linux-kernel - idr_remove called for id=0 which is not allocated

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives
Hash Suite for Android: free password hash cracker in your pocket
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <4C9A70B2.3090101@alessandroguido.name>
Date:	Wed, 22 Sep 2010 23:10:10 +0200
From:	Alessandro Guido <ag@...ssandroguido.name>
To:	linux-kernel@...r.kernel.org
CC:	dri-devel@...ts.freedesktop.org
Subject: idr_remove called for id=0 which is not allocated

I have this traces in my logs (full dmesg attached).

idr_remove called for id=0 which is not allocated.
Pid: 1136, comm: Xorg Not tainted 2.6.36-rc5-49-gc79bd89 #1
Call Trace:
  [<c1379e16>] ? printk+0x18/0x1a
  [<c113b8f3>] idr_remove+0x73/0x1c0
  [<c11b8d6f>] drm_mode_object_put+0x2f/0x50
  [<c11b8f6e>] drm_mode_destroy+0xe/0x20
  [<c11eb24b>] nouveau_connector_get_modes+0x2b/0x390
  [<c1185b6f>] ? acpi_lid_open+0x22/0x3c
  [<c103800b>] ? queue_delayed_work+0x1b/0x30
  [<c11abf34>] drm_helper_probe_single_connector_modes+0xc4/0x360
  [<c11bb6a7>] drm_mode_getconnector+0x2a7/0x350
  [<c11b00d2>] drm_ioctl+0x1c2/0x4b0
  [<c1068071>] ? filemap_fault+0x81/0x3c0
  [<c11bb400>] ? drm_mode_getconnector+0x0/0x350
  [<c107bedf>] ? handle_mm_fault+0x13f/0x670
  [<c11aff10>] ? drm_ioctl+0x0/0x4b0
  [<c109c90d>] do_vfs_ioctl+0x7d/0x5f0
  [<c101a14c>] ? do_page_fault+0x17c/0x3c0
  [<c108fc6d>] ? vfs_write+0xfd/0x140
  [<c108f1c0>] ? do_sync_write+0x0/0xe0
  [<c109ceb9>] sys_ioctl+0x39/0x60
  [<c1002b90>] sysenter_do_call+0x12/0x26
idr_remove called for id=0 which is not allocated.
Pid: 1136, comm: Xorg Not tainted 2.6.36-rc5-49-gc79bd89 #1
Call Trace:
  [<c1379e16>] ? printk+0x18/0x1a
  [<c113b8f3>] idr_remove+0x73/0x1c0
  [<c11b8d6f>] drm_mode_object_put+0x2f/0x50
  [<c11b8f6e>] drm_mode_destroy+0xe/0x20
  [<c11eb24b>] nouveau_connector_get_modes+0x2b/0x390
  [<c1185b6f>] ? acpi_lid_open+0x22/0x3c
  [<c103800b>] ? queue_delayed_work+0x1b/0x30
  [<c11abf34>] drm_helper_probe_single_connector_modes+0xc4/0x360
  [<c11bb6a7>] drm_mode_getconnector+0x2a7/0x350
  [<c11b00d2>] drm_ioctl+0x1c2/0x4b0
  [<c1068071>] ? filemap_fault+0x81/0x3c0
  [<c11bb400>] ? drm_mode_getconnector+0x0/0x350
  [<c107bedf>] ? handle_mm_fault+0x13f/0x670
  [<c11aff10>] ? drm_ioctl+0x0/0x4b0
  [<c109c90d>] do_vfs_ioctl+0x7d/0x5f0
  [<c101a14c>] ? do_page_fault+0x17c/0x3c0
  [<c108fc6d>] ? vfs_write+0xfd/0x140
  [<c108f1c0>] ? do_sync_write+0x0/0xe0
  [<c109ceb9>] sys_ioctl+0x39/0x60
  [<c1002b90>] sysenter_do_call+0x12/0x26
[drm] nouveau 0000:01:00.0: Allocating FIFO number 1
[drm] nouveau 0000:01:00.0: nouveau_channel_alloc: initialised FIFO 1
idr_remove called for id=0 which is not allocated.
Pid: 1136, comm: Xorg Not tainted 2.6.36-rc5-49-gc79bd89 #1
Call Trace:
  [<c1379e16>] ? printk+0x18/0x1a
  [<c113b8f3>] idr_remove+0x73/0x1c0
  [<c11b8d6f>] drm_mode_object_put+0x2f/0x50
  [<c11b8f6e>] drm_mode_destroy+0xe/0x20
  [<c11eb24b>] nouveau_connector_get_modes+0x2b/0x390
  [<c1185b6f>] ? acpi_lid_open+0x22/0x3c
  [<c103800b>] ? queue_delayed_work+0x1b/0x30
  [<c11abf34>] drm_helper_probe_single_connector_modes+0xc4/0x360
  [<c11bb6a7>] drm_mode_getconnector+0x2a7/0x350
  [<c12ed55a>] ? __kfree_skb+0x3a/0x90
  [<c11b00d2>] drm_ioctl+0x1c2/0x4b0
  [<c11bb400>] ? drm_mode_getconnector+0x0/0x350
  [<c108f344>] ? do_sync_read+0xa4/0xe0
  [<c107bfa1>] ? handle_mm_fault+0x201/0x670
  [<c11aff10>] ? drm_ioctl+0x0/0x4b0
  [<c109c90d>] do_vfs_ioctl+0x7d/0x5f0
  [<c101a14c>] ? do_page_fault+0x17c/0x3c0
  [<c108fe96>] ? vfs_read+0xf6/0x140
  [<c109ceb9>] sys_ioctl+0x39/0x60
  [<c1002b90>] sysenter_do_call+0x12/0x26
idr_remove called for id=0 which is not allocated.
Pid: 1136, comm: Xorg Not tainted 2.6.36-rc5-49-gc79bd89 #1
Call Trace:
  [<c1379e16>] ? printk+0x18/0x1a
  [<c113b8f3>] idr_remove+0x73/0x1c0
  [<c11b8d6f>] drm_mode_object_put+0x2f/0x50
  [<c11b8f6e>] drm_mode_destroy+0xe/0x20
  [<c11eb24b>] nouveau_connector_get_modes+0x2b/0x390
  [<c1185b6f>] ? acpi_lid_open+0x22/0x3c
  [<c103800b>] ? queue_delayed_work+0x1b/0x30
  [<c11abf34>] drm_helper_probe_single_connector_modes+0xc4/0x360
  [<c11bb6a7>] drm_mode_getconnector+0x2a7/0x350
  [<c12ed55a>] ? __kfree_skb+0x3a/0x90
  [<c11b00d2>] drm_ioctl+0x1c2/0x4b0
  [<c11bb400>] ? drm_mode_getconnector+0x0/0x350
  [<c108f344>] ? do_sync_read+0xa4/0xe0
  [<c113f56b>] ? rb_insert_color+0xdb/0x110
  [<c11aff10>] ? drm_ioctl+0x0/0x4b0
  [<c109c90d>] do_vfs_ioctl+0x7d/0x5f0
  [<c1040ad3>] ? hrtimer_start+0x23/0x30
  [<c108fe96>] ? vfs_read+0xf6/0x140
  [<c109ceb9>] sys_ioctl+0x39/0x60
  [<c1002b90>] sysenter_do_call+0x12/0x26
idr_remove called for id=0 which is not allocated.
Pid: 1136, comm: Xorg Not tainted 2.6.36-rc5-49-gc79bd89 #1
Call Trace:
  [<c1379e16>] ? printk+0x18/0x1a
  [<c113b8f3>] idr_remove+0x73/0x1c0
  [<c11b8d6f>] drm_mode_object_put+0x2f/0x50
  [<c11b8f6e>] drm_mode_destroy+0xe/0x20
  [<c11eb24b>] nouveau_connector_get_modes+0x2b/0x390
  [<c1185b6f>] ? acpi_lid_open+0x22/0x3c
  [<c103800b>] ? queue_delayed_work+0x1b/0x30
  [<c11abf34>] drm_helper_probe_single_connector_modes+0xc4/0x360
  [<c11bb6a7>] drm_mode_getconnector+0x2a7/0x350
  [<c12ed55a>] ? __kfree_skb+0x3a/0x90
  [<c11b00d2>] drm_ioctl+0x1c2/0x4b0
  [<c11bb400>] ? drm_mode_getconnector+0x0/0x350
  [<c108f344>] ? do_sync_read+0xa4/0xe0
  [<c113f56b>] ? rb_insert_color+0xdb/0x110
  [<c11aff10>] ? drm_ioctl+0x0/0x4b0
  [<c109c90d>] do_vfs_ioctl+0x7d/0x5f0
  [<c1040ad3>] ? hrtimer_start+0x23/0x30
  [<c108fe96>] ? vfs_read+0xf6/0x140
  [<c109ceb9>] sys_ioctl+0x39/0x60
  [<c1002b90>] sysenter_do_call+0x12/0x26
EXT4-fs (sda3): re-mounted. Opts: nobarrier,commit=0
EXT4-fs (sda4): re-mounted. Opts: commit=0
idr_remove called for id=0 which is not allocated.
Pid: 1136, comm: Xorg Not tainted 2.6.36-rc5-49-gc79bd89 #1
Call Trace:
  [<c1379e16>] ? printk+0x18/0x1a
  [<c113b8f3>] idr_remove+0x73/0x1c0
  [<c11b8d6f>] drm_mode_object_put+0x2f/0x50
  [<c11b8f6e>] drm_mode_destroy+0xe/0x20
  [<c11eb24b>] nouveau_connector_get_modes+0x2b/0x390
  [<c1185b6f>] ? acpi_lid_open+0x22/0x3c
  [<c103800b>] ? queue_delayed_work+0x1b/0x30
  [<c11abf34>] drm_helper_probe_single_connector_modes+0xc4/0x360
  [<c11bb6a7>] drm_mode_getconnector+0x2a7/0x350
  [<c12ed55a>] ? __kfree_skb+0x3a/0x90
  [<c11b00d2>] drm_ioctl+0x1c2/0x4b0
  [<c11bb400>] ? drm_mode_getconnector+0x0/0x350
  [<c108f344>] ? do_sync_read+0xa4/0xe0
  [<c113f56b>] ? rb_insert_color+0xdb/0x110
  [<c11aff10>] ? drm_ioctl+0x0/0x4b0
  [<c109c90d>] do_vfs_ioctl+0x7d/0x5f0
  [<c1040ad3>] ? hrtimer_start+0x23/0x30
  [<c108fe96>] ? vfs_read+0xf6/0x140
  [<c109ceb9>] sys_ioctl+0x39/0x60
  [<c1002b90>] sysenter_do_call+0x12/0x26
idr_remove called for id=0 which is not allocated.
Pid: 1136, comm: Xorg Not tainted 2.6.36-rc5-49-gc79bd89 #1
Call Trace:
  [<c1379e16>] ? printk+0x18/0x1a
  [<c113b8f3>] idr_remove+0x73/0x1c0
  [<c11b8d6f>] drm_mode_object_put+0x2f/0x50
  [<c11b8f6e>] drm_mode_destroy+0xe/0x20
  [<c11eb24b>] nouveau_connector_get_modes+0x2b/0x390
  [<c1185b6f>] ? acpi_lid_open+0x22/0x3c
  [<c103800b>] ? queue_delayed_work+0x1b/0x30
  [<c11abf34>] drm_helper_probe_single_connector_modes+0xc4/0x360
  [<c11bb6a7>] drm_mode_getconnector+0x2a7/0x350
  [<c12ed55a>] ? __kfree_skb+0x3a/0x90
  [<c11b00d2>] drm_ioctl+0x1c2/0x4b0
  [<c11bb400>] ? drm_mode_getconnector+0x0/0x350
  [<c108f344>] ? do_sync_read+0xa4/0xe0
  [<c113f56b>] ? rb_insert_color+0xdb/0x110
  [<c11aff10>] ? drm_ioctl+0x0/0x4b0
  [<c109c90d>] do_vfs_ioctl+0x7d/0x5f0
  [<c1040ad3>] ? hrtimer_start+0x23/0x30
  [<c108fe96>] ? vfs_read+0xf6/0x140
  [<c109ceb9>] sys_ioctl+0x39/0x60
  [<c1002b90>] sysenter_do_call+0x12/0x26
idr_remove called for id=0 which is not allocated.
