lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <202302211644.c12d19de-yujie.liu@intel.com>
Date:   Wed, 22 Feb 2023 00:56:26 +0800
From:   kernel test robot <yujie.liu@...el.com>
To:     Oleksij Rempel <o.rempel@...gutronix.de>
CC:     <oe-lkp@...ts.linux.dev>, <lkp@...el.com>,
        Linux Memory Management List <linux-mm@...ck.org>,
        "David S. Miller" <davem@...emloft.net>,
        Andrew Lunn <andrew@...n.ch>, <netdev@...r.kernel.org>
Subject: [linux-next:master] [net] 9b01c885be:
 WARNING:at_drivers/net/phy/phy.c:#phy_state_machine

Greeting,

FYI, we noticed WARNING:at_drivers/net/phy/phy.c:#phy_state_machine due to commit (built with clang-14):

commit: 9b01c885be364526d8c05794f8358b3e563b7ff8 ("net: phy: c22: migrate to genphy_c45_write_eee_adv()")
https://git.kernel.org/cgit/linux/kernel/git/next/linux-next.git master

[test failed on linux-next/master d2af0fa4bfa4ec29d03b449ccd43fee39501112d]

in testcase: trinity
version: 
with following parameters:

	runtime: 300s
	group: group-04

test-description: Trinity is a linux system call fuzz tester.
test-url: http://codemonkey.org.uk/projects/trinity/

on test machine: qemu-system-x86_64 -enable-kvm -cpu SandyBridge -smp 2 -m 16G

caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):


+-----------------------------------------------------------------+------------+------------+
|                                                                 | 022c3f87f8 | 9b01c885be |
+-----------------------------------------------------------------+------------+------------+
| WARNING:at_drivers/net/phy/phy.c:#phy_state_machine             | 0          | 46         |
| EIP:phy_state_machine                                           | 0          | 46         |
| calltrace:do_softirq_own_stack                                  | 0          | 45         |
| WARNING:at_drivers/net/phy/phy.c:#phy_stop                      | 0          | 46         |
| EIP:phy_stop                                                    | 0          | 46         |
+-----------------------------------------------------------------+------------+------------+


[   24.211773][   T32] ------------[ cut here ]------------
[ 24.212462][ T32] WARNING: CPU: 1 PID: 32 at drivers/net/phy/phy.c:1168 phy_state_machine (??:?) 
[   24.213562][   T32] Modules linked in:
[   24.214050][   T32] CPU: 1 PID: 32 Comm: kworker/1:2 Tainted: G        W          6.2.0-rc7-01623-g9b01c885be36 #1 40addfa090b1209d5e5f69c68ec2db2dfac7322f
[   24.215673][   T12] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
[   24.219286][   T32] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.0-debian-1.16.0-5 04/01/2014
[   24.221639][   T32] Workqueue: events_power_efficient phy_state_machine
[ 24.222580][ T32] EIP: phy_state_machine (??:?) 
[ 24.223427][ T32] Code: 29 26 c4 01 eb 71 83 05 ac 29 26 c4 01 b8 88 31 10 c4 ba 01 00 00 00 31 c9 6a 01 e8 55 e6 6b ff 83 c4 04 83 05 34 29 26 c4 01 <0f> 0b b8 a0 31 10 c4 ba 01 00 00 00 31 c9 6a 01 e8 36 e6 6b ff 83
All code
========
   0:	29 26                	sub    %esp,(%rsi)
   2:	c4 01 eb 71          	(bad)  
   6:	83 05 ac 29 26 c4 01 	addl   $0x1,-0x3bd9d654(%rip)        # 0xffffffffc42629b9
   d:	b8 88 31 10 c4       	mov    $0xc4103188,%eax
  12:	ba 01 00 00 00       	mov    $0x1,%edx
  17:	31 c9                	xor    %ecx,%ecx
  19:	6a 01                	pushq  $0x1
  1b:	e8 55 e6 6b ff       	callq  0xffffffffff6be675
  20:	83 c4 04             	add    $0x4,%esp
  23:	83 05 34 29 26 c4 01 	addl   $0x1,-0x3bd9d6cc(%rip)        # 0xffffffffc426295e
  2a:*	0f 0b                	ud2    		<-- trapping instruction
  2c:	b8 a0 31 10 c4       	mov    $0xc41031a0,%eax
  31:	ba 01 00 00 00       	mov    $0x1,%edx
  36:	31 c9                	xor    %ecx,%ecx
  38:	6a 01                	pushq  $0x1
  3a:	e8 36 e6 6b ff       	callq  0xffffffffff6be675
  3f:	83                   	.byte 0x83

