Oracle Linux And VM: Kernel panic with RIP tty_insert_flip_string_fixed_flag+0x74/0xd0

(Doc ID 2380285.1)

Last updated on APRIL 08, 2018

Applies to:

Linux OS - Version Oracle Linux 6.7 with Unbreakable Enterprise Kernel [2.6.39] and later
Linux x86-64

Symptoms

 Examination of a VMCORE file is necessary to diagnose, with the PANIC message:

crash64> sys
KERNEL:
/share/linuxrpm/vmlinux_repo/64/2.6.39-400.264.1.el6uek.x86_64/vmlinux
DUMPFILE: localhost.localdomain.vmcore [PARTIAL DUMP]
CPUS: 32
DATE: Wed Jul 20 11:50:28 2016
UPTIME: 186 days, 21:38:05
LOAD AVERAGE: 2.46, 2.38, 2.45
TASKS: 730
NODENAME: localhost.localdomain
RELEASE: 2.6.39-400.264.1.el6uek.x86_64
VERSION: #1 SMP Wed Aug 26 16:42:25 PDT 2015
MACHINE: x86_64 (2394 Mhz)
MEMORY: 95.9 GB
PANIC: "BUG: unable to handle kernel NULL pointer dereference at
0000000000000018"
PID: 29585
COMMAND: "sshd"
TASK: ffff880d5cd76440 [THREAD_INFO: ffff880dd967c000]
CPU: 0

STATE: TASK_RUNNING (PANIC)

And the relevant call trace from the log from the vmcore (or observed in var/log/messages if the call trace is logged):

 

BUG: unable to handle kernel NULL pointer dereference at 0000000000000018
IP: [<ffffffff81318bc4>] tty_insert_flip_string_fixed_flag+0x74/0xd0
PGD 0
Oops: 0000 [#1] SMP
CPU 0
Modules linked in: mpt2sas scsi_transport_sas raid_class ip6t_REJECT
ipt_REJECT ip6table_filter ip6_tables iptable_filter ip_tables ipmi_poweroff
ipmi_devintf ipmi_si ipmi_msghandler acpi_cpufreq freq_table mperf rds_rdma
rds ib_ipoib rdma_ucm ib_ucm ib_uverbs ib_umad rdma_cm ib_cm iw_cm ib_addr
ipv6 mlx4_ib ib_sa ib_mad ib_core mlx4_core dm_mod ghes hed wmi ixgbe hwmon
dca sg ses enclosure ext4 mbcache jbd2 raid1 usb_storage sd_mod crc_t10dif
ahci libahci nvme megaraid_sas [last unloaded: scsi_wait_scan]

Pid: 29585, comm: sshd Not tainted 2.6.39-400.264.1.el6uek.x86_64 #1 Oracle
Corporation ORACLE SERVER X5-2L/ASM,MOBO TRAY,2U
RIP: 0010:[<ffffffff81318bc4>] [<ffffffff81318bc4>]
tty_insert_flip_string_fixed_flag+0x74/0xd0
RSP: 0018:ffff880dd967dd68 EFLAGS: 00010206
RAX: 0000000000000005 RBX: ffff880e65d96000 RCX: 0000000000000000
RDX: 0000000000000282 RSI: ffff880db1512000 RDI: 0000000000000282
RBP: ffff880dd967ddb8 R08: ffff880dcd8d4968 R09: 2020202020444e41
R10: 1b20202020202020 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000005 R14: 0000000000000005 R15: 0000000000000005
FS: 00007f1d619ab7c0(0000) GS:ffff88187f200000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000018 CR3: 0000000dd971e000 CR4: 00000000001406b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Process sshd (pid: 29585, threadinfo ffff880dd967c000, task ffff880d5cd76440)
Stack:
ffff880dd967dd88 0000000000000001 ffff880db1512000 0000000000000005
ffff880dd967dd98 ffff880dcd8d4800 ffff880e65d96000 0000000000000005
ffff880db1512000 ffff880dcd8d4c88 ffff880dd967dde8 ffffffff81319c2b
Call Trace:
[<ffffffff81319c2b>] pty_write+0x3b/0x80
[<ffffffff8150cdde>] ? mutex_lock+0x1e/0x50
[<ffffffff81313c60>] n_tty_write+0x220/0x330
[<ffffffff81062630>] ? try_to_wake_up+0x2b0/0x2b0
[<ffffffff8130fc01>] tty_write+0x1b1/0x2a0
[<ffffffff81313a40>] ? n_tty_ioctl+0xf0/0xf0
[<ffffffff8116d878>] vfs_write+0xc8/0x190
[<ffffffff8116da41>] sys_write+0x51/0x90
[<ffffffff810d01cb>] ? audit_syscall_exit+0x25b/0x290
[<ffffffff81516762>] system_call_fastpath+0x16/0x1b
Code: 00 07 00 00 48 0f 47 f0 48 63 f6 e8 47 fd ff ff 85 c0 41 89 c5 4c 8b a3
40 01 00 00 74 42 48 98 48 8b 75 c0 45 01 ee 48 89 45 c8
9> 63 7c 24 18 48 89 c2 49 03 7c 24 08 e8 3a 9a f4 ff 49 63 7c
RIP [<ffffffff81318bc4>] tty_insert_flip_string_fixed_flag+0x74/0xd0
RSP <ffff880dd967dd68>
CR2: 0000000000000018

 

 

 

 

 

 

 

 

 

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms