Stack overran because of 'redirfs','gsch','schook' modules.

Solution Verified - Updated -

Issue

  • Kernel stack overran due to redirfs,gsch,schook modules.
  • Kernel Ring Buffer looks like below:-
BUG: unable to handle kernel paging request at 000000013a5b0b20
IP: [<ffffffff8105d8bc>] update_curr+0x14c/0x1f0
PGD 437319067 PUD 0 
Thread overran stack, or stack corrupted
Oops: 0000 [#1] SMP 
last sysfs file: /sys/devices/system/cpu/online
CPU 1 
Modules linked in: gsch(U) redirfs(U) nfs lockd fscache auth_rpcgss nfs_acl sunrpc ipv6 dsa_filter(P)(U) ppdev microcode vmware_balloon parport_pc parport vmxnet3(U) i2c_piix4 i2c_core sg shpchp ext4 jbd2 mbcache sd_mod crc_t10dif sr_mod cdrom mptspi mptscsih mptbase scsi_transport_spi pata_acpi ata_generic ata_piix dm_mirror dm_region_hash dm_log dm_mod [last unloaded: speedstep_lib]
Pid: 2183, comm: splunkd Tainted: P           ---------------    2.6.32-504.30.3.el6.x86_64 #1 VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform
RIP: 0010:[<ffffffff8105d8bc>]  [<ffffffff8105d8bc>] update_curr+0x14c/0x1f0
RSP: 0018:ffff880028283d98  EFLAGS: 00010082
RAX: ffff8804356ee040 RBX: 0000000037136018 RCX: ffff88043a0a5d40
RDX: 00000000000184d0 RSI: 0000000000000000 RDI: ffff8804356ee078
RBP: ffff880028283dc8 R08: ffffffff8160e0e5 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000000 R12: ffff880028295928
R13: 00000000000f47ea R14: 00038a9ae1cd2eb4 R15: ffff8804356ee040
FS:  00007ff1a13f5700(0000) GS:ffff880028280000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
CR2: 000000013a5b0b20 CR3: 0000000437318000 CR4: 00000000001407e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
------------[ cut here ]------------
WARNING: at lib/list_debug.c:48 list_del+0x6e/0xa0() (Tainted: P           ---------------   )
Hardware name: VMware Virtual Platform
list_del corruption. prev->next should be ffff880435503000, but was ffff88043712d068
Modules linked in: gsch(U) redirfs(U) nfs lockd fscache auth_rpcgss nfs_acl sunrpc ipv6 dsa_filter(P)(U) ppdev microcode vmware_balloon parport_pc parport vmxnet3(U) i2c_piix4 i2c_core sg shpchp ext4 jbd2 mbcache sd_mod crc_t10dif sr_mod cdrom mptspi mptscsih mptbase scsi_transport_spi pata_acpi ata_generic ata_piix dm_mirror dm_region_hash dm_log dm_mod [last unloaded: speedstep_lib]
Pid: 29989, comm: ls Tainted: P           ---------------    2.6.32-504.30.3.el6.x86_64 #1
Call Trace:
 [<ffffffff81074e47>] ? warn_slowpath_common+0x87/0xc0
 [<ffffffff81074f36>] ? warn_slowpath_fmt+0x46/0x50
 [<ffffffff8117361b>] ? kmem_freepages+0xeb/0x130
 [<ffffffff8129ed9e>] ? list_del+0x6e/0xa0
 [<ffffffff81175bd8>] ? free_block+0xc8/0x170
 [<ffffffff81176200>] ? kfree+0x310/0x320
 [<ffffffff811a9d70>] ? dput+0xc0/0x150
 [<ffffffffa03eaabc>] ? rfs_dcache_entry_free+0x3c/0x50 [redirfs]
 [<ffffffffa03eaaf8>] ? rfs_dcache_entry_free_list+0x28/0x40 [redirfs]
 [<ffffffffa03e5cdb>] ? rfs_readdir+0x22b/0x330 [redirfs]
 [<ffffffff811a4d90>] ? filldir+0x0/0xe0
 [<ffffffff811a4d90>] ? filldir+0x0/0xe0
 [<ffffffff811a4d90>] ? filldir+0x0/0xe0
 [<ffffffff811a5010>] ? vfs_readdir+0xc0/0xe0
 [<ffffffff8119cb21>] ? path_put+0x31/0x40
 [<ffffffff811a5199>] ? sys_getdents+0x89/0xf0
 [<ffffffff8100b0d2>] ? system_call_fastpath+0x16/0x1b
---[ end trace cf750a483abc938c ]---
------------[ cut here ]------------
WARNING: at lib/list_debug.c:48 list_del+0x6e/0xa0() (Tainted: P        W  ---------------   )
Hardware name: VMware Virtual Platform
list_del corruption. prev->next should be ffff88043712d000, but was ffff88043712d168
Modules linked in: gsch(U) redirfs(U) nfs lockd fscache auth_rpcgss nfs_acl sunrpc ipv6 dsa_filter(P)(U) ppdev microcode vmware_balloon parport_pc parport vmxnet3(U) i2c_piix4 i2c_core sg shpchp ext4 jbd2 mbcache sd_mod crc_t10dif sr_mod cdrom mptspi mptscsih mptbase scsi_transport_spi pata_acpi ata_generic ata_piix dm_mirror dm_region_hash dm_log dm_mod [last unloaded: speedstep_lib]
Pid: 29989, comm: ls Tainted: P        W  ---------------    2.6.32-504.30.3.el6.x86_64 #1
Call Trace:
 [<ffffffff81074e47>] ? warn_slowpath_common+0x87/0xc0
 [<ffffffff81074f36>] ? warn_slowpath_fmt+0x46/0x50
 [<ffffffff8117361b>] ? kmem_freepages+0xeb/0x130
 [<ffffffff8129ed9e>] ? list_del+0x6e/0xa0
 [<ffffffff81175bd8>] ? free_block+0xc8/0x170
 [<ffffffff81176200>] ? kfree+0x310/0x320
 [<ffffffff811a9d70>] ? dput+0xc0/0x150
 [<ffffffffa03eaabc>] ? rfs_dcache_entry_free+0x3c/0x50 [redirfs]
 [<ffffffffa03eaaf8>] ? rfs_dcache_entry_free_list+0x28/0x40 [redirfs]
 [<ffffffffa03e5cdb>] ? rfs_readdir+0x22b/0x330 [redirfs]
 [<ffffffff811a4d90>] ? filldir+0x0/0xe0
 [<ffffffff811a4d90>] ? filldir+0x0/0xe0
 [<ffffffff811a4d90>] ? filldir+0x0/0xe0
 [<ffffffff811a5010>] ? vfs_readdir+0xc0/0xe0
 [<ffffffff8119cb21>] ? path_put+0x31/0x40
 [<ffffffff811a5199>] ? sys_getdents+0x89/0xf0
 [<ffffffff8100b0d2>] ? system_call_fastpath+0x16/0x1b
---[ end trace cf750a483abc938d ]---
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Process splunkd (pid: 2183, threadinfo ffff880437136000, task ffff8804356ee040)
Stack:
 ffff880028283da8 ffffffff81015413 ffff8804356ee078 ffff880028295928
<d> 0000000000000000 0000000000000000 ffff880028283df8 ffffffff8105dceb
<d> ffff8800282958c0 0000000000000001 00000000000158c0 0000000000000001
Call Trace:
 <IRQ> 
 [<ffffffff81015413>] ? native_sched_clock+0x13/0x80
 [<ffffffff8105dceb>] task_tick_fair+0xdb/0x160
 [<ffffffff81060de1>] scheduler_tick+0xc1/0x260
 [<ffffffff810b08b0>] ? tick_sched_timer+0x0/0xc0
 [<ffffffff8108765e>] update_process_times+0x6e/0x90
 [<ffffffff810b0916>] tick_sched_timer+0x66/0xc0
 [<ffffffff810f08fa>] ? __rcu_process_callbacks+0x25a/0x350
 [<ffffffff810a34ae>] __run_hrtimer+0x8e/0x1d0
 [<ffffffff810aa8df>] ? ktime_get_update_offsets+0x4f/0xd0
 [<ffffffff810a3846>] hrtimer_interrupt+0xe6/0x260
 [<ffffffff8103427d>] local_apic_timer_interrupt+0x3d/0x70
 [<ffffffff81533d55>] smp_apic_timer_interrupt+0x45/0x60
 [<ffffffff8100bc13>] apic_timer_interrupt+0x13/0x20
 <EOI> 
Code: a3 00 45 85 c9 74 38 48 8b 50 08 8b 5a 18 48 8b 90 10 09 00 00 48 8b 4a 50 48 85 c9 74 21 48 63 db 66 0f 1f 44 00 00 48 8b 51 20 <48> 03 14 dd 60 0a c0 81 4c 01 2a 48 8b 49 78 48 85 c9 75 e8 48 
RIP  [<ffffffff8105d8bc>] update_curr+0x14c/0x1f0
 RSP <ffff880028283d98>
CR2: 000000013a5b0b20

Environment

  • Red Hat Enterprise Linux

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content