Bug 725471

Summary: Kernel panic when loading and unloading modules
Product: Red Hat Enterprise Linux 6 Reporter: Josef Lusticky <jlustick>
Component: kernelAssignee: Red Hat Kernel Manager <kernel-mgr>
Status: CLOSED NOTABUG QA Contact: Red Hat Kernel QE team <kernel-qe>
Severity: high Docs Contact:
Priority: unspecified    
Version: 6.1CC: drjones
Target Milestone: rc   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2011-07-29 09:20:34 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Attachments:
Description Flags
the test script none

Description Josef Lusticky 2011-07-25 15:11:54 UTC 
Created attachment 515092 [details]
the test script

Description of problem:
Kernel panic occurs on x86, x86_64, s390x (more not tested) when loading and unloading modules presented on system in /lib/modules using attached script.
The script find modules presented on system and tries to load and unload them.

Version-Release number of selected component (if applicable):


How reproducible:
almost always

Steps to Reproduce
1. run the attached script as root
  
Actual results:
kernel panics, backtraces

Expected results:
no kernel panics and backtraces

Additional info:
This is not caused by the same module on every system. This bug can be also seen on RHEL 5 systems and might be related to BZ#723210.


Kernel panic example RHEL 6.1 i386:
BUG: unable to handle kernel NULL pointer dereference at 00000010
IP: [<c06b3ff1>] __device_attach+0x11/0x50
*pdpt = 0000000029669001 *pde = 000000003db54067 
Oops: 0000 [#1] SMP 
last sysfs file: /sys/module/parport/initstate
Modules linked in: parport_pc(+) parport hed atyfb vga16fb vgastate 8390p capifs rsrc_nonstatic ar7part sg des_generic sr_mod cdrom i2c_nforce2 cx88_vp3054_i2c cx8802 cx88xx btcx_risc videobuf_dma_sg videobuf_core ivtv cx2341x v4l2_common videodev i2c_algo_bit tveeprom snd_seq snd_seq_device snd_timer snd soundcore ir_lirc_codec lirc_dev ir_sony_decoder ir_jvc_decoder ir_rc6_decoder ir_rc5_decoder ir_nec_decoder rc_core dvb_usb_af9005_remote dcdbas edac_core nls_cp932 lzo lzo_decompress lzo_compress ansi_cprng vmac xcbc zlib seed rmd320 rmd256 rmd160 rmd128 cts ccm ghash_generic gcm salsa20_generic salsa20_i586 camellia fcrypt pcbc tgr192 anubis wp512 khazad tea michael_mic arc4 cast6 cast5 deflate zlib_deflate sha512_generic seqiv ctr xts lrw gf128mul serpent twofish twofish_common blowfish sha256_generic md4 cbc ecb aes_i586 aes_generic ts_kmp fakehard nl802154 wpan_class sunrpc p4_clockmod ipv6 microcode serio_raw i2c_core ext4 mbcache jbd2 sd_mod crc_t10dif mptspi mptscsih mptbase scsi_transport_spi dm_mod [last unloaded: parport]

Pid: 3300, comm: modprobe Tainted: G        WC ---------------- T 2.6.32-169.el6.i686 #1 Dell Computer Corporation PowerEdge 1750             /0J3014
EIP: 0060:[<c06b3ff1>] EFLAGS: 00010286 CPU: 1
EIP is at __device_attach+0x11/0x50
EAX: 00000000 EBX: fc150ab4 ECX: f70b58d0 EDX: eff52008
ESI: eff52008 EDI: c06b3fe0 EBP: c0a2fb60 ESP: e9d11e30
 DS: 007b ES: 007b FS: 00d8 GS: 00e0 SS: 0068
Process modprobe (pid: 3300, ti=e9d10000 task=f6488030 task.ti=e9d10000)
Stack:
 e9d11e40 eff52008 c06b2e92 00000000 f70b58d0 c149f4b8 eff52008 eff5203c
<0> c0a2fa20 e9d11ebc c06b40d2 c06b3fe0 eff52008 00000000 c0a2fa20 c06b2c5d
<0> c06b1416 eff52010 c0a2fa28 00000000 ffffffff ffffffff f0549900 00000000
Call Trace:
 [<c06b2e92>] ? bus_for_each_drv+0x52/0x80
 [<c06b40d2>] ? device_attach+0x72/0x90
 [<c06b3fe0>] ? __device_attach+0x0/0x50
 [<c06b2c5d>] ? bus_probe_device+0x1d/0x40
 [<c06b1416>] ? device_add+0x4d6/0x5f0
 [<c06b570c>] ? platform_device_add+0xfc/0x1e0
 [<c06b59ae>] ? platform_device_alloc+0x4e/0x70
 [<c06b5a82>] ? platform_device_register_simple+0x42/0x70
 [<fc2e50e4>] ? parport_pc_probe_port+0x6a4/0xa20 [parport_pc]
 [<c066b590>] ? pnp_device_remove+0x0/0x30
 [<c06b425f>] ? driver_register+0x5f/0x110
 [<fc2eb35d>] ? parport_pc_init+0x2bd/0x352 [parport_pc]
 [<fc2eb0a0>] ? parport_pc_init+0x0/0x352 [parport_pc]
 [<c040303f>] ? do_one_initcall+0x2f/0x1c0
 [<c048ff84>] ? sys_init_module+0xb4/0x220
 [<c08260a4>] ? syscall_call+0x7/0xb
Code: 34 e8 84 5f dc ff eb b6 66 90 89 da 89 f0 e8 f7 fc ff ff eb dc 90 8d 74 26 00 83 ec 08 89 1c 24 89 c3 89 74 24 04 8b 40 04 89 d6 <8b> 48 10 85 c9 74 18 89 da 89 f0 ff d1 85 c0 75 0e 8b 1c 24 8b 
EIP: [<c06b3ff1>] __device_attach+0x11/0x50 SS:ESP 0068:e9d11e30
CR2: 0000000000000010
---[ end trace 91950c558140b650 ]---
Kernel panic - not syncing: Fatal exception

Message from syslogd@dell-pe1750-1 at Jul 25 10:49:13 ...
 kernel:Oops: 0000 [#1] SMP 

Message from syslogd@dell-pe1750-1 at Jul 25 10:49:13 ...
 kernel:last sysfs file: /sys/module/parport/initstate

Message from syslogd@dell-pe1750-1 at Jul 25 10:49:13 ...
 kernel:Process modprobe Pid: 3300, comm: modprobe Tainted: G      D WC ---------------- T 2.6.32-169.el6.i686 #1
(pid: 3300, ti=eCall Trace:
9d10000 task=f64 [<c08234c1>] ? panic+0x42/0xf9
88030 task.ti=e9 [<c08273bc>] ? oops_end+0xbc/0xd0
d10000)

Me [<c0432aa2>] ? no_context+0xc2/0x190
ssage from syslo [<c0432d1b>] ? bad_area+0x3b/0x50
gd@dell-pe1750-1 [<c04331be>] ? __do_page_fault+0x34e/0x420
 at Jul 25 10:49 [<c05f9797>] ? vsnprintf+0x1f7/0x3f0
:13 ...
 kerne [<c043ed52>] ? __wake_up+0x42/0x60
l:Stack:

M [<c0828d7a>] ? do_page_fault+0x2a/0x90
essage from sysl [<c0828d50>] ? do_page_fault+0x0/0x90
ogd@dell-pe1750- [<c08267a7>] ? error_code+0x73/0x78
1 at Jul 25 10:4 [<c06b3fe0>] ? __device_attach+0x0/0x50
9:13 ...
 kern [<c08000d8>] ? packet_sendmsg+0x3f8/0x7e0
el:Call Trace:
 [<c06b3ff1>] ? __device_attach+0x11/0x50

Message fro [<c06b2e92>] ? bus_for_each_drv+0x52/0x80
m syslogd@dell-p [<c06b40d2>] ? device_attach+0x72/0x90
e1750-1 at Jul 2 [<c06b3fe0>] ? __device_attach+0x0/0x50
 [<c06b2c5d>] ? bus_probe_device+0x1d/0x40

 kernel:Code: 3 [<c06b1416>] ? device_add+0x4d6/0x5f0
4 e8 84 5f dc ff [<c06b570c>] ? platform_device_add+0xfc/0x1e0
 eb b6 66 90 89  [<c06b59ae>] ? platform_device_alloc+0x4e/0x70
da 89 f0 e8 f7 f [<c06b5a82>] ? platform_device_register_simple+0x42/0x70
c ff ff eb dc 90 [<fc2e50e4>] ? parport_pc_probe_port+0x6a4/0xa20 [parport_pc]
 8d 74 26 00 83  [<c066b590>] ? pnp_device_remove+0x0/0x30
ec 08 89 1c 24 8 [<c06b425f>] ? driver_register+0x5f/0x110
9 c3 89 74 24 04 [<fc2eb35d>] ? parport_pc_init+0x2bd/0x352 [parport_pc]
 8b 40 04 89 d6  [<fc2eb0a0>] ? parport_pc_init+0x0/0x352 [parport_pc]
<8b> 48 10 85 c9 [<c040303f>] ? do_one_initcall+0x2f/0x1c0
 74 18 89 da 89  [<c048ff84>] ? sys_init_module+0xb4/0x220
f0 ff d1 85 c0 7 [<c08260a4>] ? syscall_call+0x7/0xb
5 0e 8b 1c 24 8b
Comment 2 Josef Lusticky 2011-07-26 06:34:29 UTC 
Sometimes modprobe gets blocked and hangs until timeout expires.


*** Loading module ip_set_list_set ***
Netfilter messages via NETLINK v0.30.
ip_set: protocol 6
INFO: task modprobe:5647 blocked for more than 120 seconds.
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
modprobe      D f130fe88     0  5647   3469 0x00000080
 f2da4570 00000086 00000002 f130fe88 c1ec3aa4 00000000 c04df2ca b7889000
 ccdcdb20 c16523c0 000031fa 18c7fdbc 000031fa c0ae30a0 c0ae30a0 f2da4818
 c0ae30a0 c0adeaa4 c0ae30a0 f2da4818 03435357 c0501011 acad2025 f2da4570
Call Trace:
 [<c04df2ca>] ? filemap_fault+0xba/0x450
 [<c0501011>] ? __do_fault+0x431/0x4e0
 [<c044f1f1>] ? enqueue_rt_entity+0x51/0x60
 [<c044f4f0>] ? enqueue_task_rt+0x30/0x70
 [<c04461b9>] ? enqueue_task+0x79/0x90
 [<c0824429>] ? _cond_resched+0x29/0x40
 [<c0824462>] ? wait_for_common+0x22/0x150
 [<c04a1e05>] ? __stop_cpus+0xa5/0xc0
 [<c04a1c10>] ? stop_machine_cpu_stop+0x0/0xb0
 [<c04a1ea9>] ? stop_cpus+0x29/0x50
 [<c048d2b0>] ? __unlink_module+0x0/0x10
 [<c04a1f30>] ? __stop_machine+0x60/0x70
 [<c048d2b0>] ? __unlink_module+0x0/0x10
 [<c048d2b0>] ? __unlink_module+0x0/0x10
 [<c04a1f64>] ? stop_machine+0x24/0x40
 [<c048d55f>] ? free_module+0x1f/0x110
 [<c048d805>] ? sys_delete_module+0x185/0x200
 [<c0506d92>] ? do_munmap+0x1f2/0x2c0
 [<c04ae62c>] ? audit_syscall_entry+0x21c/0x240
 [<c0828d7a>] ? do_page_fault+0x2a/0x90
 [<c0409b9f>] ? sysenter_do_call+0x12/0x28
Comment 3 Josef Lusticky 2011-07-26 07:00:30 UTC 
*** Removing module xts ***
BUG: unable to handle kernel paging request at virtual address 36383569
 printing eip:
c04f3978
*pde = 03020100
Oops: 0000 [#1]
SMP 
last sysfs file: /class/misc/ecryptfs/dev
Modules linked in: xcbc hmac crypto_hash ccm tgr192 anubis wp512 khazad tea michael_mic cast6 cast5 sha512 seqiv ctr xts gf128mul aes_i586 serpent blowfish sha256 md4 krng ansi_cprng chainiv rng ecb md5 testmgr_cipher testmgr aead crypto_blkcipher cryptomgr crypto_algapi nls_cp932 autofs4 hidp rfcomm l2cap bluetooth sunrpc be2iscsi ib_iser rdma_cm ib_cm iw_cm ib_sa ib_mad ib_core ib_addr iscsi_tcp bnx2i cnic ipv6 xfrm_nalgo crypto_api uio cxgb3i libcxgbi cxgb3 8021q libiscsi_tcp libiscsi2 scsi_transport_iscsi2 scsi_transport_iscsi loop dm_multipath scsi_dh video backlight sbs power_meter i2c_ec dell_wmi wmi button battery asus_acpi ac lp joydev sg ide_cd floppy k8temp e100 mii tg3 cdrom hwmon i2c_amd756 k8_edac i2c_amd8111 edac_mc serio_raw parport_pc amd_rng parport i2c_core pcspkr tpm_tis tpm tpm_bios dm_raid45 dm_message dm_region_hash dm_mem_cache dm_snapshot dm_zero dm_mirror dm_log dm_mod sata_sil libata sd_mod scsi_mod ext3 jbd uhci_hcd ohci_hcd ehci_hcd
CPU:    1
EIP:    0060:[<c04f3978>]    Tainted: G     ---- VLI
EFLAGS: 00010246   (2.6.18-274.el5PAE #1) 
EIP is at list_del+0x4/0x59
eax: f52da6f0   ebx: f52da6f0   ecx: 36383569   edx: 00000000
esi: f8fbfd00   edi: f8fbfd08   ebp: f4cc9000   esp: f4cc9f30
ds: 007b   es: 007b   ss: 0068
Process modprobe (pid: 5987, ti=f4cc9000 task=f4cce000 task.ti=f4cc9000)
Stack: f52da6f0 f8e75226 f52da600 f8fbf00e 00000000 f8e75a53 c5207000 c5207000 
       f8fbfd80 00000000 00000000 c04401eb 00737478 00000002 00000000 c044ac57 
       00000000 0906b390 00000081 40000003 f4cce000 f606d000 4e2e602a 3601720a 
Call Trace:
 [<f8e75226>] crypto_drop_spawn+0x14/0x1f [crypto_algapi]
 [<f8fbf00e>] free+0xe/0x16 [xts]
 [<f8e75a53>] crypto_unregister_template+0x95/0xb8 [crypto_algapi]
 [<c04401eb>] sys_delete_module+0x19c/0x1c9
 [<c044ac57>] audit_syscall_entry+0x193/0x1bd
 [<c0404f4b>] syscall_call+0x7/0xb
 =======================
Code: 39 f8 75 e5 8d 4b 04 8b 51 04 8d 46 04 e8 6e 00 00 00 8d 4b 0c 8b 51 04 8d 46 0c 5b 5e 5f e9 5d 00 00 00 89 c3 eb eb 53 8b 48 04 <8b> 11 39 c2 74 19 52 50 68 7c 18 65 c0 e8 42 2a f3 ff 0f 0b 41 
EIP: [<c04f3978>] list_del+0x4/0x59 SS:ESP 0068:f4cc9f30
 <0>Kernel panic - not syncing: Fatal exception



-------------------------------------------------------------------------------



*** Loading module xen-vnif ***
BUG: unable to handle kernel NULL pointer dereference at virtual address 00000180
 printing eip:
00000180
*pde = 353fa001
Oops: 0010 [#1]
SMP 
last sysfs file: /class/misc/i2octl/dev
Modules linked in: xen_balloon xen_platform_pci i2o_bus i2o_proc i2o_block i2o_config i2o_scsi i2o_core mptctl mptfc scsi_transport_fc mptlan mptspi scsi_transport_spi mptsas mptscsih mptbase scsi_transport_sas sis5595 lm90 dme1737 via686a adm1029 max1619 lm87 ads7828 w83627hf gl518sm fscher atxp1 thmc50 ad7418 f75375s adm1021 w83l786ng lm83 w83793 lm80 gl520sm adm9240 w83l785ts ds1621 lm85 vt8231 lm75 lm77 max6650 lm78 ibmpex ipmi_msghandler adm1031 w83791d asb100 adt7470 fschmd lm93 adm1025 lm92 k10temp fscpos w83781d lm63 w83792d i5k_amb adt7473 smsc47m192 adm1026 hwmon_vid sata_mv pata_sil680 sata_sx4 pdc_adma sata_sis pata_sis sata_nv pata_pdc2027x sata_inic162x sata_sil24 sata_svw sata_qstor sata_via sata_uli pata_marvell ahci sata_promise sata_vsc ata_piix capidrv capi capifs usb_gigaset bas_gigaset gigaset avma1_cs elsa_cs hfc4s8s_l1 sedlbauer_cs hisax_fcpcipnp hisax_isac hisax_st5481 isdnhdlc teles_cs hisax b1pci t1pci c4 b1dma avm_cs b1pcmcia b1 diva_mnt divas diva_idi divacapi divadidd kernelcapi dss1_divert isdn slhc msr microcode mperf cpuid oprofile snd_dummy snd_aloop snd_virmidi snd_opl3_synth snd_korg1212 snd_via82xx_modem snd_es1968 snd_ca0106 snd_azt3328 snd_cs4281 snd_riptide snd_rme9652 snd_hdspm snd_hdsp snd_ali5451 snd_au8820 snd_au8830 snd_au8810 snd_intel8x0 snd_rme32 snd_sonicvibes snd_bt87x snd_emu10k1x snd_emu10k1_synth snd_emu10k1 snd_cmipci snd_es1938 snd_ctxfi snd_atiixp snd_ice1724 snd_ice1712 snd_ice17xx_ak4xxx snd_als4000 snd_nm256 snd_ad1889 snd_als300 snd_vx222 snd_vx_lib snd_atiixp_modem snd_trident_synth snd_trident snd_cs5535audio snd_cs46xx snd_ens1370 snd_maestro3 snd_indigoio snd_echo3g snd_gina20 snd_mona snd_gina24 snd_darla24 snd_indigo snd_layla20 snd_indigodj snd_darla20 snd_mia snd_layla24 snd_pcxhr snd_fm801 snd_intel8x0m snd_ens1371 snd_ymfpci snd_opl3_lib snd_hda_intel snd_mixart snd_ak4531_codec snd_rme96 snd_via82xx gameport snd_ac97_codec snd_mpu401_uart snd_emux_synth snd_util_mem snd_sb_common ac97_bus snd_cs8427 snd_ak4114 snd_ak4xxx_adda snd_tea575x_tuner videodev v4l1_compat v4l2_common snd_pt2258 snd_i2c snd_usb_usx2y snd_usb_audio snd_usb_lib snd_pcm_oss snd_mixer_oss snd_pcm snd_page_alloc snd_rtctimer snd_seq_instr snd_ainstr_simple snd_ainstr_fm snd_seq_dummy snd_seq_oss snd_seq_midi snd_seq_virmidi snd_seq_midi_event snd_seq_midi_emul snd_seq snd_timer snd_rawmidi snd_seq_device snd_hwdep snd soundcore crypto_null authenc xcbc hmac crypto_hash tgr192 anubis wp512 khazad tea arc4 cast6 cast5 deflate seqiv ctr xts aes_generic aes_i586 twofish sha256 md4 chainiv cbc des ecb md5 eseqiv ccm serpent sha512 gf128mul krng testmgr_cipher blowfish testmgr aead crypto_blkcipher cryptomgr ansi_cprng crypto_algapi rng michael_mic ts_bm reed_solomon ts_fsm ts_kmp crc_ccitt crc_itu_t nls_euc_jp nls_iso8859_14 nls_cp863 nls_iso8859_4 nls_cp949 nls_cp852 nls_iso8859_15 nls_cp864 nls_iso8859_5 nls_cp865 nls_iso8859_6 nls_cp1250 nls_cp869 nls_cp860 nls_cp737 nls_iso8859_7 nls_cp936 nls_cp857 nls_cp1255 nls_cp874 nls_iso8859_1 nls_cp775 nls_iso8859_2 nls_cp950 nls_cp866 nls_iso8859_9 nls_koi8_u nls_koi8_ru nls_cp861 nls_cp862 nls_cp850 nls_cp855 nls_iso8859_13 nls_iso8859_3 nls_koi8_r nls_cp1251 nls_cp932 nls_utf8 jffs2 zlib_deflate mtdcore ecryptfs(T) fuse cifs cachefiles ext4 jbd2 crc16 nfsd exportfs auth_rpcgss lock_dlm lock_nolock gfs2 nfs nfs_acl squashfs vfat msdos fat dlm fscache hfs udf freevxfs hfsplus cramfs configfs autofs4 hidp rfcomm l2cap bluetooth lockd sunrpc be2iscsi ib_iser rdma_cm ib_cm iw_cm ib_sa ib_mad ib_core ib_addr iscsi_tcp bnx2i cnic ipv6 xfrm_nalgo crypto_api uio cxgb3i libcxgbi cxgb3 8021q libiscsi_tcp libiscsi2 scsi_transport_iscsi2 scsi_transport_iscsi loop dm_multipath scsi_dh video backlight sbs power_meter i2c_ec dell_wmi wmi button battery asus_acpi ac lp joydev i2c_amd756 sg i2c_amd8111 k8_edac ide_cd k8temp e100 floppy pcspkr edac_mc hwmon tg3 mii parport_pc serio_raw i2c_core amd_rng cdrom tpm_tis parport tpm tpm_bios dm_raid45 dm_message dm_region_hash dm_mem_cache dm_snapshot dm_zero dm_mirror dm_log dm_mod sata_sil libata sd_mod scsi_mod ext3 jbd uhci_hcd ohci_hcd ehci_hcd
CPU:    1
EIP:    0060:[<00000180>]    Tainted: G     ---- VLI
EFLAGS: 00010202   (2.6.18-274.el5PAE #1) 
EIP is at 0x180
eax: 00000180   ebx: 00000001   ecx: f4c05e84   edx: ffff0001
esi: f48f4fc0   edi: f4c05e98   ebp: f48f4ff8   esp: f4c05e7c
ds: 007b   es: 007b   ss: 0068
Process modprobe (pid: 8404, ti=f4c05000 task=f4cbf000 task.ti=f4c05000)
Stack: f88220a0 f9db864a 00000000 00000000 00000000 00000000 00007ff0 f9db9c00 
       f48f4c00 c043fe16 f4c05ed8 f4c05efc f9db9c00 00000000 00000000 00000000 
       00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 
Call Trace:
 [<f88220a0>] balloon_init+0xa0/0xc5 [xen_balloon]
 [<c043fe16>] sys_init_module+0x1af3/0x1cb8
 [<c0472c0d>] __kmalloc+0x0/0x72
 [<c0404f4b>] syscall_call+0x7/0xb
 =======================
Code:  Bad EIP value.
EIP: [<00000180>] 0x180 SS:ESP 0068:f4c05e7c
 <0>Kernel panic - not syncing: Fatal exception
Comment 4 Josef Lusticky 2011-07-26 07:37:53 UTC 
RHEL 6.1 x86_64 system:

*** Loading module vga16fb ***
BUG: unable to handle kernel paging request at ffffffffa26d9c70
IP: [<ffffffff8133bc06>] __device_attach+0x16/0x60
PGD 1a27067 PUD 1a2b063 PMD 7b45f067 PTE 0
Oops: 0000 [#1] SMP 
last sysfs file: /sys/module/macmodes/refcnt
CPU 0 
Modules linked in: vga16fb(+) vgastate xp gru dcdbas hwmon parport_pc ppdev parport input_polldev mce_inject speedstep_lib cryptd aes_x86_64 aes_generic kvm sctp libcrc32c nf_tproxy_core ts_kmp nls_koi8_u deflate zlib_deflate lzo lzo_decompress lzo_compress sunrpc cpufreq_ondemand freq_table ipv6 dm_mirror dm_region_hash dm_log tg3 serio_raw sg iTCO_wdt iTCO_vendor_support snd_hda_codec_realtek snd_hda_intel snd_hda_codec snd_hwdep snd_seq snd_seq_device snd_pcm snd_timer snd soundcore snd_page_alloc shpchp ext4 mbcache jbd2 firewire_ohci firewire_core crc_itu_t sr_mod cdrom sd_mod crc_t10dif ahci nouveau ttm drm_kms_helper drm i2c_algo_bit i2c_core video output dm_mod [last unloaded: macmodes]

Modules linked in: vga16fb(+) vgastate xp gru dcdbas hwmon parport_pc ppdev parport input_polldev mce_inject speedstep_lib cryptd aes_x86_64 aes_generic kvm sctp libcrc32c nf_tproxy_core ts_kmp nls_koi8_u deflate zlib_deflate lzo lzo_decompress lzo_compress sunrpc cpufreq_ondemand freq_table ipv6 dm_mirror dm_region_hash dm_log tg3 serio_raw sg iTCO_wdt iTCO_vendor_support snd_hda_codec_realtek snd_hda_intel snd_hda_codec snd_hwdep snd_seq snd_seq_device snd_pcm snd_timer snd soundcore snd_page_alloc shpchp ext4 mbcache jbd2 firewire_ohci firewire_core crc_itu_t sr_mod cdrom sd_mod crc_t10dif ahci nouveau ttm drm_kms_helper drm i2c_algo_bit i2c_core video output dm_mod [last unloaded: macmodes]
Pid: 8934, comm: modprobe Tainted: G         C ---------------- T 2.6.32-131.0.15.el6.x86_64 #1 HP Z400 Workstation
RIP: 0010:[<ffffffff8133bc06>]  [<ffffffff8133bc06>] __device_attach+0x16/0x60
RSP: 0018:ffff880075545db8  EFLAGS: 00010286
RAX: ffff8800796637a8 RBX: ffff8800794f9010 RCX: ffffffff8133bbf0
RDX: ffff88007c5ebd58 RSI: ffff8800794f9010 RDI: ffffffffa26d9c68
RBP: ffff880075545dc8 R08: 0000000000000000 R09: ffffffff817863ef
R10: 0000000000000001 R11: 0000000000000000 R12: ffff880075545dd8
R13: ffffffff8133bbf0 R14: 0000000000000000 R15: 0000000000000000
FS:  00007f8bc5a62700(0000) GS:ffff880002000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffffffa26d9c70 CR3: 0000000079baa000 CR4: 00000000000006f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Process modprobe (pid: 8934, threadinfo ffff880075544000, task ffff88007980d580)
Stack:
 ffff8800794f9010 ffff880075545dd8 ffff880075545e08 ffffffff8133a824
<0> ffff88007c5ebd58 ffff8800796637a8 ffff8800794f9010 ffff8800794f9070
<0> ffff8800794f9020 0000000000000000 ffff880075545e38 ffffffff8133bd0c
Call Trace:
 [<ffffffff8133a824>] bus_for_each_drv+0x64/0x90
 [<ffffffff8133bd0c>] device_attach+0x8c/0xa0
 [<ffffffff8133a5cd>] bus_probe_device+0x2d/0x50
 [<ffffffff81338a27>] device_add+0x527/0x640
 [<ffffffff81337631>] ? dev_set_name+0x41/0x50
 [<ffffffff8133d815>] platform_device_add+0x125/0x200
 [<ffffffffa02f31d2>] ? vga16fb_init+0x0/0x63 [vga16fb]
 [<ffffffffa02f3211>] vga16fb_init+0x3f/0x63 [vga16fb]
 [<ffffffff8100204c>] do_one_initcall+0x3c/0x1d0
 [<ffffffff810aca5f>] sys_init_module+0xdf/0x250
 [<ffffffff8100b172>] system_call_fastpath+0x16/0x1b
Code: 00 00 00 00 00 48 89 de 4c 89 e7 e8 b5 fc ff ff eb c2 0f 1f 00 55 48 89 e5 48 83 ec 10 48 89 1c 24 4c 89 64 24 08 0f 1f 44 00 00 <48> 8b 47 08 48 89 fb 49 89 f4 48 8b 40 20 48 85 c0 74 1f 48 89 
RIP  [<ffffffff8133bc06>] __device_attach+0x16/0x60
 RSP <ffff880075545db8>
CR2: ffffffffa26d9c70
---[ end trace 6f59b6ba3feb1fb3 ]---
Kernel panic - not syncing: Fatal exception
Pid: 8934, comm: modprobe Tainted: G      D  C ---------------- T 2.6.32-131.0.15.el6.x86_64 #1
Call Trace:
 [<ffffffff814dac28>] ? panic+0x78/0x143
 [<ffffffff814dec74>] ? oops_end+0xe4/0x100
 [<ffffffff81040cdb>] ? no_context+0xfb/0x260
 [<ffffffff81040f65>] ? __bad_area_nosemaphore+0x125/0x1e0
 [<ffffffff81041033>] ? bad_area_nosemaphore+0x13/0x20
 [<ffffffff8104170d>] ? __do_page_fault+0x31d/0x480
 [<ffffffff8126a5fc>] ? put_dec+0x10c/0x110
 [<ffffffff8126cc10>] ? vsnprintf+0x310/0x5f0
 [<ffffffff8126bb50>] ? string+0x40/0x100
 [<ffffffff814e0c3e>] ? do_page_fault+0x3e/0xa0
 [<ffffffff8133bbf0>] ? __device_attach+0x0/0x60
 [<ffffffff814ddfe5>] ? page_fault+0x25/0x30
 [<ffffffff8133bbf0>] ? __device_attach+0x0/0x60
 [<ffffffff8133bbf0>] ? __device_attach+0x0/0x60
 [<ffffffff8133bc06>] ? __device_attach+0x16/0x60
 [<ffffffff8133bbf0>] ? __device_attach+0x0/0x60
 [<ffffffff8133a824>] ? bus_for_each_drv+0x64/0x90
 [<ffffffff8133bd0c>] ? device_attach+0x8c/0xa0
 [<ffffffff8133a5cd>] ? bus_probe_device+0x2d/0x50
 [<ffffffff81338a27>] ? device_add+0x527/0x640
 [<ffffffff81337631>] ? dev_set_name+0x41/0x50
 [<ffffffff8133d815>] ? platform_device_add+0x125/0x200
 [<ffffffffa02f31d2>] ? vga16fb_init+0x0/0x63 [vga16fb]
 [<ffffffffa02f3211>] ? vga16fb_init+0x3f/0x63 [vga16fb]
 [<ffffffff8100204c>] ? do_one_initcall+0x3c/0x1d0
 [<ffffffff810aca5f>] ? sys_init_module+0xdf/0x250
 [<ffffffff8100b172>] ? system_call_fastpath+0x16/0x1b
Comment 5 Andrew Jones 2011-07-29 09:20:34 UTC 
At first glance I thought this bug was an attempt to load/unload all modules that come with RHEL6 to make sure that they all can be loaded/unloaded and at the same time. That sounds like a reasonable robustness test. However, I don't see how the xen related modules are here at all. We don't have a 'xen-vnif' module for rhel6 and the 'xen_balloon' and 'xen_platform_pci' drivers aren't modules for rhel6, but rather built-ins. So I have no clue what code was actually being tested, even though it says the Product is RHEL6 on the bug.

Actually, the whole bug is just wrong. This type of testing makes sense, as long as it's clear what is being tested, but each module's component should get it's own bug for it's own backtrace. We don't create a single bug for all backtraces found while testing! As is clearly the case with this bug as comment 4 is 64-bit and the other comments are 32-bit.

I'm closing this as NOTABUG. It should not be reopened. If these backtraces are valid RHEL6 issues then individual bugs should be opened to each individual component. That said, they're likely not RHEL6 issues considering the xen modules don't exist in RHEL6, so I certainly shouldn't be seeing any bugs opened to xen.