From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1753892Ab0IEMqK (ORCPT ); Sun, 5 Sep 2010 08:46:10 -0400 Received: from cdptpa-omtalb.mail.rr.com ([75.180.132.122]:63179 "EHLO cdptpa-omtalb.mail.rr.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1753617Ab0IEMqI (ORCPT ); Sun, 5 Sep 2010 08:46:08 -0400 X-Authority-Analysis: v=1.1 cv=ThumiTxpqs+90v0MMNGlZF2p0uIl7xDDHDUIa/d9A1g= c=1 sm=0 a=zCsVK1XbJW0A:10 a=kj9zAlcOel0A:10 a=ld/erqUjW76FpBUqCqkKeA==:17 a=pGLkceISAAAA:8 a=hGzw-44bAAAA:8 a=PRp58IYOHdMYBgBx0XQA:9 a=Dq5EvjbB0ijFYD4oxhUA:7 a=5GEToZqCnPZhU8lHvkkzzYSJSk8A:4 a=CjuIK1q_8ugA:10 a=MSl-tDqOz04A:10 a=dowx1zmaLagA:10 a=ld/erqUjW76FpBUqCqkKeA==:117 X-Cloudmark-Score: 0 X-Originating-IP: 71.70.153.3 Date: Sun, 5 Sep 2010 08:45:04 -0400 From: Jeff Layton To: Andrew Hendry Cc: linux-kernel , linux-cifs@vger.kernel.org Subject: Re: 2.6.36-rc3 NULL pointer dereference crypto_destroy_tfm+0x50/0x70 Message-ID: <20100905084504.7dae4e13@tlielax.poochiereds.net> In-Reply-To: References: X-Mailer: Claws Mail 3.7.6 (GTK+ 2.21.7; x86_64-redhat-linux-gnu) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Sun, 5 Sep 2010 18:30:46 +1000 Andrew Hendry wrote: > Started hitting this since rc3. > > System has 6 cifs mounts from the one server, during shutdown they get > unmounted and gives this error. > If manually unmounting one at a time with a gap inbetween it doesn't > seem to happen. > > config attached. > > [ 114.092803] BUG: unable to handle kernel NULL pointer dereference > at 0000000000000108 > [ 114.092831] IP: [] crypto_destroy_tfm+0x50/0x70 > [ 114.092843] PGD 211b37067 PUD 211b66067 PMD 0 > [ 114.092852] Oops: 0000 [#1] PREEMPT SMP > [ 114.092860] last sysfs file: > /sys/devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1:1.0/uevent > [ 114.092869] CPU 6 > [ 114.092872] Modules linked in: nls_cp437 cifs fbcon tileblit font > bitblit softcursor binfmt_misc kvm_intel kvm snd_hda_codec_via > snd_hda_intel snd_hda_codec snd_hwdep snd_pcm_oss snd_mixer_oss > nouveau snd_pcm snd_seq_dummy snd_seq_oss snd_seq_midi snd_rawmidi > snd_seq_midi_event snd_seq snd_timer snd_seq_device ttm psmouse snd > serio_raw drm_kms_helper soundcore snd_page_alloc drm asus_atk0110 > i2c_algo_bit video output usbhid hid ahci r8169 mii libahci > pata_jmicron > [ 114.092961] > [ 114.092965] Pid: 1601, comm: umount Not tainted 2.6.36-rc3 #17 > P7P55D-E PRO/System Product Name > [ 114.092974] RIP: 0010:[] [] > crypto_destroy_tfm+0x50/0x70 > [ 114.092984] RSP: 0018:ffff88021e7ddd58 EFLAGS: 00010246 > [ 114.092990] RAX: ffff88021e7ddfd8 RBX: ffff8802365945a0 RCX: 0000000000000001 > [ 114.092997] RDX: 0000000000000000 RSI: ffff8802365945a8 RDI: ffff8802365945a0 > [ 114.093004] RBP: ffff88021e7ddd78 R08: 0000000000000000 R09: 0000000000000000 > [ 114.093011] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 > [ 114.093018] R13: 0000000000000fd4 R14: ffff88023296b800 R15: ffff880215685a00 > [ 114.093025] FS: 00007fdb1f0dc740(0000) GS:ffff880001ec0000(0000) > knlGS:0000000000000000 > [ 114.093033] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b > [ 114.093039] CR2: 0000000000000108 CR3: 0000000232c90000 CR4: 00000000000006e0 > [ 114.093046] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 > [ 114.093053] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 > [ 114.093061] Process umount (pid: 1601, threadinfo ffff88021e7dc000, > task ffff880215685a00) > [ 114.093068] Stack: > [ 114.093071] ffff88021e7ddd78 ffffffff81521b1e ffff8802336fda00 > ffff8802336fda00 > [ 114.093082] <0> ffff88021e7ddd98 ffffffffa02bc166 ffff88021e7ddd98 > ffff8802336fd800 > [ 114.093094] <0> ffff88021e7dddc8 ffffffffa02a356f ffff88021e7dddc8 > ffff880232b72e00 > [ 114.093108] Call Trace: > [ 114.093114] [] ? sub_preempt_count+0xe/0xd0 > [ 114.093125] [] cifs_crypto_shash_release+0x26/0x60 [cifs] > [ 114.093136] [] cifs_put_smb_ses+0x8f/0x130 [cifs] > [ 114.093146] [] cifs_put_tcon+0xb5/0x110 [cifs] > [ 114.093156] [] cifs_umount+0x1e/0x50 [cifs] > [ 114.093164] [] cifs_put_super+0x50/0x100 [cifs] > [ 114.093172] [] generic_shutdown_super+0x56/0xe0 > [ 114.093179] [] kill_anon_super+0x16/0x60 > [ 114.093186] [] deactivate_locked_super+0x45/0x60 > [ 114.093194] [] deactivate_super+0x4a/0x70 > [ 114.093202] [] mntput_no_expire+0xd6/0x150 > [ 114.093208] [] sys_umount+0x78/0x3a0 > [ 114.093216] [] system_call_fastpath+0x16/0x1b > [ 114.093222] Code: 00 74 28 48 89 f7 e8 30 fd ff ff 4c 89 e7 e8 88 > ff ff ff 48 89 df e8 00 c5 ea ff 48 8b 5d f0 4c 8b 65 f8 c9 c3 66 0f > 1f 44 00 00 <49> 8b 84 24 08 01 00 00 48 85 c0 74 cb 48 89 f7 48 89 75 > e8 ff > [ 114.093312] RIP [] crypto_destroy_tfm+0x50/0x70 > [ 114.093320] RSP > [ 114.093324] CR2: 0000000000000108 > [ 114.103240] ---[ end trace 8a50aaf11c4eba15 ]--- > [ 114.103263] ------------[ cut here ]------------ > [ 114.103270] WARNING: at kernel/exit.c:899 do_exit+0x746/0x830() > [ 114.103277] Hardware name: System Product Name > [ 114.103283] Modules linked in: nls_cp437 cifs fbcon tileblit font > bitblit softcursor binfmt_misc kvm_intel kvm snd_hda_codec_via > snd_hda_intel snd_hda_codec snd_hwdep snd_pcm_oss snd_mixer_oss > nouveau snd_pcm snd_seq_dummy snd_seq_oss snd_seq_midi snd_rawmidi > snd_seq_midi_event snd_seq snd_timer snd_seq_device ttm psmouse snd > serio_raw drm_kms_helper soundcore snd_page_alloc drm asus_atk0110 > i2c_algo_bit video output usbhid hid ahci r8169 mii libahci > pata_jmicron > [ 114.103421] Pid: 1601, comm: umount Tainted: G D 2.6.36-rc3 #17 > [ 114.103430] Call Trace: > [ 114.103438] [] warn_slowpath_common+0x7f/0xc0 > [ 114.103448] [] warn_slowpath_null+0x1a/0x20 > [ 114.103457] [] do_exit+0x746/0x830 > [ 114.103466] [] ? _raw_spin_unlock_irqrestore+0x4a/0x50 > [ 114.103477] [] ? kmsg_dump+0x145/0x160 > [ 114.103487] [] oops_end+0xaf/0xf0 > [ 114.103497] [] no_context+0xfb/0x260 > [ 114.103506] [] __bad_area_nosemaphore+0x125/0x1e0 > [ 114.103517] [] bad_area+0x4e/0x60 > [ 114.103527] [] do_page_fault+0x345/0x3d0 > [ 114.103539] [] page_fault+0x25/0x30 > [ 114.103550] [] ? crypto_destroy_tfm+0x50/0x70 > [ 114.103562] [] ? add_preempt_count+0xe/0xd0 > [ 114.103574] [] ? sub_preempt_count+0xe/0xd0 > [ 114.103589] [] cifs_crypto_shash_release+0x26/0x60 [cifs] > [ 114.103603] [] cifs_put_smb_ses+0x8f/0x130 [cifs] > [ 114.103614] [] cifs_put_tcon+0xb5/0x110 [cifs] > [ 114.103626] [] cifs_umount+0x1e/0x50 [cifs] > [ 114.103679] [] cifs_put_super+0x50/0x100 [cifs] > [ 114.103695] [] generic_shutdown_super+0x56/0xe0 > [ 114.103704] [] kill_anon_super+0x16/0x60 > [ 114.103713] [] deactivate_locked_super+0x45/0x60 > [ 114.103723] [] deactivate_super+0x4a/0x70 > [ 114.103733] [] mntput_no_expire+0xd6/0x150 > [ 114.103743] [] sys_umount+0x78/0x3a0 > [ 114.103752] [] system_call_fastpath+0x16/0x1b > [ 114.103761] ---[ end trace 8a50aaf11c4eba16 ]--- Known bug. It's the main reason that I've proposed backing out the patches to convert cifs to use the kernel crypto routines until they can be reviewed. -- Jeff Layton