Re: [befs] BUG: unable to handle kernel paging request at cfc07000

From: Fabian Frederick
Date: Fri Aug 01 2014 - 03:39:47 EST




> On 01 August 2014 at 03:25 Fengguang Wu <fengguang.wu@xxxxxxxxx> wrote:
>
>
> Greetings,
>
> 0day kernel testing robot got the below dmesg and the first bad commit is
>
> git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git master
> commit dac52fc1826a788d2591a4f77e3c482b30f577e2
> Author:Â Â ÂFabian Frederick <fabf@xxxxxxxxx>
> AuthorDate: Thu Apr 3 14:50:23 2014 -0700
> Commit:Â Â ÂLinus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
> CommitDate: Thu Apr 3 16:21:25 2014 -0700
>
>Â Â ÂBEFS: logging cleanup
>Â Â Â
>Â Â ÂSummary:
>Â Â Â - all printk(KERN_foo converted to pr_foo()
>Â Â Â - add pr_fmt and remove redundant prefixes
>Â Â Â - convert befs_() to va_format (based on patch by Joe Perches)
>Â Â Â - remove non standard %Lu
>Â Â Â - use __func__ for all debugging
>Â Â Â
>Â Â Â[akpm@xxxxxxxxxxxxxxxxxxxx: fix printk warnings, reported by Fengguang]
>Â Â ÂSigned-off-by: Fabian Frederick <fabf@xxxxxxxxx>
>Â Â ÂCc: Joe Perches <joe@xxxxxxxxxxx>
>Â Â ÂCc: Fengguang Wu <fengguang.wu@xxxxxxxxx>
>Â Â ÂSigned-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
>Â Â ÂSigned-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
>
> +--------------------------------------------+------------+------------+---------------+
> |Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â | 91a52ab7d6 | dac52fc182 |
> next-20140730 |
> +--------------------------------------------+------------+------------+---------------+
> | boot_successes              Â| 1000   Â| 895    | 159Â
> Â Â Â Â Â|
> | boot_failures               | 0     | 5     | 2 Â
> Â Â Â Â Â|
> | BUG:unable_to_handle_kernel_paging_request | 0Â Â Â Â Â | 5Â Â Â Â Â | 2Â Â
> Â Â Â Â Â|
> | Oops                   Â| 0     | 5     | 2 Â
> Â Â Â Â Â|
> | EIP_is_at_strnlen             | 0     | 5     | 2 Â
> Â Â Â Â Â|
> | Kernel_panic-not_syncing:Fatal_exception Â| 0     | 5     | 2 Â
> Â Â Â Â Â|
> | backtrace:do_mount            Â| 0     | 5     | 2 Â
> Â Â Â Â Â|
> | backtrace:SyS_mount            | 0     | 5     | 2 Â
> Â Â Â Â Â|
> +--------------------------------------------+------------+------------+---------------+
>
> [Â Â 6.576645] power_supply test_battery: prop PRESENT=1
> [Â Â 6.578273] power_supply test_usb: uevent
> [Â Â 6.579644] power_supply test_usb: POWER_SUPPLY_NAME=test_usb
> [Â Â 6.581395] BUG: unable to handle kernel paging request at cfc07000
> [Â Â 6.583373] IP: [] strnlen+0x9/0x19
> [Â Â 6.584678] *pde = 13bc1067 *pte = 0fc07060
> [Â Â 6.584678] Oops: 0000 [#1] PREEMPT SMP DEBUG_PAGEALLOC
> [Â Â 6.584678] CPU: 0 PID: 483 Comm: mount Not tainted 3.14.0-07551-gdac52fc
> #1
> [Â Â 6.584678] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS
> Bochs 01/01/2011
> [Â Â 6.584678] task: d0d29500 ti: d006e000 task.ti: d006e000
> [Â Â 6.584678] EIP: 0060:[] EFLAGS: 00010097 CPU: 0
> [Â Â 6.584678] EIP is at strnlen+0x9/0x19
> [Â Â 6.584678] EAX: cfc07000 EBX: d006fe40 ECX: cfc06200 EDX: fffff1fe
> [Â Â 6.584678] ESI: d006fe44 EDI: c2247728 EBP: d006fcb8 ESP: d006fcb8
> [Â Â 6.584678]Â DS: 007b ES: 007b FS: 00d8 GS: 0033 SS: 0068
> [Â Â 6.584678] CR0: 8005003b CR2: cfc07000 CR3: 10f33000 CR4: 000006d0
> [Â Â 6.584678] Stack:
> [Â Â 6.584678]Â d006fcd4 c138e850 cfc06200 c2247361 d006fe40 d006fe44 c1acbda3
> d006fd1c
> [Â Â 6.584678]Â c138fa8f c1e13600 d006ffff c183ffff 879a3bef d006fcfc c10824cf
> 000003ce
> [Â Â 6.584678]Â c224735a c1acbda3 c2247728 c2247361 ff0a0004 ffffffff c105ffff
> c224735a
> [Â Â 6.584678] Call Trace:
> [Â Â 6.584678]Â [] string.isra.5+0x29/0x93
> [Â Â 6.584678]Â [] vsnprintf+0x159/0x281
> [Â Â 6.584678]Â [] ? _raw_spin_unlock_irq+0x5/0x3e
> [Â Â 6.584678]Â [] ? tick_program_event+0x22/0x26
> [Â Â 6.584678]Â [] ? load_balance+0x3fc/0x681
> [Â Â 6.584678]Â [] pointer.isra.16+0x220/0x37e
> [Â Â 6.584678]Â [] ? string.isra.5+0x29/0x93
> [Â Â 6.584678]Â [] vsnprintf+0x194/0x281
> [Â Â 6.584678]Â [] ? _raw_spin_lock_irq+0x62/0x72
> [Â Â 6.584678]Â [] ? load_balance+0x3fc/0x681
> [Â Â 6.584678]Â [] ? pc_clock_adjtime+0x33/0x4b
> [Â Â 6.584678]Â [] vscnprintf+0x14/0x25
> [Â Â 6.584678]Â [] vprintk_emit+0x249/0x451
> [Â Â 6.584678]Â [] printk+0x38/0x3a
> [Â Â 6.584678]Â [] befs_debug+0x37/0x39
> [Â Â 6.584678]Â [] befs_dump_super_block+0x30/0x28d
> [Â Â 6.584678]Â [] ? befs_load_sb+0x127/0x13b
> [Â Â 6.584678]Â [] befs_fill_super+0x22d/0x384
> [Â Â 6.584678]Â [] ? disk_name+0x30/0x81
> [Â Â 6.584678]Â [] ? ns_test_super+0x11/0x11
> [Â Â 6.584678]Â [] mount_bdev+0x113/0x15b
> [Â Â 6.584678]Â [] ? arch_local_irq_save+0x12/0x17
> [Â Â 6.584678]Â [] ? __kmalloc_track_caller+0x103/0x127
> [Â Â 6.584678]Â [] befs_mount+0x1a/0x1f
> [Â Â 6.584678]Â [] ? __ilog2_u32+0xf/0xf
> [Â Â 6.584678]Â [] mount_fs+0x16/0xaf
> [Â Â 6.584678]Â [] ? __alloc_percpu+0xa/0xc
> [Â Â 6.584678]Â [] ? alloc_vfsmnt+0x93/0x134
> [Â Â 6.584678]Â [] vfs_kern_mount+0x43/0x9f
> [Â Â 6.584678]Â [] do_mount+0x5b7/0x6c4
> [Â Â 6.584678]Â [] ? strndup_user+0x2c/0x3d
> [Â Â 6.584678]Â [] SyS_mount+0x77/0xa4
> [Â Â 6.584678]Â [] syscall_call+0x7/0xb
> [Â Â 6.584678] Code: 00 00 4f eb 02 31 ff 89 f8 5f 5d c3 55 85 c9 89 e5 57 89
> c7 74 07 89 d0 f2 ae 75 01 4f 89 f8 5f 5d c3 55 89 c1 89 e5 89 c8 eb 06 <80>
> 38 00 74 07 40 4a 83 fa ff 75 f4 29 c8 5d c3 55 83 c9 ff 89
> [Â Â 6.584678] EIP: [] strnlen+0x9/0x19 SS:ESP 0068:d006fcb8
> [Â Â 6.584678] CR2: 00000000cfc07000
> [Â Â 6.584678] ---[ end trace d80bc704897c976c ]---
> [Â Â 6.584678] Kernel panic - not syncing: Fatal exception
>
> git bisect start v3.15 v3.14 --
> git bisect bad 674366e90e5a2430e3ddef40ce51512d681944e4 # 22:06   0-  Â
> 2Â Merge tag 'pci-v3.15-fixes-1' of
> git://git.kernel.org/pub/scm/linux/kernel/git/helgaas/pci
> git bisect bad 9f800363bb0ea459e15bef0928a72c88d374e489 # 22:06   0-  Â
> 1Â Merge tag 'fixes-non-critical-3.15' of
> git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc
> git bisect good 1aabc5990d205cdb0789a1c26143c53601e9bb07Â # 22:46Â Â 900+Â Â Â
> 0Â x86: Fix dumpstack_64 to keep state of "used" variable in loop
> git bisect good d0cb5f71c5cde8e1ef6d03983641366800ceabdb # 23:44  900+  Â
> 0Â Merge tag 'vfio-v3.15-rc1' of git://github.com/awilliam/linux-vfio
> git bisect bad d15fee814d8d30bbb4859ef8fef7a1f96327635b # 23:44   0-  Â
> 2Â Merge branch 'for-linus' of
> git://git.kernel.org/pub/scm/linux/kernel/git/mszeredi/fuse
> git bisect bad 4a4389abdd9822fdf3cc2ac6ed87eb811fd43acc # 23:44   0-  Â
> 4Â Merge branch 'linux_next' of
> git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-edac
> git bisect bad 3cf59142bcd391680beb6932838fe09a73947705 # 23:44   0-  Â
> 1Â Merge tag 'hwmon-for-linus' of
> git://git.kernel.org/pub/scm/linux/kernel/git/groeck/linux-staging
> git bisect bad 76ca7d1cca761bb9712dfcad9a27d70b520874ae # 23:44   0-  Â
> 2Â Merge branch 'akpm' (incoming from Andrew)
> git bisect good 70d14fcf365c1b20d380d542ec53906f2b5e2435Â # 00:29Â Â 900+Â Â Â
> 0Â MAINTAINERS: add backlight co-maintainers
> git bisect good 98e2d21faaf96d879e2746cedd96f5c38c04f9b3Â # 02:11Â Â 900+Â Â Â
> 1Â rtc: rtc-sirfsoc: remove unnecessary OOM messages
> git bisect good fda9909ddaab13fb7b35b94f204623c1f9571fc7Â # 02:47Â Â 900+Â Â Â
> 0Â rtc: pm8xxx: move device_init_wakeup() before rtc_register
> git bisect bad 2cc88f3a5f16ae9a3c8f54de1b2fd4a397b36075 # 02:53   0-  Â
> 1Â nilfs2: implementation of NILFS_IOCTL_SET_SUINFO ioctl
> git bisect good 84ee353df07e9beec200da44ac70f583449fffb1Â # 05:13Â Â 900+Â Â Â
> 0Â fs/minix/inode.c: add __init to init_inodecache()
> git bisect bad 5f356fd4d75fd66e62c803fc7a684863c4b38e59 # 05:33  104-  Â
> 1Â fs/coda/inode.c: add __init to init_inodecache()
> git bisect good 91a52ab7d664a1c8972a0ecb30955d34aea54d7f # 07:03  900+  Â
> 0Â fs/befs/linuxvfs.c: add __init to befs_init_inodecache()
> git bisect bad dac52fc1826a788d2591a4f77e3c482b30f577e2 # 07:09   0-  Â
