Greeting,

FYI, we noticed the following commit (built with gcc-11):

commit: 0eee64011b1d43795b5c8d1aa62927ba3f07a225 ("[PATCH] sched/rt: Support multi-criterion fitness search for")
url: https://github.com/intel-lab-lkp/linux/commits/Qais-Yousef/sched-rt-Support-multi-criterion-fitness-search-for/20220515-075732
base: https://git.kernel.org/cgit/linux/kernel/git/tip/tip.git 734387ec2f9d77b00276042b1fa7c95f48ee879d
patch link: https://lore.kernel.org/lkml/20220514235513.jm7ul2y6uddj6eh2@airbuntu

in testcase: pm-qa
version: pm-qa-x86_64-5ead848-1_20220411
with following parameters:

	test: thermal
	ucode: 0x28



on test machine: 8 threads 1 sockets Intel(R) Core(TM) i7-4770K CPU @ 3.50GHz with 8G memory

caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):



If you fix the issue, kindly add following tag
Reported-by: kernel test robot <oliver.sang@intel.com>


[  581.218544][ T1333] intel_powerclamp: Start idle injection to reduce power
[  586.315335][  T376] thermal_04.41: checking cooling_device13:state=42 effective cool=0 ...      Ok
[  586.315347][  T376]
[  586.337525][ T1333] intel_powerclamp: Stop forced idle injection
[  591.382556][ T1333] intel_powerclamp: Start idle injection to reduce power
[  595.244228][    C0] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI
[  595.255455][    C0] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  595.263733][    C0] CPU: 0 PID: 3730 Comm: kidle_inj/0 Tainted: G          I       5.18.0-rc5-00021-g0eee64011b1d #3
[  595.274246][    C0] Hardware name: Gigabyte Technology Co., Ltd. Z87X-UD5H/Z87X-UD5H-CF, BIOS F9 03/18/2014
[ 595.283979][ C0] RIP: 0010:cpupri_find_fitness (kbuild/src/x86_64/kernel/sched/cpupri.c:256) 
[ 595.289736][ C0] Code: 0f b6 04 02 84 c0 7f 06 0f 85 ed 01 00 00 31 c0 80 7c 24 58 00 74 75 48 b8 00 00 00 00 00 fc ff df 48 8b 54 24 28 48 c1 ea 03 <80> 3c 02 00 0f 85 d1 01 00 00 48 ba 00 00 00 00 00 fc ff df 48 8b
All code
========
   0:	0f b6 04 02          	movzbl (%rdx,%rax,1),%eax
   4:	84 c0                	test   %al,%al
   6:	7f 06                	jg     0xe
   8:	0f 85 ed 01 00 00    	jne    0x1fb
   e:	31 c0                	xor    %eax,%eax
  10:	80 7c 24 58 00       	cmpb   $0x0,0x58(%rsp)
  15:	74 75                	je     0x8c
  17:	48 b8 00 00 00 00 00 	movabs $0xdffffc0000000000,%rax
  1e:	fc ff df 
  21:	48 8b 54 24 28       	mov    0x28(%rsp),%rdx
  26:	48 c1 ea 03          	shr    $0x3,%rdx
  2a:*	80 3c 02 00          	cmpb   $0x0,(%rdx,%rax,1)		<-- trapping instruction
  2e:	0f 85 d1 01 00 00    	jne    0x205
  34:	48 ba 00 00 00 00 00 	movabs $0xdffffc0000000000,%rdx
  3b:	fc ff df 
  3e:	48                   	rex.W
  3f:	8b                   	.byte 0x8b

Code starting with the faulting instruction
===========================================
   0:	80 3c 02 00          	cmpb   $0x0,(%rdx,%rax,1)
   4:	0f 85 d1 01 00 00    	jne    0x1db
   a:	48 ba 00 00 00 00 00 	movabs $0xdffffc0000000000,%rdx
  11:	fc ff df 
  14:	48                   	rex.W
  15:	8b                   	.byte 0x8b
[  595.309181][    C0] RSP: 0000:ffffc90000007bf8 EFLAGS: 00010046
[  595.315113][    C0] RAX: dffffc0000000000 RBX: dffffc0000000000 RCX: 0000000000000000
[  595.322943][    C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffc90000007c50
[  595.330771][    C0] RBP: ffff888100c89c58 R08: 0000000000000000 R09: ffff8881002bb0bb
[  595.338601][    C0] R10: ffffed1020057617 R11: 0000000000000001 R12: fffffbfff0a31e96
[  595.346432][    C0] R13: 0000000000000000 R14: ffff88811a375280 R15: ffff8881002bb0b8
[  595.354267][    C0] FS:  0000000000000000(0000) GS:ffff8881cda00000(0000) knlGS:0000000000000000
[  595.363059][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  595.369503][    C0] CR2: 00007f2e7df2e9a0 CR3: 000000023d60e003 CR4: 00000000001706f0
[  595.377342][    C0] Call Trace:
[  595.380491][    C0]  <IRQ>
[ 595.383204][ C0] ? __wake_up_pollfree (kbuild/src/x86_64/kernel/sched/cpupri.c:146) 
[ 595.388090][ C0] ? detach_tasks (kbuild/src/x86_64/include/linux/list.h:69 kbuild/src/x86_64/include/linux/list.h:88 kbuild/src/x86_64/include/linux/list.h:218 kbuild/src/x86_64/kernel/sched/fair.c:7986) 
[ 595.392622][ C0] ? _raw_spin_lock (kbuild/src/x86_64/arch/x86/include/asm/atomic.h:202 kbuild/src/x86_64/include/linux/atomic/atomic-instrumented.h:543 kbuild/src/x86_64/include/asm-generic/qspinlock.h:82 kbuild/src/x86_64/include/linux/spinlock.h:185 kbuild/src/x86_64/include/linux/spinlock_api_smp.h:134 kbuild/src/x86_64/kernel/locking/spinlock.c:154) 
[ 595.397245][ C0] find_lowest_rq (kbuild/src/x86_64/kernel/sched/rt.c:1890) 


To reproduce:

        git clone https://github.com/intel/lkp-tests.git
        cd lkp-tests
        sudo bin/lkp install job.yaml           # job file is attached in this email
        bin/lkp split-job --compatible job.yaml # generate the yaml file for lkp run
        sudo bin/lkp run generated-yaml-file

        # if come across any failure that blocks the test,
        # please remove ~/.lkp and /lkp dir to run from a clean state.



-- 
0-DAY CI Kernel Test Service
https://01.org/lkp