https://bugzilla.novell.com/show_bug.cgi?id=804198 https://bugzilla.novell.com/show_bug.cgi?id=804198#c0 Summary: NULL pointer dereference in kernel-xen-3.7.6/linux-3.7/drivers/tty/tty_io.c when boot NET iso in Xen PV Classification: openSUSE Product: openSUSE 12.3 Version: RC 1 Platform: x86-64 OS/Version: openSUSE 12.2 Status: NEW Severity: Major Priority: P5 - None Component: Kernel AssignedTo: kernel-maintainers@forge.provo.novell.com ReportedBy: highwaystar.ru@gmail.com QAContact: qa-bugs@suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.26 (KHTML, like Gecko) Chrome/26.0.1383.0 Safari/537.26 SUSE/26.0.1383.0 when I tryed to install openSUSE 12.3 RC1 from NET iso x86_64 under xen, I have kernel BUG Reproducible: Always Steps to Reproduce: 1. Create virtual xen machine with NET install image 2. Boot it and select Network Install 3. Wait until images downloaded and installation starts Actual Results: ------------[ cut here ]------------ [ 4.504232] WARNING: at /home/abuild/rpmbuild/BUILD/kernel-xen-3.7.6/linux-3.7/drivers/tty/tty_io.c:1420 tty_init_dev+0x19a/0x1d0() [ 4.504238] tty_init_dev: tty driver does not set tty->port. This will crash the kernel later. Fix the driver! [ 4.504242] Modules linked in: arc4 ecb processor thermal_sys hwmon loop nfs lockd sunrpc fscache nls_iso8859_1 nls_cp437 af_packet sg st sr_mod crc32c_intel ghash_clmulni_intel xennet xenblk cdrom aesni_intel ablk_helper cryptd lrw aes_x86_64 xts gf128mul [ 4.504287] Pid: 942, comm: init Tainted: G W 3.7.6-1.2-xen #1 [ 4.504293] Call Trace: [ 4.504305] [<ffffffff80008ae5>] dump_trace+0x85/0x1c0 [ 4.504313] [<ffffffff804f7ff9>] dump_stack+0x69/0x6f [ 4.504320] [<ffffffff8002edd9>] warn_slowpath_common+0x79/0xc0 [ 4.504328] [<ffffffff8002eed5>] warn_slowpath_fmt+0x45/0x50 [ 4.504333] [<ffffffff8031f4fa>] tty_init_dev+0x19a/0x1d0 [ 4.504342] [<ffffffff8031fe18>] tty_open+0x318/0x580 [ 4.504348] [<ffffffff8013757f>] chrdev_open+0xbf/0x1e0 [ 4.504353] [<ffffffff801313c6>] do_dentry_open+0x206/0x290 [ 4.504362] [<ffffffff80140231>] do_last+0x2e1/0xed0 [ 4.504368] [<ffffffff80141da3>] path_openat+0xc3/0x4f0 [ 4.504375] [<ffffffff80142b94>] do_filp_open+0x44/0xb0 [ 4.504380] [<ffffffff80132583>] do_sys_open+0xf3/0x1e0 [ 4.504385] [<ffffffff8050a8bb>] system_call_fastpath+0x1a/0x1f [ 4.504394] [<00007f5c06523770>] 0x7f5c0652376f [ 4.504397] ---[ end trace 5bfb151795c2f71e ]--- [ 4.504406] Warning: dev (tty9) tty->count(0) != #fd's(1) in tty_open [ 4.505858] Warning: dev (tty9) tty->count(1) != #fd's(2) in tty_open [ 4.505887] Warning: dev (tty9) tty->count(1) != #fd's(2) in tty_release ok (If a driver is not working for you, try booting with brokenmodules=driver_name.) Xen Virtual Storage 0 drivers: xenblk* Xen Virtual Storage 1 drivers: xenblk* Xen Virtual Ethernet Card 0 drivers: xennet* [ 4.627379] BIOS EDD facility v0.16 2004-Jun-25, 0 devices found [ 4.627389] EDD information not available. [ 4.722914] BIOS EDD facility v0.16 2004-Jun-25, 0 devices found [ 4.722923] EDD information not available. [ 4.820033] BIOS EDD facility v0.16 2004-Jun-25, 0 devices found [ 4.820069] EDD information not available. [ 4.891309] ------------[ cut here ]------------ [ 4.891335] WARNING: at /home/abuild/rpmbuild/BUILD/kernel-xen-3.7.6/linux-3.7/drivers/tty/tty_io.c:1420 tty_init_dev+0x19a/0x1d0() [ 4.891348] tty_init_dev: tty driver does not set tty->port. This will crash the kernel later. Fix the driver! [ 4.891358] Modules linked in: parport_pc parport arc4 ecb processor thermal_sys hwmon loop nfs lockd sunrpc fscache nls_iso8859_1 nls_cp437 af_packet sg st sr_mod crc32c_intel ghash_clmulni_intel xennet xenblk cdrom aesni_intel ablk_helper cryptd lrw aes_x86_64 xts gf128mul [ 4.891474] Pid: 1, comm: init Tainted: G W 3.7.6-1.2-xen #1 [ 4.891486] Call Trace: [ 4.891515] [<ffffffff80008ae5>] dump_trace+0x85/0x1c0 [ 4.891530] [<ffffffff804f7ff9>] dump_stack+0x69/0x6f [ 4.891546] [<ffffffff8002edd9>] warn_slowpath_common+0x79/0xc0 [ 4.891566] [<ffffffff8002eed5>] warn_slowpath_fmt+0x45/0x50 [ 4.891580] [<ffffffff8031f4fa>] tty_init_dev+0x19a/0x1d0 [ 4.891600] [<ffffffff8031fe18>] tty_open+0x318/0x580 [ 4.891616] [<ffffffff8013757f>] chrdev_open+0xbf/0x1e0 [ 4.891630] [<ffffffff801313c6>] do_dentry_open+0x206/0x290 [ 4.891645] [<ffffffff80140231>] do_last+0x2e1/0xed0 [ 4.891664] [<ffffffff80141da3>] path_openat+0xc3/0x4f0 [ 318.945377] ------------[ cut here ]------------ [ 318.945390] WARNING: at /home/abuild/rpmbuild/BUILD/kernel-xen-3.7.6/linux-3.7/drivers/tty/tty_io.c:1420 tty_init_dev+0x19a/0x1d0() [ 318.945395] tty_init_dev: tty driver does not set tty->port. This will crash the kernel later. Fix the driver! [ 318.945399] Modules linked in: squashfs parport_pc parport arc4 ecb processor thermal_sys hwmon loop nfs lockd sunrpc fscache nls_iso8859_1 nls_cp437 af_packet sg st sr_mod crc32c_intel ghash_clmulni_intel xennet xenblk cdrom aesni_intel ablk_helper cryptd lrw aes_x86_64 xts gf128mul [ 318.945448] Pid: 1251, comm: init Tainted: G W 3.7.6-1.2-xen #1 [ 318.945455] Call Trace: [ 318.945468] [<ffffffff80008ae5>] dump_trace+0x85/0x1c0 [ 318.945475] [<ffffffff804f7ff9>] dump_stack+0x69/0x6f [ 318.945481] [<ffffffff8002edd9>] warn_slowpath_common+0x79/0xc0 [ 318.945490] [<ffffffff8002eed5>] warn_slowpath_fmt+0x45/0x50 [ 318.945498] [<ffffffff8031f4fa>] tty_init_dev+0x19a/0x1d0 [ 318.945505] [<ffffffff8031fe18>] tty_open+0x318/0x580 [ 318.945514] [<ffffffff8013757f>] chrdev_open+0xbf/0x1e0 [ 318.945522] [<ffffffff801313c6>] do_dentry_open+0x206/0x290 [ 318.945531] [<ffffffff80140231>] do_last+0x2e1/0xed0 [ 318.945536] [<ffffffff80141da3>] path_openat+0xc3/0x4f0 [ 318.945544] [<ffffffff80142b94>] do_filp_open+0x44/0xb0 [ 318.945550] [<ffffffff80132583>] do_sys_open+0xf3/0x1e0 [ 318.945558] [<ffffffff8050a8bb>] system_call_fastpath+0x1a/0x1f [ 318.945567] [<00007f5c0652378d>] 0x7f5c0652378c [ 318.945570] ---[ end trace 5bfb151795c2f720 ]--- [ 318.945584] Warning: dev (tty5) tty->count(0) != #fd's(1) in tty_open [ 318.945738] ------------[ cut here ]------------ [ 318.945745] WARNING: at /home/abuild/rpmbuild/BUILD/kernel-xen-3.7.6/linux-3.7/drivers/tty/tty_io.c:1420 tty_init_dev+0x19a/0x1d0() [ 318.945749] tty_init_dev: tty driver does not set tty->port. This will crash the kernel later. Fix the driver! [ 318.945753] Modules linked in: squashfs parport_pc parport arc4 ecb processor thermal_sys hwmon loop nfs lockd sunrpc fscache nls_iso8859_1 nls_cp437 af_packet sg st sr_mod crc32c_intel ghash_clmulni_intel xennet xenblk cdrom aesni_intel ablk_helper cryptd lrw aes_x86_64 xts gf128mul [ 318.945795] Pid: 1252, comm: init Tainted: G W 3.7.6-1.2-xen #1 [ 318.945798] Call Trace: [ 318.945804] [<ffffffff80008ae5>] dump_trace+0x85/0x1c0 [ 318.945809] [<ffffffff804f7ff9>] dump_stack+0x69/0x6f [ 318.945814] [<ffffffff8002edd9>] warn_slowpath_common+0x79/0xc0 [ 318.945820] [<ffffffff8002eed5>] warn_slowpath_fmt+0x45/0x50 [ 318.945825] [<ffffffff8031f4fa>] tty_init_dev+0x19a/0x1d0 [ 318.945830] [<ffffffff8031fe18>] tty_open+0x318/0x580 [ 318.945835] [<ffffffff8013757f>] chrdev_open+0xbf/0x1e0 [ 318.945840] [<ffffffff801313c6>] do_dentry_open+0x206/0x290 [ 318.945846] [<ffffffff80140231>] do_last+0x2e1/0xed0 [ 318.945851] [<ffffffff80141da3>] path_openat+0xc3/0x4f0 [ 318.945856] [<ffffffff80142b94>] do_filp_open+0x44/0xb0 [ 318.945860] [<ffffffff80132583>] do_sys_open+0xf3/0x1e0 [ 318.945865] [<ffffffff8050a8bb>] system_call_fastpath+0x1a/0x1f [ 318.945871] [<00007f5c0652378d>] 0x7f5c0652378c [ 318.945874] ---[ end trace 5bfb151795c2f721 ]--- [ 318.945881] Warning: dev (tty6) tty->count(0) != #fd's(1) in tty_open [ 318.949339] Warning: dev (tty6) tty->count(1) != #fd's(2) in tty_open [ 318.949348] Warning: dev (tty6) tty->count(1) != #fd's(2) in tty_release [ 318.949901] ------------[ cut here ]------------ [ 318.949907] WARNING: at /home/abuild/rpmbuild/BUILD/kernel-xen-3.7.6/linux-3.7/drivers/tty/tty_io.c:1420 tty_init_dev+0x19a/0x1d0() [ 318.949912] tty_init_dev: tty driver does not set tty->port. This will crash the kernel later. Fix the driver! [ 318.949915] Modules linked in: squashfs parport_pc parport arc4 ecb processor thermal_sys hwmon loop nfs lockd sunrpc fscache nls_iso8859_1 nls_cp437 af_packet sg st sr_mod crc32c_intel ghash_clmulni_intel xennet xenblk cdrom aesni_intel ablk_helper cryptd lrw aes_x86_64 xts gf128mul [ 318.949950] Pid: 1250, comm: init Tainted: G W 3.7.6-1.2-xen #1 [ 318.949953] Call Trace: [ 318.949961] [<ffffffff80008ae5>] dump_trace+0x85/0x1c0 [ 318.949966] [<ffffffff804f7ff9>] dump_stack+0x69/0x6f [ 318.949971] [<ffffffff8002edd9>] warn_slowpath_common+0x79/0xc0 [ 318.949976] [<ffffffff8002eed5>] warn_slowpath_fmt+0x45/0x50 [ 318.949981] [<ffffffff8031f4fa>] tty_init_dev+0x19a/0x1d0 [ 318.949986] [<ffffffff8031fe18>] tty_open+0x318/0x580 [ 318.949991] [<ffffffff8013757f>] chrdev_open+0xbf/0x1e0 [ 318.949995] [<ffffffff801313c6>] do_dentry_open+0x206/0x290 [ 318.950000] [<ffffffff80140231>] do_last+0x2e1/0xed0 [ 318.950005] [<ffffffff80141da3>] path_openat+0xc3/0x4f0 [ 318.950009] [<ffffffff80142b94>] do_filp_open+0x44/0xb0 [ 318.950014] [<ffffffff80132583>] do_sys_open+0xf3/0x1e0 [ 318.950018] [<ffffffff8050a8bb>] system_call_fastpath+0x1a/0x1f [ 318.950023] [<00007f5c0652378d>] 0x7f5c0652378c [ 318.950026] ---[ end trace 5bfb151795c2f722 ]--- [ 318.950033] Warning: dev (tty2) tty->count(0) != #fd's(1) in tty_open [ 318.951386] Warning: dev (tty2) tty->count(1) != #fd's(2) in tty_open [ 318.951394] Warning: dev (tty2) tty->count(1) != #fd's(2) in tty_release [ 318.954609] Warning: dev (tty5) tty->count(1) != #fd's(2) in tty_open [ 318.954617] Warning: dev (tty5) tty->count(1) != #fd's(2) in tty_release starting dbus...Unknown username "polkitd" in message bus configuration file Unknown username "polkitd" in message bus configuration file Failed to start message bus: Failed to bind socket "/run/dbus/system_bus_socket": No such file or directory failed starting klogd... ok rcnscd: no such service nscd starting yast... Couldn't get a file descriptor referring to the console Couldn't get a file descriptor referring to the console Couldn't get a file descriptor referring to the console Couldn't get a file descriptor referring to the console Probing connected terminal... Initializing virtual console... Found an xterm terminal on /dev/console (129 columns x 31 lines). [ 322.929914] ------------[ cut here ]------------ [ 322.929937] WARNING: at /home/abuild/rpmbuild/BUILD/kernel-xen-3.7.6/linux-3.7/drivers/tty/tty_io.c:1420 tty_init_dev+0x19a/0x1d0() [ 322.929941] tty_init_dev: tty driver does not set tty->port. This will crash the kernel later. Fix the driver! [ 322.929946] Modules linked in: squashfs parport_pc parport arc4 ecb processor thermal_sys hwmon loop nfs lockd sunrpc fscache nls_iso8859_1 nls_cp437 af_packet sg st sr_mod crc32c_intel ghash_clmulni_intel xennet xenblk cdrom aesni_intel ablk_helper cryptd lrw aes_x86_64 xts gf128mul [ 322.929984] Pid: 3037, comm: YaST2.call Tainted: G W 3.7.6-1.2-xen #1 [ 322.929989] Call Trace: [ 322.929999] [<ffffffff80008ae5>] dump_trace+0x85/0x1c0 [ 322.930006] [<ffffffff804f7ff9>] dump_stack+0x69/0x6f [ 322.930012] [<ffffffff8002edd9>] warn_slowpath_common+0x79/0xc0 [ 322.930017] [<ffffffff8002eed5>] warn_slowpath_fmt+0x45/0x50 [ 322.930023] [<ffffffff8031f4fa>] tty_init_dev+0x19a/0x1d0 [ 322.930029] [<ffffffff8031fe18>] tty_open+0x318/0x580 [ 322.930039] [<ffffffff8013757f>] chrdev_open+0xbf/0x1e0 [ 322.930044] [<ffffffff801313c6>] do_dentry_open+0x206/0x290 [ 322.930053] [<ffffffff80140231>] do_last+0x2e1/0xed0 [ 322.930058] [<ffffffff80141da3>] path_openat+0xc3/0x4f0 [ 322.930063] [<ffffffff80142b94>] do_filp_open+0x44/0xb0 [ 322.930068] [<ffffffff80132583>] do_sys_open+0xf3/0x1e0 [ 322.930073] [<ffffffff8050a8bb>] system_call_fastpath+0x1a/0x1f [ 322.930079] [<00007ffc7275b770>] 0x7ffc7275b76f [ 322.930082] ---[ end trace 5bfb151795c2f723 ]--- [ 322.930091] Warning: dev (tty8) tty->count(0) != #fd's(1) in tty_open [ 322.999918] ------------[ cut here ]------------ [ 322.999944] WARNING: at /home/abuild/rpmbuild/BUILD/kernel-xen-3.7.6/linux-3.7/drivers/tty/tty_io.c:1420 tty_init_dev+0x19a/0x1d0() [ 322.999949] tty_init_dev: tty driver does not set tty->port. This will crash the kernel later. Fix the driver! [ 322.999953] Modules linked in: squashfs parport_pc parport arc4 ecb processor thermal_sys hwmon loop nfs lockd sunrpc fscache nls_iso8859_1 nls_cp437 af_packet sg st sr_mod crc32c_intel ghash_clmulni_intel xennet xenblk cdrom aesni_intel ablk_helper cryptd lrw aes_x86_64 xts gf128mul [ 322.999993] Pid: 3037, comm: Xorg Tainted: G W 3.7.6-1.2-xen #1 [ 322.999996] Call Trace: [ 323.000007] [<ffffffff80008ae5>] dump_trace+0x85/0x1c0 [ 323.000013] [<ffffffff804f7ff9>] dump_stack+0x69/0x6f [ 323.000031] [<ffffffff8002edd9>] warn_slowpath_common+0x79/0xc0 [ 323.000037] [<ffffffff8002eed5>] warn_slowpath_fmt+0x45/0x50 [ 323.000043] [<ffffffff8031f4fa>] tty_init_dev+0x19a/0x1d0 [ 323.000051] [<ffffffff8031fe18>] tty_open+0x318/0x580 [ 323.000070] [<ffffffff8013757f>] chrdev_open+0xbf/0x1e0 [ 323.000077] [<ffffffff801313c6>] do_dentry_open+0x206/0x290 [ 323.000086] [<ffffffff80140231>] do_last+0x2e1/0xed0 [ 323.000091] [<ffffffff80141da3>] path_openat+0xc3/0x4f0 [ 323.000097] [<ffffffff80142b94>] do_filp_open+0x44/0xb0 [ 323.000102] [<ffffffff80132583>] do_sys_open+0xf3/0x1e0 [ 323.000107] [<ffffffff8050a8bb>] system_call_fastpath+0x1a/0x1f [ 323.000114] [<00007fbc614feaf0>] 0x7fbc614feaef [ 323.000117] ---[ end trace 5bfb151795c2f724 ]--- [ 323.000127] Warning: dev (tty7) tty->count(0) != #fd's(1) in tty_open [ 323.000368] Warning: dev (tty7) tty->count(0) != #fd's(1) in tty_release [ 323.001997] Warning: dev (tty8) tty->count(0) != #fd's(1) in tty_release [ 323.002024] Warning: dev (tty7) tty->count(0) != #fd's(1) in tty_hangup [ 323.002032] BUG: unable to handle kernel NULL pointer dereference at 0000000000000030 [ 