Bug 982437 - [abrt] BUG: unable to handle kernel NULL pointer dereference at 000000000000001c
[abrt] BUG: unable to handle kernel NULL pointer dereference at 000000000000001c
Status: CLOSED DUPLICATE of bug 975065
Product: Fedora
Classification: Fedora
Component: kernel (Show other bugs)
19
x86_64 Unspecified
unspecified Severity unspecified
: ---
: ---
Assigned To: Kernel Maintainer List
Fedora Extras Quality Assurance
abrt_hash:9269370b1a3aa7fa00ac3684db1...
:
Depends On:
Blocks:
  Show dependency treegraph
 
Reported: 2013-07-08 23:45 EDT by Ian Pilcher
Modified: 2013-07-08 23:47 EDT (History)
5 users (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed: 2013-07-08 23:47:23 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---


Attachments (Terms of Use)
File: dmesg (71.73 KB, text/plain)
2013-07-08 23:45 EDT, Ian Pilcher
no flags Details

  None (edit)
Description Ian Pilcher 2013-07-08 23:45:15 EDT
Description of problem:
NFSv4 traffic across openvswitch bridge (MTU = 9000) between Fedora 19 host and RHEL 6.4 guest.

Additional info:
reporter:       libreport-2.1.5
BUG: unable to handle kernel NULL pointer dereference at 000000000000001c
IP: [<ffffffff8113cada>] put_compound_page+0xaa/0x270
PGD 0 
Oops: 0000 [#1] SMP 
Modules linked in: vhost_net macvtap macvlan tun bnep bluetooth rfkill ip6table_filter ip6_tables ebtable_nat ebtables openvswitch xt_conntrack iptable_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_nat_ipv4 nf_nat nf_conntrack w83627ehf hwmon_vid iTCO_wdt iTCO_vendor_support btrfs zlib_deflate raid6_pq libcrc32c xor mperf coretemp kvm_intel kvm crc32_pclmul crc32c_intel ghash_clmulni_intel nfsd e1000e auth_rpcgss ptp snd_hda_codec_hdmi mei snd_hda_codec_realtek snd_hda_intel snd_hda_codec snd_hwdep snd_seq snd_seq_device snd_pcm nfs_acl pps_core lpc_ich i2c_i801 snd_page_alloc snd_timer lockd snd microcode mfd_core soundcore sunrpc serio_raw uinput raid1 i915 video i2c_algo_bit drm_kms_helper drm firewire_ohci firewire_core crc_itu_t i2c_core
CPU 4 
Pid: 7497, comm: vhost-7495 Not tainted 3.9.9-301.fc19.x86_64 #1                  /DQ67SW
RIP: 0010:[<ffffffff8113cada>]  [<ffffffff8113cada>] put_compound_page+0xaa/0x270
RSP: 0018:ffff8807acab1c50  EFLAGS: 00010286
RAX: ffff8807acabf800 RBX: ffff8807acabf000 RCX: 0000000000000003
RDX: 0000000000000140 RSI: 0000000000000246 RDI: ffff8807acabf000
RBP: ffff8807acab1c68 R08: 0000000000000001 R09: 0000000000000010
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: ffffffffa0593fd4 R14: 000000000000000c R15: ffff88077fb68100
FS:  0000000000000000(0000) GS:ffff88083e300000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000000000001c CR3: 00000007e8a4a000 CR4: 00000000000427e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Process vhost-7495 (pid: 7497, threadinfo ffff8807acab0000, task ffff8808124d4650)
Stack:
 ffff8807acabf000 ffff88077fb68100 ffffffffa0593fd4 ffff8807acab1c80
 ffffffff8113cceb 0000000000000012 ffff8807acab1ca0 ffffffff8152d0a7
 ffff88077fb68100 ffff88077fb68100 ffff8807acab1cb8 ffffffff8152d13a
Call Trace:
 [<ffffffffa0593fd4>] ? tun_get_user+0x724/0x810 [tun]
 [<ffffffff8113cceb>] put_page+0x4b/0x60
 [<ffffffff8152d0a7>] skb_release_data+0x87/0x100
 [<ffffffff8152d13a>] __kfree_skb+0x1a/0xb0
 [<ffffffff8152d202>] kfree_skb+0x32/0x90
 [<ffffffffa0593fd4>] tun_get_user+0x724/0x810 [tun]
 [<ffffffffa0594117>] tun_sendmsg+0x57/0x80 [tun]
 [<ffffffffa05b2a58>] handle_tx+0x1c8/0x640 [vhost_net]
 [<ffffffffa05b2f05>] handle_tx_kick+0x15/0x20 [vhost_net]
 [<ffffffffa05af81d>] vhost_worker+0xed/0x190 [vhost_net]
 [<ffffffffa05af730>] ? __vhost_add_used_n+0x100/0x100 [vhost_net]
 [<ffffffff810802a0>] kthread+0xc0/0xd0
 [<ffffffff810801e0>] ? insert_kthread_work+0x40/0x40
 [<ffffffff8164f26c>] ret_from_fork+0x7c/0xb0
 [<ffffffff810801e0>] ? insert_kthread_work+0x40/0x40
Code: 48 c7 c7 a7 07 9f 81 e8 55 02 f2 ff 48 89 df e8 1d f7 ff ff 85 c0 74 a4 eb 9a 4c 8b 67 30 48 8b 07 f6 c4 80 74 cd 4c 39 e7 74 c8 <41> 8b 54 24 1c 85 d2 74 bf 8d 4a 01 89 d0 f0 41 0f b1 4c 24 1c 
RIP  [<ffffffff8113cada>] put_compound_page+0xaa/0x270
 RSP <ffff8807acab1c50>
CR2: 000000000000001c

Potential duplicate: bug 975187
Comment 1 Ian Pilcher 2013-07-08 23:45:21 EDT
Created attachment 770748 [details]
File: dmesg
Comment 2 Ian Pilcher 2013-07-08 23:47:23 EDT

*** This bug has been marked as a duplicate of bug 975065 ***

Note You need to log in before you can comment on or make changes to this bug.