linux-kernel - BUG in 3.19.0-rc3+

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date:	Sat, 10 Jan 2015 20:17:03 +0000
From:	Chris Clayton <chris2553@...glemail.com>
To:	LKML <linux-kernel@...r.kernel.org>
Subject: BUG in 3.19.0-rc3+

Hi,

I'm getting a bug a BUG report from a kernel built from a pull (earlier today) of the current development kernel
(running git describe gives v3.19-rc3-169-geb74926). So that I have useable wireless networking, I have also applied the
latest seven iwlwifi patches from the wireless-drivers git tree. Prior to today's pull, I was not seeing anything
unusual in dmesg.

The BUG reported is as follows:

Jan 10 19:41:32 laptop kernel: ------------[ cut here ]------------
Jan 10 19:41:32 laptop kernel: kernel BUG at mm/rmap.c:399!
Jan 10 19:41:32 laptop kernel: invalid opcode: 0000 [#1] PREEMPT SMP
Jan 10 19:41:32 laptop kernel: Modules linked in: rfcomm snd_hda_codec_via iwlmvm coretemp snd_hda_codec_hdmi
snd_hda_codec_generic snd_hda_intel mac80211 hwmon snd_hda_controller x86_pkg_temp_thermal acpi_cpufreq iwlwifi cfg80211
snd_hda_codec snd_hwdep
Jan 10 19:41:32 laptop kernel: CPU: 1 PID: 353 Comm: fc-cache Not tainted 3.19.0-rc3+ #42
Jan 10 19:41:32 laptop kernel: Hardware name: Notebook                         W65_67SZ                        /W65_67SZ
                       , BIOS 1.03.05 02/26/2014
Jan 10 19:41:32 laptop kernel: task: ffff8800da98c5c0 ti: ffff880408dd4000 task.ti: ffff880408dd4000
Jan 10 19:41:32 laptop kernel: RIP: 0010:[<ffffffff810ef7ea>]  [<ffffffff810ef7ea>] unlink_anon_vmas+0x17a/0x200
Jan 10 19:41:33 laptop kernel: RSP: 0018:ffff880408dd7d88  EFLAGS: 00010286
Jan 10 19:41:33 laptop kernel: RAX: ffff88040b79e150 RBX: ffff88040b79e140 RCX: 00000000ffffffff
Jan 10 19:41:33 laptop kernel: RDX: ffffffff00000001 RSI: ffff880409f04360 RDI: ffff880409f04320
Jan 10 19:41:33 laptop kernel: RBP: ffff88040cb13278 R08: 0000000000000000 R09: ffff88040d801c00
Jan 10 19:41:33 laptop kernel: R10: ffff88041fa546e0 R11: ffff88040b79e160 R12: ffff880409f04320
Jan 10 19:41:33 laptop kernel: R13: ffff88040cb13278 R14: ffff88040cb13288 R15: ffff88040cb13210
Jan 10 19:41:33 laptop kernel: FS:  0000000000000000(0000) GS:ffff88041fa40000(0000) knlGS:0000000000000000
Jan 10 19:41:33 laptop kernel: CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
Jan 10 19:41:33 laptop kernel: CR2: 00000000f722c8d4 CR3: 00000004082a8000 CR4: 00000000001407e0
Jan 10 19:41:33 laptop kernel: Stack:
Jan 10 19:41:33 laptop kernel:  ffff88040d6cfbd8 ffff88040d6cfba0 ffff88040cecd160 ffff88040cb13210
Jan 10 19:41:33 laptop kernel:  ffff88040cbbb630 00000000f7151000 ffff880408dd7e28 0000000000000000
Jan 10 19:41:33 laptop kernel:  0000000000000000 ffffffff810e3633 0000000000000000 0000000000000000
Jan 10 19:41:33 laptop kernel: Call Trace:
Jan 10 19:41:33 laptop kernel:  [<ffffffff810e3633>] ? free_pgtables+0x83/0xf0
Jan 10 19:41:34 laptop kernel:  [<ffffffff810ec3c3>] ? exit_mmap+0xc3/0x150
Jan 10 19:41:34 laptop kernel:  [<ffffffff8103980d>] ? __do_page_fault+0x17d/0x4b0
Jan 10 19:41:34 laptop kernel:  [<ffffffff81042a21>] ? mmput+0x21/0xc0
Jan 10 19:41:34 laptop kernel:  [<ffffffff8104673d>] ? do_exit+0x26d/0xa50
Jan 10 19:41:34 laptop kernel:  [<ffffffff8111fe89>] ? mntput_no_expire+0x9/0x140
Jan 10 19:41:34 laptop kernel:  [<ffffffff8105ca1c>] ? task_work_run+0xbc/0xf0
Jan 10 19:41:34 laptop kernel:  [<ffffffff81047d44>] ? do_group_exit+0x34/0xb0
Jan 10 19:41:34 laptop kernel:  [<ffffffff81047dcf>] ? SyS_exit_group+0xf/0x10
Jan 10 19:41:34 laptop kernel:  [<ffffffff815e0f9f>] ? sysenter_dispatch+0x7/0x1e
Jan 10 19:41:34 laptop kernel: Code: 00 ad de 48 89 43 18 e8 c5 f9 00 00 48 8b 45 10 48 8d 55 10 48 83 e8 10 49 39 d6 74
54 48 8b 7d 08 48 89 eb 8b 57 34 85 d2 74 9e <0f> 0b 0f 1f 40 00 e8 6b fc ff ff eb 9a 66 0f 1f 84 00 00 00 00
Jan 10 19:41:34 laptop kernel: RIP  [<ffffffff810ef7ea>] unlink_anon_vmas+0x17a/0x200
Jan 10 19:41:34 laptop kernel:  RSP <ffff880408dd7d88>
Jan 10 19:41:34 laptop kernel: ---[ end trace 4aa713b2a9aa664b ]---
Jan 10 19:41:34 laptop kernel: Fixing recursive fault but reboot is needed!
Jan 10 19:41:34 laptop kernel: nf_conntrack version 0.5.0 (16384 buckets, 65536 max)
Jan 10 19:41:34 laptop kernel: ------------[ cut here ]------------
Jan 10 19:41:35 laptop kernel: kernel BUG at mm/rmap.c:399!
Jan 10 19:41:35 laptop kernel: invalid opcode: 0000 [#2] PREEMPT SMP
Jan 10 19:41:35 laptop kernel: Modules linked in: iptable_filter xt_conntrack ipt_MASQUERADE nf_nat_masquerade_ipv4
iptable_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_nat_ipv4 nf_nat nf_conntrack rfcomm snd_hda_codec_via iwlmvm coretemp
snd_hda_codec_hdmi snd_hda_codec_generic snd_hda_intel mac80211 hwmon snd_hda_controller x86_pkg_temp_thermal
acpi_cpufreq iwlwifi cfg80211 snd_hda_codec snd_hwdep
Jan 10 19:41:35 laptop kernel: CPU: 0 PID: 678 Comm: krootimage Tainted: G      D        3.19.0-rc3+ #42
Jan 10 19:41:35 laptop kernel: Hardware name: Notebook                         W65_67SZ                        /W65_67SZ
                       , BIOS 1.03.05 02/26/2014
Jan 10 19:41:35 laptop kernel: task: ffff880408de26c0 ti: ffff880409fcc000 task.ti: ffff880409fcc000
