arm64: Kernel crash at devm_kmalloc include/linux/device.h: drivers/base/devres.c

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Regression on arm64 FVP and rock-pi-4-b while booting the Linux next-20250312
and next-20250313. the following crash noticed with KVM Kconfigs.

First seen on next-20250312.
Good: next-20250311
Bad: 6.14.0-rc6-next-20250312 and 6.14.0-rc6-next-20250313

Boot regression: arm64 devm_kmalloc rk_iommu_of_xlate kernel panic
Reported-by: Linux Kernel Functional Testing <lkft@xxxxxxxxxx>

## Boot log
[    0.000000] Booting Linux on physical CPU 0x0000000000 [0x410fd034]
[    0.000000] Linux version 6.14.0-rc6-next-20250313
(tuxmake@tuxmake) (aarch64-linux-gnu-gcc (Debian 13.3.0-12) 13.3.0,
GNU ld (GNU Binutils for Debian) 2.44) #1 SMP PREEMPT @1741850074
[    0.000000] KASLR disabled due to lack of seed
[    0.000000] Machine model: Radxa ROCK Pi 4B
<trim>
[    1.028830] SuperH (H)SCI(F) driver initialized
[    1.030168] STM32 USART driver initialized
[    1.052086] Unable to handle kernel NULL pointer dereference at
virtual address 00000000000002a0
[    1.052877] Mem abort info:
[    1.053137]   ESR = 0x0000000096000004
[    1.053481]   EC = 0x25: DABT (current EL), IL = 32 bits
[    1.053960]   SET = 0, FnV = 0
[    1.054241]   EA = 0, S1PTW = 0
[    1.054530]   FSC = 0x04: level 0 translation fault
[    1.054971] Data abort info:
[    1.055236]   ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000
[    1.055760]   CM = 0, WnR = 0, TnD = 0, TagAccess = 0
[    1.056216]   GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0
[    1.056693] [00000000000002a0] user address but active_mm is swapper
[    1.057264] Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP
[    1.057821] Modules linked in:
[    1.058105] CPU: 4 UID: 0 PID: 1 Comm: swapper/0 Not tainted
6.14.0-rc6-next-20250313 #1
[    1.058823] Hardware name: Radxa ROCK Pi 4B (DT)
[    1.059236] pstate: 00000005 (nzcv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[    1.059854] pc : devm_kmalloc (include/linux/device.h:805
drivers/base/devres.c:853)
[    1.060225] lr : rk_iommu_of_xlate (drivers/iommu/rockchip-iommu.c:1152)
[    1.060614] sp : ffff80008306b7c0
[    1.060913] x29: ffff80008306b7c0 x28: ffff8000825a9068 x27: ffff80008225ce00
[    1.061560] x26: 0000000000000001 x25: ffff80008225e188 x24: ffff000000eafa80
[    1.062206] x23: 0000000000000000 x22: ffff800081af6a98 x21: 0000000000000000
[    1.062850] x20: 0000000000000010 x19: 0000000000000000 x18: 00000000ffffffff
[    1.063493] x17: ffff0000019abc00 x16: ffff000001985400 x15: ffff80008306b820
[    1.064136] x14: ffff000002736a1c x13: ffff00000273627c x12: 0101010101010101
[    1.064780] x11: 7f7f7f7f7f7f7f7f x10: 000000000016f8a0 x9 : ffff800080b65870
[    1.065424] x8 : ffff80008306b718 x7 : 0000000000000000 x6 : 0000000000000001
[    1.066066] x5 : ffff800082890000 x4 : ffff8000828905f0 x3 : 0000000000000000
[    1.066708] x2 : 0000000000000dc0 x1 : 0000000000000010 x0 : 0000000000000090
[    1.067351] Call trace:
[    1.067576] devm_kmalloc (include/linux/device.h:805
drivers/base/devres.c:853) (P)
[    1.067937] rk_iommu_of_xlate (drivers/iommu/rockchip-iommu.c:1152)
[    1.068295] of_iommu_xlate (drivers/iommu/of_iommu.c:39)
[    1.068629] of_iommu_configure (drivers/iommu/of_iommu.c:71
drivers/iommu/of_iommu.c:98 drivers/iommu/of_iommu.c:149)
[    1.069008] of_dma_configure_id (drivers/of/device.c:161)
[    1.069392] platform_dma_configure (drivers/base/platform.c:1455)
[    1.069796] __iommu_probe_device (drivers/iommu/iommu.c:430
drivers/iommu/iommu.c:569)
[    1.070194] probe_iommu_group (drivers/iommu/iommu.c:1722)
[    1.070553] bus_for_each_dev (drivers/base/bus.c:370)
[    1.070906] iommu_device_register (drivers/iommu/iommu.c:1875
drivers/iommu/iommu.c:276)
[    1.071304] rk_iommu_probe (drivers/iommu/rockchip-iommu.c:1263)
[    1.071652] platform_probe (drivers/base/platform.c:1404)
[    1.071986] really_probe (drivers/base/dd.c:579 drivers/base/dd.c:658)
[    1.072316] __driver_probe_device (drivers/base/dd.c:800)
[    1.072716] driver_probe_device (drivers/base/dd.c:830)
[    1.073100] __driver_attach (drivers/base/dd.c:1217)
[    1.073453] bus_for_each_dev (drivers/base/bus.c:370)
[    1.073805] driver_attach (drivers/base/dd.c:1235)
[    1.074135] bus_add_driver (drivers/base/bus.c:678)
[    1.074488] driver_register (drivers/base/driver.c:249)
[    1.074836] __platform_driver_register (drivers/base/platform.c:868)
[    1.075261] rk_iommu_driver_init (drivers/iommu/rockchip-iommu.c:1380)
[    1.075644] do_one_initcall (init/main.c:1257)
[    1.075996] kernel_init_freeable (init/main.c:1318 (discriminator
1) init/main.c:1335 (discriminator 1) init/main.c:1354 (discriminator
1) init/main.c:1567 (discriminator 1))
[    1.076393] kernel_init (init/main.c:1461)
[    1.076720] ret_from_fork (arch/arm64/kernel/entry.S:863)
[ 1.077053] Code: aa0003f5 b1020020 a90153f3 aa0103f4 (b942a2b7)
All code
========
   0: aa0003f5 mov x21, x0
   4: b1020020 adds x0, x1, #0x80
   8: a90153f3 stp x19, x20, [sp, #16]
   c: aa0103f4 mov x20, x1
  10:* b942a2b7 ldr w23, [x21, #672] <-- trapping instruction

