mirror of https://lore.kernel.org/lkml/
 help / color / mirror / Atom feed
From: Ingo Molnar <mingo@elte.hu>
To: Linus Torvalds <torvalds@linux-foundation.org>,
	Greg KH <gregkh@suse.de>, Alan Cox <alan@lxorguk.ukuu.org.uk>
Cc: Linux Kernel Mailing List <linux-kernel@vger.kernel.org>
Subject: Re: [crash] NULL pointer dereference at IP: [<ffffffff812e9ccb>] uart_close+0x2a/0x1e4
Date: Mon, 12 Oct 2009 11:19:54 +0200	[thread overview]
Message-ID: <20091012091954.GA31171@elte.hu> (raw)
In-Reply-To: <20091012080511.GA22607@elte.hu>


* Ingo Molnar <mingo@elte.hu> wrote:

> here's a new crash i havent seen before:
> 
> modprobe used greatest stack depth: 3416 bytes left
> BUG: unable to handle kernel NULL pointer dereference at 0000000000000240
> IP: [<ffffffff812e9ccb>] uart_close+0x2a/0x1e4
> PGD 774b8067 PUD 774b6067 PMD 0 
> Oops: 0000 [#1] DEBUG_PAGEALLOC
> last sysfs file: 
> CPU 0 
> Modules linked in:
> Pid: 1107, comm: hwclock Not tainted 2.6.32-rc3-tip #8181 System Product Name
> RIP: 0010:[<ffffffff812e9ccb>]  [<ffffffff812e9ccb>] uart_close+0x2a/0x1e4
> RSP: 0018:ffff88007754fb88  EFLAGS: 00010246
> RAX: ffffffff812e9ca1 RBX: ffff8800774bcc80 RCX: 0000000000000000
> RDX: ffff88007b320900 RSI: ffff8800774bcc80 RDI: ffff88007b3bb000
> RBP: ffff88007754fbb8 R08: ffff88007754fab8 R09: ffffffff8103f397
> R10: 0000000000000246 R11: ffffffff812c1981 R12: 0000000000000000
> R13: 0000000000000000 R14: ffff88007b3bb000 R15: 0000000000000000
> FS:  00007f7a51c4c6f0(0000) GS:ffffffff81b38000(0000) knlGS:0000000000000000
> CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
> CR2: 0000000000000240 CR3: 00000000774c2000 CR4: 00000000000026f0
> DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
> DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
> Process hwclock (pid: 1107, threadinfo ffff88007754e000, task ffff88007a4e8000)
> Stack:
>  ffff88007754fbb8 ffff88007b3bb000 0000000000000000 00000000fffffffa
> <0> 0000000000000000 0000000000000000 ffff88007754fc98 ffffffff812c3976
> <0> ffff88007754fbf8 0000000000000246 ffff88007b338150 ffff88007b338000
> Call Trace:
>  [<ffffffff812c3976>] tty_release_dev+0x1ca/0x4d8
>  [<ffffffff817718fe>] ? mutex_unlock+0xe/0x10
>  [<ffffffff81773725>] ? _spin_unlock+0x2b/0x2f
>  [<ffffffff812c4235>] tty_open+0x33f/0x41d
>  [<ffffffff81117245>] chrdev_open+0x179/0x19a
>  [<ffffffff8111285a>] __dentry_open+0x1cf/0x2f9
>  [<ffffffff811170cc>] ? chrdev_open+0x0/0x19a
>  [<ffffffff811137e4>] nameidata_to_filp+0x45/0x56
>  [<ffffffff811200fa>] do_filp_open+0x58a/0xa39
>  [<ffffffff81094f37>] ? __lock_acquire+0x8f5/0x95a
>  [<ffffffff8103f3d6>] ? native_sched_clock+0x3b/0x52
>  [<ffffffff811294b8>] ? alloc_fd+0x110/0x11f
>  [<ffffffff81773725>] ? _spin_unlock+0x2b/0x2f
>  [<ffffffff811294b8>] ? alloc_fd+0x110/0x11f
>  [<ffffffff81112598>] do_sys_open+0x62/0x109
>  [<ffffffff81112672>] sys_open+0x20/0x22
>  [<ffffffff81038dff>] system_call_fastpath+0x16/0x1b
> Code: c3 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 08 0f 1f 44 00 00 f6 05 9d 2e 55 01 08 4c 8b af 28 04 00 00 49 89 fe 48 89 f3 <4d> 8b bd 40 02 00 00 74 16 f6 05 87 2e 55 01 40 74 0d 80 3d 33 
> RIP  [<ffffffff812e9ccb>] uart_close+0x2a/0x1e4
>  RSP <ffff88007754fb88>
> CR2: 0000000000000240
> ---[ end trace 16e4ef47b9d6effc ]---
> sky2 eth0: enabling interface
> 
> Note, i have your fix below applied in tip:out-of-tree - it might be the 
> source of this bug? (If yes then this isnt an .32-rc4 problem.)
> 
> ---------------------->
> From 3fafdd6fb57253362575d61e8e2a5c915ccb62fb Mon Sep 17 00:00:00 2001
> From: Linus Torvalds <torvalds@linux-foundation.org>
> Date: Thu, 1 Oct 2009 17:05:18 -0700
> Subject: [PATCH] tty: Fix "WARNING: at drivers/char/tty_io.c:1267"

i've reverted this and the crash is still there:

Call Trace:
 [<ffffffff812c3ece>] tty_release_dev+0x1ca/0x4d8
 [<ffffffff81772e5e>] ? mutex_unlock+0xe/0x10
 [<ffffffff81774cd5>] ? _spin_unlock+0x2b/0x2f
 [<ffffffff812c478d>] tty_open+0x33f/0x41d
 [<ffffffff811174a1>] chrdev_open+0x179/0x19a
 [<ffffffff81112a8a>] __dentry_open+0x1cf/0x2f9
 [<ffffffff81117328>] ? chrdev_open+0x0/0x19a
 [<ffffffff81113a14>] nameidata_to_filp+0x45/0x56
 [<ffffffff8112035a>] do_filp_open+0x58a/0xa39
 [<ffffffff8103f3ce>] ? native_sched_clock+0x3b/0x52
 [<ffffffff8103f38f>] ? sched_clock+0x17/0x1b
 [<ffffffff8108c06e>] ? cpu_clock+0x41/0x5b
 [<ffffffff8112971c>] ? alloc_fd+0x110/0x11f
 [<ffffffff81774cd5>] ? _spin_unlock+0x2b/0x2f
 [<ffffffff8112971c>] ? alloc_fd+0x110/0x11f
 [<ffffffff811127c8>] do_sys_open+0x62/0x109
 [<ffffffff811128a2>] sys_open+0x20/0x22
 [<ffffffff81038dff>] system_call_fastpath+0x16/0x1b
Code: c3 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 08 0f 1f 44 00 
00 f6 05 31 29 55 01 08 4c 8b af 28 04 00 00 49 89 fe 48 89 f3 <4d> 8b 
bd 40 02 00 00 74 16 f6 05 1b 29 55 01 40 74 0d 80 3d e7   
RIP  [<ffffffff812ea237>] uart_close+0x2a/0x1e4
 RSP <ffff88007709bb88>
CR2: 0000000000000240
---[ end trace 7a94f79b2992f19c ]---

	Ingo

  reply	other threads:[~2009-10-12  9:21 UTC|newest]

Thread overview: 37+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2009-10-11 21:58 Linux 2.6.32-rc4 Linus Torvalds
2009-10-12  7:42 ` [origin tree build failure] [PATCH] Revert "USB: musb: make HAVE_CLK support optional" Ingo Molnar
2009-10-12 13:05   ` Mike Frysinger
2009-10-12 14:29     ` Greg KH
2009-10-12 14:39       ` Mike Frysinger
2009-10-12 15:00         ` Ingo Molnar
2009-10-12 15:09           ` Mike Frysinger
2009-10-12 13:49   ` [PATCH] USB: musb: invert arch depend string Mike Frysinger
2009-10-12 14:28     ` Greg KH
2009-10-12 15:02       ` Ingo Molnar
2009-10-12  8:05 ` [crash] NULL pointer dereference at IP: [<ffffffff812e9ccb>] uart_close+0x2a/0x1e4 Ingo Molnar
2009-10-12  9:19   ` Ingo Molnar [this message]
2009-10-12  9:27     ` Ingo Molnar
2009-10-12 11:25       ` Ingo Molnar
2009-10-12 11:45         ` Alan Cox
2009-10-12 11:55           ` Ingo Molnar
2009-10-12 12:22             ` Ingo Molnar
2009-10-12 13:06               ` Alan Cox
2009-10-12 14:23                 ` Ingo Molnar
2009-10-12 16:19   ` Linus Torvalds
2009-10-12 16:26     ` Ingo Molnar
2009-10-12 16:28     ` Ingo Molnar
2009-10-12 16:37     ` Linus Torvalds
2009-10-12 17:13       ` [PATCH] tty, serial: Fix race and NULL check in uart_close() Ingo Molnar
2009-10-12  8:29 ` Linux 2.6.32-rc4 Ingo Molnar
2009-10-12  8:30   ` [origin tree build failure] [PATCH] headers: Fix build in drivers/pci/hotplug/cpqphp.h Ingo Molnar
2009-10-12  8:32   ` [origin tree build failure] [PATCH] headers: Fix build in drivers/char/rtc.c Ingo Molnar
2009-10-12  8:40   ` [origin tree build failure] [PATCH] headers: Fix build in drivers/net/wan/pci200syn.c Ingo Molnar
2009-10-12  9:11   ` [origin tree build failure] [PATCH] headers: Fix build in drivers/net/wan/n2.c Ingo Molnar
2009-10-12  9:16   ` [origin tree build failure] [PATCH] headers: Fix build in drivers/net/wan/c101.c Ingo Molnar
2009-10-12 10:06   ` [origin tree build failure] [PATCH] headers: Fix build in drivers/char/genrtc.c Ingo Molnar
2009-10-12 13:29   ` Linux 2.6.32-rc4 Alexey Dobriyan
2009-10-12  9:43     ` Ingo Molnar
2009-10-12 13:34   ` Alexey Dobriyan
2009-10-12  9:48     ` Ingo Molnar
2009-10-12 14:22   ` [origin tree build failure] [PATCH] headers: Fix build in drivers/char/sonypi.c Ingo Molnar
2009-10-12 13:01 ` Linux 2.6.32-rc4 Thomas Meyer

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20091012091954.GA31171@elte.hu \
    --to=mingo@elte.hu \
    --cc=alan@lxorguk.ukuu.org.uk \
    --cc=gregkh@suse.de \
    --cc=linux-kernel@vger.kernel.org \
    --cc=torvalds@linux-foundation.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox

all inboxes | Powered by JetHome®