Hi!
On vanilla 4.6.0 and 4.6.3 i am getting reproducible kernel panic when i
terminate user in accel-pppd. Here is kernel panic message received over
netconsole:
[ 465.469514] BUG: unable to handle kernel
Jul 4 20:33:36 NULL pointer dereference at 000000000000000c
[ 465.469671] IP: [<ffffffff818ca3fe>] _raw_spin_lock_bh+0x12/0x27
[ 465.469755] PGD 0
[ 465.469829] Oops: 0002 [#1] Jul 4 20:33:36 SMP
[ 465.469928] Modules linked in:
netconsole
configfs
sch_sfq
cls_fw
sch_htb
act_police
cls_u32
sch_ingress
sch_tbf
pppoe
pppox
ppp_generic
slhc
nf_nat_pptp
nf_nat_proto_gre
nf_conntrack_pptp
nf_conntrack_proto_gre
ts_bm
xt_string
xt_connmark
xt_TCPMSS
xt_tcpudp
xt_mark
iptable_filter
iptable_mangle
iptable_nat
nf_conntrack_ipv4
nf_defrag_ipv4
nf_nat_ipv4
nf_nat
nf_conntrack
ip_tables
x_tables
[last unloaded: netconsole]
[ 465.470912] CPU: 2 PID: 0 Comm: swapper/2 Not tainted
4.6.3-build-0103 #8
[ 465.470974] Hardware name: Hewlett-Packard HP Compaq 8200 Elite CMT
PC/1494, BIOS J01 v02.06 06/09/2011
[ 465.471068] task: ffff88080a618bc0 ti: ffff88080a620000 task.ti:
ffff88080a620000
[ 465.471158] RIP: 0010:[<ffffffff818ca3fe>]
[<ffffffff818ca3fe>] _raw_spin_lock_bh+0x12/0x27
[ 465.471270] RSP: 0018:ffff88082e283e28 EFLAGS: 00010246
[ 465.471329] RAX: 0000000000000000 RBX: ffff880805d3f600 RCX:
ffff880805d3f600
[ 465.471391] RDX: 0000000000000001 RSI: 0000000000000001 RDI:
000000000000000c
[ 465.471452] RBP: ffff88082e283e40 R08: 0000000000000001 R09:
ffffea002025d000
[ 465.471514] R10: ffff88082e283ea8 R11: 0001e1410001e131 R12:
000000000000000c
[ 465.471575] R13: 0000000000000000 R14: ffff880805de7da0 R15:
0000000000000001
[ 465.471637] FS: 0000000000000000(0000) GS:ffff88082e280000(0000)
knlGS:0000000000000000
[ 465.471728] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 465.471788] CR2: 000000000000000c CR3: 0000000002006000 CR4:
00000000000406e0
[ 465.471849] Stack:
[ 465.471903] ffffffff81872ca4
ffff880805d30980
ffff880805de7d88
ffff88082e283e78
[ 465.472077] ffffffff81873102
ffff880805de7d98
ffff880805de7da0
0000000000000021
[ 465.472250] ffff880805d305a0
ffff88082e294e80
ffff88082e283e98
ffffffff81871668
[ 465.472421] Call Trace:
[ 465.472476] <IRQ>
[ 465.472501] [<ffffffff81872ca4>] ? __tcf_hash_release+0x72/0xc9
[ 465.472612] [<ffffffff81873102>] tcf_action_destroy+0x43/0xa7
[ 465.472672] [<ffffffff81871668>] tcf_exts_destroy+0x1b/0x28
[ 465.472734] [<ffffffffa00b663d>] u32_destroy_key+0x16/0x48
[cls_u32]
[ 465.472796] [<ffffffffa00b6685>]
u32_delete_key_freepf_rcu+0x16/0x18 [cls_u32]
[ 465.472887] [<ffffffff810f8bdb>] rcu_process_callbacks+0x393/0x4a6
[ 465.472951] [<ffffffff810c401a>] __do_softirq+0xb9/0x1a9
[ 465.473010] [<ffffffff810c4251>] irq_exit+0x37/0x7c
[ 465.473071] [<ffffffff8102b8f7>] smp_apic_timer_interrupt+0x3d/0x48
[ 465.473132] [<ffffffff818cb15c>] apic_timer_interrupt+0x7c/0x90
[ 465.473192] <EOI>
[ 465.473216] [<ffffffff8101be12>] ? mwait_idle+0x68/0x7e
[ 465.473327] [<ffffffff8101c212>] arch_cpu_idle+0xa/0xc
[ 465.473387] [<ffffffff810ea333>] default_idle_call+0x27/0x29
[ 465.473447] [<ffffffff810ea44a>] cpu_startup_entry+0x115/0x1bf
[ 465.473508] [<ffffffff8102a289>] start_secondary+0xf1/0xf4
[ 465.473568] Code:
Jul 4 20:33:36 01
Jul 4 20:33:36 00
Jul 4 20:33:36 00 message repeated 2 times: []
Jul 4 20:33:36 f0
Jul 4 20:33:36 0f
Jul 4 20:33:36 b1
Jul 4 20:33:36 17
Jul 4 20:33:36 85
Jul 4 20:33:36 c0
Jul 4 20:33:36 74
Jul 4 20:33:36 0c
Jul 4 20:33:36 55
Jul 4 20:33:36 89
Jul 4 20:33:36 c6
Jul 4 20:33:36 48
Jul 4 20:33:36 89
Jul 4 20:33:36 e5
Jul 4 20:33:36 e8
Jul 4 20:33:36 82
Jul 4 20:33:36 11
Jul 4 20:33:36 82
Jul 4 20:33:36 ff
Jul 4 20:33:36 5d
Jul 4 20:33:36 c3
Jul 4 20:33:36 65
Jul 4 20:33:36 81
Jul 4 20:33:36 05
Jul 4 20:33:36 91
Jul 4 20:33:36 1e
Jul 4 20:33:36 74
Jul 4 20:33:36 7e
Jul 4 20:33:36 00
Jul 4 20:33:36 02
Jul 4 20:33:36 00
Jul 4 20:33:36 00
Jul 4 20:33:36 31
Jul 4 20:33:36 c0
Jul 4 20:33:36 ba
Jul 4 20:33:36 01
Jul 4 20:33:36 00
Jul 4 20:33:36 00 message repeated 2 times: []
f0>
Jul 4 20:33:36 0f
Jul 4 20:33:36 b1
Jul 4 20:33:36 17
Jul 4 20:33:36 85
Jul 4 20:33:36 c0
Jul 4 20:33:36 74
Jul 4 20:33:36 0c
Jul 4 20:33:36 55
Jul 4 20:33:36 89
Jul 4 20:33:36 c6
Jul 4 20:33:36 48
Jul 4 20:33:36 89
Jul 4 20:33:36 e5
Jul 4 20:33:36 e8
Jul 4 20:33:36 5b
Jul 4 20:33:36 11
Jul 4 20:33:36 82
Jul 4 20:33:36 ff
Jul 4 20:33:36 5d
Jul 4 20:33:36 c3
[ 465.475045] RIP
[<ffffffff818ca3fe>] _raw_spin_lock_bh+0x12/0x27
[ 465.475126] RSP <ffff88082e283e28>
[ 465.475182] CR2: 000000000000000c
[ 465.475237] ---[ end trace 9062cce41479ad6a ]---
[ 465.475296] Kernel panic - not syncing: Fatal exception in interrupt
[ 465.475359] Kernel Offset: disabled
[ 465.475413] Rebooting in 5 seconds..
