| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <1418968765.11138.0.camel@egrumbacBox>
Date: Fri, 19 Dec 2014 05:59:25 +0000
From: "Grumbach, Emmanuel" <emmanuel.grumbach@...el.com>
To: "Wu, Fengguang" <fengguang.wu@...el.com>
CC: "linux-wireless@...r.kernel.org" <linux-wireless@...r.kernel.org>,
"netdev@...r.kernel.org" <netdev@...r.kernel.org>,
"linux-kernel@...r.kernel.org" <linux-kernel@...r.kernel.org>,
"lkp@...org" <lkp@...org>,
"linux-leds@...r.kernel.org" <linux-leds@...r.kernel.org>
Subject: Re: [iwlwifi] BUG: unable to handle kernel
On Thu, 2014-12-18 at 13:07 -0800, Fengguang Wu wrote:
> On Fri, Dec 19, 2014 at 03:42:17AM +0800, Grumbach, Emmanuel wrote:
> > On Thu, 2014-12-18 at 09:13 -0800, Fengguang Wu wrote:
> > > Hi All,
> > >
> > > I don't see any relationship between the BUG and this bisected commit.
> > > Anyway, it's better to report it to the lists than to ignore.
> >
> > Right - but I have to say that I have no clue how this comment can cause
> > the bug you are seeing...
>
> s?comment?commit?
>
Yes :)
> > Do you even have an Intel Wireless device the VM could access?
>
> Nope. It's simple QEMU virtual machine boot test.
>
In that case - this just can't be right... Don't know what to say...
> Thanks,
> Fengguang
>
> > >
> > > git://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/iwlwifi-fixes.git master
> > >
> > > commit 03d6c3b0fa4f5f0379cede079ec828a6c999fe43
> > > Author: Emmanuel Grumbach <emmanuel.grumbach@...el.com>
> > > AuthorDate: Wed Dec 3 10:39:07 2014 +0200
> > > Commit: Emmanuel Grumbach <emmanuel.grumbach@...el.com>
> > > CommitDate: Sun Dec 14 10:20:29 2014 +0200
> > >
> > > iwlwifi: pcie: re-ACK all interrupts after device reset
> > >
> > > When we reset the device, the CSR_INT gets cleared as well
> > > as CSR_INT_MASK. Meaning that we shouldn't get any interrupt
> > > but, due to a hardware bug, recent devices will keep sending
> > > interrupts. This leads to an interrupt storm while stopping
> > > the device.
> > > The way to fix this is to ACK all the interrupts after the
> > > device is reset so that the value of CSR_INT will stay
> > > 0xffffffff.
> > >
> > > Fixes: 522713c81e4e ("iwlwifi: pcie: properly reset the device")
> > > Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@...el.com>
> > >
> > > +------------------------------------------+------------+------------+------------+
> > > | | 0a79a0c011 | 03d6c3b0fa | iwlwifi-fi |
> > > +------------------------------------------+------------+------------+------------+
> > > | boot_successes | 60 | 19 | 3 |
> > > | boot_failures | 0 | 1 | 9 |
> > > | BUG:unable_to_handle_kernel | 0 | 1 | 9 |
> > > | Oops | 0 | 1 | 9 |
> > > | RIP:strcmp | 0 | 1 | 9 |
> > > | Kernel_panic-not_syncing:Fatal_exception | 0 | 1 | 9 |
> > > | backtrace:led_trigger_register_simple | 0 | 1 | 9 |
> > > | backtrace:ledtrig_usb_init | 0 | 1 | 9 |
> > > | backtrace:kernel_init_freeable | 0 | 1 | 9 |
> > > +------------------------------------------+------------+------------+------------+
> > >
> > > [ 5.345018] g_serial gadget: Gadget Serial v2.4
> > > [ 5.345927] g_serial gadget: g_serial ready
> > > [ 5.345927] g_serial gadget: g_serial ready
> > > [ 5.346777] BUG: unable to handle kernel
> > > [ 5.346777] BUG: unable to handle kernel paging requestpaging request at ffff88000004e5f0
> > > at ffff88000004e5f0
> > > [ 5.348183] IP:
> > > [ 5.348183] IP: [<ffffffff81446a68>] strcmp+0x6/0x20
> > > [<ffffffff81446a68>] strcmp+0x6/0x20
> > > [ 5.349183] PGD 37f1067
> > > [ 5.349183] PGD 37f1067 PUD 37f2067 PUD 37f2067 PMD 37f3067 PMD 37f3067 PTE 800000000004e060PTE 800000000004e060
> > >
> > > [ 5.350498] Oops: 0000 [#1]
> > > [ 5.350498] Oops: 0000 [#1] DEBUG_PAGEALLOCDEBUG_PAGEALLOC
> > >
> > > [ 5.351360] CPU: 0 PID: 1 Comm: swapper Not tainted 3.18.0-g03d6c3b #1
> > > [ 5.351360] CPU: 0 PID: 1 Comm: swapper Not tainted 3.18.0-g03d6c3b #1
> > > [ 5.352660] task: ffff880012060000 ti: ffff88001204c000 task.ti: ffff88001204c000
> > > [ 5.352660] task: ffff880012060000 ti: ffff88001204c000 task.ti: ffff88001204c000
> > > [ 5.354143] RIP: 0010:[<ffffffff81446a68>]
> > > [ 5.354143] RIP: 0010:[<ffffffff81446a68>] [<ffffffff81446a68>] strcmp+0x6/0x20
> > > [<ffffffff81446a68>] strcmp+0x6/0x20
> > > [ 5.354451] RSP: 0000:ffff88001204fe28 EFLAGS: 00010246
> > > [ 5.354451] RSP: 0000:ffff88001204fe28 EFLAGS: 00010246
> > > [ 5.354451] RAX: 0000000000000000 RBX: ffff88000c08fe00 RCX: ffffffff81d35310
> > > [ 5.354451] RAX: 0000000000000000 RBX: ffff88000c08fe00 RCX: ffffffff81d35310
> > > [ 5.354451] RDX: ffff88000c08fe68 RSI: ffffffff826d05be RDI: ffff88000004e5f0
> > > [ 5.354451] RDX: ffff88000c08fe68 RSI: ffffffff826d05be RDI: ffff88000004e5f0
> > > [ 5.354451] RBP: ffff88001204fe28 R08: 0000000000000001 R09: 000000000000033a
> > > [ 5.354451] RBP: ffff88001204fe28 R08: 0000000000000001 R09: 000000000000033a
> > > [ 5.354451] R10: 0000000000000000 R11: ffffffff82531cd1 R12: ffff88000c19fa00
> > > [ 5.354451] R10: 0000000000000000 R11: ffffffff82531cd1 R12: ffff88000c19fa00
> > > [ 5.354451] R13: 0000000000000000 R14: ffffffff837958b8 R15: 0000000000000000
> > > [ 5.354451] R13: 0000000000000000 R14: ffffffff837958b8 R15: 0000000000000000
> > > [ 5.354451] FS: 0000000000000000(0000) GS:ffffffff82789000(0000) knlGS:0000000000000000
> > > [ 5.354451] FS: 0000000000000000(0000) GS:ffffffff82789000(0000) knlGS:0000000000000000
> > > [ 5.354451] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b
> > > [ 5.354451] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b
> > > [ 5.354451] CR2: ffff88000004e5f0 CR3: 0000000002776000 CR4: 00000000000006b0
> > > [ 5.354451] CR2: ffff88000004e5f0 CR3: 0000000002776000 CR4: 00000000000006b0
> > > [ 5.354451] Stack:
> > > [ 5.354451] Stack:
> > > [ 5.354451] ffff88001204fe58
> > > [ 5.354451] ffff88001204fe58 ffffffff81d35334 ffffffff81d35334 0000000000000000 0000000000000000 ffff88000c19fa00 ffff88000c19fa00
> > >
> > > [ 5.354451] ffffffff826d05be
> > > [ 5.354451] ffffffff826d05be 0000000000000000 0000000000000000 ffff88001204fe88 ffff88001204fe88 ffffffff81d35648 ffffffff81d35648
> > >
> > > [ 5.354451] ffff88000e3bbcc0
> > > [ 5.354451] ffff88000e3bbcc0 ffffffff82b3fe61 ffffffff82b3fe61 0000000000000000 0000000000000000 ffffffff82b98910 ffffffff82b98910
> > >
> > > [ 5.354451] Call Trace:
> > > [ 5.354451] Call Trace:
> > > [ 5.354451] [<ffffffff81d35334>] led_trigger_register+0x63/0x129
> > > [ 5.354451] [<ffffffff81d35334>] led_trigger_register+0x63/0x129
> > > [ 5.354451] [<ffffffff81d35648>] led_trigger_register_simple+0x35/0x79
> > > [ 5.354451] [<ffffffff81d35648>] led_trigger_register_simple+0x35/0x79
> > > [ 5.354451] [<ffffffff82b3fe61>] ? gs_bind+0xea/0xea
> > > [ 5.354451] [<ffffffff82b3fe61>] ? gs_bind+0xea/0xea
> > > [ 5.354451] [<ffffffff82b3fe78>] ledtrig_usb_init+0x17/0x2e
> > > [ 5.354451] [<ffffffff82b3fe78>] ledtrig_usb_init+0x17/0x2e
> > > [ 5.354451] [<ffffffff82b00044>] do_one_initcall+0xe6/0x171
> > > [ 5.354451] [<ffffffff82b00044>] do_one_initcall+0xe6/0x171
> > > [ 5.354451] [<ffffffff82b001c7>] kernel_init_freeable+0xf8/0x180
> > > [ 5.354451] [<ffffffff82b001c7>] kernel_init_freeable+0xf8/0x180
> > > [ 5.354451] [<ffffffff82060791>] ? rest_init+0xbd/0xbd
> > > [ 5.354451] [<ffffffff82060791>] ? rest_init+0xbd/0xbd
> > > [ 5.354451] [<ffffffff8206079a>] kernel_init+0x9/0xd0
> > > [ 5.354451] [<ffffffff8206079a>] kernel_init+0x9/0xd0
> > > [ 5.354451] [<ffffffff8207d2ba>] ret_from_fork+0x7a/0xb0
> > > [ 5.354451] [<ffffffff8207d2ba>] ret_from_fork+0x7a/0xb0
> > > [ 5.354451] [<ffffffff82060791>] ? rest_init+0xbd/0xbd
> > > [ 5.354451] [<ffffffff82060791>] ? rest_init+0xbd/0xbd
> > > [ 5.354451] Code:
> > > [ 5.354451] Code: c0 c0 eb eb f5 f5 31 31 c9 c9 40 40 8a 8a 3c 3c 0e 0e 4d 4d 8d 8d 0c 0c 08 08 40 40 84 84 ff ff 41 41 88 88 3c 3c 08 08 74 74 0d 0d 48 48 ff ff c1 c1 48 48 39 39 ca ca 75 75 e7 e7 41 41 c6 c6 41 41 01 01 00 00 5d 5d c3 c3 55 55 31 31 c0 c0 48 48 89 89 e5 e5 <8a> <8a> 14 14 07 07 3a 3a 14 14 06 06 74 74 07 07 19 19 c0 c0 83 83 c8 c8 01 01 eb eb 09 09 48 48 ff ff c0 c0 84 84 d2 d2 75 75
> > >
> > > [ 5.354451] RIP
> > > [ 5.354451] RIP [<ffffffff81446a68>] strcmp+0x6/0x20
> > > [<ffffffff81446a68>] strcmp+0x6/0x20
> > > [ 5.354451] RSP <ffff88001204fe28>
> > > [ 5.354451] RSP <ffff88001204fe28>
> > > [ 5.354451] CR2: ffff88000004e5f0
> > > [ 5.354451] CR2: ffff88000004e5f0
> > > [ 5.354451] ---[ end trace 8f9377b34c860a0c ]---
