Message-ID: <49cb29fc-003c-422a-98bd-dee8f13aa0b4@linux.ibm.com>
Date: Fri, 5 Sep 2025 10:14:01 +0530
From: Venkat Rao Bagalkote <venkat88@...ux.ibm.com>
To: "open list:PERFORMANCE EVENTS SUBSYSTEM"
 <linux-perf-users@...r.kernel.org>,
        LKML <linux-kernel@...r.kernel.org>,
        linuxppc-dev <linuxppc-dev@...ts.ozlabs.org>,
        Madhavan Srinivasan <maddy@...ux.ibm.com>,
        Stephen Rothwell <sfr@...b.auug.org.au>,
        Namhyung Kim <namhyung@...nel.org>, jpoimboe@...nel.org,
        Steven Rostedt <rostedt@...dmis.org>,
        Peter Zijlstra <peterz@...radead.org>,
        Alexei Starovoitov <ast@...nel.org>
Subject: [linux-next20250903] Kernel OOPs at perf_callchain_user

Greetings!!!


IBM CI has reported kernel crash, while running perf test case on 
next20250903 kernel.


Test: 
https://github.com/avocado-framework-tests/avocado-misc-tests/blob/master/perf/perf_test.py 


Yaml: 
https://github.com/sacsant/avocado-misc-tests/blob/ci/perf/perf_test.py.data/perf_arnext.yaml


Traces:


[ 6818.892952] BUG: Kernel NULL pointer dereference at 0x00000590
[ 6818.892997] Faulting instruction address: 0xc00000000014b960
[ 6818.893010] Oops: Kernel access of bad area, sig: 11 [#1]
[ 6818.893024] LE PAGE_SIZE=64K MMU=Hash  SMP NR_CPUS=8192 NUMA pSeries
[ 6818.893052] Modules linked in: dm_mod(E) ext4(E) crc16(E) mbcache(E) 
jbd2(E) nft_compat(E) bonding(E) nft_fib_inet(E) nft_fib_ipv4(E) 
nft_fib_ipv6(E) nft_fib(E) nft_reject_inet(E) nf_reject_ipv4(E) 
nf_reject_ipv6(E) nft_reject(E) nft_ct(E) nft_chain_nat(E) rfkill(E) 
ip_set(E) mlx5_ib(E) ib_uverbs(E) ib_core(E) pseries_rng(E) 
vmx_crypto(E) drm(E) drm_panel_orientation_quirks(E) xfs(E) sr_mod(E) 
cdrom(E) sd_mod(E) sg(E) lpfc(E) nvmet_fc(E) ibmvscsi(E) ibmveth(E) 
scsi_transport_srp(E) nvmet(E) mlx5_core(E) nvme_fc(E) nvme_fabrics(E) 
mlxfw(E) nvme_core(E) tls(E) scsi_transport_fc(E) psample(E) fuse(E) 
[last unloaded: scsi_debug(E)]
[ 6818.893294] CPU: 1 UID: 0 PID: 266107 Comm: sched-messaging Kdump: 
loaded Tainted: G            E  6.17.0-rc4-next-20250903 #1 VOLUNTARY
[ 6818.893323] Tainted: [E]=UNSIGNED_MODULE
[ 6818.893331] Hardware name: IBM,8375-42A POWER9 (architected) 0x4e0202 
0xf000005 of:IBM,FW950.80 (VL950_131) hv:phyp pSeries
[ 6818.893343] NIP:  c00000000014b960 LR: c00000000014b920 CTR: 
c0000000003b5188
[ 6818.893357] REGS: c00000020e76f1f0 TRAP: 0380   Tainted: G       E    
     (6.17.0-rc4-next-20250903)
[ 6818.893374] MSR:  800000000280b033 <SF,VEC,VSX,EE,FP,ME,IR,DR,RI,LE>  
CR: 88822888  XER: 20040000
[ 6818.893439] CFAR: c0000000004d2e68 IRQMASK: 1
[ 6818.893439] GPR00: c00000000014b920 c00000020e76f490 c000000001c98100 
0000000000000000
[ 6818.893439] GPR04: 00007fffeed48148 0000000000000008 0000000000000100 
00007fffb90ad054
[ 6818.893439] GPR08: c00000020e768000 0000000000000000 00007fffeed48870 
0000000000004000
[ 6818.893439] GPR12: c0000000003b5188 c000000017fff300 0000000000000000 
0000000000000000
[ 6818.893439] GPR16: 0000000000000000 0000000000000000 c00000020e76f8e8 
fffffffffffffff9
[ 6818.893439] GPR20: 0000000000000001 fffffffffffffffb c000000002d12a80 
c00000000120f444
[ 6818.893439] GPR24: 0000000000000001 fffffffffffffe00 c00000020fd31e00 
000ffffffffffff8
[ 6818.893439] GPR28: 00007fffffffffdf 0000000000000000 00007fffeed48140 
c00000020e76f580
[ 6818.893652] NIP [c00000000014b960] perf_callchain_user_64+0x1b0/0x4f0
[ 6818.893676] LR [c00000000014b920] perf_callchain_user_64+0x170/0x4f0
[ 6818.893696] Call Trace:
[ 6818.893709] [c00000020e76f490] [c00000000014b920] 
perf_callchain_user_64+0x170/0x4f0 (unreliable)
[ 6818.893732] [c00000020e76f530] [c00000000014b794] 
perf_callchain_user+0x20/0x3c
[ 6818.893760] [c00000020e76f550] [c0000000004af654] 
get_perf_callchain+0x1b0/0x31c
[ 6818.893782] [c00000020e76f5d0] [c0000000004793f8] 
bpf_get_stackid+0x90/0xec
[ 6818.893799] [c00000020e76f600] [c0000000003b51fc] 
bpf_get_stackid_raw_tp+0x7c/0xd8
[ 6818.893816] [c00000020e76f640] [c00800000064b7b4] 
bpf_prog_6f912c7f0c27afc3_on_switch+0x1a4/0x538
[ 6818.893839] [c00000020e76f6e0] [c0000000003b4254] 
bpf_trace_run4+0xa8/0x1c0
[ 6818.893853] [c00000020e76f760] [c0000000001bf480] 
__bpf_trace_sched_switch+0x18/0x2c
[ 6818.893869] [c00000020e76f780] [c00000000120f0c4] __schedule+0x4bc/0x7fc
[ 6818.893885] [c00000020e76f870] [c00000000120f444] schedule+0x40/0xd4
[ 6818.893899] [c00000020e76f8a0] [c00000000120f718] 
schedule_preempt_disabled+0x20/0x30
[ 6818.893916] [c00000020e76f8c0] [c000000001214560] 
rwsem_down_write_slowpath+0x2c8/0x90c
[ 6818.893935] [c00000020e76f9a0] [c000000001214c2c] down_write+0x88/0x9c
[ 6818.893951] [c00000020e76f9d0] [c00000000055d8c4] 
__put_anon_vma+0xf8/0x130
[ 6818.893968] [c00000020e76fa00] [c00000000055db94] 
unlink_anon_vmas+0x268/0x308
[ 6818.893986] [c00000020e76fa70] [c0000000005343dc] 
free_pgtables+0x100/0x390
[ 6818.894008] [c00000020e76fb50] [c00000000054a3b0] exit_mmap+0x1b4/0x5b0
[ 6818.894026] [c00000020e76fc90] [c0000000001677dc] __mmput+0x64/0x1b4
[ 6818.894041] [c00000020e76fcc0] [c000000000175338] exit_mm+0xdc/0x16c
[ 6818.894061] [c00000020e76fd00] [c0000000001755d4] do_exit+0x20c/0x56c
[ 6818.894076] [c00000020e76fdb0] [c000000000175b20] do_group_exit+0x4c/0xbc
[ 6818.894095] [c00000020e76fdf0] [c000000000175bb8] 
pid_child_should_wake+0x0/0x80
[ 6818.894112] [c00000020e76fe10] [c000000000032bf4] 
system_call_exception+0x124/0x320
[ 6818.894137] [c00000020e76fe50] [c00000000000d05c] 
system_call_vectored_common+0x15c/0x2ec
[ 6818.894156] ---- interrupt: 3000 at 0x7fffb90ad054
[ 6818.894169] NIP:  00007fffb90ad054 LR: 00007fffb90ad054 CTR: 
0000000000000000
[ 6818.894184] REGS: c00000020e76fe80 TRAP: 3000   Tainted: G       E    
     (6.17.0-rc4-next-20250903)
[ 6818.894200] MSR:  800000000280f033 
<SF,VEC,VSX,EE,PR,FP,ME,IR,DR,RI,LE>  CR: 44888822  XER: 00000000
[ 6818.894243] IRQMASK: 0
[ 6818.894243] GPR00: 00000000000000ea 00007fffeed48140 00007fffb91e7200 
0000000000000000
[ 6818.894243] GPR04: 0000000000000000 0000000000000000 0000000000000000 
0000000000000040
[ 6818.894243] GPR08: 0000000000000000 0000000000000000 0000000000000000 
0000000000000000
[ 6818.894243] GPR12: 0000000000000000 00007fffb9c86080 000001003dfcae70 
00007fffeed482e0
[ 6818.894243] GPR16: 000001003dfcaa78 0000000010145800 000001003dfcaac8 
00000000105cf1d0
[ 6818.894243] GPR20: 00000000105bc6e0 0000000000000000 0000000000000800 
0000000000000001
[ 6818.894243] GPR24: 0000000000000000 00007fffb91e0a38 0000000000000000 
0000000000000001
[ 6818.894243] GPR28: 00007fffb91e1fa8 00007fffb9c7f0b8 fffffffffffff000 
0000000000000000
[ 6818.894410] NIP [00007fffb90ad054] 0x7fffb90ad054
[ 6818.894425] LR [00007fffb90ad054] 0x7fffb90ad054
[ 6818.894434] ---- interrupt: 3000
[ 6818.894441] Code: 41910100 ebc10028 e9210030 7d3e4850 282908f7 
408100dc e9410038 7d475378 395e0730 7c275040 41820130 e93a0a70 
<e9290590> 2c290000 41820010 39290470
[ 6818.894499] ---[ end trace 0000000000000000 ]---



If you happen to fix this, please add below tag.


Reported-by: Venkat Rao Bagalkote <venkat88@...ux.ibm.com>


Regards,

Venkat.

Powered by blists - more mailing lists