call_with_stack from __irq_svc+0x98/0xb4 [ 3.683135] Exception stack(0xf0049f58 to 0xf0049fa0) [ 3.683166] 9f40: 00006bf4 00000001 [ 3.683166] 9f60: 00000001 00000000 c110d250 c1949ec0 c1005218 c1005274 00000000 00000000 [ 3.683166] 9f80: 00000000 00000000 00000000 f0049fa8 c0b0fef8 c0b1123c 60000013 ffffffff [ 3.683166] __irq_svc from default_idle_call+0x14/0xfc [ 3.683197] default_idle_call from do_idle+0x1e8/0x288 [ 3.683197] do_idle from cpu_startup_entry+0x28/0x2c [ 3.683227] cpu_startup_entry from secondary_start_kernel+0x118/0x130 [ 3.683227] secondary_start_kernel from 0x80101754 [ 3.814453] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]---' Count: 1 (2.50%) IDs: x15-01: 4011659 Error type: Infrastructure Error count: 1 (2.50%) Error: Unable to download job artefacts Count: 1 (2.50%) IDs: x15-01: 4011707 Device type: dragonboard-410c Total jobs: 8 Total errors: 0 (0.00%) Device type: dragonboard-845c Total jobs: 11 Total errors: 6 (54.55%) Error type: Job Error count: 6 (54.55%) Error: No match for error type 'Job', message 'login-action timed out after 874 seconds' Count: 1 (9.09%) IDs: dragonboard-845c-05: 4011752 Error: wait for prompt timed out Count: 3 (27.27%) IDs: dragonboard-845c-02: 4011730 dragonboard-845c-07: 4011696 dragonboard-845c-08: 4011642 Error: No match for error type 'Job', message 'login-action timed out after 875 seconds' Count: 2 (18.18%) IDs: dragonboard-845c-02: 4011654 dragonboard-845c-05: 4011636 Device type: synquacer Total jobs: 15 Total errors: 0 (0.00%)

2 years, 5 months

Re: [PATCH v2] eventfs: Test for ei->is_freed when accessing ei->dentry

by Naresh Kamboju

On Sun, 29 Oct 2023 at 02:16, Steven Rostedt <rostedt(a)goodmis.org> wrote: > > From: "Steven Rostedt (Google)" <rostedt(a)goodmis.org> > > The eventfs_inode (ei) is protected by SRCU, but the ei->dentry is not. It > is protected by the eventfs_mutex. Anytime the eventfs_mutex is released, > and access to the ei->dentry needs to be done, it should first check if > ei->is_freed is set under the eventfs_mutex. If it is, then the ei->dentry > is invalid and must not be used. The ei->dentry must only be accessed > under the eventfs_mutex and after checking if ei->is_freed is set. > > When the ei is being freed, it will (under the eventfs_mutex) set is_freed > and at the same time move the dentry to a free list to be cleared after > the eventfs_mutex is released. This means that any access to the > ei->dentry must check first if ei->is_freed is set, because if it is, then > the dentry is on its way to be freed. > > Also add comments to describe this better. > > Link: https://lore.kernel.org/all/CA+G9fYt6pY+tMZEOg=SoEywQOe19fGP3uR15SGowkdK+_X… > Link: https://lore.kernel.org/all/CA+G9fYuDP3hVQ3t7FfrBAjd_WFVSurMgCepTxunSJf=MTe… > > Fixes: 5790b1fb3d672 ("eventfs: Remove eventfs_file and just use eventfs_inode") > Reported-by: Linux Kernel Functional Testing <lkft(a)linaro.org> > Reported-by: Naresh Kamboju <naresh.kamboju(a)linaro.org> > Reported-by: Beau Belgrave <beaub(a)linux.microsoft.com> > Signed-off-by: Steven Rostedt (Google) <rostedt(a)goodmis.org> Following build errors have been noticed. fs/tracefs/event_inode.c:348:1: error: return type defaults to 'int' [-Werror=implicit-int] 348 | create_dir_dentry(struct eventfs_inode *pei, struct eventfs_inode *ei, | ^~~~~~~~~~~~~~~~~ In file included from include/uapi/linux/posix_types.h:5, from include/uapi/linux/types.h:14, from include/linux/types.h:6, from include/linux/kasan-checks.h:5, from include/asm-generic/rwonce.h:26, from ./arch/x86/include/generated/asm/rwonce.h:1, from include/linux/compiler.h:251, from include/linux/build_bug.h:5, from include/linux/bits.h:21, from include/linux/bitops.h:6, from include/linux/radix-tree.h:11, from include/linux/idr.h:15, from include/linux/fsnotify_backend.h:13, from include/linux/fsnotify.h:15, from fs/tracefs/event_inode.c:17: fs/tracefs/event_inode.c: In function 'create_dir_dentry': include/linux/stddef.h:8:14: error: returning 'void *' from a function with return type 'int' makes integer from pointer without a cast [-Werror=int-conversion] 8 | #define NULL ((void *)0) | ^ fs/tracefs/event_inode.c:357:24: note: in expansion of macro 'NULL' 357 | return NULL; | ^~~~ fs/tracefs/event_inode.c:366:24: error: returning 'struct dentry *' from a function with return type 'int' makes integer from pointer without a cast [-Werror=int-conversion] 366 | return dentry; | ^~~~~~ fs/tracefs/event_inode.c:394:24: error: returning 'struct dentry *' from a function with return type 'int' makes integer from pointer without a cast [-Werror=int-conversion] 394 | return dentry; | ^~~~~~ fs/tracefs/event_inode.c:416:34: error: returning 'struct dentry *' from a function with return type 'int' makes integer from pointer without a cast [-Werror=int-conversion] 416 | return invalidate ? NULL : dentry; | ~~~~~~~~~~~~~~~~~~^~~~~~~~ fs/tracefs/event_inode.c: In function 'dcache_dir_open_wrapper': fs/tracefs/event_inode.c:609:49: error: passing argument 2 of 'create_dir_dentry' from incompatible pointer type [-Werror=incompatible-pointer-types] 609 | d = create_dir_dentry(ei_child, parent, false); | ^~~~~~ | | | struct dentry * fs/tracefs/event_inode.c:348:68: note: expected 'struct eventfs_inode *' but argument is of type 'struct dentry *' 348 | create_dir_dentry(struct eventfs_inode *pei, struct eventfs_inode *ei, | ~~~~~~~~~~~~~~~~~~~~~~^~ fs/tracefs/event_inode.c:609:21: error: too few arguments to function 'create_dir_dentry' 609 | d = create_dir_dentry(ei_child, parent, false); | ^~~~~~~~~~~~~~~~~ fs/tracefs/event_inode.c:348:1: note: declared here 348 | create_dir_dentry(struct eventfs_inode *pei, struct eventfs_inode *ei, | ^~~~~~~~~~~~~~~~~ fs/tracefs/event_inode.c:625:19: error: assignment to 'struct dentry *' from 'int' makes pointer from integer without a cast [-Werror=int-conversion] 625 | d = create_dir_dentry(ei, ei_child, parent, false); | ^ fs/tracefs/event_inode.c:626:46: error: left-hand operand of comma expression has no effect [-Werror=unused-value] 626 | parent, name, mode, cdata, fops, false); | ^ fs/tracefs/event_inode.c:626:52: error: left-hand operand of comma expression has no effect [-Werror=unused-value] 626 | parent, name, mode, cdata, fops, false); | ^ fs/tracefs/event_inode.c:626:58: error: left-hand operand of comma expression has no effect [-Werror=unused-value] 626 | parent, name, mode, cdata, fops, false); | ^ fs/tracefs/event_inode.c:626:65: error: left-hand operand of comma expression has no effect [-Werror=unused-value] 626 | parent, name, mode, cdata, fops, false); | ^ fs/tracefs/event_inode.c:626:71: error: left-hand operand of comma expression has no effect [-Werror=unused-value] 626 | parent, name, mode, cdata, fops, false); | ^ fs/tracefs/event_inode.c:626:71: error: statement with no effect [-Werror=unused-value] fs/tracefs/event_inode.c:626:78: error: expected ';' before ')' token 626 | parent, name, mode, cdata, fops, false); | ^ | ; fs/tracefs/event_inode.c:626:78: error: expected statement before ')' token fs/tracefs/event_inode.c: In function 'eventfs_remove_dir': fs/tracefs/event_inode.c:921:1: error: invalid use of void expression 921 | + call_srcu(&eventfs_srcu, &ei->rcu, free_rcu_ei); | ^ cc1: all warnings being treated as errors Links: - https://storage.tuxsuite.com/public/linaro/naresh/builds/2XQUK9V1Fm5uX0Gdoa… > --- > > Changes since v1: https://lore.kernel.org/all/20231028163749.0d3429a1@rorschach.local.home/ > > - Add comment about ei->is_freed is a union along with ei->rcu and > ei->del_list so that others can find where ei->is_freed is set and > not get confused about why ei->dentry is being removed but ei->is_freed > isn't mentioned. > > - And fixed change log to remove the double "Reported-by". > > fs/tracefs/event_inode.c | 65 +++++++++++++++++++++++++++++++++------- > fs/tracefs/internal.h | 3 +- > 