Program caused entire laptop to crash?
by sniper8752 from LinuxQuestions.org on (#5DYZ6)
I left my laptop on overnight (it was running a local copy operation), went to login this morning, to find out I couldn't connect to internal websites, nor external. I went to check if I had an IP (ip a), and it just hung. It never returned. I tried other windows, and other commands, and it did the same thing. Long story short, I couldn't recover, rebooted, did a hardware system check pre-boot, and it said there were no issues. Before reboot though, I was able to do ctrl-alt-2, and saw the following:
Code:kernel:[18.....62...] watchdog: BUG: soft lookup - CPU#5 stuck for 25s! [kwork
er/5:0:299...]After a reboot and login, I pulled syslog, kern.log and dmesg to make sure I have a snapshot to prevent any errors from getting overwritten. Going through the files, in at least two of them, I saw the following:
Code:Feb 9 07:00:09 my-laptop-hostname kernel: [ 20.165773] ------------[ cut here ]------------
Feb 9 07:00:09 my-laptop-hostname kernel: [ 20.165774] General protection fault in user access. Non-canonical address?
Feb 9 07:00:09 my-laptop-hostname kernel: [ 20.165792] WARNING: CPU: 3 PID: 1609 at arch/x86/mm/extable.c:126 ex_handler_uaccess+0x52/0x60
Feb 9 07:00:09 my-laptop-hostname kernel: [ 20.165793] Modules linked in: xt_conntrack xt_MASQUERADE nf_conntrack_netlink nfnetlink xfrm_user xfrm_algo xt_addrtype iptable_filter iptable_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 bpfilter br_netfilter bridge stp llc nls_utf8 cifs fscache libdes ccm snd_hda_codec_hdmi aufs bluetooth overlay ecdh_generic ecc binfmt_misc mei_hdcp snd_hda_codec_realtek intel_rapl_msr snd_hda_codec_generic snd_hda_intel dell_laptop snd_intel_dspcfg snd_hda_codec ledtrig_audio snd_hda_core snd_hwdep snd_pcm x86_pkg_temp_thermal intel_powerclamp coretemp intel_hid snd_seq_midi kvm_intel cdc_ether snd_seq_midi_event usbnet kvm uvcvideo r8152 videobuf2_vmalloc mii iwlmvm snd_rawmidi videobuf2_memops rapl videobuf2_v4l2 mac80211 snd_seq videobuf2_common intel_cstate videodev snd_seq_device libarc4 snd_timer mc joydev input_leds snd dell_wmi dell_smbios dcdbas usblp serio_raw wmi_bmof sparse_keymap intel_wmi_thunderbolt dell_wmi_descriptor soundcore iwlwifi cfg80211 rtsx_pci_ms mei_me memstick mei
Feb 9 07:00:09 my-laptop-hostname kernel: [ 20.165811] hid_multitouch processor_thermal_device intel_rapl_common intel_pch_thermal intel_soc_dts_iosf int3403_thermal mac_hid int3402_thermal int340x_thermal_zone int3400_thermal acpi_thermal_rel acpi_pad sch_fq_codel parport_pc ppdev lp parport ip_tables x_tables autofs4 btrfs xor zstd_compress raid6_pq libcrc32c ses enclosure scsi_transport_sas dm_crypt dm_mirror dm_region_hash dm_log uas usb_storage usbhid hid_generic nouveau crct10dif_pclmul crc32_pclmul ghash_clmulni_intel aesni_intel i915 rtsx_pci_sdmmc crypto_simd mxm_wmi cryptd ttm i2c_algo_bit glue_helper drm_kms_helper psmouse syscopyarea sysfillrect sysimgblt nvme fb_sys_fops i2c_i801 rtsx_pci drm nvme_core intel_lpss_pci ahci intel_lpss idma64 libahci virt_dma i2c_hid hid wmi video
Feb 9 07:00:09 my-laptop-hostname kernel: [ 20.165824] CPU: 3 PID: 1609 Comm: auditbeat Not tainted 5.4.0-65-generic #73-Ubuntu
Feb 9 07:00:09 my-laptop-hostname kernel: [ 20.165837] Hardware name: Dell Inc. XPS 15 9550/0N7TVV, BIOS 1.12.0 10/03/2019
Feb 9 07:00:09 my-laptop-hostname kernel: [ 20.165839] RIP: 0010:ex_handler_uaccess+0x52/0x60
Feb 9 07:00:09 my-laptop-hostname kernel: [ 20.165841] Code: c4 08 b8 01 00 00 00 5b 5d c3 80 3d 85 c1 78 01 00 75 db 48 c7 c7 58 a9 75 9d 48 89 75 f0 c6 05 71 c1 78 01 01 e8 79 f7 01 00 <0f> 0b 48 8b 75 f0 eb bc 66 0f 1f 44 00 00 0f 1f 44 00 00 55 80 3d
Feb 9 07:00:09 my-laptop-hostname kernel: [ 20.165841] RSP: 0018:ffffa1cfc2057a90 EFLAGS: 00010086
Feb 9 07:00:09 my-laptop-hostname kernel: [ 20.165842] RAX: 0000000000000000 RBX: ffffffff9d2029e4 RCX: 0000000000000000
...After discovering this, it may look like auditbeat was at fault... can anyone else please confirm before I go ahead and post over there? Any ideas why a program like this would crash my system? I've never had this happen before. Kind of curious if anyone could explain what happened that auditbeat could have done to bork CPU#5 (if that did cause the unresponsiveness of my system)...
For now, I've stopped auditbeat.
Code:kernel:[18.....62...] watchdog: BUG: soft lookup - CPU#5 stuck for 25s! [kwork
er/5:0:299...]After a reboot and login, I pulled syslog, kern.log and dmesg to make sure I have a snapshot to prevent any errors from getting overwritten. Going through the files, in at least two of them, I saw the following:
Code:Feb 9 07:00:09 my-laptop-hostname kernel: [ 20.165773] ------------[ cut here ]------------
Feb 9 07:00:09 my-laptop-hostname kernel: [ 20.165774] General protection fault in user access. Non-canonical address?
Feb 9 07:00:09 my-laptop-hostname kernel: [ 20.165792] WARNING: CPU: 3 PID: 1609 at arch/x86/mm/extable.c:126 ex_handler_uaccess+0x52/0x60
Feb 9 07:00:09 my-laptop-hostname kernel: [ 20.165793] Modules linked in: xt_conntrack xt_MASQUERADE nf_conntrack_netlink nfnetlink xfrm_user xfrm_algo xt_addrtype iptable_filter iptable_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 bpfilter br_netfilter bridge stp llc nls_utf8 cifs fscache libdes ccm snd_hda_codec_hdmi aufs bluetooth overlay ecdh_generic ecc binfmt_misc mei_hdcp snd_hda_codec_realtek intel_rapl_msr snd_hda_codec_generic snd_hda_intel dell_laptop snd_intel_dspcfg snd_hda_codec ledtrig_audio snd_hda_core snd_hwdep snd_pcm x86_pkg_temp_thermal intel_powerclamp coretemp intel_hid snd_seq_midi kvm_intel cdc_ether snd_seq_midi_event usbnet kvm uvcvideo r8152 videobuf2_vmalloc mii iwlmvm snd_rawmidi videobuf2_memops rapl videobuf2_v4l2 mac80211 snd_seq videobuf2_common intel_cstate videodev snd_seq_device libarc4 snd_timer mc joydev input_leds snd dell_wmi dell_smbios dcdbas usblp serio_raw wmi_bmof sparse_keymap intel_wmi_thunderbolt dell_wmi_descriptor soundcore iwlwifi cfg80211 rtsx_pci_ms mei_me memstick mei
Feb 9 07:00:09 my-laptop-hostname kernel: [ 20.165811] hid_multitouch processor_thermal_device intel_rapl_common intel_pch_thermal intel_soc_dts_iosf int3403_thermal mac_hid int3402_thermal int340x_thermal_zone int3400_thermal acpi_thermal_rel acpi_pad sch_fq_codel parport_pc ppdev lp parport ip_tables x_tables autofs4 btrfs xor zstd_compress raid6_pq libcrc32c ses enclosure scsi_transport_sas dm_crypt dm_mirror dm_region_hash dm_log uas usb_storage usbhid hid_generic nouveau crct10dif_pclmul crc32_pclmul ghash_clmulni_intel aesni_intel i915 rtsx_pci_sdmmc crypto_simd mxm_wmi cryptd ttm i2c_algo_bit glue_helper drm_kms_helper psmouse syscopyarea sysfillrect sysimgblt nvme fb_sys_fops i2c_i801 rtsx_pci drm nvme_core intel_lpss_pci ahci intel_lpss idma64 libahci virt_dma i2c_hid hid wmi video
Feb 9 07:00:09 my-laptop-hostname kernel: [ 20.165824] CPU: 3 PID: 1609 Comm: auditbeat Not tainted 5.4.0-65-generic #73-Ubuntu
Feb 9 07:00:09 my-laptop-hostname kernel: [ 20.165837] Hardware name: Dell Inc. XPS 15 9550/0N7TVV, BIOS 1.12.0 10/03/2019
Feb 9 07:00:09 my-laptop-hostname kernel: [ 20.165839] RIP: 0010:ex_handler_uaccess+0x52/0x60
Feb 9 07:00:09 my-laptop-hostname kernel: [ 20.165841] Code: c4 08 b8 01 00 00 00 5b 5d c3 80 3d 85 c1 78 01 00 75 db 48 c7 c7 58 a9 75 9d 48 89 75 f0 c6 05 71 c1 78 01 01 e8 79 f7 01 00 <0f> 0b 48 8b 75 f0 eb bc 66 0f 1f 44 00 00 0f 1f 44 00 00 55 80 3d
Feb 9 07:00:09 my-laptop-hostname kernel: [ 20.165841] RSP: 0018:ffffa1cfc2057a90 EFLAGS: 00010086
Feb 9 07:00:09 my-laptop-hostname kernel: [ 20.165842] RAX: 0000000000000000 RBX: ffffffff9d2029e4 RCX: 0000000000000000
...After discovering this, it may look like auditbeat was at fault... can anyone else please confirm before I go ahead and post over there? Any ideas why a program like this would crash my system? I've never had this happen before. Kind of curious if anyone could explain what happened that auditbeat could have done to bork CPU#5 (if that did cause the unresponsiveness of my system)...
For now, I've stopped auditbeat.