| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: Thu, 11 Apr 2013 14:09:52 +0200
From: Ingo Molnar <mingo@...nel.org>
To: Borislav Petkov <bp@...en8.de>
Cc: "H. Peter Anvin" <hpa@...or.com>, X86 ML <x86@...nel.org>,
LKML <linux-kernel@...r.kernel.org>, Borislav Petkov <bp@...e.de>
Subject: Re: [PATCH] x86, FPU: Fix FPU initialization
* Borislav Petkov <bp@...en8.de> wrote:
> On Wed, Apr 10, 2013 at 06:11:22PM +0200, Borislav Petkov wrote:
> > On Wed, Apr 10, 2013 at 08:35:43AM -0700, H. Peter Anvin wrote:
> > > OK, this thread took off in another direction but you're still looking
> > > at this, right?
> >
> > Yep, and I think I have the rootcause, let's start (oops below for
> > info).
>
> Ok, here's a fix which boots fine here in qemu. Ingo, it would be cool
> if you gave it a run to verify.
Even with this applied, the attached config is still unhappy and crashes/locks up
during user-space init, see the crashlog attached below.
The config has MATH_EMULATION=y, so I suspect it's the same problem category.
(I'll keep tip:x86/cpu excluded from tip:master so that others are not affected by
this bug.)
Thanks,
Ingo
INIT: version 2.86 booting
[ 14.723352] mount (55) used greatest stack depth: 5820 bytes left
[ 14.723352] mount (55) used greatest stack depth: 5820 bytes left
[ 15.187354] awk (64) used greatest stack depth: 5816 bytes left
[ 15.187354] awk (64) used greatest stack depth: 5816 bytes left
Welcome to [ 15.327059] gzip (70) used greatest stack depth: 5576 bytes left
[ 15.327059] gzip (70) used greatest stack depth: 5576 bytes left
Fedora Core
Press 'I' to enter interactive startup.
modprobe: FATAL: Could not load /lib/modules/3.9.0-rc6+/modules.dep: No such file or directory
[ 15.921486] BUG: unable to handle kernel [ 15.921486] BUG: unable to handle kernel paging requestpaging request at 0000407a
at 0000407a
[ 15.921486] IP:[ 15.921486] IP: [<41071ab0>] __lock_acquire.isra.19+0x3e0/0xb00
[<41071ab0>] __lock_acquire.isra.19+0x3e0/0xb00
[ 15.921486] *pde = 00000000 [ 15.921486] *pde = 00000000
[ 15.921486] Oops: 0002 [#1] [ 15.921486] Oops: 0002 [#1] SMP SMP
[ 15.921486] Modules linked in:[ 15.921486] Modules linked in:
[ 15.921486] Pid: 73, comm: hwclock Tainted: G W 3.9.0-rc6+ #222032 System manufacturer System Product Name/A8N-E
[ 15.921486] Pid: 73, comm: hwclock Tainted: G W 3.9.0-rc6+ #222032 System manufacturer System Product Name/A8N-E
[ 15.921486] EIP: 0060:[<41071ab0>] EFLAGS: 00013002 CPU: 0
[ 15.921486] EIP: 0060:[<41071ab0>] EFLAGS: 00013002 CPU: 0
[ 15.921486] EIP is at __lock_acquire.isra.19+0x3e0/0xb00
[ 15.921486] EIP is at __lock_acquire.isra.19+0x3e0/0xb00
[ 15.921486] EAX: 7e917f94 EBX: 00003f76 ECX: 00000000 EDX: 00000000
[ 15.921486] EAX: 7e917f94 EBX: 00003f76 ECX: 00000000 EDX: 00000000
[ 15.921486] ESI: 00000000 EDI: 7e9469c0 EBP: 7e9cfed8 ESP: 7e9cfe88
[ 15.921486] ESI: 00000000 EDI: 7e9469c0 EBP: 7e9cfed8 ESP: 7e9cfe88