Jan 10 19:41:35 laptop kernel: RIP: 0010:[<ffffffff810ef7ea>]  [<ffffffff810ef7ea>] unlink_anon_vmas+0x17a/0x200
Jan 10 19:41:35 laptop kernel: RSP: 0018:ffff880409fcfd88  EFLAGS: 00010286
Jan 10 19:41:35 laptop kernel: RAX: ffff880408370d90 RBX: ffff880408370d80 RCX: 00000000ffffffff
Jan 10 19:41:35 laptop kernel: RDX: ffffffff00000001 RSI: ffff88040b61b400 RDI: ffff88040b61b3c0
Jan 10 19:41:35 laptop kernel: RBP: ffff88040dade1c8 R08: 0000000000000000 R09: ffff88040d801c00
Jan 10 19:41:35 laptop kernel: R10: ffff88041fa146e0 R11: ffff880408370da0 R12: ffff88040b61b3c0
Jan 10 19:41:35 laptop kernel: R13: ffff88040dade1c8 R14: ffff88040dade1d8 R15: ffff88040dade160
Jan 10 19:41:35 laptop kernel: FS:  0000000000000000(0000) GS:ffff88041fa00000(0000) knlGS:0000000000000000
Jan 10 19:41:35 laptop kernel: CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
Jan 10 19:41:36 laptop kernel: CR2: 00000000f60bf064 CR3: 0000000408c75000 CR4: 00000000001407f0
Jan 10 19:41:36 laptop kernel: Stack:
Jan 10 19:41:36 laptop kernel:  ffff88040accf828 ffff88040accf7f0 0000000000000000 ffff88040dade160
Jan 10 19:41:36 laptop kernel:  ffff88040cabb420 00000000f5878000 ffff880409fcfe28 0000000000000000
Jan 10 19:41:36 laptop kernel:  0000000000000000 ffffffff810e3633 0000000000000000 0000000000000000
Jan 10 19:41:36 laptop kernel: Call Trace:
Jan 10 19:41:36 laptop kernel:  [<ffffffff810e3633>] ? free_pgtables+0x83/0xf0
Jan 10 19:41:36 laptop kernel:  [<ffffffff810ec3c3>] ? exit_mmap+0xc3/0x150
Jan 10 19:41:36 laptop kernel:  [<ffffffff8103980d>] ? __do_page_fault+0x17d/0x4b0
Jan 10 19:41:36 laptop kernel:  [<ffffffff81042a21>] ? mmput+0x21/0xc0
Jan 10 19:41:36 laptop kernel:  [<ffffffff8104673d>] ? do_exit+0x26d/0xa50
Jan 10 19:41:36 laptop kernel:  [<ffffffff8111fe89>] ? mntput_no_expire+0x9/0x140
Jan 10 19:41:36 laptop kernel:  [<ffffffff8105ca1c>] ? task_work_run+0xbc/0xf0
Jan 10 19:41:36 laptop kernel:  [<ffffffff81047d44>] ? do_group_exit+0x34/0xb0
Jan 10 19:41:36 laptop kernel:  [<ffffffff81047dcf>] ? SyS_exit_group+0xf/0x10
Jan 10 19:41:37 laptop kernel:  [<ffffffff815e0f9f>] ? sysenter_dispatch+0x7/0x1e
Jan 10 19:41:37 laptop kernel: Code: 00 ad de 48 89 43 18 e8 c5 f9 00 00 48 8b 45 10 48 8d 55 10 48 83 e8 10 49 39 d6 74
54 48 8b 7d 08 48 89 eb 8b 57 34 85 d2 74 9e <0f> 0b 0f 1f 40 00 e8 6b fc ff ff eb 9a 66 0f 1f 84 00 00 00 00
Jan 10 19:41:37 laptop kernel: RIP  [<ffffffff810ef7ea>] unlink_anon_vmas+0x17a/0x200
Jan 10 19:41:37 laptop kernel:  RSP <ffff880409fcfd88>
Jan 10 19:41:37 laptop kernel: ---[ end trace 4aa713b2a9aa664c ]---
Jan 10 19:41:37 laptop kernel: Fixing recursive fault but reboot is needed!
Jan 10 19:41:37 laptop kernel: Bluetooth: HIDP (Human Interface Emulation) ver 1.2
Jan 10 19:41:37 laptop kernel: Bluetooth: HIDP socket layer initialized
Jan 10 19:41:37 laptop kernel: hid-generic 0005:0A5C:0001.0001: unknown main item tag 0x0
Jan 10 19:41:37 laptop kernel: input: Bluetooth 3.0 mouse as
/devices/pci0000:00/0000:00:14.0/usb1/1-7/1-7:1.0/bluetooth/hci0/hci0:256/0005:0A5C:0001.0001/input/input10
Jan 10 19:41:37 laptop kernel: hid-generic 0005:0A5C:0001.0001: input: BLUETOOTH HID v1.29 Mouse [Bluetooth 3.0 mouse]
on 80:19:34:5a:67:51
Jan 10 19:41:37 laptop kernel: ------------[ cut here ]------------
Jan 10 19:41:37 laptop kernel: kernel BUG at mm/rmap.c:399!
Jan 10 19:41:37 laptop kernel: invalid opcode: 0000 [#3] PREEMPT SMP
Jan 10 19:41:37 laptop kernel: Modules linked in: hidp iptable_filter xt_conntrack ipt_MASQUERADE nf_nat_masquerade_ipv4
iptable_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_nat_ipv4 nf_nat nf_conntrack rfcomm snd_hda_codec_via iwlmvm coretemp
snd_hda_codec_hdmi snd_hda_codec_generic snd_hda_intel mac80211 hwmon snd_hda_controller x86_pkg_temp_thermal
acpi_cpufreq iwlwifi cfg80211 snd_hda_codec snd_hwdep
Jan 10 19:41:37 laptop kernel: CPU: 0 PID: 677 Comm: kdm_greet Tainted: G      D        3.19.0-rc3+ #42
Jan 10 19:41:37 laptop kernel: Hardware name: Notebook                         W65_67SZ                        /W65_67SZ
                       , BIOS 1.03.05 02/26/2014
Jan 10 19:41:38 laptop kernel: task: ffff880408de0000 ti: ffff8804083a4000 task.ti: ffff8804083a4000
Jan 10 19:41:38 laptop kernel: RIP: 0010:[<ffffffff810ef7ea>]  [<ffffffff810ef7ea>] unlink_anon_vmas+0x17a/0x200
Jan 10 19:41:38 laptop kernel: RSP: 0018:ffff8804083a7d88  EFLAGS: 00210286
Jan 10 19:41:38 laptop kernel: RAX: ffff88040b5b7610 RBX: ffff88040b5b7600 RCX: 00000000ffffffff
Jan 10 19:41:38 laptop kernel: RDX: ffffffff00000001 RSI: ffff88040b59f590 RDI: ffff88040b59f550
Jan 10 19:41:38 laptop kernel: RBP: ffff88040b5978a8 R08: 0000000000000000 R09: ffff88040d801c00
Jan 10 19:41:38 laptop kernel: R10: ffff88041fa146e0 R11: ffff88040b5b7620 R12: ffff88040b59f550
Jan 10 19:41:38 laptop kernel: R13: ffff88040b5978a8 R14: ffff88040b5978b8 R15: ffff88040b597840
Jan 10 19:41:38 laptop kernel: FS:  0000000000000000(0000) GS:ffff88041fa00000(0000) knlGS:0000000000000000
Jan 10 19:41:38 laptop kernel: CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
Jan 10 19:41:38 laptop kernel: CR2: 00000000f6547064 CR3: 0000000408c6a000 CR4: 00000000001407f0
Jan 10 19:41:38 laptop kernel: Stack:
Jan 10 19:41:38 laptop kernel:  ffff88040d6cfbd8 ffff88040d6cfba0 ffff88040b5978f0 ffff88040b597840
Jan 10 19:41:38 laptop kernel:  ffff88040b597a50 00000000f5916000 ffff8804083a7e28 0000000000000000
Jan 10 19:41:38 laptop kernel:  0000000000000000 ffffffff810e3633 0000000000000000 0000000000000000
Jan 10 19:41:39 laptop kernel: Call Trace:
Jan 10 19:41:39 laptop kernel:  [<ffffffff810e3633>] ? free_pgtables+0x83/0xf0
Jan 10 19:41:39 laptop kernel:  [<ffffffff810ec3c3>] ? exit_mmap+0xc3/0x150
Jan 10 19:41:39 laptop kernel:  [<ffffffff8103980d>] ? __do_page_fault+0x17d/0x4b0
Jan 10 19:41:39 laptop kernel:  [<ffffffff81042a21>] ? mmput+0x21/0xc0
Jan 10 19:41:39 laptop kernel:  [<ffffffff8104673d>] ? do_exit+0x26d/0xa50
Jan 10 19:41:39 laptop kernel:  [<ffffffff8111fe89>] ? mntput_no_expire+0x9/0x140
Jan 10 19:41:39 laptop kernel:  [<ffffffff81094b80>] ? __getnstimeofday64+0x30/0xc0
Jan 10 19:41:39 laptop kernel:  [<ffffffff81047d44>] ? do_group_exit+0x34/0xb0
Jan 10 19:41:39 laptop kernel:  [<ffffffff81047dcf>] ? SyS_exit_group+0xf/0x10
Jan 10 19:41:39 laptop kernel:  [<ffffffff815e0f9f>] ? sysenter_dispatch+0x7/0x1e
Jan 10 19:41:39 laptop kernel: Code: 00 ad de 48 89 43 18 e8 c5 f9 00 00 48 8b 45 10 48 8d 55 10 48 83 e8 10 49 39 d6 74
54 48 8b 7d 08 48 89 eb 8b 57 34 85 d2 74 9e <0f> 0b 0f 1f 40 00 e8 6b fc ff ff eb 9a 66 0f 1f 84 00 00 00 00
Jan 10 19:41:39 laptop kernel: RIP  [<ffffffff810ef7ea>] unlink_anon_vmas+0x17a/0x200
Jan 10 19:41:39 laptop kernel:  RSP <ffff8804083a7d88>
Jan 10 19:41:39 laptop kernel: ---[ end trace 4aa713b2a9aa664d ]---
Jan 10 19:41:40 laptop kernel: Fixing recursive fault but reboot is needed!
Jan 10 19:41:40 laptop kernel: ------------[ cut here ]------------
Jan 10 19:41:40 laptop kernel: kernel BUG at mm/rmap.c:399!
Jan 10 19:41:40 laptop kernel: invalid opcode: 0000 [#4] PREEMPT SMP
Jan 10 19:41:40 laptop kernel: Modules linked in: hidp iptable_filter xt_conntrack ipt_MASQUERADE nf_nat_masquerade_ipv4
iptable_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_nat_ipv4 nf_nat nf_conntrack rfcomm snd_hda_codec_via iwlmvm coretemp
snd_hda_codec_hdmi snd_hda_codec_generic snd_hda_intel mac80211 hwmon snd_hda_controller x86_pkg_temp_thermal
acpi_cpufreq iwlwifi cfg80211 snd_hda_codec snd_hwdep
Jan 10 19:41:40 laptop kernel: CPU: 3 PID: 671 Comm: X Tainted: G      D        3.19.0-rc3+ #42
Jan 10 19:41:40 laptop kernel: Hardware name: Notebook                         W65_67SZ                        /W65_67SZ
                       , BIOS 1.03.05 02/26/2014
Jan 10 19:41:40 laptop kernel: task: ffff880408de4d80 ti: ffff880408350000 task.ti: ffff880408350000
Jan 10 19:41:40 laptop kernel: RIP: 0010:[<ffffffff810ef7ea>]  [<ffffffff810ef7ea>] unlink_anon_vmas+0x17a/0x200
Jan 10 19:41:40 laptop kernel: RSP: 0018:ffff880408353be8  EFLAGS: 00213286
Jan 10 19:41:40 laptop kernel: RAX: ffff88040daf29d0 RBX: ffff88040daf29c0 RCX: 00000000ffffffff
Jan 10 19:41:40 laptop kernel: RDX: ffffffff00000001 RSI: ffff88040cafc8b0 RDI: ffff88040cafc870
