Re: [BUG REPORT] kernel panic in tcp_sendpage() on null pointer dereference

[Eric Dumazet]

On Tue, 2015-04-07 at 17:01 -0700, Tuan Bui wrote:
> On Tue, 2015-04-07 at 16:33 -0700, Eric Dumazet wrote:
> > On Tue, 2015-04-07 at 15:57 -0700, Tuan Bui wrote:
> > > Hi all,
> > > 
> > > I am consistently seeing this kernel panic on a 16 sockets machine
> > > running Spark PageRank workload using Docker.  I am running RHEL 7.0
> > > stock kernel which is 3.10.0-123.el7.x86_64.
> > 
> > Have you tried a recent upstream kernel ?
> > 
> 
> Yes I have tried an upstream v4.0-rc4 kernel.  I was still getting the
> same kernel panic.

This looks like a use after free on one skb, but I see no smoking gun in
sendpage() paths.

You might try some debugging kernel build to detect this. (ASAN maybe)



--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/