linux-kernel - Re: 2.6.21-rc5-rt4 inconsistent lock state

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date:	Thu, 29 Mar 2007 20:18:30 +0200
From:	Michal Piotrowski <michal.k.k.piotrowski@...il.com>
To:	Michal Piotrowski <michal.k.k.piotrowski@...glemail.com>
CC:	Ingo Molnar <mingo@...e.hu>, Thomas Gleixner <tglx@...utronix.de>,
	LKML <linux-kernel@...r.kernel.org>
Subject: Re: 2.6.21-rc5-rt4 inconsistent lock state

Michal Piotrowski napisał(a):
> Hi,
[..]
> http://www.stardust.webpages.pl/files/tbf/bitis-gabonica/2.6.21-rc5-rt4/rt-config
> http://www.stardust.webpages.pl/files/tbf/bitis-gabonica/2.6.21-rc5-rt4/rt-dmesg
> 

I just fixed an isic build in AT :)

BUG: isic:11396 task might have lost a preemption check!
 [<c0105470>] dump_trace+0x78/0x21a
 [<c0105647>] show_trace_log_lvl+0x35/0x54
 [<c0105dcc>] show_trace+0x2c/0x2e
 [<c0105e93>] dump_stack+0x29/0x2b
 [<c0121d64>] preempt_enable_no_resched+0x5c/0x5e
 [<c0218390>] debug_smp_processor_id+0xb0/0xb8
 [<fd98a83f>] nf_conntrack_in+0x39c/0x468 [nf_conntrack]
 [<fd999316>] ipv4_conntrack_local+0x61/0x67 [nf_conntrack_ipv4]
 [<c031c494>] nf_iterate+0x40/0x71
 [<c031c61a>] nf_hook_slow+0x5c/0xd7
 [<c033f066>] raw_sendmsg+0x518/0x6ee
 [<c0346819>] inet_sendmsg+0x4b/0x55
 [<c030109b>] sock_sendmsg+0xf7/0x114
 [<c0301b34>] sys_sendto+0xe5/0x105
 [<c0302521>] sys_socketcall+0x17e/0x254
 [<c010432d>] syscall_call+0x7/0xb
 [<b7f0c410>] 0xb7f0c410
 =======================
---------------------------
| preempt count: 00000000 ]
| 0-level deep critical section nesting:
----------------------------------------

BUG: using smp_processor_id() in preemptible [00000000] code: isic/16471
caller is nf_conntrack_in+0xd0/0x468 [nf_conntrack]
 [<c0105470>] dump_trace+0x78/0x21a
 [<c0105647>] show_trace_log_lvl+0x35/0x54
 [<c0105dcc>] show_trace+0x2c/0x2e
 [<c0105e93>] dump_stack+0x29/0x2b
 [<c021838b>] debug_smp_processor_id+0xab/0xb8
 [<fd98a573>] nf_conntrack_in+0xd0/0x468 [nf_conntrack]
 [<fd999316>] ipv4_conntrack_local+0x61/0x67 [nf_conntrack_ipv4]
 [<c031c494>] nf_iterate+0x40/0x71
 [<c031c61a>] nf_hook_slow+0x5c/0xd7
 [<c033f066>] raw_sendmsg+0x518/0x6ee
 [<c0346819>] inet_sendmsg+0x4b/0x55
 [<c030109b>] sock_sendmsg+0xf7/0x114
 [<c0301b34>] sys_sendto+0xe5/0x105
 [<c0302521>] sys_socketcall+0x17e/0x254
 [<c010432d>] syscall_call+0x7/0xb
 [<b7f01410>] 0xb7f01410
 =======================
---------------------------
| preempt count: 00000001 ]
| 1-level deep critical section nesting:
----------------------------------------
.. [<c0359d9e>] .... __spin_lock+0x1a/0x59
.....[<c016321a>] ..   ( <= handle_fasteoi_irq+0x27/0xdf)

 l *0xc0359d9e
0xc0359d9e is in __spin_lock (kernel/spinlock.c:218).
213     EXPORT_SYMBOL(__write_lock_bh);
214
215     void __lockfunc __spin_lock(raw_spinlock_t *lock)
216     {
217             preempt_disable();
218             spin_acquire(&lock->dep_map, 0, 0, _RET_IP_);
219             _raw_spin_lock(lock);
220     }
221
222     EXPORT_SYMBOL(__spin_lock);

l *0xc016321a
0xc016321a is in handle_fasteoi_irq (kernel/irq/chip.c:405).
400             struct irqaction *action;
401             irqreturn_t action_ret;
402
403             spin_lock(&desc->lock);
404
405             if (unlikely(desc->status & IRQ_INPROGRESS))
406                     goto out;
407
408             desc->status &= ~(IRQ_REPLAY | IRQ_WAITING);
409             kstat_cpu(cpu).irqs[irq]++;


BUG: using smp_processor_id() in preemptible [00000000] code: isic/16471
caller is nf_conntrack_in+0x43d/0x468 [nf_conntrack]
 [<c0105470>] dump_trace+0x78/0x21a
 [<c0105647>] show_trace_log_lvl+0x35/0x54
 [<c0105dcc>] show_trace+0x2c/0x2e
 [<c0105e93>] dump_stack+0x29/0x2b
 [<c021838b>] debug_smp_processor_id+0xab/0xb8
 [<fd98a8e0>] nf_conntrack_in+0x43d/0x468 [nf_conntrack]
 [<fd999316>] ipv4_conntrack_local+0x61/0x67 [nf_conntrack_ipv4]
 [<c031c494>] nf_iterate+0x40/0x71
 [<c031c61a>] nf_hook_slow+0x5c/0xd7
 [<c033f066>] raw_sendmsg+0x518/0x6ee
 [<c0346819>] inet_sendmsg+0x4b/0x55
 [<c030109b>] sock_sendmsg+0xf7/0x114
 [<c0301b34>] sys_sendto+0xe5/0x105
 [<c0302521>] sys_socketcall+0x17e/0x254
 [<c010432d>] syscall_call+0x7/0xb
 [<b7f01410>] 0xb7f01410
 =======================
---------------------------
| preempt count: 00000001 ]
| 1-level deep critical section nesting:
----------------------------------------
.. [<c0218336>] .... debug_smp_processor_id+0x56/0xb8
.....[<fd98a8e0>] ..   ( <= nf_conntrack_in+0x43d/0x468 [nf_conntrack])

 l *0xc0218336
0xc0218336 is in debug_smp_processor_id (lib/smp_processor_id.c:42).
37              /*
38               * Avoid recursion:
39               */
40              preempt_disable();
41
42              if (!printk_ratelimit())
43                      goto out_enable;
44
45              printk(KERN_ERR "BUG: using smp_processor_id() in preemptible [%08x] code: %s/%d\n", preempt_count()-1, current->comm, current->pid);
46              print_symbol("caller is %s\n", (long)__builtin_return_address(0));

http://www.stardust.webpages.pl/files/tbf/bitis-gabonica/2.6.21-rc5-rt4/rt-dmesg2

Regards,
Michal

-- 
Michal K. K. Piotrowski
LTG - Linux Testers Group (PL)
(http://www.stardust.webpages.pl/ltg/)
LTG - Linux Testers Group (EN)
(http://www.stardust.webpages.pl/linux_testers_group_en/)
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/