BUG: Mingetty gets tainted-memory bug in cahced_lookup() durring tty open

2001-06-13 Thread Matthew Cline

[1.] Intermittent tainted-mem error in mingetty in cached_lookup() in
tty open code

[2.] During bootup, mingetty got a tainted memory bug in
cached_lookup() while doing some tty opening stuff; this has only happened
once, and I don't know how to reproduce.

[3.] tty

[4.] Linux version 2.4.5-ac9 (root@kyoko) (gcc version 2.96 2731 (Red Hat 
Linux 7.1 2.96-81)) #2 Tue Jun 12 22:05:32 PDT 2001

[5.]

kernel BUG at slab.c:1244!
invalid operand: 
CPU:0
EIP:0010:[kmalloc+324/496]
EFLAGS: 00010086

eax: 001b   ebx: c1447768   ecx: 0001   edx: 1810
esi: cea5a000   edi: cea5a9aa   ebp: 00012800   esp: cebffe24
ds: 0018   es: 0018   ss: 0018

Process mingetty (pid: 903, stackpage=cebff000)

Stack: c02233ef 04dc cea5a000 1000 cea5a9aa 0246 cfeecd88 c01393f0
   cfb72e04 cebffe80 c02cfdc0 0405 0004  c017bf0d 0c3c
   0007 0004 c017cb85 0004 0004   cfeecd87

Call Trace: [cached_lookup+16/80] [alloc_tty_struct+13/48]
[init_dev+133/1008] [vfs_follow_link+225/336] [tty_open+331/896]
   [path_walk+1778/2048] [do_page_fault+0/1168] [do_page_fault+378/1168]
   [devfs_open+198/416] [dentry_open+195/320] [filp_open+77/96]
   [getname+91/160] [sys_open+54/176] [system_call+51/56]

Code: 0f 0b 58 8b 6b 10 5a 81 e5 00 04 00 00 74 4d b8 a5 c2 0f 17

Jun 13 18:29:49 kyoko kernel: Linux version 2.4.5-ac9 (root@kyoko) (gcc 
version 2.96 2731 (Red Hat Linux 7.1 2.96-81)) #2 Tue Jun 12 22:05:32 PDT 
2001

[6.]

[7.]

Using devfs
mingetty version 0.9.4-10

[7.1]

# sh scripts/ver_linux

Linux kyoko 2.4.5-ac9 #2 Tue Jun 12 22:05:32 PDT 2001 i686 unknown
 
Gnu C  2.96
Gnu make   3.79.1
binutils   2.10.91.0.2
util-linux 2.11e
mount  2.9w
modutils   2.4.2
e2fsprogs  1.19
reiserfsprogs  3.x.0b
pcmcia-cs  3.0.14
PPP2.3.7
Linux C Library2.2.2
Dynamic linker (ldd)   2.2.2
Linux C++ Library  2..
Procps 2.0.7
Net-tools  1.60
Console-tools  1999.03.02
Sh-utils   2.0
Modules Loaded ipt_REJECT ipt_state ipt_LOG ipt_unclean 
iptable_mangle iptable_filter ip_nat_ftp ip_conntrack_ftp iptable_nat tulip 
es1371 soundcore ac97_codec vfat fat sr_mod cdrom

[7.2]

# cat /proc/cpuinfo 

processor   : 0
vendor_id   : GenuineIntel
cpu family  : 6
model   : 6
model name  : Celeron (Mendocino)
stepping: 5
cpu MHz : 498.888
cache size  : 128 KB
fdiv_bug: no
hlt_bug : no
f00f_bug: no
coma_bug: no
fpu : yes
fpu_exception   : yes
cpuid level : 2
wp  : yes
flags   : fpu vme de pse tsc msr pae mce cx8 sep mtrr pge mca cmov 
pat pse36 mmx fxsr
bogomips: 996.14

[7.3]

# cat /proc/modules 

ipt_REJECT  3104   3 (autoclean)
ipt_state848   2 (autoclean)
ipt_LOG 3568  14 (autoclean)
ipt_unclean 6912   2 (autoclean)
iptable_mangle  1968   0 (autoclean) (unused)
iptable_filter  1968   0 (autoclean) (unused)
ip_nat_ftp  3712   0 (unused)
ip_conntrack_ftp3968   0 [ip_nat_ftp]
iptable_nat20512   1 [ip_nat_ftp]
tulip  38816   1 (autoclean)
es1371 26800   0
soundcore   4080   4 [es1371]
ac97_codec  8672   0 [es1371]
vfat9232   0 (unused)
fat31264   0 [vfat]
sr_mod 12656   0 (autoclean) (unused)
cdrom  28256   0 (autoclean) [sr_mod]

[7.4]

# cat /proc/ioports 

-001f : dma1
0020-003f : pic1
0040-005f : timer
0060-006f : keyboard
0070-007f : rtc
0080-008f : dma page reg
00a0-00bf : pic2
00c0-00df : dma2
00f0-00ff : fpu
0170-0177 : ide1
01f0-01f7 : ide0
02f8-02ff : serial(auto)
0376-0376 : ide1
03c0-03df : vga+
03f6-03f6 : ide0
03f8-03ff : serial(auto)
0400-043f : Intel Corporation 82371AB PIIX4 ACPI
0440-045f : Intel Corporation 82371AB PIIX4 ACPI
0cf8-0cff : PCI conf1
d000-dfff : PCI Bus #01
  d800-d8ff : ATI Technologies Inc 3D Rage Pro AGP 1X/2X
e800-e8ff : Lite-On Communications Inc LNE100TX
  e800-e8ff : tulip
ef00-ef3f : Ensoniq ES1371 [AudioPCI-97]
  ef00-ef3f : es1371
ef80-ef9f : Intel Corporation 82371AB PIIX4 USB
ffa0-ffaf : Intel Corporation 82371AB PIIX4 IDE
  ffa0-ffa7 : ide0
  ffa8-ffaf : ide1

# cat /proc/iomem 

-0009fbff : System RAM
0009fc00-0009 : reserved
000a-000b : Video RAM area
000c-000c7fff : Video ROM
000f-000f : System ROM
0010-0ffd : System RAM
  0010-0021b055 : Kernel code
  0021b056-0027217f : Kernel data
0ffe-0fff7fff : ACPI Tables
0fff8000-0fff : ACPI Non-volatile Storage
f480-f48f : PCI Bus #01
f800-fbff : Intel Corporation 440BX/ZX - 82443BX/ZX Host bridge
fca0-feaf : PCI Bus #01
  fd00-fdff : ATI 

BUG: Mingetty gets tainted-memory bug in cahced_lookup() durring tty open

2001-06-13 Thread Matthew Cline

[1.] Intermittent tainted-mem error in mingetty in cached_lookup() in
tty open code

[2.] During bootup, mingetty got a tainted memory bug in
cached_lookup() while doing some tty opening stuff; this has only happened
once, and I don't know how to reproduce.

[3.] tty

[4.] Linux version 2.4.5-ac9 (root@kyoko) (gcc version 2.96 2731 (Red Hat 
Linux 7.1 2.96-81)) #2 Tue Jun 12 22:05:32 PDT 2001

[5.]

kernel BUG at slab.c:1244!
invalid operand: 
CPU:0
EIP:0010:[kmalloc+324/496]
EFLAGS: 00010086

eax: 001b   ebx: c1447768   ecx: 0001   edx: 1810
esi: cea5a000   edi: cea5a9aa   ebp: 00012800   esp: cebffe24
ds: 0018   es: 0018   ss: 0018

Process mingetty (pid: 903, stackpage=cebff000)

Stack: c02233ef 04dc cea5a000 1000 cea5a9aa 0246 cfeecd88 c01393f0
   cfb72e04 cebffe80 c02cfdc0 0405 0004  c017bf0d 0c3c
   0007 0004 c017cb85 0004 0004   cfeecd87

Call Trace: [cached_lookup+16/80] [alloc_tty_struct+13/48]
[init_dev+133/1008] [vfs_follow_link+225/336] [tty_open+331/896]
   [path_walk+1778/2048] [do_page_fault+0/1168] [do_page_fault+378/1168]
   [devfs_open+198/416] [dentry_open+195/320] [filp_open+77/96]
   [getname+91/160] [sys_open+54/176] [system_call+51/56]

Code: 0f 0b 58 8b 6b 10 5a 81 e5 00 04 00 00 74 4d b8 a5 c2 0f 17

Jun 13 18:29:49 kyoko kernel: Linux version 2.4.5-ac9 (root@kyoko) (gcc 
version 2.96 2731 (Red Hat Linux 7.1 2.96-81)) #2 Tue Jun 12 22:05:32 PDT 
2001

[6.]

[7.]

Using devfs
mingetty version 0.9.4-10

[7.1]

# sh scripts/ver_linux

Linux kyoko 2.4.5-ac9 #2 Tue Jun 12 22:05:32 PDT 2001 i686 unknown
 
Gnu C  2.96
Gnu make   3.79.1
binutils   2.10.91.0.2
util-linux 2.11e
mount  2.9w
modutils   2.4.2
e2fsprogs  1.19
reiserfsprogs  3.x.0b
pcmcia-cs  3.0.14
PPP2.3.7
Linux C Library2.2.2
Dynamic linker (ldd)   2.2.2
Linux C++ Library  2..
Procps 2.0.7
Net-tools  1.60
Console-tools  1999.03.02
Sh-utils   2.0
Modules Loaded ipt_REJECT ipt_state ipt_LOG ipt_unclean 
iptable_mangle iptable_filter ip_nat_ftp ip_conntrack_ftp iptable_nat tulip 
es1371 soundcore ac97_codec vfat fat sr_mod cdrom

[7.2]

# cat /proc/cpuinfo 

processor   : 0
vendor_id   : GenuineIntel
cpu family  : 6
model   : 6
model name  : Celeron (Mendocino)
stepping: 5
cpu MHz : 498.888
cache size  : 128 KB
fdiv_bug: no
hlt_bug : no
f00f_bug: no
coma_bug: no
fpu : yes
fpu_exception   : yes
cpuid level : 2
wp  : yes
flags   : fpu vme de pse tsc msr pae mce cx8 sep mtrr pge mca cmov 
pat pse36 mmx fxsr
bogomips: 996.14

[7.3]

# cat /proc/modules 

ipt_REJECT  3104   3 (autoclean)
ipt_state848   2 (autoclean)
ipt_LOG 3568  14 (autoclean)
ipt_unclean 6912   2 (autoclean)
iptable_mangle  1968   0 (autoclean) (unused)
iptable_filter  1968   0 (autoclean) (unused)
ip_nat_ftp  3712   0 (unused)
ip_conntrack_ftp3968   0 [ip_nat_ftp]
iptable_nat20512   1 [ip_nat_ftp]
tulip  38816   1 (autoclean)
es1371 26800   0
soundcore   4080   4 [es1371]
ac97_codec  8672   0 [es1371]
vfat9232   0 (unused)
fat31264   0 [vfat]
sr_mod 12656   0 (autoclean) (unused)
cdrom  28256   0 (autoclean) [sr_mod]

[7.4]

# cat /proc/ioports 

-001f : dma1
0020-003f : pic1
0040-005f : timer
0060-006f : keyboard
0070-007f : rtc
0080-008f : dma page reg
00a0-00bf : pic2
00c0-00df : dma2
00f0-00ff : fpu
0170-0177 : ide1
01f0-01f7 : ide0
02f8-02ff : serial(auto)
0376-0376 : ide1
03c0-03df : vga+
03f6-03f6 : ide0
03f8-03ff : serial(auto)
0400-043f : Intel Corporation 82371AB PIIX4 ACPI
0440-045f : Intel Corporation 82371AB PIIX4 ACPI
0cf8-0cff : PCI conf1
d000-dfff : PCI Bus #01
  d800-d8ff : ATI Technologies Inc 3D Rage Pro AGP 1X/2X
e800-e8ff : Lite-On Communications Inc LNE100TX
  e800-e8ff : tulip
ef00-ef3f : Ensoniq ES1371 [AudioPCI-97]
  ef00-ef3f : es1371
ef80-ef9f : Intel Corporation 82371AB PIIX4 USB
ffa0-ffaf : Intel Corporation 82371AB PIIX4 IDE
  ffa0-ffa7 : ide0
  ffa8-ffaf : ide1

# cat /proc/iomem 

-0009fbff : System RAM
0009fc00-0009 : reserved
000a-000b : Video RAM area
000c-000c7fff : Video ROM
000f-000f : System ROM
0010-0ffd : System RAM
  0010-0021b055 : Kernel code
  0021b056-0027217f : Kernel data
0ffe-0fff7fff : ACPI Tables
0fff8000-0fff : ACPI Non-volatile Storage
f480-f48f : PCI Bus #01
f800-fbff : Intel Corporation 440BX/ZX - 82443BX/ZX Host bridge
fca0-feaf : PCI Bus #01
  fd00-fdff : ATI