http://bugzilla.suse.com/show_bug.cgi?id=977987

Bug ID: 977987 Summary: Kernel NULL pointer dereference crash from "t-daemon" Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: Other Status: NEW Severity: Critical Priority: P5 - None Component: Kernel Assignee: kernel-maintainers@forge.provo.novell.com Reporter: lmb@suse.com QA Contact: qa-bugs@suse.de Found By: --- Blocker: ---

The current tumbleweed kernel crashes for me on boot - it continues to run, but the OS hangs in random places. Going back to 4.4.3 and system is stable.

Kernel details: kernel-default-4.5.0-3.3.x86_64 Source Timestamp: 2016-03-28 09:27:57 +0200 GIT Revision: 8cf0ce6b84d58647e9ee955bc81db84023542f5f GIT Branch: stable Distribution: openSUSE Factory

Logs with a bit of context:

-- Logs begin at Wed 2014-10-01 14:53:05 CEST, end at Mon 2016-05-02 09:54:42 CEST. -- May 02 09:41:16 hermes dbus[1569]: [system] Activating via systemd: service name='org.freedesktop.RealtimeKit1' unit='rtkit-daemon.service' May 02 09:41:16 hermes systemd[1]: Starting RealtimeKit Scheduling Policy Service... May 02 09:41:16 hermes audit: NETFILTER_CFG table=filter family=10 entries=0 May 02 09:41:16 hermes audit: NETFILTER_CFG table=mangle family=10 entries=0 May 02 09:41:16 hermes audit: NETFILTER_CFG table=filter family=2 entries=0 May 02 09:41:16 hermes audit: NETFILTER_CFG table=raw family=2 entries=0 May 02 09:41:16 hermes audit: NETFILTER_CFG table=raw family=10 entries=0 May 02 09:41:16 hermes audit: NETFILTER_CFG table=nat family=2 entries=0 May 02 09:41:16 hermes audit[3200]: SYSCALL arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=7ffcc5e4ed20 a2=fffffffffffffff5 a3=7fcebc3088c0 items=0 ppid=1 pid=3200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(t-daemon)" exe="/usr/lib/systemd/systemd" key=(null) May 02 09:41:16 hermes audit: PROCTITLE proctitle="(t-daemon)" May 02 09:41:16 hermes kernel: audit: type=1325 audit(1462174876.310:161): table=filter family=10 entries=0 May 02 09:41:16 hermes kernel: audit: type=1325 audit(1462174876.310:161): table=mangle family=10 entries=0 May 02 09:41:16 hermes kernel: audit: type=1325 audit(1462174876.310:161): table=filter family=2 entries=0 May 02 09:41:16 hermes kernel: audit: type=1325 audit(1462174876.310:161): table=raw family=2 entries=0 May 02 09:41:16 hermes kernel: audit: type=1325 audit(1462174876.310:161): table=raw family=10 entries=0 May 02 09:41:16 hermes kernel: audit: type=1325 audit(1462174876.310:161): table=nat family=2 entries=0 May 02 09:41:16 hermes kernel: audit: type=1300 audit(1462174876.310:161): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=7ffcc5e4ed20 a2=fffffffffffffff5 a3=7fcebc3088c0 items=0 ppid=1 pid=3200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(t-daemon)" exe="/usr/lib/systemd/systemd" key=(null) May 02 09:41:16 hermes kernel: audit: type=1327 audit(1462174876.310:161): proctitle="(t-daemon)" May 02 09:41:16 hermes kernel: BUG: unable to handle kernel NULL pointer dereference at 0000000000000060 May 02 09:41:16 hermes kernel: IP: [<ffffffff8122c06a>] copy_tree+0x13a/0x370 May 02 09:41:16 hermes kernel: PGD 0 May 02 09:41:16 hermes kernel: Oops: 0000 [#1] PREEMPT SMP May 02 09:41:16 hermes kernel: Modules linked in: fuse ebtable_filter ebtables nf_log_ipv6 ipt_MASQUERADE nf_nat_masquerade_ipv4 xt_pkttype xt_physdev br_netfilter xt_TCPMSS nf_log_ipv4 nf_log_common xt_LOG xt_limit iptable_nat nf_nat_ipv4 nf_nat af_packet bridge stp llc iscsi_ibft iscsi_boot_sysfs uvcvideo btusb videobuf2_vmalloc videobuf2_memops btrtl btbcm videobuf2_v4l2 videobuf2_core btintel videodev bluetooth arc4 msr iTCO_wdt iTCO_vendor_support snd_hda_codec_realtek snd_hda_codec_generic intel_rapl x86_pkg_temp_thermal intel_powerclamp coretemp kvm_intel kvm irqbypass iwlmvm mac80211 snd_hda_intel ghash_clmulni_intel snd_hda_codec rtsx_pci_ms pcspkr snd_hda_core iwlwifi snd_hwdep joydev snd_pcm i2c_i801 e1000e lpc_ich mei_me memstick snd_timer cfg80211 ptp mei pps_core thinkpad_acpi shpchp rfkill battery ac May 02 09:41:16 hermes kernel: snd fjes wmi soundcore thermal tpm_tis tpm ip6t_REJECT nf_reject_ipv6 xt_tcpudp nf_conntrack_ipv6 nf_defrag_ipv6 ip6table_raw ipt_REJECT nf_reject_ipv4 iptable_raw xt_CT iptable_filter ip6table_mangle nf_conntrack_netbios_ns nf_conntrack_broadcast nf_conntrack_ipv4 nf_defrag_ipv4 ip_tables xt_conntrack nf_conntrack ip6table_filter ip6_tables x_tables xfs libcrc32c drbg ansi_cprng dm_crypt algif_skcipher af_alg hid_generic usbhid rtsx_pci_sdmmc mmc_core crct10dif_pclmul crc32_pclmul crc32c_intel aesni_intel aes_x86_64 glue_helper lrw gf128mul ablk_helper cryptd serio_raw i915 i2c_algo_bit drm_kms_helper syscopyarea sysfillrect sysimgblt ehci_pci fb_sys_fops ehci_hcd xhci_pci xhci_hcd rtsx_pci mfd_core usbcore drm usb_common video button dm_mirror dm_region_hash dm_log dm_mod sg May 02 09:41:16 hermes kernel: CPU: 1 PID: 3200 Comm: (t-daemon) Not tainted 4.5.0-3-default #1 May 02 09:41:16 hermes kernel: Hardware name: LENOVO 20AR000YAT/20AR000YAT, BIOS GJET78WW (2.28 ) 07/29/2014 May 02 09:41:16 hermes kernel: task: ffff8802feb92080 ti: ffff8803046b4000 task.ti: ffff8803046b4000 May 02 09:41:16 hermes kernel: RIP: 0010:[<ffffffff8122c06a>] [<ffffffff8122c06a>] copy_tree+0x13a/0x370 May 02 09:41:16 hermes kernel: RSP: 0018:ffff8803046b7e00 EFLAGS: 00010246 May 02 09:41:16 hermes kernel: RAX: 0000000000000000 RBX: ffff88032f6cc3c0 RCX: 000000000000000f May 02 09:41:16 hermes kernel: RDX: 0000000000000004 RSI: 0000000000000000 RDI: ffffffff81e0a4c4 May 02 09:41:16 hermes kernel: RBP: ffff8803046b7e50 R08: 0000000000000000 R09: 00000000000000ff May 02 09:41:16 hermes kernel: R10: 0000000000001494 R11: 0000000000015789 R12: ffff88009ecf2b00 May 02 09:41:16 hermes kernel: R13: ffff88031fae2540 R14: ffff88032e6ecfa0 R15: ffff88032f24b800 May 02 09:41:16 hermes kernel: FS: 00007fcebc3088c0(0000) GS:ffff88033e240000(0000) knlGS:0000000000000000 May 02 09:41:16 hermes kernel: CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 May 02 09:41:16 hermes kernel: CR2: 0000000000000060 CR3: 00000002ff7f8000 CR4: 00000000001406e0 May 02 09:41:16 hermes kernel: Stack: May 02 09:41:16 hermes kernel: ffff88017e1bfe10 ffff88017f802b58 ffff88009ecf2b88 0000000500000000 May 02 09:41:16 hermes kernel: ffffffff00000004 ffff88017e1bfdc0 ffff88033055b700 ffff8803304ea5c0 May 02 09:41:16 hermes kernel: ffffffff81e44760 ffff88017e917a40 ffff8803046b7e90 ffffffff8122d549 May 02 09:41:16 hermes kernel: Call Trace: May 02 09:41:16 hermes kernel: [<ffffffff8122d549>] copy_mnt_ns+0x79/0x290 May 02 09:41:16 hermes kernel: [<ffffffff8109c742>] create_new_namespaces+0x62/0x190 May 02 09:41:16 hermes kernel: [<ffffffff8109c9ea>] unshare_nsproxy_namespaces+0x5a/0xb0 May 02 09:41:16 hermes kernel: [<ffffffff8107d1a1>] SyS_unshare+0x1a1/0x330 May 02 09:41:16 hermes kernel: [<ffffffff816cc0b2>] entry_SYSCALL_64_fastpath+0x16/0x71 May 02 09:41:16 hermes kernel: DWARF2 unwinder stuck at entry_SYSCALL_64_fastpath+0x16/0x71 May 02 09:41:16 hermes kernel: May 02 09:41:16 hermes kernel: Leftover inexact backtrace: May 02 09:41:16 hermes kernel: Code: 48 8b 43 60 48 39 45 b0 48 8d 58 a0 75 8c 4c 89 e0 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 8b 45 c8 49 8b 76 20 85 c0 75 0e <48> 81 7e 60 80 31 83 81 0f 84 c8 01 00 00 49 8b 46 10 4c 39 e8 May 02 09:41:16 hermes kernel: RIP [<ffffffff8122c06a>] copy_tree+0x13a/0x370 May 02 09:41:16 hermes kernel: RSP <ffff8803046b7e00> May 02 09:41:16 hermes kernel: CR2: 0000000000000060 May 02 09:41:16 hermes kernel: ---[ end trace f848a64a7ccebe9d ]--- May 02 09:41:16 hermes kernel: audit: type=1130 audit(1462174876.354:162): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=rtkit-daemon comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' May 02 09:41:16 hermes audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=rtkit-daemon comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' May 02 09:41:16 hermes systemd[1]: rtkit-daemon.service: Main process exited, code=killed, status=9/KILL May 02 09:41:16 hermes systemd[1]: Failed to start RealtimeKit Scheduling Policy Service. May 02 09:41:16 hermes systemd[1]: rtkit-daemon.service: Unit entered failed state. May 02 09:41:16 hermes systemd[1]: rtkit-daemon.service: Failed with result 'signal'.