From: Sasha Levin <sasha.levin@oracle.com>
To: Ingo Molnar <mingo@kernel.org>, Peter Zijlstra <peterz@infradead.org>
Cc: LKML <linux-kernel@vger.kernel.org>, Dave Jones <davej@redhat.com>
Subject: perf: NULL ptr deref in perf_event_mmap
Date: Mon, 12 May 2014 11:50:31 -0400 [thread overview]
Message-ID: <5370EDC7.3000603@oracle.com> (raw)
Hi all,
While fuzzing with trinity inside a KVM tools guest running the latest -next
kernel I've stumbled on the following spew:
[ 1269.713185] BUG: unable to handle kernel NULL pointer dereference at 00000000000000e0
[ 1269.714984] IP: d_path (fs/dcache.c:2947)
[ 1269.716054] PGD 2a460b067 PUD 2b3e44067 PMD 0
[ 1269.716929] Oops: 0000 [#1] PREEMPT SMP DEBUG_PAGEALLOC
[ 1269.718188] Dumping ftrace buffer:
[ 1269.719440] (ftrace buffer empty)
[ 1269.720043] Modules linked in:
[ 1269.720043] CPU: 27 PID: 41680 Comm: trinity-c243 Tainted: G W 3.15.0-rc5-next-20140512-sasha-00019-ga20bc00-dirty #456
[ 1269.722525] task: ffff880100a90000 ti: ffff8801362f8000 task.ti: ffff8801362f8000
[ 1269.722525] RIP: d_path (fs/dcache.c:2947)
[ 1269.722525] RSP: 0018:ffff8801362f9d58 EFLAGS: 00010296
[ 1269.722525] RAX: ffff88062855e660 RBX: ffff8803d5120e10 RCX: 00000000000000d0
[ 1269.722525] RDX: 0000000000000ff8 RSI: ffff88062855d668 RDI: 0000000000000000
[ 1269.722525] RBP: ffff8801362f9db8 R08: 0000000000000000 R09: 0000000000000000
[ 1269.722525] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88062855d668
[ 1269.722525] R13: ffff8803d5120e00 R14: 00007fbd5e7e9000 R15: ffff880627b61600
[ 1269.722525] FS: 00007fbd5e7da700(0000) GS:ffff880628e00000(0000) knlGS:0000000000000000
[ 1269.722525] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1269.722525] CR2: 00000000000000e0 CR3: 00000002b3fd7000 CR4: 00000000000006a0
[ 1269.722525] DR0: 00000000006df000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1269.722525] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000030602
[ 1269.722525] Stack:
[ 1269.722525] ffff8802c70ee798 ffffffff8f27dc2e 000000000000001b 00000ff800001000
[ 1269.722525] 0000000000000000 ffff88062855e660 00007fbd5e7e9000 ffff8801362f9dd8
[ 1269.722525] ffff8801362f9dd8 ffff88062855d668 ffff8803d5120e00 00007fbd5e7e9000
[ 1269.722525] Call Trace:
[ 1269.722525] ? perf_event_mmap (kernel/events/core.c:5206 kernel/events/core.c:5308)
[ 1269.722525] perf_event_mmap (kernel/events/core.c:5216 kernel/events/core.c:5308)
[ 1269.722525] mprotect_fixup (mm/mprotect.c:337)
[ 1269.722525] ? SyS_mprotect (mm/mprotect.c:377 mm/mprotect.c:345)
[ 1269.722525] SyS_mprotect (mm/mprotect.c:424 mm/mprotect.c:345)
[ 1269.722525] tracesys (arch/x86/kernel/entry_64.S:746)
[ 1269.722525] Code: 48 63 c2 48 89 e5 48 83 ec 60 48 01 f0 48 89 5d e0 48 89 fb 4c 89 65 e8 4c 89 6d f0 4c 89 75 f8 48 8b 7f 08 89 55 bc 48 89 45 c8 <48> 8b 8f e0 00 00 00 48 85 c9 74 23 48 8b 49 40 48 85 c9 74 1a
[ 1269.722525] RIP d_path (fs/dcache.c:2947)
[ 1269.722525] RSP <ffff8801362f9d58>
[ 1269.722525] CR2: 00000000000000e0
Thanks,
Sasha
next reply other threads:[~2014-05-12 15:51 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2014-05-12 15:50 Sasha Levin [this message]
2014-05-12 17:25 ` perf: NULL ptr deref in perf_event_mmap Peter Zijlstra
2014-05-12 19:32 ` Sasha Levin
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=5370EDC7.3000603@oracle.com \
--to=sasha.levin@oracle.com \
--cc=davej@redhat.com \
--cc=linux-kernel@vger.kernel.org \
--cc=mingo@kernel.org \
--cc=peterz@infradead.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox