[Kernel-packages] [Bug 1233175] Re: Kernel panic : mempolicy potential use-after-free on server running mongodb
The Precise Pangolin has reached end of life, so this bug will not be fixed for that release ** Changed in: linux (Ubuntu Precise) Status: In Progress => Won't Fix -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1233175 Title: Kernel panic : mempolicy potential use-after-free on server running mongodb Status in linux package in Ubuntu: In Progress Status in linux source package in Precise: Won't Fix Bug description: PID: 21767 TASK: 8800874bdc00 CPU: 12 COMMAND: "mongod" #0 [880657cc3820] machine_kexec at 810393da #1 [880657cc3890] crash_kexec at 810b53f8 #2 [880657cc3960] oops_end at 8165e528 #3 [880657cc3990] die at 810178d8 #4 [880657cc39c0] do_trap at 8165de94 #5 [880657cc3a20] do_invalid_op at 81014f65 #6 [880657cc3ac0] invalid_op at 8166796b [exception RIP: slab_node+46] RIP: 8115a66e RSP: 880657cc3b70 RFLAGS: 00010097 RAX: RBX: 880657802c00 RCX: e62f6aef RDX: RSI: 0020 RDI: 880abf18a288 RBP: 880657cc3b80 R8: 0001 R9: 000100100010 R10: R11: 0022 R12: 0002 R13: R14: R15: 0020 ORIG_RAX: CS: 0010 SS: 0018 #7 [880657cc3b88] get_any_partial at 816496a0 #8 [880657cc3c18] __slab_alloc at 816498cf #9 [880657cc3cc8] __kmalloc_node_track_caller at 81166f07 #10 [880657cc3d38] __alloc_skb at 815364c8 #11 [880657cc3d88] __netdev_alloc_skb at 81536b14 #12 [880657cc3da8] enic_rq_alloc_buf at a005484c [enic] #13 [880657cc3e08] enic_poll_msix at a00559ff [enic] #14 [880657cc3e58] net_rx_action at 81545274 #15 [880657cc3ec8] __do_softirq at 8106f5f8 #16 [880657cc3f38] call_softirq at 81667bec #17 [880657cc3f50] do_softirq at 81016305 #18 [880657cc3f70] irq_exit at 8106f9de #19 [880657cc3f80] do_IRQ at 816684a3 --- --- #20 [880544d8bd48] ret_from_intr at 8165d82e [exception RIP: __slab_free+737] RIP: 81649467 RSP: 880544d8bdf8 RFLAGS: 0202 RAX: 0001 RBX: ff0a0210 RCX: 000180aa00a9 RDX: 000180aa00aa RSI: ea002afc6201 RDI: 880657806200 RBP: 880544d8bea8 R8: 0001 R9: R10: 8800874be020 R11: 8800874be030 R12: 880544d8be33 R13: 000d R14: 81191895 R15: 880544d8bdb8 ORIG_RAX: ff54 CS: 0010 SS: 0018 #21 [880544d8be30] __change_pid at 81087dca #22 [880544d8beb0] kmem_cache_free at 81163634 #23 [880544d8bef0] __mpol_put at 81159937 #24 [880544d8bf00] do_exit at 8106c75c #25 [880544d8bf70] sys_exit at 8106caf7 #26 [880544d8bf80] system_call_fastpath at 81665982 RIP: 7f6f476b8f37 RSP: 7f68cbcfdbb0 RFLAGS: 0202 RAX: 003c RBX: 81665982 RCX: RDX: 7f68cbcfe700 RSI: 7f6f478c9250 RDI: RBP: R8: 7f68cbcfe700 R9: 7f68e82a0370 R10: 7fff R11: 0246 R12: 8106caf7 R13: 880544d8bf78 R14: 0003 R15: 7f68f8744a10 ORIG_RAX: ... To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1233175/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
[Kernel-packages] [Bug 1233175] Re: Kernel panic : mempolicy potential use-after-free on server running mongodb
** Changed in: linux (Ubuntu) Assignee: (unassigned) = Jay Vosburgh (jvosburgh) ** Changed in: linux (Ubuntu Precise) Assignee: (unassigned) = Jay Vosburgh (jvosburgh) -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1233175 Title: Kernel panic : mempolicy potential use-after-free on server running mongodb Status in “linux” package in Ubuntu: In Progress Status in “linux” source package in Precise: In Progress Bug description: PID: 21767 TASK: 8800874bdc00 CPU: 12 COMMAND: mongod #0 [880657cc3820] machine_kexec at 810393da #1 [880657cc3890] crash_kexec at 810b53f8 #2 [880657cc3960] oops_end at 8165e528 #3 [880657cc3990] die at 810178d8 #4 [880657cc39c0] do_trap at 8165de94 #5 [880657cc3a20] do_invalid_op at 81014f65 #6 [880657cc3ac0] invalid_op at 8166796b [exception RIP: slab_node+46] RIP: 8115a66e RSP: 880657cc3b70 RFLAGS: 00010097 RAX: RBX: 880657802c00 RCX: e62f6aef RDX: RSI: 0020 RDI: 880abf18a288 RBP: 880657cc3b80 R8: 0001 R9: 000100100010 R10: R11: 0022 R12: 0002 R13: R14: R15: 0020 ORIG_RAX: CS: 0010 SS: 0018 #7 [880657cc3b88] get_any_partial at 816496a0 #8 [880657cc3c18] __slab_alloc at 816498cf #9 [880657cc3cc8] __kmalloc_node_track_caller at 81166f07 #10 [880657cc3d38] __alloc_skb at 815364c8 #11 [880657cc3d88] __netdev_alloc_skb at 81536b14 #12 [880657cc3da8] enic_rq_alloc_buf at a005484c [enic] #13 [880657cc3e08] enic_poll_msix at a00559ff [enic] #14 [880657cc3e58] net_rx_action at 81545274 #15 [880657cc3ec8] __do_softirq at 8106f5f8 #16 [880657cc3f38] call_softirq at 81667bec #17 [880657cc3f50] do_softirq at 81016305 #18 [880657cc3f70] irq_exit at 8106f9de #19 [880657cc3f80] do_IRQ at 816684a3 --- IRQ stack --- #20 [880544d8bd48] ret_from_intr at 8165d82e [exception RIP: __slab_free+737] RIP: 81649467 RSP: 880544d8bdf8 RFLAGS: 0202 RAX: 0001 RBX: ff0a0210 RCX: 000180aa00a9 RDX: 000180aa00aa RSI: ea002afc6201 RDI: 880657806200 RBP: 880544d8bea8 R8: 0001 R9: R10: 8800874be020 R11: 8800874be030 R12: 880544d8be33 R13: 000d R14: 81191895 R15: 880544d8bdb8 ORIG_RAX: ff54 CS: 0010 SS: 0018 #21 [880544d8be30] __change_pid at 81087dca #22 [880544d8beb0] kmem_cache_free at 81163634 #23 [880544d8bef0] __mpol_put at 81159937 #24 [880544d8bf00] do_exit at 8106c75c #25 [880544d8bf70] sys_exit at 8106caf7 #26 [880544d8bf80] system_call_fastpath at 81665982 RIP: 7f6f476b8f37 RSP: 7f68cbcfdbb0 RFLAGS: 0202 RAX: 003c RBX: 81665982 RCX: RDX: 7f68cbcfe700 RSI: 7f6f478c9250 RDI: RBP: R8: 7f68cbcfe700 R9: 7f68e82a0370 R10: 7fff R11: 0246 R12: 8106caf7 R13: 880544d8bf78 R14: 0003 R15: 7f68f8744a10 ORIG_RAX: ... To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1233175/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
[Kernel-packages] [Bug 1233175] Re: Kernel panic : mempolicy potential use-after-free on server running mongodb
** Changed in: linux (Ubuntu Precise) Assignee: Chris J Arges (arges) = (unassigned) -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1233175 Title: Kernel panic : mempolicy potential use-after-free on server running mongodb Status in “linux” package in Ubuntu: In Progress Status in “linux” source package in Precise: In Progress Bug description: PID: 21767 TASK: 8800874bdc00 CPU: 12 COMMAND: mongod #0 [880657cc3820] machine_kexec at 810393da #1 [880657cc3890] crash_kexec at 810b53f8 #2 [880657cc3960] oops_end at 8165e528 #3 [880657cc3990] die at 810178d8 #4 [880657cc39c0] do_trap at 8165de94 #5 [880657cc3a20] do_invalid_op at 81014f65 #6 [880657cc3ac0] invalid_op at 8166796b [exception RIP: slab_node+46] RIP: 8115a66e RSP: 880657cc3b70 RFLAGS: 00010097 RAX: RBX: 880657802c00 RCX: e62f6aef RDX: RSI: 0020 RDI: 880abf18a288 RBP: 880657cc3b80 R8: 0001 R9: 000100100010 R10: R11: 0022 R12: 0002 R13: R14: R15: 0020 ORIG_RAX: CS: 0010 SS: 0018 #7 [880657cc3b88] get_any_partial at 816496a0 #8 [880657cc3c18] __slab_alloc at 816498cf #9 [880657cc3cc8] __kmalloc_node_track_caller at 81166f07 #10 [880657cc3d38] __alloc_skb at 815364c8 #11 [880657cc3d88] __netdev_alloc_skb at 81536b14 #12 [880657cc3da8] enic_rq_alloc_buf at a005484c [enic] #13 [880657cc3e08] enic_poll_msix at a00559ff [enic] #14 [880657cc3e58] net_rx_action at 81545274 #15 [880657cc3ec8] __do_softirq