2 files changed, 56 insertions(+), 12 deletions(-) > > diff --git a/fs/tracefs/event_inode.c b/fs/tracefs/event_inode.c > index 4d2da7480e5f..45bddce7c747 100644 > --- a/fs/tracefs/event_inode.c > +++ b/fs/tracefs/event_inode.c > @@ -24,7 +24,20 @@ > #include <linux/delay.h> > #include "internal.h" > > +/* > + * eventfs_mutex protects the eventfs_inode (ei) dentry. Any access > + * to the ei->dentry must be done under this mutex and after checking > + * if ei->is_freed is not set. The ei->dentry is released under the > + * mutex at the same time ei->is_freed is set. If ei->is_freed is set > + * then the ei->dentry is invalid. > + */ > static DEFINE_MUTEX(eventfs_mutex); > + > +/* > + * The eventfs_inode (ei) itself is protected by SRCU. It is released from > + * its parent's list and will have is_freed set (under eventfs_mutex). > + * After the SRCU grace period is over, the ei may be freed. > + */ > DEFINE_STATIC_SRCU(eventfs_srcu); > > static struct dentry *eventfs_root_lookup(struct inode *dir, > @@ -234,6 +247,10 @@ create_file_dentry(struct eventfs_inode *ei, struct dentry **e_dentry, > bool invalidate = false; > > mutex_lock(&eventfs_mutex); > + if (ei->is_freed) { > + mutex_unlock(&eventfs_mutex); > + return NULL; > + } > /* If the e_dentry already has a dentry, use it */ > if (*e_dentry) { > /* lookup does not need to up the ref count */ > @@ -307,6 +324,8 @@ static void eventfs_post_create_dir(struct eventfs_inode *ei) > struct eventfs_inode *ei_child; > struct tracefs_inode *ti; > > + lockdep_assert_held(&eventfs_mutex); > + > /* srcu lock already held */ > /* fill parent-child relation */ > list_for_each_entry_srcu(ei_child, &ei->children, list, > @@ -320,6 +339,7 @@ static void eventfs_post_create_dir(struct eventfs_inode *ei) > > /** > * create_dir_dentry - Create a directory dentry for the eventfs_inode > + * @pei: The eventfs_inode parent of ei. > * @ei: The eventfs_inode to create the directory for > * @parent: The dentry of the parent of this directory > * @lookup: True if this is called by the lookup code > @@ -327,12 +347,17 @@ static void eventfs_post_create_dir(struct eventfs_inode *ei) > * This creates and attaches a directory dentry to the eventfs_inode @ei. > */ > static struct dentry * > -create_dir_dentry(struct eventfs_inode *ei, struct dentry *parent, bool lookup) > +create_dir_dentry(struct eventfs_inode *pei, struct eventfs_inode *ei, > + struct dentry *parent, bool lookup) > { > bool invalidate = false; > struct dentry *dentry = NULL; > > mutex_lock(&eventfs_mutex); > + if (pei->is_freed || ei->is_freed) { > + mutex_unlock(&eventfs_mutex); > + return NULL; > + } > if (ei->dentry) { > /* If the dentry already has a dentry, use it */ > dentry = ei->dentry; > @@ -435,7 +460,7 @@ static struct dentry *eventfs_root_lookup(struct inode *dir, > */ > mutex_lock(&eventfs_mutex); > ei = READ_ONCE(ti->private); > - if (ei) > + if (ei && !ei->is_freed) > ei_dentry = READ_ONCE(ei->dentry); > mutex_unlock(&eventfs_mutex); > > @@ -449,7 +474,7 @@ static struct dentry *eventfs_root_lookup(struct inode *dir, > if (strcmp(ei_child->name, name) != 0) > continue; > ret = simple_lookup(dir, dentry, flags); > - create_dir_dentry(ei_child, ei_dentry, true); > + create_dir_dentry(ei, ei_child, ei_dentry, true); > created = true; > break; > } > @@ -583,7 +608,7 @@ static int dcache_dir_open_wrapper(struct inode *inode, struct file *file) > > list_for_each_entry_srcu(ei_child, &ei->children, list, > srcu_read_lock_held(&eventfs_srcu)) { > - d = create_dir_dentry(ei_child, parent, false); > + d = create_dir_dentry(ei, ei_child, parent, false); > if (d) { > ret = add_dentries(&dentries, d, cnt); > if (ret < 0) > @@ -637,6 +662,13 @@ static int dcache_readdir_wrapper(struct file *file, struct dir_context *ctx) > return ret; > } > > +static void free_ei(struct eventfs_inode *ei) > +{ > + kfree_const(ei->name); > + kfree(ei->d_children); > + kfree(ei); > +} > + > /** > * eventfs_create_dir - Create the eventfs_inode for this directory > * @name: The name of the directory to create. > @@ -700,12 +732,20 @@ struct eventfs_inode *eventfs_create_dir(const char *name, struct eventfs_inode > ei->nr_entries = size; > ei->data = data; > INIT_LIST_HEAD(&ei->children); > + INIT_LIST_HEAD(&ei->list); > > mutex_lock(&eventfs_mutex); > - list_add_tail(&ei->list, &parent->children); > - ei->d_parent = parent->dentry; > + if (!parent->is_freed) { > + list_add_tail(&ei->list, &parent->children); > + ei->d_parent = parent->dentry; > + } > mutex_unlock(&eventfs_mutex); > > + /* Was the parent freed? */ > + if (list_empty(&ei->list)) { > + free_ei(ei); > + ei = NULL; > + } > return ei; > } > > @@ -787,13 +827,11 @@ struct eventfs_inode *eventfs_create_events_dir(const char *name, struct dentry > return ERR_PTR(-ENOMEM); > } > > -static void free_ei(struct rcu_head *head) > +static void free_rcu_ei(struct rcu_head *head) > { > struct eventfs_inode *ei = container_of(head, struct eventfs_inode, rcu); > > - kfree_const(ei->name); > - kfree(ei->d_children); > - kfree(ei); > + free_ei(ei); > } > > /** > @@ -880,7 +918,12 @@ void eventfs_remove_dir(struct eventfs_inode *ei) > for (i = 0; i < ei->nr_entries; i++) > unhook_dentry(&ei->d_children[i], &dentry_list); > unhook_dentry(&ei->dentry, &dentry_list); > - call_srcu(&eventfs_srcu, &ei->rcu, free_ei); > + /* > + * Note, ei->is_freed is a union along with ei->rcu > + * and ei->del_list. When the ei is added to either > + * of those lists, it automatically sets ei->is_freed. > + */ > + call_srcu(&eventfs_srcu, &ei->rcu, free_rcu_ei); > } > mutex_unlock(&eventfs_mutex); > > diff --git a/fs/tracefs/internal.h b/fs/tracefs/internal.h > index 64fde9490f52..21a1fa682b74 100644 > --- a/fs/tracefs/internal.h > +++ b/fs/tracefs/internal.h > @@ -30,7 +30,7 @@ struct eventfs_inode { > const struct eventfs_entry *entries; > const char *name; > struct list_head children; > - struct dentry *dentry; > + struct dentry *dentry; /* Check is_freed to access */ > struct dentry *d_parent; > struct dentry **d_children; > void *data; > @@ -39,6 +39,7 @@ struct eventfs_inode { > * @del_list: list of eventfs_inode to delete > * @rcu: eventfs_inode to delete in RCU > * @is_freed: node is freed if one of the above is set > + * Note if is_freed is set, then dentry is corrupted. > */ > union { > struct list_head del_list; > -- > 2.42.0 >

2 years, 5 months

Daily cts/vts report for lkft - 2023-Oct-30

by lava＠validation.linaro.org

Total jobs: 13 Total errors: 1 (7.69%) LAVA errors: 0 (0.00%) Test errors: 1 (7.69%) Job errors: 0 (0.00%) Infra errors: 0 (0.00%) Canceled jobs: 0 (0.00%) Device type: qrb5165-rb5 Total jobs: 3 Total errors: 1 (33.33%) Error type: Test Error count: 1 (33.33%) Error: No match for error type 'Test', message 'tradefed - adb device lost[4fc7b22]' Count: 1 (33.33%) IDs: rb5-06: 6983018 Device type: dragonboard-845c Total jobs: 4 Total errors: 0 (0.00%) Device type: juno-r2 Total jobs: 2 Total errors: 0 (0.00%) Device type: bcm2711-rpi-4-b Total jobs: 2 Total errors: 0 (0.00%) Device type: dragonboard-410c Total jobs: 2 Total errors: 0 (0.00%)

2 years, 5 months

Daily report for validation - 2023-Oct-30

by lava＠validation.linaro.org

Total jobs: 65 Total errors: 4 (6.15%) LAVA errors: 0 (0.00%) Test errors: 3 (4.62%) Job errors: 1 (1.54%) Infra errors: 0 (0.00%) Canceled jobs: 0 (0.00%) Device type: beaglebone-black Total jobs: 1 Total errors: 0 (0.00%) Device type: bcm2837-rpi-3-b-32 Total jobs: 2 Total errors: 0 (0.00%) Device type: hi6220-hikey-r2 Total jobs: 1 Total errors: 0 (0.00%) Device type: dragonboard-820c Total jobs: 1 Total errors: 0 (0.00%) Device type: x86 Total jobs: 1 Total errors: 0 (0.00%) Device type: qemu Total jobs: 5 Total errors: 0 (0.00%) Device type: frdm-kw41z Total jobs: 2 Total errors: 0 (0.00%) Device type: frdm-k64f Total jobs: 3 Total errors: 0 (0.00%) Device type: docker Total jobs: 3 Total errors: 0 (0.00%) Device type: x15-bl Total jobs: 1 Total errors: 0 (0.00%) Device type: soca9 Total jobs: 2 Total errors: 0 (0.00%) Device type: dragonboard-410c Total jobs: 1 Total errors: 0 (0.00%) Device type: hi960-hikey Total jobs: 35 Total errors: 4 (11.43%) Error type: Test Error count: 3 (8.57%) Error: Device NOT found! Count: 3 (8.57%) IDs: hi960-hikey-03: 4011304 4011306 4011320 Error type: Job Error count: 1 (2.86%) Error: wait for prompt timed out Count: 1 (2.86%) IDs: hi960-hikey-03: 4011316 Device type: synquacer Total jobs: 1 Total errors: 0 (0.00%) Device type: dragonboard-845c Total jobs: 5 Total errors: 0 (0.00%) Device type: x15 Total jobs: 1 Total errors: 0 (0.00%)

2 years, 5 months

Daily cts/vts report for lkft - 2023-Oct-29

by lava＠validation.linaro.org

Total jobs: 74 Total errors: 21 (28.38%) LAVA errors: 0 (0.00%) Test errors: 17 (22.97%) Job errors: 4 (5.41%) Infra errors: 0 (0.00%) Canceled jobs: 0 (0.00%) Device type: qrb5165-rb5 Total jobs: 37 Total errors: 6 (16.22%) Error type: Test Error count: 6 (16.22%) Error: No match for error type 'Test', message 'tradefed - adb device lost[4fc7b22]' Count: 2 (5.41%) IDs: rb5-06: 6979118 6980988 Error: Device NOT found! Count: 1 (2.70%) IDs: rb5-03: 6979139 Error: No match for error type 'Test', message 'tradefed - adb device lost[f11b68eb]' Count: 1 (2.70%) IDs: rb5-05: 6979130 Error: No match for error type 'Test', message 'tradefed - adb device lost[74d67c95]' Count: 1 (2.70%) IDs: rb5-03: 6979088 Error: No match for error type 'Test', message 'The network seems not available, as the ping command failed' Count: 1 (2.70%) IDs: rb5-06: 6979086 Device type: dragonboard-845c Total jobs: 36 Total errors: 14 (38.89%) Error type: Test Error count: 10 (27.78%) Error: No match for error type 'Test', message 'The network seems not available, as the ping command failed' Count: 8 (22.22%) IDs: db845c-01: 6980911 db845c-02: 6980782 6980912 db845c-04: 6980910 db845c-07: 6980996 db845c-08: 6980916 db845c-10: 6980783 6980892 Error: Device NOT found! Count: 1 (2.78%) IDs: db845c-02: 6980936 Error: No match for error type 'Test', message 'lava-docker-test-shell timed out after 589 seconds' Count: 1 (2.78%) IDs: db845c-01: 6980780 Error type: Job Error count: 4 (11.11%) Error: auto-login action timed out Count: 3 (8.33%) IDs: db845c-06: 6980778 db845c-08: 6980774 db845c-10: 6980771 Error: No match for error type 'Job', message 'login-action timed out after 870 seconds' Count: 1 (2.78%) IDs: db845c-08: 6979093 Device type: hi6220-hikey-r2 Total jobs: 1 Total errors: 1 (100.00%) Error type: Test Error count: 1 (100.00%) Error: No match for error type 'Test', message 'tradefed - adb device lost[7B1579B5003E507A]' Count: 1 (100.00%) IDs: hikey-6220-r2-05: 6980789

2 years, 5 months

Daily report for validation - 2023-Oct-29

by lava＠validation.linaro.org

Total jobs: 68 Total errors: 8 (11.76%) LAVA errors: 0 (0.00%) Test errors: 4 (5.88%) Job errors: 0 (0.00%) Infra errors: 2 (2.94%) Canceled jobs: 2 (2.94%) Device type: hi960-hikey Total jobs: 35 Total errors: 7 (20.00%) Error type: Infrastructure Error count: 2 (5.71%) Error: fastboot-flash-action timed out Count: 2 (5.71%) IDs: hi960-hikey-02: 4011579 hi960-hikey-04: 4011580 Error type: Canceled Error count: 2 (5.71%) Error: The job was canceled Count: 2 (5.71%) IDs: hi960-hikey-02: 4011576 hi960-hikey-04: 4011575 Error type: Test Error count: 3 (8.57%) Error: Device NOT found! Count: 2 (5.71%) IDs: hi960-hikey-03: 4011241 4011272 Error: No match for error type 'Test', message 'The network seems not available, as the ping command failed' Count: 1 (2.86%) IDs: hi960-hikey-03: 4011260 Device type: beaglebone-black Total jobs: 2 Total errors: 0 (0.00%) Device type: bcm2837-rpi-3-b-32 Total jobs: 3 Total errors: 0 (0.00%) Device type: hi6220-hikey-r2 Total jobs: 2 Total errors: 1 (50.00%) Error type: Test Error count: 1 (50.00%) Error: No match for error type 'Test', message 'Network not able to ping; job exit' Count: 1 (50.00%) IDs: hi6220-hikey-r2-01: 4011573 Device type: dragonboard-820c Total jobs: 1 Total errors: 0 (0.00%) Device type: x86 Total jobs: 1 Total errors: 0 (0.00%) Device type: qemu Total jobs: 5 Total errors: 0 (0.00%) Device type: frdm-kw41z Total jobs: 2 Total errors: 0 (0.00%) Device type: frdm-k64f Total jobs: 3 Total errors: 0 (0.00%) Device type: docker Total jobs: 3 Total errors: 0 (0.00%) Device type: x15-bl Total jobs: 1 Total errors: 0 (0.00%) Device type: soca9 Total jobs: 2 Total errors: 0 (0.00%) Device type: dragonboard-410c Total jobs: 1 Total errors: 0 (0.00%) Device type: synquacer Total jobs: 1 Total errors: 0 (0.00%) Device type: dragonboard-845c Total jobs: 5 Total errors: 0 (0.00%) Device type: x15 Total jobs: 1 Total errors: 0 (0.00%)

2 years, 5 months

selftests: ftrace: RIP: 0010:__lock_acquire (kernel/locking/lockdep.c:5005)

