* Null pointer in autofs4 (_spin_lock) in 2.6.21-rc2
@ 2007-03-08 8:57 Thomas Renninger
2007-03-08 9:28 ` Andrew Morton
0 siblings, 1 reply; 6+ messages in thread
From: Thomas Renninger @ 2007-03-08 8:57 UTC (permalink / raw)
To: linux-kernel
I saw this happening several times on 2.6.21-rc2.
Tell me how I can help...
Some nfs partitions are mounted via nfs using autofs.
It takes some hours to run into this:
Unable to handle kernel NULL pointer dereference at 0000000000000008
RIP:
[<ffffffff8025bada>] _spin_lock+0x0/0xf
PGD 1dde23067 PUD 1d3060067 PMD 0
Oops: 0002 [1] SMP
CPU 3
Modules linked in: autofs4 nfs lockd nfs_acl sunrpc asus_acpi af_packet
tg3 ipv6 button battery ac ext2 mbcache loop dm_mod floppy parport_pc lp
parport reiserfs pata_amd edd fan thermal sg processor sata_sil libata
amd74xx sd_mod scsi_mod ide_disk ide_core
Pid: 11373, comm: touch Not tainted 2.6.21-rc2-default #6
RIP: 0010:[<ffffffff8025bada>] [<ffffffff8025bada>] _spin_lock+0x0/0xf
RSP: 0018:ffff8101c50a5a50 EFLAGS: 00010202
RAX: ffff8100eb8916f8 RBX: ffff81010007dcd8 RCX: ffff8100ea45b280
RDX: 0000000010e58c2e RSI: ffff810163bf9e50 RDI: 0000000000000008
RBP: ffff810163bf9e50 R08: ffff8101c50a4000 R09: ffff8101c50a5ea8
R10: ffff81010003fca8 R11: ffffffff802299ad R12: 0000000000000000
R13: ffff8100eb891680 R14: 0000000000000005 R15: ffff8101c50a5b48
FS: 00002b8ae744bf20(0000) GS:ffff81010016a7c0(0000)
knlGS:00000000b7bd88d0
CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b
CR2: 0000000000000008 CR3: 00000001b925f000 CR4: 00000000000006e0
Process touch (pid: 11373, threadinfo ffff8101c50a4000, task
ffff8101b78bd100)
Stack: ffffffff882d5f38 ffff8101c50a5ea8 ffff8100ec8df4b0
00000000000000d0
ffff8100eb8916f8 ffff810163bf9efc 10e58c2eea45b220 ffff8100ea45b220
ffff810163bf9e50 ffff8100ea45b220 ffff8100ec8df4b0 ffff8100ec8df568
Call Trace:
[<ffffffff882d5f38>] :autofs4:autofs4_lookup+0xcb/0x311
[<ffffffff8020c0d8>] do_lookup+0xc4/0x1ae
[<ffffffff802097be>] __link_path_walk+0x8ec/0xd9d
[<ffffffff8824ca24>] :sunrpc:rpcauth_lookup_credcache+0x12e/0x24a
[<ffffffff8020da3e>] link_path_walk+0x58/0xe0
[<ffffffff80232d3f>] __strncpy_from_user+0x17/0x41
[<ffffffff8020949b>] __link_path_walk+0x5c9/0xd9d
[<ffffffff8020da3e>] link_path_walk+0x58/0xe0
[<ffffffff80232d3f>] __strncpy_from_user+0x17/0x41
[<ffffffff8020bea7>] do_path_lookup+0x1b6/0x217
[<ffffffff80221512>] __path_lookup_intent_open+0x56/0x97
[<ffffffff80218912>] open_namei+0xa9/0x64c
[<ffffffff8025dc33>] do_page_fault+0x45e/0x7ad
[<ffffffff802250eb>] do_filp_open+0x1c/0x38
[<ffffffff80232d3f>] __strncpy_from_user+0x17/0x41
[<ffffffff80217698>] do_sys_open+0x44/0xc1
[<ffffffff8025511e>] system_call+0x7e/0x83
Code: f0 ff 0f 79 09 f3 90 83 3f 00 7e f9 eb f2 c3 f0 81 2f 00 00
RIP [<ffffffff8025bada>] _spin_lock+0x0/0xf
RSP <ffff8101c50a5a50>
CR2: 0000000000000008
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: Null pointer in autofs4 (_spin_lock) in 2.6.21-rc2
2007-03-08 8:57 Null pointer in autofs4 (_spin_lock) in 2.6.21-rc2 Thomas Renninger
@ 2007-03-08 9:28 ` Andrew Morton
2007-03-08 10:12 ` Thomas Renninger
0 siblings, 1 reply; 6+ messages in thread
From: Andrew Morton @ 2007-03-08 9:28 UTC (permalink / raw)
To: trenn; +Cc: linux-kernel, Ian Kent
> On Thu, 08 Mar 2007 09:57:56 +0100 Thomas Renninger <trenn@suse.de> wrote:
> I saw this happening several times on 2.6.21-rc2.
