* [linux-next:master] [memcg] 314315f970: WARNING:at_mm/page_counter.c:#page_counter_cancel
@ 2025-05-07 2:55 kernel test robot
0 siblings, 0 replies; only message in thread
From: kernel test robot @ 2025-05-07 2:55 UTC (permalink / raw)
To: Shakeel Butt
Cc: oe-lkp, lkp, Andrew Morton, Eric Dumaze, Jakub Kacinski,
Johannes Weiner, Michal Hocko, Muchun Song, Roman Gushchin,
Soheil Hassas Yeganeh, Vlastimil Babka, Hugh Dickins,
Michal Hocko, cgroups, linux-mm, oliver.sang
Hello,
kernel test robot noticed "WARNING:at_mm/page_counter.c:#page_counter_cancel" on:
commit: 314315f97034a4235a92c49d8d250273064a0b04 ("memcg: multi-memcg percpu charge cache - fix 2")
https://git.kernel.org/cgit/linux/kernel/git/next/linux-next.git master
in testcase: boot
config: i386-randconfig-054-20250505
compiler: clang-20
test machine: qemu-system-x86_64 -enable-kvm -cpu SandyBridge -smp 2 -m 16G
(please refer to attached dmesg/kmsg for entire log/backtrace)
+------------------------------------------------------------------+------------+------------+
| | 706e1bbb16 | 314315f970 |
+------------------------------------------------------------------+------------+------------+
| WARNING:at_mm/page_counter.c:#page_counter_cancel | 0 | 6 |
| EIP:page_counter_cancel | 0 | 6 |
+------------------------------------------------------------------+------------+------------+
If you fix the issue in a separate patch/commit (i.e. not just a new version of
the same patch/commit), kindly add following tags
| Reported-by: kernel test robot <oliver.sang@intel.com>
| Closes: https://lore.kernel.org/oe-lkp/202505071038.5b0f43cd-lkp@intel.com
[ 12.841558][ T1] ------------[ cut here ]------------
[ 12.842138][ T1] page_counter underflow: -191 nr_pages=255
[ 12.842688][ T1] WARNING: CPU: 0 PID: 1 at mm/page_counter.c:61 page_counter_cancel (kbuild/obj/consumer/i386-randconfig-054-20250505/mm/page_counter.c:60)
[ 12.843497][ T1] Modules linked in: autofs4
[ 12.843977][ T1] CPU: 0 UID: 0 PID: 1 Comm: systemd Tainted: G T 6.15.0-rc2-00483-g314315f97034 #1 PREEMPT(undef)
[ 12.845080][ T1] Tainted: [T]=RANDSTRUCT
[ 12.849671][ T1] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 12.850748][ T1] EIP: page_counter_cancel (kbuild/obj/consumer/i386-randconfig-054-20250505/mm/page_counter.c:60)
[ 12.851328][ T1] Code: c2 01 74 0c 85 c9 78 24 80 78 28 01 74 2c eb 68 c6 05 6a d4 e3 c2 01 52 51 68 1a 52 75 c2 89 c6 e8 37 9c d4 ff 89 f0 83 c4 0c <0f> 0b c7 00 00 00 00 00 31 c9 80 78 28 01 75 3e 83 78 3c 00 74 38
All code
========
0: c2 01 74 ret $0x7401
3: 0c 85 or $0x85,%al
5: c9 leave
6: 78 24 js 0x2c
8: 80 78 28 01 cmpb $0x1,0x28(%rax)
c: 74 2c je 0x3a
e: eb 68 jmp 0x78
10: c6 05 6a d4 e3 c2 01 movb $0x1,-0x3d1c2b96(%rip) # 0xffffffffc2e3d481
17: 52 push %rdx
18: 51 push %rcx
19: 68 1a 52 75 c2 push $0xffffffffc275521a
1e: 89 c6 mov %eax,%esi
20: e8 37 9c d4 ff call 0xffffffffffd49c5c
25: 89 f0 mov %esi,%eax
27: 83 c4 0c add $0xc,%esp
2a:* 0f 0b ud2 <-- trapping instruction
2c: c7 00 00 00 00 00 movl $0x0,(%rax)
32: 31 c9 xor %ecx,%ecx
34: 80 78 28 01 cmpb $0x1,0x28(%rax)
38: 75 3e jne 0x78
3a: 83 78 3c 00 cmpl $0x0,0x3c(%rax)
3e: 74 38 je 0x78
Code starting with the faulting instruction
===========================================
0: 0f 0b ud2
2: c7 00 00 00 00 00 movl $0x0,(%rax)
8: 31 c9 xor %ecx,%ecx
a: 80 78 28 01 cmpb $0x1,0x28(%rax)
e: 75 3e jne 0x4e
10: 83 78 3c 00 cmpl $0x0,0x3c(%rax)
14: 74 38 je 0x4e
[ 12.853232][ T1] EAX: eb6cd0b0 EBX: c2d13838 ECX: 00000000 EDX: 00000000
[ 12.853946][ T1] ESI: eb6cd0b0 EDI: eb6cd0b0 EBP: c3973dac ESP: c3973da8
[ 12.854647][ T1] DS: 007b ES: 007b FS: 0000 GS: 0033 SS: 0068 EFLAGS: 00210092
[ 12.855440][ T1] CR0: 80050033 CR2: b7e1eb80 CR3: 2b908000 CR4: 00040690
[ 12.856143][ T1] DR0: 00000000 DR1: 00000000 DR2: 00000000 DR3: 00000000
[ 12.856867][ T1] DR6: fffe0ff0 DR7: 00000400
[ 12.857404][ T1] Call Trace:
[ 12.857816][ T1] page_counter_uncharge (kbuild/obj/consumer/i386-randconfig-054-20250505/mm/page_counter.c:183)
[ 12.858419][ T1] drain_stock (kbuild/obj/consumer/i386-randconfig-054-20250505/mm/memcontrol.c:1868)
[ 12.858872][ T1] refill_stock (kbuild/obj/consumer/i386-randconfig-054-20250505/mm/memcontrol.c:1958)
[ 12.859323][ T1] obj_cgroup_uncharge_pages (kbuild/obj/consumer/i386-randconfig-054-20250505/include/linux/cgroup_refcnt.h:78 kbuild/obj/consumer/i386-randconfig-054-20250505/mm/memcontrol.c:2743)
[ 12.859837][ T1] refill_obj_stock (kbuild/obj/consumer/i386-randconfig-054-20250505/mm/memcontrol.c:?)
