zfsonlinux/zfs — Issue #513: NULL pointer dereference in ddt_prefetch from zfs_sa_set_xattr
Author: chrisrd
Created: 2012-01-04 05:28:42+00:00
State: open

I received this with linux 3.0.14, zfs 30a9524, spl e05bec80 + cherry-pick 791dc876:

[10141.730149] BUG: unable to handle kernel NULL pointer dereference at 0000000000000090
[10141.730202] IP: [] ddt_prefetch+0x5a/0x92 [zfs]
[10141.730272] PGD 510c1b067 PUD 4c096c067 PMD 0
[10141.730305] Oops: 0000 [#1] SMP
[10141.730333] CPU 8
[10141.730340] Modules linked in: fuse nfsd exportfs zfs(P) zcommon(P) znvpair(P) zavl(P) zunicode(P) spl zlib_deflate sha256_generic aesni_intel cryptd aes_x86_64 aes_generic cbc dm_crypt dm_mod nfs lockd auth_rpcgss nfs_acl sunrpc bridge stp llc sg sd_mod usbhid hid uhci_hcd mpt2sas psmouse scsi_transport_sas raid_class scsi_mod i2c_i801 i2c_core ioatdma ehci_hcd igb dca button processor thermal_sys
[10141.730623]
[10141.730645] Pid: 27491, comm: rsync Tainted: P 3.0.14-otn-00018-g2c7c13d #1 Supermicro X8DTH-i/6/iF/6F/X8DTH
[10141.730704] RIP: 0010:[] [] ddt_prefetch+0x5a/0x92 [zfs]
[10141.730777] RSP: 0018:ffff8804cd9059a8 EFLAGS: 00010206
[10141.730805] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000037353963
[10141.730835] RDX: 0000003337353963 RSI: 0000000000003963 RDI: ffff8804cd9059c8
[10141.730866] RBP: ffff8804cd905b98 R08: ffff88063fd14a80 R09: 0000000000000000
[10141.730897] R10: 00000000013192c8 R11: 6635343664626462 R12: 0000000000000000
[10141.730928] R13: 0000000000000000 R14: ffff8804cd9059a8 R15: 0000000013c85377
[10141.730960] FS: 00007f7084412700(0000) GS:ffff88063fd00000(0000) knlGS:0000000000000000
[10141.731006] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[10141.731035] CR2: 0000000000000090 CR3: 0000000510c1a000 CR4: 00000000000006e0
[10141.731065] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[10141.731096] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[10141.731128] Process rsync (pid: 27491, threadinfo ffff8804cd904000, task ffff880627771670)
[10141.731174] Stack:
[10141.731195] 373731340e000000 3a3020302c302035 0000000000003038 0000000000000000
[10141.731249] 0000003337353963 0000000000000000 0000000000000000 0000000000000000
[10141.731303] 0000000000000000 0000000000000000 0000000000000000 0000000000000000
[10141.731356] Call Trace:
[10141.731405] [] ? dbuf_read+0x15e/0x60b [zfs]
[10141.731437] [] ? kfree+0x56/0xec
[10141.731472] [] ? kmem_alloc_debug+0x76/0xd1 [spl]
[10141.731523] [] ? dbuf_rele_and_unlock+0x192/0x197 [zfs]
[10141.731555] [] ? __kmalloc+0xa5/0x118
[10141.731589] [] ? kmem_alloc_debug+0x76/0xd1 [spl]
[10141.731649] [] dsl_dataset_block_freeable+0x37/0x43 [zfs]
[10141.731705] [] dmu_tx_hold_spill+0x61/0x8f [zfs]
[10141.731753] [] dmu_tx_hold_sa+0x10c/0x152 [zfs]
[10141.736805] [] zfs_sa_set_xattr+0xa6/0x10c [zfs]
[10141.736860] [] zpl_xattr_set+0x172/0x226 [zfs]
[10141.736914] [] zpl_xattr_user_set+0x70/0x89 [zfs]
[10141.736944] [] generic_setxattr+0x68/0x6a
[10141.736973] [] __vfs_setxattr_noperm+0x6b/0xd0
[10141.737002] [] vfs_setxattr+0x79/0x97
[10141.737029] [] setxattr+0xb8/0xd6
[10141.737055] [] ? putname+0x2d/0x36
[10141.737083] [] ? user_path_at_empty+0x5e/0x8f
[10141.737113] [] ? kfree+0x56/0xec
[10141.737141] [] sys_lsetxattr+0x5d/0x82
[10141.737171] [] system_call_fastpath+0x16/0x1b
[10141.737199] Code: 85 d0 74 4f 48 c1 e8 28 4c 8d b5 10 fe ff ff 45 31 e4 25 ff 00 00 00 31 db 4c 8b ac c7 a0 09 00 00 4c 89 f7 e8 3d fc ff ff 89 d8
[10141.737422] RIP [] ddt_prefetch+0x5a/0x92 [zfs]
[10141.737469] RSP
[10141.737492] CR2: 0000000000000090
[10141.737846] ---[ end trace 013bdb5332844955 ]---