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2    
   2:	b8 a0 31 10 c4       	mov    $0xc41031a0,%eax
   7:	ba 01 00 00 00       	mov    $0x1,%edx
   c:	31 c9                	xor    %ecx,%ecx
   e:	6a 01                	pushq  $0x1
  10:	e8 36 e6 6b ff       	callq  0xffffffffff6be64b
  15:	83                   	.byte 0x83
[   24.223568][    T1] dsa-loop fixed-0:1f lan2: configuring for phy/gmii link mode
[   24.225718][   T32] EAX: c4103194 EBX: edd2e41c ECX: 00000000 EDX: 00000000
[   24.231643][   T32] ESI: edd2e000 EDI: ffffffff EBP: c0cf1f10 ESP: c0cf1eec
[   24.231656][   T32] DS: 007b ES: 007b FS: 00d8 GS: 0000 SS: 0068 EFLAGS: 00010202
[   24.233216][   T32] CR0: 80050033 CR2: 00000000 CR3: 04551000 CR4: 000406d0
[   24.235302][   T32] DR0: 00000000 DR1: 00000000 DR2: 00000000 DR3: 00000000
[   24.235312][   T32] DR6: fffe0ff0 DR7: 00000400
[   24.236711][   T32] Call Trace:
[ 24.236729][ T32] process_one_work (workqueue.c:?) 
[ 24.238195][ T32] worker_thread (workqueue.c:?) 
[ 24.240453][ T32] ? rcu_lock_release (main.c:?) 
All code
========
   0:	29 26                	sub    %esp,(%rsi)
   2:	c4 01 eb 71          	(bad)  
   6:	83 05 ac 29 26 c4 01 	addl   $0x1,-0x3bd9d654(%rip)        # 0xffffffffc42629b9
   d:	b8 88 31 10 c4       	mov    $0xc4103188,%eax
  12:	ba 01 00 00 00       	mov    $0x1,%edx
  17:	31 c9                	xor    %ecx,%ecx
  19:	6a 01                	pushq  $0x1
  1b:	e8 55 e6 6b ff       	callq  0xffffffffff6be675
  20:	83 c4 04             	add    $0x4,%esp
  23:	83 05 34 29 26 c4 01 	addl   $0x1,-0x3bd9d6cc(%rip)        # 0xffffffffc426295e
  2a:*	0f 0b                	ud2    		<-- trapping instruction
  2c:	b8 a0 31 10 c4       	mov    $0xc41031a0,%eax
  31:	ba 01 00 00 00       	mov    $0x1,%edx
  36:	31 c9                	xor    %ecx,%ecx
  38:	6a 01                	pushq  $0x1
  3a:	e8 36 e6 6b ff       	callq  0xffffffffff6be675
  3f:	83                   	.byte 0x83

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2    
   2:	b8 a0 31 10 c4       	mov    $0xc41031a0,%eax
   7:	ba 01 00 00 00       	mov    $0x1,%edx
   c:	31 c9                	xor    %ecx,%ecx
   e:	6a 01                	pushq  $0x1
  10:	e8 36 e6 6b ff       	callq  0xffffffffff6be64b
  15:	83                   	.byte 0x83
[ 24.242250][ T32] kthread (kthread.c:?) 
[ 24.243638][ T32] ? rcu_lock_release (main.c:?) 
[ 24.243654][ T32] ? kthread_unuse_mm (kthread.c:?) 
[ 24.243661][ T32] ret_from_fork (??:?) 
[   24.243683][   T32] irq event stamp: 255
[ 24.243686][ T32] hardirqs last enabled at (261): console_trylock_spinning (printk.c:?) 
[ 24.243696][ T32] hardirqs last disabled at (266): console_trylock_spinning (printk.c:?) 
[ 24.243702][ T32] softirqs last enabled at (216): __do_softirq (??:?) 
[ 24.243710][ T32] softirqs last disabled at (209): do_softirq_own_stack (??:?) 
[   24.243719][   T32] ---[ end trace 0000000000000000 ]---


If you fix the issue, kindly add following tag
| Reported-by: kernel test robot <yujie.liu@...el.com>
| Link: https://lore.kernel.org/oe-lkp/202302211644.c12d19de-yujie.liu@intel.com


To reproduce:

        # build kernel
	cd linux
	cp config-6.2.0-rc7-01623-g9b01c885be36 .config
	make HOSTCC=clang-14 CC=clang-14 ARCH=i386 olddefconfig prepare modules_prepare bzImage modules
	make HOSTCC=clang-14 CC=clang-14 ARCH=i386 INSTALL_MOD_PATH=<mod-install-dir> modules_install
	cd <mod-install-dir>
	find lib/ | cpio -o -H newc --quiet | gzip > modules.cgz


        git clone https://github.com/intel/lkp-tests.git
        cd lkp-tests
        bin/lkp qemu -k <bzImage> -m modules.cgz job-script # job-script is attached in this email

        # if come across any failure that blocks the test,
        # please remove ~/.lkp and /lkp dir to run from a clean state.


-- 
0-DAY CI Kernel Test Service
https://github.com/intel/lkp-tests

View attachment "config-6.2.0-rc7-01623-g9b01c885be36" of type "text/plain" (130464 bytes)

View attachment "job-script" of type "text/plain" (4731 bytes)

Download attachment "dmesg.xz" of type "application/x-xz" (46464 bytes)

View attachment "trinity" of type "text/plain" (107 bytes)

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