kernel 3.11.0-3-generic BUG: unable to handle kernel paging request

Bug #1216294 reported by Stefan
20
This bug affects 3 people
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Fix Released
Medium
Tyler Hicks

Bug Description

Ubuntu 13.10 kernel Oops at boot. Machine is a virtual KVM guest on a Debian host.

Linux ubuntu1310 3.11.0-3-generic #8-Ubuntu SMP Fri Aug 23 16:52:37 UTC 2013 i686 i686 i686 GNU/Linux

dmesg:
#####

[ 7.971731] BUG: unable to handle kernel paging request at d8011a00
[ 7.971850] IP: [<c104c05b>] kmap_atomic_prot+0x1b/0x100
[ 7.971998] *pdpt = 0000000001a56001 *pde = 0000000000000000
[ 7.972035] Oops: 0000 [#1] SMP
[ 7.972035] Modules linked in: serio_raw(F) i2c_piix4 soundcore(F) ppdev(F) pvpanic rfcomm bnep parport_pc(F) bluetooth mac_hid lp(F) parport(F) ext2(F) hid_generic usbhid hid floppy(F)
[ 7.972035] CPU: 0 PID: 467 Comm: apparmor_parser Tainted: GF 3.11.0-3-generic #8-Ubuntu
[ 7.972035] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[ 7.972035] task: d4433380 ti: d44c0000 task.ti: d44c0000
[ 7.972035] EIP: 0060:[<c104c05b>] EFLAGS: 00010202 CPU: 0
[ 7.972035] EIP is at kmap_atomic_prot+0x1b/0x100
[ 7.972035] EAX: d44c0000 EBX: d44c1e28 ECX: 80000000 EDX: 00000163
[ 7.972035] ESI: d8011a00 EDI: 00000010 EBP: d44c1de8 ESP: d44c1dd8
[ 7.972035] DS: 007b ES: 007b FS: 00d8 GS: 00e0 SS: 0068
[ 7.972035] CR0: 80050033 CR2: d8011a00 CR3: 13936000 CR4: 000006f0
[ 7.972035] Stack:
[ 7.972035] d4d18000 d44c1e28 00000ff0 00000010 d44c1df0 c104c159 d44c1e08 c12be770
[ 7.972035] 00000000 00000000 d6c0eac0 d7cfd000 d44c1e10 c12be7e2 d44c1e1c c12bef73
[ 7.972035] d6c13e00 d44c1e4c c12bf66e 00008ec9 d44c1000 00000010 00000000 d8011a00
[ 7.972035] Call Trace:
[ 7.972035] [<c104c159>] kmap_atomic+0x19/0x20
[ 7.972035] [<c12be770>] hash_walk_next+0x30/0x60
[ 7.972035] [<c12be7e2>] hash_walk_new_entry+0x42/0x50
[ 7.972035] [<c12bef73>] crypto_hash_walk_first_compat+0x33/0x40
[ 7.972035] [<c12bf66e>] shash_compat_update+0x1e/0x50
[ 7.972035] [<c12b659e>] aa_calc_profile_hash+0x11e/0x160
[ 7.972035] [<c12ae88e>] aa_unpack+0x35e/0xb90
[ 7.972035] [<c12a8080>] ? profile_remove+0x50/0x50
[ 7.972035] [<c12ad443>] aa_replace_profiles+0x33/0x9d0
[ 7.972035] [<c1146c98>] ? vmalloc+0x38/0x40
[ 7.972035] [<c12fb8ac>] ? _copy_from_user+0x2c/0x40
[ 7.972035] [<c12a8080>] ? profile_remove+0x50/0x50
[ 7.972035] [<c12a80b5>] profile_replace+0x35/0x50
[ 7.972035] [<c11694bd>] vfs_write+0x9d/0x1b0
[ 7.972035] [<c1169b69>] SyS_write+0x49/0x90
[ 7.972035] [<c163ce8d>] sysenter_do_call+0x12/0x28
[ 7.972035] Code: 0b eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 90 55 89 e5 57 56 53 83 ec 04 3e 8d 74 26 00 89 c6 89 e0 25 00 e0 ff ff 83 40 14 01 <8b> 06 c1 e8 1e 69 c0 40 03 00 00 05 40 92 95 c1 2b 80 0c 03 00
[ 7.972035] EIP: [<c104c05b>] kmap_atomic_prot+0x1b/0x100 SS:ESP 0068:d44c1dd8
[ 7.972035] CR2: 00000000d8011a00
[ 7.972035] ---[ end trace 8b400beaed908bb0 ]---
[ 7.972035] note: apparmor_parser[467] exited with preempt_count 1
[ 7.995943] BUG: scheduling while atomic: apparmor_parser/467/0x10000001
[ 7.999156] Modules linked in: serio_raw(F) i2c_piix4 soundcore(F) ppdev(F) pvpanic rfcomm bnep parport_pc(F) bluetooth mac_hid lp(F) parport(F) ext2(F) hid_generic usbhid hid floppy(F)
---
ApportVersion: 2.12.1-0ubuntu2
Architecture: i386
AudioDevicesInUse:
 USER PID ACCESS COMMAND
 /dev/snd/controlC0: testuser 2664 F.... lxpanel
CRDA: Error: [Errno 2] No such file or directory
DistroRelease: Ubuntu 13.10
HibernationDevice: RESUME=/dev/mapper/ubuntu1310--vg-swap_1
InstallationDate: Installed on 2013-07-25 (29 days ago)
InstallationMedia: Lubuntu 13.10 "Saucy Salamander" - Alpha i386 (20130725)
IwConfig:
 lo no wireless extensions.

 eth0 no wireless extensions.
Lsusb:
 Bus 001 Device 002: ID 0627:0001 Adomax Technology Co., Ltd
 Bus 001 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
MachineType: Bochs Bochs
MarkForUpload: True
Package: linux 3.11.0.3.4
PackageArchitecture: i386
ProcFB: 0 EFI VGA
ProcKernelCmdLine: BOOT_IMAGE=/vmlinuz-3.11.0-3-generic root=/dev/mapper/hostname--vg-root ro quiet splash vt.handoff=7
ProcVersionSignature: Ubuntu 3.11.0-3.8-generic 3.11.0-rc6
RelatedPackageVersions:
 linux-restricted-modules-3.11.0-3-generic N/A
 linux-backports-modules-3.11.0-3-generic N/A
 linux-firmware 1.113
RfKill:

StagingDrivers: zram
Tags: saucy staging
Uname: Linux 3.11.0-3-generic i686
UpgradeStatus: No upgrade log present (probably fresh install)
UserGroups:

dmi.bios.date: 01/01/2011
dmi.bios.vendor: Bochs
dmi.bios.version: Bochs
dmi.chassis.type: 1
dmi.chassis.vendor: Bochs
dmi.modalias: dmi:bvnBochs:bvrBochs:bd01/01/2011:svnBochs:pnBochs:pvr:cvnBochs:ct1:cvr:
dmi.product.name: Bochs
dmi.sys.vendor: Bochs

Revision history for this message
Brad Figg (brad-figg) wrote : Missing required logs.

This bug is missing log files that will aid in diagnosing the problem. From a terminal window please run:

apport-collect 1216294

and then change the status of the bug to 'Confirmed'.

If, due to the nature of the issue you have encountered, you are unable to run this command, please add a comment stating that fact and change the bug status to 'Confirmed'.

This change has been made by an automated script, maintained by the Ubuntu Kernel Team.

Changed in linux (Ubuntu):
status: New → Incomplete
Revision history for this message
Stefan (stefanp) wrote : AlsaInfo.txt

apport information

tags: added: apport-collected saucy staging
description: updated
Revision history for this message
Stefan (stefanp) wrote : BootDmesg.txt

apport information

Revision history for this message
Stefan (stefanp) wrote : CurrentDmesg.txt

apport information

Revision history for this message
Stefan (stefanp) wrote : Dependencies.txt

apport information

Revision history for this message
Stefan (stefanp) wrote : Lspci.txt

apport information

Revision history for this message
Stefan (stefanp) wrote : ProcCpuinfo.txt

apport information

Revision history for this message
Stefan (stefanp) wrote : ProcEnviron.txt

apport information

Revision history for this message
Stefan (stefanp) wrote : ProcInterrupts.txt

apport information

Revision history for this message
Stefan (stefanp) wrote : ProcModules.txt

apport information

Revision history for this message
Stefan (stefanp) wrote : UdevDb.txt

apport information

Revision history for this message
Stefan (stefanp) wrote : UdevLog.txt

apport information

Revision history for this message
Stefan (stefanp) wrote : WifiSyslog.txt

apport information

Changed in linux (Ubuntu):
status: Incomplete → Confirmed
Revision history for this message
Joseph Salisbury (jsalisbury) wrote :

Did this issue start happening after an update/upgrade? Was there a kernel version where you were not having this particular problem? This will help determine if the problem you are seeing is the result of the introduction of a regression, and when this regression was introduced. If this is a regression, we can perform a kernel bisect to identify the commit that introduced the problem.

Changed in linux (Ubuntu):
importance: Undecided → Medium
status: Confirmed → Incomplete
Revision history for this message
Joseph Salisbury (jsalisbury) wrote :

Would it be possible for you to test the latest upstream kernel? Refer to https://wiki.ubuntu.com/KernelMainlineBuilds . Please test the latest v3.11 kernel[0].

If this bug is fixed in the mainline kernel, please add the following tag 'kernel-fixed-upstream'.

If the mainline kernel does not fix this bug, please add the tag: 'kernel-bug-exists-upstream'.

If you are unable to test the mainline kernel, for example it will not boot, please add the tag: 'kernel-unable-to-test-upstream'.
Once testing of the upstream kernel is complete, please mark this bug as "Confirmed".

