Bug #1615: null pointer dereference in ceph_msg_new - Linux kernel client - Ceph

Actions

Copy link

Bug #1615

closed

null pointer dereference in ceph_msg_new

Added by Josh Durgin over 12 years ago. Updated about 12 years ago.

Status:

Can't reproduce

Priority:

High

Assignee:

Alex Elder

Category:

libceph

Target version:

% Done:

Source:

Tags:

Backport:

Regression:

Severity:

Reviewed:

Affected Versions:

ceph-qa-suite:

Crash signature (v1):

Crash signature (v2):

Description

This happened during a blogbench run:

Oct 12 12:05:14 sepia52 kernel: [ 4375.986954] ceph: mds0 caps renewed
Oct 12 12:05:41 sepia52 kernel: [ 4403.089752] BUG: unable to handle kernel NULL pointer dereference at 0000000000000001
Oct 12 12:05:41 sepia52 kernel: [ 4403.089777] IP: [<ffffffff8114e786>] __kmalloc+0x86/0x160
Oct 12 12:05:41 sepia52 kernel: [ 4403.089795] PGD e92c9067 PUD 376e8067 PMD 0 
Oct 12 12:05:41 sepia52 kernel: [ 4403.089812] Oops: 0000 [#1] SMP 
Oct 12 12:05:41 sepia52 kernel: [ 4403.089826] CPU 0 
Oct 12 12:05:41 sepia52 kernel: [ 4403.089831] Modules linked in: cryptd aes_x86_64 aes_generic ceph libceph crc32c libcrc32c psmouse lp amd64_edac_mod edac_core parport k8temp serio_raw edac_mce_amd shpchp i2c_piix4 floppy tg3 sata_svw pata_serverworks
Oct 12 12:05:41 sepia52 kernel: [ 4403.089927] 
Oct 12 12:05:41 sepia52 kernel: [ 4403.089950] Pid: 4634, comm: kworker/0:0 Not tainted 3.0.0-ceph-00045-gd6ed879 #1 Supermicro H8SSL/H8SSL
Oct 12 12:05:41 sepia52 kernel: [ 4403.090013] RIP: 0010:[<ffffffff8114e786>]  [<ffffffff8114e786>] __kmalloc+0x86/0x160
Oct 12 12:05:41 sepia52 kernel: [ 4403.090068] RSP: 0018:ffff880037315c00  EFLAGS: 00010202
Oct 12 12:05:41 sepia52 kernel: [ 4403.090099] RAX: 0000000000000000 RBX: ffff8800e1b67700 RCX: 00000000000c3593
Oct 12 12:05:41 sepia52 kernel: [ 4403.090133] RDX: 00000000000c3592 RSI: 0000000000015600 RDI: ffffffffa00c878f
Oct 12 12:05:41 sepia52 kernel: [ 4403.090168] RBP: ffff880037315c40 R08: ffff8800fbc15600 R09: 0000000000019cb4
Oct 12 12:05:41 sepia52 kernel: [ 4403.090202] R10: 0000000000000000 R11: 0000000000000035 R12: ffff8800fb802600
Oct 12 12:05:41 sepia52 kernel: [ 4403.090237] R13: 0000000000000001 R14: 0000000000000050 R15: 000000000000001b
Oct 12 12:05:41 sepia52 kernel: [ 4403.090272] FS:  00007f7bd4bf3700(0000) GS:ffff8800fbc00000(0000) knlGS:0000000000000000
Oct 12 12:05:41 sepia52 kernel: [ 4403.090325] CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
Oct 12 12:05:41 sepia52 kernel: [ 4403.090356] CR2: 0000000000000001 CR3: 00000000e30cd000 CR4: 00000000000006f0
Oct 12 12:05:41 sepia52 kernel: [ 4403.090391] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
Oct 12 12:05:41 sepia52 kernel: [ 4403.090425] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Oct 12 12:05:41 sepia52 kernel: [ 4403.090460] Process kworker/0:0 (pid: 4634, threadinfo ffff880037314000, task ffff8800373496d0)
Oct 12 12:05:41 sepia52 kernel: [ 4403.090513] Stack:
Oct 12 12:05:41 sepia52 kernel: [ 4403.090536]  ffffffffa00c878f 00000000000000c8 ffff880037315c30 ffff8800e1b67700
Oct 12 12:05:41 sepia52 kernel: [ 4403.090592]  000000000000001b 0000000000000050 000000000000001a 000000000000001b
Oct 12 12:05:41 sepia52 kernel: [ 4403.090648]  ffff880037315c90 ffffffffa00c878f 00ff8800a18ee83d ffff8800e1b67788
Oct 12 12:05:41 sepia52 kernel: [ 4403.090704] Call Trace:
Oct 12 12:05:41 sepia52 kernel: [ 4403.090743]  [<ffffffffa00c878f>] ? ceph_msg_new+0x19f/0x2c0 [libceph]
Oct 12 12:05:41 sepia52 kernel: [ 4403.090783]  [<ffffffffa00c878f>] ceph_msg_new+0x19f/0x2c0 [libceph]
