__free_pipe_info() NULL pointer dereference

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hello,
I am trying to investigate two kernel panics [1] and [2], both in __free_pipe_info() at the same place. Kernel is 3.8.13.
Can anybody advise what should I look at?

Thanks,
Alex.


[1]
kernel: [ 3805.359746] BUG: unable to handle kernel NULL pointer dereference at 0000000000000019
kernel: [ 3805.360013] IP: [<ffffffff811a44ec>] __free_pipe_info+0x3c/0x80
kernel: [ 3805.360013] PGD 5e2d7067 PUD 36165067 PMD 0
kernel: [ 3805.360013] Oops: 0000 [#1] SMP
kernel: [ 3805.360013] Modules linked in: xt_multiport dm_queue_length 8021q garp stp llc bonding xt_tcpudp nf_conntrack_ipv4 nf_defrag_ipv4 xt_state nf_conntrack iptable_filter ip_tables x_tables ib_iser(OF) rdma_cm(OF) ib_cm(OF) iw_cm(OF) ib_sa(OF) ib_mad(OF) ib_core(OF) ib_addr(OF) compat(OF) iscsi_tcp(OF) libiscsi_tcp(OF) libiscsi(OF) scsi_transport_iscsi ixgbevf(OF) xfrm_user xfrm4_tunnel tunnel4 ipcomp xfrm_ipcomp esp4 ah4 dm_zcache(OF) xfs(OF) btrfs(OF) raid456(OF) async_pq async_xor xor async_memcpy async_raid6_recov raid6_pq async_tx raid1(OF) iscsi_scst(OF) scst_vdisk(OF) libcrc32c scst(OF) nls_iso8859_1 deflate zlib_deflate ctr twofish_generic twofish_x86_64_3way twofish_x86_64 twofish_common camellia_generic camellia_x86_64 serpent_sse2_x86_64 glue_helper serpent_generic blowfish_generic blowfish_x86_64 blowfish_common cast5_generic cast_common des_generic xcbc rmd160 crypto_null af_key xfrm_algo nfsd(OF) kvm ghash_clmulni_intel cirrus aesni_intel ablk_helper ttm c kernel: ryptd lrw drm_kms_helper aes_x86_64 psmouse nfs_acl xts auth_rpcgss gf128mul drm serio_raw nfs virtio_balloon sysimgblt fscache sysfillrect lockd dm_multipath(OF) dm_iostat(OF) syscopyarea lp microcode i2c_piix4 scsi_dh sunrpc mac_hid parport floppy [last unloaded: ixgbevf]
kernel: [ 3805.360013] CPU 0
kernel: [ 3805.360013] Pid: 2830, comm: zadara_vac Tainted: GF O 3.8.13-030813-generic #201305111843 Bochs Bochs kernel: [ 3805.360013] RIP: 0010:[<ffffffff811a44ec>] [<ffffffff811a44ec>] __free_pipe_info+0x3c/0x80
kernel: [ 3805.360013] RSP: 0018:ffff88005e0e7df8  EFLAGS: 00010286
kernel: [ 3805.360013] RAX: fffffffffffffff9 RBX: 0000000000000009 RCX: 0000000000000001 kernel: [ 3805.360013] RDX: 0000000000000000 RSI: ffff8800518e5d68 RDI: ffff88004a57cde0 kernel: [ 3805.360013] RBP: ffff88005e0e7e08 R08: 0000000000000000 R09: 0000000000000000 kernel: [ 3805.360013] R10: ffff88005dc0e510 R11: 0000000000000293 R12: ffff88004a57cde0 kernel: [ 3805.360013] R13: ffff880078f3caf0 R14: 0000000000000001 R15: 0000000000000000 kernel: [ 3805.360013] FS: 00007fcb69401700(0000) GS:ffff88007fc00000(0000) knlGS:0000000000000000
kernel: [ 3805.360013] CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
kernel: [ 3805.360013] CR2: 0000000000000019 CR3: 000000005e151000 CR4: 00000000000006f0 kernel: [ 3805.360013] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 kernel: [ 3805.360013] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 kernel: [ 3805.360013] Process zadara_vac (pid: 2830, threadinfo ffff88005e0e6000, task ffff88005e359740)
kernel: [ 3805.360013] Stack:
kernel: [ 3805.360013] ffff880078f3caf0 ffff880078f3cb98 ffff88005e0e7e28 ffffffff811a454d kernel: [ 3805.360013] ffff88005dc0e500 ffff88004a57cde0 ffff88005e0e7e68 ffffffff811a4628 kernel: [ 3805.360013] 0000000000000000 ffff88005dc0e500 0000000000000010 ffff88005687c840
kernel: [ 3805.360013] Call Trace:
kernel: [ 3805.360013]  [<ffffffff811a454d>] free_pipe_info+0x1d/0x30
kernel: [ 3805.360013]  [<ffffffff811a4628>] pipe_release+0xc8/0xd0
kernel: [ 3805.360013]  [<ffffffff811a4685>] pipe_read_release+0x15/0x20
kernel: [ 3805.360013]  [<ffffffff8119c5ce>] __fput+0xbe/0x240
kernel: [ 3805.360013]  [<ffffffff8119c75e>] ____fput+0xe/0x10
kernel: [ 3805.360013]  [<ffffffff8107bc68>] task_work_run+0xc8/0xf0
kernel: [ 3805.360013]  [<ffffffff81014d9a>] do_notify_resume+0xaa/0xc0
kernel: [ 3805.360013]  [<ffffffff816f655a>] int_signal+0x12/0x17
kernel: [ 3805.360013] Code: 20 85 c0 74 33 31 db 0f 1f 84 00 00 00 00 00 48 63 c3 48 8d 34 80 49 8b 44 24 58 48 8d 34 f0 48 8b 46 10 48 85 c0 74 06 4c 89 e7 <ff> 50 20 83 c3 01 41 3b 5c 24 20 72 d7 49 8b 7c 24 38 48 85 ff
kernel: [ 3805.360013] RIP  [<ffffffff811a44ec>] __free_pipe_info+0x3c/0x80
kernel: [ 3805.360013]  RSP <ffff88005e0e7df8>
kernel: [ 3805.360013] CR2: 0000000000000019
kernel: [ 3805.416946] ---[ end trace c5ee3b4a430eb1a7 ]---

