linux-kernel - Re: [BUG] kernel BUG at arch/x86/kernel/tlb

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date:	Tue, 20 Jan 2009 08:56:44 +0100
From:	Laurent Riffard <laurent.riffard@...e.fr>
To:	Li Zefan <lizf@...fujitsu.com>
CC:	Ingo Molnar <mingo@...e.hu>, Rusty Russell <rusty@...tcorp.com.au>,
	Mike Travis <travis@....com>,
	LKML <linux-kernel@...r.kernel.org>
Subject: Re: [BUG] kernel BUG at arch/x86/kernel/tlb_32.c:130!

Le 20.01.2009 07:29, Li Zefan a écrit :
> I was using mmotm 2009-01-16-16-18, and I ran into this BUG,
> the line is:
> 	BUG_ON(cpumask_empty(cpumask));
> 
> I suspect it is caused by:
> 
> commit 4595f9620cda8a1e973588e743cf5f8436dd20c6
> Author: Rusty Russell <rusty@...tcorp.com.au>
> Date:   Sat Jan 10 21:58:09 2009 -0800
> 
>     x86: change flush_tlb_others to take a const struct cpumask
> 
>     Impact: reduce stack usage, use new cpumask API.
> 
> ?
> 
> ------------[ cut here ]------------
> kernel BUG at arch/x86/kernel/tlb_32.c:130!
> invalid opcode: 0000 [#1] PREEMPT SMP 
> last sysfs file: /sys/devices/pci0000:00/0000:00:01.0/0000:01:00.0/irq
> Modules linked in: bridge stp llc autofs4 dm_mirror dm_region_hash dm_log dm_mod parport_pc r8169 parport mii sg button sata_sis pata_sis ata_generic libata sd_mod scsi_mod ext3 jbd mbcache uhci_hcd ohci_hcd ehci_hcd [last unloaded: scsi_wait_scan]
> 
> Pid: 16050, comm: test6.sh Not tainted (2.6.29-rc2-mm1 #3) Aspire SA85
> EIP: 0060:[<c04147ec>] EFLAGS: 00210202 CPU: 1
> EIP is at native_flush_tlb_others+0x20/0xf1
> EAX: 00000001 EBX: e6f03390 ECX: 00000004 EDX: e6fe0a30
> ESI: e6f03200 EDI: ffffffff EBP: e6e8bd9c ESP: e6e8bd90
>  DS: 007b ES: 007b FS: 00d8 GS: 0000 SS: 0068
> Process test6.sh (pid: 16050, ti=e6e8b000 task=e6fe0a30 task.ti=e6e8b000)
> Stack:
>  e6f03390 e6f03200 00598000 e6e8bdac c0414b15 c1c456e0 3bec5025 e6e8be08
>  c04884d7 00000001 00000000 f61fdbb0 e6e8be20 00000000 00000001 006c0000
>  f65e3004 e6f03200 f6233660 c1c456e0 00000000 fffffffa c1aff268 f65e3004
> Call Trace:
>  [<c0414b15>] ? flush_tlb_mm+0x67/0x8a
>  [<c04884d7>] ? unmap_vmas+0x419/0x582
>  [<c048bb3e>] ? exit_mmap+0x9e/0x127
>  [<c042cc77>] ? mmput+0x3a/0x8b
>  [<c04a36bd>] ? flush_old_exec+0x4c1/0x756
>  [<c049f768>] ? vfs_read+0xf4/0x136
>  [<c04a2bf4>] ? kernel_read+0x39/0x4b
>  [<c04ca6ce>] ? load_elf_binary+0x33f/0x11bb
>  [<c04a28d4>] ? search_binary_handler+0xc5/0x263
>  [<c04a28dc>] ? search_binary_handler+0xcd/0x263
>  [<c04ca38f>] ? load_elf_binary+0x0/0x11bb
>  [<c04a3b6b>] ? do_execve+0x17a/0x20e
>  [<c04019a3>] ? sys_execve+0x2e/0x56
>  [<c0403485>] ? sysenter_do_call+0x12/0x35
> Code: 07 89 d8 e8 8c ff ff ff 5b 5d c3 55 89 e5 57 56 53 0f 1f 44 00 00 89 d6 8b 15 00 6b 77 c0 89 c3 89 cf e8 60 be 0f 00 85 c0 74 04 <0f> 0b eb fe 85 f6 75 04 0f 0b eb fe b8 10 0c 73 c0 e8 3c dc 20 
> EIP: [<c04147ec>] native_flush_tlb_others+0x20/0xf1 SS:ESP 0068:e6e8bd90
> ---[ end trace 6c8e163a63cc95c4 ]---
> note: test6.sh[16050] exited with preempt_count 2
> ------------[ cut here ]------------


I've got it too, in linux-next-20090119+reiser4 patches. Sadly, it's not reproducible.