Oct 12 12:05:41 sepia52 kernel: [ 4403.090822]  [<ffffffffa00cc4c6>] con_work+0x10c6/0x1b40 [libceph]
Oct 12 12:05:41 sepia52 kernel: [ 4403.090857]  [<ffffffff81056d43>] ? perf_event_task_sched_out+0x33/0xa0
Oct 12 12:05:41 sepia52 kernel: [ 4403.090898]  [<ffffffffa00cb400>] ? try_write+0x1040/0x1040 [libceph]
Oct 12 12:05:41 sepia52 kernel: [ 4403.090932]  [<ffffffff810794eb>] process_one_work+0x12b/0x460
Oct 12 12:05:41 sepia52 kernel: [ 4403.090965]  [<ffffffff8107bd11>] worker_thread+0x171/0x410
Oct 12 12:05:41 sepia52 kernel: [ 4403.090997]  [<ffffffff8107bba0>] ? manage_workers+0x220/0x220
Oct 12 12:05:41 sepia52 kernel: [ 4403.091031]  [<ffffffff81080516>] kthread+0x96/0xa0
Oct 12 12:05:41 sepia52 kernel: [ 4403.091063]  [<ffffffff815cbf24>] kernel_thread_helper+0x4/0x10
Oct 12 12:05:41 sepia52 kernel: [ 4403.091097]  [<ffffffff81080480>] ? kthread_worker_fn+0x190/0x190
Oct 12 12:05:41 sepia52 kernel: [ 4403.091130]  [<ffffffff815cbf20>] ? gs_change+0x13/0x13
Oct 12 12:05:41 sepia52 kernel: [ 4403.091160] Code: 00 48 8b 7d c0 4d 8b 04 24 65 4c 03 04 25 50 dc 00 00 49 8b 50 08 4d 8b 28 4d 85 ed 74 6e 49 63 44 24 20 48 8d 4a 01 49 8b 34 24 
Oct 12 12:05:41 sepia52 kernel: [ 4403.091361] RIP  [<ffffffff8114e786>] __kmalloc+0x86/0x160
Oct 12 12:05:41 sepia52 kernel: [ 4403.091394]  RSP <ffff880037315c00>
Oct 12 12:05:41 sepia52 kernel: [ 4403.091420] CR2: 0000000000000001
Oct 12 12:05:41 sepia52 kernel: [ 4403.091852] ---[ end trace 18d93fc1d0306319 ]---
Oct 12 12:05:41 sepia52 kernel: [ 4403.092054] BUG: unable to handle kernel paging request at fffffffffffffff8
Oct 12 12:05:41 sepia52 kernel: [ 4403.092208] IP: [<ffffffff81080070>] kthread_data+0x10/0x20
Oct 12 12:05:41 sepia52 kernel: [ 4403.092342] PGD 1a05067 PUD 1a06067 PMD 0 
Oct 12 12:05:41 sepia52 kernel: [ 4403.092532] Oops: 0000 [#2] SMP 
Oct 12 12:05:41 sepia52 kernel: [ 4403.092678] CPU 0 
Oct 12 12:05:41 sepia52 kernel: [ 4403.092723] Modules linked in: cryptd aes_x86_64 aes_generic ceph libceph crc32c libcrc32c psmouse lp amd64_edac_mod edac_core parport k8temp serio_raw edac_mce_amd shpchp i2c_piix4 floppy tg3 sata_svw pata_serverworks
Oct 12 12:05:41 sepia52 kernel: [ 4403.093869] 
Oct 12 12:05:41 sepia52 kernel: [ 4403.093929] Pid: 4634, comm: kworker/0:0 Tainted: G      D     3.0.0-ceph-00045-gd6ed879 #1 Supermicro H8SSL/H8SSL
Oct 12 12:05:41 sepia52 kernel: [ 4403.094149] RIP: 0010:[<ffffffff81080070>]  [<ffffffff81080070>] kthread_data+0x10/0x20
Oct 12 12:05:41 sepia52 kernel: [ 4403.094285] RSP: 0018:ffff8800373157f8  EFLAGS: 00010092
Oct 12 12:05:41 sepia52 kernel: [ 4403.094355] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
Oct 12 12:05:41 sepia52 kernel: [ 4403.094429] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8800373496d0
Oct 12 12:05:41 sepia52 kernel: [ 4403.094502] RBP: ffff8800373157f8 R08: 0000000000989680 R09: dead000000200200
Oct 12 12:05:41 sepia52 kernel: [ 4403.094576] R10: 0000000000000400 R11: 0000000000000000 R12: ffff880037349a80
Oct 12 12:05:41 sepia52 kernel: [ 4403.094669] R13: 0000000000000000 R14: 0000000000000000 R15: ffff880037315920
Oct 12 12:05:41 sepia52 kernel: [ 4403.094749] FS:  00007f7bd4bf3700(0000) GS:ffff8800fbc00000(0000) knlGS:0000000000000000
Oct 12 12:05:41 sepia52 kernel: [ 4403.094843] CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
Oct 12 12:05:41 sepia52 kernel: [ 4403.094914] CR2: fffffffffffffff8 CR3: 00000000e30cd000 CR4: 00000000000006f0
Oct 12 12:05:41 sepia52 kernel: [ 4403.095005] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
Oct 12 12:05:41 sepia52 kernel: [ 4403.095089] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400