at 8106f5f8 #16 [880657cc3f38] call_softirq at 81667bec #17 [880657cc3f50] do_softirq at 81016305 #18 [880657cc3f70] irq_exit at 8106f9de #19 [880657cc3f80] do_IRQ at 816684a3 --- IRQ stack --- #20 [880544d8bd48] ret_from_intr at 8165d82e [exception RIP: __slab_free+737] RIP: 81649467 RSP: 880544d8bdf8 RFLAGS: 0202 RAX: 0001 RBX: ff0a0210 RCX: 000180aa00a9 RDX: 000180aa00aa RSI: ea002afc6201 RDI: 880657806200 RBP: 880544d8bea8 R8: 0001 R9: R10: 8800874be020 R11: 8800874be030 R12: 880544d8be33 R13: 000d R14: 81191895 R15: 880544d8bdb8 ORIG_RAX: ff54 CS: 0010 SS: 0018 #21 [880544d8be30] __change_pid at 81087dca #22 [880544d8beb0] kmem_cache_free at 81163634 #23 [880544d8bef0] __mpol_put at 81159937 #24 [880544d8bf00] do_exit at 8106c75c #25 [880544d8bf70] sys_exit at 8106caf7 #26 [880544d8bf80] system_call_fastpath at 81665982 RIP: 7f6f476b8f37 RSP: 7f68cbcfdbb0 RFLAGS: 0202 RAX: 003c RBX: 81665982 RCX: RDX: 7f68cbcfe700 RSI: 7f6f478c9250 RDI: RBP: R8: 7f68cbcfe700 R9: 7f68e82a0370 R10: 7fff R11: 0246 R12: 8106caf7 R13: 880544d8bf78 R14: 0003 R15: 7f68f8744a10 ORIG_RAX: ... To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1233175/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
[Kernel-packages] [Bug 1233175] Re: Kernel panic : mempolicy potential use-after-free on server running mongodb
I will not be able to provide a reproducer of this immediately. If you agree, please keep this open until I can have it or someone comes here with his/her reproducer. -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1233175 Title: Kernel panic : mempolicy potential use-after-free on server running mongodb Status in “linux” package in Ubuntu: In Progress Status in “linux” source package in Precise: In Progress Bug description: PID: 21767 TASK: 8800874bdc00 CPU: 12 COMMAND: mongod #0 [880657cc3820] machine_kexec at 810393da #1 [880657cc3890] crash_kexec at 810b53f8 #2 [880657cc3960] oops_end at 8165e528 #3 [880657cc3990] die at 810178d8 #4 [880657cc39c0] do_trap at 8165de94 #5 [880657cc3a20] do_invalid_op at 81014f65 #6 [880657cc3ac0] invalid_op at 8166796b [exception RIP: slab_node+46] RIP: 8115a66e RSP: 880657cc3b70 RFLAGS: 00010097 RAX: RBX: 880657802c00 RCX: e62f6aef RDX: RSI: 0020 RDI: 880abf18a288 RBP: 880657cc3b80 R8: 0001 R9: 000100100010 R10: R11: 0022 R12: 0002 R13: R14: R15: 0020 ORIG_RAX: CS: 0010 SS: 0018 #7 [880657cc3b88] get_any_partial at 816496a0 #8 [880657cc3c18] __slab_alloc at 816498cf #9 [880657cc3cc8] __kmalloc_node_track_caller at 81166f07 #10 [880657cc3d38] __alloc_skb at 815364c8 #11 [880657cc3d88] __netdev_alloc_skb at 81536b14 #12 [880657cc3da8] enic_rq_alloc_buf at a005484c [enic] #13 [880657cc3e08] enic_poll_msix at a00559ff [enic] #14 [880657cc3e58] net_rx_action at 81545274 #15 [880657cc3ec8] __do_softirq at 8106f5f8 #16 [880657cc3f38] call_softirq at 81667bec #17 [880657cc3f50] do_softirq at 81016305 #18 [880657cc3f70] irq_exit at 8106f9de #19 [880657cc3f80] do_IRQ at 816684a3 --- IRQ stack --- #20 [880544d8bd48] ret_from_intr at 8165d82e [exception RIP: __slab_free+737] RIP: 81649467 RSP: 880544d8bdf8 RFLAGS: 0202 RAX: 0001 RBX: ff0a0210 RCX: 000180aa00a9 RDX: 000180aa00aa RSI: ea002afc6201 RDI: 880657806200 RBP: 880544d8bea8 R8: 0001 R9: R10: 8800874be020 R11: 8800874be030 R12: 880544d8be33 R13: 000d R14: 81191895 R15: 880544d8bdb8 ORIG_RAX: ff54 CS: 0010 SS: 0018 #21 [880544d8be30] __change_pid at 81087dca #22 [880544d8beb0] kmem_cache_free at 81163634 #23 [880544d8bef0] __mpol_put at 81159937 #24 [880544d8bf00] do_exit at 8106c75c #25 [880544d8bf70] sys_exit at 8106caf7 #26 [880544d8bf80] system_call_fastpath at 81665982 RIP: 7f6f476b8f37 RSP: 7f68cbcfdbb0 RFLAGS: 0202 RAX: 003c RBX: 81665982 RCX: RDX: 7f68cbcfe700 RSI: 7f6f478c9250 RDI: RBP: R8: 7f68cbcfe700 R9: 7f68e82a0370 R10: 7fff R11: 0246 R12: 8106caf7 R13: 880544d8bf78 R14: 0003 R15: 7f68f8744a10 ORIG_RAX: ... To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1233175/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
[Kernel-packages] [Bug 1233175] Re: Kernel panic : mempolicy potential use-after-free on server running mongodb
Unfortunately, we don't have a repro case yet. Do you really need a repro case to proceed this? -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1233175 Title: Kernel panic : mempolicy potential use-after-free on server running mongodb Status in “linux” package in Ubuntu: In Progress Status in “linux” source package in Precise: In Progress Bug description: PID: 21767 TASK: 8800874bdc00 CPU: 12 COMMAND: mongod #0 [880657cc3820] machine_kexec at 810393da #1 [880657cc3890] crash_kexec at 810b53f8 #2 [880657cc3960] oops_end at 8165e528 #3 [880657cc3990] die at 810178d8 #4 [880657cc39c0] do_trap at 8165de94 #5 [880657cc3a20] do_invalid_op at 81014f65 #6 [880657cc3ac0] invalid_op at 8166796b [exception RIP: slab_node+46] RIP: 8115a66e RSP: 880657cc3b70 RFLAGS: 00010097 RAX: RBX: 880657802c00 RCX: e62f6aef RDX: RSI: 0020 RDI: 880abf18a288 RBP: 880657cc3b80 R8: 0001 R9: 000100100010 R10: R11: 0022 R12: 0002 R13: R14: R15: 0020 ORIG_RAX: CS: 0010 SS: 0018 #7 [880657cc3b88] get_any_partial at 816496a0 #8 [880657cc3c18] __slab_alloc at 816498cf #9 [880657cc3cc8] __kmalloc_node_track_caller at 81166f07 #10 [880657cc3d38] __alloc_skb at 815364c8 #11 [880657cc3d88] __netdev_alloc_skb at 81536b14 #12 [880657cc3da8] enic_rq_alloc_buf at a005484c [enic] #13 [880657cc3e08] enic_poll_msix at a00559ff [enic] #14 [880657cc3e58] net_rx_action at 81545274 #15 [880657cc3ec8] __do_softirq at 8106f5f8 #16 [880657cc3f38] call_softirq at 81667bec #17 [880657cc3f50] do_softirq at 81016305 #18 [880657cc3f70] irq_exit at 8106f9de #19 [880657cc3f80] do_IRQ at 816684a3 --- IRQ stack --- #20 [880544d8bd48] ret_from_intr at 8165d82e [exception RIP: __slab_free+737] RIP: 81649467 RSP: 880544d8bdf8 RFLAGS: 0202 RAX: 0001 RBX: ff0a0210 RCX: 000180aa00a9 RDX: 000180aa00aa RSI: ea002afc6201 RDI: 880657806200 RBP: 880544d8bea8 R8: 0001 R9: R10: 8800874be020 R11: 8800874be030 R12: 880544d8be33 R13: 000d R14: 81191895 R15: 880544d8bdb8 ORIG_RAX: ff54 CS: 0010 SS: 0018 #21 [880544d8be30] __change_pid at 81087dca #22 [880544d8beb0] kmem_cache_free at 81163634 #23 [880544d8bef0] __mpol_put at 81159937 #24 [880544d8bf00] do_exit at 8106c75c #25 [880544d8bf70] sys_exit at 8106caf7 #26 [880544d8bf80] system_call_fastpath at 81665982 RIP: 7f6f476b8f37 RSP: 7f68cbcfdbb0 RFLAGS: 0202 RAX: 003c RBX: 81665982 RCX: RDX: 7f68cbcfe700 RSI: 7f6f478c9250 RDI: RBP: R8: 7f68cbcfe700 R9: 7f68e82a0370 R10: 7fff R11: 0246 R12: 8106caf7 R13: 880544d8bf78 R14: 0003 R15: 7f68f8744a10 ORIG_RAX: ... To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1233175/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
[Kernel-packages] [Bug 1233175] Re: Kernel panic : mempolicy potential use-after-free on server running mongodb
