Package: linux-image-2.6.18-1-686
Version: 2.6.18-3

While running some not-very-intensive upload tasks via samba (this server being the recipient of the data), I got the following two oopses:

Nov 11 04:18:47 dearing kernel: BUG: unable to handle kernel paging request at virtual address 00100104
Nov 11 04:18:47 dearing kernel:  printing eip:
Nov 11 04:18:47 dearing kernel: c0196a22
Nov 11 04:18:47 dearing kernel: *pde = 00000000
Nov 11 04:18:47 dearing kernel: Oops: 0002 [#1]
Nov 11 04:18:47 dearing kernel: SMP
Nov 11 04:18:47 dearing kernel: Modules linked in: reiserfs drbd ipv6 button ac battery loop tsdev sg e752x_edac intel_rng edac_mc shpchp pci_hotplug psmouse floppy serio_ra w evdev pcspkr rtc ext3 jbd mbcache dm_mirror dm_snapshot dm_mod raid1 md_mod ide_generic sd_mod ide_cd cdrom piix generic ide_core mptspi mptscsih mptbase scsi_transport_sp
i uhci_hcd ehci_hcd usbcore scsi_mod e1000 thermal processor fan
Nov 11 04:18:47 dearing kernel: CPU:    0
Nov 11 04:18:47 dearing kernel: EIP:    0060:[<c0196a22>]    Not tainted VLI
Nov 11 04:18:47 dearing kernel: EFLAGS: 00010217   (2.6.18-1-686 #1)
Nov 11 04:18:47 dearing kernel: EIP is at keyring_destroy+0x27/0x77
Nov 11 04:18:47 dearing kernel: eax: 00200200 ebx: d7d29240 ecx: d7d2928c edx: 00100100 Nov 11 04:18:47 dearing kernel: esi: d7d29248 edi: dfa31380 ebp: 00000296 esp: dfa5bf58
Nov 11 04:18:47 dearing kernel: ds: 007b   es: 007b   ss: 0068
Nov 11 04:18:47 dearing kernel: Process events/0 (pid: 10, ti=dfa5a000 task=dffefaa0 task.ti=dfa5a000) Nov 11 04:18:47 dearing kernel: Stack: d7d29240 d7d29248 dfa31380 00000296 c019656e c02d1840 c02d1844 c012ac34 Nov 11 04:18:47 dearing kernel: c01964bd 00000000 dfa31394 dfa31380 dfa3138c 00000000 c012b51e 00000001 Nov 11 04:18:47 dearing kernel: 00000000 dfa81f3c 00010000 00000000 00000000 dffefaa0 c011777c 00100100
Nov 11 04:18:47 dearing kernel: Call Trace:
Nov 11 04:18:47 dearing kernel:  [<c019656e>] key_cleanup+0xb1/0xca
Nov 11 04:18:47 dearing kernel:  [<c012ac34>] run_workqueue+0x78/0xb5
Nov 11 04:18:47 dearing kernel:  [<c01964bd>] key_cleanup+0x0/0xca
Nov 11 04:18:47 dearing kernel:  [<c012b51e>] worker_thread+0xd9/0x10b
Nov 11 04:18:47 dearing kernel:  [<c011777c>] default_wake_function+0x0/0xc
Nov 11 04:18:47 dearing kernel:  [<c012b445>] worker_thread+0x0/0x10b
Nov 11 04:18:47 dearing kernel:  [<c012d897>] kthread+0xc2/0xef
Nov 11 04:18:47 dearing kernel:  [<c012d7d5>] kthread+0x0/0xef
Nov 11 04:18:47 dearing kernel:  [<c0101005>] kernel_thread_helper+0x5/0xb
Nov 11 04:18:47 dearing kernel: Code: 4e 04 fc ff 55 57 56 53 89 c3 83 78 48 00 74 39 b8 b0 18 2d c0 e8 ef a4 0e 00 8b 53 4c 85 d2 74 1d 8d 4b 4c 39 ca 74 16 8b 41 04 <89> 4
2 04 89 10 c7 41 04 00 02 20 00 c7 43 4c 00 01 10 00 f0 81
Nov 11 04:18:47 dearing kernel: EIP: [<c0196a22>] keyring_destroy+0x27/0x77 SS:ESP 0068:dfa5bf58 Nov 11 04:20:03 dearing kernel: <1>BUG: unable to handle kernel NULL pointer dereference at virtual address 00000008
Nov 11 04:20:03 dearing kernel:  printing eip:
Nov 11 04:20:03 dearing kernel: c01b8f64
Nov 11 04:20:03 dearing kernel: *pde = 00000000
Nov 11 04:20:03 dearing kernel: Oops: 0000 [#2]
Nov 11 04:20:03 dearing kernel: SMP
Nov 11 04:20:03 dearing kernel: Modules linked in: reiserfs drbd ipv6 button ac battery loop tsdev sg e752x_edac intel_rng edac_mc shpchp pci_hotplug psmouse floppy serio_ra w evdev pcspkr rtc ext3 jbd mbcache dm_mirror dm_snapshot dm_mod raid1 md_mod ide_generic sd_mod ide_cd cdrom piix generic ide_core mptspi mptscsih mptbase scsi_transport_sp
i uhci_hcd ehci_hcd usbcore scsi_mod e1000 thermal processor fan
Nov 11 04:20:03 dearing kernel: CPU:    3
Nov 11 04:20:03 dearing kernel: EIP:    0060:[<c01b8f64>]    Not tainted VLI
Nov 11 04:20:03 dearing kernel: EFLAGS: 00010286   (2.6.18-1-686 #1)
Nov 11 04:20:03 dearing kernel: EIP is at __rb_rotate_left+0xc/0x50
Nov 11 04:20:03 dearing kernel: eax: d7d29ac8 ebx: d7d29ac8 ecx: d7d29248 edx: 00000000 Nov 11 04:20:03 dearing kernel: esi: dfb31e48 edi: c0377580 ebp: 00000000 esp: c9949ec8
Nov 11 04:20:03 dearing kernel: ds: 007b   es: 007b   ss: 0068
Nov 11 04:20:03 dearing kernel: Process smbd (pid: 27308, ti=c9948000 task=e255c000 task.ti=c9948000) Nov 11 04:20:03 dearing kernel: Stack: d7d29248 d7d29ac8 dfb317c8 c01b9084 c0377580 d7d2924c c9949f62 dfb31814 Nov 11 04:20:03 dearing kernel: c325f540 c01962df 000003ed c02d1880 00000000 dfb317c0 dfb317c0 0000001e Nov 11 04:20:03 dearing kernel: d0a886c0 d0a886c0 c9949f54 000003ed c0197090 ffffffff e255c000 1f3f0000
Nov 11 04:20:03 dearing kernel: Call Trace:
Nov 11 04:20:03 dearing kernel:  [<c01b9084>] rb_insert_color+0x8c/0xad
Nov 11 04:20:03 dearing kernel:  [<c01962df>] key_alloc+0x268/0x324
Nov 11 04:20:03 dearing kernel:  [<c0197090>] keyring_alloc+0x1e/0x4f
Nov 11 04:20:03 dearing kernel:  [<c0198512>] alloc_uid_keyring+0x33/0x8a
Nov 11 04:20:03 dearing kernel:  [<c0125b84>] alloc_uid+0xbc/0x144
Nov 11 04:20:03 dearing kernel:  [<c0128a9a>] set_user+0xb/0x8d
Nov 11 04:20:03 dearing kernel:  [<c012a3ab>] sys_setresuid+0x10c/0x1c0
Nov 11 04:20:03 dearing kernel:  [<c0102c7b>] syscall_call+0x7/0xb
Nov 11 04:20:03 dearing kernel: Code: 00 00 00 8b 45 04 83 c1 14 d3 e2 85 c2 75 05 09 d0 89 45 04 5a 89 f0 59 5b 5e 5f 5d c3 90 90 57 89 d7 56 53 89 c3 8b 50 04 8b 30 <8b> 4
a 08 83 e6 fc 85 c9 89 48 04 74 09 8b 01 83 e0 03 09 d8 89
Nov 11 04:20:03 dearing kernel: EIP: [<c01b8f64>] __rb_rotate_left+0xc/0x50 SS:ESP 0068:c9949ec8


Examining the code in question, it looks like the serial key/keyring tree is somehow corrupted, but it's not obvious how this happened or where the race might be. There was _some_ file copying going on, as I mentioned, but not a load situation I'd call anything more than trivial.

The system had to be rebooted after this, and the problem has not yet recurred. It's a Dell Poweredge 1850 with 2 physical CPUs and HT enabled.

I looked around pretty extensively online for any similar bug reports (vanilla kernel or debian), and found none, so I thought I should report it. It doesn't look like any of the Debian patches touch the key code, though. So this is probably upstream or broken hardware.


Any assistance appreciated, and anything I can do to help, I will.

Thanks in advance,

Matt Mitchell


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to