> Tell me how I can help...
> Some nfs partitions are mounted via nfs using autofs.
> It takes some hours to run into this:
>
> Unable to handle kernel NULL pointer dereference at 0000000000000008
> RIP:
> [<ffffffff8025bada>] _spin_lock+0x0/0xf
> PGD 1dde23067 PUD 1d3060067 PMD 0
> Oops: 0002 [1] SMP
> CPU 3
> Modules linked in: autofs4 nfs lockd nfs_acl sunrpc asus_acpi af_packet
> tg3 ipv6 button battery ac ext2 mbcache loop dm_mod floppy parport_pc lp
> parport reiserfs pata_amd edd fan thermal sg processor sata_sil libata
> amd74xx sd_mod scsi_mod ide_disk ide_core
> Pid: 11373, comm: touch Not tainted 2.6.21-rc2-default #6
> RIP: 0010:[<ffffffff8025bada>] [<ffffffff8025bada>] _spin_lock+0x0/0xf
> RSP: 0018:ffff8101c50a5a50 EFLAGS: 00010202
> RAX: ffff8100eb8916f8 RBX: ffff81010007dcd8 RCX: ffff8100ea45b280
> RDX: 0000000010e58c2e RSI: ffff810163bf9e50 RDI: 0000000000000008
> RBP: ffff810163bf9e50 R08: ffff8101c50a4000 R09: ffff8101c50a5ea8
> R10: ffff81010003fca8 R11: ffffffff802299ad R12: 0000000000000000
> R13: ffff8100eb891680 R14: 0000000000000005 R15: ffff8101c50a5b48
> FS: 00002b8ae744bf20(0000) GS:ffff81010016a7c0(0000)
> knlGS:00000000b7bd88d0
> CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b
> CR2: 0000000000000008 CR3: 00000001b925f000 CR4: 00000000000006e0
> Process touch (pid: 11373, threadinfo ffff8101c50a4000, task
> ffff8101b78bd100)
> Stack: ffffffff882d5f38 ffff8101c50a5ea8 ffff8100ec8df4b0
> 00000000000000d0
> ffff8100eb8916f8 ffff810163bf9efc 10e58c2eea45b220 ffff8100ea45b220
> ffff810163bf9e50 ffff8100ea45b220 ffff8100ec8df4b0 ffff8100ec8df568
> Call Trace:
> [<ffffffff882d5f38>] :autofs4:autofs4_lookup+0xcb/0x311
> [<ffffffff8020c0d8>] do_lookup+0xc4/0x1ae
> [<ffffffff802097be>] __link_path_walk+0x8ec/0xd9d
> [<ffffffff8824ca24>] :sunrpc:rpcauth_lookup_credcache+0x12e/0x24a
> [<ffffffff8020da3e>] link_path_walk+0x58/0xe0
> [<ffffffff80232d3f>] __strncpy_from_user+0x17/0x41
> [<ffffffff8020949b>] __link_path_walk+0x5c9/0xd9d
> [<ffffffff8020da3e>] link_path_walk+0x58/0xe0
> [<ffffffff80232d3f>] __strncpy_from_user+0x17/0x41
> [<ffffffff8020bea7>] do_path_lookup+0x1b6/0x217
> [<ffffffff80221512>] __path_lookup_intent_open+0x56/0x97
> [<ffffffff80218912>] open_namei+0xa9/0x64c
> [<ffffffff8025dc33>] do_page_fault+0x45e/0x7ad
> [<ffffffff802250eb>] do_filp_open+0x1c/0x38
> [<ffffffff80232d3f>] __strncpy_from_user+0x17/0x41
> [<ffffffff80217698>] do_sys_open+0x44/0xc1
> [<ffffffff8025511e>] system_call+0x7e/0x83
>
>
> Code: f0 ff 0f 79 09 f3 90 83 3f 00 7e f9 eb f2 c3 f0 81 2f 00 00
> RIP [<ffffffff8025bada>] _spin_lock+0x0/0xf
> RSP <ffff8101c50a5a50>
> CR2: 0000000000000008
I assume 2.6.20 is OK?
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: Null pointer in autofs4 (_spin_lock) in 2.6.21-rc2
2007-03-08 9:28 ` Andrew Morton
@ 2007-03-08 10:12 ` Thomas Renninger
2007-03-08 10:39 ` Ian Kent
0 siblings, 1 reply; 6+ messages in thread
From: Thomas Renninger @ 2007-03-08 10:12 UTC (permalink / raw)
To: Andrew Morton; +Cc: linux-kernel, Ian Kent
On Thu, 2007-03-08 at 01:28 -0800, Andrew Morton wrote:
> > On Thu, 08 Mar 2007 09:57:56 +0100 Thomas Renninger <trenn@suse.de> wrote:
> > I saw this happening several times on 2.6.21-rc2.
> > Tell me how I can help...
> > Some nfs partitions are mounted via nfs using autofs.
> > It takes some hours to run into this:
> >
> > Unable to handle kernel NULL pointer dereference at 0000000000000008
> > RIP:
> > [<ffffffff8025bada>] _spin_lock+0x0/0xf
> > PGD 1dde23067 PUD 1d3060067 PMD 0
> > Oops: 0002 [1] SMP
> > CPU 3
> > Modules linked in: autofs4 nfs lockd nfs_acl sunrpc asus_acpi af_packet
> > tg3 ipv6 button battery ac ext2 mbcache loop dm_mod floppy parport_pc lp
> > parport reiserfs pata_amd edd fan thermal sg processor sata_sil libata
> > amd74xx sd_mod scsi_mod ide_disk ide_core
> > Pid: 11373, comm: touch Not tainted 2.6.21-rc2-default #6
> > RIP: 0010:[<ffffffff8025bada>] [<ffffffff8025bada>] _spin_lock+0x0/0xf
> > RSP: 0018:ffff8101c50a5a50 EFLAGS: 00010202
> > RAX: ffff8100eb8916f8 RBX: ffff81010007dcd8 RCX: ffff8100ea45b280
> > RDX: 0000000010e58c2e RSI: ffff810163bf9e50 RDI: 0000000000000008
> > RBP: ffff810163bf9e50 R08: ffff8101c50a4000 R09: ffff8101c50a5ea8
> > R10: ffff81010003fca8 R11: ffffffff802299ad R12: 0000000000000000
> > R13: ffff8100eb891680 R14: 0000000000000005 R15: ffff8101c50a5b48
> > FS: 00002b8ae744bf20(0000) GS:ffff81010016a7c0(0000)
> > knlGS:00000000b7bd88d0
> > CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b
> > CR2: 0000000000000008 CR3: 00000001b925f000 CR4: 00000000000006e0
> > Process touch (pid: 11373, threadinfo ffff8101c50a4000, task
> > ffff8101b78bd100)
> > Stack: ffffffff882d5f38 ffff8101c50a5ea8 ffff8100ec8df4b0
> > 00000000000000d0
> > ffff8100eb8916f8 ffff810163bf9efc 10e58c2eea45b220 ffff8100ea45b220
> > ffff810163bf9e50 ffff8100ea45b220 ffff8100ec8df4b0 ffff8100ec8df568
> > Call Trace:
> > [<ffffffff882d5f38>] :autofs4:autofs4_lookup+0xcb/0x311
> > [<ffffffff8020c0d8>] do_lookup+0xc4/0x1ae
> > [<ffffffff802097be>] __link_path_walk+0x8ec/0xd9d
> > [<ffffffff8824ca24>] :sunrpc:rpcauth_lookup_credcache+0x12e/0x24a
> > [<ffffffff8020da3e>] link_path_walk+0x58/0xe0
> > [<ffffffff80232d3f>] __strncpy_from_user+0x17/0x41
> > [<ffffffff8020949b>] __link_path_walk+0x5c9/0xd9d
> > [<ffffffff8020da3e>] link_path_walk+0x58/0xe0
> > [<ffffffff80232d3f>] __strncpy_from_user+0x17/0x41
> > [<ffffffff8020bea7>] do_path_lookup+0x1b6/0x217
> > [<ffffffff80221512>] __path_lookup_intent_open+0x56/0x97
> > [<ffffffff80218912>] open_namei+0xa9/0x64c
> > [<ffffffff8025dc33>] do_page_fault+0x45e/0x7ad
> > [<ffffffff802250eb>] do_filp_open+0x1c/0x38
> > [<ffffffff80232d3f>] __strncpy_from_user+0x17/0x41
> > [<ffffffff80217698>] do_sys_open+0x44/0xc1
> > [<ffffffff8025511e>] system_call+0x7e/0x83
> >
> >
> > Code: f0 ff 0f 79 09 f3 90 83 3f 00 7e f9 eb f2 c3 f0 81 2f 00 00
> > RIP [<ffffffff8025bada>] _spin_lock+0x0/0xf
> > RSP <ffff8101c50a5a50>
> > CR2: 0000000000000008
>
> I assume 2.6.20 is OK?
Can't say for sure, I expect yes.
Set up with 2.6.20 now and let it run for a day or two.
Maybe someone has worked in that area and has an idea meanwhile...
Thomas
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: Null pointer in autofs4 (_spin_lock) in 2.6.21-rc2
2007-03-08 10:12 ` Thomas Renninger
@ 2007-03-08 10:39 ` Ian Kent
2007-03-11 21:29 ` Thomas Renninger
0 siblings, 1 reply; 6+ messages in thread
From: Ian Kent @ 2007-03-08 10:39 UTC (permalink / raw)
To: trenn; +Cc: Andrew Morton, linux-kernel
On Thu, 2007-03-08 at 11:12 +0100, Thomas Renninger wrote:
> On Thu, 2007-03-08 at 01:28 -0800, Andrew Morton wrote:
> > > On Thu, 08 Mar 2007 09:57:56 +0100 Thomas Renninger <trenn@suse.de> wrote:
> > > I saw this happening several times on 2.6.21-rc2.
> > > Tell me how I can help...
> > > Some nfs partitions are mounted via nfs using autofs.
> > > It takes some hours to run into this:
> > >
> > > Unable to handle kernel NULL pointer dereference at 0000000000000008
> > > RIP:
> > > [<ffffffff8025bada>] _spin_lock+0x0/0xf
> > > PGD 1dde23067 PUD 1d3060067 PMD 0
> > > Oops: 0002 [1] SMP
> > > CPU 3
> > > Modules linked in: autofs4 nfs lockd nfs_acl sunrpc asus_acpi af_packet
> > > tg3 ipv6 button battery ac ext2 mbcache loop dm_mod floppy parport_pc lp
> > > parport reiserfs pata_amd edd fan thermal sg processor sata_sil libata
> > > amd74xx sd_mod scsi_mod ide_disk ide_core
> > > Pid: 11373, comm: touch Not tainted 2.6.21-rc2-default #6
> > > RIP: 0010:[<ffffffff8025bada>] [<ffffffff8025bada>] _spin_lock+0x0/0xf
> > > RSP: 0018:ffff8101c50a5a50 EFLAGS: 00010202
> > > RAX: ffff8100eb8916f8 RBX: ffff81010007dcd8 RCX: ffff8100ea45b280
> > > RDX: 0000000010e58c2e RSI: ffff810163bf9e50 RDI: 0000000000000008
> > > RBP: ffff810163bf9e50 R08: ffff8101c50a4000 R09: ffff8101c50a5ea8
> > > R10: ffff81010003fca8 R11: ffffffff802299ad R12: 0000000000000000
> > > R13: ffff8100eb891680 R14: 0000000000000005 R15: ffff8101c50a5b48
> > > FS: 00002b8ae744bf20(0000) GS:ffff81010016a7c0(0000)
> > > knlGS:00000000b7bd88d0
> > > CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b
> > > CR2: 0000000000000008 CR3: 00000001b925f000 CR4: 00000000000006e0
> > > Process touch (pid: 11373, threadinfo ffff8101c50a4000, task
> > > ffff8101b78bd100)
> > > Stack: ffffffff882d5f38 ffff8101c50a5ea8 ffff8100ec8df4b0
> > > 00000000000000d0
> > > ffff8100eb8916f8 ffff810163bf9efc 10e58c2eea45b220 ffff8100ea45b220
> > > ffff810163bf9e50 ffff8100ea45b220 ffff8100ec8df4b0 ffff8100ec8df568
> > > Call Trace:
> > > [<ffffffff882d5f38>] :autofs4:autofs4_lookup+0xcb/0x311
> > > [<ffffffff8020c0d8>] do_lookup+0xc4/0x1ae
> > > [<ffffffff802097be>] __link_path_walk+0x8ec/0xd9d
> > > [<ffffffff8824ca24>] :sunrpc:rpcauth_lookup_credcache+0x12e/0x24a
> > > [<ffffffff8020da3e>] link_path_walk+0x58/0xe0
> > > [<ffffffff80232d3f>] __strncpy_from_user+0x17/0x41
> > > [<ffffffff8020949b>] __link_path_walk+0x5c9/0xd9d
> > > [<ffffffff8020da3e>] link_path_walk+0x58/0xe0
> > > [<ffffffff80232d3f>] __strncpy_from_user+0x17/0x41
> > > [<ffffffff8020bea7>] do_path_lookup+0x1b6/0x217
> > > [<ffffffff80221512>] __path_lookup_intent_open+0x56/0x97
> > > [<ffffffff80218912>] open_namei+0xa9/0x64c
> > > [<ffffffff8025dc33>] do_page_fault+0x45e/0x7ad
> > > [<ffffffff802250eb>] do_filp_open+0x1c/0x38
> > > [<ffffffff80232d3f>] __strncpy_from_user+0x17/0x41
> > > [<ffffffff80217698>] do_sys_open+0x44/0xc1
> > > [<ffffffff8025511e>] system_call+0x7e/0x83
> > >
> > >
> > > Code: f0 ff 0f 79 09 f3 90 83 3f 00 7e f9 eb f2 c3 f0 81 2f 00 00
> > > RIP [<ffffffff8025bada>] _spin_lock+0x0/0xf
> > > RSP <ffff8101c50a5a50>
> > > CR2: 0000000000000008
> >
> > I assume 2.6.20 is OK?
> Can't say for sure, I expect yes.
> Set up with 2.6.20 now and let it run for a day or two.
> Maybe someone has worked in that area and has an idea meanwhile...
Do we have any idea on what was being opened here?
Might be useful to see the autofs maps if possible.
Ian
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: Null pointer in autofs4 (_spin_lock) in 2.6.21-rc2
2007-03-08 10:39 ` Ian Kent
@ 2007-03-11 21:29 ` Thomas Renninger
2007-03-12 4:43 ` Ian Kent
0 siblings, 1 reply; 6+ messages in thread
From: Thomas Renninger @ 2007-03-11 21:29 UTC (permalink / raw)
To: Ian Kent; +Cc: linux-kernel
On Thu, 2007-03-08 at 19:39 +0900, Ian Kent wrote:
> On Thu, 2007-03-08 at 11:12 +0100, Thomas Renninger wrote:
> > On Thu, 2007-03-08 at 01:28 -0800, Andrew Morton wrote:
> > > > On Thu, 08 Mar 2007 09:57:56 +0100 Thomas Renninger <trenn@suse.de> wrote:
> > > > I saw this happening several times on 2.6.21-rc2.
> > > > Tell me how I can help...
> > > > Some nfs partitions are mounted via nfs using autofs.
> > > > It takes some hours to run into this:
> > > >
> > > > Unable to handle kernel NULL pointer dereference at 0000000000000008
> > > > RIP:
> > > > [<ffffffff8025bada>] _spin_lock+0x0/0xf
> > > > PGD 1dde23067 PUD 1d3060067 PMD 0
> > > > Oops: 0002 [1] SMP
> > > > CPU 3
> > > > Modules linked in: autofs4 nfs lockd nfs_acl sunrpc asus_acpi af_packet
> > > > tg3 ipv6 button battery ac ext2 mbcache loop dm_mod floppy parport_pc lp
> > > > parport reiserfs pata_amd edd fan thermal sg processor sata_sil libata
> > > > amd74xx sd_mod scsi_mod ide_disk ide_core
> > > > Pid: 11373, comm: touch Not tainted 2.6.21-rc2-default #6
> > > > RIP: 0010:[<ffffffff8025bada>] [<ffffffff8025bada>] _spin_lock+0x0/0xf
> > > > RSP: 0018:ffff8101c50a5a50 EFLAGS: 00010202
> > > > RAX: ffff8100eb8916f8 RBX: ffff81010007dcd8 RCX: ffff8100ea45b280
> > > > RDX: 0000000010e58c2e RSI: ffff810163bf9e50 RDI: 0000000000000008
> > > > RBP: ffff810163bf9e50 R08: ffff8101c50a4000 R09: ffff8101c50a5ea8
> > > > R10: ffff81010003fca8 R11: ffffffff802299ad R12: 0000000000000000
> > > > R13: ffff8100eb891680 R14: 0000000000000005 R15: ffff8101c50a5b48
> > > > FS: 00002b8ae744bf20(0000) GS:ffff81010016a7c0(0000)
> > > > knlGS:00000000b7bd88d0
> > > > CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b
> > > > CR2: 0000000000000008 CR3: 00000001b925f000 CR4: 00000000000006e0
> > > > Process touch (pid: 11373, threadinfo ffff8101c50a4000, task
> > > > ffff8101b78bd100)
> > > > Stack: ffffffff882d5f38 ffff8101c50a5ea8 ffff8100ec8df4b0
> > > > 00000000000000d0
> > > > ffff8100eb8916f8 ffff810163bf9efc 10e58c2eea45b220 ffff8100ea45b220
> > > > ffff810163bf9e50 ffff8100ea45b220 ffff8100ec8df4b0 ffff8100ec8df568
> > > > Call Trace:
> > > > [<ffffffff882d5f38>] :autofs4:autofs4_lookup+0xcb/0x311
> > > > [<ffffffff8020c0d8>] do_lookup+0xc4/0x1ae
> > > > [<ffffffff802097be>] __link_path_walk+0x8ec/0xd9d
> > > > [<ffffffff8824ca24>] :sunrpc:rpcauth_lookup_credcache+0x12e/0x24a
> > > > [<ffffffff8020da3e>] link_path_walk+0x58/0xe0
> > > > [<ffffffff80232d3f>] __strncpy_from_user+0x17/0x41
> > > > [<ffffffff8020949b>] __link_path_walk+0x5c9/0xd9d
> > > > [<ffffffff8020da3e>] link_path_walk+0x58/0xe0
> > > > [<ffffffff80232d3f>] __strncpy_from_user+0x17/0x41
> > > > [<ffffffff8020bea7>] do_path_lookup+0x1b6/0x217
> > > > [<ffffffff80221512>] __path_lookup_intent_open+0x56/0x97
> > > > [<ffffffff80218912>] open_namei+0xa9/0x64c
> > > > [<ffffffff8025dc33>] do_page_fault+0x45e/0x7ad
> > > > [<ffffffff802250eb>] do_filp_open+0x1c/0x38
> > > > [<ffffffff80232d3f>] __strncpy_from_user+0x17/0x41
> > > > [<ffffffff80217698>] do_sys_open+0x44/0xc1
> > > > [<ffffffff8025511e>] system_call+0x7e/0x83
> > > >
> > > >
> > > > Code: f0 ff 0f 79 09 f3 90 83 3f 00 7e f9 eb f2 c3 f0 81 2f 00 00
> > > > RIP [<ffffffff8025bada>] _spin_lock+0x0/0xf
> > > > RSP <ffff8101c50a5a50>
> > > > CR2: 0000000000000008
> > >
> > > I assume 2.6.20 is OK?
> > Can't say for sure, I expect yes.
> > Set up with 2.6.20 now and let it run for a day or two.
> > Maybe someone has worked in that area and has an idea meanwhile...
>
> Do we have any idea on what was being opened here?
> Might be useful to see the autofs maps if possible.
I sent that stuff to Ian...
However, I couldn't run into that with 2.6.20 and also not with
*2.6.21-rc3* (yet). Maybe it already got fixed?
Machine still running, I'll report back if this should happen again.
Thanks,
Thomas
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: Null pointer in autofs4 (_spin_lock) in 2.6.21-rc2
2007-03-11 21:29 ` Thomas Renninger
@ 2007-03-12 4:43 ` Ian Kent
0 siblings, 0 replies; 6+ messages in thread
From: Ian Kent @ 2007-03-12 4:43 UTC (permalink / raw)
To: Thomas Renninger; +Cc: linux-kernel
On Sun, 11 Mar 2007, Thomas Renninger wrote:
> On Thu, 2007-03-08 at 19:39 +0900, Ian Kent wrote:
> > On Thu, 2007-03-08 at 11:12 +0100, Thomas Renninger wrote:
> > > On Thu, 2007-03-08 at 01:28 -0800, Andrew Morton wrote:
> > > > > On Thu, 08 Mar 2007 09:57:56 +0100 Thomas Renninger <trenn@suse.de> wrote:
> > > > > I saw this happening several times on 2.6.21-rc2.
> > > > > Tell me how I can help...
> > > > > Some nfs partitions are mounted via nfs using autofs.
> > > > > It takes some hours to run into this:
> > > > >
> > > > > Unable to handle kernel NULL pointer dereference at 0000000000000008
> > > > > RIP:
> > > > > [<ffffffff8025bada>] _spin_lock+0x0/0xf
> > > > > PGD 1dde23067 PUD 1d3060067 PMD 0
> > > > > Oops: 0002 [1] SMP
> > > > > CPU 3
> > > > > Modules linked in: autofs4 nfs lockd nfs_acl sunrpc asus_acpi af_packet
> > > > > tg3 ipv6 button battery ac ext2 mbcache loop dm_mod floppy parport_pc lp
> > > > > parport reiserfs pata_amd edd fan thermal sg processor sata_sil libata
> > > > > amd74xx sd_mod scsi_mod ide_disk ide_core
> > > > > Pid: 11373, comm: touch Not tainted 2.6.21-rc2-default #6
> > > > > RIP: 0010:[<ffffffff8025bada>] [<ffffffff8025bada>] _spin_lock+0x0/0xf
> > > > > RSP: 0018:ffff8101c50a5a50 EFLAGS: 00010202
> > > > > RAX: ffff8100eb8916f8 RBX: ffff81010007dcd8 RCX: ffff8100ea45b280
> > > > > RDX: 0000000010e58c2e RSI: ffff810163bf9e50 RDI: 0000000000000008
> > > > > RBP: ffff810163bf9e50 R08: ffff8101c50a4000 R09: ffff8101c50a5ea8
> > > > > R10: ffff81010003fca8 R11: ffffffff802299ad R12: 0000000000000000
> > > > > R13: ffff8100eb891680 R14: 0000000000000005 R15: ffff8101c50a5b48
> > > > > FS: 00002b8ae744bf20(0000) GS:ffff81010016a7c0(0000)
> > > > > knlGS:00000000b7bd88d0
> > > > > CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b
> > > > > CR2: 0000000000000008 CR3: 00000001b925f000 CR4: 00000000000006e0
> > > > > Process touch (pid: 11373, threadinfo ffff8101c50a4000, task
> > > > > ffff8101b78bd100)
> > > > > Stack: ffffffff882d5f38 ffff8101c50a5ea8 ffff8100ec8df4b0
> > > > > 00000000000000d0
> > > > > ffff8100eb8916f8 ffff810163bf9efc 10e58c2eea45b220 ffff8100ea45b220