> > > [ 5.354451] ---[ end trace 8f9377b34c860a0c ]---
> > >
> > > git bisect start baa21e834941ee5fbe4bd421c871f7c0c5f9a086 70e71ca0af244f48a5dcf56dc435243792e3a495 --
> > > git bisect bad 03d6c3b0fa4f5f0379cede079ec828a6c999fe43 # 16:23 0- 1 iwlwifi: pcie: re-ACK all interrupts after device reset
> > > git bisect good 0a79a0c011cb291675e3b80760a452fcba5c59d9 # 16:28 20+ 0 iwlwifi: mvm: clear IN_HW_RESTART flag on stop()
> > > # first bad commit: [03d6c3b0fa4f5f0379cede079ec828a6c999fe43] iwlwifi: pcie: re-ACK all interrupts after device reset
> > > git bisect good 0a79a0c011cb291675e3b80760a452fcba5c59d9 # 16:30 60+ 0 iwlwifi: mvm: clear IN_HW_RESTART flag on stop()
> > > # extra tests on HEAD of iwlwifi-fixes/master
> > > git bisect bad baa21e834941ee5fbe4bd421c871f7c0c5f9a086 # 16:30 0- 9 iwlwifi: pcie: limit fw chunk sizes given to fh
> > > # extra tests on tree/branch iwlwifi-fixes/master
> > > git bisect bad baa21e834941ee5fbe4bd421c871f7c0c5f9a086 # 16:30 0- 9 iwlwifi: pcie: limit fw chunk sizes given to fh
> > > # extra tests on tree/branch linus/master
> > > git bisect good 44e8967d591686463e84a88b46b03beba3ab49fb # 16:32 60+ 0 Ceph: remove left-over reject file
> > > # extra tests on tree/branch next/master
> > > git bisect good cfaa3a95dd2b402599b1d8122dc3107478db8717 # 16:35 60+ 1 Add linux-next specific files for 20141218
> > >
> > >
> > > This script may reproduce the error.
> > >
> > > ----------------------------------------------------------------------------
> > > #!/bin/bash
> > >
> > > kernel=$1
> > > initrd=quantal-core-x86_64.cgz
> > >
> > > wget --no-clobber https://github.com/fengguang/reproduce-kernel-bug/raw/master/initrd/$initrd
> > >
> > > kvm=(
> > > qemu-system-x86_64
> > > -cpu kvm64
> > > -enable-kvm
> > > -kernel $kernel
> > > -initrd $initrd
> > > -m 320
> > > -smp 2
> > > -net nic,vlan=1,model=e1000
> > > -net user,vlan=1
> > > -boot order=nc
> > > -no-reboot
> > > -watchdog i6300esb
> > > -rtc base=localtime
> > > -serial stdio
> > > -display none
> > > -monitor null
> > > )
> > >
> > > append=(
> > > hung_task_panic=1
> > > earlyprintk=ttyS0,115200
> > > debug
> > > apic=debug
> > > sysrq_always_enabled
> > > rcupdate.rcu_cpu_stall_timeout=100
> > > panic=-1
> > > softlockup_panic=1
> > > nmi_watchdog=panic
> > > oops=panic
> > > load_ramdisk=2
> > > prompt_ramdisk=0
> > > console=ttyS0,115200
> > > console=tty0
> > > vga=normal
> > > root=/dev/ram0
> > > rw
> > > drbd.minor_count=8
> > > )
> > >
> > > "${kvm[@]}" --append "${append[*]}"
> > > ----------------------------------------------------------------------------
> > >
> > > Thanks,
> > > Fengguang
> > > _______________________________________________
> > > LKP mailing list
> > > LKP@...ux.intel.com
> >
Powered by blists - more mailing lists