All of lore.kernel.org
 help / color / mirror / Atom feed
From: kernel test robot <oliver.sang@intel.com>
To: Mike Rapoport <rppt@kernel.org>
Cc: <oe-lkp@lists.linux.dev>, <lkp@intel.com>,
	Mike Rapoport <rppt@kernel.org>, <oliver.sang@intel.com>
Subject: [rppt:execmem/x86-rox/v8] [modules]  dabed34199: BUG:unable_to_handle_page_fault_for_address
Date: Mon, 30 Dec 2024 14:28:38 +0800	[thread overview]
Message-ID: <202412301440.1888e8e1-lkp@intel.com> (raw)



Hello,

kernel test robot noticed "BUG:unable_to_handle_page_fault_for_address" on:

commit: dabed3419932a68921de5972b24f6a6b7dfd4866 ("modules: switch to execmem API for remapping as RW and restoring ROX")
https://git.kernel.org/cgit/linux/kernel/git/rppt/linux.git execmem/x86-rox/v8

in testcase: boot

config: x86_64-randconfig-161-20241227
compiler: gcc-12
test machine: qemu-system-x86_64 -enable-kvm -cpu SandyBridge -smp 2 -m 16G

(please refer to attached dmesg/kmsg for entire log/backtrace)


+------------------------------------------------+------------+------------+
|                                                | 6a7a9e5b90 | dabed34199 |
+------------------------------------------------+------------+------------+
| boot_successes                                 | 30         | 9          |
| boot_failures                                  | 0          | 21         |
| BUG:unable_to_handle_page_fault_for_address    | 0          | 20         |
| Oops                                           | 0          | 20         |
| RIP:_sub_I_65535_1[fb]                         | 0          | 4          |
| Kernel_panic-not_syncing:Fatal_exception       | 0          | 20         |
| RIP:_sub_I_65535_1[qemu_fw_cfg]                | 0          | 2          |
| RIP:_sub_I_65535_1[psmouse]                    | 0          | 2          |
| RIP:_sub_I_65535_1[rapl]                       | 0          | 2          |
| RIP:_sub_I_65535_1[pcspkr]                     | 0          | 2          |
| RIP:_sub_I_65535_1[sha512_ssse3]               | 0          | 1          |
| RIP:_sub_I_65535_1[sha1_ssse3]                 | 0          | 1          |
| RIP:_sub_I_65535_1[drm_kms_helper]             | 0          | 1          |
| RIP:_sub_I_65535_1[fuse]                       | 0          | 1          |
| IP-Config:Auto-configuration_of_network_failed | 0          | 1          |
| RIP:_sub_I_65535_1[fb_sys_fops]                | 0          | 2          |
| RIP:_sub_I_65535_1[input_leds]                 | 0          | 1          |
| RIP:_sub_I_65535_1[intel_gtt]                  | 0          | 1          |
+------------------------------------------------+------------+------------+


If you fix the issue in a separate patch/commit (i.e. not just a new version of
the same patch/commit), kindly add following tags
| Reported-by: kernel test robot <oliver.sang@intel.com>
| Closes: https://lore.kernel.org/oe-lkp/202412301440.1888e8e1-lkp@intel.com


[  111.221665][  T123] BUG: unable to handle page fault for address: ffffffffa014d4c8
[  111.222351][  T123] #PF: supervisor instruction fetch in kernel mode
[  111.222908][  T123] #PF: error_code(0x0011) - permissions violation
[  111.223470][  T123] PGD 40c3067 P4D 40c3067 PUD 40c4063 PMD 122325063 PTE 800000015194d163
[  111.224267][  T123] Oops: Oops: 0011 [#1] PREEMPT KASAN
[  111.224747][  T123] CPU: 0 UID: 0 PID: 123 Comm: systemd-udevd Tainted: G                T  6.13.0-rc3-00006-gdabed3419932 #1 be760d6cffe1d430d3b268a66fea25ceb7b58953
[  111.226009][  T123] Tainted: [T]=RANDSTRUCT
[  111.226427][  T123] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 111.227340][ T123] RIP: 0010:_sub_I_65535_1 (scripts/module-common.c:19) fb_sys_fops
[ 111.227905][ T123] Code: 5d 00 48 85 db 48 89 d8 75 03 49 63 c4 5a 5b 5d 41 5c 41 5d 41 5e 41 5f c3 be 07 00 00 00 48 c7 c7 60 40 40 a0 e9 6b 16 37 e1 <be> 07 00 00 00 48 c7 c7 60 40 40 a0 e9 79 16 37 e1 00 00 00 00 00
All code
========
   0:	5d                   	pop    %rbp
   1:	00 48 85             	add    %cl,-0x7b(%rax)
   4:	db 48 89             	fisttpl -0x77(%rax)
   7:	d8 75 03             	fdivs  0x3(%rbp)
   a:	49 63 c4             	movslq %r12d,%rax
   d:	5a                   	pop    %rdx
   e:	5b                   	pop    %rbx
   f:	5d                   	pop    %rbp
  10:	41 5c                	pop    %r12
  12:	41 5d                	pop    %r13
  14:	41 5e                	pop    %r14
  16:	41 5f                	pop    %r15
  18:	c3                   	ret
  19:	be 07 00 00 00       	mov    $0x7,%esi
  1e:	48 c7 c7 60 40 40 a0 	mov    $0xffffffffa0404060,%rdi
  25:	e9 6b 16 37 e1       	jmp    0xffffffffe1371695
  2a:*	be 07 00 00 00       	mov    $0x7,%esi		<-- trapping instruction
  2f:	48 c7 c7 60 40 40 a0 	mov    $0xffffffffa0404060,%rdi
  36:	e9 79 16 37 e1       	jmp    0xffffffffe13716b4
  3b:	00 00                	add    %al,(%rax)
  3d:	00 00                	add    %al,(%rax)
	...