> > > > > ffff810163bf9e50 ffff8100ea45b220 ffff8100ec8df4b0 ffff8100ec8df568
> > > > > Call Trace:
> > > > > [<ffffffff882d5f38>] :autofs4:autofs4_lookup+0xcb/0x311
> > > > > [<ffffffff8020c0d8>] do_lookup+0xc4/0x1ae
> > > > > [<ffffffff802097be>] __link_path_walk+0x8ec/0xd9d
> > > > > [<ffffffff8824ca24>] :sunrpc:rpcauth_lookup_credcache+0x12e/0x24a
> > > > > [<ffffffff8020da3e>] link_path_walk+0x58/0xe0
> > > > > [<ffffffff80232d3f>] __strncpy_from_user+0x17/0x41
> > > > > [<ffffffff8020949b>] __link_path_walk+0x5c9/0xd9d
> > > > > [<ffffffff8020da3e>] link_path_walk+0x58/0xe0
> > > > > [<ffffffff80232d3f>] __strncpy_from_user+0x17/0x41
> > > > > [<ffffffff8020bea7>] do_path_lookup+0x1b6/0x217
> > > > > [<ffffffff80221512>] __path_lookup_intent_open+0x56/0x97
> > > > > [<ffffffff80218912>] open_namei+0xa9/0x64c
> > > > > [<ffffffff8025dc33>] do_page_fault+0x45e/0x7ad
> > > > > [<ffffffff802250eb>] do_filp_open+0x1c/0x38
> > > > > [<ffffffff80232d3f>] __strncpy_from_user+0x17/0x41
> > > > > [<ffffffff80217698>] do_sys_open+0x44/0xc1
> > > > > [<ffffffff8025511e>] system_call+0x7e/0x83
> > > > >
> > > > >
> > > > > Code: f0 ff 0f 79 09 f3 90 83 3f 00 7e f9 eb f2 c3 f0 81 2f 00 00
> > > > > RIP [<ffffffff8025bada>] _spin_lock+0x0/0xf
> > > > > RSP <ffff8101c50a5a50>
> > > > > CR2: 0000000000000008
> > > >
> > > > I assume 2.6.20 is OK?
> > > Can't say for sure, I expect yes.
> > > Set up with 2.6.20 now and let it run for a day or two.
> > > Maybe someone has worked in that area and has an idea meanwhile...
> >
> > Do we have any idea on what was being opened here?
> > Might be useful to see the autofs maps if possible.
> I sent that stuff to Ian...
>
> However, I couldn't run into that with 2.6.20 and also not with
> *2.6.21-rc3* (yet). Maybe it already got fixed?
> Machine still running, I'll report back if this should happen again.
I suspect the problem is still present but maybe a bit hard to trigger.
I'm not convinced this is needed but it is the only thing that looks at
all suspicious so if (when) you see this again could you give the patch
below a try please.
Ian
---
--- linux-2.6.21-rc3/fs/autofs4/root.c.sbi-check 2007-03-12 13:29:42.000000000 +0900
+++ linux-2.6.21-rc3/fs/autofs4/root.c 2007-03-12 13:30:04.000000000 +0900
@@ -503,6 +503,9 @@ static struct dentry *autofs4_lookup_unh
const unsigned char *str = name->name;
struct list_head *p, *head;
+ if (!sbi)
+ return NULL;
+
spin_lock(&dcache_lock);
spin_lock(&sbi->rehash_lock);
head = &sbi->rehash_list;
^ permalink raw reply [flat|nested] 6+ messages in thread
end of thread, other threads:[~2007-03-12 4:42 UTC | newest]
Thread overview: 6+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2007-03-08 8:57 Null pointer in autofs4 (_spin_lock) in 2.6.21-rc2 Thomas Renninger
2007-03-08 9:28 ` Andrew Morton
2007-03-08 10:12 ` Thomas Renninger
2007-03-08 10:39 ` Ian Kent
2007-03-11 21:29 ` Thomas Renninger
2007-03-12 4:43 ` Ian Kent
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.