[ 12.860313][ T1] __memcg_slab_free_hook (kbuild/obj/consumer/i386-randconfig-054-20250505/mm/memcontrol.c:3169)
[ 12.860829][ T1] kmem_cache_free (kbuild/obj/consumer/i386-randconfig-054-20250505/mm/slub.c:?)
[ 12.861305][ T1] ? seq_release (kbuild/obj/consumer/i386-randconfig-054-20250505/fs/seq_file.c:357)
[ 12.861752][ T1] seq_release (kbuild/obj/consumer/i386-randconfig-054-20250505/fs/seq_file.c:357)
[ 12.862225][ T1] kernfs_fop_release (kbuild/obj/consumer/i386-randconfig-054-20250505/fs/kernfs/file.c:767)
[ 12.862777][ T1] __fput (kbuild/obj/consumer/i386-randconfig-054-20250505/fs/file_table.c:466)
[ 12.863259][ T1] fput_close_sync (kbuild/obj/consumer/i386-randconfig-054-20250505/fs/file_table.c:571)
[ 12.863792][ T1] __ia32_sys_close (kbuild/obj/consumer/i386-randconfig-054-20250505/fs/open.c:?)
[ 12.864347][ T1] ia32_sys_call (kbuild/obj/consumer/i386-randconfig-054-20250505/./arch/x86/include/generated/asm/syscalls_32.h:9)
[ 12.864927][ T1] __do_fast_syscall_32 (kbuild/obj/consumer/i386-randconfig-054-20250505/arch/x86/entry/syscall_32.c:?)
[ 12.865539][ T1] ? up_read (kbuild/obj/consumer/i386-randconfig-054-20250505/kernel/locking/rwsem.c:1621)
[ 12.866048][ T1] ? irqentry_exit_to_user_mode (kbuild/obj/consumer/i386-randconfig-054-20250505/kernel/entry/common.c:234)
[ 12.866692][ T1] do_fast_syscall_32 (kbuild/obj/consumer/i386-randconfig-054-20250505/arch/x86/entry/syscall_32.c:331)
[ 12.867263][ T1] do_SYSENTER_32 (kbuild/obj/consumer/i386-randconfig-054-20250505/arch/x86/entry/syscall_32.c:369)
[ 12.867774][ T1] entry_SYSENTER_32 (kbuild/obj/consumer/i386-randconfig-054-20250505/arch/x86/entry/entry_32.S:836)
[ 12.868328][ T1] EIP: 0xb7f9a539
[ 12.868770][ T1] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 58 b8 77 00 00 00 cd 80 90 90 90
All code
========
0: 03 74 b4 01 add 0x1(%rsp,%rsi,4),%esi
4: 10 07 adc %al,(%rdi)
6: 03 74 b0 01 add 0x1(%rax,%rsi,4),%esi
a: 10 08 adc %cl,(%rax)
c: 03 74 d8 01 add 0x1(%rax,%rbx,8),%esi
...
20: 00 51 52 add %dl,0x52(%rcx)
23:* 55 push %rbp <-- trapping instruction
24: 89 e5 mov %esp,%ebp
26: 0f 34 sysenter
28: cd 80 int $0x80
2a: 5d pop %rbp
2b: 5a pop %rdx
2c: 59 pop %rcx
2d: c3 ret
2e: 90 nop
2f: 90 nop
30: 90 nop
31: 90 nop
32: 90 nop
33: 90 nop
34: 90 nop
35: 58 pop %rax
36: b8 77 00 00 00 mov $0x77,%eax
3b: cd 80 int $0x80
3d: 90 nop
3e: 90 nop
3f: 90 nop
Code starting with the faulting instruction
===========================================
0: 5d pop %rbp
1: 5a pop %rdx
2: 59 pop %rcx
3: c3 ret
4: 90 nop
5: 90 nop
6: 90 nop
7: 90 nop
8: 90 nop
9: 90 nop
a: 90 nop
b: 58 pop %rax
c: b8 77 00 00 00 mov $0x77,%eax
11: cd 80 int $0x80
13: 90 nop
14: 90 nop
15: 90 nop
The kernel config and materials to reproduce are available at:
https://download.01.org/0day-ci/archive/20250507/202505071038.5b0f43cd-lkp@intel.com
--
0-DAY CI Kernel Test Service
https://github.com/intel/lkp-tests/wiki
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2025-05-07 2:56 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2025-05-07 2:55 [linux-next:master] [memcg] 314315f970: WARNING:at_mm/page_counter.c:#page_counter_cancel kernel test robot
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox