Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20;
From:   Stephen Brennan <stephen.s.brennan@oracle.com>
To:     Baoquan He <bhe@redhat.com>
Cc:     linux-kernel@vger.kernel.org, kexec@lists.infradead.org,
        Nick Desaulniers <ndesaulniers@google.com>,
        Dave Young <dyoung@redhat.com>,
        Kees Cook <keescook@chromium.org>,
        Stephen Brennan <stephen.s.brennan@oracle.com>,
        Jiri Olsa <jolsa@kernel.org>,
        Stephen Boyd <swboyd@chromium.org>,
        Bixuan Cui <cuibixuan@huawei.com>,
        David Vernet <void@manifault.com>,
        Vivek Goyal <vgoyal@redhat.com>,
        Sami Tolvanen <samitolvanen@google.com>
Subject: [PATCH 0/2] Expose kallsyms data in vmcoreinfo note
Date:   Mon, 16 May 2022 17:05:06 -0700
Message-Id: <20220517000508.777145-1-stephen.s.brennan@oracle.com>
Content-Transfer-Encoding: 8bit
Content-Type: text/plain
MIME-Version: 1.0
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?oKHEWosWBkSbMDRrO9oONiBEuX42tjDrTI8fzjNFK+BYuJumtw2vW2KarNH9?=
 =?us-ascii?Q?hFiG5aT5/i+3gvRx1cg4wTmSMLy/xV9nLrmn7mdAtaSTDsIvyN7t3CYmIV6S?=
 =?us-ascii?Q?xwUrtYLBp1w5Od4W0rPQD69/iotRKuw8j3kvn8OLpzR8QuvwBsqXJ9RY5kta?=
 =?us-ascii?Q?334cldXaXBvKU3Kx/wqba/7V6wfKV3JWBVHpL0B2k/iXtI+//w4WfHN0vMeg?=
 =?us-ascii?Q?ZjghVZN0BNVS3h9y4og5N+I+6jYYlwhAf6M1hFWi0EWnrFDHbrUl4SfN5ZQg?=
 =?us-ascii?Q?jwZR2sqHp3ZpvDNtT6YoRgmRbJ/JNOHVTpHKa0o0nh1vMK9/Fn+GLGLM0jnV?=
 =?us-ascii?Q?ejxlA7EcCOzQyi8wMqXa2PhqhWrFQyeZGo/sEz6bNWJVQ0gITe1T9FsFKPxC?=
 =?us-ascii?Q?KNp3bPcKrB5gIVEjDpGLn1N3SZyJFGO2qQMPmnG+j7jRIFUkZVkniT/l4T2C?=
 =?us-ascii?Q?2uFaL9zNykl+UImQh8qhJMVGEjFUoUDVpXATvE2orjhuzdEKMKwfQTTRDKSW?=
 =?us-ascii?Q?j2ZGILhpqAFdxB5EKL9Yrq7nZEOIkqXpc1n0W9Ac7CqFBvcg+cavaJdMI6Rs?=
 =?us-ascii?Q?fmwLWmkoRc+Nj+YulvEymFGsSmL1kdv67bU5nD08Eqr1+0DQXBtKW7zySZII?=
 =?us-ascii?Q?aJhFb8ENwMFuKmlcUsnD1f23TTOp8jEU+CdYesPU+mIyN5xMO7HpJX+KKdb8?=
 =?us-ascii?Q?55JflgRDmYJ2HY0Xm3b6n3a333iFjXZonUuPqpyRCOkLpqI/J3dK3IVZ5yWX?=
 =?us-ascii?Q?N4g2k3PHkW18bIPaNLAYBSy8CwxJir4ZqCjvTF3dugNOfnuw16us/7yFDA9/?=
 =?us-ascii?Q?ZL+PUgZdR2INE1tPJJ1KG2duaVb+OeT2ZWwf+9qtfVTNnhRQR4h1U0tmLc1w?=
 =?us-ascii?Q?Q++It+RcMdFHco1uYkAjAJNi8nfRSfsE3AEKLdibdyqCKxLpy/TZb5y9sr+c?=
 =?us-ascii?Q?0c+/fwXfZokug3cK3PXAEbq36myVLwMt+sLw9AG728LoFUYUTRGPDThusB5h?=
 =?us-ascii?Q?+rw2tM2DudVfL+G24TjRnPSCbRXakGj1vBHLBcdCGNo/LAUsiAlsYIvbhoZ0?=
 =?us-ascii?Q?E/okeDwgK56gbVVAdIRyybuMtetR7sms51uumn5KO3WnM1FDuyl0aJyC/6HX?=
 =?us-ascii?Q?6QiaSqL0x/h88JBpEtDFK2+V+8U+i/7Jr/K/zVA3twtGtELQYKeZ63g/TbyL?=
 =?us-ascii?Q?Up3+YEg+8E4sIch7G0BeiQyTTZw9yhMHxJ56l1ybOGZpeplfxh1AnosfcC6e?=
 =?us-ascii?Q?U50z1XRaL8z9Co9APYa81t+8yT2OPK1J3XJKAc4D7l5xDJQpzttItNKWU4mi?=
 =?us-ascii?Q?jq285qml/eosn1u1s1yQuoH3qynOYneq1IoioNBBr7LPROwbk1qbtZJynBrp?=
 =?us-ascii?Q?t2UYWGsgwE8S6nkgR8Pji4HQTuy71xByacsROBkmh6J+CwPZxRQQnWfBqyG1?=
 =?us-ascii?Q?3w+eNWqqI1oOai7GA9w2wqljC1gMekOCnhL0OdqU+pNqG+jksSJHixhkmgYO?=
 =?us-ascii?Q?vfKaecbYErkwYAD4F/Bauroo02dG6Bn6zeqsvmt+NBbNzpJOs3I9PmIoxMHB?=
 =?us-ascii?Q?1egwDLuP/1xPtDbIyUrfU+4kIVp5WV5q5NbJZO+GaS33s5qBBY6SNnVhyGti?=
 =?us-ascii?Q?c0Ttj4R5IArMlE2iOCDssCS/Tay0WY014Q54YbfEj8rg2zcLleyBTHGLRzoD?=
 =?us-ascii?Q?j1gHvf+1Wcwd/Vo1SQXShNFh9LyMgGpybOC7RJalAI7nL/l3CcMGCiKjuILX?=
 =?us-ascii?Q?K6zEiABmjO9zolF8s8MfNHJ0KVRXgH8=3D?=
X-OriginatorOrg: oracle.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 1b0214f9-40ba-4093-07aa-08da3798e855
X-MS-Exchange-CrossTenant-AuthSource: CH2PR10MB4166.namprd10.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 17 May 2022 00:05:10.1691
 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: 4e2c6054-71cb-48f1-bd6c-3a9705aca71b
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: Y03QpWcx8XS2EkGVraAy80hMJDg47PDA+j3QXrZcy+FxlyS/xQH2gMKYvnf+IZq9ntGRv/qeDeX8+IXg3ndQ9CBaVOC6vLUllWQzB3aA0qU=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SJ0PR10MB4783
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.486,18.0.858
 definitions=2022-05-16_16:2022-05-16,2022-05-16 signatures=0
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 mlxscore=0 mlxlogscore=703 spamscore=0
 bulkscore=0 malwarescore=0 adultscore=0 suspectscore=0 phishscore=0
 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2202240000
 definitions=main-2205160132
X-Proofpoint-GUID: tYKDuQbW1ulR9BIURudeZkLj4FKCT7r6
X-Proofpoint-ORIG-GUID: tYKDuQbW1ulR9BIURudeZkLj4FKCT7r6
X-Spam-Status: No, score=-2.8 required=5.0 tests=BAYES_00,DKIM_SIGNED,
        DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,RCVD_IN_DNSWL_LOW,SPF_HELO_NONE,
        SPF_NONE,T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no
        version=3.4.6
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on
        lindbergh.monkeyblade.net
Precedence: bulk
List-ID: <linux-kernel.vger.kernel.org>
X-Mailing-List: linux-kernel@vger.kernel.org

The kernel can be configured to contain a lot of introspection or
debugging information built-in, such as ORC for unwinding stack traces,
BTF for type information, and of course kallsyms. Debuggers could use
this information to navigate a core dump or live system, but they need
to be able to find it.

This patch series adds the necessary symbols into vmcoreinfo, which
would allow a debugger to find and interpret the kallsyms table. Using
the kallsyms data, the debugger can then lookup any symbol, allowing it
to find ORC, BTF, or any other useful data.

This would allow a live kernel, or core dump, to be debugged without
any DWARF debuginfo. This is useful for many cases: the debuginfo may
not have been generated, or you may not want to deploy the large files
everywhere you need them.

I've demonstrated a proof of concept for this at LSF/MM+BPF during a
lighting talk. Using a work-in-progress branch of the drgn debugger, and
an extended set of BTF generated by a patched version of dwarves, I've
been able to open a core dump without any DWARF info and do basic tasks
such as enumerating slab caches, block devices, tasks, and doing
backtraces. I hope this series can be a first step toward a new
possibility of "DWARFless debugging".

Related discussion around the BTF side of this:
https://lore.kernel.org/bpf/586a6288-704a-f7a7-b256-e18a675927df@oracle.com/T/#u

Some work-in-progress branches using this feature:
https://github.com/brenns10/dwarves/tree/remove_percpu_restriction_1
https://github.com/brenns10/drgn/tree/kallsyms_plus_btf

Stephen Brennan (2):
  kallsyms: Move declarations to internal header
  vmcoreinfo: Include kallsyms symbols

 kernel/crash_core.c        | 14 ++++++++++++++
 kernel/kallsyms.c          | 23 +----------------------
 kernel/kallsyms_internal.h | 30 ++++++++++++++++++++++++++++++
 3 files changed, 45 insertions(+), 22 deletions(-)
 create mode 100644 kernel/kallsyms_internal.h

-- 
2.30.2