Pid: 1136, comm: Xorg Not tainted 2.6.36-rc5-49-gc79bd89 #1
Call Trace:
  [<c1379e16>] ? printk+0x18/0x1a
  [<c113b8f3>] idr_remove+0x73/0x1c0
  [<c11b8d6f>] drm_mode_object_put+0x2f/0x50
  [<c11b8f6e>] drm_mode_destroy+0xe/0x20
  [<c11eb24b>] nouveau_connector_get_modes+0x2b/0x390
  [<c1185b6f>] ? acpi_lid_open+0x22/0x3c
  [<c103800b>] ? queue_delayed_work+0x1b/0x30
  [<c11abf34>] drm_helper_probe_single_connector_modes+0xc4/0x360
  [<c11bb6a7>] drm_mode_getconnector+0x2a7/0x350
  [<c12ed55a>] ? __kfree_skb+0x3a/0x90
  [<c11b00d2>] drm_ioctl+0x1c2/0x4b0
  [<c11bb400>] ? drm_mode_getconnector+0x0/0x350
  [<c108f344>] ? do_sync_read+0xa4/0xe0
  [<c113f56b>] ? rb_insert_color+0xdb/0x110
  [<c11aff10>] ? drm_ioctl+0x0/0x4b0
  [<c109c90d>] do_vfs_ioctl+0x7d/0x5f0
  [<c1040ad3>] ? hrtimer_start+0x23/0x30
  [<c108fe96>] ? vfs_read+0xf6/0x140
  [<c109ceb9>] sys_ioctl+0x39/0x60
  [<c1002b90>] sysenter_do_call+0x12/0x26
idr_remove called for id=0 which is not allocated.
Pid: 1136, comm: Xorg Not tainted 2.6.36-rc5-49-gc79bd89 #1
Call Trace:
  [<c1379e16>] ? printk+0x18/0x1a
  [<c113b8f3>] idr_remove+0x73/0x1c0
  [<c11b8d6f>] drm_mode_object_put+0x2f/0x50
  [<c11b8f6e>] drm_mode_destroy+0xe/0x20
  [<c11eb24b>] nouveau_connector_get_modes+0x2b/0x390
  [<c1185b6f>] ? acpi_lid_open+0x22/0x3c
  [<c103800b>] ? queue_delayed_work+0x1b/0x30
  [<c11abf34>] drm_helper_probe_single_connector_modes+0xc4/0x360
  [<c11bb6a7>] drm_mode_getconnector+0x2a7/0x350
  [<c12ed55a>] ? __kfree_skb+0x3a/0x90
  [<c11b00d2>] drm_ioctl+0x1c2/0x4b0
  [<c11bb400>] ? drm_mode_getconnector+0x0/0x350
  [<c108f344>] ? do_sync_read+0xa4/0xe0
  [<c113f56b>] ? rb_insert_color+0xdb/0x110
  [<c11aff10>] ? drm_ioctl+0x0/0x4b0
  [<c109c90d>] do_vfs_ioctl+0x7d/0x5f0
  [<c1040ad3>] ? hrtimer_start+0x23/0x30
  [<c108fe96>] ? vfs_read+0xf6/0x140
  [<c109ceb9>] sys_ioctl+0x39/0x60
  [<c1002b90>] sysenter_do_call+0x12/0x26

Download attachment "dmesg.gz" of type "application/x-gzip" (8339 bytes)