lkml.org 
[lkml]   [2012]   [Feb]   [24]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: Linux 3.3-rc4
    On Sat, 18 Feb 2012, Linus Torvalds wrote:

    > So it's almost getting to be a habit: yet another -rc release that is
    > delayed by a couple of days.

    I just got the BUG below (with g45196ce being the topmost commit).

    It happened when trying to start 'gwenview', but I am not able to
    reproduce it again. Adding a few people to CC just in case someone
    immediately sees what might be the problem.

    The IP resolves to

    #ifdef CONFIG_MMU
    static int dup_mmap(struct mm_struct *mm, struct mm_struct *oldmm)
    {
    [ ... snip ... ]
    if (file) {
    ===> this line struct inode *inode = file->f_path.dentry->d_inode;
    struct address_space *mapping = file->f_mapping;

    get_file(file);
    if (tmp->vm_flags & VM_DENYWRITE)
    atomic_dec(&inode->i_writecount);
    mutex_lock(&mapping->i_mmap_mutex);
    if (tmp->vm_flags & VM_SHARED)
    mapping->i_mmap_writable++;
    flush_dcache_mmap_lock(mapping);
    /* insert tmp into the share list, just after mpnt */
    vma_prio_tree_add(tmp, mpnt);
    flush_dcache_mmap_unlock(mapping);
    mutex_unlock(&mapping->i_mmap_mutex);
    }


    more precisely:

    [ ... snip ... ]
    0xffffffff8103a4f9 <+409>: andq $0xffffffffffffdfff,0x30(%rbx)
    0xffffffff8103a501 <+417>: movq $0x0,0x20(%rbx)
    0xffffffff8103a509 <+425>: movq $0x0,0x18(%rbx)
    0xffffffff8103a511 <+433>: test %rdx,%rdx
    0xffffffff8103a514 <+436>: je 0xffffffff8103a565 <dup_mmap+517>
    0xffffffff8103a516 <+438>: mov 0x18(%rdx),%rax
    0xffffffff8103a51a <+442>: mov 0x130(%rdx),%r12
    ===> this line 0xffffffff8103a521 <+449>: mov 0x30(%rax),%rax
    0xffffffff8103a525 <+453>: lock incq 0x68(%rdx)
    0xffffffff8103a52a <+458>: testb $0x8,0x31(%rbx)
    [ ... snip ... ]

    The machine has gone through several suspend-resume cycles before this
    happened, so it might well also be some memory corruption caused by a
    random driver.



    BUG: unable to handle kernel NULL pointer dereference at 0000000000000030
    IP: [<ffffffff8103a521>] dup_mmap+0x1c1/0x3b0
    PGD 3774f067 PUD 36cf7067 PMD 0
    Oops: 0000 [#1] SMP
    CPU 0
    Modules linked in: af_packet iwlwifi tun iptable_mangle xt_DSCP xt_tcpudp nf_conntrack_ipv6 nf_defrag_ipv6 ip6table_filter ip6_tab
    conntrack cpufreq_conservative iptable_filter cpufreq_userspace cpufreq_powersave acpi_cpufreq ip_tables mperf x_tables microcode
    ooth snd_hda_codec_conexant pcspkr iTCO_wdt iTCO_vendor_support i2c_i801 cfg80211 snd_hda_intel snd_hda_codec snd_hwdep snd_pcm sn
    l ac snd tpm_tis soundcore tpm tpm_bios battery wmi autofs4 uhci_hcd i915 drm_kms_helper drm i2c_algo_bit ehci_hcd button video us
    ermal thermal_sys [last unloaded: iwlwifi]

    Pid: 1993, comm: Xorg Not tainted 3.3.0-rc4-00074-g45196ce #1 LENOVO 7470BN2/7470BN2
    RIP: 0010:[<ffffffff8103a521>] [<ffffffff8103a521>] dup_mmap+0x1c1/0x3b0
    RSP: 0018:ffff8800780bdd50 EFLAGS: 00010286
    RAX: 0000000000000000 RBX: ffff880077f25d98 RCX: 0000000000000000
    RDX: ffff88003767ed00 RSI: ffff880037b36298 RDI: ffff880077f25d98
    RBP: ffff8800780bddb0 R08: ffff880067ded4e0 R09: 0000000000000014
    R10: 0000000000000000 R11: 0000000000000001 R12: ffff8800767a5d50
    R13: ffff880037b36298 R14: ffff880056d520c0 R15: 0000000000000000
    FS: 00007f96b2bd6880(0000) GS:ffff88007c200000(0000) knlGS:0000000000000000
    CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b
    CR2: 0000000000000030 CR3: 00000000372a3000 CR4: 00000000000006f0
    DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
    DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
    Process Xorg (pid: 1993, threadinfo ffff8800780bc000, task ffff880078044040)
    Stack:
    ffff880037b7ba80 ffff880037b7bb18 ffff880056d52158 ffff880077f25e48
    ffff880077f25e60 ffff880077f25e88 ffff880077f25e80 ffff880056d520c0
    ffff880037b7ba80 ffff880041afe040 0000000000000000 00007f96b2bd6b50
    Call Trace:
    [<ffffffff8103ab5f>] dup_mm+0xbf/0x150
    [<ffffffff8103bb72>] copy_process+0xf82/0xfa0
    [<ffffffff8103bf78>] do_fork+0xb8/0x300
    [<ffffffff8104f94c>] ? do_sigaction+0x13c/0x1e0
    [<ffffffff81164040>] ? fd_install+0x30/0x60
    [<ffffffff812eb3c9>] ? lockdep_sys_exit_thunk+0x35/0x67
    [<ffffffff8100af83>] sys_clone+0x23/0x30
    [<ffffffff8157b553>] stub_clone+0x13/0x20
    [<ffffffff8157b1f9>] ? system_call_fastpath+0x16/0x1b
    Code: 00 00 00 48 81 63 30 ff df ff ff 48 c7 43 20 00 00 00 00 48 c7 43 18 00 00 00 00 48 85 d2 74 4f 48 8b 42 18 4c 8b a2 30 01 00 00 <48> 8b 40 30 f0 48 ff 42 68 f6 43 31 08 74 07 f0 ff 88 cc 01 00
    RIP [<ffffffff8103a521>] dup_mmap+0x1c1/0x3b0
    RSP <ffff8800780bdd50>
    CR2: 0000000000000030

    --
    Jiri Kosina
    SUSE Labs



    \
     
     \ /
      Last update: 2012-02-24 11:41    [W:0.035 / U:56.628 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site