** Changed in: linux (Ubuntu Precise) Assignee: Louis Bouchard (louis-bouchard) = Chris J Arges (arges) ** Changed in: linux (Ubuntu) Assignee: Louis Bouchard (louis-bouchard) = (unassigned) -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1233175 Title: Kernel panic : mempolicy potential use-after-free on server running mongodb Status in “linux” package in Ubuntu: In Progress Status in “linux” source package in Precise: In Progress Bug description: PID: 21767 TASK: 8800874bdc00 CPU: 12 COMMAND: mongod #0 [880657cc3820] machine_kexec at 810393da #1 [880657cc3890] crash_kexec at 810b53f8 #2 [880657cc3960] oops_end at 8165e528 #3 [880657cc3990] die at 810178d8 #4 [880657cc39c0] do_trap at 8165de94 #5 [880657cc3a20] do_invalid_op at 81014f65 #6 [880657cc3ac0] invalid_op at 8166796b [exception RIP: slab_node+46] RIP: 8115a66e RSP: 880657cc3b70 RFLAGS: 00010097 RAX: RBX: 880657802c00 RCX: e62f6aef RDX: RSI: 0020 RDI: 880abf18a288 RBP: 880657cc3b80 R8: 0001 R9: 000100100010 R10: R11: 0022 R12: 0002 R13: R14: R15: 0020 ORIG_RAX: CS: 0010 SS: 0018 #7 [880657cc3b88] get_any_partial at 816496a0 #8 [880657cc3c18] __slab_alloc at 816498cf #9 [880657cc3cc8] __kmalloc_node_track_caller at 81166f07 #10 [880657cc3d38] __alloc_skb at 815364c8 #11 [880657cc3d88] __netdev_alloc_skb at 81536b14 #12 [880657cc3da8] enic_rq_alloc_buf at a005484c [enic] #13 [880657cc3e08] enic_poll_msix at a00559ff [enic] #14 [880657cc3e58] net_rx_action at 81545274 #15 [880657cc3ec8] __do_softirq at 8106f5f8 #16 [880657cc3f38] call_softirq at 81667bec #17 [880657cc3f50] do_softirq at 81016305 #18 [880657cc3f70] irq_exit at 8106f9de #19 [880657cc3f80] do_IRQ at 816684a3 --- IRQ stack --- #20 [880544d8bd48] ret_from_intr at 8165d82e [exception RIP: __slab_free+737] RIP: 81649467 RSP: 880544d8bdf8 RFLAGS: 0202 RAX: 0001 RBX: ff0a0210 RCX: 000180aa00a9 RDX: 000180aa00aa RSI: ea002afc6201 RDI: 880657806200 RBP: 880544d8bea8 R8: 0001 R9: R10: 8800874be020 R11: 8800874be030 R12: 880544d8be33 R13: 000d R14: 81191895 R15: 880544d8bdb8 ORIG_RAX: ff54 CS: 0010 SS: 0018 #21 [880544d8be30] __change_pid at 81087dca #22 [880544d8beb0] kmem_cache_free at 81163634 #23 [880544d8bef0] __mpol_put at 81159937 #24 [880544d8bf00] do_exit at 8106c75c #25 [880544d8bf70] sys_exit at 8106caf7 #26 [880544d8bf80] system_call_fastpath at 81665982 RIP: 7f6f476b8f37 RSP: 7f68cbcfdbb0 RFLAGS: 0202 RAX: 003c RBX: 81665982 RCX: RDX: 7f68cbcfe700 RSI: 7f6f478c9250 RDI: RBP: R8: 7f68cbcfe700 R9: 7f68e82a0370 R10: 7fff R11: 0246 R12: 8106caf7 R13: 880544d8bf78 R14: 0003 R15: 7f68f8744a10 ORIG_RAX: ... To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1233175/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
[Kernel-packages] [Bug 1233175] Re: Kernel panic : mempolicy potential use-after-free on server running mongodb
Can those affected by this issue test this build with the patch identified by @kamatam? http://people.canonical.com/~arges/lp1233175/ Thanks! -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1233175 Title: Kernel panic : mempolicy potential use-after-free on server running mongodb Status in “linux” package in Ubuntu: In Progress Status in “linux” source package in Precise: In Progress Bug description: PID: 21767 TASK: 8800874bdc00 CPU: 12 COMMAND: mongod #0 [880657cc3820] machine_kexec at 810393da #1 [880657cc3890] crash_kexec at 810b53f8 #2 [880657cc3960] oops_end at 8165e528 #3 [880657cc3990] die at 810178d8 #4 [880657cc39c0] do_trap at 8165de94 #5 [880657cc3a20] do_invalid_op at 81014f65 #6 [880657cc3ac0] invalid_op at 8166796b [exception RIP: slab_node+46] RIP: 8115a66e RSP: 880657cc3b70 RFLAGS: 00010097 RAX: RBX: 880657802c00 RCX: e62f6aef RDX: RSI: 0020 RDI: 880abf18a288 RBP: 880657cc3b80 R8: 0001 R9: 000100100010 R10: R11: 0022 R12: 0002 R13: R14: R15: 0020 ORIG_RAX: CS: 0010 SS: 0018 #7 [880657cc3b88] get_any_partial at 816496a0 #8 [880657cc3c18] __slab_alloc at 816498cf #9 [880657cc3cc8] __kmalloc_node_track_caller at 81166f07 #10 [880657cc3d38] __alloc_skb at 815364c8 #11 [880657cc3d88] __netdev_alloc_skb at 81536b14 #12 [880657cc3da8] enic_rq_alloc_buf at a005484c [enic] #13 [880657cc3e08] enic_poll_msix at a00559ff [enic] #14 [880657cc3e58] net_rx_action at 81545274 #15 [880657cc3ec8] __do_softirq at 8106f5f8 #16 [880657cc3f38] call_softirq at 81667bec #17 [880657cc3f50] do_softirq at 81016305 #18 [880657cc3f70] irq_exit at 8106f9de #19 [880657cc3f80] do_IRQ at 816684a3 --- IRQ stack --- #20 [880544d8bd48] ret_from_intr at 8165d82e [exception RIP: __slab_free+737] RIP: 81649467 RSP: 880544d8bdf8 RFLAGS: 0202 RAX: 0001 RBX: ff0a0210 RCX: 000180aa00a9 RDX: 000180aa00aa RSI: ea002afc6201 RDI: 880657806200 RBP: 880544d8bea8 R8: 0001 R9: R10: 8800874be020 R11: 8800874be030 R12: 880544d8be33 R13: 000d R14: 81191895 R15: 880544d8bdb8 ORIG_RAX: ff54 CS: 0010 SS: 0018 #21 [880544d8be30] __change_pid at 81087dca #22 [880544d8beb0] kmem_cache_free at 81163634 #23 [880544d8bef0] __mpol_put at 81159937 #24 [880544d8bf00] do_exit at 8106c75c #25 [880544d8bf70] sys_exit at 8106caf7 #26 [880544d8bf80] system_call_fastpath at 81665982 RIP: 7f6f476b8f37 RSP: 7f68cbcfdbb0 RFLAGS: 0202 RAX: 003c RBX: 81665982 RCX: RDX: 7f68cbcfe700 RSI: 7f6f478c9250 RDI: RBP: R8: 7f68cbcfe700 R9: 7f68e82a0370 R10: 7fff R11: 0246 R12: 8106caf7 R13: 880544d8bf78 R14: 0003 R15: 7f68f8744a10 ORIG_RAX: ... To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1233175/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
[Kernel-packages] [Bug 1233175] Re: Kernel panic : mempolicy potential use-after-free on server running mongodb
Hi Chris, Does anyone of you have a repro case? Although the patch itself is really straightforward, I don't have a reliable repro case of this race unfortunately. -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1233175 Title: Kernel panic : mempolicy potential use-after-free on server running mongodb Status in “linux” package in Ubuntu: In Progress Status in “linux” source package in Precise: In Progress Bug description: PID: 21767 TASK: 8800874bdc00 CPU: 12 COMMAND: mongod #0 [880657cc3820] machine_kexec at 810393da #1 [880657cc3890] crash_kexec at 810b53f8 #2 [880657cc3960] oops_end at 8165e528 #3 [880657cc3990] die at 810178d8 #4 [880657cc39c0] do_trap at 8165de94 #5 [880657cc3a20] do_invalid_op at 81014f65 #6 [880657cc3ac0] invalid_op at 8166796b [exception RIP: slab_node+46] RIP: 8115a66e RSP: 880657cc3b70 RFLAGS: 00010097 RAX: RBX: 880657802c00 RCX: e62f6aef RDX: RSI: 0020 RDI: 880abf18a288 RBP: 880657cc3b80 R8: 0001 R9: 000100100010 R10: R11: 0022 R12: 0002 R13: R14: R15: 0020 ORIG_RAX: CS: 0010 SS: 0018 #7 [880657cc3b88] get_any_partial at 816496a0 #8 [880657cc3c18] __slab_alloc at 816498cf #9 [880657cc3cc8] __kmalloc_node_track_caller at 81166f07 #10 [880657cc3d38] __alloc_skb at 815364c8 #11 [880657cc3d88] __netdev_alloc_skb at 81536b14 #12 [880657cc3da8] enic_rq_alloc_buf at a005484c [enic] #13 [880657cc3e08] enic_poll_msix at a00559ff [enic] #14 [880657cc3e58] net_rx_action at 81545274 #15 [880657cc3ec8] __do_softirq at 8106f5f8 #16 [880657cc3f38] call_softirq at 81667bec #17 [880657cc3f50] do_softirq at 81016305 #18 [880657cc3f70] irq_exit at 8106f9de #19 [880657cc3f80] do_IRQ at 816684a3 --- IRQ stack --- #20 [880544d8bd48] ret_from_intr at 8165d82e [exception RIP: __slab_free+737] RIP: 81649467 RSP: 880544d8bdf8 RFLAGS: 0202 RAX: 0001 RBX: ff0a0210 RCX: 000180aa00a9 RDX: 000180aa00aa RSI: ea002afc6201 RDI: 880657806200 RBP: 880544d8bea8 R8: 0001 R9: R10: 8800874be020 R11: 8800874be030 R12: 880544d8be33 R13: 000d R14: 81191895 R15: 880544d8bdb8 ORIG_RAX: ff54 CS: 0010 SS: 0018 #21 [880544d8be30] __change_pid at 81087dca #22 [880544d8beb0] kmem_cache_free at 81163634 #23 [880544d8bef0] __mpol_put at 81159937 #24 [880544d8bf00] do_exit at 8106c75c #25 [880544d8bf70] sys_exit at 8106caf7 #26 [880544d8bf80] system_call_fastpath at 81665982 RIP: 7f6f476b8f37 RSP: 7f68cbcfdbb0 RFLAGS: 0202 RAX: 003c RBX: 81665982 RCX: RDX: 7f68cbcfe700 RSI: 7f6f478c9250 RDI: RBP: R8: 7f68cbcfe700 R9: 7f68e82a0370 R10: 7fff R11: 0246 R12: 8106caf7 R13: 880544d8bf78 R14: 0003 R15: 7f68f8744a10 ORIG_RAX: ... To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1233175/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
