From: Peter Zijlstra <peterz@infradead.org>
To: Sasha Levin <sasha.levin@oracle.com>
Cc: Ingo Molnar <mingo@kernel.org>,
acme@ghostprotocols.net, LKML <linux-kernel@vger.kernel.org>,
Thomas Gleixner <tglx@linutronix.de>,
Dave Jones <davej@redhat.com>,
hpa@linux.intel.com, tytso@mit.edu, price@mit.edu,
hannes@stressinduktion.org
Subject: BUG_ON drivers/char/random.c:986 (Was: perf: use after free in perf_remove_from_context)
Date: Fri, 16 May 2014 17:34:55 +0200 [thread overview]
Message-ID: <20140516153455.GV11096@twins.programming.kicks-ass.net> (raw)
In-Reply-To: <5370EBE9.6@oracle.com>
[-- Attachment #1: Type: text/plain, Size: 2623 bytes --]
While fuzzing to reproduce my issue I hit the below, its triggered loads
of times and then the machine wedged (needed a power cycle), I can
provide the full console log if people care.
Anybody seen that one before?
---
[ 861.777414] ------------[ cut here ]------------
[ 861.777416] kernel BUG at /usr/src/linux-2.6/drivers/char/random.c:986!
[ 861.777419] invalid opcode: 0000 [#1] PREEMPT SMP
[ 861.777421] Modules linked in:
[ 861.777424] CPU: 1 PID: 9851 Comm: trinity-c321 Not tainted 3.15.0-rc5-01700-g505011124ad0-dirty #1076
[ 861.777425] Hardware name: Supermicro X8DTN/X8DTN, BIOS 4.6.3 01/08/2010
[ 861.777426] task: ffff88022f68a600 ti: ffff88022f716000 task.ti: ffff88022f716000
[ 861.777433] RIP: 0010:[<ffffffff81429ce4>] [<ffffffff81429ce4>] account+0x164/0x170
[ 861.777434] RSP: 0000:ffff88022f717e48 EFLAGS: 00010202
[ 861.777435] RAX: ffffffff81c90788 RBX: 0000000000000991 RCX: 0000000000000000
[ 861.777436] RDX: 0000000000000000 RSI: 0000000000000991 RDI: 0000000000002000
[ 861.777437] RBP: ffff88022f717e70 R08: 0000000000000000 R09: 0000000000000000
[ 861.777438] R10: 00000000000046c0 R11: 000000c8a18b27e1 R12: ffffffff81c90300
[ 861.777439] R13: 0000000000000000 R14: ffffffff8142aff6 R15: ffffffff81a58605
[ 861.777441] FS: 00007fba327ff700(0000) GS:ffff880237c20000(0000) knlGS:0000000000000000
[ 861.777442] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 861.777443] CR2: 0000000000000010 CR3: 000000022f703000 CR4: 00000000000007e0
[ 861.777444] Stack:
[ 861.777446] 0000000000000991 0000000000007b44 0000000000000000 ffffffff8142aff6
[ 861.777448] ffffffff81a58605 ffff88022f717ed0 ffffffff8142ae82 0000000000000000
[ 861.777450] ffffffff81c90300 0000000000020000 ffff880233291240 ffff880435788690
[ 861.777451] Call Trace:
[ 861.777454] [<ffffffff8142aff6>] ? urandom_read+0x46/0x120
[ 861.777455] [<ffffffff8142ae82>] extract_entropy_user+0x52/0x180
[ 861.777457] [<ffffffff8142aff6>] urandom_read+0x46/0x120
[ 861.777462] [<ffffffff811cdf3b>] vfs_read+0xab/0x180
[ 861.777464] [<ffffffff811ce1b2>] SyS_read+0x52/0xb0
[ 861.777466] [<ffffffff8168c939>] ia32_do_call+0x13/0x13
[ 861.777489] Code: c9 81 e8 a0 5e cb ff ba 02 00 02 00 be 1d 00 00 00 48 c7 c7 c0 e5 c6 82 e8 9a 64 db ff 48 89 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 66 66 66 66 90 55 48 89 e5
[ 861.777491] RIP [<ffffffff81429ce4>] account+0x164/0x170
