* 2.6.36-rc3 NULL pointer dereference crypto_destroy_tfm+0x50/0x70
@ 2010-09-05 8:30 Andrew Hendry
2010-09-05 12:45 ` Jeff Layton
0 siblings, 1 reply; 3+ messages in thread
From: Andrew Hendry @ 2010-09-05 8:30 UTC (permalink / raw)
To: linux-kernel, linux-cifs
[-- Attachment #1: Type: text/plain, Size: 6353 bytes --]
Started hitting this since rc3.
System has 6 cifs mounts from the one server, during shutdown they get
unmounted and gives this error.
If manually unmounting one at a time with a gap inbetween it doesn't
seem to happen.
config attached.
[ 114.092803] BUG: unable to handle kernel NULL pointer dereference
at 0000000000000108
[ 114.092831] IP: [<ffffffff81254990>] crypto_destroy_tfm+0x50/0x70
[ 114.092843] PGD 211b37067 PUD 211b66067 PMD 0
[ 114.092852] Oops: 0000 [#1] PREEMPT SMP
[ 114.092860] last sysfs file:
/sys/devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1:1.0/uevent
[ 114.092869] CPU 6
[ 114.092872] Modules linked in: nls_cp437 cifs fbcon tileblit font
bitblit softcursor binfmt_misc kvm_intel kvm snd_hda_codec_via
snd_hda_intel snd_hda_codec snd_hwdep snd_pcm_oss snd_mixer_oss
nouveau snd_pcm snd_seq_dummy snd_seq_oss snd_seq_midi snd_rawmidi
snd_seq_midi_event snd_seq snd_timer snd_seq_device ttm psmouse snd
serio_raw drm_kms_helper soundcore snd_page_alloc drm asus_atk0110
i2c_algo_bit video output usbhid hid ahci r8169 mii libahci
pata_jmicron
[ 114.092961]
[ 114.092965] Pid: 1601, comm: umount Not tainted 2.6.36-rc3 #17
P7P55D-E PRO/System Product Name
[ 114.092974] RIP: 0010:[<ffffffff81254990>] [<ffffffff81254990>]
crypto_destroy_tfm+0x50/0x70
[ 114.092984] RSP: 0018:ffff88021e7ddd58 EFLAGS: 00010246
[ 114.092990] RAX: ffff88021e7ddfd8 RBX: ffff8802365945a0 RCX: 0000000000000001
[ 114.092997] RDX: 0000000000000000 RSI: ffff8802365945a8 RDI: ffff8802365945a0
[ 114.093004] RBP: ffff88021e7ddd78 R08: 0000000000000000 R09: 0000000000000000
[ 114.093011] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 114.093018] R13: 0000000000000fd4 R14: ffff88023296b800 R15: ffff880215685a00
[ 114.093025] FS: 00007fdb1f0dc740(0000) GS:ffff880001ec0000(0000)
knlGS:0000000000000000
[ 114.093033] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b
[ 114.093039] CR2: 0000000000000108 CR3: 0000000232c90000 CR4: 00000000000006e0
[ 114.093046] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 114.093053] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 114.093061] Process umount (pid: 1601, threadinfo ffff88021e7dc000,
task ffff880215685a00)
[ 114.093068] Stack:
[ 114.093071] ffff88021e7ddd78 ffffffff81521b1e ffff8802336fda00
ffff8802336fda00
[ 114.093082] <0> ffff88021e7ddd98 ffffffffa02bc166 ffff88021e7ddd98
ffff8802336fd800
[ 114.093094] <0> ffff88021e7dddc8 ffffffffa02a356f ffff88021e7dddc8
ffff880232b72e00
[ 114.093108] Call Trace:
[ 114.093114] [<ffffffff81521b1e>] ? sub_preempt_count+0xe/0xd0
[ 114.093125] [<ffffffffa02bc166>] cifs_crypto_shash_release+0x26/0x60 [cifs]
[ 114.093136] [<ffffffffa02a356f>] cifs_put_smb_ses+0x8f/0x130 [cifs]
[ 114.093146] [<ffffffffa02a36c5>] cifs_put_tcon+0xb5/0x110 [cifs]
[ 114.093156] [<ffffffffa02a373e>] cifs_umount+0x1e/0x50 [cifs]
[ 114.093164] [<ffffffffa0297950>] cifs_put_super+0x50/0x100 [cifs]
[ 114.093172] [<ffffffff81140b86>] generic_shutdown_super+0x56/0xe0
[ 114.093179] [<ffffffff81140c76>] kill_anon_super+0x16/0x60
[ 114.093186] [<ffffffff811413d5>] deactivate_locked_super+0x45/0x60
[ 114.093194] [<ffffffff8114224a>] deactivate_super+0x4a/0x70
[ 114.093202] [<ffffffff8115ac36>] mntput_no_expire+0xd6/0x150
[ 114.093208] [<ffffffff8115b028>] sys_umount+0x78/0x3a0
[ 114.093216] [<ffffffff8100b0f2>] system_call_fastpath+0x16/0x1b
[ 114.093222] Code: 00 74 28 48 89 f7 e8 30 fd ff ff 4c 89 e7 e8 88
ff ff ff 48 89 df e8 00 c5 ea ff 48 8b 5d f0 4c 8b 65 f8 c9 c3 66 0f
1f 44 00 00 <49> 8b 84 24 08 01 00 00 48 85 c0 74 cb 48 89 f7 48 89 75
e8 ff
[ 114.093312] RIP [<ffffffff81254990>] crypto_destroy_tfm+0x50/0x70
[ 114.093320] RSP <ffff88021e7ddd58>
[ 114.093324] CR2: 0000000000000108
[ 114.103240] ---[ end trace 8a50aaf11c4eba15 ]---
[ 114.103263] ------------[ cut here ]------------
[ 114.103270] WARNING: at kernel/exit.c:899 do_exit+0x746/0x830()
[ 114.103277] Hardware name: System Product Name
[ 114.103283] Modules linked in: nls_cp437 cifs fbcon tileblit font
bitblit softcursor binfmt_misc kvm_intel kvm snd_hda_codec_via
snd_hda_intel snd_hda_codec snd_hwdep snd_pcm_oss snd_mixer_oss
nouveau snd_pcm snd_seq_dummy snd_seq_oss snd_seq_midi snd_rawmidi
snd_seq_midi_event snd_seq snd_timer snd_seq_device ttm psmouse snd
serio_raw drm_kms_helper soundcore snd_page_alloc drm asus_atk0110
i2c_algo_bit video output usbhid hid ahci r8169 mii libahci
pata_jmicron
[ 114.103421] Pid: 1601, comm: umount Tainted: G D 2.6.36-rc3 #17
[ 114.103430] Call Trace:
[ 114.103438] [<ffffffff8105a30f>] warn_slowpath_common+0x7f/0xc0
[ 114.103448] [<ffffffff8105a36a>] warn_slowpath_null+0x1a/0x20
[ 114.103457] [<ffffffff8105dbf6>] do_exit+0x746/0x830
[ 114.103466] [<ffffffff8151e0ba>] ? _raw_spin_unlock_irqrestore+0x4a/0x50
[ 114.103477] [<ffffffff8105b485>] ? kmsg_dump+0x145/0x160
[ 114.103487] [<ffffffff8151f6ff>] oops_end+0xaf/0xf0
[ 114.103497] [<ffffffff810376cb>] no_context+0xfb/0x260
[ 114.103506] [<ffffffff81037955>] __bad_area_nosemaphore+0x125/0x1e0
[ 114.103517] [<ffffffff81037a7e>] bad_area+0x4e/0x60
[ 114.103527] [<ffffffff81521a85>] do_page_fault+0x345/0x3d0
[ 114.103539] [<ffffffff8151ea45>] page_fault+0x25/0x30
[ 114.103550] [<ffffffff81254990>] ? crypto_destroy_tfm+0x50/0x70
[ 114.103562] [<ffffffff81521bee>] ? add_preempt_count+0xe/0xd0
[ 114.103574] [<ffffffff81521b1e>] ? sub_preempt_count+0xe/0xd0
[ 114.103589] [<ffffffffa02bc166>] cifs_crypto_shash_release+0x26/0x60 [cifs]
[ 114.103603] [<ffffffffa02a356f>] cifs_put_smb_ses+0x8f/0x130 [cifs]
[ 114.103614] [<ffffffffa02a36c5>] cifs_put_tcon+0xb5/0x110 [cifs]
[ 114.103626] [<ffffffffa02a373e>] cifs_umount+0x1e/0x50 [cifs]
[ 114.103679] [<ffffffffa0297950>] cifs_put_super+0x50/0x100 [cifs]
[ 114.103695] [<ffffffff81140b86>] generic_shutdown_super+0x56/0xe0
[ 114.103704] [<ffffffff81140c76>] kill_anon_super+0x16/0x60
[ 114.103713] [<ffffffff811413d5>] deactivate_locked_super+0x45/0x60
[ 114.103723] [<ffffffff8114224a>] deactivate_super+0x4a/0x70
[ 114.103733] [<ffffffff8115ac36>] mntput_no_expire+0xd6/0x150
[ 114.103743] [<ffffffff8115b028>] sys_umount+0x78/0x3a0
[ 114.103752] [<ffffffff8100b0f2>] system_call_fastpath+0x16/0x1b
[ 114.103761] ---[ end trace 8a50aaf11c4eba16 ]---
[-- Attachment #2: config.gz --]
[-- Type: application/x-gzip, Size: 20584 bytes --]
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: 2.6.36-rc3 NULL pointer dereference crypto_destroy_tfm+0x50/0x70
2010-09-05 8:30 2.6.36-rc3 NULL pointer dereference crypto_destroy_tfm+0x50/0x70 Andrew Hendry
@ 2010-09-05 12:45 ` Jeff Layton
2010-09-06 14:28 ` Steve French
0 siblings, 1 reply; 3+ messages in thread
From: Jeff Layton @ 2010-09-05 12:45 UTC (permalink / raw)
To: Andrew Hendry; +Cc: linux-kernel, linux-cifs
On Sun, 5 Sep 2010 18:30:46 +1000
Andrew Hendry <andrew.hendry@gmail.com> wrote:
> Started hitting this since rc3.
>
> System has 6 cifs mounts from the one server, during shutdown they get
> unmounted and gives this error.
> If manually unmounting one at a time with a gap inbetween it doesn't
> seem to happen.
>
> config attached.
>
> [ 114.092803] BUG: unable to handle kernel NULL pointer dereference
> at 0000000000000108
> [ 114.092831] IP: [<ffffffff81254990>] crypto_destroy_tfm+0x50/0x70
> [ 114.092843] PGD 211b37067 PUD 211b66067 PMD 0
> [ 114.092852] Oops: 0000 [#1] PREEMPT SMP
> [ 114.092860] last sysfs file:
> /sys/devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1:1.0/uevent
> [ 114.092869] CPU 6
> [ 114.092872] Modules linked in: nls_cp437 cifs fbcon tileblit font
> bitblit softcursor binfmt_misc kvm_intel kvm snd_hda_codec_via
> snd_hda_intel snd_hda_codec snd_hwdep snd_pcm_oss snd_mixer_oss
> nouveau snd_pcm snd_seq_dummy snd_seq_oss snd_seq_midi snd_rawmidi
> snd_seq_midi_event snd_seq snd_timer snd_seq_device ttm psmouse snd
> serio_raw drm_kms_helper soundcore snd_page_alloc drm asus_atk0110
> i2c_algo_bit video output usbhid hid ahci r8169 mii libahci
> pata_jmicron
> [ 114.092961]
> [ 114.092965] Pid: 1601, comm: umount Not tainted 2.6.36-rc3 #17
> P7P55D-E PRO/System Product Name
> [ 114.092974] RIP: 0010:[<ffffffff81254990>] [<ffffffff81254990>]
> crypto_destroy_tfm+0x50/0x70
> [ 114.092984] RSP: 0018:ffff88021e7ddd58 EFLAGS: 00010246
> [ 114.092990] RAX: ffff88021e7ddfd8 RBX: ffff8802365945a0 RCX: 0000000000000001
> [ 114.092997] RDX: 0000000000000000 RSI: ffff8802365945a8 RDI: ffff8802365945a0
> [ 114.093004] RBP: ffff88021e7ddd78 R08: 0000000000000000 R09: 0000000000000000
> [ 114.093011] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
> [ 114.093018] R13: 0000000000000fd4 R14: ffff88023296b800 R15: ffff880215685a00
> [ 114.093025] FS: 00007fdb1f0dc740(0000) GS:ffff880001ec0000(0000)
> knlGS:0000000000000000
> [ 114.093033] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b
> [ 114.093039] CR2: 0000000000000108 CR3: 0000000232c90000 CR4: 00000000000006e0
> [ 114.093046] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
> [ 114.093053] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
> [ 114.093061] Process umount (pid: 1601, threadinfo ffff88021e7dc000,
> task ffff880215685a00)
> [ 114.093068] Stack:
> [ 114.093071] ffff88021e7ddd78 ffffffff81521b1e ffff8802336fda00
> ffff8802336fda00
> [ 114.093082] <0> ffff88021e7ddd98 ffffffffa02bc166 ffff88021e7ddd98
> ffff8802336fd800
> [ 114.093094] <0> ffff88021e7dddc8 ffffffffa02a356f ffff88021e7dddc8
> ffff880232b72e00
> [ 114.093108] Call Trace:
> [ 114.093114] [<ffffffff81521b1e>] ? sub_preempt_count+0xe/0xd0
> [ 114.093125] [<ffffffffa02bc166>] cifs_crypto_shash_release+0x26/0x60 [cifs]
> [ 114.093136] [<ffffffffa02a356f>] cifs_put_smb_ses+0x8f/0x130 [cifs]
> [ 114.093146] [<ffffffffa02a36c5>] cifs_put_tcon+0xb5/0x110 [cifs]
> [ 114.093156] [<ffffffffa02a373e>] cifs_umount+0x1e/0x50 [cifs]
> [ 114.093164] [<ffffffffa0297950>] cifs_put_super+0x50/0x100 [cifs]
> [ 114.093172] [<ffffffff81140b86>] generic_shutdown_super+0x56/0xe0
> [ 114.093179] [<ffffffff81140c76>] kill_anon_super+0x16/0x60
> [ 114.093186] [<ffffffff811413d5>] deactivate_locked_super+0x45/0x60
> [ 114.093194] [<ffffffff8114224a>] deactivate_super+0x4a/0x70
> [ 114.093202] [<ffffffff8115ac36>] mntput_no_expire+0xd6/0x150
> [ 114.093208] [<ffffffff8115b028>] sys_umount+0x78/0x3a0
> [ 114.093216] [<ffffffff8100b0f2>] system_call_fastpath+0x16/0x1b
> [ 114.093222] Code: 00 74 28 48 89 f7 e8 30 fd ff ff 4c 89 e7 e8 88
> ff ff ff 48 89 df e8 00 c5 ea ff 48 8b 5d f0 4c 8b 65 f8 c9 c3 66 0f
> 1f 44 00 00 <49> 8b 84 24 08 01 00 00 48 85 c0 74 cb 48 89 f7 48 89 75
> e8 ff
> [ 114.093312] RIP [<ffffffff81254990>] crypto_destroy_tfm+0x50/0x70
> [ 114.093320] RSP <ffff88021e7ddd58>
> [ 114.093324] CR2: 0000000000000108
> [ 114.103240] ---[ end trace 8a50aaf11c4eba15 ]---
> [ 114.103263] ------------[ cut here ]------------
> [ 114.103270] WARNING: at kernel/exit.c:899 do_exit+0x746/0x830()
> [ 114.103277] Hardware name: System Product Name
> [ 114.103283] Modules linked in: nls_cp437 cifs fbcon tileblit font
> bitblit softcursor binfmt_misc kvm_intel kvm snd_hda_codec_via
> snd_hda_intel snd_hda_codec snd_hwdep snd_pcm_oss snd_mixer_oss
> nouveau snd_pcm snd_seq_dummy snd_seq_oss snd_seq_midi snd_rawmidi
> snd_seq_midi_event snd_seq snd_timer snd_seq_device ttm psmouse snd
> serio_raw drm_kms_helper soundcore snd_page_alloc drm asus_atk0110
> i2c_algo_bit video output usbhid hid ahci r8169 mii libahci
> pata_jmicron
> [ 114.103421] Pid: 1601, comm: umount Tainted: G D 2.6.36-rc3 #17
> [ 114.103430] Call Trace:
> [ 114.103438] [<ffffffff8105a30f>] warn_slowpath_common+0x7f/0xc0
> [ 114.103448] [<ffffffff8105a36a>] warn_slowpath_null+0x1a/0x20
> [ 114.103457] [<ffffffff8105dbf6>] do_exit+0x746/0x830
> [ 114.103466] [<ffffffff8151e0ba>] ? _raw_spin_unlock_irqrestore+0x4a/0x50
> [ 114.103477] [<ffffffff8105b485>] ? kmsg_dump+0x145/0x160
> [ 114.103487] [<ffffffff8151f6ff>] oops_end+0xaf/0xf0
> [ 114.103497] [<ffffffff810376cb>] no_context+0xfb/0x260
> [ 114.103506] [<ffffffff81037955>] __bad_area_nosemaphore+0x125/0x1e0
> [ 114.103517] [<ffffffff81037a7e>] bad_area+0x4e/0x60
> [ 114.103527] [<ffffffff81521a85>] do_page_fault+0x345/0x3d0
> [ 114.103539] [<ffffffff8151ea45>] page_fault+0x25/0x30
> [ 114.103550] [<ffffffff81254990>] ? crypto_destroy_tfm+0x50/0x70
> [ 114.103562] [<ffffffff81521bee>] ? add_preempt_count+0xe/0xd0
> [ 114.103574] [<ffffffff81521b1e>] ? sub_preempt_count+0xe/0xd0
> [ 114.103589] [<ffffffffa02bc166>] cifs_crypto_shash_release+0x26/0x60 [cifs]
> [ 114.103603] [<ffffffffa02a356f>] cifs_put_smb_ses+0x8f/0x130 [cifs]
> [ 114.103614] [<ffffffffa02a36c5>] cifs_put_tcon+0xb5/0x110 [cifs]
> [ 114.103626] [<ffffffffa02a373e>] cifs_umount+0x1e/0x50 [cifs]
> [ 114.103679] [<ffffffffa0297950>] cifs_put_super+0x50/0x100 [cifs]
> [ 114.103695] [<ffffffff81140b86>] generic_shutdown_super+0x56/0xe0
> [ 114.103704] [<ffffffff81140c76>] kill_anon_super+0x16/0x60
> [ 114.103713] [<ffffffff811413d5>] deactivate_locked_super+0x45/0x60
> [ 114.103723] [<ffffffff8114224a>] deactivate_super+0x4a/0x70
> [ 114.103733] [<ffffffff8115ac36>] mntput_no_expire+0xd6/0x150
> [ 114.103743] [<ffffffff8115b028>] sys_umount+0x78/0x3a0
> [ 114.103752] [<ffffffff8100b0f2>] system_call_fastpath+0x16/0x1b
> [ 114.103761] ---[ end trace 8a50aaf11c4eba16 ]---
Known bug. It's the main reason that I've proposed backing out the
patches to convert cifs to use the kernel crypto routines until they
can be reviewed.
--
Jeff Layton <jlayton@samba.org>
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: 2.6.36-rc3 NULL pointer dereference crypto_destroy_tfm+0x50/0x70
2010-09-05 12:45 ` Jeff Layton
@ 2010-09-06 14:28 ` Steve French
0 siblings, 0 replies; 3+ messages in thread
From: Steve French @ 2010-09-06 14:28 UTC (permalink / raw)
To: Jeff Layton; +Cc: Andrew Hendry, linux-kernel, linux-cifs
On Sun, Sep 5, 2010 at 7:45 AM, Jeff Layton <jlayton@samba.org> wrote:
> On Sun, 5 Sep 2010 18:30:46 +1000
> Andrew Hendry <andrew.hendry@gmail.com> wrote:
>
>> Started hitting this since rc3.
>>
>> System has 6 cifs mounts from the one server, during shutdown they get
>> unmounted and gives this error.
>> If manually unmounting one at a time with a gap inbetween it doesn't
>> seem to happen.
>>
yes - as Jeff indicated, a part of the cifs kernel crypto patches has problems.
Key question is whether it is better to back out the fix until next release
(which also will remove the change which moved cifs to using the kernel
crypto routines) or take Shirish's fixes for the problem you describe.
--
Thanks,
Steve
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2010-09-06 14:28 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2010-09-05 8:30 2.6.36-rc3 NULL pointer dereference crypto_destroy_tfm+0x50/0x70 Andrew Hendry
2010-09-05 12:45 ` Jeff Layton
2010-09-06 14:28 ` Steve French
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox
all inboxes | Powered by JetHome®