[Kernel-packages] [Bug 1233175] Re: Kernel panic : mempolicy potential use-after-free on server running mongodb
A similar case is here: http://www.mail-archive.com/linux-kernel@vger.kernel.org/msg351591.html It seems like using NUMA with high load MongoDB workloads are factors in causing this crash. -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1233175 Title: Kernel panic : mempolicy potential use-after-free on server running mongodb Status in “linux” package in Ubuntu: In Progress Status in “linux” source package in Precise: In Progress Bug description: PID: 21767 TASK: 8800874bdc00 CPU: 12 COMMAND: mongod #0 [880657cc3820] machine_kexec at 810393da #1 [880657cc3890] crash_kexec at 810b53f8 #2 [880657cc3960] oops_end at 8165e528 #3 [880657cc3990] die at 810178d8 #4 [880657cc39c0] do_trap at 8165de94 #5 [880657cc3a20] do_invalid_op at 81014f65 #6 [880657cc3ac0] invalid_op at 8166796b [exception RIP: slab_node+46] RIP: 8115a66e RSP: 880657cc3b70 RFLAGS: 00010097 RAX: RBX: 880657802c00 RCX: e62f6aef RDX: RSI: 0020 RDI: 880abf18a288 RBP: 880657cc3b80 R8: 0001 R9: 000100100010 R10: R11: 0022 R12: 0002 R13: R14: R15: 0020 ORIG_RAX: CS: 0010 SS: 0018 #7 [880657cc3b88] get_any_partial at 816496a0 #8 [880657cc3c18] __slab_alloc at 816498cf #9 [880657cc3cc8] __kmalloc_node_track_caller at 81166f07 #10 [880657cc3d38] __alloc_skb at 815364c8 #11 [880657cc3d88] __netdev_alloc_skb at 81536b14 #12 [880657cc3da8] enic_rq_alloc_buf at a005484c [enic] #13 [880657cc3e08] enic_poll_msix at a00559ff [enic] #14 [880657cc3e58] net_rx_action at 81545274 #15 [880657cc3ec8] __do_softirq at 8106f5f8 #16 [880657cc3f38] call_softirq at 81667bec #17 [880657cc3f50] do_softirq at 81016305 #18 [880657cc3f70] irq_exit at 8106f9de #19 [880657cc3f80] do_IRQ at 816684a3 --- IRQ stack --- #20 [880544d8bd48] ret_from_intr at 8165d82e [exception RIP: __slab_free+737] RIP: 81649467 RSP: 880544d8bdf8 RFLAGS: 0202 RAX: 0001 RBX: ff0a0210 RCX: 000180aa00a9 RDX: 000180aa00aa RSI: ea002afc6201 RDI: 880657806200 RBP: 880544d8bea8 R8: 0001 R9: R10: 8800874be020 R11: 8800874be030 R12: 880544d8be33 R13: 000d R14: 81191895 R15: 880544d8bdb8 ORIG_RAX: ff54 CS: 0010 SS: 0018 #21 [880544d8be30] __change_pid at 81087dca #22 [880544d8beb0] kmem_cache_free at 81163634 #23 [880544d8bef0] __mpol_put at 81159937 #24 [880544d8bf00] do_exit at 8106c75c #25 [880544d8bf70] sys_exit at 8106caf7 #26 [880544d8bf80] system_call_fastpath at 81665982 RIP: 7f6f476b8f37 RSP: 7f68cbcfdbb0 RFLAGS: 0202 RAX: 003c RBX: 81665982 RCX: RDX: 7f68cbcfe700 RSI: 7f6f478c9250 RDI: RBP: R8: 7f68cbcfe700 R9: 7f68e82a0370 R10: 7fff R11: 0246 R12: 8106caf7 R13: 880544d8bf78 R14: 0003 R15: 7f68f8744a10 ORIG_RAX: ... To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1233175/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
[Kernel-packages] [Bug 1233175] Re: Kernel panic : mempolicy potential use-after-free on server running mongodb
Hi, We also have experienced this issue with 3.2.0-57-generic. Thanks to the core dump analysis by Louis Bouchard, I could notice that accessing current-mempolicy in interrupt context is totally bad idea, and then found the following commit. http://git.kernel.org/cgit/linux/kernel/git/stable/linux- stable.git/commit/?id=e7b691b085fda913830e5280ae6f724b2a63c824 This fix was introduced in 3.6-rc1, that's why 3.8 kernel hasn't experienced this issue. Can you backport the fix to 12.04's 3.2 kernel? -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1233175 Title: Kernel panic : mempolicy potential use-after-free on server running mongodb Status in “linux” package in Ubuntu: In Progress Status in “linux” source package in Precise: In Progress Bug description: PID: 21767 TASK: 8800874bdc00 CPU: 12 COMMAND: mongod #0 [880657cc3820] machine_kexec at 810393da #1 [880657cc3890] crash_kexec at 810b53f8 #2 [880657cc3960] oops_end at 8165e528 #3 [880657cc3990] die at 810178d8 #4 [880657cc39c0] do_trap at 8165de94 #5 [880657cc3a20] do_invalid_op at 81014f65 #6 [880657cc3ac0] invalid_op at 8166796b [exception RIP: slab_node+46] RIP: 8115a66e RSP: 880657cc3b70 RFLAGS: 00010097 RAX: RBX: 880657802c00 RCX: e62f6aef RDX: RSI: 0020 RDI: 880abf18a288 RBP: 880657cc3b80 R8: 0001 R9: 000100100010 R10: R11: 0022 R12: 0002 R13: R14: R15: 0020 ORIG_RAX: CS: 0010 SS: 0018 #7 [880657cc3b88] get_any_partial at 816496a0 #8 [880657cc3c18] __slab_alloc at 816498cf #9 [880657cc3cc8] __kmalloc_node_track_caller at 81166f07 #10 [880657cc3d38] __alloc_skb at 815364c8 #11 [880657cc3d88] __netdev_alloc_skb at 81536b14 #12 [880657cc3da8] enic_rq_alloc_buf at a005484c [enic] #13 [880657cc3e08] enic_poll_msix at a00559ff [enic] #14 [880657cc3e58] net_rx_action at 81545274 #15 [880657cc3ec8] __do_softirq at 8106f5f8 #16 [880657cc3f38] call_softirq at 81667bec #17 [880657cc3f50] do_softirq at 81016305 #18 [880657cc3f70] irq_exit at 8106f9de #19 [880657cc3f80] do_IRQ at 816684a3 --- IRQ stack --- #20 [880544d8bd48] ret_from_intr at 8165d82e [exception RIP: __slab_free+737] RIP: 81649467 RSP: 880544d8bdf8 RFLAGS: 0202 RAX: 0001 RBX: ff0a0210 RCX: 000180aa00a9 RDX: 000180aa00aa RSI: ea002afc6201 RDI: 880657806200 RBP: 880544d8bea8 R8: 0001 R9: R10: 8800874be020 R11: 8800874be030 R12: 880544d8be33 R13: 000d R14: 81191895 R15: 880544d8bdb8 ORIG_RAX: ff54 CS: 0010 SS: 0018 #21 [880544d8be30] __change_pid at 81087dca #22 [880544d8beb0] kmem_cache_free at 81163634 #23 [880544d8bef0] __mpol_put at 81159937 #24 [880544d8bf00] do_exit at 8106c75c #25 [880544d8bf70] sys_exit at 8106caf7 #26 [880544d8bf80] system_call_fastpath at 81665982 RIP: 7f6f476b8f37 RSP: 7f68cbcfdbb0 RFLAGS: 0202 RAX: 003c RBX: 81665982 RCX: RDX: 7f68cbcfe700 RSI: 7f6f478c9250 RDI: RBP: R8: 7f68cbcfe700 R9: 7f68e82a0370 R10: 7fff R11: 0246 R12: 8106caf7 R13: 880544d8bf78 R14: 0003 R15: 7f68f8744a10 ORIG_RAX: ... To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1233175/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
[Kernel-packages] [Bug 1233175] Re: Kernel panic : mempolicy potential use-after-free on server running mongodb
