The following regressions were detected on qemu-arm64 while running xfstests with the Linux next-20250904 tag. The system crashed with an internal error in bio_iov_iter_get_pages(), resulting in an Oops during direct I/O write operations.
Regression Analysis: - New regression? yes - Reproducibility? yes
First seen on next-20250904 Bad: next-20250904 and next-20250905 Good: next-20250822
Test regression: next-20250904 qemu-arm64 xfstests Internal error Oops bio_iov_iter_get_pages
Reported-by: Linux Kernel Functional Testing lkft@linaro.org
qemu-arm64: Test: * xfstests
Test crash:
[ 2074.633472] Internal error: Oops: 0000000096000004 [#1] SMP [ 2074.639619] Modules linked in: sm3_ce sha3_ce fuse drm backlight dm_mod [ 2074.651698] CPU: 0 UID: 0 PID: 154238 Comm: xfs_io Not tainted 6.17.0-rc4-next-20250904 #1 PREEMPT [ 2074.652132] Hardware name: linux,dummy-virt (DT) [ 2074.652429] pstate: 22402009 (nzCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 2074.652716] pc : bio_iov_iter_get_pages (block/bio.c:1074 block/bio.c:1272 block/bio.c:1336) [ 2074.701159] lr : bio_iov_iter_get_pages (block/bio.c:1072 block/bio.c:1272 block/bio.c:1336) [ 2074.701366] sp : ffff800080f83950 [ 2074.701506] x29: ffff800080f83980 x28: 000000000006f000 x27: fff00000c03b9408 [ 2074.701853] x26: 0000000000001000 x25: 0000000000000091 x24: ffffc1ffc153b480 [ 2074.702133] x23: 0000000000000002 x22: 00000000ffffffff x21: 0000000000000100 [ 2074.702421] x20: 0000000000000001 x19: 0000000000001000 x18: 0000000000001000 [ 2074.702710] x17: 0000000000000000 x16: 0000000000000000 x15: fff00000ff6e9a80 [ 2074.702987] x14: fff0000007413500 x13: ffffa44770f6e000 x12: ffffc1ffc0000000 [ 2074.703264] x11: 0000000000001000 x10: fff00000cf850800 x9 : fff00000cf850b78 [ 2074.703510] x8 : ffffc1ffc153ac08 x7 : 0000ffff9626f000 x6 : 0000000000000fff [ 2074.703794] x5 : 0000000000021000 x4 : ffffc1ffbf000000 x3 : 7878782f78787878 [ 2074.704079] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000001000 [ 2074.704436] Call trace: [ 2074.704685] bio_iov_iter_get_pages (block/bio.c:1074 block/bio.c:1272 block/bio.c:1336) (P) [ 2074.704971] iomap_dio_bio_iter (fs/iomap/direct-io.c:437) [ 2074.705167] __iomap_dio_rw (include/linux/uio.h:228 fs/iomap/direct-io.c:530 fs/iomap/direct-io.c:559 fs/iomap/direct-io.c:729) [ 2074.705331] btrfs_direct_write+0x1f4/0x3bc [ 2074.713828] btrfs_do_write_iter+0x18c/0x1ec [ 2074.725568] btrfs_file_write_iter+0x14/0x20 [ 2074.725936] vfs_write (fs/read_write.c:593 fs/read_write.c:686) [ 2074.731508] __arm64_sys_pwrite64 (fs/read_write.c:793 fs/read_write.c:801 fs/read_write.c:798 fs/read_write.c:798) [ 2074.731822] invoke_syscall (arch/arm64/kernel/syscall.c:35 arch/arm64/kernel/syscall.c:49) [ 2074.737438] el0_svc_common.constprop.0 (arch/arm64/kernel/syscall.c:132) [ 2074.737885] do_el0_svc (arch/arm64/kernel/syscall.c:151) [ 2074.738235] el0_svc (arch/arm64/kernel/entry-common.c:879) [ 2074.785073] el0t_64_sync_handler (arch/arm64/kernel/entry-common.c:899) [ 2074.785245] el0t_64_sync (arch/arm64/kernel/entry.S:596) [ 2074.785643] Code: f9400fea d2820000 7940c377 f8795943 (f9400462) All code ======== 0: f9400fea ldr x10, [sp, #24] 4: d2820000 mov x0, #0x1000 // #4096 8: 7940c377 ldrh w23, [x27, #96] c: f8795943 ldr x3, [x10, w25, uxtw #3] 10:* f9400462 ldr x2, [x3, #8] <-- trapping instruction
Code starting with the faulting instruction =========================================== 0: f9400462 ldr x2, [x3, #8] [ 2074.786668] ---[ end trace 0000000000000000 ]---
## Source * Kernel version: 6.17.0-rc4-next-20250904 * Git tree: https://kernel.googlesource.com/pub/scm/linux/kernel/git/next/linux-next.git * Git describe: next-20250904 * Git commit: 4ac65880ebca1b68495bd8704263b26c050ac010 * Architectures / Devices: qemu-arm64 * Toolchains: gcc-13 * Kconfigs: defconfig+xfstests * xfstests: v2024.12.01
## Build * Test log: https://qa-reports.linaro.org/api/testruns/29762004/log_file/ * Test details: https://regressions.linaro.org/lkft/linux-next-master/next-20250904/log-pars... * Test plan: https://tuxapi.tuxsuite.com/v1/groups/linaro/projects/lkft/tests/32E6ypoTqaD... * Build link: https://storage.tuxsuite.com/public/linaro/lkft/builds/32E6us2qcXmnop3jTYQMO... * Kernel config: https://storage.tuxsuite.com/public/linaro/lkft/builds/32E6us2qcXmnop3jTYQMO... * xfstests: https://storage.tuxboot.com/overlays/debian/trixie/arm64/xfstests/v2024.12.0...
-- Linaro LKFT https://lkft.linaro.org
On 9/5/25 6:58 AM, Naresh Kamboju wrote:
The following regressions were detected on qemu-arm64 while running xfstests with the Linux next-20250904 tag. The system crashed with an internal error in bio_iov_iter_get_pages(), resulting in an Oops during direct I/O write operations.
Regression Analysis:
- New regression? yes
- Reproducibility? yes
First seen on next-20250904 Bad: next-20250904 and next-20250905 Good: next-20250822
Test regression: next-20250904 qemu-arm64 xfstests Internal error Oops bio_iov_iter_get_pages
Reported-by: Linux Kernel Functional Testing lkft@linaro.org
qemu-arm64: Test:
- xfstests
Test crash:
[ 2074.633472] Internal error: Oops: 0000000096000004 [#1] SMP [ 2074.639619] Modules linked in: sm3_ce sha3_ce fuse drm backlight dm_mod [ 2074.651698] CPU: 0 UID: 0 PID: 154238 Comm: xfs_io Not tainted 6.17.0-rc4-next-20250904 #1 PREEMPT [ 2074.652132] Hardware name: linux,dummy-virt (DT) [ 2074.652429] pstate: 22402009 (nzCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 2074.652716] pc : bio_iov_iter_get_pages (block/bio.c:1074 block/bio.c:1272 block/bio.c:1336) [ 2074.701159] lr : bio_iov_iter_get_pages (block/bio.c:1072 block/bio.c:1272 block/bio.c:1336) [ 2074.701366] sp : ffff800080f83950 [ 2074.701506] x29: ffff800080f83980 x28: 000000000006f000 x27: fff00000c03b9408 [ 2074.701853] x26: 0000000000001000 x25: 0000000000000091 x24: ffffc1ffc153b480 [ 2074.702133] x23: 0000000000000002 x22: 00000000ffffffff x21: 0000000000000100 [ 2074.702421] x20: 0000000000000001 x19: 0000000000001000 x18: 0000000000001000 [ 2074.702710] x17: 0000000000000000 x16: 0000000000000000 x15: fff00000ff6e9a80 [ 2074.702987] x14: fff0000007413500 x13: ffffa44770f6e000 x12: ffffc1ffc0000000 [ 2074.703264] x11: 0000000000001000 x10: fff00000cf850800 x9 : fff00000cf850b78 [ 2074.703510] x8 : ffffc1ffc153ac08 x7 : 0000ffff9626f000 x6 : 0000000000000fff [ 2074.703794] x5 : 0000000000021000 x4 : ffffc1ffbf000000 x3 : 7878782f78787878 [ 2074.704079] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000001000 [ 2074.704436] Call trace: [ 2074.704685] bio_iov_iter_get_pages (block/bio.c:1074 block/bio.c:1272 block/bio.c:1336) (P) [ 2074.704971] iomap_dio_bio_iter (fs/iomap/direct-io.c:437) [ 2074.705167] __iomap_dio_rw (include/linux/uio.h:228 fs/iomap/direct-io.c:530 fs/iomap/direct-io.c:559 fs/iomap/direct-io.c:729) [ 2074.705331] btrfs_direct_write+0x1f4/0x3bc [ 2074.713828] btrfs_do_write_iter+0x18c/0x1ec [ 2074.725568] btrfs_file_write_iter+0x14/0x20 [ 2074.725936] vfs_write (fs/read_write.c:593 fs/read_write.c:686) [ 2074.731508] __arm64_sys_pwrite64 (fs/read_write.c:793 fs/read_write.c:801 fs/read_write.c:798 fs/read_write.c:798) [ 2074.731822] invoke_syscall (arch/arm64/kernel/syscall.c:35 arch/arm64/kernel/syscall.c:49) [ 2074.737438] el0_svc_common.constprop.0 (arch/arm64/kernel/syscall.c:132) [ 2074.737885] do_el0_svc (arch/arm64/kernel/syscall.c:151) [ 2074.738235] el0_svc (arch/arm64/kernel/entry-common.c:879) [ 2074.785073] el0t_64_sync_handler (arch/arm64/kernel/entry-common.c:899) [ 2074.785245] el0t_64_sync (arch/arm64/kernel/entry.S:596) [ 2074.785643] Code: f9400fea d2820000 7940c377 f8795943 (f9400462) All code ======== 0: f9400fea ldr x10, [sp, #24] 4: d2820000 mov x0, #0x1000 // #4096 8: 7940c377 ldrh w23, [x27, #96] c: f8795943 ldr x3, [x10, w25, uxtw #3] 10:* f9400462 ldr x2, [x3, #8] <-- trapping instruction
Code starting with the faulting instruction
0: f9400462 ldr x2, [x3, #8] [ 2074.786668] ---[ end trace 0000000000000000 ]---
## Source
- Kernel version: 6.17.0-rc4-next-20250904
- Git tree: https://kernel.googlesource.com/pub/scm/linux/kernel/git/next/linux-next.git
- Git describe: next-20250904
- Git commit: 4ac65880ebca1b68495bd8704263b26c050ac010
- Architectures / Devices: qemu-arm64
- Toolchains: gcc-13
- Kconfigs: defconfig+xfstests
- xfstests: v2024.12.01
## Build
- Test log: https://qa-reports.linaro.org/api/testruns/29762004/log_file/
- Test details:
https://regressions.linaro.org/lkft/linux-next-master/next-20250904/log-pars...
- Test plan: https://tuxapi.tuxsuite.com/v1/groups/linaro/projects/lkft/tests/32E6ypoTqaD...
- Build link: https://storage.tuxsuite.com/public/linaro/lkft/builds/32E6us2qcXmnop3jTYQMO...
- Kernel config:
https://storage.tuxsuite.com/public/linaro/lkft/builds/32E6us2qcXmnop3jTYQMO...
-- Linaro LKFT https://lkft.linaro.org
Adding David and leaving report intact, perhaps try if it's the same that syzbot reported:
https://lore.kernel.org/io-uring/68babfe5.a00a0220.eb3d.0011.GAE@google.com/...