Code starting with the faulting instruction
===========================================
   0:	be 07 00 00 00       	mov    $0x7,%esi
   5:	48 c7 c7 60 40 40 a0 	mov    $0xffffffffa0404060,%rdi
   c:	e9 79 16 37 e1       	jmp    0xffffffffe137168a
  11:	00 00                	add    %al,(%rax)
  13:	00 00                	add    %al,(%rax)
	...
[  111.229483][  T123] RSP: 0018:ffffc9000131fa28 EFLAGS: 00210202
[  111.230009][  T123] RAX: ffffffffa0408000 RBX: ffffffffa0404240 RCX: 0000000000000001
[  111.230724][  T123] RDX: 1ffffffff4081000 RSI: 00000000033000aa RDI: ffff8881000f5798
[  111.231510][  T123] RBP: ffff8881000f5780 R08: 0000000000000000 R09: ffff8883adbc41c0
[  111.232688][  T123] R10: ffffc9000131f7d8 R11: 0000000044cfc41c R12: 0000000000004000
[  111.233871][  T123] R13: 0000000000001000 R14: 0000000000000001 R15: dffffc0000000000
[  111.235059][  T123] FS:  0000000000000000(0000) GS:ffffffff840f3000(0063) knlGS:00000000f794fb00
[  111.236330][  T123] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[  111.237286][  T123] CR2: ffffffffa014d4c8 CR3: 0000000157dad000 CR4: 00000000000406f0
[  111.238490][  T123] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  111.239688][  T123] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  111.240875][  T123] Call Trace:
[  111.241467][  T123]  <TASK>
[ 111.241996][ T123] ? __die_body (arch/x86/kernel/dumpstack.c:421)
[ 111.242696][ T123] ? _sub_D_65535_0 (drivers/video/fbdev/core/fb_sys_fops.c:18) fb_sys_fops
[ 111.244067][ T123] ? page_fault_oops (arch/x86/mm/fault.c:710)
[ 111.244870][ T123] ? show_fault_oops (arch/x86/mm/fault.c:643)
[ 111.245708][ T123] ? preempt_count_sub (arch/x86/include/asm/preempt.h:84 kernel/sched/core.c:5886)
[ 111.246492][ T123] ? fixup_exception (arch/x86/mm/extable.c:321)
[ 111.247267][ T123] ? _sub_D_65535_0 (drivers/video/fbdev/core/fb_sys_fops.c:18) fb_sys_fops
[ 111.248716][ T123] ? _sub_D_65535_0 (drivers/video/fbdev/core/fb_sys_fops.c:18) fb_sys_fops
[ 111.250147][ T123] ? exc_page_fault (arch/x86/mm/fault.c:1479 arch/x86/mm/fault.c:1539)
[ 111.250915][ T123] ? asm_exc_page_fault (arch/x86/include/asm/idtentry.h:623)
[ 111.251767][ T123] ? _sub_D_65535_0 (drivers/video/fbdev/core/fb_sys_fops.c:18) fb_sys_fops
[ 111.253215][ T123] do_init_module (kernel/module/main.c:2788 kernel/module/main.c:2862)
[ 111.254038][ T123] init_module_from_file (kernel/module/main.c:3519)
[ 111.254912][ T123] ? __ia32_sys_init_module (kernel/module/main.c:3495)
[ 111.255784][ T123] ? idempotent_init_module (kernel/module/main.c:3530)
[ 111.256700][ T123] ? __lock_release+0x10e/0x386
[ 111.257622][ T123] ? tracer_preempt_on (kernel/trace/trace_irqsoff.c:661)
[ 111.258504][ T123] idempotent_init_module (kernel/module/main.c:3531)
[ 111.259420][ T123] ? init_module_from_file (kernel/module/main.c:3523)
[ 111.260296][ T123] __do_sys_finit_module (include/linux/file.h:62 include/linux/file.h:83 kernel/module/main.c:3554)
[ 111.261141][ T123] __do_fast_syscall_32 (arch/x86/entry/common.c:165 arch/x86/entry/common.c:386)
[ 111.261992][ T123] do_fast_syscall_32 (arch/x86/entry/common.c:411)
[ 111.262816][ T123] entry_SYSENTER_compat_after_hwframe (arch/x86/entry/entry_64_compat.S:127)
[  111.263888][  T123] RIP: 0023:0xf7fb6579
[ 111.264657][ T123] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
All code
========
   0:	b8 01 10 06 03       	mov    $0x3061001,%eax
   5:	74 b4                	je     0xffffffffffffffbb
   7:	01 10                	add    %edx,(%rax)
   9:	07                   	(bad)
   a:	03 74 b0 01          	add    0x1(%rax,%rsi,4),%esi
   e:	10 08                	adc    %cl,(%rax)
  10:	03 74 d8 01          	add    0x1(%rax,%rbx,8),%esi
	...
  20:	00 51 52             	add    %dl,0x52(%rcx)
  23:	55                   	push   %rbp
  24:*	89 e5                	mov    %esp,%ebp		<-- trapping instruction
  26:	0f 34                	sysenter
  28:	cd 80                	int    $0x80
  2a:	5d                   	pop    %rbp
  2b:	5a                   	pop    %rdx
  2c:	59                   	pop    %rcx
  2d:	c3                   	ret
  2e:	90                   	nop
  2f:	90                   	nop
  30:	90                   	nop
  31:	90                   	nop
  32:	8d b4 26 00 00 00 00 	lea    0x0(%rsi,%riz,1),%esi
  39:	8d b4 26 00 00 00 00 	lea    0x0(%rsi,%riz,1),%esi

Code starting with the faulting instruction
===========================================
   0:	5d                   	pop    %rbp
   1:	5a                   	pop    %rdx
   2:	59                   	pop    %rcx
   3:	c3                   	ret
   4:	90                   	nop
   5:	90                   	nop
   6:	90                   	nop
   7:	90                   	nop
   8:	8d b4 26 00 00 00 00 	lea    0x0(%rsi,%riz,1),%esi
   f:	8d b4 26 00 00 00 00 	lea    0x0(%rsi,%riz,1),%esi


The kernel config and materials to reproduce are available at:
https://download.01.org/0day-ci/archive/20241230/202412301440.1888e8e1-lkp@intel.com



-- 
0-DAY CI Kernel Test Service
https://github.com/intel/lkp-tests/wiki


                 reply	other threads:[~2024-12-30  6:29 UTC|newest]

Thread overview: [no followups] expand[flat|nested]  mbox.gz  Atom feed

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=202412301440.1888e8e1-lkp@intel.com \
    --to=oliver.sang@intel.com \
    --cc=lkp@intel.com \
    --cc=oe-lkp@lists.linux.dev \
    --cc=rppt@kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.