Gentlemen, so far, both the custom patched kernel and 3.8.0-30-generic have been stable. We will keep one server on this kernel, and a number of servers on 3.2.0-55-generic and on .57, so you'll have data to compare. -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1233175 Title: Kernel panic : mempolicy potential use-after-free on server running mongodb Status in “linux” package in Ubuntu: In Progress Status in “linux” source package in Precise: In Progress Bug description: PID: 21767 TASK: 8800874bdc00 CPU: 12 COMMAND: mongod #0 [880657cc3820] machine_kexec at 810393da #1 [880657cc3890] crash_kexec at 810b53f8 #2 [880657cc3960] oops_end at 8165e528 #3 [880657cc3990] die at 810178d8 #4 [880657cc39c0] do_trap at 8165de94 #5 [880657cc3a20] do_invalid_op at 81014f65 #6 [880657cc3ac0] invalid_op at 8166796b [exception RIP: slab_node+46] RIP: 8115a66e RSP: 880657cc3b70 RFLAGS: 00010097 RAX: RBX: 880657802c00 RCX: e62f6aef RDX: RSI: 0020 RDI: 880abf18a288 RBP: 880657cc3b80 R8: 0001 R9: 000100100010 R10: R11: 0022 R12: 0002 R13: R14: R15: 0020 ORIG_RAX: CS: 0010 SS: 0018 #7 [880657cc3b88] get_any_partial at 816496a0 #8 [880657cc3c18] __slab_alloc at 816498cf #9 [880657cc3cc8] __kmalloc_node_track_caller at 81166f07 #10 [880657cc3d38] __alloc_skb at 815364c8 #11 [880657cc3d88] __netdev_alloc_skb at 81536b14 #12 [880657cc3da8] enic_rq_alloc_buf at a005484c [enic] #13 [880657cc3e08] enic_poll_msix at a00559ff [enic] #14 [880657cc3e58] net_rx_action at 81545274 #15 [880657cc3ec8] __do_softirq at 8106f5f8 #16 [880657cc3f38] call_softirq at 81667bec #17 [880657cc3f50] do_softirq at 81016305 #18 [880657cc3f70] irq_exit at 8106f9de #19 [880657cc3f80] do_IRQ at 816684a3 --- IRQ stack --- #20 [880544d8bd48] ret_from_intr at 8165d82e [exception RIP: __slab_free+737] RIP: 81649467 RSP: 880544d8bdf8 RFLAGS: 0202 RAX: 0001 RBX: ff0a0210 RCX: 000180aa00a9 RDX: 000180aa00aa RSI: ea002afc6201 RDI: 880657806200 RBP: 880544d8bea8 R8: 0001 R9: R10: 8800874be020 R11: 8800874be030 R12: 880544d8be33 R13: 000d R14: 81191895 R15: 880544d8bdb8 ORIG_RAX: ff54 CS: 0010 SS: 0018 #21 [880544d8be30] __change_pid at 81087dca #22 [880544d8beb0] kmem_cache_free at 81163634 #23 [880544d8bef0] __mpol_put at 81159937 #24 [880544d8bf00] do_exit at 8106c75c #25 [880544d8bf70] sys_exit at 8106caf7 #26 [880544d8bf80] system_call_fastpath at 81665982 RIP: 7f6f476b8f37 RSP: 7f68cbcfdbb0 RFLAGS: 0202 RAX: 003c RBX: 81665982 RCX: RDX: 7f68cbcfe700 RSI: 7f6f478c9250 RDI: RBP: R8: 7f68cbcfe700 R9: 7f68e82a0370 R10: 7fff R11: 0246 R12: 8106caf7 R13: 880544d8bf78 R14: 0003 R15: 7f68f8744a10 ORIG_RAX: ... To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1233175/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
[Kernel-packages] [Bug 1233175] Re: Kernel panic : mempolicy potential use-after-free on server running mongodb
@christopher, Lois was provided with a custom kernel that includes a patch to be tested. The patch comes from apw, following a kernel dump analysis that I did. From what we could gather, a possible race condition could be responsible for the panics. So far, I have yet to get the confirmation from Lois that ONLY the kernel with the custom patch has fixed the problem, or that a newer kernel have stabilized the situation. Since the 3.8.* kernel is available on precise, I'm not sure that identifying the specific commit that fixes the issue would be useful. Even if we identify the commit, a backport might not be posssible. I would advise to go to the newer kernel I'm sorry if this bug appears to be inactive, but the long period w/o any comment is caused by the fact that the issue does not happen on regular intervals ** Changed in: linux (Ubuntu) Status: Incomplete = Triaged ** Changed in: linux (Ubuntu) Status: Triaged = In Progress -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1233175 Title: Kernel panic : mempolicy potential use-after-free on server running mongodb Status in “linux” package in Ubuntu: In Progress Status in “linux” source package in Precise: In Progress Bug description: PID: 21767 TASK: 8800874bdc00 CPU: 12 COMMAND: mongod #0 [880657cc3820] machine_kexec at 810393da #1 [880657cc3890] crash_kexec at 810b53f8 #2 [880657cc3960] oops_end at 8165e528 #3 [880657cc3990] die at 810178d8 #4 [880657cc39c0] do_trap at 8165de94 #5 [880657cc3a20] do_invalid_op at 81014f65 #6 [880657cc3ac0] invalid_op at 8166796b [exception RIP: slab_node+46] RIP: 8115a66e RSP: 880657cc3b70 RFLAGS: 00010097 RAX: RBX: 880657802c00 RCX: e62f6aef RDX: RSI: 0020 RDI: 880abf18a288 RBP: 880657cc3b80 R8: 0001 R9: 000100100010 R10: R11: 0022 R12: 0002 R13: R14: R15: 0020 ORIG_RAX: CS: 0010 SS: 0018 #7 [880657cc3b88] get_any_partial at 816496a0 #8 [880657cc3c18] __slab_alloc at 816498cf #9 [880657cc3cc8] __kmalloc_node_track_caller at 81166f07 #10 [880657cc3d38] __alloc_skb at 815364c8 #11 [880657cc3d88] __netdev_alloc_skb at 81536b14 #12 [880657cc3da8] enic_rq_alloc_buf at a005484c [enic] #13 [880657cc3e08] enic_poll_msix at a00559ff [enic] #14 [880657cc3e58] net_rx_action at 81545274 #15 [880657cc3ec8] __do_softirq at 8106f5f8 #16 [880657cc3f38] call_softirq at 81667bec #17 [880657cc3f50] do_softirq at 81016305 #18 [880657cc3f70] irq_exit at 8106f9de #19 [880657cc3f80] do_IRQ at 816684a3 --- IRQ stack --- #20 [880544d8bd48] ret_from_intr at 8165d82e [exception RIP: __slab_free+737] RIP: 81649467 RSP: 880544d8bdf8 RFLAGS: 0202 RAX: 0001 RBX: ff0a0210 RCX: 000180aa00a9 RDX: 000180aa00aa RSI: ea002afc6201 RDI: 880657806200 RBP: 880544d8bea8 R8: 0001 R9: R10: 8800874be020 R11: 8800874be030 R12: 880544d8be33 R13: 000d R14: 81191895 R15: 880544d8bdb8 ORIG_RAX: ff54 CS: 0010 SS: 0018 #21 [880544d8be30] __change_pid at 81087dca #22 [880544d8beb0] kmem_cache_free at 81163634 #23 [880544d8bef0] __mpol_put at 81159937 #24 [880544d8bf00] do_exit at 8106c75c #25 [880544d8bf70] sys_exit at 8106caf7 #26 [880544d8bf80] system_call_fastpath at 81665982 RIP: 7f6f476b8f37 RSP: 7f68cbcfdbb0 RFLAGS: 0202 RAX: 003c RBX: 81665982 RCX: RDX: 7f68cbcfe700 RSI: 7f6f478c9250 RDI: RBP: R8: 7f68cbcfe700 R9: 7f68e82a0370 R10: 7fff R11: 0246 R12: 8106caf7 R13: 880544d8bf78 R14: 0003 R15: 7f68f8744a10 ORIG_RAX: ... To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1233175/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
[Kernel-packages] [Bug 1233175] Re: Kernel panic : mempolicy potential use-after-free on server running mongodb
Louis Bouchard, this bug was reported a while ago and there hasn't been any activity in it recently. We were wondering if this is still an issue? If so, could you please test for this with the latest development release of Ubuntu? ISO images are available from http://cdimage.ubuntu.com/daily-live/current/ . If it remains an issue, could you please run the following command in the development release from a Terminal (Applications-Accessories-Terminal), as it will automatically gather and attach updated debug information to this report: apport-collect -p linux replace-with-bug-number If reproducible, could you also please test the latest upstream kernel available (not the daily folder) following https://wiki.ubuntu.com/KernelMainlineBuilds ? It will allow additional upstream developers to examine the issue. Once you've tested the upstream kernel, please comment on which kernel version specifically you tested. If this bug is fixed in the mainline kernel, please add the following tags: kernel-fixed-upstream kernel-fixed-upstream-VERSION-NUMBER where VERSION-NUMBER is the version number of the kernel you tested. For example: kernel-fixed-upstream-v3.13-rc6 This can be done by clicking on the yellow circle with a black pencil icon next to the word Tags located at the bottom of the bug description. As well, please remove the tag: needs-upstream-testing If the mainline kernel does not fix this bug, please add the following tags: kernel-bug-exists-upstream kernel-bug-exists-upstream-VERSION-NUMBER As well, please remove the tag: needs-upstream-testing Once testing of the upstream kernel is complete, please mark this bug's Status as Confirmed. Please let us know your results. Thank you for your understanding. ** Changed in: linux (Ubuntu) Status: Triaged = Incomplete -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1233175 Title: Kernel panic : mempolicy potential use-after-free on server running mongodb Status in “linux” package in Ubuntu: Incomplete Status in “linux” source package in Precise: In Progress Bug description: PID: 21767 TASK: 8800874bdc00 CPU: 12 COMMAND: mongod #0 [880657cc3820] machine_kexec at 810393da #1 [880657cc3890] crash_kexec at 810b53f8 #2 [880657cc3960] oops_end at 8165e528 #3 [880657cc3990] die at 810178d8 #4 [880657cc39c0] do_trap at 8165de94 #5 [880657cc3a20] do_invalid_op at 81014f65 #6 [880657cc3ac0] invalid_op at 8166796b [exception RIP: slab_node+46] RIP: 8115a66e RSP: 880657cc3b70 RFLAGS: 00010097 RAX: RBX: 880657802c00 RCX: e62f6aef RDX: RSI: 0020 RDI: 880abf18a288 RBP: 880657cc3b80 R8: 0001 R9: 000100100010 R10: R11: 0022 R12: 0002 R13: R14: R15: 0020 ORIG_RAX: CS: 0010 SS: 0018 #7 [880657cc3b88] get_any_partial at 816496a0 #8 [880657cc3c18] __slab_alloc at 816498cf #9 [880657cc3cc8] __kmalloc_node_track_caller at 81166f07 #10 [880657cc3d38] __alloc_skb at 815364c8 #11 [880657cc3d88] __netdev_alloc_skb at 81536b14 #12 [880657cc3da8] enic_rq_alloc_buf at a005484c [enic] #13 [880657cc3e08] enic_poll_msix at a00559ff [enic] #14 [880657cc3e58] net_rx_action at 81545274 #15 [880657cc3ec8] __do_softirq at 8106f5f8 #16 [880657cc3f38] call_softirq at 81667bec #17 [880657cc3f50] do_softirq at 81016305 #18 [880657cc3f70] irq_exit at 8106f9de #19 [880657cc3f80] do_IRQ at 816684a3 --- IRQ stack --- #20 [880544d8bd48] ret_from_intr at 8165d82e [exception RIP: __slab_free+737] RIP: 81649467 RSP: 880544d8bdf8 RFLAGS: 0202 RAX: 0001 RBX: ff0a0210 RCX: 000180aa00a9 RDX: 000180aa00aa RSI: ea002afc6201 RDI: 880657806200 RBP: 880544d8bea8 R8: 0001 R9: R10: 8800874be020 R11: 8800874be030 R12: 880544d8be33 R13: 000d R14: 81191895 R15: 880544d8bdb8 ORIG_RAX: ff54 CS: 0010 SS: 0018 #21 [880544d8be30] __change_pid at 81087dca #22 [880544d8beb0] kmem_cache_free at 81163634 #23 [880544d8bef0] __mpol_put at 81159937 #24 [880544d8bf00] do_exit at 8106c75c #25 [880544d8bf70] sys_exit at 8106caf7 #26 [880544d8bf80] system_call_fastpath at 81665982 RIP: 7f6f476b8f37 RSP: 7f68cbcfdbb0 RFLAGS: 0202 RAX: 003c RBX: 81665982
[Kernel-packages] [Bug 1233175] Re: Kernel panic : mempolicy potential use-after-free on server running mongodb
I have one server, previously affected by the bug, that has been stable for 8 days on 3.8.0-30-generic. We also just provisioned 24 servers with 3.2.0-57-generic (not yet in production). If I can provide any information to you that would help, please let me know through the ticket. -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1233175 Title: Kernel panic : mempolicy potential use-after-free on server running mongodb Status in “linux” package in Ubuntu: Incomplete Status in “linux” source package in Precise: In Progress Bug description: PID: 21767 TASK: 8800874bdc00 CPU: 12 COMMAND: mongod #0 [880657cc3820] machine_kexec at 810393da #1 [880657cc3890] crash_kexec at 810b53f8 #2 [880657cc3960] oops_end at 8165e528 #3 [880657cc3990] die at 810178d8 #4 [880657cc39c0] do_trap at 8165de94 #5 [880657cc3a20] do_invalid_op at 81014f65 #6 [880657cc3ac0] invalid_op at 8166796b [exception RIP: slab_node+46] RIP: 8115a66e RSP: 880657cc3b70 RFLAGS: 00010097 RAX: RBX: 880657802c00 RCX: e62f6aef RDX: RSI: 0020 RDI: 880abf18a288 RBP: 880657cc3b80 R8: 0001 R9: 000100100010 R10: R11: 0022 R12: 0002 R13: R14: R15: 0020 ORIG_RAX: CS: 0010 SS: 0018 #7 [880657cc3b88] get_any_partial at 816496a0 #8 [880657cc3c18] __slab_alloc at 816498cf #9 [880657cc3cc8] __kmalloc_node_track_caller at 81166f07 #10 [880657cc3d38] __alloc_skb at 815364c8 #11 [880657cc3d88] __netdev_alloc_skb at 81536b14 #12 [880657cc3da8] enic_rq_alloc_buf at a005484c [enic] #13 [880657cc3e08] enic_poll_msix at a00559ff [enic] #14 [880657cc3e58] net_rx_action at 81545274 #15 [880657cc3ec8] __do_softirq at 8106f5f8 #16 [880657cc3f38] call_softirq at 81667bec #17 [880657cc3f50] do_softirq at 81016305 #18 [880657cc3f70] irq_exit at 8106f9de #19 [880657cc3f80] do_IRQ at 816684a3 --- IRQ stack --- #20 [880544d8bd48] ret_from_intr at 8165d82e [exception RIP: __slab_free+737] RIP: 81649467 RSP: 880544d8bdf8 RFLAGS: 0202 RAX: 0001 RBX: ff0a0210 RCX: 000180aa00a9 RDX: 000180aa00aa RSI: ea002afc6201 RDI: 880657806200 RBP: 880544d8bea8 R8: 0001 R9: R10: 8800874be020 R11: 8800874be030 R12: 880544d8be33 R13: 000d R14: 81191895 R15: 880544d8bdb8 ORIG_RAX: ff54 CS: 0010 SS: 0018 #21 [880544d8be30] __change_pid at 81087dca #22 [880544d8beb0] kmem_cache_free at 81163634 #23 [880544d8bef0] __mpol_put at 81159937 #24 [880544d8bf00] do_exit at 8106c75c #25 [880544d8bf70] sys_exit at 8106caf7 #26 [880544d8bf80] system_call_fastpath at 81665982 RIP: 7f6f476b8f37 RSP: 7f68cbcfdbb0 RFLAGS: 0202 RAX: 003c RBX: 81665982 RCX: RDX: 7f68cbcfe700 RSI: 7f6f478c9250 RDI: RBP: R8: 7f68cbcfe700 R9: 7f68e82a0370 R10: 7fff R11: 0246 R12: 8106caf7 R13: 880544d8bf78 R14: 0003 R15: 7f68f8744a10 ORIG_RAX: ... To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1233175/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
[Kernel-packages] [Bug 1233175] Re: Kernel panic : mempolicy potential use-after-free on server running mongodb
