From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1756549Ab3FGRhn (ORCPT ); Fri, 7 Jun 2013 13:37:43 -0400 Received: from mout.gmx.net ([212.227.15.15]:62851 "EHLO mout.gmx.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1755399Ab3FGRhl (ORCPT ); Fri, 7 Jun 2013 13:37:41 -0400 X-Authenticated: #4630777 X-Provags-ID: V01U2FsdGVkX1+tpkROdAqtlgpyP0cV6ULtf8Pl5tQxRV9QKJM5qc QCrXdizu+XVZ/j Message-ID: <51B21A5F.5050201@gmx.de> Date: Fri, 07 Jun 2013 19:37:35 +0200 From: Lino Sanfilippo User-Agent: Mozilla/5.0 (X11; Linux i686; rv:17.0) Gecko/20130510 Thunderbird/17.0.6 MIME-Version: 1.0 To: Tommi Rantala CC: Eric Paris , Andrew Morton , Al Viro , LKML , Dave Jones Subject: Re: GPF at fsnotify_clear_marks_by_group_flags() References: In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Y-GMX-Trusted: 0 Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On 03.06.2013 10:03, Tommi Rantala wrote: > Hello, > > Hit this while fuzzing v3.10-rc4-0-gd683b96 with trinity. > > Looks similar to what I reported back in March: > https://lkml.org/lkml/2013/3/13/222 > > Tommi > > [42279.088045] general protection fault: 0000 [#1] SMP DEBUG_PAGEALLOC > [42279.091904] CPU: 1 PID: 10937 Comm: trinity-child7 Tainted: G > I 3.10.0-rc4 #1 > [42279.091904] Hardware name: Hewlett-Packard HP Compaq dc7800 Small > Form Factor/0AA8h, BIOS 786F1 v01.24 03/18/2008 > [42279.091904] task: ffff8801125e23e0 ti: ffff8800bdf40000 task.ti: > ffff8800bdf40000 > [42279.091904] RIP: 0010:[] [] > fsnotify_clear_marks_by_group_flags+0x93/0xb0 > [42279.091904] RSP: 0018:ffff8800bdf41be8 EFLAGS: 00010246 > [42279.091904] RAX: ffff8800bdf41f00 RBX: ffff880102381400 RCX: 0000000000006c6b > [42279.091904] RDX: 0000000000000000 RSI: ffffffff82a42863 RDI: ffff880102381400 > [42279.091904] RBP: ffff8800bdf41c18 R08: 0000000000000002 R09: 0000000000000000 > [42279.091904] R10: 0000000000000000 R11: 0000000000000000 R12: 6b6b6b6b6b6b6b5b > [42279.091904] R13: ffff8800d4630a90 R14: 00000000ffffffff R15: ffff8800d4630c70 > [42279.091904] FS: 00007f9d0c425700(0000) GS:ffff880116a00000(0000) > knlGS:0000000000000000 > [42279.091904] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b > [42279.091904] CR2: 0000000000000000 CR3: 0000000110ea3000 CR4: 00000000000007e0 > [42279.091904] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 > [42279.091904] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 > [42279.091904] Stack: > [42279.091904] ffff8800d4630bc0 ffff8800d4630a90 0000000000000010 > ffff8800c51d0b90 > [42279.091904] ffff880114fbe9a0 ffff880115f78ca0 ffff8800bdf41c28 > ffffffff81275b8e > [42279.091904] ffff8800bdf41c40 ffffffff81274c3d ffff8800c96ca940 > ffff8800bdf41c50 > [42279.091904] Call Trace: > [42279.091904] [] fsnotify_clear_marks_by_group+0xe/0x10 > [42279.091904] [] fsnotify_destroy_group+0xd/0x30 > [42279.091904] [] inotify_release+0x10/0x20 > [42279.091904] [] __fput+0x12a/0x230 > [42279.091904] [] ____fput+0x9/0x10 > [42279.091904] [] task_work_run+0xae/0xf0 > [42279.091904] [] do_exit+0x44c/0xb40 > [42279.091904] [] ? get_signal_to_deliver+0xf9/0x920 > [42279.091904] [] do_group_exit+0x84/0xd0 > [42279.091904] [] get_signal_to_deliver+0x821/0x920 > [42279.091904] [] do_signal+0x52/0x590 > [42279.091904] [] ? do_readv_writev+0x249/0x270 > [42279.091904] [] ? __hrtimer_start_range_ns+0x451/0x500 > [42279.091904] [] ? trace_hardirqs_on+0xd/0x10 > [42279.091904] [] ? _raw_spin_unlock_irq+0x27/0x50 > [42279.091904] [] ? do_setitimer+0x27c/0x330 > [42279.091904] [] do_notify_resume+0x27/0x70 > [42279.091904] [] int_signal+0x12/0x17 > [42279.091904] Code: 0f 1f 84 00 00 00 00 00 49 89 d4 44 85 b3 94 00 > 00 00 74 17 f0 ff 43 04 48 89 df 4c 89 ee e8 75 fa ff ff 48 89 df e8 > ad f8 ff ff <49> 8b 54 24 10 49 8d 44 24 10 4c 89 e3 48 83 ea 10 49 39 > c7 75 > [42279.091904] RIP [] > fsnotify_clear_marks_by_group_flags+0x93/0xb0 > [42279.091904] RSP > [42279.417403] ---[ end trace 1dec2388e3dff256 ]--- > [42279.423057] Fixing recursive fault but reboot is needed! > Hi Tommi, thank you for reporting. Do you know a way how to reproduce this? Regards, Lino