.config attached


------------[ cut here ]------------
kernel BUG at arch/x86/kernel/tlb_32.c:130!
invalid opcode: 0000 [#1] PREEMPT SMP
last sysfs file: /sys/devices/pci0000:00/0000:00:18.3/modalias
Modules linked in: kvm_amd kvm lp powernow_k8 cpufreq_stats ipv6 af_packet nls_iso8859_1 nls_cp850 vfat fat nls_base reiserfs ac it87 hwmon_vid usbhid hid sr_mod cdrom snd_hda_codec_realtek pata_acpi snd_hda_intel snd_hda_codec snd_pcm snd_seq 8250_pnp parport_pc ata_generic snd_timer snd_seq_device sg k8temp ahci 8250 snd rtc_cmos rtc_core rtc_lib parport serial_core ohci_hcd ehci_hcd button hwmon forcedeth soundcore snd_page_alloc usbcore pcspkr evdev raid10 raid1 raid0 linear md_mod dm_snapshot thermal processor fan virtio_pci virtio_ring virtio_blk virtio reiser4 lzo_decompress lzo_compress zlib_inflate zlib_deflate sd_mod pata_sil680 pata_amd libata scsi_mod dm_mirror dm_region_hash dm_log dm_mod

Pid: 5023, comm: vim Not tainted (2.6.29-rc2-next-20090119-02796-g6d5823d #77) M68SM-S2L
EIP: 0060:[<c02110d0>] EFLAGS: 00010246 CPU: 0
EIP is at native_flush_tlb_others+0xe/0xa2
EAX: f5c07408 EBX: f5c07408 ECX: ffffffff EDX: f5c07278
ESI: f5c07278 EDI: ffffffff EBP: eede1660 ESP: eeed8d80
 DS: 007b ES: 007b FS: 00d8 GS: 0000 SS: 0068
Process vim (pid: 5023, ti=eeed8000 task=eec6c430 task.ti=eeed8000)
Stack:
 f5c07408 f5c07278 08053000 c0211011 c1c3d910 c185e20c c0268dc3 eeed8e28
 c0269329 c16b78a0 0821cfff 00000000 eeed8e28 292cf025 00000001 fffffffd
 08048000 00000001 00000000 f5c07278 0821d000 eeec5080 eeec5080 c1c3d920
Call Trace:
 [<c0211011>] flush_tlb_mm+0x5f/0x81
 [<c0268dc3>] tlb_finish_mmu+0x17/0x4d
 [<c0269329>] unmap_vmas+0x530/0x5dd
 [<c026caac>] exit_mmap+0x7f/0xcd
 [<c0223225>] mmput+0x31/0xa7
 [<c0226442>] exit_mm+0xd8/0xdf
 [<c0237333>] hrtimer_try_to_cancel+0x2f/0x35
 [<c0227a8b>] do_exit+0x147/0x6f7
 [<c0228096>] do_group_exit+0x5b/0x82
 [<c022fa4e>] get_signal_to_deliver+0x31a/0x334
 [<c0202443>] do_notify_resume+0x64/0x5be
 [<c0243d3e>] do_futex+0xcb/0x765
 [<c0286ade>] sys_select+0x81/0x8f
 [<c024089a>] trace_hardirqs_on_caller+0x10e/0x12e
 [<c0203110>] work_notifysig+0x13/0x1b
Code: 00 00 bb 80 bf 50 c0 e8 f8 ff 00 00 e8 56 24 0e 00 03 1c 85 80 16 4c c0 ff 43 1c 5b c3 57 89 cf 56 89 d6 53 80 38 00 89 c3 75 04 <0f> 0b eb fe 85 d2 75 04 0f 0b eb fe b8 e8 c3 49 c0 e8 bc f0 1a
EIP: [<c02110d0>] native_flush_tlb_others+0xe/0xa2 SS:ESP 0068:eeed8d80
---[ end trace 59b947037ddd4420 ]---


~~
laurent


View attachment "config-2.6.29-rc2-next-20090119-02796-g6d5823d" of type "text/plain" (58019 bytes)