Hello,

kernel test robot noticed "segfault_at_ip_sp_error" on:

commit: c849d8e404a7b145b33c184042234e903ce72c7c ("[PATCH v2] selftests: 
harness: Support KCOV.")
url: 
https://github.com/intel-lab-lkp/linux/commits/Kuniyuki-Iwashima/selftests-harness-Support-KCOV/20251028-104538
base: https://git.kernel.org/cgit/linux/kernel/git/shuah/linux-kselftest.git 
next
patch link: 
https://lore.kernel.org/all/[email protected]/
patch subject: [PATCH v2] selftests: harness: Support KCOV.

in testcase: kernel-selftests
version: kernel-selftests-x86_64-8bb886cb8f3a-1_20251104
with following parameters:

        group: syscall_user_dispatch



config: x86_64-rhel-9.4-kselftests
compiler: gcc-14
test machine: 36 threads 1 sockets Intel(R) Core(TM) i9-9980XE CPU @ 3.00GHz 
(Skylake) with 32G memory

(please refer to attached dmesg/kmsg for entire log/backtrace)



If you fix the issue in a separate patch/commit (i.e. not just a new version of
the same patch/commit), kindly add following tags
| Reported-by: kernel test robot <[email protected]>
| Closes: https://lore.kernel.org/oe-lkp/[email protected]




kern  :info  : [   72.507647] [   T2520] sud_test[2520]: segfault at 0 ip 
0000558da6f1242c sp 00007fffd6f2faf0 error 4 in 
sud_test[342c,558da6f11000+5000] likely on CPU 23 (core 8, socket 0)
kern  :info  : [   72.508965] [   T2520] Code: 48 89 e5 48 83 ec 70 48 89 7d 98 
48 89 75 90 48 8b 45 98 8b 40 70 83 f8 ff 0f 84 36 02 00 00 48 8b 45 98 48 8b 
80 80 00 00 00 <48> 8b 00 89 45 f4 48 8b 45 98 8b 40 74 83 e8 01 39 45 f4 75 1d 
48
All code
========
   0:   48 89 e5                mov    %rsp,%rbp
   3:   48 83 ec 70             sub    $0x70,%rsp
   7:   48 89 7d 98             mov    %rdi,-0x68(%rbp)
   b:   48 89 75 90             mov    %rsi,-0x70(%rbp)
   f:   48 8b 45 98             mov    -0x68(%rbp),%rax
  13:   8b 40 70                mov    0x70(%rax),%eax
  16:   83 f8 ff                cmp    $0xffffffff,%eax
  19:   0f 84 36 02 00 00       je     0x255
  1f:   48 8b 45 98             mov    -0x68(%rbp),%rax
  23:   48 8b 80 80 00 00 00    mov    0x80(%rax),%rax
  2a:*  48 8b 00                mov    (%rax),%rax              <-- trapping 
instruction
  2d:   89 45 f4                mov    %eax,-0xc(%rbp)
  30:   48 8b 45 98             mov    -0x68(%rbp),%rax
  34:   8b 40 74                mov    0x74(%rax),%eax
  37:   83 e8 01                sub    $0x1,%eax
  3a:   39 45 f4                cmp    %eax,-0xc(%rbp)
  3d:   75 1d                   jne    0x5c
  3f:   48                      rex.W

Code starting with the faulting instruction
===========================================
   0:   48 8b 00                mov    (%rax),%rax
   3:   89 45 f4                mov    %eax,-0xc(%rbp)
   6:   48 8b 45 98             mov    -0x68(%rbp),%rax
   a:   8b 40 74                mov    0x74(%rax),%eax
   d:   83 e8 01                sub    $0x1,%eax
  10:   39 45 f4                cmp    %eax,-0xc(%rbp)
  13:   75 1d                   jne    0x32
  15:   48                      rex.W
kern  :info  : [   72.511780] [   T2521] sud_test[2521]: segfault at 0 ip 
0000558da6f1242c sp 00007fffd6f2faf0 error 4 in 
sud_test[342c,558da6f11000+5000] likely on CPU 23 (core 8, socket 0)
kern  :info  : [   72.513080] [   T2521] Code: 48 89 e5 48 83 ec 70 48 89 7d 98 
48 89 75 90 48 8b 45 98 8b 40 70 83 f8 ff 0f 84 36 02 00 00 48 8b 45 98 48 8b 
80 80 00 00 00 <48> 8b 00 89 45 f4 48 8b 45 98 8b 40 74 83 e8 01 39 45 f4 75 1d 
48
All code
========
   0:   48 89 e5                mov    %rsp,%rbp
   3:   48 83 ec 70             sub    $0x70,%rsp
   7:   48 89 7d 98             mov    %rdi,-0x68(%rbp)
   b:   48 89 75 90             mov    %rsi,-0x70(%rbp)
   f:   48 8b 45 98             mov    -0x68(%rbp),%rax
  13:   8b 40 70                mov    0x70(%rax),%eax
  16:   83 f8 ff                cmp    $0xffffffff,%eax
  19:   0f 84 36 02 00 00       je     0x255
  1f:   48 8b 45 98             mov    -0x68(%rbp),%rax
  23:   48 8b 80 80 00 00 00    mov    0x80(%rax),%rax
  2a:*  48 8b 00                mov    (%rax),%rax              <-- trapping 
instruction
  2d:   89 45 f4                mov    %eax,-0xc(%rbp)
  30:   48 8b 45 98             mov    -0x68(%rbp),%rax
  34:   8b 40 74                mov    0x74(%rax),%eax
  37:   83 e8 01                sub    $0x1,%eax
  3a:   39 45 f4                cmp    %eax,-0xc(%rbp)
  3d:   75 1d                   jne    0x5c
  3f:   48                      rex.W

