Comment # 40
on bug 1199355
from Stefan Seyfried
This time, it crashed without warning:
[52080.550503] Unable to handle kernel access to user memory outside uaccess
routines at virtual address 0000000000000134
[52080.550557] Mem abort info:
[52080.550568] ESR = 0x96000004
[52080.550580] EC = 0x25: DABT (current EL), IL = 32 bits
[52080.550594] SET = 0, FnV = 0
[52080.550606] EA = 0, S1PTW = 0
[52080.550617] FSC = 0x04: level 0 translation fault
[52080.550630] Data abort info:
[52080.550640] ISV = 0, ISS = 0x00000004
[52080.550651] CM = 0, WnR = 0
[52080.550663] user pgtable: 4k pages, 48-bit VAs, pgdp=0000000104e79000
[52080.550677] [0000000000000134] pgd=0000000000000000, p4d=0000000000000000
[52080.550699] Internal error: Oops: 96000004 [#1] SMP
[52080.550715] Modules linked in: loop tun af_packet iscsi_ibft
iscsi_boot_sysfs nls_iso8859_1 nls_cp437 xfs vfat libcrc32c fat btsdio brcmfmac
brcmutil cpufreq_dt hci_uart btqca btrtl btbcm btintel broadcom bluetooth
bcm_phy_lib raspberrypi_cpufreq cfg80211 ecdh_generic rfkill simpledrm
iproc_rng200 bcm2711_thermal genet drm_shmem_helper mdio_bcm_unimac
drm_kms_helper nvmem_rmem uio_pdrv_genirq uio syscopyarea sysfillrect sysimgblt
fb_sys_fops efi_pstore leds_gpio fuse drm ip_tables x_tables ext4 mbcache jbd2
uas usb_storage xhci_pci xhci_pci_renesas xhci_hcd usbcore usb_common
crct10dif_ce gpio_raspberrypi_exp raspberrypi_hwmon clk_raspberrypi bcm2835_wdt
bcm2835_dma virt_dma sdhci_iproc sdhci_pltfm pcie_brcmstb gpio_regulator sdhci
phy_generic mmc_core fixed sg efivarfs
[52080.550934] CPU: 3 PID: 6825 Comm: qemu-system-aar Kdump: loaded Not tainted
5.18.0-seife #3 openSUSE Tumbleweed (unreleased)
48ea57f9280c20a3a8dc0b4bea95d22cf9e3e2ea
[52080.550958] Hardware name: Unknown Unknown Product/Unknown Product, BIOS
2022.04 04/01/2022
[52080.550973] pstate: 00400005 (nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[52080.550989] pc : blk_mq_submit_bio+0x120/0x710
[52080.551014] lr : blk_mq_submit_bio+0x104/0x710
[52080.551029] sp : ffff80000b51ab70
[52080.551040] x29: ffff80000b51ab70 x28: fffffc4c4f8436c8 x27:
fffffc4c4f8436c0
[52080.551060] x26: 0000000000000002 x25: ffff80000b51af48 x24:
017fff800008044d
[52080.551079] x23: 0000000000000000 x22: ffff1313050b88e0 x21:
ffff13130512ab00
[52080.551098] x20: ffff131305270d00 x19: ffff131306bf7900 x18:
0000000000001000
[52080.551116] x17: 000000000001f000 x16: ffffd8aafeeeed60 x15:
ffff1313fef8cc00
[52080.551134] x14: 0000000000000000 x13: 0000000000000000 x12:
0000000000000002
[52080.551152] x11: 0000000000000000 x10: 0000000000001ba0 x9 :
ffffd8aafe74bcd0
[52080.551170] x8 : ffff131307445c00 x7 : ffff3a68ff6e2000 x6 :
0000028efe76b162
[52080.551187] x5 : 00000000410fd080 x4 : 0000000000f0000f x3 :
ffff1313036ca450
[52080.551206] x2 : 0000000000000000 x1 : 0000000000000000 x0 :
0000000004000001
[52080.551224] Call trace:
[52080.551235] blk_mq_submit_bio+0x120/0x710
[52080.551251] __submit_bio+0x12c/0x194
[52080.551265] submit_bio_noacct_nocheck+0x1f0/0x23c
[52080.551280] submit_bio_noacct+0x1b8/0x5b0
