Hello.
Below bug hit me today when I closed one of many tabs in Chrome.
The kernel is from debian wheezy current kernel package:
linux-image-3.2.0-1-amd64 (v3.2.4).
Feb 18 11:28:38 debian kernel: [ 3392.815292] BUG: unable to handle
kernel NULL pointer dereference at 0000000000000010
Feb 18 11:28:38 debian kernel: [ 3392.815309] IP: [<ffffffff811581c3>]
exit_shm+0xa/0x54
Feb 18 11:28:38 debian kernel: [ 3392.815325] PGD 0
Feb 18 11:28:38 debian kernel: [ 3392.815331] Oops: 0000 [#1] SMP
Feb 18 11:28:38 debian kernel: [ 3392.815340] CPU 0
Feb 18 11:28:38 debian kernel: [ 3392.815343] Modules linked in:
pci_stub vboxpci(O) vboxnetadp(O) vboxnetflt(O) vboxdrv(O) powernow_k8
mperf cpufreq_stats cpufreq_conservative cpufreq_userspace
cpufreq_powersave parport_pc ppdev lp parport binfmt_misc nfsd nfs
lockd fscache auth_rpcgss nfs_acl sunrpc kvm_amd kvm fuse ext2 loop
snd_hda_codec_hdmi nvidia(P) snd_hda_intel snd_hda_codec snd_intel8x0
snd_hwdep snd_ac97_codec ac97_bus snd_pcm_oss snd_mixer_oss snd_pcm
snd_seq_midi snd_rawmidi snd_seq_midi_event snd_seq snd_timer
snd_seq_device snd k8temp pcspkr edac_core edac_mce_amd soundcore
evdev snd_page_alloc i2c_nforce2 i2c_core processor button ext3 jbd
mbcache btrfs zlib_deflate crc32c libcrc32c dm_mirror dm_region_hash
dm_log dm_mod usbhid hid sr_mod cdrom sd_mod crc_t10dif ohci_hcd
ata_generic ahci pata_amd libahci pata_jmicron sata_nv thermal fan
thermal_sys floppy ehci_hcd libata usbcore scsi_mod forcedeth
usb_common [last unloaded: scs i_wait_scan]
Feb 18 11:28:38 debian kernel: [ 3392.815476]
Feb 18 11:28:38 debian kernel: [ 3392.815483] Pid: 3806, comm: chrome
Tainted: P O 3.2.0-1-amd64 #1 Unknow Unknow/KN9
Series(NF-CK804)
Feb 18 11:28:38 debian kernel: [ 3392.815493] RIP:
0010:[<ffffffff811581c3>] [<ffffffff811581c3>] exit_shm+0xa/0x54
Feb 18 11:28:38 debian kernel: [ 3392.815504] RSP:
0018:ffff88012de61ce8 EFLAGS: 00010292
Feb 18 11:28:38 debian kernel: [ 3392.815509] RAX: 0000000000000000
RBX: ffff880130264300 RCX: 0000000000000008
Feb 18 11:28:38 debian kernel: [ 3392.815515] RDX: ffff88012e3b28c0
RSI: ffff88010ef96480 RDI: ffff880130264300
Feb 18 11:28:38 debian kernel: [ 3392.815520] RBP: 000000000000000f
R08: ffff88012c4a3818 R09: ffff88012c4a38c8
Feb 18 11:28:38 debian kernel: [ 3392.815526] R10: ffff88012c4a3a28
R11: ffff88010ef96480 R12: ffff88010ef96480
Feb 18 11:28:38 debian kernel: [ 3392.815531] R13: ffff88012fc56600
R14: 0000000000000001 R15: 000000000000413c
Feb 18 11:28:38 debian kernel: [ 3392.815538] FS:
00007f7610f2f700(0000) GS:ffff880137c00000(0000)
knlGS:0000000000000000
Feb 18 11:28:38 debian kernel: [ 3392.815544] CS: 0010 DS: 0000 ES:
0000 CR0: 000000008005003b
Feb 18 11:28:38 debian kernel: [ 3392.815549] CR2: 0000000000000010
CR3: 000000012e479000 CR4: 00000000000006f0
Feb 18 11:28:38 debian kernel: [ 3392.815556] DR0: 0000000000000000
DR1: 0000000000000000 DR2: 0000000000000000
Feb 18 11:28:38 debian kernel: [ 3392.815561] DR3: 0000000000000000
DR6: 00000000ffff0ff0 DR7: 0000000000000400
Feb 18 11:28:38 debian kernel: [ 3392.815568] Process chrome (pid:
3806, threadinfo ffff88012de60000, task ffff880131264300)
Feb 18 11:28:38 debian kernel: [ 3392.815572] Stack:
Feb 18 11:28:38 debian kernel: [ 3392.815576] 0000000000000000
ffff880130264300 000000000000000f ffffffff81049af5
Feb 18 11:28:38 debian kernel: [ 3392.815585] 000000000000192a
ffff88012de61d08 ffff880131264300 ffffffff817a8508
Feb 18 11:28:38 debian kernel: [ 3392.815594] 00007f7610f2e000
ffff88010ef96480 0000000000000944 000000000000000f
Feb 18 11:28:38 debian kernel: [ 3392.815604] Call Trace:
Feb 18 11:28:38 debian kernel: [ 3392.815616] [<ffffffff81049af5>] ?
do_exit+0x28b/0x732
Feb 18 11:28:38 debian kernel: [ 3392.815626] [<ffffffff8104a21c>] ?
do_group_exit+0x74/0x9e
Feb 18 11:28:38 debian kernel: [ 3392.815635] [<ffffffff81055b5b>] ?
get_signal_to_deliver+0x46d/0x48f
Feb 18 11:28:38 debian kernel: [ 3392.815644] [<ffffffff810cff30>] ?
handle_pte_fault+0x739/0x79f
Feb 18 11:28:38 debian kernel: [ 3392.815655] [<ffffffff8100ddd3>] ?
do_signal+0x38/0x610
Feb 18 11:28:38 debian kernel: [ 3392.815663] [<ffffffff81037e98>] ?
set_next_entity+0x32/0x55
Feb 18 11:28:38 debian kernel: [ 3392.815672] [<ffffffff8100d01d>] ?
paravirt_write_msr+0xb/0xe
Feb 18 11:28:38 debian kernel: [ 3392.815679] [<ffffffff8100d694>] ?
__switch_to+0x138/0x20e
Feb 18 11:28:38 debian kernel: [ 3392.815690] [<ffffffff8106f2dc>] ?
sys_futex+0x138/0x148
Feb 18 11:28:38 debian kernel: [ 3392.815698] [<ffffffff8100e3e1>] ?
do_notify_resume+0x25/0x68
Feb 18 11:28:38 debian kernel: [ 3392.815707] [<ffffffff813459e0>] ?
int_signal+0x12/0x17
Feb 18 11:28:38 debian kernel: [ 3392.815713] Code: 48 8d bd c0 00 00
00 48 89 ea 48 c7 c6 b8 7e 15 81 e8 e9 f6 04 00 48 89 df 5b 5b 5d e9
e9 a7 f0 ff 55 53 50 48 8b 87 78 04 00 00 <48> 8b 68 10 83 bd 98 00 00
00 00 74 39 48 8d 9d a0 00 00 00 48
Feb 18 11:28:38 debian kernel: [ 3392.815783] RIP
[<ffffffff811581c3>] exit_shm+0xa/0x54
Feb 18 11:28:38 debian kernel: [ 3392.815792] RSP <ffff88012de61ce8>
Feb 18 11:28:38 debian kernel: [ 3392.815795] CR2: 0000000000000010
Feb 18 11:28:38 debian kernel: [ 3392.815801] ---[ end trace
1bd7e5ff0e6f1b66 ]---
Feb 18 11:28:38 debian kernel: [ 3392.815807] Fixing recursive fault
but reboot is needed!
Relevant code:
void exit_shm(struct task_struct *task)
311 {
0xffffffff811581b9 <+0>: 55 push %rbp
0xffffffff811581ba <+1>: 53 push %rbx
0xffffffff811581bb <+2>: 50 push %rax
312 struct ipc_namespace *ns = task->nsproxy->ipc_ns;
0xffffffff811581bc <+3>: 48 8b 87 78 04 00 00 mov
0x478(%rdi),%rax /* task->nsproxy */
0xffffffff811581c3 <+10>: 48 8b 68 10 mov
0x10(%rax),%rbp /* ->ipc_ns */
313
314 if (shm_ids(ns).in_use == 0)
0xffffffff811581c7 <+14>: 83 bd 98 00 00 00 00 cmpl $0x0,0x98(%rbp)
0xffffffff811581ce <+21>: 74 39 je
0xffffffff81158209 <exit_shm+80>
315 return;
316
317 /* Destroy all already created segments, but not mapped yet */
318 down_write(&shm_ids(ns).rw_mutex);
0xffffffff811581d0 <+23>: 48 8d 9d a0 00 00 00 lea 0xa0(%rbp),%rbx
0xffffffff811581d7 <+30>: 48 89 df mov %rbx,%rdi
0xffffffff811581da <+33>: e8 08 7e 1e 00 callq
0xffffffff8133ffe7 <down_write>
...
So task->nsproxy was unexpectedly NULL atm.
The bug happened only once so far.
Regards.
--
Przemysław Pawełczyk
Hi Przemysław,
Thank you for the report!
(CC'ed Andrew and Oleg, overquoting for them the whole email)
On Sat, Feb 18, 2012 at 17:57 +0100, Przemysław Pawełczyk wrote:
> Hello.
>
> Below bug hit me today when I closed one of many tabs in Chrome.
> The kernel is from debian wheezy current kernel package:
> linux-image-3.2.0-1-amd64 (v3.2.4).
>
>
> Feb 18 11:28:38 debian kernel: [ 3392.815292] BUG: unable to handle
> kernel NULL pointer dereference at 0000000000000010
> Feb 18 11:28:38 debian kernel: [ 3392.815309] IP: [<ffffffff811581c3>]
> exit_shm+0xa/0x54
> Feb 18 11:28:38 debian kernel: [ 3392.815325] PGD 0
> Feb 18 11:28:38 debian kernel: [ 3392.815331] Oops: 0000 [#1] SMP
> Feb 18 11:28:38 debian kernel: [ 3392.815340] CPU 0
> Feb 18 11:28:38 debian kernel: [ 3392.815343] Modules linked in:
> pci_stub vboxpci(O) vboxnetadp(O) vboxnetflt(O) vboxdrv(O) powernow_k8
> mperf cpufreq_stats cpufreq_conservative cpufreq_userspace
> cpufreq_powersave parport_pc ppdev lp parport binfmt_misc nfsd nfs
> lockd fscache auth_rpcgss nfs_acl sunrpc kvm_amd kvm fuse ext2 loop
> snd_hda_codec_hdmi nvidia(P) snd_hda_intel snd_hda_codec snd_intel8x0
> snd_hwdep snd_ac97_codec ac97_bus snd_pcm_oss snd_mixer_oss snd_pcm
> snd_seq_midi snd_rawmidi snd_seq_midi_event snd_seq snd_timer
> snd_seq_device snd k8temp pcspkr edac_core edac_mce_amd soundcore
> evdev snd_page_alloc i2c_nforce2 i2c_core processor button ext3 jbd
> mbcache btrfs zlib_deflate crc32c libcrc32c dm_mirror dm_region_hash
> dm_log dm_mod usbhid hid sr_mod cdrom sd_mod crc_t10dif ohci_hcd
> ata_generic ahci pata_amd libahci pata_jmicron sata_nv thermal fan
> thermal_sys floppy ehci_hcd libata usbcore scsi_mod forcedeth
> usb_common [last unloaded: scs i_wait_scan]
> Feb 18 11:28:38 debian kernel: [ 3392.815476]
> Feb 18 11:28:38 debian kernel: [ 3392.815483] Pid: 3806, comm: chrome
> Tainted: P O 3.2.0-1-amd64 #1 Unknow Unknow/KN9
> Series(NF-CK804)
> Feb 18 11:28:38 debian kernel: [ 3392.815493] RIP:
> 0010:[<ffffffff811581c3>] [<ffffffff811581c3>] exit_shm+0xa/0x54
> Feb 18 11:28:38 debian kernel: [ 3392.815504] RSP:
> 0018:ffff88012de61ce8 EFLAGS: 00010292
> Feb 18 11:28:38 debian kernel: [ 3392.815509] RAX: 0000000000000000
> RBX: ffff880130264300 RCX: 0000000000000008
> Feb 18 11:28:38 debian kernel: [ 3392.815515] RDX: ffff88012e3b28c0
> RSI: ffff88010ef96480 RDI: ffff880130264300
> Feb 18 11:28:38 debian kernel: [ 3392.815520] RBP: 000000000000000f
> R08: ffff88012c4a3818 R09: ffff88012c4a38c8
> Feb 18 11:28:38 debian kernel: [ 3392.815526] R10: ffff88012c4a3a28
> R11: ffff88010ef96480 R12: ffff88010ef96480
> Feb 18 11:28:38 debian kernel: [ 3392.815531] R13: ffff88012fc56600
> R14: 0000000000000001 R15: 000000000000413c
> Feb 18 11:28:38 debian kernel: [ 3392.815538] FS:
> 00007f7610f2f700(0000) GS:ffff880137c00000(0000)
> knlGS:0000000000000000
> Feb 18 11:28:38 debian kernel: [ 3392.815544] CS: 0010 DS: 0000 ES:
> 0000 CR0: 000000008005003b
> Feb 18 11:28:38 debian kernel: [ 3392.815549] CR2: 0000000000000010
> CR3: 000000012e479000 CR4: 00000000000006f0
> Feb 18 11:28:38 debian kernel: [ 3392.815556] DR0: 0000000000000000
> DR1: 0000000000000000 DR2: 0000000000000000
> Feb 18 11:28:38 debian kernel: [ 3392.815561] DR3: 0000000000000000
> DR6: 00000000ffff0ff0 DR7: 0000000000000400
> Feb 18 11:28:38 debian kernel: [ 3392.815568] Process chrome (pid:
> 3806, threadinfo ffff88012de60000, task ffff880131264300)
> Feb 18 11:28:38 debian kernel: [ 3392.815572] Stack:
> Feb 18 11:28:38 debian kernel: [ 3392.815576] 0000000000000000
> ffff880130264300 000000000000000f ffffffff81049af5
> Feb 18 11:28:38 debian kernel: [ 3392.815585] 000000000000192a
> ffff88012de61d08 ffff880131264300 ffffffff817a8508
> Feb 18 11:28:38 debian kernel: [ 3392.815594] 00007f7610f2e000
> ffff88010ef96480 0000000000000944 000000000000000f
> Feb 18 11:28:38 debian kernel: [ 3392.815604] Call Trace:
> Feb 18 11:28:38 debian kernel: [ 3392.815616] [<ffffffff81049af5>] ?
> do_exit+0x28b/0x732
> Feb 18 11:28:38 debian kernel: [ 3392.815626] [<ffffffff8104a21c>] ?
> do_group_exit+0x74/0x9e
> Feb 18 11:28:38 debian kernel: [ 3392.815635] [<ffffffff81055b5b>] ?
> get_signal_to_deliver+0x46d/0x48f
> Feb 18 11:28:38 debian kernel: [ 3392.815644] [<ffffffff810cff30>] ?
> handle_pte_fault+0x739/0x79f
> Feb 18 11:28:38 debian kernel: [ 3392.815655] [<ffffffff8100ddd3>] ?
> do_signal+0x38/0x610
> Feb 18 11:28:38 debian kernel: [ 3392.815663] [<ffffffff81037e98>] ?
> set_next_entity+0x32/0x55
> Feb 18 11:28:38 debian kernel: [ 3392.815672] [<ffffffff8100d01d>] ?
> paravirt_write_msr+0xb/0xe
> Feb 18 11:28:38 debian kernel: [ 3392.815679] [<ffffffff8100d694>] ?
> __switch_to+0x138/0x20e
> Feb 18 11:28:38 debian kernel: [ 3392.815690] [<ffffffff8106f2dc>] ?
> sys_futex+0x138/0x148
> Feb 18 11:28:38 debian kernel: [ 3392.815698] [<ffffffff8100e3e1>] ?
> do_notify_resume+0x25/0x68
> Feb 18 11:28:38 debian kernel: [ 3392.815707] [<ffffffff813459e0>] ?
> int_signal+0x12/0x17
> Feb 18 11:28:38 debian kernel: [ 3392.815713] Code: 48 8d bd c0 00 00
> 00 48 89 ea 48 c7 c6 b8 7e 15 81 e8 e9 f6 04 00 48 89 df 5b 5b 5d e9
> e9 a7 f0 ff 55 53 50 48 8b 87 78 04 00 00 <48> 8b 68 10 83 bd 98 00 00
> 00 00 74 39 48 8d 9d a0 00 00 00 48
> Feb 18 11:28:38 debian kernel: [ 3392.815783] RIP
> [<ffffffff811581c3>] exit_shm+0xa/0x54
> Feb 18 11:28:38 debian kernel: [ 3392.815792] RSP <ffff88012de61ce8>
> Feb 18 11:28:38 debian kernel: [ 3392.815795] CR2: 0000000000000010
> Feb 18 11:28:38 debian kernel: [ 3392.815801] ---[ end trace
> 1bd7e5ff0e6f1b66 ]---
> Feb 18 11:28:38 debian kernel: [ 3392.815807] Fixing recursive fault
> but reboot is needed!
>
>
> Relevant code:
>
>
> void exit_shm(struct task_struct *task)
>
> 311 {
> 0xffffffff811581b9 <+0>: 55 push %rbp
> 0xffffffff811581ba <+1>: 53 push %rbx
> 0xffffffff811581bb <+2>: 50 push %rax
>
> 312 struct ipc_namespace *ns = task->nsproxy->ipc_ns;
> 0xffffffff811581bc <+3>: 48 8b 87 78 04 00 00 mov
> 0x478(%rdi),%rax /* task->nsproxy */
> 0xffffffff811581c3 <+10>: 48 8b 68 10 mov
> 0x10(%rax),%rbp /* ->ipc_ns */
>
> 313
> 314 if (shm_ids(ns).in_use == 0)
> 0xffffffff811581c7 <+14>: 83 bd 98 00 00 00 00 cmpl $0x0,0x98(%rbp)
> 0xffffffff811581ce <+21>: 74 39 je
> 0xffffffff81158209 <exit_shm+80>
>
> 315 return;
> 316
> 317 /* Destroy all already created segments, but not mapped yet */
> 318 down_write(&shm_ids(ns).rw_mutex);
> 0xffffffff811581d0 <+23>: 48 8d 9d a0 00 00 00 lea 0xa0(%rbp),%rbx
> 0xffffffff811581d7 <+30>: 48 89 df mov %rbx,%rdi
> 0xffffffff811581da <+33>: e8 08 7e 1e 00 callq
> 0xffffffff8133ffe7 <down_write>
> ...
>
>
> So task->nsproxy was unexpectedly NULL atm.
> The bug happened only once so far.
I'm confused. How ->nsproxy can be NULL in do_exit()? AFAIU, it is not a
special process (i.e. init or udev), but a common chrome process.
Could it be missing get_nsproxy() somewhere? And as a result, freed
current->nsproxy while still having active users.
--
Vasiliy Kulikov
http://www.openwall.com - bringing security into open computing environments
On Sat, Feb 18, 2012 at 09:39:50PM +0400, Vasiliy Kulikov wrote:
...
> >
> > So task->nsproxy was unexpectedly NULL atm.
> > The bug happened only once so far.
>
> I'm confused. How ->nsproxy can be NULL in do_exit()? AFAIU, it is not a
> special process (i.e. init or udev), but a common chrome process.
>
> Could it be missing get_nsproxy() somewhere? And as a result, freed
> current->nsproxy while still having active users.
>
Probably it would worth to repeat this issue without proprientary
drivers loaded. Also I wonder why don't we use rcu_assign_pointer
for nsproxy in copy_namespaces.
Cyrill
A few minutes ago I was closing a tab in Chrome and I heard BEEP!
This time my mouse and keyboard stopped responding in X, have to ssh
from notebook to read log.
(I was using Synergy today, so maybe it is related.)
[14498.686122] chrome[2336] general protection ip:21cafad51d9a
sp:7fff74f13410 error:0
[14519.038834] BUG: Bad page map in process chrome
pte:800000010238c067 pmd:12de61067
[14519.038849] page:ffffea000387c6a0 count:0 mapcount:-1 mapping:
(null) index:0x23bd65b39
[14519.038855] page flags: 0x200000000000014(referenced|dirty)
[14519.038866] addr:00007fecb619c000 vm_flags:080000fb anon_vma:
(null) mapping:ffff8800802b11d8 index:2ae
[14519.038879] vma->vm_ops->fault: shm_fault+0x0/0x18
[14519.038886] vma->vm_file->f_op->mmap: shm_mmap+0x0/0x55
[14519.038894] Pid: 9108, comm: chrome Tainted: P B O 3.2.0-1-amd64 #1
[14519.038899] Call Trace:
[14519.038913] [<ffffffff810cd3d5>] ? print_bad_pte+0x1a5/0x1bd
[14519.038920] [<ffffffff810cd035>] ? pte_pfn+0x5/0xe
[14519.038928] [<ffffffff810ceff6>] ? unmap_vmas+0x49f/0x694
[14519.038936] [<ffffffff81036d5f>] ? cpumask_next+0x16/0x18
[14519.038946] [<ffffffff810d4297>] ? exit_mmap+0x93/0xe1
[14519.038956] [<ffffffff810446e2>] ? mmput+0x56/0xf8
[14519.038964] [<ffffffff8104985f>] ? exit_mm+0x117/0x122
[14519.038975] [<ffffffff81340732>] ? _raw_spin_lock_irq+0xa/0x14
[14519.038983] [<ffffffff81049ab0>] ? do_exit+0x246/0x732
[14519.038992] [<ffffffff8104a21c>] ? do_group_exit+0x74/0x9e
[14519.039001] [<ffffffff81055b5b>] ? get_signal_to_deliver+0x46d/0x48f
[14519.039012] [<ffffffff8100ddd3>] ? do_signal+0x38/0x610
[14519.039024] [<ffffffff8106f2dc>] ? sys_futex+0x138/0x148
[14519.039032] [<ffffffff8100e3e1>] ? do_notify_resume+0x25/0x68
[14519.039041] [<ffffffff813459e0>] ? int_signal+0x12/0x17
[14519.061778] ------------[ cut here ]------------
[14519.061786] kernel BUG at
/home/blank/debian/kernel/release/linux-2.6/linux-2.6-3.2.4/debian/build/source_amd64_none/mm/filemap.c:135!
[14519.061789] invalid opcode: 0000 [#1] SMP
[14519.061792] CPU 1
[14519.061793] Modules linked in: pci_stub vboxpci(O) vboxnetadp(O)
vboxnetflt(O) vboxdrv(O) powernow_k8 mperf cpufreq_stats
cpufreq_conservative cpufreq_userspace cpufreq_powersave parport_pc
ppdev lp parport binfmt_misc nfsd nfs lockd fscache auth_rpcgss
nfs_acl sunrpc kvm_amd kvm fuse ext2 loop snd_hda_codec_hdmi
snd_hda_intel snd_hda_codec snd_intel8x0 snd_ac97_codec ac97_bus
snd_hwdep nvidia(P) snd_pcm_oss snd_mixer_oss snd_pcm snd_seq_midi
k8temp snd_rawmidi snd_seq_midi_event snd_seq evdev pcspkr edac_core
edac_mce_amd i2c_nforce2 snd_timer snd_seq_device i2c_core snd
soundcore snd_page_alloc processor button ext3 jbd mbcache btrfs
zlib_deflate crc32c libcrc32c dm_mirror dm_region_hash dm_log usbhid
dm_mod sr_mod hid cdrom sd_mod crc_t10dif ohci_hcd ata_generic ahci
libahci pata_jmicron sata_nv pata_amd thermal floppy libata fan
thermal_sys ehci_hcd forcedeth scsi_mod usbcore usb_common [last
unloaded: scsi_wait_scan]
[14519.061852]
[14519.061855] Pid: 2171, comm: Xorg Tainted: P B O
3.2.0-1-amd64 #1 Unknow Unknow/KN9 Series(NF-CK804)
[14519.061859] RIP: 0010:[<ffffffff810b4473>] [<ffffffff810b4473>]
__delete_from_page_cache+0x5b/0xc8
[14519.061868] RSP: 0018:ffff88012f50dc28 EFLAGS: 00010046
[14519.061870] RAX: 0000000000000000 RBX: ffffea00038b46a0 RCX: 00000000fffffff0
[14519.061872] RDX: 0000000000000017 RSI: 0000000000000017 RDI: 00000000fffffff4
[14519.061875] RBP: ffff8800802b11d8 R08: 000000000000002e R09: 0000000000000002
[14519.061877] R10: 000000000000000d R11: 000000000000000d R12: ffff8800802b11f0
[14519.061879] R13: 0000000000000000 R14: ffffffffffffffff R15: 0000000000000000
[14519.061882] FS: 00007f589e4be880(0000) GS:ffff880137d00000(0000)
knlGS:0000000000000000
[14519.061885] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[14519.061887] CR2: 00007f6fec16b548 CR3: 000000012f725000 CR4: 00000000000006e0
[14519.061890] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[14519.061892] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[14519.061895] Process Xorg (pid: 2171, threadinfo ffff88012f50c000,
task ffff88013133d200)
[14519.061897] Stack:
[14519.061898] 000000000000000d ffffea00038b46a0 0000000000000000
ffffffff810b45e3
[14519.061902] ffffea00038b46a0 ffff8800802b11d8 ffff8800802b11d8
ffffffff810bda39
[14519.061906] 00000000000002bb ffff8800802b1098 00000000000002ae
ffffffff810c6451
[14519.061910] Call Trace:
[14519.061914] [<ffffffff810b45e3>] ? delete_from_page_cache+0x31/0x57
[14519.061919] [<ffffffff810bda39>] ? truncate_inode_page+0x65/0x6b
[14519.061924] [<ffffffff810c6451>] ? shmem_truncate_range+0x110/0x355
[14519.061928] [<ffffffff810c67b7>] ? shmem_evict_inode+0x48/0xd7
[14519.061932] [<ffffffff8110b1f8>] ? evict+0x96/0x148
[14519.061937] [<ffffffff81108613>] ? dentry_kill+0x10f/0x12b
[14519.061940] [<ffffffff8110886a>] ? dput+0xe2/0xee
[14519.061943] [<ffffffff810f99c2>] ? fput+0x17a/0x1a1
[14519.061947] [<ffffffff810d2ec8>] ? remove_vma+0x3a/0x6b
[14519.061950] [<ffffffff810d40a7>] ? do_munmap+0x2da/0x2f3
[14519.061955] [<ffffffff81158b72>] ? sys_shmdt+0x97/0x121
[14519.061960] [<ffffffff81345712>] ? system_call_fastpath+0x16/0x1b
[14519.061962] Code: be 09 00 00 00 48 89 df e8 4e 54 01 00 48 8b 03
a9 00 00 08 00 74 0d be 17 00 00 00 48 89 df e8 37 54 01 00 8b 43 18
85 c0 78 02 <0f> 0b 48 8b 03 a8 10 74 5f 48 8b 85 80 00 00 00 f6 40 20
01 75
[14519.061991] RIP [<ffffffff810b4473>] __delete_from_page_cache+0x5b/0xc8
[14519.061995] RSP <ffff88012f50dc28>
[14519.061998] ---[ end trace 2d2427cb6602dc70 ]---
Regards.
--
Przemysław Pawełczyk
On Sun, Feb 19, 2012 at 08:40:42PM +0100, Przemysław Pawełczyk wrote:
> A few minutes ago I was closing a tab in Chrome and I heard BEEP!
> This time my mouse and keyboard stopped responding in X, have to ssh
> from notebook to read log.
> (I was using Synergy today, so maybe it is related.)
>
>
Hi Przemysław, I'm not -mm expert, so I fear I can't help much in
-mm related issues, but if I were you I would try to catch this problem
with nvidia module unloaded and on vanilla kernel (this is debian one,
right?).
Cyrill
On Mon, Feb 20, 2012 at 00:19 +0400, Cyrill Gorcunov wrote:
> On Sun, Feb 19, 2012 at 08:40:42PM +0100, Przemysław Pawełczyk wrote:
> > A few minutes ago I was closing a tab in Chrome and I heard BEEP!
> > This time my mouse and keyboard stopped responding in X, have to ssh
> > from notebook to read log.
> > (I was using Synergy today, so maybe it is related.)
> >
> >
>
> Hi Przemysław, I'm not -mm expert, so I fear I can't help much in
> -mm related issues, but if I were you I would try to catch this problem
> with nvidia module unloaded and on vanilla kernel (this is debian one,
> right?).
Both nvidia and vbox modules. VirtualBox is known to be buggy.
Thanks,
--
Vasiliy Kulikov
http://www.openwall.com - bringing security into open computing environments