Code starting with the faulting instruction
===========================================
   0:   48 8b 00                mov    (%rax),%rax
   3:   89 45 f4                mov    %eax,-0xc(%rbp)
   6:   48 8b 45 98             mov    -0x68(%rbp),%rax
   a:   8b 40 74                mov    0x74(%rax),%eax
   d:   83 e8 01                sub    $0x1,%eax
  10:   39 45 f4                cmp    %eax,-0xc(%rbp)
  13:   75 1d                   jne    0x32
  15:   48                      rex.W
user  :notice: [   72.516773] [    T622] update-alternatives: warning: skip 
creation of /usr/share/man/man1/traceroute6.1.gz because associated file 
/usr/share/man/man1/traceroute6.db.1.gz (of link group traceroute6) doesn't 
exist

kern  :info  : [   72.517057] [   T2523] sud_test[2523]: segfault at 0 ip 
0000558da6f1242c sp 00007fffd6f2faf0 error 4 in 
sud_test[342c,558da6f11000+5000] likely on CPU 27 (core 16, socket 0)
kern  :info  : [   72.519874] [   T2523] Code: 48 89 e5 48 83 ec 70 48 89 7d 98 
48 89 75 90 48 8b 45 98 8b 40 70 83 f8 ff 0f 84 36 02 00 00 48 8b 45 98 48 8b 
80 80 00 00 00 <48> 8b 00 89 45 f4 48 8b 45 98 8b 40 74 83 e8 01 39 45 f4 75 1d 
48
All code
========
   0:   48 89 e5                mov    %rsp,%rbp
   3:   48 83 ec 70             sub    $0x70,%rsp
   7:   48 89 7d 98             mov    %rdi,-0x68(%rbp)
   b:   48 89 75 90             mov    %rsi,-0x70(%rbp)
   f:   48 8b 45 98             mov    -0x68(%rbp),%rax
  13:   8b 40 70                mov    0x70(%rax),%eax
  16:   83 f8 ff                cmp    $0xffffffff,%eax
  19:   0f 84 36 02 00 00       je     0x255
  1f:   48 8b 45 98             mov    -0x68(%rbp),%rax
  23:   48 8b 80 80 00 00 00    mov    0x80(%rax),%rax
  2a:*  48 8b 00                mov    (%rax),%rax              <-- trapping 
instruction
  2d:   89 45 f4                mov    %eax,-0xc(%rbp)
  30:   48 8b 45 98             mov    -0x68(%rbp),%rax
  34:   8b 40 74                mov    0x74(%rax),%eax
  37:   83 e8 01                sub    $0x1,%eax
  3a:   39 45 f4                cmp    %eax,-0xc(%rbp)
  3d:   75 1d                   jne    0x5c
  3f:   48                      rex.W

Code starting with the faulting instruction
===========================================
   0:   48 8b 00                mov    (%rax),%rax
   3:   89 45 f4                mov    %eax,-0xc(%rbp)
   6:   48 8b 45 98             mov    -0x68(%rbp),%rax
   a:   8b 40 74                mov    0x74(%rax),%eax
   d:   83 e8 01                sub    $0x1,%eax
  10:   39 45 f4                cmp    %eax,-0xc(%rbp)
  13:   75 1d                   jne    0x32
  15:   48                      rex.W
user  :notice: [   72.521352] [    T622] update-alternatives: warning: skip 
creation of /usr/share/man/man1/lft.1.gz because associated file 
/usr/share/man/man1/lft.db.1.gz (of link group lft) doesn't exist

