Messages in this thread | | | From | Dmitry Vyukov <> | Date | Thu, 11 Mar 2021 12:38:21 +0100 | Subject | arm64 syzbot instances |
| |
Hi arm64 maintainers,
We now have some syzbot instances testing arm64 (woohoo!) using qemu emulation. I wanted to write up the current status.
There are 3 instances, first uses KASAN: https://syzkaller.appspot.com/upstream?manager=ci-qemu2-arm64 second KASAN and 32-bit userspace test load (compat): https://syzkaller.appspot.com/upstream?manager=ci-qemu2-arm64-compat third uses MTE/KASAN_HWTAGS: https://syzkaller.appspot.com/upstream?manager=ci-qemu2-arm64-mte
Kernel configs: https://github.com/google/syzkaller/blob/master/dashboard/config/linux/upstream-arm64-kasan.config https://github.com/google/syzkaller/blob/master/dashboard/config/linux/upstream-arm64-mte.config
The instances have KCOV disabled because it slows down execution too much (KASAN in qemu emulation is already extremely slow), so no coverage guidance and coverage reports for now :(
The instances found few arm64-specific issues that we have not observed on other instances: https://syzkaller.appspot.com/bug?id=1d22a2cc3521d5cf6b41bd6b825793c2015f861f https://syzkaller.appspot.com/bug?id=bb2c16b0e13b4de4bbf22cf6a4b9b16fb0c20eea https://syzkaller.appspot.com/bug?id=b75386f45318ec181b7f49260d619fac9877d456 https://syzkaller.appspot.com/bug?id=5a1bc29bca656159f95c7c8bb30e3776ca860332 but mostly re-discovering known bugs we already found on x86.
The instances use qemu emulation and lots of debug configs, so they are quite slow and it makes sense to target them at arm64-specific parts of the kernel as much as possible (rather than stress generic subsystems that are already stressed on x86). So the question is: what arm64-specific parts are there that we can reach in qemu? Can you think of any qemu flags (cpu features, device emulation, etc)? Any kernel subsystems with heavy arm-specific parts that we may be missing? Testing some of the arm64 drivers that qemu can emulate may be the most profitable thing. Currently the instances use the following flags: -machine virt,virtualization=on,graphics=on,usb=on -cpu cortex-a57 -machine virt,virtualization=on,mte=on,graphics=on,usb=on -cpu max
mte=on + virtualization=on is broken in the kernel on in the qemu: https://lore.kernel.org/lkml/CAAeHK+wDz8aSLyjq1b=q3+HG9aJXxwYR6+gN_fTttMN5osM5gg@mail.gmail.com/
| |