[52080.551293] submit_bio+0xc8/0x150
[52080.551307] __swap_writepage+0x160/0x3d0
[52080.551323] swap_writepage+0x50/0x100
[52080.551336] pageout+0xd4/0x32c
[52080.551352] shrink_page_list+0x9f4/0xd70
[52080.551367] shrink_lruvec+0x528/0xafc
[52080.551382] shrink_node+0x398/0x6f4
[52080.551397] do_try_to_free_pages+0xf0/0x580
[52080.551413] try_to_free_pages+0x118/0x26c
[52080.551428] __alloc_pages+0x4ac/0xdd0
[52080.551444] alloc_pages+0xb8/0x170
[52080.551458] folio_alloc+0x28/0x64
[52080.551472] filemap_alloc_folio+0xd8/0xf0
[52080.551486] page_cache_ra_unbounded+0xc4/0x1b0
[52080.551502] page_cache_ra_order+0x94/0x300
[52080.551516] ondemand_readahead+0x184/0x2f4
[52080.551529] page_cache_async_ra+0xcc/0xe0
[52080.551542] filemap_get_pages+0x4b0/0x634
[52080.551559] filemap_read+0xc4/0x310
[52080.551580] generic_file_read_iter+0x114/0x1ac
[52080.551594] xfs_file_buffered_read+0xd8/0x10c [xfs
e1c27bea8b9f8225ccb10fcd5ce17288edb978f9]
[52080.551905] xfs_file_read_iter+0xa8/0x12c [xfs
e1c27bea8b9f8225ccb10fcd5ce17288edb978f9]
[52080.552111] io_read+0xc4/0x47c
[52080.552127] io_issue_sqe+0x15c/0x1df0
[52080.552141] io_submit_sqes+0x2a4/0x1744
[52080.552155] __arm64_sys_io_uring_enter+0x568/0x8dc
[52080.552171] invoke_syscall+0x78/0x100
[52080.552187] el0_svc_common.constprop.0+0x18c/0x190
[52080.552204] do_el0_svc+0x30/0x90
[52080.552219] el0_svc+0x34/0x130
[52080.552235] el0t_64_sync_handler+0x10c/0x140
[52080.552251] el0t_64_sync+0x1a0/0x1a4
[52080.552269] Code: 37c00060 72001c1f 1a9f17e1 f9400a62 (79426842)
[52080.552289] SMP: stopping secondary CPUs
[52080.552334] Starting crashdump kernel...
[52080.552346] ------------[ cut here ]------------
[52080.552357] Some CPUs may be stale, kdump will be unreliable.
[52080.552374] WARNING: CPU: 3 PID: 6825 at
arch/arm64/kernel/machine_kexec.c:187 machine_kexec+0x48/0x220
[52080.552400] Modules linked in: loop tun af_packet iscsi_ibft
iscsi_boot_sysfs nls_iso8859_1 nls_cp437 xfs vfat libcrc32c fat btsdio brcmfmac
brcmutil cpufreq_dt hci_uart btqca btrtl btbcm btintel broadcom bluetooth
bcm_phy_lib raspberrypi_cpufreq cfg80211 ecdh_generic rfkill simpledrm
iproc_rng200 bcm2711_thermal genet drm_shmem_helper mdio_bcm_unimac
drm_kms_helper nvmem_rmem uio_pdrv_genirq uio syscopyarea sysfillrect sysimgblt
fb_sys_fops efi_pstore leds_gpio fuse drm ip_tables x_tables ext4 mbcache jbd2
uas usb_storage xhci_pci xhci_pci_renesas xhci_hcd usbcore usb_common
crct10dif_ce gpio_raspberrypi_exp raspberrypi_hwmon clk_raspberrypi bcm2835_wdt
bcm2835_dma virt_dma sdhci_iproc sdhci_pltfm pcie_brcmstb gpio_regulator sdhci
phy_generic mmc_core fixed sg efivarfs
[52080.552607] CPU: 3 PID: 6825 Comm: qemu-system-aar Kdump: loaded Not tainted
5.18.0-seife #3 openSUSE Tumbleweed (unreleased)
48ea57f9280c20a3a8dc0b4bea95d22cf9e3e2ea
[52080.552627] Hardware name: Unknown Unknown Product/Unknown Product, BIOS
2022.04 04/01/2022
[52080.552640] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[52080.552655] pc : machine_kexec+0x48/0x220
[52080.552670] lr : machine_kexec+0x48/0x220
[52080.552685] sp : ffff80000b51a640
[52080.552696] x29: ffff80000b51a640 x28: ffff80000b51a8a3 x27:
ffffd8aaff4a5178
[52080.552715] x26: ffffd8aaff4a5170 x25: ffffd8aafe7372c4 x24:
0000000000000001
[52080.552733] x23: 0000000000000001 x22: ffff80000b51a6a8 x21:
ffffd8ab0033a000
[52080.552750] x20: ffff131302f1d400 x19: ffff131302f1d400 x18:
ffffffffffffffff
[52080.552768] x17: 3165633564636630 x16: 3162636335323238 x15:
0720072007200720
[52080.552786] x14: 0720072007200720 x13: 0720072007200720 x12:
0720072007200720
[52080.552804] x11: 00000000ffffdfff x10: ffffd8ab00069808 x9 :
ffffd8aafe2e290c
[52080.552822] x8 : 000000000002ffe8 x7 : c0000000ffffdfff x6 :
00000000000affa8
[52080.552840] x5 : ffff1313fef9ab48 x4 : 0000000000000000 x3 :
0000000000000027
[52080.552858] x2 : 0000000000000000 x1 : 0000000000000000 x0 :
ffff131307444000
[52080.552875] Call trace:
[52080.552885] machine_kexec+0x48/0x220
[52080.552901] __crash_kexec+0x80/0x130
[52080.552916] crash_kexec+0x88/0xa0
[52080.552931] die+0x16c/0x234
[52080.552944] die_kernel_fault+0x38c/0x39c
[52080.552958] do_page_fault+0x2ac/0x4f0
[52080.552971] do_translation_fault+0xac/0xd0
[52080.552984] do_mem_abort+0x4c/0xa0
[52080.552997] el1_abort+0x74/0xdc
[52080.553012] el1h_64_sync_handler+0xa4/0xd0
[52080.553028] el1h_64_sync+0x78/0x7c
[52080.553040] blk_mq_submit_bio+0x120/0x710
[52080.553056] __submit_bio+0x12c/0x194
[52080.553069] submit_bio_noacct_nocheck+0x1f0/0x23c
[52080.553083] submit_bio_noacct+0x1b8/0x5b0
[52080.553097] submit_bio+0xc8/0x150
[52080.553110] __swap_writepage+0x160/0x3d0
[52080.553125] swap_writepage+0x50/0x100
[52080.553138] pageout+0xd4/0x32c
[52080.553153] shrink_page_list+0x9f4/0xd70
[52080.553167] shrink_lruvec+0x528/0xafc
[52080.553182] shrink_node+0x398/0x6f4
[52080.553196] do_try_to_free_pages+0xf0/0x580
[52080.553212] try_to_free_pages+0x118/0x26c
[52080.553227] __alloc_pages+0x4ac/0xdd0
[52080.553243] alloc_pages+0xb8/0x170
[52080.553256] folio_alloc+0x28/0x64
[52080.553270] filemap_alloc_folio+0xd8/0xf0
[52080.553283] page_cache_ra_unbounded+0xc4/0x1b0
[52080.553299] page_cache_ra_order+0x94/0x300
[52080.553312] ondemand_readahead+0x184/0x2f4
[52080.553325] page_cache_async_ra+0xcc/0xe0
[52080.553338] filemap_get_pages+0x4b0/0x634
[52080.553352] filemap_read+0xc4/0x310
[52080.553365] generic_file_read_iter+0x114/0x1ac
[52080.553379] xfs_file_buffered_read+0xd8/0x10c [xfs
e1c27bea8b9f8225ccb10fcd5ce17288edb978f9]
[52080.553573] xfs_file_read_iter+0xa8/0x12c [xfs
e1c27bea8b9f8225ccb10fcd5ce17288edb978f9]
[52080.553745] io_read+0xc4/0x47c
[52080.553759] io_issue_sqe+0x15c/0x1df0
[52080.553773] io_submit_sqes+0x2a4/0x1744
[52080.553787] __arm64_sys_io_uring_enter+0x568/0x8dc
[52080.553801] invoke_syscall+0x78/0x100
[52080.553817] el0_svc_common.constprop.0+0x18c/0x190
[52080.553833] do_el0_svc+0x30/0x90
[52080.553848] el0_svc+0x34/0x130
[52080.553863] el0t_64_sync_handler+0x10c/0x140
[52080.553878] el0t_64_sync+0x1a0/0x1a4
[52080.553891] ---[ end trace 0000000000000000 ]---
[52080.553904] Bye!
The So the warning is not triggered before the crash.