Bug 5750

Summary: NULL POINTER oops after CIFS automount
Product: File System Reporter: Ren (rkrell)
Component: OtherAssignee: Steve French (sfrench)
Status: REJECTED INVALID    
Severity: normal CC: bunk
Priority: P2    
Hardware: i386   
OS: Linux   
Kernel Version: 2.6.15-4 Subsystem:
Regression: --- Bisected commit-id:

Description Ren 2005-12-16 01:21:46 UTC 
Most recent kernel where this bug did not occur: n/a    
  
Distribution: SuSE Linux 10.0    
  
Hardware Environment: hwinfo --short  
cpu:  
                       Intel(R) Pentium(R) 4 CPU 2.80GHz, 2793 MHz  
keyboard:  
  /dev/input/event1    AT Translated Set 2 keyboard  
mouse:  
  /dev/input/mice      ImPS/2 Generic Wheel Mouse  
monitor:  
                       Generic Monitor  
graphics card:  
                       Micro-Star International 865 G  
sound:  
                       Micro-Star International 82801EB/ER (ICH5/ICH5R) AC'97  
Audio Controller  
storage:  
                       Floppy disk controller  
                       Micro-Star International 865PE Neo2 (MS-6728)  
network:  
  eth0                 Micro-Star International RTL-8139/8139C/8139C+  
network interface:  
  eth0                 Ethernet network interface  
  lo                   Loopback network interface  
  sit0                 Network Interface  
disk:  
  /dev/disk/by-id/ata-Maxtor_6E040L0_E1QFAN6E Maxtor 6E040L0  
partition:  
  /dev/disk/by-id/ata-Maxtor_6E040L0_E1QFAN6E-part1 Partition  
  /dev/disk/by-id/ata-Maxtor_6E040L0_E1QFAN6E-part2 Partition  
cdrom:  
  /dev/disk/by-path/pci-0000:00:1f.1-ide-1:0 PHILIPS PCDV6116  
usb controller:  
                       Micro-Star International 865PE Neo2 (MS-6728)  
                       Micro-Star International 865PE Neo2 (MS-6728)  
                       Micro-Star International 865PE Neo2 (MS-6728)  
                       Micro-Star International 865PE Neo2 (MS-6728)  
                       Micro-Star International 865PE Neo2 (MS-6728)  
bios:  
                       BIOS  
bridge:  
                       Micro-Star International 82865G/PE/P DRAM  
Controller/Host-Hub Interface  
                       Intel 82801 PCI Bridge  
                       Intel 82801EB/ER (ICH5/ICH5R) LPC Interface Bridge  
hub:  
                       Linux 2.6.13-15.7-default uhci_hcd UHCI Host Controller  
                       Linux 2.6.13-15.7-default uhci_hcd UHCI Host Controller  
                       Linux 2.6.13-15.7-default uhci_hcd UHCI Host Controller  
                       Linux 2.6.13-15.7-default uhci_hcd UHCI Host Controller  
                       Linux 2.6.13-15.7-default ehci_hcd EHCI Host Controller  
memory:  
                       Main Memory  
unknown:  
                       FPU  
                       DMA controller  
                       PIC  
                       Timer  
                       RTC  
                       Keyboard controller  
  /dev/lp0             Parallel controller  
                       PS/2 Controller  
                       Micro-Star International 865PE Neo2 (MS-6728)  
                       PnP Unclassified device  
                       Unclassified device  
                       PnP Unclassified device  
                       PnP Unclassified device  