[ 15.921486] DS: 007b ES: 007b FS: 00d8 GS: 00e0 SS: 0068
[ 15.921486] DS: 007b ES: 007b FS: 00d8 GS: 00e0 SS: 0068
[ 15.921486] CR0: 8005003b CR2: 0000407a CR3: 01768000 CR4: 00000690
[ 15.921486] CR0: 8005003b CR2: 0000407a CR3: 01768000 CR4: 00000690
[ 15.921486] DR0: 00000000 DR1: 00000000 DR2: 00000000 DR3: 00000000
[ 15.921486] DR0: 00000000 DR1: 00000000 DR2: 00000000 DR3: 00000000
[ 15.921486] DR6: ffff0ff0 DR7: 00000400
[ 15.921486] DR6: ffff0ff0 DR7: 00000400
[ 15.921486] Process hwclock (pid: 73, ti=7e9ce000 task=7e9469c0 task.ti=7e9ce000)
[ 15.921486] Process hwclock (pid: 73, ti=7e9ce000 task=7e9469c0 task.ti=7e9ce000)
[ 15.921486] Stack:
[ 15.921486] Stack:
[ 15.921486] 00000003[ 15.921486] 00000003 b4fe9c00 b4fe9c00 00000003 00000003 00000001 00000001 7e999500 7e999500 00000000 00000000 7e999d00 7e999d00 7e995340 7e995340
[ 15.921486] 00003002[ 15.921486] 00003002 7e8e8920 7e8e8920 7e9c0207 7e9c0207 80100008 80100008 7e999500 7e999500 7e9c0207 7e9c0207 7e946d24 7e946d24 7e946d20 7e946d20
[ 15.921486] 7e917f94[ 15.921486] 7e917f94 00000000 00000000 7e9469c0 7e9469c0 00003246 00003246 7e9cff00 7e9cff00 4107264d 4107264d 00000000 00000000 00000000 00000000
[ 15.921486] Call Trace:
[ 15.921486] Call Trace:
[ 15.921486] [<4107264d>] lock_acquire+0x5d/0x80
[ 15.921486] [<4107264d>] lock_acquire+0x5d/0x80
[ 15.921486] [<41109905>] ? exit_fs+0x35/0x70
[ 15.921486] [<41109905>] ? exit_fs+0x35/0x70
[ 15.921486] [<413deba1>] _raw_spin_lock+0x41/0x70
[ 15.921486] [<413deba1>] _raw_spin_lock+0x41/0x70
[ 15.921486] [<41109905>] ? exit_fs+0x35/0x70
[ 15.921486] [<41109905>] ? exit_fs+0x35/0x70
[ 15.921486] [<41109905>] exit_fs+0x35/0x70
[ 15.921486] [<41109905>] exit_fs+0x35/0x70
[ 15.921486] [<4102ddab>] do_exit+0x2fb/0x850
[ 15.921486] [<4102ddab>] do_exit+0x2fb/0x850
[ 15.921486] [<4102e48c>] do_group_exit+0x6c/0xb0
[ 15.921486] [<4102e48c>] do_group_exit+0x6c/0xb0
[ 15.921486] [<4102e4e3>] sys_exit_group+0x13/0x20
[ 15.921486] [<4102e4e3>] sys_exit_group+0x13/0x20
[ 15.921486] [<413e4f05>] sysenter_do_call+0x12/0x31
[ 15.921486] [<413e4f05>] sysenter_do_call+0x12/0x31
[ 15.921486] Code:[ 15.921486] Code: 00 00 83 83 3d 3d c0 c0 14 14 d0 d0 41 41 00 00 0f 0f 85 85 18 18 05 05 00 00 00 00 ba ba 34 34 03 03 00 00 00 00 b8 b8 cb cb e0 e0 4e 4e 41 41 e8 e8 ee ee 74 74 fb fb ff ff e9 e9 04 04 05 05 00 00 00 00 85 85 db db 0f 0f 84 84 fc fc 04 04 00 00 00 00 90 90 <3e> <3e> ff ff 83 83 04 04 01 01 00 00 00 00 a1 a1 48 48 48 48 77 77 41 41 8b 8b b7 b7 5c 5c 03 03 00 00 00 00 85 85 c0 c0 0f 0f
[ 15.921486] EIP: [<41071ab0>] [ 15.921486] EIP: [<41071ab0>] __lock_acquire.isra.19+0x3e0/0xb00__lock_acquire.isra.19+0x3e0/0xb00 SS:ESP 0068:7e9cfe88
SS:ESP 0068:7e9cfe88
[ 15.921486] CR2: 000000000000407a
[ 15.921486] CR2: 000000000000407a
[ 15.921486] ---[ end trace 630c66e4c0c7a4b4 ]---
[ 15.921486] ---[ end trace 630c66e4c0c7a4b4 ]---
[ 15.921486] Fixing recursive fault but reboot is needed!
[ 15.921486] Fixing recursive fault but reboot is needed!
[ 15.921486] BUG: scheduling while atomic: hwclock/73/0x00000003
[ 15.921486] BUG: scheduling while atomic: hwclock/73/0x00000003
[ 15.921486] INFO: lockdep is turned off.
[ 15.921486] INFO: lockdep is turned off.
[ 15.921486] Modules linked in:[ 15.921486] Modules linked in:
[ 15.921486] Pid: 73, comm: hwclock Tainted: G D W 3.9.0-rc6+ #222032
[ 15.921486] Pid: 73, comm: hwclock Tainted: G D W 3.9.0-rc6+ #222032
[ 15.921486] Call Trace:
[ 15.921486] Call Trace:
[ 15.921486] [<413d73d0>] __schedule_bug+0x54/0x66
[ 15.921486] [<413d73d0>] __schedule_bug+0x54/0x66
[ 15.921486] [<413dd6f4>] __schedule+0x64/0x720
[ 15.921486] [<413dd6f4>] __schedule+0x64/0x720
[ 15.921486] [<413d6f42>] ? printk+0x48/0x4a
[ 15.921486] [<413d6f42>] ? printk+0x48/0x4a
[ 15.921486] [<413de06d>] schedule+0x4d/0x50
[ 15.921486] [<413de06d>] schedule+0x4d/0x50
[ 15.921486] [<4102db77>] do_exit+0xc7/0x850
[ 15.921486] [<4102db77>] do_exit+0xc7/0x850
[ 15.921486] [<4102bffe>] ? kmsg_dump+0xde/0x110
[ 15.921486] [<4102bffe>] ? kmsg_dump+0xde/0x110
[ 15.921486] [<4102c012>] ? kmsg_dump+0xf2/0x110
[ 15.921486] [<4102c012>] ? kmsg_dump+0xf2/0x110
[ 15.921486] [<4102bf3c>] ? kmsg_dump+0x1c/0x110
[ 15.921486] [<4102bf3c>] ? kmsg_dump+0x1c/0x110
[ 15.921486] [<413e0417>] oops_end+0x87/0x90
[ 15.921486] [<413e0417>] oops_end+0x87/0x90
[ 15.921486] [<413d6921>] no_context+0x17a/0x182
[ 15.921486] [<413d6921>] no_context+0x17a/0x182
[ 15.921486] [<413d6a46>] __bad_area_nosemaphore+0x11d/0x125
[ 15.921486] [<413d6a46>] __bad_area_nosemaphore+0x11d/0x125
[ 15.921486] [<4105387d>] ? sched_clock_local+0x1d/0x160
[ 15.921486] [<4105387d>] ? sched_clock_local+0x1d/0x160
[ 15.921486] [<413e2990>] ? __do_page_fault+0x4c0/0x4c0
[ 15.921486] [<413e2990>] ? __do_page_fault+0x4c0/0x4c0
[ 15.921486] [<413d6a60>] bad_area_nosemaphore+0x12/0x14
[ 15.921486] [<413d6a60>] bad_area_nosemaphore+0x12/0x14
[ 15.921486] [<413e2916>] __do_page_fault+0x446/0x4c0
[ 15.921486] [<413e2916>] __do_page_fault+0x446/0x4c0
[ 15.921486] [<41053bb7>] ? sched_clock_cpu+0x137/0x170