kern  :info  : [   72.522679] [   T2524] sud_test[2524]: segfault at 0 ip 
0000558da6f1242c sp 00007fffd6f2faf0 error 4 in 
sud_test[342c,558da6f11000+5000] likely on CPU 23 (core 8, socket 0)
kern  :info  : [   72.524467] [   T2524] Code: 48 89 e5 48 83 ec 70 48 89 7d 98 
48 89 75 90 48 8b 45 98 8b 40 70 83 f8 ff 0f 84 36 02 00 00 48 8b 45 98 48 8b 
80 80 00 00 00 <48> 8b 00 89 45 f4 48 8b 45 98 8b 40 74 83 e8 01 39 45 f4 75 1d 
48
All code
========
   0:   48 89 e5                mov    %rsp,%rbp
   3:   48 83 ec 70             sub    $0x70,%rsp
   7:   48 89 7d 98             mov    %rdi,-0x68(%rbp)
   b:   48 89 75 90             mov    %rsi,-0x70(%rbp)
   f:   48 8b 45 98             mov    -0x68(%rbp),%rax
  13:   8b 40 70                mov    0x70(%rax),%eax
  16:   83 f8 ff                cmp    $0xffffffff,%eax
  19:   0f 84 36 02 00 00       je     0x255
  1f:   48 8b 45 98             mov    -0x68(%rbp),%rax
  23:   48 8b 80 80 00 00 00    mov    0x80(%rax),%rax
  2a:*  48 8b 00                mov    (%rax),%rax              <-- trapping 
instruction
  2d:   89 45 f4                mov    %eax,-0xc(%rbp)
  30:   48 8b 45 98             mov    -0x68(%rbp),%rax
  34:   8b 40 74                mov    0x74(%rax),%eax
  37:   83 e8 01                sub    $0x1,%eax
  3a:   39 45 f4                cmp    %eax,-0xc(%rbp)
  3d:   75 1d                   jne    0x5c
  3f:   48                      rex.W

Code starting with the faulting instruction
===========================================
   0:   48 8b 00                mov    (%rax),%rax
   3:   89 45 f4                mov    %eax,-0xc(%rbp)
   6:   48 8b 45 98             mov    -0x68(%rbp),%rax
   a:   8b 40 74                mov    0x74(%rax),%eax
   d:   83 e8 01                sub    $0x1,%eax
  10:   39 45 f4                cmp    %eax,-0xc(%rbp)
  13:   75 1d                   jne    0x32
  15:   48                      rex.W
user  :notice: [   72.526246] [    T622] update-alternatives: warning: skip 
creation of /usr/share/man/man1/traceproto.1.gz because associated file 
/usr/share/man/man1/traceproto.db.1.gz (of link group traceproto) doesn't exist

kern  :info  : [   72.529475] [   T2525] sud_test[2525]: segfault at 0 ip 
0000558da6f1242c sp 00007fffd6f2faf0 error 4 in 
sud_test[342c,558da6f11000+5000] likely on CPU 16 (core 26, socket 0)
kern  :info  : [   72.530789] [   T2525] Code: 48 89 e5 48 83 ec 70 48 89 7d 98 
48 89 75 90 48 8b 45 98 8b 40 70 83 f8 ff 0f 84 36 02 00 00 48 8b 45 98 48 8b 
80 80 00 00 00 <48> 8b 00 89 45 f4 48 8b 45 98 8b 40 74 83 e8 01 39 45 f4 75 1d 
48
All code
========
   0:   48 89 e5                mov    %rsp,%rbp
   3:   48 83 ec 70             sub    $0x70,%rsp
   7:   48 89 7d 98             mov    %rdi,-0x68(%rbp)
   b:   48 89 75 90             mov    %rsi,-0x70(%rbp)
   f:   48 8b 45 98             mov    -0x68(%rbp),%rax
  13:   8b 40 70                mov    0x70(%rax),%eax
  16:   83 f8 ff                cmp    $0xffffffff,%eax
  19:   0f 84 36 02 00 00       je     0x255
  1f:   48 8b 45 98             mov    -0x68(%rbp),%rax
  23:   48 8b 80 80 00 00 00    mov    0x80(%rax),%rax
  2a:*  48 8b 00                mov    (%rax),%rax              <-- trapping 
instruction
  2d:   89 45 f4                mov    %eax,-0xc(%rbp)
  30:   48 8b 45 98             mov    -0x68(%rbp),%rax
  34:   8b 40 74                mov    0x74(%rax),%eax
  37:   83 e8 01                sub    $0x1,%eax
  3a:   39 45 f4                cmp    %eax,-0xc(%rbp)
  3d:   75 1d                   jne    0x5c
  3f:   48                      rex.W

Code starting with the faulting instruction
===========================================
   0:   48 8b 00                mov    (%rax),%rax
   3:   89 45 f4                mov    %eax,-0xc(%rbp)
   6:   48 8b 45 98             mov    -0x68(%rbp),%rax
   a:   8b 40 74                mov    0x74(%rax),%eax
   d:   83 e8 01                sub    $0x1,%eax
  10:   39 45 f4                cmp    %eax,-0xc(%rbp)
  13:   75 1d                   jne    0x32
  15:   48                      rex.W


The kernel config and materials to reproduce are available at:
https://download.01.org/0day-ci/archive/20251106/[email protected]



-- 
0-DAY CI Kernel Test Service
https://github.com/intel/lkp-tests/wiki


Reply via email to