> 1Â BEFS: logging cleanup
> # first bad commit: [dac52fc1826a788d2591a4f77e3c482b30f577e2] BEFS: logging
> cleanup
> git bisect good 91a52ab7d664a1c8972a0ecb30955d34aea54d7f # 07:15 Â1000+  Â
> 0Â fs/befs/linuxvfs.c: add __init to befs_init_inodecache()
> git bisect bad fcf6395d41087217d4b88d5b2ad7a1ce66ca6ced # 07:15   0-  Â
> 2Â Add linux-next specific files for 20140730
> git bisect bad 7c909b09372d5b064651202bf236b63caddd1777 # 07:39  219-  Â
> 1Â Merge tag 'clk-fixes-for-linus' of
> git://git.linaro.org/people/mike.turquette/linux
> git bisect bad 5c159783e8086645dd7aa42e35c531ad0e8dd16d # 07:51   9-  Â
> 1Â Add linux-next specific files for 20140731
>
>
> This script may reproduce the error.
>
> ----------------------------------------------------------------------------
> #!/bin/bash
>
> kernel=$1
> initrd=yocto-minimal-i386.cgz
>
> wget --no-clobber
> https://github.com/fengguang/reproduce-kernel-bug/raw/master/initrd/$initrd
>
> kvm=(
>Â Â Â Âqemu-system-x86_64
>Â Â Â Â-cpu kvm64
>Â Â Â Â-enable-kvm
>Â Â Â Â-kernel $kernel
>Â Â Â Â-initrd $initrd
>Â Â Â Â-m 320
>Â Â Â Â-smp 1
>Â Â Â Â-net nic,vlan=1,model=e1000
>Â Â Â Â-net user,vlan=1
>Â Â Â Â-boot order=nc
>Â Â Â Â-no-reboot
>Â Â Â Â-watchdog i6300esb
>Â Â Â Â-rtc base=localtime
>Â Â Â Â-serial stdio
>Â Â Â Â-display none
>Â Â Â Â-monitor null
> )
>
> append=(
>Â Â Â Âhung_task_panic=1
>Â Â Â Âearlyprintk=ttyS0,115200
>Â Â Â Âdebug
>Â Â Â Âapic=debug
>Â Â Â Âsysrq_always_enabled
>Â Â Â Ârcupdate.rcu_cpu_stall_timeout=100
>Â Â Â Âpanic=10
>Â Â Â Âsoftlockup_panic=1
>Â Â Â Ânmi_watchdog=panic
>Â Â Â Âload_ramdisk=2
>Â Â Â Âprompt_ramdisk=0
>Â Â Â Âconsole=ttyS0,115200
>Â Â Â Âconsole=tty0
>Â Â Â Âvga=normal
>Â Â Â Âroot=/dev/ram0
>Â Â Â Ârw
>Â Â Â Âdrbd.minor_count=8
> )
>
> "${kvm[@]}" --append "${append[*]}"
> ----------------------------------------------------------------------------
>
> Thanks,
> Fengguang

Hello Fengguang,

I've tried the script above with attached config file on both linux/linux-next
but I was unable to reproduce the problem.
The difference I see is on the id. I have ram0 (see below) where you have nullb0
/ nullb1.
Did I miss a script to run the same configuration ?

befs: (ram0): ---> befs_fill_super
[Â Â 7.545246] befs: (ram0): Using x86 superblock location
[Â Â 7.548084] befs: (ram0): befs_super_block information
[Â Â 7.550871] befs: (ram0):Â Âname
...

Problem could come from the double mount operation or a bad name pointer
bugging %pV in befs_debug.

Regards,
Fabian

> _______________________________________________
> LKP mailing list
> LKP@xxxxxxxxxxxxxxx
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/