lkml.org 
[lkml]   [2010]   [Sep]   [5]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: 2.6.36-rc3 NULL pointer dereference crypto_destroy_tfm+0x50/0x70
    On Sun, 5 Sep 2010 18:30:46 +1000
    Andrew Hendry <andrew.hendry@gmail.com> wrote:

    > Started hitting this since rc3.
    >
    > System has 6 cifs mounts from the one server, during shutdown they get
    > unmounted and gives this error.
    > If manually unmounting one at a time with a gap inbetween it doesn't
    > seem to happen.
    >
    > config attached.
    >
    > [ 114.092803] BUG: unable to handle kernel NULL pointer dereference
    > at 0000000000000108
    > [ 114.092831] IP: [<ffffffff81254990>] crypto_destroy_tfm+0x50/0x70
    > [ 114.092843] PGD 211b37067 PUD 211b66067 PMD 0
    > [ 114.092852] Oops: 0000 [#1] PREEMPT SMP
    > [ 114.092860] last sysfs file:
    > /sys/devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1:1.0/uevent
    > [ 114.092869] CPU 6
    > [ 114.092872] Modules linked in: nls_cp437 cifs fbcon tileblit font
    > bitblit softcursor binfmt_misc kvm_intel kvm snd_hda_codec_via
    > snd_hda_intel snd_hda_codec snd_hwdep snd_pcm_oss snd_mixer_oss
    > nouveau snd_pcm snd_seq_dummy snd_seq_oss snd_seq_midi snd_rawmidi
    > snd_seq_midi_event snd_seq snd_timer snd_seq_device ttm psmouse snd
    > serio_raw drm_kms_helper soundcore snd_page_alloc drm asus_atk0110
    > i2c_algo_bit video output usbhid hid ahci r8169 mii libahci
    > pata_jmicron
    > [ 114.092961]
    > [ 114.092965] Pid: 1601, comm: umount Not tainted 2.6.36-rc3 #17
    > P7P55D-E PRO/System Product Name
    > [ 114.092974] RIP: 0010:[<ffffffff81254990>] [<ffffffff81254990>]
    > crypto_destroy_tfm+0x50/0x70
    > [ 114.092984] RSP: 0018:ffff88021e7ddd58 EFLAGS: 00010246
    > [ 114.092990] RAX: ffff88021e7ddfd8 RBX: ffff8802365945a0 RCX: 0000000000000001
    > [ 114.092997] RDX: 0000000000000000 RSI: ffff8802365945a8 RDI: ffff8802365945a0
    > [ 114.093004] RBP: ffff88021e7ddd78 R08: 0000000000000000 R09: 0000000000000000
    > [ 114.093011] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
    > [ 114.093018] R13: 0000000000000fd4 R14: ffff88023296b800 R15: ffff880215685a00
    > [ 114.093025] FS: 00007fdb1f0dc740(0000) GS:ffff880001ec0000(0000)
    > knlGS:0000000000000000
    > [ 114.093033] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b
    > [ 114.093039] CR2: 0000000000000108 CR3: 0000000232c90000 CR4: 00000000000006e0
    > [ 114.093046] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
    > [ 114.093053] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
    > [ 114.093061] Process umount (pid: 1601, threadinfo ffff88021e7dc000,
    > task ffff880215685a00)
    > [ 114.093068] Stack:
    > [ 114.093071] ffff88021e7ddd78 ffffffff81521b1e ffff8802336fda00
    > ffff8802336fda00
    > [ 114.093082] <0> ffff88021e7ddd98 ffffffffa02bc166 ffff88021e7ddd98
    > ffff8802336fd800
    > [ 114.093094] <0> ffff88021e7dddc8 ffffffffa02a356f ffff88021e7dddc8
    > ffff880232b72e00
    > [ 114.093108] Call Trace:
    > [ 114.093114] [<ffffffff81521b1e>] ? sub_preempt_count+0xe/0xd0
    > [ 114.093125] [<ffffffffa02bc166>] cifs_crypto_shash_release+0x26/0x60 [cifs]
    > [ 114.093136] [<ffffffffa02a356f>] cifs_put_smb_ses+0x8f/0x130 [cifs]
    > [ 114.093146] [<ffffffffa02a36c5>] cifs_put_tcon+0xb5/0x110 [cifs]
    > [ 114.093156] [<ffffffffa02a373e>] cifs_umount+0x1e/0x50 [cifs]
    > [ 114.093164] [<ffffffffa0297950>] cifs_put_super+0x50/0x100 [cifs]
    > [ 114.093172] [<ffffffff81140b86>] generic_shutdown_super+0x56/0xe0
    > [ 114.093179] [<ffffffff81140c76>] kill_anon_super+0x16/0x60
    > [ 114.093186] [<ffffffff811413d5>] deactivate_locked_super+0x45/0x60
    > [ 114.093194] [<ffffffff8114224a>] deactivate_super+0x4a/0x70
    > [ 114.093202] [<ffffffff8115ac36>] mntput_no_expire+0xd6/0x150
    > [ 114.093208] [<ffffffff8115b028>] sys_umount+0x78/0x3a0
    > [ 114.093216] [<ffffffff8100b0f2>] system_call_fastpath+0x16/0x1b
    > [ 114.093222] Code: 00 74 28 48 89 f7 e8 30 fd ff ff 4c 89 e7 e8 88
    > ff ff ff 48 89 df e8 00 c5 ea ff 48 8b 5d f0 4c 8b 65 f8 c9 c3 66 0f
    > 1f 44 00 00 <49> 8b 84 24 08 01 00 00 48 85 c0 74 cb 48 89 f7 48 89 75
    > e8 ff
    > [ 114.093312] RIP [<ffffffff81254990>] crypto_destroy_tfm+0x50/0x70
    > [ 114.093320] RSP <ffff88021e7ddd58>
    > [ 114.093324] CR2: 0000000000000108
    > [ 114.103240] ---[ end trace 8a50aaf11c4eba15 ]---
    > [ 114.103263] ------------[ cut here ]------------
    > [ 114.103270] WARNING: at kernel/exit.c:899 do_exit+0x746/0x830()
    > [ 114.103277] Hardware name: System Product Name
    > [ 114.103283] Modules linked in: nls_cp437 cifs fbcon tileblit font
    > bitblit softcursor binfmt_misc kvm_intel kvm snd_hda_codec_via
    > snd_hda_intel snd_hda_codec snd_hwdep snd_pcm_oss snd_mixer_oss
    > nouveau snd_pcm snd_seq_dummy snd_seq_oss snd_seq_midi snd_rawmidi
    > snd_seq_midi_event snd_seq snd_timer snd_seq_device ttm psmouse snd
    > serio_raw drm_kms_helper soundcore snd_page_alloc drm asus_atk0110
    > i2c_algo_bit video output usbhid hid ahci r8169 mii libahci
    > pata_jmicron
    > [ 114.103421] Pid: 1601, comm: umount Tainted: G D 2.6.36-rc3 #17
    > [ 114.103430] Call Trace:
    > [ 114.103438] [<ffffffff8105a30f>] warn_slowpath_common+0x7f/0xc0
    > [ 114.103448] [<ffffffff8105a36a>] warn_slowpath_null+0x1a/0x20
    > [ 114.103457] [<ffffffff8105dbf6>] do_exit+0x746/0x830
    > [ 114.103466] [<ffffffff8151e0ba>] ? _raw_spin_unlock_irqrestore+0x4a/0x50
    > [ 114.103477] [<ffffffff8105b485>] ? kmsg_dump+0x145/0x160
    > [ 114.103487] [<ffffffff8151f6ff>] oops_end+0xaf/0xf0
    > [ 114.103497] [<ffffffff810376cb>] no_context+0xfb/0x260
    > [ 114.103506] [<ffffffff81037955>] __bad_area_nosemaphore+0x125/0x1e0
    > [ 114.103517] [<ffffffff81037a7e>] bad_area+0x4e/0x60
    > [ 114.103527] [<ffffffff81521a85>] do_page_fault+0x345/0x3d0
    > [ 114.103539] [<ffffffff8151ea45>] page_fault+0x25/0x30
    > [ 114.103550] [<ffffffff81254990>] ? crypto_destroy_tfm+0x50/0x70
    > [ 114.103562] [<ffffffff81521bee>] ? add_preempt_count+0xe/0xd0
    > [ 114.103574] [<ffffffff81521b1e>] ? sub_preempt_count+0xe/0xd0
    > [ 114.103589] [<ffffffffa02bc166>] cifs_crypto_shash_release+0x26/0x60 [cifs]
    > [ 114.103603] [<ffffffffa02a356f>] cifs_put_smb_ses+0x8f/0x130 [cifs]
    > [ 114.103614] [<ffffffffa02a36c5>] cifs_put_tcon+0xb5/0x110 [cifs]
    > [ 114.103626] [<ffffffffa02a373e>] cifs_umount+0x1e/0x50 [cifs]
    > [ 114.103679] [<ffffffffa0297950>] cifs_put_super+0x50/0x100 [cifs]
    > [ 114.103695] [<ffffffff81140b86>] generic_shutdown_super+0x56/0xe0
    > [ 114.103704] [<ffffffff81140c76>] kill_anon_super+0x16/0x60
    > [ 114.103713] [<ffffffff811413d5>] deactivate_locked_super+0x45/0x60
    > [ 114.103723] [<ffffffff8114224a>] deactivate_super+0x4a/0x70
    > [ 114.103733] [<ffffffff8115ac36>] mntput_no_expire+0xd6/0x150
    > [ 114.103743] [<ffffffff8115b028>] sys_umount+0x78/0x3a0
    > [ 114.103752] [<ffffffff8100b0f2>] system_call_fastpath+0x16/0x1b
    > [ 114.103761] ---[ end trace 8a50aaf11c4eba16 ]---

    Known bug. It's the main reason that I've proposed backing out the
    patches to convert cifs to use the kernel crypto routines until they
    can be reviewed.

    --
    Jeff Layton <jlayton@samba.org>


    \
     
     \ /
      Last update: 2010-09-05 14:49    [W:0.053 / U:149.924 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site