[ 861.777492] RSP <ffff88022f717e48>
[ 861.778140] ---[ end trace e70cc3dc70339c62 ]---
[ 861.779282] ------------[ cut here ]------------
[-- Attachment #2: Type: application/pgp-signature, Size: 836 bytes --]
next prev parent reply other threads:[~2014-05-16 15:35 UTC|newest]
Thread overview: 46+ messages / expand[flat|nested] mbox.gz Atom feed top
2014-05-12 15:42 perf: use after free in perf_remove_from_context Sasha Levin
2014-05-14 16:29 ` Peter Zijlstra
2014-05-14 16:32 ` Sasha Levin
2014-05-14 16:35 ` Peter Zijlstra
2014-05-14 16:38 ` Sasha Levin
2014-05-14 16:52 ` Peter Zijlstra
2014-05-14 17:09 ` Sasha Levin
2014-05-14 17:20 ` Dave Jones
2014-05-14 18:37 ` Peter Zijlstra
2014-05-28 23:52 ` Sasha Levin
2014-05-29 2:31 ` Sasha Levin
2014-05-29 7:59 ` Peter Zijlstra
2014-05-29 7:57 ` Peter Zijlstra
2014-05-29 14:47 ` Sasha Levin
2014-05-29 15:07 ` Peter Zijlstra
2014-05-29 16:44 ` Sasha Levin
2014-05-29 16:50 ` Peter Zijlstra
2014-05-29 16:52 ` Sasha Levin
2014-05-29 17:00 ` Peter Zijlstra
2014-05-29 22:37 ` Sasha Levin
2014-06-05 14:38 ` [tip:perf/core] perf: Fix use after free in perf_remove_from_context() tip-bot for Peter Zijlstra
2014-05-15 18:11 ` eventpoll __list_del_entry corruption (was: perf: use after free in perf_remove_from_context) Peter Zijlstra
2014-05-15 18:16 ` eventpoll __list_del_entry corruption Sasha Levin
2014-06-16 9:44 ` Eric Wong
2014-05-21 8:25 ` BUG at /usr/src/linux-2.6/mm/filemap.c:202 (was: perf: use after free in perf_remove_from_context) Peter Zijlstra
2014-05-21 13:02 ` BUG at /usr/src/linux-2.6/mm/filemap.c:202 Sasha Levin
2014-06-03 15:07 ` eventpoll __list_del_entry corruption Jason Baron
2014-06-03 15:11 ` Peter Zijlstra
2014-05-16 15:34 ` Peter Zijlstra [this message]
2014-05-16 16:06 ` BUG_ON drivers/char/random.c:986 (Was: perf: use after free in perf_remove_from_context) H. Peter Anvin
2014-05-16 16:21 ` Peter Zijlstra
2014-05-17 0:46 ` Hannes Frederic Sowa
2014-05-17 2:18 ` Theodore Ts'o
2014-05-17 16:24 ` Sasha Levin
2014-05-17 17:00 ` Peter Zijlstra
2014-07-15 4:36 ` BUG_ON drivers/char/random.c:986 Dave Jones
2014-07-15 20:29 ` Hannes Frederic Sowa
2014-07-16 8:33 ` Theodore Ts'o
2014-07-16 19:18 ` [PATCH] random: check for increase of entropy_count because of signed conversion Hannes Frederic Sowa
2014-07-18 21:25 ` Theodore Ts'o
2014-07-18 21:43 ` Hannes Frederic Sowa
2014-07-18 21:50 ` Theodore Ts'o
2014-07-18 22:07 ` Theodore Ts'o
2014-07-18 23:35 ` Hannes Frederic Sowa
2014-07-19 5:42 ` Theodore Ts'o
2014-07-19 6:20 ` Hannes Frederic Sowa
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20140516153455.GV11096@twins.programming.kicks-ass.net \
--to=peterz@infradead.org \
--cc=acme@ghostprotocols.net \
--cc=davej@redhat.com \
--cc=hannes@stressinduktion.org \
--cc=hpa@linux.intel.com \
--cc=linux-kernel@vger.kernel.org \
--cc=mingo@kernel.org \
--cc=price@mit.edu \
--cc=sasha.levin@oracle.com \
--cc=tglx@linutronix.de \
--cc=tytso@mit.edu \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox