Bug 853589

Summary: BUG: unable to handle kernel NULL pointer dereference at 0000000000000028
Product: [Fedora] Fedora Reporter: John Schmitt <marmalodak>
Component: kernelAssignee: Kernel Maintainer List <kernel-maint>
Status: CLOSED DUPLICATE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: urgent Docs Contact:
Priority: unspecified    
Version: 17CC: gansalmon, itamar, jonathan, kernel-maint, madhu.chinakonda
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2012-09-06 18:04:20 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description John Schmitt 2012-09-01 03:32:57 UTC
Description of problem: rsync generated an oops which locked the machine up shortly after the oops occurred.


Version-Release number of selected component (if applicable):


How reproducible: Only saw it once.


Steps to Reproduce:
1. Rsync a few gigs of files from on directory to another on the same file system.
  
Actual results: kernel oops and then a lock-up.

Aug 31 19:54:59 badboy kernel: [46385.700109] BUG: unable to handle kernel NULL pointer dereference at 0000000000000028
Aug 31 19:54:59 badboy kernel: [46385.700114] IP: [<ffffffff81233194>] ext4_ext_remove_space+0xa34/0xdf0
Aug 31 19:54:59 badboy kernel: [46385.700118] PGD 12b0ca067 PUD 600a5d067 PMD 0 
Aug 31 19:54:59 badboy kernel: [46385.700121] Oops: 0000 [#1] SMP 
Aug 31 19:54:59 badboy kernel: [46385.700123] CPU 3 
Aug 31 19:54:59 badboy kernel: [46385.700124] Modules linked in: w83627ehf hwmon_vid snd_usb_audio snd_usbmidi_lib snd_rawmidi snd_seq_device uvcvideo videobuf2_vmalloc videobuf2_memops videobuf2_core videodev media snd_hda_codec_hdmi nvidia(PO) snd_hda_codec_realtek snd_hda_intel snd_hda_codec snd_hwdep snd_pcm coretemp snd_page_alloc kvm_intel i7core_edac kvm i2c_i801 i2c_core edac_core e1000e snd_timer iTCO_wdt iTCO_vendor_support lpc_ich mfd_core microcode serio_raw snd soundcore vboxnetadp(O) vboxnetflt(O) vboxdrv(O) nfsd nfs_acl auth_rpcgss lockd binfmt_misc sunrpc usb_storage ata_generic pata_acpi crc32c_intel pata_jmicron firewire_ohci firewire_core crc_itu_t [last unloaded: scsi_wait_scan]
Aug 31 19:54:59 badboy kernel: [46385.700152] 
Aug 31 19:54:59 badboy kernel: [46385.700153] Pid: 22740, comm: rsync Tainted: P         C O 3.5.2-3.fc17.x86_64 #1 System manufacturer System Product Name/Rampage III Formula
Aug 31 19:54:59 badboy kernel: [46385.700156] RIP: 0010:[<ffffffff81233194>]  [<ffffffff81233194>] ext4_ext_remove_space+0xa34/0xdf0
Aug 31 19:54:59 badboy kernel: [46385.700158] RSP: 0018:ffff880600bf3b78  EFLAGS: 00010246
Aug 31 19:54:59 badboy kernel: [46385.700160] RAX: 0000000000000000 RBX: ffff880127629c70 RCX: 00000000394ea000
Aug 31 19:54:59 badboy kernel: [46385.700161] RDX: 0000000000000001 RSI: 0000000000000002 RDI: ffff880605de3400
Aug 31 19:54:59 badboy kernel: [46385.700162] RBP: ffff880600bf3c68 R08: 00000000394ea000 R09: ffff8805fbde0900
Aug 31 19:54:59 badboy kernel: [46385.700163] R10: 00000000f9070401 R11: 0000000000000000 R12: 0000000000000001
Aug 31 19:54:59 badboy kernel: [46385.700164] R13: ffff8805fbde0930 R14: 0000000000000000 R15: ffff880127629c70
Aug 31 19:54:59 badboy kernel: [46385.700166] FS:  00007f80eb840740(0000) GS:ffff88063fd80000(0000) knlGS:0000000000000000
Aug 31 19:54:59 badboy kernel: [46385.700167] CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
