linux-kernel - forcedeth 0000:00:0a.0: DMA-API: device driver frees DMA memory with wrong function [device address=0x0000000035992232] [size=42 bytes] [mapped as single] [unmapped as page]

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20090318112026.GA32233@elte.hu>
Date:	Wed, 18 Mar 2009 12:20:26 +0100
From:	Ingo Molnar <mingo@...e.hu>
To:	Joerg Roedel <joerg.roedel@....com>
Cc:	Ingo Molnar <mingo@...hat.com>, iommu@...ts.linux-foundation.org,
	linux-kernel@...r.kernel.org
Subject: forcedeth 0000:00:0a.0: DMA-API: device driver frees DMA memory
	with wrong function [device address=0x0000000035992232] [size=42
	bytes] [mapped as single] [unmapped as page]


-tip testing found this DMA-debug assert:

[   19.648023] eth0: no link during initialization.
[   21.952553] eth0: link up.
[   22.684073] ------------[ cut here ]------------
[   22.688023] WARNING: at lib/dma-debug.c:562 check_unmap+0x30e/0x4b4()
[   22.688023] Hardware name: System Product Name
[   22.688023] 
forcedeth 0000:00:0a.0: DMA-API: device driver frees DMA memory with wrong function [device address=0x0000000035992232] [size=42 bytes] [mapped as single] [unmapped as page]
[   22.688023] Modules linked in:
[   22.688023] Pid: 1523, comm: arping Not tainted 2.6.29-rc8-tip #20999
[   22.688023] Call Trace:
[   22.688023]  [<c0140eae>] warn_slowpath+0x76/0xad
[   22.688023]  [<c0293a0b>] ? add_dma_entry+0x4b/0x51
[   22.688023]  [<c015eec5>] ? mark_lock+0x1c/0x16f
[   22.688023]  [<c015f1a4>] ? __lock_acquire+0x18c/0x296
[   22.688023]  [<c03473cc>] ? nv_start_xmit_optimized+0x3bd/0x3eb
[   22.688023]  [<c015eec5>] ? mark_lock+0x1c/0x16f
[   22.688023]  [<c015f1a4>] ? __lock_acquire+0x18c/0x296
[   22.688023]  [<c0293572>] check_unmap+0x30e/0x4b4
[   22.688023]  [<c055f7c3>] ? _spin_lock+0x27/0x2f
[   22.688023]  [<c0145ba1>] ? _local_bh_enable_ip+0xa1/0xa7
[   22.688023]  [<c049e0f8>] ? dev_queue_xmit+0x325/0x359
[   22.688023]  [<c0188922>] ? trace_hardirqs_on+0x21/0x23
[   22.688023]  [<c0145ba1>] ? _local_bh_enable_ip+0xa1/0xa7
[   22.688023]  [<c0145bc6>] ? local_bh_enable+0x10/0x12
[   22.688023]  [<c050225c>] ? packet_sendmsg+0x1b7/0x20a
[   22.688023]  [<c02939b8>] debug_dma_unmap_page+0x59/0x61
[   22.688023]  [<c034421f>] pci_unmap_page+0x5b/0x66
[   22.688023]  [<c03446fd>] nv_tx_done_optimized+0x46/0x1c5
[   22.688023]  [<c0345922>] nv_nic_irq_optimized+0xa7/0x233
[   22.688023]  [<c017706e>] handle_IRQ_event+0x85/0xdf
[   22.688023]  [<c01785df>] handle_fasteoi_irq+0x79/0xb9
[   22.688023]  [<c0119973>] handle_irq+0x1f/0x24
[   22.688023]  [<c0119332>] do_IRQ+0x45/0x88
[   22.688023]  [<c0118455>] common_interrupt+0x35/0x40
[   22.688023]  [<c0144515>] ? do_setitimer+0x160/0x2d9
[   22.688023]  [<c055f69b>] ? _spin_unlock_irq+0x29/0x2b
[   22.688023]  [<c0144515>] do_setitimer+0x160/0x2d9
[   22.688023]  [<c04926fa>] ? sys_socketcall+0xed/0x188
[   22.688023]  [<c014473b>] alarm_setitimer+0x39/0x58
[   22.688023]  [<c0149776>] sys_alarm+0x10/0x12
[   22.688023]  [<c0117d47>] sysenter_do_call+0x12/0x32
[   22.688023] ---[ end trace bf7fa25698012db6 ]---
[   22.688023] Mapped at:
[   22.688023]  [<c0293cc1>] debug_dma_map_page+0x6c/0x128
[   22.688023]  [<c0345bd0>] pci_map_single+0xb5/0xc1
[   22.688023]  [<c0347147>] nv_start_xmit_optimized+0x138/0x3eb
[   22.688023]  [<c049dc7c>] dev_hard_start_xmit+0x123/0x18f
[   22.688023]  [<c04acbb9>] __qdisc_run+0xd0/0x1b3
[   23.700081] arping used greatest stack depth: 5988 bytes left
[   24.545512] Adding 3911816k swap on /dev/sda2.  Priority:-1 extents:1 across:3911816k 

Config and full bootlog attached.

	Ingo

View attachment "log" of type "text/plain" (194801 bytes)

View attachment "config" of type "text/plain" (71067 bytes)