linux-kernel - [lkp-robot] [fw_cfg] 05b5d5161b: WARNING:at_drivers/firmware/qemu_fw_cfg.c:#fw_cfg_dma

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date:   Thu, 16 Nov 2017 08:58:13 +0800
From:   kernel test robot <xiaolong.ye@...el.com>
To:     Marc-André Lureau <marcandre.lureau@...hat.com>
Cc:     "Michael S. Tsirkin" <mst@...hat.com>,
        Gabriel Somlo <somlo@....edu>,
        LKML <linux-kernel@...r.kernel.org>,
        Stephen Rothwell <sfr@...b.auug.org.au>, lkp@...org
Subject: [lkp-robot] [fw_cfg]  05b5d5161b:
 WARNING:at_drivers/firmware/qemu_fw_cfg.c:#fw_cfg_dma_transfer


FYI, we noticed the following commit (built with gcc-6):

commit: 05b5d5161b9e6c72e1d06f36614edbdbfe192cc7 ("fw_cfg: do DMA read operation")
https://git.kernel.org/cgit/linux/kernel/git/next/linux-next.git master

in testcase: boot

on test machine: qemu-system-x86_64 -enable-kvm -cpu host -smp 2 -m 4G

caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):


+----------------------------------------------------------------+------------+------------+
|                                                                | 102b01757e | 05b5d5161b |
+----------------------------------------------------------------+------------+------------+
| boot_successes                                                 | 0          | 0          |
| boot_failures                                                  | 12         | 12         |
| genirq:Flags_mismatch_irq##(ttyS0)vs.#(sir_ir)                 | 12         | 12         |
| WARNING:at_drivers/firmware/qemu_fw_cfg.c:#fw_cfg_dma_transfer | 0          | 8          |
| RIP:fw_cfg_dma_transfer                                        | 0          | 8          |
| WARNING:at_fs/sysfs/dir.c:#sysfs_warn_dup                      | 0          | 8          |
| RIP:sysfs_warn_dup                                             | 0          | 8          |
| WARNING:at_lib/kobject.c:#kobject_add_internal                 | 0          | 8          |
| RIP:kobject_add_internal                                       | 0          | 8          |
+----------------------------------------------------------------+------------+------------+



[  156.143041] WARNING: CPU: 0 PID: 1 at drivers/firmware/qemu_fw_cfg.c:163 fw_cfg_dma_transfer+0x55d/0x600
[  156.143041] CPU: 0 PID: 1 Comm: swapper Not tainted 4.14.0-00007-g05b5d51 #1
[  156.143041] task: ffff88013f02e000 task.stack: ffffc90000008000
[  156.143041] RIP: 0010:fw_cfg_dma_transfer+0x55d/0x600
[  156.143041] RSP: 0000:ffffc9000000bc08 EFLAGS: 00010202
[  156.143041] RAX: 000000000000001c RBX: ffff880116d761c8 RCX: 0000000000000000
[  156.143041] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000202
[  156.143041] RBP: 000000245ac7fec4 R08: 0000000000000001 R09: 0000000000000000
[  156.143041] R10: ffffc9000006be20 R11: 0000000099779f29 R12: 0000000000000004
[  156.143041] R13: 0000000000000004 R14: 00000000bbfdc000 R15: 0000000000000000
[  156.143041] FS:  0000000000000000(0000) GS:ffffffff83252000(0000) knlGS:0000000000000000
[  156.143041] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  156.143041] CR2: 0000000000000000 CR3: 0000000003215000 CR4: 00000000000006b0
[  156.143041] Call Trace:
[  156.143041]  ? fw_cfg_read_blob+0x192/0x2d0
[  156.143041]  ? fw_cfg_register_dir_entries+0xaa/0x560
[  156.143041]  ? fw_cfg_sysfs_probe+0x408/0x590
[  156.143041]  ? fw_cfg_sysfs_read_raw+0xa0/0xa0
[  156.143041]  ? platform_drv_probe+0x98/0x180
[  156.143041]  ? platform_drv_remove+0x70/0x70
[  156.143041]  ? really_probe+0x2ca/0x770
[  156.143041]  ? driver_probe_device+0x170/0x170
[  156.143041]  ? driver_probe_device+0xf8/0x170
[  156.143041]  ? driver_probe_device+0x170/0x170
[  156.143041]  ? __driver_attach+0x189/0x1f0
[  156.143041]  ? bus_for_each_dev+0xc3/0x140
[  156.143041]  ? driver_attach+0x26/0x30
[  156.143041]  ? bus_add_driver+0x1fd/0x420
[  156.143041]  ? firmware_map_add_early+0xef/0xef
[  156.143041]  ? driver_register+0x146/0x1c0
[  156.143041]  ? __platform_driver_register+0x42/0x50
[  156.143041]  ? fw_cfg_sysfs_init+0x85/0x104
[  156.143041]  ? firmware_map_add_early+0xef/0xef
[  156.143041]  ? do_one_initcall+0x132/0x339
[  156.143041]  ? kernel_init_freeable+0x269/0x425
[  156.143041]  ? rest_init+0x150/0x150
[  156.143041]  ? kernel_init+0x17/0x220
[  156.143041]  ? rest_init+0x150/0x150
[  156.143041]  ? rest_init+0x150/0x150
[  156.143041]  ? ret_from_fork+0x25/0x30
[  156.143041] Code: 48 c7 c6 a0 e2 ac 82 48 c7 c7 e1 33 15 83 48 83 05 10 e0 03 04 01 48 83 05 a0 e0 03 04 01 e8 b1 80 dd fe 48 83 05 a3 e0 03 04 01 <0f> ff 48 83 05 a1 e0 03 04 01 49 c7 c5 c2 ff ff ff e9 67 fe ff 
[  156.143041] ---[ end trace a9d40b19c3eadcfd ]---


To reproduce:

        git clone https://github.com/intel/lkp-tests.git
        cd lkp-tests
        bin/lkp qemu -k <bzImage> job-script  # job-script is attached in this email



Thanks,
Xiaolong

View attachment "config-4.14.0-00007-g05b5d51" of type "text/plain" (107494 bytes)

View attachment "job-script" of type "text/plain" (4240 bytes)

Download attachment "dmesg.xz" of type "application/x-xz" (154188 bytes)