lois garcia, thank you for your comments. It would be most helpful if this could be fully reverse commit bisected from 3.2.0-38-generic to 3.8.0-30-generic in order to identify the fix commit. Could you please do this following https://wiki.ubuntu.com/Kernel/KernelBisection ? -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1233175 Title: Kernel panic : mempolicy potential use-after-free on server running mongodb Status in “linux” package in Ubuntu: Incomplete Status in “linux” source package in Precise: In Progress Bug description: PID: 21767 TASK: 8800874bdc00 CPU: 12 COMMAND: mongod #0 [880657cc3820] machine_kexec at 810393da #1 [880657cc3890] crash_kexec at 810b53f8 #2 [880657cc3960] oops_end at 8165e528 #3 [880657cc3990] die at 810178d8 #4 [880657cc39c0] do_trap at 8165de94 #5 [880657cc3a20] do_invalid_op at 81014f65 #6 [880657cc3ac0] invalid_op at 8166796b [exception RIP: slab_node+46] RIP: 8115a66e RSP: 880657cc3b70 RFLAGS: 00010097 RAX: RBX: 880657802c00 RCX: e62f6aef RDX: RSI: 0020 RDI: 880abf18a288 RBP: 880657cc3b80 R8: 0001 R9: 000100100010 R10: R11: 0022 R12: 0002 R13: R14: R15: 0020 ORIG_RAX: CS: 0010 SS: 0018 #7 [880657cc3b88] get_any_partial at 816496a0 #8 [880657cc3c18] __slab_alloc at 816498cf #9 [880657cc3cc8] __kmalloc_node_track_caller at 81166f07 #10 [880657cc3d38] __alloc_skb at 815364c8 #11 [880657cc3d88] __netdev_alloc_skb at 81536b14 #12 [880657cc3da8] enic_rq_alloc_buf at a005484c [enic] #13 [880657cc3e08] enic_poll_msix at a00559ff [enic] #14 [880657cc3e58] net_rx_action at 81545274 #15 [880657cc3ec8] __do_softirq at 8106f5f8 #16 [880657cc3f38] call_softirq at 81667bec #17 [880657cc3f50] do_softirq at 81016305 #18 [880657cc3f70] irq_exit at 8106f9de #19 [880657cc3f80] do_IRQ at 816684a3 --- IRQ stack --- #20 [880544d8bd48] ret_from_intr at 8165d82e [exception RIP: __slab_free+737] RIP: 81649467 RSP: 880544d8bdf8 RFLAGS: 0202 RAX: 0001 RBX: ff0a0210 RCX: 000180aa00a9 RDX: 000180aa00aa RSI: ea002afc6201 RDI: 880657806200 RBP: 880544d8bea8 R8: 0001 R9: R10: 8800874be020 R11: 8800874be030 R12: 880544d8be33 R13: 000d R14: 81191895 R15: 880544d8bdb8 ORIG_RAX: ff54 CS: 0010 SS: 0018 #21 [880544d8be30] __change_pid at 81087dca #22 [880544d8beb0] kmem_cache_free at 81163634 #23 [880544d8bef0] __mpol_put at 81159937 #24 [880544d8bf00] do_exit at 8106c75c #25 [880544d8bf70] sys_exit at 8106caf7 #26 [880544d8bf80] system_call_fastpath at 81665982 RIP: 7f6f476b8f37 RSP: 7f68cbcfdbb0 RFLAGS: 0202 RAX: 003c RBX: 81665982 RCX: RDX: 7f68cbcfe700 RSI: 7f6f478c9250 RDI: RBP: R8: 7f68cbcfe700 R9: 7f68e82a0370 R10: 7fff R11: 0246 R12: 8106caf7 R13: 880544d8bf78 R14: 0003 R15: 7f68f8744a10 ORIG_RAX: ... To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1233175/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
[Kernel-packages] [Bug 1233175] Re: Kernel panic : mempolicy potential use-after-free on server running mongodb
** Changed in: linux (Ubuntu Precise) Status: Triaged = In Progress -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1233175 Title: Kernel panic : mempolicy potential use-after-free on server running mongodb Status in “linux” package in Ubuntu: Triaged Status in “linux” source package in Precise: In Progress Bug description: PID: 21767 TASK: 8800874bdc00 CPU: 12 COMMAND: mongod #0 [880657cc3820] machine_kexec at 810393da #1 [880657cc3890] crash_kexec at 810b53f8 #2 [880657cc3960] oops_end at 8165e528 #3 [880657cc3990] die at 810178d8 #4 [880657cc39c0] do_trap at 8165de94 #5 [880657cc3a20] do_invalid_op at 81014f65 #6 [880657cc3ac0] invalid_op at 8166796b [exception RIP: slab_node+46] RIP: 8115a66e RSP: 880657cc3b70 RFLAGS: 00010097 RAX: RBX: 880657802c00 RCX: e62f6aef RDX: RSI: 0020 RDI: 880abf18a288 RBP: 880657cc3b80 R8: 0001 R9: 000100100010 R10: R11: 0022 R12: 0002 R13: R14: R15: 0020 ORIG_RAX: CS: 0010 SS: 0018 #7 [880657cc3b88] get_any_partial at 816496a0 #8 [880657cc3c18] __slab_alloc at 816498cf #9 [880657cc3cc8] __kmalloc_node_track_caller at 81166f07 #10 [880657cc3d38] __alloc_skb at 815364c8 #11 [880657cc3d88] __netdev_alloc_skb at 81536b14 #12 [880657cc3da8] enic_rq_alloc_buf at a005484c [enic] #13 [880657cc3e08] enic_poll_msix at a00559ff [enic] #14 [880657cc3e58] net_rx_action at 81545274 #15 [880657cc3ec8] __do_softirq at 8106f5f8 #16 [880657cc3f38] call_softirq at 81667bec #17 [880657cc3f50] do_softirq at 81016305 #18 [880657cc3f70] irq_exit at 8106f9de #19 [880657cc3f80] do_IRQ at 816684a3 --- IRQ stack --- #20 [880544d8bd48] ret_from_intr at 8165d82e [exception RIP: __slab_free+737] RIP: 81649467 RSP: 880544d8bdf8 RFLAGS: 0202 RAX: 0001 RBX: ff0a0210 RCX: 000180aa00a9 RDX: 000180aa00aa RSI: ea002afc6201 RDI: 880657806200 RBP: 880544d8bea8 R8: 0001 R9: R10: 8800874be020 R11: 8800874be030 R12: 880544d8be33 R13: 000d R14: 81191895 R15: 880544d8bdb8 ORIG_RAX: ff54 CS: 0010 SS: 0018 #21 [880544d8be30] __change_pid at 81087dca #22 [880544d8beb0] kmem_cache_free at 81163634 #23 [880544d8bef0] __mpol_put at 81159937 #24 [880544d8bf00] do_exit at 8106c75c #25 [880544d8bf70] sys_exit at 8106caf7 #26 [880544d8bf80] system_call_fastpath at 81665982 RIP: 7f6f476b8f37 RSP: 7f68cbcfdbb0 RFLAGS: 0202 RAX: 003c RBX: 81665982 RCX: RDX: 7f68cbcfe700 RSI: 7f6f478c9250 RDI: RBP: R8: 7f68cbcfe700 R9: 7f68e82a0370 R10: 7fff R11: 0246 R12: 8106caf7 R13: 880544d8bf78 R14: 0003 R15: 7f68f8744a10 ORIG_RAX: ... To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1233175/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
[Kernel-packages] [Bug 1233175] Re: Kernel panic : mempolicy potential use-after-free on server running mongodb
Here is an analysis of the kernel core dump captured for this issue : crash sys KERNEL: vmlinux-3.2.0-38-generic DUMPFILE: VmCore CPUS: 24 DATE: Wed Sep 18 22:34:35 2013 UPTIME: 1 days, 11:33:14 LOAD AVERAGE: 2.04, 2.09, 2.16 TASKS: 6656 NODENAME: ddb-mongo41 RELEASE: 3.2.0-38-generic VERSION: #61-Ubuntu SMP Tue Feb 19 12:18:21 UTC 2013 MACHINE: x86_64 (2533 Mhz) MEMORY: 47.9 GB PANIC: [127932.907100] kernel BUG at /build/buildd/linux-3.2.0/mm/mempolicy.c:1638! PID: 21767 COMMAND: mongod TASK: 8800874bdc00 [THREAD_INFO: 880544d8a000] CPU: 12 STATE: EXIT_DEAD (PANIC) Analysis This is the backtrace of the panic task : crash bt PID: 21767 TASK: 8800874bdc00 CPU: 12 COMMAND: mongod #0 [880657cc3820] machine_kexec at 810393da #1 [880657cc3890] crash_kexec at 810b53f8 #2 [880657cc3960] oops_end at 8165e528 #3 [880657cc3990] die at 810178d8 #4 [880657cc39c0] do_trap at 8165de94 #5 [880657cc3a20] do_invalid_op at 81014f65 #6 [880657cc3ac0] invalid_op at 8166796b [exception RIP: slab_node+0x2e] RIP: 8115a66e RSP: 880657cc3b70 RFLAGS: 00010097 RAX: RBX: 880657802c00 RCX: e62f6aef RDX: RSI: 0020 RDI: 880abf18a288 RBP: 880657cc3b80 R8: 0001 R9: 000100100010 R10: R11: 0022 R12: 0002 R13: R14: R15: 0020 ORIG_RAX: CS: 0010 SS: 0018 #7 [880657cc3b88] get_any_partial at 816496a0 #8 [880657cc3c18] __slab_alloc at 816498cf #9 [880657cc3cc8] __kmalloc_node_track_caller at 81166f07 #10 [880657cc3d38] __alloc_skb at 815364c8 #11 [880657cc3d88] __netdev_alloc_skb at 81536b14 #12 [880657cc3da8] enic_rq_alloc_buf at a005484c [enic] #13 [880657cc3e08] enic_poll_msix at a00559ff [enic] #14 [880657cc3e58] net_rx_action at 81545274 #15 [880657cc3ec8] __do_softirq at 8106f5f8 #16 [880657cc3f38] call_softirq at 81667bec #17 [880657cc3f50] do_softirq at 81016305 #18 [880657cc3f70] irq_exit at 8106f9de #19 [880657cc3f80] do_IRQ at 816684a3 --- IRQ stack --- #20 [880544d8bd48] ret_from_intr at 8165d82e [exception RIP: __slab_free+0x2e1] RIP: 81649467 RSP: 880544d8bdf8 RFLAGS: 0202 RAX: 0001 RBX: ff0a0210 RCX: 000180aa00a9 RDX: 000180aa00aa RSI: ea002afc6201 RDI: 880657806200 RBP: 880544d8bea8 R8: 0001 R9: R10: 8800874be020 R11: 8800874be030 R12: 880544d8be33 R13: 000d R14: 81191895 R15: 880544d8bdb8 ORIG_RAX: ff54 CS: 0010 SS: 0018 #21 [880544d8be30] __change_pid at 81087dca #22 [880544d8beb0] kmem_cache_free at 81163634 #23 [880544d8bef0] __mpol_put at 81159937 #24 [880544d8bf00] do_exit at 8106c75c #25 [880544d8bf70] sys_exit at 8106caf7 #26 [880544d8bf80] system_call_fastpath at 81665982 RIP: 7f6f476b8f37 RSP: 7f68cbcfdbb0 RFLAGS: 0202 RAX: 003c RBX: 81665982 RCX: RDX: 7f68cbcfe700 RSI: 7f6f478c9250 RDI: RBP: R8: 7f68cbcfe700 R9: 7f68e82a0370 R10: 7fff R11: 0246 R12: 8106caf7 R13: 880544d8bf78 R14: 0003 R15: 7f68f8744a10 ORIG_RAX: 003c CS: 0033 SS: 002b And the register information : [127932.906804] [ cut here ] [127932.907100] [127932.907502] invalid opcode: [#1] SMP [127932.907774] CPU 12 [127932.907901] Modules linked in: vesafb joydev iomemory_vsl(P) i7core_edac ioatdma edac_core dca tpm_tis acpi_power_meter mac_hid lp parport usbhid hid usb_storage mptsas enic mptscsih mptbase scsi_transport_sas [127932.909246] [127932.909340] Pid: 21767, comm: mongod Tainted: P O 3.2.0-38-generic #61-Ubuntu Cisco Systems Inc UCSC-BSE-SFF-C200/UCSC-BSE-SFF-C 200 [127932.910150] RIP: 0010:[8115a66e] [8115a66e] slab_node+0x2e/0xa0 [127932.910614] RSP: 0018:880657cc3b70 EFLAGS: 00010097 [127932.910921] RAX: RBX: 880657802c00 RCX: e62f6aef [127932.911344] RDX: RSI: 0020 RDI: 880abf18a288 [127932.911763] RBP: 880657cc3b80 R08: 0001 R09: 000100100010 [127932.912184] R10: R11: 0022 R12: 0002 [127932.912625] R13: R14: R15: 0020
[Kernel-packages] [Bug 1233175] Re: Kernel panic : mempolicy potential use-after-free on server running mongodb
** Also affects: linux (Ubuntu Precise) Importance: Undecided Status: New -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1233175 Title: Kernel panic : mempolicy potential use-after-free on server running mongodb Status in “linux” package in Ubuntu: Triaged Status in “linux” source package in Precise: New Bug description: PID: 21767 TASK: 8800874bdc00 CPU: 12 COMMAND: mongod #0 [880657cc3820] machine_kexec at 810393da #1 [880657cc3890] crash_kexec at 810b53f8 #2 [880657cc3960] oops_end at 8165e528 #3 [880657cc3990] die at 810178d8 #4 [880657cc39c0] do_trap at 8165de94 #5 [880657cc3a20] do_invalid_op at 81014f65 #6 [880657cc3ac0] invalid_op at 8166796b [exception RIP: slab_node+46] RIP: 8115a66e RSP: 880657cc3b70 RFLAGS: 00010097 RAX: RBX: 880657802c00 RCX: e62f6aef RDX: RSI: 0020 RDI: 880abf18a288 RBP: 880657cc3b80 R8: 0001 R9: 000100100010 R10: R11: 0022 R12: 0002 R13: R14: R15: 0020 ORIG_RAX: CS: 0010 SS: 0018 #7 [880657cc3b88] get_any_partial at 816496a0 #8 [880657cc3c18] __slab_alloc at 816498cf #9 [880657cc3cc8] __kmalloc_node_track_caller at 81166f07 #10 [880657cc3d38] __alloc_skb at 815364c8 #11 [880657cc3d88] __netdev_alloc_skb at 81536b14 #12 [880657cc3da8] enic_rq_alloc_buf at a005484c [enic] #13 [880657cc3e08] enic_poll_msix at a00559ff [enic] #14 [880657cc3e58] net_rx_action at 81545274 #15 [880657cc3ec8] __do_softirq at 8106f5f8 #16 [880657cc3f38] call_softirq at 81667bec #17 [880657cc3f50] do_softirq at 81016305 #18 [880657cc3f70] irq_exit at 8106f9de #19 [880657cc3f80] do_IRQ at 816684a3 --- IRQ stack --- #20 [880544d8bd48] ret_from_intr at 8165d82e [exception RIP: __slab_free+737] RIP: 81649467 RSP: 880544d8bdf8 RFLAGS: 0202 RAX: 0001 RBX: ff0a0210 RCX: 000180aa00a9 RDX: 000180aa00aa RSI: ea002afc6201 RDI: 880657806200 RBP: 880544d8bea8 R8: 0001 R9: R10: 8800874be020 R11: 8800874be030 R12: 880544d8be33 R13: 000d R14: 81191895 R15: 880544d8bdb8 ORIG_RAX: ff54 CS: 0010 SS: 0018 #21 [880544d8be30] __change_pid at 81087dca #22 [880544d8beb0] kmem_cache_free at 81163634 #23 [880544d8bef0] __mpol_put at 81159937 #24 [880544d8bf00] do_exit at 8106c75c #25 [880544d8bf70] sys_exit at 8106caf7 #26 [880544d8bf80] system_call_fastpath at 81665982 RIP: 7f6f476b8f37 RSP: 7f68cbcfdbb0 RFLAGS: 0202 RAX: 003c RBX: 81665982 RCX: RDX: 7f68cbcfe700 RSI: 7f6f478c9250 RDI: RBP: R8: 7f68cbcfe700 R9: 7f68e82a0370 R10: 7fff R11: 0246 R12: 8106caf7 R13: 880544d8bf78 R14: 0003 R15: 7f68f8744a10 ORIG_RAX: ... To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1233175/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
[Kernel-packages] [Bug 1233175] Re: Kernel panic : mempolicy potential use-after-free on server running mongodb
** Changed in: linux (Ubuntu Precise) Status: New = Triaged ** Changed in: linux (Ubuntu Precise) Assignee: (unassigned) = Louis Bouchard (louis-bouchard) ** Changed in: linux (Ubuntu Precise) Importance: Undecided = High -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1233175 Title: Kernel panic : mempolicy potential use-after-free on server running mongodb Status in “linux” package in Ubuntu: Triaged Status in “linux” source package in Precise: Triaged Bug description: PID: 21767 TASK: 8800874bdc00 CPU: 12 COMMAND: mongod #0 [880657cc3820] machine_kexec at 810393da #1 [880657cc3890] crash_kexec at 810b53f8 #2 [880657cc3960] oops_end at 8165e528 #3 [880657cc3990] die at 810178d8 #4 [880657cc39c0] do_trap at 8165de94 #5 [880657cc3a20] do_invalid_op at 81014f65 #6 [880657cc3ac0] invalid_op at 8166796b [exception RIP: slab_node+46] RIP: 8115a66e RSP: 880657cc3b70 RFLAGS: 00010097 RAX: RBX: 880657802c00 RCX: e62f6aef RDX: RSI: 0020 RDI: 880abf18a288 RBP: 880657cc3b80 R8: 0001 R9: 000100100010 R10: R11: 0022 R12: 0002 R13: R14: R15: 0020 ORIG_RAX: CS: 0010 SS: 0018 #7 [880657cc3b88] get_any_partial at 816496a0 #8 [880657cc3c18] __slab_alloc at 816498cf #9 [880657cc3cc8] __kmalloc_node_track_caller at 81166f07 #10 [880657cc3d38] __alloc_skb at 815364c8 #11 [880657cc3d88] __netdev_alloc_skb at 81536b14 #12 [880657cc3da8] enic_rq_alloc_buf at a005484c [enic] #13 [880657cc3e08] enic_poll_msix at a00559ff [enic] #14 [880657cc3e58] net_rx_action at 81545274 #15 [880657cc3ec8] __do_softirq at 8106f5f8 #16 [880657cc3f38] call_softirq at 81667bec #17 [880657cc3f50] do_softirq at 81016305 #18 [880657cc3f70] irq_exit at 8106f9de #19 [880657cc3f80] do_IRQ at 816684a3 --- IRQ stack --- #20 [880544d8bd48] ret_from_intr at 8165d82e [exception RIP: __slab_free+737] RIP: 81649467 RSP: 880544d8bdf8 RFLAGS: 0202 RAX: 0001 RBX: ff0a0210 RCX: 000180aa00a9 RDX: 000180aa00aa RSI: ea002afc6201 RDI: 880657806200 RBP: 880544d8bea8 R8: 0001 R9: R10: 8800874be020 R11: 8800874be030 R12: 880544d8be33 R13: 000d R14: 81191895 R15: 880544d8bdb8 ORIG_RAX: ff54 CS: 0010 SS: 0018 #21 [880544d8be30] __change_pid at 81087dca #22 [880544d8beb0] kmem_cache_free at 81163634 #23 [880544d8bef0] __mpol_put at 81159937 #24 [880544d8bf00] do_exit at 8106c75c #25 [880544d8bf70] sys_exit at 8106caf7 #26 [880544d8bf80] system_call_fastpath at 81665982 RIP: 7f6f476b8f37 RSP: 7f68cbcfdbb0 RFLAGS: 0202 RAX: 003c RBX: 81665982 RCX: RDX: 7f68cbcfe700 RSI: 7f6f478c9250 RDI: RBP: R8: 7f68cbcfe700 R9: 7f68e82a0370 R10: 7fff R11: 0246 R12: 8106caf7 R13: 880544d8bf78 R14: 0003 R15: 7f68f8744a10 ORIG_RAX: ... To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1233175/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
