Description zhixin01 2025-03-14 16:01:00 UTC

[缺陷描述]：
在6.6.71-3.64k_rc2.al8.aarch64内核上，kernel-selftests测试套exec.load_address_4096用例执行失败，报段错误
在6.6.71-3_rc2.al8.aarch64内核上用例执行成功
 
测试日志：
#./load_address_4096
Segmentation fault

[重现概率]：
必现

[重现环境]：
环境信息：倚天710机器
11.163.178.238

#uname -r
6.6.71-3.64k_rc2.al8.aarch64

#cat /etc/os-release
NAME="Alibaba Cloud Linux"
VERSION="3 (Soaring Falcon)"
ID="alinux"
ID_LIKE="rhel fedora centos anolis"
VERSION_ID="3"
UPDATE_ID="10"
PLATFORM_ID="platform:al8"
PRETTY_NAME="Alibaba Cloud Linux 3 (Soaring Falcon)"
ANSI_COLOR="0;31"
HOME_URL="https://www.aliyun.com/"

#lscpu
Architecture:        aarch64
Byte Order:          Little Endian
CPU(s):              128
On-line CPU(s) list: 0-127
Thread(s) per core:  1
Core(s) per socket:  128
Socket(s):           1
NUMA node(s):        2
Vendor ID:           ARM
BIOS Vendor ID:      T-HEAD
Model:               0
Model name:          Neoverse-N2
BIOS Model name:     Yitian710-128
Stepping:            r0p0
CPU MHz:             2750.000
BogoMIPS:            100.00
Hypervisor vendor:   Alibaba
Virtualization type: full
L1d cache:           64K
L1i cache:           64K
L2 cache:            1024K
L3 cache:            65536K
NUMA node0 CPU(s):   0-63
NUMA node1 CPU(s):   64-127
Flags:               fp asimd evtstrm aes pmull sha1 sha2 crc32 atomics fphp asimdhp cpuid asimdrdm jscvt fcma lrcpc dcpop sha3 sm3 sm4 asimddp sha512 sve asimdfhm dit uscat ilrcpc flagm sb dcpodp sve2 sveaes svepmull svebitperm svesha3 svesm4 flagm2 frint svei8mm svebf16 i8mm bf16 dgh

#free -h
              total        used        free      shared  buff/cache   available
Mem:          127Gi        17Gi        81Gi       3.3Gi        28Gi        86Gi
Swap:            0B          0B          0B

#cat /proc/cmdline
BOOT_IMAGE=(hd0,gpt2)/boot/vmlinuz-6.6.71-3.64k_rc2.al8.aarch64 root=UUID=7b354d7d-d8b2-4768-b838-731ccf1256f3 ro console=tty0 biosdevname=0 console=ttyS0,115200 rd.driver.pre=ahci cgroup.memory=nokmem crashkernel=0M-2G:0M,2G-64G:256M,64G-:384M iommu.passthrough=1 iommu.strict=0 nospectre_bhb ssbd=force-off transparent_hugepage_tmpfs=always thp_shmem=64K:always thp_anon=64K:always thp_file=8K-2M:always thp_file=2M:always+exec

#gcc --version
gcc (GCC) 12.3.0 20230508 (Red Hat 12.3.0-1)
Copyright (C) 2022 Free Software Foundation, Inc.
This is free software; see the source for copying conditions.  There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

[重现步骤]：
# 下载并编译用例
wget 内核对应src.rpm包（从这里获取https://koji.alibaba-inc.com/taskinfo?taskID=732927）
rpm -ivh xxx.src.rpm 默认安装到/root下
yum install yum-utils
yum-builddep -y /root/rpmbuild/SPECS/kernel.spec 自动安装前置依赖包 需要yum-utils
rpmbuild -bp /root/rpmbuild/SPECS/kernel.spec # 这个步骤会打相关的patch， 解压缩tar包，生成BUILD目录
cd /root/rpmbuild/BUILD/kernel-*/linux-*
make -C tools/testing/selftests/
cd /root/rpmbuild/BUILD/kernel-*/linux-*/tools/testing/selftests/exec

执行用例
./load_address_4096

[期望结果]：
用例执行pass

[实际结果]：
用例执行fail

[分析]
strace跟踪如下：
#strace ./load_address_4096
execve("./load_address_4096", ["./load_address_4096"], 0xffffcb53eba0 /* 55 vars */) = -1 EINVAL (Invalid argument)
+++ killed by SIGSEGV +++
Segmentation fault (core dumped)