                       PnP Unclassified device  
                       PnP Unclassified device  
                       PnP Unclassified device  
                       PnP Unclassified device  
                       PnP Unclassified device  
                       PnP Unclassified device  
                       PnP Unclassified device  
                       PnP Unclassified device  
  /dev/ttyS0           16550A  
  /dev/ttyS1           16550A  
  
Software Environment:  
samba-3.0.20b (compiled for SuSE 10.0) 
autofs-4.1.4-6 
krusader-1.70.0_0.2-1.guru.suse100.kde34 
 
Problem Description: 
The following problem occured repeatedly on different kernels of version 
2.6.13. During work (KDE, krusader) at first the keyboard freezes (no input 
accepted) and the system remains hanging on manual shutdown. Each time this 
occurs a /var/log/messages very similar to that below occurs - some 
automount/cifs entries and the NULL POINTER dereference: 
-- 
Dec 16 09:31:16 charlie automount[6717]: >> Domain=[LION] OS=[Windows 5.0]    
Server=[Windows 2000 LAN Manager]    
Dec 16 09:31:16 charlie automount[6717]: >> Domain=[LION] OS=[Windows 5.0]    
Server=[Windows 2000 LAN Manager]    
Dec 16 09:31:16 charlie kernel:  CIFS VFS: cifs_mount failed w/return code = -2    
Dec 16 09:31:16 charlie automount[6717]: >> mount error 2 = No such file or    
directory    
Dec 16 09:31:16 charlie automount[6717]: >> Refer to the mount.cifs(8) manual    
page (e.g.man mount.cifs)    
Dec 16 09:31:16 charlie automount[6717]: mount(generic): failed to    
mount //lion/koch (type cifs) on /mnt/samba/lion/koch    
Dec 16 09:31:16 charlie automount[6717]: >> mount error 20 = Not a directory    
Dec 16 09:31:16 charlie automount[6717]: >> Refer to the mount.cifs(8) manual    
page (e.g.man mount.cifs)    
Dec 16 09:31:16 charlie automount[6717]: mount(generic): failed to    
mount //lion/dfsroot (type cifs) on /mnt/samba/lion/dfsroot    
Dec 16 09:31:44 charlie kernel: Unable to handle kernel NULL pointer    
dereference at virtual address 00000000    
Dec 16 09:31:44 charlie kernel:  printing eip:    
Dec 16 09:31:44 charlie kernel: c01445e6    
Dec 16 09:31:44 charlie kernel: *pde = 00000000    
Dec 16 09:31:44 charlie kernel: Oops: 0002 [#1]    
Dec 16 09:31:44 charlie kernel: Modules linked in: nls_utf8 cifs ipt_pkttype    
ipt_LOG ipt_limit speedstep_lib freq_table autofs4 snd_pcm_oss snd_mixer_oss    
snd_seq snd_seq_device bu    
tton battery ac af_packet edd ip6t_REJECT ipt_REJECT ipt_state iptable_mangle    
iptable_nat iptable_filter 8139too mii ip6table_mangle ip_conntrack shpchp    
pci_hotplug ip_tables snd_    
intel8x0 snd_ac97_codec snd_ac97_bus ehci_hcd i2c_i801 i2c_core snd_pcm    
snd_timer snd soundcore snd_page_alloc uhci_hcd intel_agp agpgart generic    
usbcore ip6table_filter ip6_table    
s ipv6 parport_pc lp parport dm_mod ext3 jbd fan thermal ide_cd cdrom processor    
piix ide_disk ide_core    
Dec 16 09:31:44 charlie kernel: CPU:    0    
Dec 16 09:31:44 charlie kernel: EIP:    0060:[<c01445e6>]    Tainted: G     X    
VLI    
Dec 16 09:31:44 charlie kernel: EFLAGS: 00010002   (2.6.13-15.7-default)    
Dec 16 09:31:44 charlie kernel: EIP is at free_block+0x66/0xd0    
Dec 16 09:31:44 charlie kernel: eax: 00000000   ebx: f0e27b40   ecx: d9e41000      
edx: f776e9a0    
Dec 16 09:31:44 charlie kernel: esi: dffff780   edi: 00000003   ebp: 00000005      
esp: dfe27f38    
Dec 16 09:31:44 charlie kernel: ds: 007b   es: 007b   ss: 0068    
Dec 16 09:31:44 charlie kernel: Process events/0 (pid: 3, threadinfo=dfe26000    
task=dfe41020)    
Dec 16 09:31:44 charlie kernel: Stack: dfffc110 dfffc110 dfffc100 00000005    
dffff780 c0144a63 dffff780 dffff7f0    
Dec 16 09:31:44 charlie kernel:        00000000 dffff89c c0144b2b c0417624    
00000202 00000000 dfffb680 c012a5e9    
Dec 16 09:31:44 charlie kernel:        dfffb688 dfffb690 dfffb698 dfe26000    
c0144ad0 00000001 00000000 c01195c7    
Dec 16 09:31:44 charlie kernel: Call Trace:    
Dec 16 09:31:44 charlie kernel:  [<c0144a63>] drain_array_locked+0x43/0xb0    
Dec 16 09:31:44 charlie kernel:  [<c0144b2b>] cache_reap+0x5b/0x120    
Dec 16 09:31:44 charlie kernel:  [<c012a5e9>] worker_thread+0x169/0x200    
Dec 16 09:31:44 charlie kernel:  [<c0144ad0>] cache_reap+0x0/0x120    
Dec 16 09:31:44 charlie kernel:  [<c01195c7>] __wake_up_common+0x37/0x60    
Dec 16 09:31:44 charlie kernel:  [<c0119580>] default_wake_function+0x0/0x10    
Dec 16 09:31:44 charlie kernel:  [<c012a480>] worker_thread+0x0/0x200    
Dec 16 09:31:44 charlie kernel:  [<c012dc35>] kthread+0x85/0x90    
Dec 16 09:31:44 charlie kernel:  [<c012dbb0>] kthread+0x0/0x90    
Dec 16 09:31:44 charlie kernel:  [<c01012f1>] kernel_thread_helper+0x5/0x14    
Dec 16 09:31:44 charlie kernel: Code: 53 04 47 39 fd 74 6e 8b 04 24 8b 15 70 cb    
41 c0 8b 0c b8 8d 81 00 00 00 40 c1 e8 0c c1 e0 05 8b 5c 10 1c 8b 13 8b 43 04    
89 42 04 <89> 10 8b 4    
3 0c c7 03 00 01 10 00 29 c1 c7 43 04 00 02 20 00 89    
-- 
 
Steps to reproduce:      
The problem occurs by accident, appearantly on auto-mounting by CIFS some  
shares. Sorry :-(
Comment 1 Adrian Bunk 2005-12-16 04:14:06 UTC 
Can you check whether this problem is still present in kernel 2.6.15-rc5?
Comment 2 Ren 2005-12-16 07:47:46 UTC 
Not so quickly, sorry. I work with a productive system and cannot risk this at 
the moment. Last time I tried different kernels here I had a broken file system 
as a result. 
I will try to provide you this information as soon as possible, if there is no 
other way how to figure it out. 
Thanx for the quick reply.
Comment 3 Ren 2005-12-19 08:53:33 UTC 
I made the following upgrades to SuSE 10.0 an will provide news if available:   
- kernel-default-2.6.15_rc5_git3-2.i586.rpm  
- kernel-default-nongpl-2.6.15_rc5_git3-2.i586.rpm  
- resmgr-0.9.8_SVNr65-2.i586.rpm  
- hal-resmgr-0.1_SVNr64-2.i586.rpm  
(Source: ftp.opensuse.org / ftp.suse.com) 
 
Further comment: 
I'm not sure, but if the CIFS automount was the reason for crashing, then might 
be of interest that on the Windows 2000 computer was a Distributed File System 
service running which might have confused samba (dfsroot). 
 
I'll watch it.
Comment 4 Ren 2006-01-08 23:48:10 UTC 
Hello Adrian, to answer your request, the problem occured right now in version    
2.6.15-rc5-git3, too. I changed it in SUBJ. Obviously immediately after   
auto-mounting a Windows share by CIFS.   
SuSE version is 2.6.15-rc5-git3-2-default.   
Samba: samba-3.0.20b-3.1   
   
See /var/log/messages:    
    
Jan  9 08:40:46 charlie automount[5431]: >> mount error 20 = Not a directory     
Jan  9 08:40:46 charlie automount[5431]: >> Refer to the mount.cifs(8) manual     
page (e.g.man mount.cifs)     
Jan  9 08:40:46 charlie automount[5431]: mount(generic): failed to     
mount //lion/export (type cifs) on /mnt/samba/lion_export     
Jan  9 08:40:47 charlie automount[5442]: >> mount error 20 = Not a directory     
Jan  9 08:40:47 charlie automount[5442]: >> Refer to the mount.cifs(8) manual     
page (e.g.man mount.cifs)     
Jan  9 08:40:47 charlie automount[5442]: mount(generic): failed to     
mount //lion/export (type cifs) on /mnt/samba/lion_export     
Jan  9 08:40:47 charlie kernel:  CIFS VFS: cifs_mount failed w/return code = -6     
Jan  9 08:40:47 charlie kernel:  CIFS VFS: cifs_mount failed w/return code = -6     
Jan  9 08:40:47 charlie automount[5448]: >> retrying with upper case share name     
Jan  9 08:40:47 charlie automount[5448]: >> mount error 6 = No such device or     
address     
Jan  9 08:40:47 charlie automount[5448]: >> Refer to the mount.cifs(8) manual     
page (e.g.man mount.cifs)     
Jan  9 08:40:47 charlie automount[5448]: mount(generic): failed to     
mount //lion/export/.directory (type cifs) on /mnt/samba/lion_export/.directory     
Jan  9 08:42:03 charlie kernel: Unable to handle kernel NULL pointer     
dereference at virtual address 00000004     
Jan  9 08:42:03 charlie kernel:  printing eip:     
Jan  9 08:42:03 charlie kernel: c0143b4e     
Jan  9 08:42:03 charlie kernel: *pde = 00000000     
Jan  9 08:42:03 charlie kernel: Oops: 0002 [#1]     
Jan  9 08:42:03 charlie kernel: Modules linked in: cifs nls_cp850 nls_utf8     
smbfs bluetooth ipt_pkttype ipt_LOG ipt_limit autofs4 speedstep_lib freq_table     
snd_pcm_oss snd_mixer_oss     
 snd_seq snd_seq_device button battery ac af_packet edd i8xx_tco snd_intel8x0     
8139too snd_ac97_codec mii ehci_hcd snd_ac97_bus i2c_i801 i2c_core shpchp     
snd_pcm snd_timer snd sound     
core snd_page_alloc generic pci_hotplug intel_agp agpgart uhci_hcd usbcore     
ip6t_REJECT ipt_REJECT ipt_state iptable_mangle iptable_nat ip_nat     
iptable_filter ip6table_mangle ip_con     
ntrack nfnetlink ip_tables ip6table_filter ip6_tables ipv6 parport_pc lp     
parport dm_mod ext3 jbd fan thermal ide_cd cdrom processor piix ide_disk     
ide_core     
Jan  9 08:42:03 charlie kernel: CPU:    0     
Jan  9 08:42:03 charlie kernel: EIP:    0060:[<c0143b4e>]    Tainted: G     U     
VLI     
Jan  9 08:42:03 charlie kernel: EFLAGS: 00010002   (2.6.15-rc5-git3-2-default)     
Jan  9 08:42:03 charlie kernel: EIP is at free_block+0x6e/0xf0     
Jan  9 08:42:03 charlie kernel: eax: 00000000   ebx: eac3a7a0   ecx: da90c000       
edx: 00000000     
Jan  9 08:42:03 charlie kernel: esi: dfffde40   edi: dfffff80   ebp: 00000000       
esp: c18f1f04     
Jan  9 08:42:03 charlie kernel: ds: 007b   es: 007b   ss: 0068     
Jan  9 08:42:03 charlie kernel: Process events/0 (pid: 3, threadinfo=c18f0000     
task=dfe41030)     
Jan  9 08:42:03 charlie kernel: Stack: 00000001 dfffca90 dfffca90 00000001     
dfffca80 00000000 c0144141 00000000     
Jan  9 08:42:03 charlie kernel:        dfffff80 dfffffcc dfffff80 dfffde40     
00000001 c01441f1 00000000 dfffde10     
Jan  9 08:42:03 charlie kernel:        c03d0664 dfe43700 00000202 00000000     
c0129245 dfe43708 dfe43710 dfe43718     
Jan  9 08:42:03 charlie kernel: Call Trace:     
Jan  9 08:42:03 charlie kernel:  [<c0144141>] drain_array_locked+0x41/0x90     
Jan  9 08:42:04 charlie kernel:  [<c01441f1>] cache_reap+0x61/0x130     
Jan  9 08:42:04 charlie kernel:  [<c0129245>] worker_thread+0x195/0x230     
Jan  9 08:42:04 charlie kernel:  [<c0144190>] cache_reap+0x0/0x130     
Jan  9 08:42:04 charlie kernel:  [<c02c0df7>] schedule+0x307/0x5c0     
Jan  9 08:42:04 charlie kernel:  [<c0118af0>] default_wake_function+0x0/0x10     
Jan  9 08:42:04 charlie kernel:  [<c01290b0>] worker_thread+0x0/0x230     
Jan  9 08:42:04 charlie kernel:  [<c012c815>] kthread+0x85/0x90     
Jan  9 08:42:04 charlie kernel:  [<c012c790>] kthread+0x0/0x90     
Jan  9 08:42:04 charlie kernel:  [<c01012f9>] kernel_thread_helper+0x5/0xc     
Jan  9 08:42:04 charlie kernel: Code: 00 8b 44 24 04 8b 15 b0 5b 3d c0 8b 0c a8     
8d 81 00 00 00 40 c1 e8 0c c1 e0 05 8b 5c 10 1c 8b 44 24 1c 8b 13 8b 74 87 14     
8b 43 04 <89> 42 04 c7 43 04 00 02 20 00 89 10 c7 03 00 01 10 00 8b 43 0c
Comment 5 Ren 2006-01-08 23:55:23 UTC 
I already mentioned one fact that might help to reproduce the error:  
The CIFS mount in the log file /mnt/samba/lion_export tries to mount 
smb://lion/export, which is a Windows DFS root (Distributed File System on 
Windows 2000 Professional).
Comment 6 Ren 2006-01-12 05:48:10 UTC 
Again, again, and again.... Sorry for repeating.
The null pointer dereference mentioned above can be seen and freezes the SuSE
Linux 10.0 system based on Kernel v2.6.15-rc6-git2 (from the upcoming 10.1),
too. Again with failed CIFS mounts in front.

SuSE 10.0 versions:
- kernel-default-2.6.15-rc6-git2-2-default
- samba-3.0.21a-1.1.0

/var/log/messages:
-------------------------------------------------------------
Jan 12 14:27:27 charlie automount[13471]: >> mount error 20 = Not a directory
Jan 12 14:27:27 charlie automount[13471]: >> Refer to the mount.cifs(8) manual
page (e.g.man mount.cifs)
Jan 12 14:27:27 charlie syslog-ng[3240]: Changing permissions on special file
/dev/xconsole
Jan 12 14:27:27 charlie syslog-ng[3240]: Changing permissions on special file
/dev/tty10
Jan 12 14:27:27 charlie automount[13471]: mount(generic): failed to mount
//lion/export (type cifs) on /mnt/samba/lion_export
Jan 12 14:27:27 charlie kernel:  CIFS VFS: cifs_mount failed w/return code = -6
Jan 12 14:27:27 charlie kernel:  CIFS VFS: cifs_mount failed w/return code = -6
Jan 12 14:27:27 charlie automount[13477]: >> retrying with upper case share name
Jan 12 14:27:27 charlie automount[13477]: >> mount error 6 = No such device or
address
Jan 12 14:27:27 charlie automount[13477]: >> Refer to the mount.cifs(8) manual
page (e.g.man mount.cifs)
Jan 12 14:27:27 charlie automount[13477]: mount(generic): failed to mount
//lion/export/_demo (type cifs) on /mnt/samba/lion_export/_demo
Jan 12 14:27:28 charlie kernel:  CIFS VFS: cifs_mount failed w/return code = -6
Jan 12 14:27:28 charlie kernel:  CIFS VFS: cifs_mount failed w/return code = -6
Jan 12 14:27:28 charlie automount[13484]: >> retrying with upper case share name
Jan 12 14:27:28 charlie automount[13484]: >> mount error 6 = No such device or
address
Jan 12 14:27:28 charlie automount[13484]: >> Refer to the mount.cifs(8) manual
page (e.g.man mount.cifs)
Jan 12 14:27:28 charlie automount[13484]: mount(generic): failed to mount
//lion/export/_demo/autoinstall (type cifs) on
/mnt/samba/lion_export/_demo/autoinstall
Jan 12 14:27:28 charlie kernel:  CIFS VFS: cifs_mount failed w/return code = -6
Jan 12 14:27:28 charlie kernel:  CIFS VFS: cifs_mount failed w/return code = -6
Jan 12 14:27:28 charlie automount[13490]: >> retrying with upper case share name
Jan 12 14:27:28 charlie automount[13490]: >> mount error 6 = No such device or
address
Jan 12 14:27:28 charlie automount[13490]: >> Refer to the mount.cifs(8) manual
page (e.g.man mount.cifs)
Jan 12 14:27:28 charlie automount[13490]: mount(generic): failed to mount
//lion/export/_demo/autoinstall/v1.2 (type cifs) on
/mnt/samba/lion_export/_demo/autoinstall/v1.2
Jan 12 14:27:28 charlie kernel:  CIFS VFS: cifs_mount failed w/return code = -6
Jan 12 14:27:28 charlie kernel:  CIFS VFS: cifs_mount failed w/return code = -6
Jan 12 14:27:28 charlie automount[13496]: >> retrying with upper case share name
Jan 12 14:27:28 charlie automount[13496]: >> mount error 6 = No such device or
address
Jan 12 14:27:28 charlie automount[13496]: >> Refer to the mount.cifs(8) manual
page (e.g.man mount.cifs)
Jan 12 14:27:28 charlie automount[13496]: mount(generic): failed to mount
//lion/export/_demo/autoinstall/v1.2/gk-autoinstall-readme-1.2 (type cifs) on
/mnt/samba/lion_export/_demo/autoinstall/v1.2/gk-autoinstall-readme-1.2
Jan 12 14:27:28 charlie kernel:  CIFS VFS: cifs_mount failed w/return code = -6
Jan 12 14:27:29 charlie kernel:  CIFS VFS: cifs_mount failed w/return code = -6
Jan 12 14:27:29 charlie automount[13502]: >> retrying with upper case share name
Jan 12 14:27:29 charlie automount[13502]: >> mount error 6 = No such device or
address
Jan 12 14:27:29 charlie automount[13502]: >> Refer to the mount.cifs(8) manual
page (e.g.man mount.cifs)
Jan 12 14:27:29 charlie automount[13502]: mount(generic): failed to mount
//lion/export/_demo/autoinstall/v1.2/gk-autoinstall-readme-1.2 (type cifs) on
/mnt/samba/lion_export/_demo/autoinstall/v1.2/gk-autoinstall-readme-1.2
Jan 12 14:27:29 charlie kernel:  CIFS VFS: cifs_mount failed w/return code = -6
Jan 12 14:27:29 charlie kernel:  CIFS VFS: cifs_mount failed w/return code = -6
Jan 12 14:27:29 charlie automount[13508]: >> retrying with upper case share name
Jan 12 14:27:29 charlie automount[13508]: >> mount error 6 = No such device or
address
Jan 12 14:27:29 charlie automount[13508]: >> Refer to the mount.cifs(8) manual
page (e.g.man mount.cifs)
Jan 12 14:27:29 charlie automount[13508]: mount(generic): failed to mount
//lion/export/_demo/autoinstall/v1.2/gk-autoinstall-readme-1.2/.directory (type
cifs) on
/mnt/samba/lion_export/_demo/autoinstall/v1.2/gk-autoinstall-readme-1.2/.directory
Jan 12 14:32:30 charlie kernel: Unable to handle kernel NULL pointer dereference
at virtual address 00000000
Jan 12 14:32:30 charlie kernel:  printing eip:
Jan 12 14:32:30 charlie kernel: c013931f
Jan 12 14:32:30 charlie kernel: *pde = 00000000
Jan 12 14:32:30 charlie kernel: Oops: 0002 [#1]
Jan 12 14:32:30 charlie kernel: Modules linked in: cifs nls_cp850 nls_utf8 smbfs
bluetooth ipt_pkttype ipt_LOG ipt_limit speedstep_lib freq_table autofs4
snd_pcm_oss snd_mixer_oss snd_seq snd_seq_device button battery ac af_packet edd
ip6t_REJECT ipt_REJECT ipt_state iptable_mangle iptable_nat ip_nat
iptable_filter ip6table_mangle ip_conntrack nfnetlink snd_intel8x0
snd_ac97_codec generic i8xx_tco ip_tables 8139too mii ehci_hcd i2c_i801 i2c_core
snd_ac97_bus snd_pcm snd_timer snd soundcore snd_page_alloc shpchp pci_hotplug
intel_agp agpgart ip6table_filter ip6_tables uhci_hcd usbcore ipv6 parport_pc lp
parport dm_mod ext3 jbd fan thermal ide_cd cdrom processor piix ide_disk ide_core
Jan 12 14:32:30 charlie kernel: CPU:    0
Jan 12 14:32:30 charlie kernel: EIP:    0060:[<c013931f>]    Tainted: G     U VLI
Jan 12 14:32:30 charlie kernel: EFLAGS: 00010002   (2.6.15-rc6-git2-2-default)
Jan 12 14:32:30 charlie kernel: EIP is at free_block+0x4a/0xbf
Jan 12 14:32:30 charlie kernel: eax: 00000000   ebx: f49197a0   ecx: c40f2000  
edx: f6997240
Jan 12 14:32:30 charlie kernel: esi: dfffde40   edi: dfffff80   ebp: 00000000  
esp: c18f1f18
Jan 12 14:32:30 charlie kernel: ds: 007b   es: 007b   ss: 0068
Jan 12 14:32:30 charlie kernel: Process events/0 (pid: 3, threadinfo=c18f0000
task=dfe48030)
Jan 12 14:32:30 charlie kernel: Stack: 00000001 dfffca90 dfffca90 00000001
dfffca80 00000000 c0139835 00000000
Jan 12 14:32:30 charlie kernel:        dfffff80 dfffde40 dfffff80 00000002
dfffffcc c0139898 00000000 c036e664
Jan 12 14:32:30 charlie kernel:        dfe4a700 00000297 00000000 c0123510
c0139854 00000000 00000000 00000000
Jan 12 14:32:30 charlie kernel: Call Trace:
Jan 12 14:32:30 charlie kernel:  [<c0139835>] drain_array_locked+0x5a/0x79
Jan 12 14:32:30 charlie kernel:  [<c0139898>] cache_reap+0x44/0x114
Jan 12 14:32:30 charlie kernel:  [<c0123510>] worker_thread+0x154/0x1b0
Jan 12 14:32:30 charlie kernel:  [<c0139854>] cache_reap+0x0/0x114
Jan 12 14:32:30 charlie kernel:  [<c026dce8>] schedule+0x462/0x4c5
Jan 12 14:32:30 charlie kernel:  [<c01154f0>] default_wake_function+0x0/0xc
Jan 12 14:32:30 charlie kernel:  [<c01233bc>] worker_thread+0x0/0x1b0
Jan 12 14:32:30 charlie kernel:  [<c012614b>] kthread+0x63/0x8f
Jan 12 14:32:30 charlie kernel:  [<c01260e8>] kthread+0x0/0x8f
Jan 12 14:32:30 charlie kernel:  [<c0101279>] kernel_thread_helper+0x5/0xb
Jan 12 14:32:30 charlie kernel: Code: c0 8b 0c a8 8d 81 00 00 00 40 c1 e8 0c c1
e0 05 8b 5c 10 1c 8b 44 24 1c 8b 13 8b 74 87 14 8b 43 04 89 42 04 c7 43 04 00 02
20 00 <89> 10 c7 03 00 01 10 00 2b 4b 0c 31 d2 89 c8 f7 77 10 89 c1 8b
Jan 12 14:37:34 charlie kernel: Unable to handle kernel paging request at
virtual address 00200200
Jan 12 14:37:34 charlie kernel:  printing eip:
Jan 12 14:37:34 charlie kernel: c013931f
Jan 12 14:37:34 charlie kernel: *pde = 00000000
Jan 12 14:37:34 charlie kernel: Oops: 0002 [#2]
Jan 12 14:37:34 charlie kernel: Modules linked in: cifs nls_cp850 nls_utf8 smbfs
bluetooth ipt_pkttype ipt_LOG ipt_limit speedstep_lib freq_table autofs4
snd_pcm_oss snd_mixer_oss snd_seq snd_seq_device button battery ac af_packet edd
ip6t_REJECT ipt_REJECT ipt_state iptable_mangle iptable_nat ip_nat
iptable_filter ip6table_mangle ip_conntrack nfnetlink snd_intel8x0
snd_ac97_codec generic i8xx_tco ip_tables 8139too mii ehci_hcd i2c_i801 i2c_core
snd_ac97_bus snd_pcm snd_timer snd soundcore snd_page_alloc shpchp pci_hotplug
intel_agp agpgart ip6table_filter ip6_tables uhci_hcd usbcore ipv6 parport_pc lp
parport dm_mod ext3 jbd fan thermal ide_cd cdrom processor piix ide_disk ide_core
Jan 12 14:37:34 charlie kernel: CPU:    0
Jan 12 14:37:34 charlie kernel: EIP:    0060:[<c013931f>]    Tainted: G     U VLI
Jan 12 14:37:34 charlie kernel: EFLAGS: 00010002   (2.6.15-rc6-git2-2-default)
Jan 12 14:37:34 charlie kernel: EIP is at free_block+0x4a/0xbf
Jan 12 14:37:34 charlie kernel: eax: 00200200   ebx: f49197a0   ecx: c40f2000  
edx: f6997240
Jan 12 14:37:34 charlie kernel: esi: dfffde40   edi: dfffff80   ebp: 00000001  
esp: d9975e7c
Jan 12 14:37:34 charlie kernel: ds: 007b   es: 007b   ss: 0068
Jan 12 14:37:34 charlie kernel: Process soffice.bin (pid: 13459,
threadinfo=d9974000 task=d9f4e030)
Jan 12 14:37:34 charlie kernel: Stack: 0000000c dfffca90 0000000c 00000000
dfffff80 dfffca80 c01393e8 00000000
Jan 12 14:37:34 charlie kernel:        dfffca80 d712c000 00000202 00000001
c013950a f22e1680 d9f4e030 00000000
Jan 12 14:37:34 charlie kernel:        c011622f d9974000 c0119ab9 00000000
d70bf2b4 d70bf2a4 d9975f0c c0119ca1
Jan 12 14:37:34 charlie kernel: Call Trace:
Jan 12 14:37:34 charlie kernel:  [<c01393e8>] cache_flusharray+0x54/0x6f
Comment 7 Ren 2006-01-16 10:45:58 UTC 
The problem occured in the kernel release 2.6.15 (SuSE build 4 for the upcoming 
distribution release 10.1), too. I will not post the log here since it blows up 
this thread here and it is very similar to the previous ones (cifs automounter 
log entries and null pointer dereference crash).
Comment 8 Martin J. Bligh 2006-02-09 14:03:57 UTC 
Tainted kernel.