Aug 31 19:54:59 badboy kernel: [46385.700168] CR2: 0000000000000028 CR3: 000000061a074000 CR4: 00000000000007e0
Aug 31 19:54:59 badboy kernel: [46385.700170] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
Aug 31 19:54:59 badboy kernel: [46385.700171] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Aug 31 19:54:59 badboy kernel: [46385.700172] Process rsync (pid: 22740, threadinfo ffff880600bf2000, task ffff8801ff7c8000)
Aug 31 19:54:59 badboy kernel: [46385.700173] Stack:
Aug 31 19:54:59 badboy kernel: [46385.700174]  ffff880600bf3bb8 ffffffff812364b3 ffff880600bf3bc8 ffff880127629c70
Aug 31 19:54:59 badboy kernel: [46385.700177]  ffff88055b786500 ffff880600000002 ffff8801e878d138 ffff880127629bc0
Aug 31 19:54:59 badboy kernel: [46385.700179]  ffff88061a0ed400 ffff8805fbde0960 00000000ffffffff ffff8805f90705c8
Aug 31 19:54:59 badboy kernel: [46385.700182] Call Trace:
Aug 31 19:54:59 badboy kernel: [46385.700185]  [<ffffffff812364b3>] ? __ext4_handle_dirty_metadata+0x83/0x110
Aug 31 19:54:59 badboy kernel: [46385.700188]  [<ffffffff81235403>] ext4_ext_truncate+0x193/0x1d0
Aug 31 19:54:59 badboy kernel: [46385.700191]  [<ffffffff8120a8ff>] ? ext4_mark_inode_dirty+0x7f/0x1f0
Aug 31 19:54:59 badboy kernel: [46385.700193]  [<ffffffff81207e35>] ext4_truncate+0xf5/0x100
Aug 31 19:54:59 badboy kernel: [46385.700195]  [<ffffffff8120cd81>] ext4_evict_inode+0x461/0x490
Aug 31 19:54:59 badboy kernel: [46385.700199]  [<ffffffff811a1342>] evict+0xa2/0x1a0
Aug 31 19:54:59 badboy kernel: [46385.700201]  [<ffffffff811a1543>] iput+0x103/0x1f0
Aug 31 19:54:59 badboy kernel: [46385.700203]  [<ffffffff8119d720>] d_kill+0xf0/0x100
Aug 31 19:54:59 badboy kernel: [46385.700205]  [<ffffffff8119dd72>] dput+0xe2/0x1b0
Aug 31 19:54:59 badboy kernel: [46385.700207]  [<ffffffff81197fde>] sys_renameat+0x1ce/0x230
Aug 31 19:54:59 badboy kernel: [46385.700210]  [<ffffffff81192572>] ? path_put+0x22/0x30
Aug 31 19:54:59 badboy kernel: [46385.700212]  [<ffffffff811a4e96>] ? mntput+0x26/0x40
Aug 31 19:54:59 badboy kernel: [46385.700214]  [<ffffffff81192572>] ? path_put+0x22/0x30
Aug 31 19:54:59 badboy kernel: [46385.700217]  [<ffffffff8118706a>] ? sys_fchmodat+0x3a/0x50
Aug 31 19:54:59 badboy kernel: [46385.700219]  [<ffffffff8119805b>] sys_rename+0x1b/0x20
Aug 31 19:54:59 badboy kernel: [46385.700223]  [<ffffffff81614969>] system_call_fastpath+0x16/0x1b
Aug 31 19:54:59 badboy kernel: [46385.700223] Code: 8b 4d 20 0f b7 41 02 48 8d 04 40 48 8d 04 81 49 89 45 18 0f b7 49 02 48 83 c1 01 49 89 4d 00 e9 ae f8 ff ff 0f 1f 00 49 8b 45 28 <48> 8b 40 28 49 89 45 20 e9 85 f8 ff ff 0f 1f 80 00 00 00 00 0f 
Aug 31 19:54:59 badboy kernel: [46385.700247] RIP  [<ffffffff81233194>] ext4_ext_remove_space+0xa34/0xdf0
Aug 31 19:54:59 badboy kernel: [46385.700249]  RSP <ffff880600bf3b78>
Aug 31 19:54:59 badboy kernel: [46385.700250] CR2: 0000000000000028
Aug 31 19:54:59 badboy kernel: [46385.700252] ---[ end trace 7802a031757b0ef0 ]---
Aug 31 19:54:59 badboy kernel: [46385.983168] audit_printk_skb: 66 callbacks suppressed
Aug 31 19:54:59 badboy kernel: [46385.983171] type=1400 audit(1346468099.985:138): avc:  denied  { mmap_zero } for  pid=22821 comm="wine-preloader" scontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tclass=memprotect

Comment 1 Dave Jones 2012-09-06 18:04:20 UTC

*** This bug has been marked as a duplicate of bug 853875 ***