323.002038] IP: [<ffffffff8031df56>] __tty_fasync+0x36/0x160 [ 323.002046] PGD 0 [ 323.002049] Oops: 0000 [#1] SMP [ 323.002054] Modules linked in: squashfs parport_pc parport arc4 ecb processor thermal_sys hwmon loop nfs lockd sunrpc fscache nls_iso8859_1 nls_cp437 af_packet sg st sr_mod crc32c_intel ghash_clmulni_intel xennet xenblk cdrom aesni_intel ablk_helper cryptd lrw aes_x86_64 xts gf128mul [ 323.002087] CPU 0 [ 323.002090] Pid: 3037, comm: Xorg Tainted: G W 3.7.6-1.2-xen #1 [ 323.002094] RIP: e030:[<ffffffff8031df56>] [<ffffffff8031df56>] __tty_fasync+0x36/0x160 [ 323.002100] RSP: e02b:ffff880026d8fdf8 EFLAGS: 00010292 [ 323.002104] RAX: 0000000000000000 RBX: ffff88002dfb62c0 RCX: ffff880026608240 [ 323.002107] RDX: ffffffff806d36ab RSI: ffff88002dfb62c0 RDI: 00000000ffffffff [ 323.002110] RBP: ffff880026608000 R08: 0000000000000004 R09: 0000000000000237 [ 323.002113] R10: 000000000002d137 R11: 000000000000004c R12: 0000000000000000 [ 323.002116] R13: 00000000ffffffff R14: 0000000000000004 R15: ffff88002dfb62c0 [ 323.002122] FS: 00007fbc62326880(0000) GS:ffff88002f000000(0000) knlGS:0000000000000000 [ 323.002126] CS: e033 DS: 0000 ES: 0000 CR0: 000000008005003b [ 323.002129] CR2: 0000000000000030 CR3: 0000000000971000 CR4: 0000000000040660 [ 323.002132] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 323.002135] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 323.002138] Process Xorg (pid: 3037, threadinfo ffff880026d8e000, task ffff880026c72480) [ 323.002141] Stack: [ 323.002143] ffffffff806d36d2 0000000000000001 ffffffff806d36d2 ffff880026608000 [ 323.002149] 0000000000000000 0000000000000001 ffff88002dfac480 ffffffff8031e628 [ 323.002155] ffff880026c72480 ffff880026608240 0000000000000000 ffff880026c72480 [ 323.002163] Call Trace: [ 323.002171] [<ffffffff8031e628>] __tty_hangup+0x298/0x450 [ 323.002179] [<ffffffff80320103>] disassociate_ctty+0x83/0x2c0 [ 323.002186] [<ffffffff80034f8f>] do_exit+0x5ef/0x8c0 [ 323.002192] [<ffffffff800355ca>] do_group_exit+0x3a/0xe0 [ 323.002199] [<ffffffff80035682>] sys_exit_group+0x12/0x20 [ 323.002205] [<ffffffff8050a8bb>] system_call_fastpath+0x1a/0x1f [ 323.002212] [<00007fbc60401929>] 0x7fbc60401928 [ 323.002215] Code: 64 24 28 48 89 f3 4c 89 6c 24 30 48 89 6c 24 20 41 89 fd 48 8b 86 a8 00 00 00 41 89 d4 48 c7 c2 ab 36 6d 80 48 8b 28 48 8b 46 18 <48> 8b 70 30 48 89 ef e8 4e ff ff ff 85 c0 74 22 31 c0 48 8b 5c [ 323.002285] RIP [<ffffffff8031df56>] __tty_fasync+0x36/0x160 [ 323.002291] RSP <ffff880026d8fdf8> [ 323.002294] CR2: 0000000000000030 [ 323.002301] ---[ end trace 5bfb151795c2f725 ]--- [ 323.002305] Fixing recursive fault but reboot is needed! Expected Results: NET install should be possible under xen envieronment -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.