[ 15.921486] [<41053bb7>] ? sched_clock_cpu+0x137/0x170
[ 15.921486] [<4105387d>] ? sched_clock_local+0x1d/0x160
[ 15.921486] [<4105387d>] ? sched_clock_local+0x1d/0x160
[ 15.921486] [<413e2990>] ? __do_page_fault+0x4c0/0x4c0
[ 15.921486] [<413e2990>] ? __do_page_fault+0x4c0/0x4c0
[ 15.921486] [<413e2998>] do_page_fault+0x8/0x10
[ 15.921486] [<413e2998>] do_page_fault+0x8/0x10
[ 15.921486] [<413dfd1f>] error_code+0x67/0x6c
[ 15.921486] [<413dfd1f>] error_code+0x67/0x6c
[ 15.921486] [<41071ab0>] ? __lock_acquire.isra.19+0x3e0/0xb00
[ 15.921486] [<41071ab0>] ? __lock_acquire.isra.19+0x3e0/0xb00
[ 15.921486] [<4107264d>] lock_acquire+0x5d/0x80
[ 15.921486] [<4107264d>] lock_acquire+0x5d/0x80
[ 15.921486] [<41109905>] ? exit_fs+0x35/0x70
[ 15.921486] [<41109905>] ? exit_fs+0x35/0x70
[ 15.921486] [<413deba1>] _raw_spin_lock+0x41/0x70
[ 15.921486] [<413deba1>] _raw_spin_lock+0x41/0x70
[ 15.921486] [<41109905>] ? exit_fs+0x35/0x70
[ 15.921486] [<41109905>] ? exit_fs+0x35/0x70
[ 15.921486] [<41109905>] exit_fs+0x35/0x70
[ 15.921486] [<41109905>] exit_fs+0x35/0x70
[ 15.921486] [<4102ddab>] do_exit+0x2fb/0x850
[ 15.921486] [<4102ddab>] do_exit+0x2fb/0x850
[ 15.921486] [<4102e48c>] do_group_exit+0x6c/0xb0
[ 15.921486] [<4102e48c>] do_group_exit+0x6c/0xb0
[ 15.921486] [<4102e4e3>] sys_exit_group+0x13/0x20
[ 15.921486] [<4102e4e3>] sys_exit_group+0x13/0x20
[ 15.921486] [<413e4f05>] sysenter_do_call+0x12/0x31
[ 15.921486] [<413e4f05>] sysenter_do_call+0x12/0x31
[ 37.139621] CPA self-test:
[ 37.139621] CPA self-test:
[ 37.139621] 4k 4080 large 252 gb 0 x 4332[40000000-7ffef000] miss 0
[ 37.139621] 4k 4080 large 252 gb 0 x 4332[40000000-7ffef000] miss 0
[ 37.169620] 4k 206832 large 54 gb 0 x 206886[40000000-7ffef000] miss 0
[ 37.169620] 4k 206832 large 54 gb 0 x 206886[40000000-7ffef000] miss 0
[ 37.189616] 4k 206832 large 54 gb 0 x 206886[40000000-7ffef000] miss 0
[ 37.189616] 4k 206832 large 54 gb 0 x 206886[40000000-7ffef000] miss 0
[ 37.199944] ok.
[ 37.199944] ok.
View attachment "config" of type "text/plain" (87072 bytes)
Powered by blists - more mailing lists