Re: 2.6.21-rc2-mm2

From: KAMEZAWA Hiroyuki
Date: Tue Mar 06 2007 - 05:28:38 EST



Following panic ouccurred (always) on ia64/NUMA(with empty node.)

Bug in here.
==
void move_native_irq(int irq)
{
struct irq_desc *desc = irq_desc + irq;

if (likely(!(desc->status & IRQ_MOVE_PENDING)))
return;

if (unlikely(desc->status & IRQ_DISABLED))
return;

desc->chip->mask(irq); <---------maybe this *mask* is NULL pointer
move_masked_irq(irq);
desc->chip->unmask(irq);
}
==

Is "mask" always valid pointer ?

my .config is attached
==
Unable to handle kernel NULL pointer dereference (address 0000000000000000)
yum-updatesd[3461]: Oops 11012296146944 [1]
Modules linked in: autofs4 hidp rfcomm l2cap bluetooth sunrpc ipv6 vfat fat dm_mirror dm_mod button parport_pc lp parport sg tg3 e100 shpchp mii usb_storage lpfc scsi_transport_fc mptspi mptscsih mptbase scsi_transport_spi sd_mod scsi_mod ext3 jbd ehci_hcd ohci_hcd uhci_hcd

Pid: 3461, CPU 5, comm: yum-updatesd
psr : 0000121008022018 ifs : 8000000000000286 ip : [<a0000001000e02b1>] Not tainted
ip is at move_native_irq+0x91/0x140
unat: 0000000000000000 pfs : 0000000000000205 rsc : 0000000000000003
rnat: 0000000000000000 bsps: 0000000000000000 pr : 00000000005a56a9
ldrs: 0000000000000000 ccv : 0000000000000000 fpsr: 0009804c0270033f
csd : 0000000000000000 ssd : 0000000000000000
b0 : a000000100050430 b6 : a00000021b49d0c0 b7 : a000000100050400
f6 : 1003e0000000000000de0 f7 : 1003e0000000000000060
f8 : 1003e0000000000000025 f9 : 1003e00000000000022e0
f10 : 1003e0000000000000060 f11 : 1003e000000000000005d
r1 : a000000100d8d230 r2 : a0000001009f8c30 r3 : 0000000000005580
r8 : a000000100b8e178 r9 : 00000000000000ab r10 : 0000000000000039
r11 : 0000000000200000 r12 : e00001404b6f7e30 r13 : e00001404b6f0000
r14 : 0000000000200000 r15 : a0000001009f8c00 r16 : a000000100b5b160
r17 : 00000000dead4ead r18 : a0000001009f8c4c r19 : 0000000000000000
r20 : a000000100b5b110 r21 : a000000100b5b140 r22 : a000000100b5b110
r23 : 0050200500000874 r24 : a000000100ba98c0 r25 : a00000021b53d768
r26 : e00000018007e030 r27 : a000000100786238 r28 : e000000040004ae0
r29 : a0000001009f8c50 r30 : 0000000000000005 r31 : a0000001009f8c58

Call Trace:
[<a000000100013e20>] show_stack+0x40/0xa0
sp=e00001404b6f79c0 bsp=e00001404b6f1030
[<a0000001000147e0>] show_regs+0x840/0x880
sp=e00001404b6f7b90 bsp=e00001404b6f0fd0
[<a000000100037de0>] die+0x1c0/0x2a0
sp=e00001404b6f7b90 bsp=e00001404b6f0f88
[<a000000100647630>] ia64_do_page_fault+0x8d0/0xa00
sp=e00001404b6f7bb0 bsp=e00001404b6f0f38
[<a00000010000bf80>] ia64_leave_kernel+0x0/0x270
sp=e00001404b6f7c60 bsp=e00001404b6f0f38
[<a0000001000e02b0>] move_native_irq+0x90/0x140
sp=e00001404b6f7e30 bsp=e00001404b6f0f08
[<a000000100050430>] iosapic_end_level_irq+0x30/0xe0
sp=e00001404b6f7e30 bsp=e00001404b6f0ee8
[<a0000001000dac30>] __do_IRQ+0x390/0x3c0
sp=e00001404b6f7e30 bsp=e00001404b6f0ea8
[<a000000100011620>] ia64_handle_irq+0x1e0/0x2e0
sp=e00001404b6f7e30 bsp=e00001404b6f0e78
[<a00000010000bf80>] ia64_leave_kernel+0x0/0x270
sp=e00001404b6f7e30 bsp=e00001404b6f0e78
Kernel panic - not syncing: Aiee, killing interrupt handler!

Attachment: myconfig
Description: Binary data