Jan 10 19:41:40 laptop kernel: RBP: ffff88040cb9ed78 R08: 0000000000000000 R09: ffff88040d801c00
Jan 10 19:41:40 laptop kernel: R10: ffff88041fad46e0 R11: ffff88040daf29e0 R12: ffff88040cafc870
Jan 10 19:41:40 laptop kernel: R13: ffff88040cb9ed78 R14: ffff88040cb9ed88 R15: ffff88040cb9ed10
Jan 10 19:41:40 laptop kernel: FS:  0000000000000000(0000) GS:ffff88041fac0000(0000) knlGS:0000000000000000
Jan 10 19:41:41 laptop kernel: CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
Jan 10 19:41:41 laptop kernel: CR2: 000000000879946c CR3: 00000000017f5000 CR4: 00000000001407e0
Jan 10 19:41:41 laptop kernel: Stack:
Jan 10 19:41:41 laptop kernel:  ffff88040accf828 ffff88040accf7f0 0000000000000000 ffff88040cb9ed10
Jan 10 19:41:41 laptop kernel:  ffff88040cbd7630 00000000f51f6000 ffff880408353c88 0000000000000000
Jan 10 19:41:41 laptop kernel:  0000000000000000 ffffffff810e3633 ffff880408353e50 0000000000000000
Jan 10 19:41:41 laptop kernel: Call Trace:
Jan 10 19:41:41 laptop kernel:  [<ffffffff810e3633>] ? free_pgtables+0x83/0xf0
Jan 10 19:41:41 laptop kernel:  [<ffffffff810ec3c3>] ? exit_mmap+0xc3/0x150
Jan 10 19:41:41 laptop kernel:  [<ffffffff8122b111>] ? timerqueue_del+0x21/0x70
Jan 10 19:41:41 laptop kernel:  [<ffffffff81042a21>] ? mmput+0x21/0xc0
Jan 10 19:41:41 laptop kernel:  [<ffffffff8104673d>] ? do_exit+0x26d/0xa50
Jan 10 19:41:41 laptop kernel:  [<ffffffff81047d44>] ? do_group_exit+0x34/0xb0
Jan 10 19:41:41 laptop kernel:  [<ffffffff81051384>] ? get_signal+0x274/0x660
Jan 10 19:41:42 laptop kernel:  [<ffffffff8100249e>] ? do_signal+0x1e/0x7c0
Jan 10 19:41:42 laptop kernel:  [<ffffffff8100da31>] ? __restore_xstate_sig+0x271/0x680
Jan 10 19:41:42 laptop kernel:  [<ffffffff810527f6>] ? compat_SyS_sigaltstack+0xc6/0x1a0
Jan 10 19:41:42 laptop kernel:  [<ffffffff81002c9d>] ? do_notify_resume+0x5d/0x80
Jan 10 19:41:42 laptop kernel:  [<ffffffff815df818>] ? int_signal+0x12/0x17
Jan 10 19:41:42 laptop kernel: Code: 00 ad de 48 89 43 18 e8 c5 f9 00 00 48 8b 45 10 48 8d 55 10 48 83 e8 10 49 39 d6 74
54 48 8b 7d 08 48 89 eb 8b 57 34 85 d2 74 9e <0f> 0b 0f 1f 40 00 e8 6b fc ff ff eb 9a 66 0f 1f 84 00 00 00 00
Jan 10 19:41:42 laptop kernel: RIP  [<ffffffff810ef7ea>] unlink_anon_vmas+0x17a/0x200
Jan 10 19:41:42 laptop kernel:  RSP <ffff880408353be8>
Jan 10 19:41:42 laptop kernel: ---[ end trace 4aa713b2a9aa664e ]---
Jan 10 19:41:42 laptop kernel: Fixing recursive fault but reboot is needed!

I won't get time tonight, but I can bisect it tomorrow, so this is just a heads up in case the problem (and fix) jumps
out at anyone.  Before I bisect I'll build and run a kernel without the iwlwifi patches.

I've attached the full kernel log file for that boot.

Chris

View attachment "kernel-bug.log" of type "text/x-log" (77274 bytes)