Code starting with the faulting instruction
===========================================
   0: b942a2b7 ldr w23, [x21, #672]
[    1.077594] ---[ end trace 0000000000000000 ]---
[    1.078059] Kernel panic - not syncing: Attempted to kill init!
exitcode=0x0000000b
[    1.078736] SMP: stopping secondary CPUs
[    1.079099] Kernel Offset: disabled
[    1.079412] CPU features: 0x0400,00041058,01000400,8200421b
[    1.079909] Memory Limit: none
[    1.080188] ---[ end Kernel panic - not syncing: Attempted to kill
init! exitcode=0x0000000b ]---

## Source
* Kernel version:  6.14.0-rc6-next-20250313
* Git tree: https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git
* Git sha: 613af589b566093ce7388bf3202fca70d742c166
* Git describe:  6.14.0-rc6-next-20250313
* Project details:
https://qa-reports.linaro.org/lkft/linux-next-master/build/next-20250305/
* Architectures: arm64
* Compilers: gcc-13

## Test data
* Test log: https://qa-reports.linaro.org/lkft/linux-next-master/build/next-20250313/testrun/27611306/suite/boot/test/gcc-13-lkftconfig/log
* Test history:
https://qa-reports.linaro.org/lkft/linux-next-master/build/next-20250313/testrun/27611826/suite/boot/test/gcc-13-lkftconfig/history/
* Test details:
https://qa-reports.linaro.org/lkft/linux-next-master/build/next-20250313/testrun/27611306/suite/boot/test/gcc-13-lkftconfig/
* Build link: https://storage.tuxsuite.com/public/linaro/lkft/builds/2uFgT27J8KGNrdNXzKgUzhFI3YX/
* Kernel config:
https://storage.tuxsuite.com/public/linaro/lkft/builds/2uFgT27J8KGNrdNXzKgUzhFI3YX/config


--
Linaro LKFT
https://lkft.linaro.org




[Index of Archives]     [Linux Wireless]     [Linux Kernel]     [ATH6KL]     [Linux Bluetooth]     [Linux Netdev]     [Kernel Newbies]     [Share Photos]     [IDE]     [Security]     [Git]     [Netfilter]     [Bugtraq]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Linux ATA RAID]     [Samba]     [Device Mapper]

  Powered by Linux