Thanks in advance.

[0] http://kernel.ubuntu.com/~kernel-ppa/mainline/v3.11-rc7-saucy/

Revision history for this message
Stefan (stefanp) wrote :

I tested the kernel version you mentioned.
3.11.0-031100rc7-generic does not have this problem, it appeared after upgrading from 3.10.0-6-generic.

tags: added: kernel-fixed-upstream
Revision history for this message
Joseph Salisbury (jsalisbury) wrote :

Thanks for testing, Stefan. This issue should be fixed in Saucy since it has been rebased to v3.11-rc7.

Can you apply the latest updates and confirm if this bug is fixed or not? If it is, please change the status to "Fix Released".

Changed in linux (Ubuntu):
status: Incomplete → Fix Committed
Revision history for this message
Stefan (stefanp) wrote :

The problem still exists with 3.11.0-4-generic.
The bug is triggered by apparmor.

Revision history for this message
John Johansen (jjohansen) wrote :

this is in the apparmor alpha4 sync

Revision history for this message
Tyler Hicks (tyhicks) wrote :

Bug #1218487, which is a duplicate of this one, suggests that an i386 server VM with 512 MB RAM can reproduce this bug. I'm installing such a VM now.

Changed in linux (Ubuntu):
assignee: nobody → Tyler Hicks (tyhicks)
status: Fix Committed → New
Revision history for this message
Brad Figg (brad-figg) wrote : Status changed to Confirmed

This change was made by a bot.

Changed in linux (Ubuntu):
status: New → Confirmed
Revision history for this message
Tyler Hicks (tyhicks) wrote :

Confirmed on i386 saucy server VM w/ 512 MB RAM

Tyler Hicks (tyhicks)
Changed in linux (Ubuntu):
status: Confirmed → In Progress
Revision history for this message
Tyler Hicks (tyhicks) wrote :

Here's the proposed patch that I sent to the AppArmor mailing list for review:

https://lists.ubuntu.com/archives/apparmor/2013-September/004289.html

Here's an i386 test kernel with some kernel debugging options enabled (CONFIG_DEBUG_ATOMIC_SLEEP, CONFIG_DEBUG_BUGVERBOSE, CONFIG_DEBUG_SG, and CONFIG_PREEMPT_COUNT) and the proposed patch applied:

http://kernel.ubuntu.com/~tyhicks/lp1216294/

Stefan and Parameswaran, I would appreciate any testing that you can find the time for. Thanks!

Revision history for this message
Para Siva (psivaa) wrote :

The issue is not appearing on a system with the kernel installed from the above link. Please see attached the kernel log (starting from Sep 4 14:18:20 is the logs obtained after installing the above test kernel)

Revision history for this message
Para Siva (psivaa) wrote :

dmesg obtained after installing the test kernel is also attached.

Revision history for this message
Stefan (stefanp) wrote :

As Parameswaran stated the test kernel did not show the bug.

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package linux - 3.11.0-6.12

---------------
linux (3.11.0-6.12) saucy; urgency=low

  * Release tracker
    - LP: #1222893

  [ Andy Whitcroft ]

  * Revert "ubuntu: (no-squash) AUFS3 -- aufs3-standalone.patch"
  * Revert "ubuntu: (no-squash) AUFS3 -- aufs3-base.patch"
  * ubuntu: (no-squash) AUFS3 -- aufs3-base.patch
  * ubuntu: (no-squash) AUFS3 -- aufs3-standalone.patch
    - LP: #1222407

  [ Paolo Pisati ]

  * [Config] restore mmc boot on panda

  [ Tyler Hicks ]

  * SAUCE: apparmor: Use shash crypto API interface for profile hashes
    - LP: #1216294

  [ Upstream Kernel Changes ]

  * net: calxedaxgmac: remove NETIF_F_FRAGLIST setting
  * net: calxedaxgmac: read correct field in xgmac_desc_get_buf_len
  * net: calxedaxgmac: fix race between xgmac_tx_complete and xgmac_tx_err
  * net: calxedaxgmac: fix possible skb free before tx complete
  * net: calxedaxgmac: update ring buffer tx_head after barriers
  * net: calxedaxgmac: fix race with tx queue stop/wake
  * net: calxedaxgmac: enable interrupts after napi_enable
  * net: calxedaxgmac: fix various errors in xgmac_set_rx_mode
  * net: calxedaxgmac: remove some unused statistic counters
  * net: calxedaxgmac: fix rx DMA mapping API size mismatches
  * net: calxedaxgmac: fix xgmac_xmit DMA mapping error handling
  * mfd: rtsx: Read vendor setting from config space
    - LP: #1201698
 -- Tim Gardner <email address hidden> Mon, 09 Sep 2013 07:21:06 -0600

Changed in linux (Ubuntu):
status: In Progress → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Duplicates of this bug

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.