On Fri, Jan 17, 2025 at 03:13:18PM +0100, Vlastimil Babka wrote:
Hi Linus,
please pull the latest slab updates from:
git://git.kernel.org/pub/scm/linux/kernel/git/vbabka/slab.git
tags/slab-for-6.14
Hi Vlastimil,
I've ended up pulling quite a few of the 6.14 PRs into linus-next, and
LKFT started hitting the following issue:
<1>[ 526.258666] Unable to handle kernel paging request at virtual address
00000007f5b55088
<1>[ 526.260217] Mem abort info:
<1>[ 526.260902] ESR = 0x0000000096000005
<1>[ 526.261422] EC = 0x25: DABT (current EL), IL = 32 bits
<1>[ 526.262197] SET = 0, FnV = 0
<1>[ 526.262684] EA = 0, S1PTW = 0
<1>[ 526.263370] FSC = 0x05: level 1 translation fault
<1>[ 526.267546] Data abort info:
<1>[ 526.268047] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000
<1>[ 526.268688] CM = 0, WnR = 0, TnD = 0, TagAccess = 0
<1>[ 526.269601] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0
<1>[ 526.270143] user pgtable: 64k pages, 52-bit VAs, pgdp=0000000103f42000
<1>[ 526.279321] [00000007f5b55088] pgd=0000000000000000,
p4d=0000000000000000, pud=0000000000000000
<0>[ 526.284271] Internal error: Oops: 0000000096000005 [#1] PREEMPT SMP
<4>[ 526.285819] Modules linked in: tun sm3_ce sm3 sha3_ce sha512_ce
sha512_arm64 fuse drm backlight ip_tables x_tables
<4>[ 526.288412] CPU: 0 UID: 0 PID: 5334 Comm: read_all Not tainted 6.13.0 #1
<4>[ 526.290169] Hardware name: linux,dummy-virt (DT)
<4>[ 526.291025] pstate: a3402009 (NzCv daif +PAN -UAO +TCO +DIT -SSBS
BTYPE=--)
<4>[ 526.291607] pc : kfree+0x60/0x350
<4>[ 526.292404] lr : show_slab_objects+0x31c/0x438
<4>[ 526.292796] sp : ffff8000882efb40
<4>[ 526.293761] x29: ffff8000882efb50 x28: 0000000000000000 x27:
ffffa0d6d542a8f0
<4>[ 526.295127] x26: fff00000c0000b40 x25: ffffa0d6d5379000 x24:
0000000000000001
<4>[ 526.296745] x23: ffffa0d6d5379d40 x22: ffffa0d6d4aba898 x21:
6cefa0d6d2dab76c
<4>[ 526.297465] x20: ffffa0d6d542a8f0 x19: 00000007f5b55080 x18:
ffffffffffffffff
<4>[ 526.299121] x17: 0000000000000000 x16: 0000000000000000 x15:
ffff8000882ef9e0
<4>[ 526.300133] x14: fff00000c0540000 x13: fff00000c0530000 x12:
0000000000000000
<4>[ 526.301642] x11: 0000000000000000 x10: 0000000000000000 x9 :
ffffa0d6d2dab76c
<4>[ 526.302368] x8 : fff00000ff060000 x7 : ffff8000882efba0 x6 :
ffff8000882efba0
<4>[ 526.303575] x5 : 00000000ffffffd8 x4 : fff00000ff060608 x3 :
0000000000000000
<4>[ 526.304506] x2 : 0000000000000000 x1 : fff00000ff060000 x0 :
fffffc1fc0000000
<4>[ 526.305547] Call trace:
<4>[ 526.306310] kfree+0x60/0x350 (P)
<4>[ 526.307446] show_slab_objects+0x31c/0x438
<4>[ 526.307948] total_objects_show+0x1c/0x30
<4>[ 526.308514] slab_attr_show+0x28/0x48
<4>[ 526.308812] sysfs_kf_seq_show+0x9c/0x148
<4>[ 526.309901] kernfs_seq_show+0x34/0x48
<4>[ 526.310922] seq_read_iter+0xe4/0x460
<4>[ 526.311704] kernfs_fop_read_iter+0x148/0x1c0