[2]
[ 3716.249831] BUG: unable to handle kernel NULL pointer dereference at 000000000000001f
[ 3716.251602] IP: [<ffffffff811a44ec>] __free_pipe_info+0x3c/0x80
[ 3716.252013] PGD 0
[ 3716.252013] Oops: 0000 [#1] SMP
[ 3716.266367] ib_cm(OF) iw_cm(OF) ib_sa(OF) ib_mad(OF) ib_core(OF) ib_addr(OF) compat(OF) iscsi_scst(OF) crypto_null af_key scst_vdisk(OF) xfrm_algo libcrc32c scst(OF) kvm ghash_clmulni_intel aesni_intel ablk_helper cryptd lrw aes_x86_64 xts gf128mul dm_multipath(OF) scsi_dh microcode nfsd(OF) nfs_acl auth_rpcgss cirrus nfs fscache lockd sunrpc ttm drm_kms_helper psmouse dm_iostat(OF) drm serio_raw virtio_balloon mac_hid sysimgblt sysfillrect i2c_piix4 syscopyarea lp parport floppy
[ 3716.266367] CPU 1
[ 3716.266367] Pid: 16965, comm: dmsetup Tainted: GF O 3.8.13-030813-generic #201305111843 Bochs Bochs [ 3716.266367] RIP: 0010:[<ffffffff811a44ec>] [<ffffffff811a44ec>] __free_pipe_info+0x3c/0x80
[ 3716.266367] RSP: 0018:ffff8801c48bbda8 EFLAGS: 00010286
[ 3716.266367] RAX: ffffffffffffffff RBX: 0000000000000009 RCX: 0000000000000001 [ 3716.266367] RDX: 0000000000000000 RSI: ffff8801c9b6c168 RDI: ffff8801cf12dcc0 [ 3716.266367] RBP: ffff8801c48bbdb8 R08: 0000000000000000 R09: 0000000000000000 [ 3716.266367] R10: ffff8801bf1b5310 R11: 0000000000000000 R12: ffff8801cf12dcc0 [ 3716.266367] R13: ffff8800d3ae33b0 R14: 0000000000000001 R15: 0000000000000000 [ 3716.266367] FS: 0000000000000000(0000) GS:ffff88021fc80000(0000) knlGS:0000000000000000
[ 3716.266367] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 3716.266367] CR2: 000000000000001f CR3: 0000000001c0d000 CR4: 00000000000006e0 [ 3716.266367] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3716.266367] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 3716.266367] Process dmsetup (pid: 16965, threadinfo ffff8801c48ba000, task ffff8801c64ac5c0)
[ 3716.266367] Stack:
[ 3716.266367] ffff8800d3ae33b0 ffff8800d3ae3458 ffff8801c48bbdd8 ffffffff811a454d [ 3716.266367] ffff8801bf1b5300 ffff8801cf12dcc0 ffff8801c48bbe18 ffffffff811a4628 [ 3716.266367] 0000000000000000 ffff8801bf1b5300 0000000000000010 ffff880068ba4900
[ 3716.266367] Call Trace:
[ 3716.266367] [<ffffffff811a454d>] free_pipe_info+0x1d/0x30
[ 3716.266367] [<ffffffff811a4628>] pipe_release+0xc8/0xd0
[ 3716.266367] [<ffffffff811a4685>] pipe_read_release+0x15/0x20
[ 3716.266367] [<ffffffff8119c5ce>] __fput+0xbe/0x240
[ 3716.266367] [<ffffffff8119c75e>] ____fput+0xe/0x10
[ 3716.266367] [<ffffffff8107bc68>] task_work_run+0xc8/0xf0
[ 3716.266367] [<ffffffff8105fbf6>] do_exit+0x196/0x480
[ 3716.266367] [<ffffffff8105ff74>] do_group_exit+0x44/0xa0
[ 3716.266367] [<ffffffff8105ffe7>] sys_exit_group+0x17/0x20
[ 3716.266367] [<ffffffff816f629d>] system_call_fastpath+0x1a/0x1f
[ 3716.266367] Code: 20 85 c0 74 33 31 db 0f 1f 84 00 00 00 00 00 48 63 c3 48 8d 34 80 49 8b 44 24 58 48 8d 34 f0 48 8b 46 10 48 85 c0 74 06 4c 89 e7 <ff> 50 20 83 c3 01 41 3b 5c 24 20 72 d7 49 8b 7c 24 38 48 85 ff
[ 3716.266367] RIP [<ffffffff811a44ec>] __free_pipe_info+0x3c/0x80
[ 3716.266367] RSP <ffff8801c48bbda8>
[ 3716.266367] CR2: 000000000000001f

--
To unsubscribe from this list: send the line "unsubscribe linux-fsdevel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html




[Index of Archives]     [Linux Ext4 Filesystem]     [Union Filesystem]     [Filesystem Testing]     [Ceph Users]     [Ecryptfs]     [AutoFS]     [Kernel Newbies]     [Share Photos]     [Security]     [Netfilter]     [Bugtraq]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux Cachefs]     [Reiser Filesystem]     [Linux RAID]     [Samba]     [Device Mapper]     [CEPH Development]
  Powered by Linux