by Naresh Kamboju

Following kernel crash noticed on x86_64 while running selftests ftracetests running 6.6.0-rc7-next-20231026. Reported-by: Linux Kernel Functional Testing <lkft(a)linaro.org> log: ----- # ok 44 ftrace - test for function traceon/off triggers # ok 45 ftrace - test tracing error log support # ok 46 Test creation and deletion of trace instances while setting an event [ 1402.419605] BUG: kernel NULL pointer dereference, address: 0000000000000097 [ 1402.426574] #PF: supervisor read access in kernel mode [ 1402.431715] #PF: error_code(0x0000) - not-present page [ 1402.436852] PGD 0 P4D 0 [ 1402.439393] Oops: 0000 [#1] PREEMPT SMP PTI [ 1402.443578] CPU: 0 PID: 18196 Comm: ls Not tainted 6.6.0-rc7-next-20231026 #1 [ 1402.450711] Hardware name: Supermicro SYS-5019S-ML/X11SSH-F, BIOS 2.7 12/07/2021 [ 1402.458102] RIP: 0010:__lock_acquire (kernel/locking/lockdep.c:5005) [ 1402.462722] Code: 4d d4 53 45 85 f6 0f 84 a5 06 00 00 44 8b 2d 8d c2 bf 02 45 89 c2 49 89 fb 89 f3 41 89 d6 45 89 c8 45 85 ed 0f 84 ca 02 00 00 <48> 81 3f c0 2b f1 af 44 0f 44 d0 83 fb 01 0f 86 c2 02 00 00 31 d2 All code ======== 0: 4d d4 rex.WRB (bad) 2: 53 push %rbx 3: 45 85 f6 test %r14d,%r14d 6: 0f 84 a5 06 00 00 je 0x6b1 c: 44 8b 2d 8d c2 bf 02 mov 0x2bfc28d(%rip),%r13d # 0x2bfc2a0 13: 45 89 c2 mov %r8d,%r10d 16: 49 89 fb mov %rdi,%r11 19: 89 f3 mov %esi,%ebx 1b: 41 89 d6 mov %edx,%r14d 1e: 45 89 c8 mov %r9d,%r8d 21: 45 85 ed test %r13d,%r13d 24: 0f 84 ca 02 00 00 je 0x2f4 2a:* 48 81 3f c0 2b f1 af cmpq $0xffffffffaff12bc0,(%rdi) <-- trapping instruction 31: 44 0f 44 d0 cmove %eax,%r10d 35: 83 fb 01 cmp $0x1,%ebx 38: 0f 86 c2 02 00 00 jbe 0x300 3e: 31 d2 xor %edx,%edx Code starting with the faulting instruction =========================================== 0: 48 81 3f c0 2b f1 af cmpq $0xffffffffaff12bc0,(%rdi) 7: 44 0f 44 d0 cmove %eax,%r10d b: 83 fb 01 cmp $0x1,%ebx e: 0f 86 c2 02 00 00 jbe 0x2d6 14: 31 d2 xor %edx,%edx [ 1402.481497] RSP: 0018:ffff9b3041327998 EFLAGS: 00010002 [ 1402.486719] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1402.493843] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000097 [ 1402.500967] RBP: ffff9b3041327a38 R08: 0000000000000000 R09: 0000000000000000 [ 1402.508092] R10: 0000000000000001 R11: 0000000000000097 R12: ffff8de420f38040 [ 1402.515225] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 1402.522348] FS: 00007f52d72a1d00(0000) GS:ffff8de767a00000(0000) knlGS:0000000000000000 [ 1402.530438] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1402.536224] CR2: 0000000000000097 CR3: 000000012201e005 CR4: 00000000003706f0 [ 1402.543354] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1402.550479] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1402.557602] Call Trace: [ 1402.560049] <TASK> [ 1402.562153] ? show_regs (arch/x86/kernel/dumpstack.c:479) [ 1402.565559] ? __die (arch/x86/kernel/dumpstack.c:421 arch/x86/kernel/dumpstack.c:434) [ 1402.568611] ? page_fault_oops (arch/x86/mm/fault.c:707) [ 1402.572711] ? __lock_acquire (kernel/locking/lockdep.c:186 kernel/locking/lockdep.c:3872 kernel/locking/lockdep.c:5136) [ 1402.576811] ? do_user_addr_fault (arch/x86/mm/fault.c:1264) [ 1402.581170] ? exc_page_fault (arch/x86/include/asm/irqflags.h:26 arch/x86/include/asm/irqflags.h:67 arch/x86/include/asm/irqflags.h:127 arch/x86/mm/fault.c:1513 arch/x86/mm/fault.c:1561) [ 1402.585094] ? asm_exc_page_fault (arch/x86/include/asm/idtentry.h:570) [ 1402.589283] ? __lock_acquire (kernel/locking/lockdep.c:5005) [ 1402.593296] ? lock_acquire (kernel/locking/lockdep.c:467 (discriminator 4) kernel/locking/lockdep.c:5755 (discriminator 4) kernel/locking/lockdep.c:5718 (discriminator 4)) [ 1402.597045] ? create_dir_dentry.part.0 (fs/tracefs/event_inode.c:357 (discriminator 1)) [ 1402.601928] lock_acquire (kernel/locking/lockdep.c:467 (discriminator 4) kernel/locking/lockdep.c:5755 (discriminator 4) kernel/locking/lockdep.c:5718 (discriminator 4)) [ 1402.605503] ? d_invalidate (fs/dcache.c:1725 (discriminator 1)) [ 1402.609170] ? lock_release (kernel/locking/lockdep.c:5429 kernel/locking/lockdep.c:5773) [ 1402.612923] ? create_dir_dentry.part.0 (fs/tracefs/event_inode.c:387) [ 1402.617803] _raw_spin_lock (include/linux/spinlock_api_smp.h:134 kernel/locking/spinlock.c:154) [ 1402.621467] ? d_invalidate (fs/dcache.c:1725 (discriminator 1)) [ 1402.625126] d_invalidate (fs/dcache.c:1725 (discriminator 1)) [ 1402.628619] create_dir_dentry.part.0 (fs/tracefs/event_inode.c:390) [ 1402.633324] dcache_dir_open_wrapper (fs/tracefs/event_inode.c:586) [ 1402.637945] ? __pfx_dcache_dir_open_wrapper (fs/tracefs/event_inode.c:536) [ 1402.643081] do_dentry_open (fs/open.c:948) [ 1402.646924] vfs_open (fs/open.c:1083) [ 1402.650069] path_openat (fs/namei.c:3623 fs/namei.c:3779) [ 1402.653648] do_filp_open (fs/namei.c:3810 (discriminator 2)) [ 1402.657233] do_sys_openat2 (fs/open.c:1441 (discriminator 1)) [ 1402.660911] __x64_sys_openat (fs/open.c:1466) [ 1402.664749] do_syscall_64 (arch/x86/entry/common.c:51 arch/x86/entry/common.c:82) [ 1402.668328] ? syscall_exit_to_user_mode (kernel/entry/common.c:299) [ 1402.673120] ? do_syscall_64 (arch/x86/entry/common.c:101) [ 1402.676864] ? do_syscall_64 (arch/x86/entry/common.c:101) [ 1402.680607] ? do_syscall_64 (arch/x86/entry/common.c:101) [ 1402.684352] ? syscall_exit_to_user_mode (kernel/entry/common.c:299) [ 1402.689136] ? do_syscall_64 (arch/x86/entry/common.c:101) [ 1402.692880] ? syscall_exit_to_user_mode (kernel/entry/common.c:299) [ 1402.697666] ? do_syscall_64 (arch/x86/entry/common.c:101) [ 1402.701440] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:129) [ 1402.706512] RIP: 0033:0x7f52d7439df1 [ 1402.710082] Code: 44 24 18 31 c0 41 83 e2 40 75 3e 89 f0 25 00 00 41 00 3d 00 00 41 00 74 30 89 f2 b8 01 01 00 00 48 89 fe bf 9c ff ff ff 0f 05 <48> 3d 00 f0 ff ff 77 3f 48 8b 54 24 18 64 48 2b 14 25 28 00 00 00 All code ======== 0: 44 24 18 rex.R and $0x18,%al 3: 31 c0 xor %eax,%eax 5: 41 83 e2 40 and $0x40,%r10d 9: 75 3e jne 0x49 b: 89 f0 mov %esi,%eax d: 25 00 00 41 00 and $0x410000,%eax 12: 3d 00 00 41 00 cmp $0x410000,%eax 17: 74 30 je 0x49 19: 89 f2 mov %esi,%edx 1b: b8 01 01 00 00 mov $0x101,%eax 20: 48 89 fe mov %rdi,%rsi 23: bf 9c ff ff ff mov $0xffffff9c,%edi 28: 0f 05 syscall 2a:* 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax <-- trapping instruction 30: 77 3f ja 0x71 32: 48 8b 54 24 18 mov 0x18(%rsp),%rdx 37: 64 48 2b 14 25 28 00 sub %fs:0x28,%rdx 3e: 00 00 Code starting with the faulting instruction =========================================== 0: 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax 6: 77 3f ja 0x47 8: 48 8b 54 24 18 mov 0x18(%rsp),%rdx d: 64 48 2b 14 25 28 00 sub %fs:0x28,%rdx 14: 00 00 [ 1402.728821] RSP: 002b:00007fff2270ba90 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 1402.736388] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f52d7439df1 [ 1402.743520] RDX: 0000000000090800 RSI: 0000558fb3992090 RDI: 00000000ffffff9c [ 1402.750651] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000558fb3992250 [ 1402.757775] R10: 0000000000000000 R11: 0000000000000287 R12: 00007f52d72a1b98 [ 1402.764900] R13: 00007fff2270bee0 R14: 0000558fb3992090 R15: 0000558fb28aafc8 [ 1402.772027] </TASK> [ 1402.774216] Modules linked in: x86_pkg_temp_thermal fuse configfs [last unloaded: trace_printk] [ 1402.782908] CR2: 0000000000000097 [ 1402.786220] ---[ end trace 0000000000000000 ]--- [ 1402.790839] RIP: 0010:__lock_acquire (kernel/locking/lockdep.c:5005) [ 1402.795468] Code: 4d d4 53 45 85 f6 0f 84 a5 06 00 00 44 8b 2d 8d c2 bf 02 45 89 c2 49 89 fb 89 f3 41 89 d6 45 89 c8 45 85 ed 0f 84 ca 02 00 00 <48> 81 3f c0 2b f1 af 44 0f 44 d0 83 fb 01 0f 86 c2 02 00 00 31 d2 All code ======== 0: 4d d4 rex.WRB (bad) 2: 53 push %rbx 3: 45 85 f6 test %r14d,%r14d 6: 0f 84 a5 06 00 00 je 0x6b1 c: 44 8b 2d 8d c2 bf 02 mov 0x2bfc28d(%rip),%r13d # 0x2bfc2a0 13: 45 89 c2 mov %r8d,%r10d 16: 49 89 fb mov %rdi,%r11 19: 89 f3 mov %esi,%ebx 1b: 41 89 d6 mov %edx,%r14d 1e: 45 89 c8 mov %r9d,%r8d 21: 45 85 ed test %r13d,%r13d 24: 0f 84 ca 02 00 00 je 0x2f4 2a:* 48 81 3f c0 2b f1 af cmpq $0xffffffffaff12bc0,(%rdi) <-- trapping instruction 31: 44 0f 44 d0 cmove %eax,%r10d 35: 83 fb 01 cmp $0x1,%ebx 38: 0f 86 c2 02 00 00 jbe 0x300 3e: 31 d2 xor %edx,%edx Code starting with the faulting instruction =========================================== 0: 48 81 3f c0 2b f1 af cmpq $0xffffffffaff12bc0,(%rdi) 7: 44 0f 44 d0 cmove %eax,%r10d b: 83 fb 01 cmp $0x1,%ebx e: 0f 86 c2 02 00 00 jbe 0x2d6 14: 31 d2 xor %edx,%edx [ 1402.814213] RSP: 0018:ffff9b3041327998 EFLAGS: 00010002 [ 1402.819439] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1402.826587] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000097 [ 1402.833711] RBP: ffff9b3041327a38 R08: 0000000000000000 R09: 0000000000000000 [ 1402.840836] R10: 0000000000000001 R11: 0000000000000097 R12: ffff8de420f38040 [ 1402.847959] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 1402.855083] FS: 00007f52d72a1d00(0000) GS:ffff8de767a00000(0000) knlGS:0000000000000000 [ 1402.863161] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1402.868897] CR2: 0000000000000097 CR3: 000000012201e005 CR4: 00000000003706f0 [ 1402.876023] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1402.883154] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1402.890280] Kernel panic - not syncing: Fatal exception [ 1402.895543] Kernel Offset: 0x2b000000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 1402.906322] ---[ end Kernel panic - not syncing: Fatal exception ]--- Links: - https://qa-reports.linaro.org/lkft/linux-next-master/build/next-20231026/te… - https://lkft.validation.linaro.org/scheduler/job/6974183#L5240 metadata: git_ref: master git_repo: https://gitlab.com/Linaro/lkft/mirrors/next/linux-next git_sha: 2ef7141596eed0b4b45ef18b3626f428a6b0a822 git_describe: next-20231026 kernel-config: https://storage.tuxsuite.com/public/linaro/lkft/builds/2XHt24sNSdog7DYY3FLK… artifact-location: https://storage.tuxsuite.com/public/linaro/lkft/builds/2XHt24sNSdog7DYY3FLK… toolchain: gcc-13 -- Linaro LKFT https://lkft.linaro.org

2 years, 5 months

Daily cts/vts report for lkft - 2023-Oct-28

by lava＠validation.linaro.org

Total jobs: 177 Total errors: 47 (26.55%) LAVA errors: 0 (0.00%) Test errors: 39 (22.03%) Job errors: 7 (3.95%) Infra errors: 1 (0.56%) Canceled jobs: 0 (0.00%) Device type: hi6220-hikey-r2 Total jobs: 39 Total errors: 7 (17.95%) Error type: Test Error count: 7 (17.95%) Error: No match for error type 'Test', message 'tradefed - adb device lost[7B1579B5003E507A]' Count: 1 (2.56%) IDs: hikey-6220-r2-05: 6980777 Error: No match for error type 'Test', message 'tradefed - adb device lost[2047EDF7003CEE68]' Count: 1 (2.56%) IDs: hikey-6220-r2-01: 6980770 Error: No match for error type 'Test', message 'tradefed - adb device lost[235D989C003B0752]' Count: 3 (7.69%) IDs: hikey-6220-r2-03: 6978055 6979095 6980707 Error: No match for error type 'Test', message 'tradefed - adb device lost[7C74A5EC003A6F99]' Count: 1 (2.56%) IDs: hikey-6220-r2-06: 6979110 Error: No match for error type 'Test', message 'tradefed - adb device lost[8D6E5F00030E051]' Count: 1 (2.56%) IDs: hikey-6220-r2-02: 6978050 Device type: dragonboard-845c Total jobs: 81 Total errors: 23 (28.40%) Error type: Test Error count: 16 (19.75%) Error: No match for error type 'Test', message 'The network seems not available, as the ping command failed' Count: 14 (17.28%) IDs: db845c-01: 6975943 6977772 6977774 6977799 6978007 db845c-02: 6975922 db845c-04: 6977757 db845c-06: 6978098 db845c-08: 6975980 6977994 db845c-09: 6977769 db845c-10: 6977755 6977759 6977965 Error: No match for error type 'Test', message 'lava-test-interactive timed out after 600 seconds' Count: 1 (1.23%) IDs: db845c-06: 6977809 Error: No match for error type 'Test', message 'tradefed - adb device lost[db2a494d]' Count: 1 (1.23%) IDs: db845c-02: 6977808 Error type: Job Error count: 7 (8.64%) Error: auto-login action timed out Count: 6 (7.41%) IDs: db845c-01: 6975967 db845c-04: 6977858 db845c-07: 6977853 6977861 db845c-08: 6975969 db845c-09: 6975970 Error: wait for prompt timed out Count: 1 (1.23%) IDs: db845c-04: 6977812 Device type: x15 Total jobs: 8 Total errors: 0 (0.00%) Device type: qrb5165-rb5 Total jobs: 46 Total errors: 16 (34.78%) Error type: Test Error count: 15 (32.61%) Error: No match for error type 'Test', message 'tradefed - adb device lost[4fc7b22]' Count: 3 (6.52%) IDs: rb5-06: 6974890 6977834 6977835 Error: No match for error type 'Test', message 'tradefed - adb device lost[74d67c95]' Count: 4 (8.70%) IDs: rb5-03: 6974771 6975926 6975939 6975973 Error: No match for error type 'Test', message 'tradefed - adb device lost[d8a1879f]' Count: 1 (2.17%) IDs: rb5-07: 6975965 Error: No match for error type 'Test', message 'The network seems not available, as the ping command failed' Count: 5 (10.87%) IDs: rb5-03: 6974768 6975884 rb5-05: 6975928 rb5-06: 6974773 rb5-07: 6975936 Error: Device NOT found! Count: 1 (2.17%) IDs: rb5-03: 6975866 Error: No match for error type 'Test', message 'tradefed - adb device lost[f11b68eb]' Count: 1 (2.17%) IDs: rb5-05: 6974893 Error type: Infrastructure Error count: 1 (2.17%) Error: Connection closed Count: 1 (2.17%) IDs: rb5-05: 6975931 Device type: bcm2711-rpi-4-b Total jobs: 2 Total errors: 0 (0.00%) Device type: e850-96 Total jobs: 1 Total errors: 1 (100.00%) Error type: Test Error count: 1 (100.00%) Error: lava-test-shell timed out Count: 1 (100.00%) IDs: e850-96-01: 6945953

2 years, 5 months

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

Lkft-triage