<4>[ 526.312903] vfs_read+0x280/0x330
<4>[ 526.314276] ksys_read+0x78/0x118
<4>[ 526.316078] __arm64_sys_read+0x24/0x38
<4>[ 526.316651] invoke_syscall.constprop.0+0x58/0xf8
<4>[ 526.317315] do_el0_svc+0x48/0xd8
<4>[ 526.317811] el0_svc+0x40/0x160
<4>[ 526.319521] el0t_64_sync_handler+0x10c/0x138
<4>[ 526.320220] el0t_64_sync+0x198/0x1a0
<0>[ 526.321602] Code: b26287e0 d350fe73 f2df83e0 8b131813 (f9400660)
<4>[ 526.322715] ---[ end trace 0000000000000000 ]---
<4>[ 536.656232] ------------[ cut here ]------------
<4>[ 536.656871] Trying to vfree() bad address (00000000a5fbfd52)
<4>[ 536.658605] WARNING: CPU: 1 PID: 31 at mm/vmalloc.c:3231
remove_vm_area+0x68/0x90
<4>[ 536.660181] Modules linked in: tun sm3_ce sm3 sha3_ce sha512_ce
sha512_arm64 fuse drm backlight ip_tables x_tables
<4>[ 536.662159] CPU: 1 UID: 0 PID: 31 Comm: kworker/1:1 Tainted: G D
6.13.0 #1
<4>[ 536.663261] Tainted: [D]=DIE
<4>[ 536.664160] Hardware name: linux,dummy-virt (DT)
<4>[ 536.665493] Workqueue: events delayed_vfree_work
<4>[ 536.666020] pstate: 62402009 (nZCv daif +PAN -UAO +TCO -DIT -SSBS
BTYPE=--)
<4>[ 536.667232] pc : remove_vm_area+0x68/0x90
<4>[ 536.667917] lr : remove_vm_area+0x68/0x90
<4>[ 536.668448] sp : ffff80008092fc90
<4>[ 536.668759] x29: ffff80008092fc90 x28: 0000000000000000 x27:
0000000000000000
<4>[ 536.670302] x26: 0000000000000000 x25: 0000000000000000 x24:
fff00000c02f0205
<4>[ 536.671148] x23: fff00000fdaf3180 x22: 0000000000000000 x21:
0000000000000000
<4>[ 536.672118] x20: ffffa0d6d542a8f0 x19: ffffa0d6d542a8f0 x18:
0000000000000006
<4>[ 536.673098] x17: fff05f2a288b0000 x16: ffff800080020000 x15:
ffff80008092f6c0
<4>[ 536.673718] x14: ffff80010092f87a x13: ffff80008092f882 x12:
0000000000000000
<4>[ 536.674718] x11: fffffffffffe0000 x10: ffffa0d6d53f82b0 x9 :
ffffa0d6d2b4c7c4
<4>[ 536.675772] x8 : 00000000ffffefff x7 : ffffa0d6d53f82b0 x6 :
80000000fffff000
<4>[ 536.676801] x5 : 0000000000000181 x4 : 0000000000000000 x3 :
0000000000000000
<4>[ 536.677609] x2 : 0000000000000000 x1 : 0000000000000000 x0 :
fff00000c0842600
<4>[ 536.679075] Call trace:
<4>[ 536.679415] remove_vm_area+0x68/0x90 (P)
<4>[ 536.679795] vfree+0x44/0x338
<4>[ 536.680241] kvfree+0x2c/0x60
<4>[ 536.681397] vfree+0x134/0x338
<4>[ 536.681989] delayed_vfree_work+0x44/0x60
<4>[ 536.682344] process_one_work+0x158/0x3c0
<4>[ 536.683428] worker_thread+0x2d8/0x3e8
<4>[ 536.684162] kthread+0x120/0x208
<4>[ 536.684778] ret_from_fork+0x10/0x20
<4>[ 536.685509] ---[ end trace 0000000000000000 ]---
I'm working on bisecting, but sending this mail out in hopes that we can
figure it out from the logs. The full logs are at:
https://qa-reports.linaro.org/lkft/sashal-linus-next/build/v6.13-rc7-1168-g45696205640c/testrun/26824158/suite/log-parser-test/test/bug-bug-bad-rss-counter-state-mmeadba-typemm_anonpages-val/log
--
Thanks,
Sasha
