Kernel panic in __blk_recalc_rq_segments() function due to an invalid pointer stored in "bv_page".
Issue
- Kernel panic with the following call traces:
Unable to handle kernel paging request at 000000e300aab968 RIP:
[<ffffffff8014af6e>] __blk_recalc_rq_segments+0x69/0x2b9
PGD 0
Oops: 0000 [1] SMP
last sysfs file: /block/ram0/dev
CPU 3
Modules linked in: mptctl mptbase ipmi_devintf ipmi_si ipmi_msghandler vxodm(PFU) vxgms(PU) amf(PU) vxglm(PU) vxfen(PU) gab(PU) llt(PU) nfs nfs_acl dmpaa(PU) vxspec(PU) vxio(PU) vxdmp(PU) lockd sunrpc bonding be2iscsi ib_iser rdma_cm ib_cm iw_cm ib_sa ib_mad ib_core ib_addr iscsi_tcp bnx2i cnic ipv6 xfrm_nalgo crypto_api uio cxgb3i libcxgbi cxgb3 8021q libiscsi_tcp libiscsi2 scsi_transport_iscsi2 scsi_transport_iscsi vxportal(PU) fdd(PU) vxfs(PU) exportfs emcpvlumd(PU) emcpxcrypt(PU) emcpdm(PU) emcpgpx(PU) emcpmpx(PU) emcp(PU) dm_multipath scsi_dh video backlight sbs power_meter i2c_ec i2c_core dell_wmi wmi button battery asus_acpi acpi_memhotplug ac parport_pc lp parport sg i5k_amb hwmon shpchp bnx2 hpilo i5000_edac serio_raw tpm_tis lpfc scsi_transport_fc tpm tg3 pcspkr edac_mc tpm_bios dm_raid45 dm_message dm_region_hash dm_mem_cache dm_snapshot dm_zero dm_mirror dm_log dm_mod usb_storage cciss sd_mod scsi_mod ext3 jbd uhci_hcd ohci_hcd ehci_hcd
Pid: 17411, comm: vxconfigd Tainted: PF -------------------- 2.6.18-348.6.1.el5 #1
RIP: 0010:[<ffffffff8014af6e>] [<ffffffff8014af6e>] __blk_recalc_rq_segments+0x69/0x2b9
RSP: 0018:ffff81020e011b70 EFLAGS: 00010287
RAX: 0000000000000000 RBX: ffff8105925c0e00 RCX: 0000000000000010
RDX: 0000000000000010 RSI: ffff8105925c0e00 RDI: ffff81082e24f928
RBP: ffff8105925c0e00 R08: 0000000000000000 R09: 000000e300aab968
R10: ffff8107ab833398 R11: ffff8101a256fac0 R12: 0000000000000000
R13: 0000000000000080 R14: ffff8105925c0e00 R15: 0000000000000000
FS: 0000000000000000(0000) GS:ffff81082fe17840(0063) knlGS:00000000f6f20b90
CS: 0010 DS: 002b ES: 002b CR0: 000000008005003b
CR2: 000000e300aab968 CR3: 0000000804fd3000 CR4: 00000000000006e0
Process vxconfigd (pid: 17411, threadinfo ffff81020e010000, task ffff81069fa727b0)
Stack: ffff81082e24f928 ffff81080000f928 0000000000002000 ffff8105925c0e00
0000000100000000 0000000100001000 0000000000000000 ffff8105925c0e00
ffff8105925c0e00 0000000000000000 0000000000000080 0000000000000000
Call Trace:
[<ffffffff8002e311>] blk_recount_segments+0x17/0x28
[<ffffffff80042828>] bio_phys_segments+0xf/0x15
[<ffffffff80026132>] init_request_from_bio+0xc8/0x198
[<ffffffff8000c1a2>] __make_request+0x41c/0x4ce
[<ffffffff8001c836>] generic_make_request+0x211/0x228
[<ffffffff88b0f476>] :vxdmp:dmp_get_hrtime+0xc/0x1e
[<ffffffff88b1df48>] :vxdmp:gen_balanced_select_path+0x0/0x11c
[<ffffffff88b18ee1>] :vxdmp:gendmpstrategy+0x30d/0x332
[<ffffffff8001c836>] generic_make_request+0x211/0x228
[<ffffffff88b19902>] :vxdmp:dmp_set_bio_vec+0x3c/0xf2
[<ffffffff88b2e686>] :vxdmp:dmp_indirect_io+0x31c/0x49a
[<ffffffff88b19a91>] :vxdmp:dmpioctl+0x42/0x4a
[<ffffffff88b3416a>] :vxdmp:dmp_ioctl+0x34/0x4c
[<ffffffff88b341d2>] :vxdmp:dmp_compat_ioctl+0x50/0xa1
[<ffffffff80064c5f>] lock_kernel+0x1b/0x32
[<ffffffff8014e0de>] compat_blkdev_ioctl+0x4c/0x5f
[<ffffffff80100dc1>] compat_sys_ioctl+0xc5/0x2b1
[<ffffffff800614b5>] sysenter_do_call+0x1e/0x76
Code: 4d 8b 11 49 c1 ea 33 4c 89 d0 48 c1 e8 09 48 8b 1c c5 80 13
RIP [<ffffffff8014af6e>] __blk_recalc_rq_segments+0x69/0x2b9
RSP <ffff81020e011b70>
Environment
- Red Hat Enterprise Linux 5
- Kernel-2.6.18-348.6.1.el5
- Unsigned (U) kernel module: [vxdmp]
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.