linux-kernel - 3.10.25: BUG: unable to handle kernel NULL pointer dereference at 0000000000000030 in btrfs code

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <CAPoQQ-23L7OxF4baWTRaXcTqynE8BRovgMk80+9QkX_EWOcDow@mail.gmail.com>
Date:	Mon, 24 Feb 2014 15:20:12 -0800
From:	Cody P Schafer <dev@...yps.com>
To:	linux-btrfs@...r.kernel.org, linux-kernel@...r.kernel.org
Cc:	cody@...ux.vnet.ibm.com
Subject: 3.10.25: BUG: unable to handle kernel NULL pointer dereference at
 0000000000000030 in btrfs code

With suspicious OOM occurring before hand.

I don't see anything that appears to change the btrfs code around this
in later stable versions, but I haven't reproduced it their either.

# uname -a
Linux pizza 3.10.25-gentoo #4 SMP Sat Feb 15 14:37:40 PST 2014 x86_64
Intel(R) Core(TM) i7-2720QM CPU @ 2.20GHz GenuineIntel GNU/Linux

---- Trimmed Bug (full log attached) ----
Feb 24 02:41:46 [kernel] [734542.767957] BUG: unable to handle kernel
NULL pointer dereference at 0000000000000030
Feb 24 02:41:46 [kernel] [734542.768006] IP: [<ffffffff81290b55>]
submit_one_bio+0x35/0xa0
Feb 24 02:41:46 [kernel] [734542.768041] PGD 213821067 PUD 211a95067 PMD 0
Feb 24 02:41:46 [kernel] [734542.768069] Oops: 0000 [#1] SMP
[...]
Feb 24 02:41:46 [kernel] [734542.768827] CPU: 2 PID: 9834 Comm:
firefox Not tainted 3.10.25-gentoo #4
Feb 24 02:41:46 [kernel] [734542.768860] Hardware name: LENOVO
4282A34/4282A34, BIOS 8BET44WW (1.24 ) 05/13/2011
Feb 24 02:41:46 [kernel] [734542.768897] task: ffff88020fe1c320 ti:
ffff8802138e6000 task.ti: ffff8802138e6000
Feb 24 02:41:46 [kernel] [734542.768935] RIP:
0010:[<ffffffff81290b55>]  [<ffffffff81290b55>]
submit_one_bio+0x35/0xa0
Feb 24 02:41:46 [kernel] [734542.768979] RSP: 0018:ffff8802138e78d8
EFLAGS: 00010202
Feb 24 02:41:46 [kernel] [734542.769009] RAX: ffff880210c29090 RBX:
ffff88020eea69d0 RCX: 0000000000020001
Feb 24 02:41:46 [kernel] [734542.769050] RDX: 0000000000000000 RSI:
0000000000001b3c RDI: 0000000000000000
Feb 24 02:41:46 [kernel] [734542.769090] RBP: ffff8802138e78e8 R08:
0000000000000000 R09: ffffea00035d3e00
Feb 24 02:41:46 [kernel] [734542.769129] R10: 0000000000000000 R11:
0000000fbbd08000 R12: 0000000000001000
Feb 24 02:41:46 [kernel] [734542.769168] R13: ffff88020eea69d0 R14:
0000000007dde840 R15: ffff8801f88ce440
Feb 24 02:41:46 [kernel] [734542.769207] FS:  00007ffd98901740(0000)
GS:ffff88021e280000(0000) knlGS:0000000000000000
Feb 24 02:41:46 [kernel] [734542.769250] CS:  0010 DS: 0000 ES: 0000
CR0: 0000000080050033
Feb 24 02:41:46 [kernel] [734542.769282] CR2: 0000000000000030 CR3:
0000000211425000 CR4: 00000000000407e0
Feb 24 02:41:46 [kernel] [734542.769321] DR0: 0000000000000000 DR1:
0000000000000000 DR2: 0000000000000000
Feb 24 02:41:46 [kernel] [734542.769359] DR3: 0000000000000000 DR6:
00000000ffff0ff0 DR7: 0000000000000400
Feb 24 02:41:46 [kernel] [734542.769398] Stack:
Feb 24 02:41:46 [kernel] [734542.769411]  ffff8802138e7a98
0000000000001000 ffff8802138e7948 ffffffff81293bf2
Feb 24 02:41:46 [kernel] [734542.769459]  ffff8801f88ce500
0000000000000001 0000000000000000 ffffea00035d3e80
Feb 24 02:41:46 [kernel] [734542.769506]  0000000001b61fff
0000000000001000 0000000001b61fff 0000000007dde840
Feb 24 02:41:46 [kernel] [734542.769557] Call Trace:
Feb 24 02:41:46 [kernel] [734542.769577]  [<ffffffff81293bf2>]
submit_extent_page.isra.42+0xa2/0x1f0
Feb 24 02:41:46 [kernel] [734542.769619]  [<ffffffff81294aeb>]
__extent_read_full_page+0x29b/0x650
Feb 24 02:41:46 [kernel] [734542.769660]  [<ffffffff81294060>] ?
repair_eb_io_failure+0xb0/0xb0
Feb 24 02:41:46 [kernel] [734542.769700]  [<ffffffff8127c710>] ?
btrfs_fiemap+0x60/0x60
Feb 24 02:41:46 [kernel] [734542.769732]  [<ffffffff8127c710>] ?
btrfs_fiemap+0x60/0x60
Feb 24 02:41:46 [kernel] [734542.769763]  [<ffffffff8127c710>] ?
btrfs_fiemap+0x60/0x60
Feb 24 02:41:46 [kernel] [734542.769799]  [<ffffffff81295d9d>]
extent_readpages+0x12d/0x210
Feb 24 02:41:46 [kernel] [734542.769837]  [<ffffffff8127b4ca>]
btrfs_readpages+0x1a/0x20
Feb 24 02:41:46 [kernel] [734542.769875]  [<ffffffff811135f7>]
__do_page_cache_readahead+0x1c7/0x280
Feb 24 02:41:46 [kernel] [734542.769953]  [<ffffffff8110b3a1>]
filemap_fault+0x391/0x440
Feb 24 02:41:46 [kernel] [734542.769990]  [<ffffffff81129735>]
__do_fault+0x65/0x490
Feb 24 02:41:46 [kernel] [734542.770026]  [<ffffffff8112c373>]
handle_pte_fault+0x83/0x7d0
Feb 24 02:41:46 [kernel] [734542.770065]  [<ffffffff8112df31>]
handle_mm_fault+0x221/0x320
Feb 24 02:41:46 [kernel] [734542.770103]  [<ffffffff8102ea56>]
__do_page_fault+0x156/0x4c0
Feb 24 02:41:46 [kernel] [734542.770142]  [<ffffffff811537c5>] ?
SyS_newstat+0x25/0x30
Feb 24 02:41:46 [kernel] [734542.770178]  [<ffffffff8102ede9>]
do_page_fault+0x9/0x10
Feb 24 02:41:46 [kernel] [734542.770211]  [<ffffffff817d3932>]
page_fault+0x22/0x30
Feb 24 02:41:46 [kernel] [734542.770243] Code: 28 48 89 f3 4c 8b 56 48
48 83 e8 01 48 c1 e0 04 48 03 46 58 4c 8b 08 44 8b 40 0c 49 8b 71 10
48 c7 43 48 00 00
Feb 24 02:41:46 [kernel] [734542.770452] RIP  [<ffffffff81290b55>]
submit_one_bio+0x35/0xa0
Feb 24 02:41:46 [kernel] [734542.770491]  RSP <ffff8802138e78d8>
Feb 24 02:41:46 [kernel] [734542.770515] CR2: 0000000000000030
Feb 24 02:41:46 [kernel] [734542.785375] ---[ end trace c7535431d18e43ff ]---

Download attachment "oom-triggers-bug" of type "application/octet-stream" (97379 bytes)