kernel-packages team mailing list archive

[Munehisa Kamata <kamatam@xxxxxxxxxx>]

I will not be able to provide a reproducer of this immediately.  If you
agree, please keep this open until I can have it or someone comes here
with his/her reproducer.

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1233175

Title:
  Kernel panic : mempolicy potential use-after-free on server running
  mongodb

Status in “linux” package in Ubuntu:
  In Progress
Status in “linux” source package in Precise:
  In Progress

Bug description:
  PID: 21767 TASK: ffff8800874bdc00 CPU: 12 COMMAND: "mongod"
   #0 [ffff880657cc3820] machine_kexec at ffffffff810393da
   #1 [ffff880657cc3890] crash_kexec at ffffffff810b53f8
   #2 [ffff880657cc3960] oops_end at ffffffff8165e528
   #3 [ffff880657cc3990] die at ffffffff810178d8
   #4 [ffff880657cc39c0] do_trap at ffffffff8165de94
   #5 [ffff880657cc3a20] do_invalid_op at ffffffff81014f65
   #6 [ffff880657cc3ac0] invalid_op at ffffffff8166796b
      [exception RIP: slab_node+46]
      RIP: ffffffff8115a66e RSP: ffff880657cc3b70 RFLAGS: 00010097
      RAX: 0000000000000000 RBX: ffff880657802c00 RCX: 00000000e62f6aef
      RDX: 0000000000000000 RSI: 0000000000000020 RDI: ffff880abf18a288
      RBP: ffff880657cc3b80 R8: 0000000000000001 R9: 0000000100100010
      R10: 0000000000000000 R11: 0000000000000022 R12: 0000000000000002
      R13: 0000000000000000 R14: 00000000ffffffff R15: 0000000000000020
      ORIG_RAX: ffffffffffffffff CS: 0010 SS: 0018
   #7 [ffff880657cc3b88] get_any_partial at ffffffff816496a0
   #8 [ffff880657cc3c18] __slab_alloc at ffffffff816498cf
   #9 [ffff880657cc3cc8] __kmalloc_node_track_caller at ffffffff81166f07
  #10 [ffff880657cc3d38] __alloc_skb at ffffffff815364c8
  #11 [ffff880657cc3d88] __netdev_alloc_skb at ffffffff81536b14
  #12 [ffff880657cc3da8] enic_rq_alloc_buf at ffffffffa005484c [enic]
  #13 [ffff880657cc3e08] enic_poll_msix at ffffffffa00559ff [enic]
  #14 [ffff880657cc3e58] net_rx_action at ffffffff81545274
  #15 [ffff880657cc3ec8] __do_softirq at ffffffff8106f5f8
  #16 [ffff880657cc3f38] call_softirq at ffffffff81667bec
  #17 [ffff880657cc3f50] do_softirq at ffffffff81016305
  #18 [ffff880657cc3f70] irq_exit at ffffffff8106f9de
  #19 [ffff880657cc3f80] do_IRQ at ffffffff816684a3
  --- <IRQ stack> ---
  #20 [ffff880544d8bd48] ret_from_intr at ffffffff8165d82e
      [exception RIP: __slab_free+737]
      RIP: ffffffff81649467 RSP: ffff880544d8bdf8 RFLAGS: 00000202
      RAX: 0000000000000001 RBX: ffffffffff0a0210 RCX: 0000000180aa00a9
      RDX: 0000000180aa00aa RSI: ffffea002afc6201 RDI: ffff880657806200
      RBP: ffff880544d8bea8 R8: 0000000000000001 R9: 0000000000000000
      R10: ffff8800874be020 R11: ffff8800874be030 R12: ffff880544d8be33
      R13: 000000000000000d R14: ffffffff81191895 R15: ffff880544d8bdb8
      ORIG_RAX: ffffffffffffff54 CS: 0010 SS: 0018
  #21 [ffff880544d8be30] __change_pid at ffffffff81087dca
  #22 [ffff880544d8beb0] kmem_cache_free at ffffffff81163634
  #23 [ffff880544d8bef0] __mpol_put at ffffffff81159937
  #24 [ffff880544d8bf00] do_exit at ffffffff8106c75c
  #25 [ffff880544d8bf70] sys_exit at ffffffff8106caf7
  #26 [ffff880544d8bf80] system_call_fastpath at ffffffff81665982
      RIP: 00007f6f476b8f37 RSP: 00007f68cbcfdbb0 RFLAGS: 00000202
      RAX: 000000000000003c RBX: ffffffff81665982 RCX: ffffffffffffffff
      RDX: 00007f68cbcfe700 RSI: 00007f6f478c9250 RDI: 0000000000000000
      RBP: 0000000000000000 R8: 00007f68cbcfe700 R9: 00007f68e82a0370
      R10: 000000007fffffff R11: 0000000000000246 R12: ffffffff8106caf7
      R13: ffff880544d8bf78 R14: 0000000000000003 R15: 00007f68f8744a10
      ORIG_RAX: 000000000000...

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1233175/+subscriptions