[vbox-dev] NULL pointer dereference at packet_create()->mutex_lock() on OpenSuse-13.2 VM

[Igor Zhbanov]

Hi!

I'm running openSUSE 13.2 (x86_64) virtual machine on Windows 7 (x64) host.
The VirtualBox version is 5.0.0 r101573
The Linux kernel version is kernel-desktop-3.16.7-24.1.x86_64.
virtualbox-guest-tools-4.3.30-20.1.x86_64

Once I got NULL pointer dereference:

NetworkManager[700]: <info> (enp0s8): device state change: ip-config
-> ip-check (reason 'none') [70 80 0]
NetworkManager[700]: <info> Activation (enp0s8) Stage 5 of 5 (IPv4
Commit) complete.
NetworkManager[700]: <info> ModemManager available in the bus
NetworkManager[700]: <info> (enp0s3): device state change: ip-check ->
secondaries (reason 'none') [80 90 0]
NetworkManager[700]: <info> (enp0s8): device state change: ip-check ->
secondaries (reason 'none') [80 90 0]
NetworkManager[700]: <info> (enp0s3): device state change: secondaries
-> activated (reason 'none') [90 100 0]
kernel: NET: Registered protocol family 17

kernel: BUG: unable to handle kernel NULL pointer dereference at
    (null)
kernel: IP: [<ffffffff81621604>] __mutex_lock_slowpath+0xb4/0x200
kernel: PGD 0
kernel: Oops: 0002 [#1] PREEMPT SMP
kernel: Modules linked in: af_packet(+) cfg80211 rfkill vboxsf(O)
snd_intel8x0 snd_ac97_codec snd_pcm snd_timer snd ppdev soundcore
parport_pc parport e1000 battery video ac97_bus pcspkr button ac
processor serio_raw joydev i2c_piix4 dm_mod sr_mod cdrom ata_generic
vboxvideo(O) ata_piix ohci_pci vboxguest(O) drm sg
kernel: CPU: 2 PID: 771 Comm: arping Tainted: G           O
3.16.7-24-desktop #1
kernel: Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS
VirtualBox 12/01/2006
kernel: task: ffff880000024390 ti: ffff8800b9114000 task.ti: ffff8800b9114000
kernel: RIP: 0010:[<ffffffff81621604>]  [<ffffffff81621604>]
__mutex_lock_slowpath+0xb4/0x200
kernel: RSP: 0018:ffff8800b9117e80  EFLAGS: 00010286
kernel: RAX: 0000000000000000 RBX: ffffffff81ec09d0 RCX: 0000000000000000
kernel: RDX: 0000000000000000 RSI: ffff880000024390 RDI: ffffffff81ec09d4
kernel: RBP: ffff8800b9117ec8 R08: ffff8800b9114000 R09: 0000000000000001
kernel: R10: 0000000000000065 R11: 0000000000000246 R12: ffffffff81ec09d4
kernel: R13: ffff880000024390 R14: 00000000ffffffff R15: ffffffff81ec09d8
kernel: FS:  00007f48a9c22700(0000) GS:ffff8800bfb00000(0000)
knlGS:0000000000000000
kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
kernel: CR2: 0000000000000000 CR3: 00000000b9bc3000 CR4: 00000000000006e0
kernel: Stack:
kernel:  ffffffff81ec09d8 0000000000000000 0000000000000004 0000001ab99f7800
kernel:  ffffffff81ec09d0 ffffffff81ec0840 0000000000000000 ffff8800b8762580
kernel:  ffffffffa0139640 ffffffff81ec09d0 ffffffff81621763 ffff8800b99f7800
kernel: Call Trace:
kernel:  [<ffffffff81621763>] mutex_lock+0x13/0x22
kernel:  [<ffffffffa01344e1>] packet_create+0x141/0x250 [af_packet]
kernel:  [<ffffffff81515556>] __sock_create+0x106/0x210
kernel:  [<ffffffff81516a5e>] SyS_socket+0x4e/0xc0
kernel:  [<ffffffff8162354d>] system_call_fastpath+0x1a/0x1f
kernel:  [<00007f48a9565207>] 0x7f48a9565206
kernel: Code: 00 8b 03 85 c0 78 09 31 c0 87 03 83 f8 01 74 70 48 8b 43
10 4c 8d 7b 08 48 89 63 10 41 be ff ff ff ff 4c 89 3c 24 48 89 44 24
08 <48> 89 20 4c 89 6c 24 10 eb 1f 66 90 4c 89 e7 49 c7 45 00 02 00
kernel: RIP  [<ffffffff81621604>] __mutex_lock_slowpath+0xb4/0x200
kernel:  RSP <ffff8800b9117e80>
kernel: CR2: 0000000000000000
kernel: ---[ end trace a10605f298d4fd29 ]---
kernel: note: arping[771] exited with preempt_count 2

kernel: VBoxService 4.3.30_SUSE r101610 (verbosity: 0) linux.amd64
(openSUSE Buildservice) release log
                                   00:00:00.000139 main     Log opened
2015-09-15T09:41:02.160334000Z
kernel: 00:00:00.003962 main     OS Product: Linux
kernel: 00:00:00.005543 main     OS Release: 3.16.7-24-desktop
kernel: 00:00:00.006847 main     OS Version: #1 SMP PREEMPT Mon Aug 3
14:37:06 UTC 2015 (ec183cc)
kernel: 00:00:00.007744 main     OS Service Pack: #1 SMP PREEMPT Mon
Aug 3 14:37:06 UTC 2015 (ec183cc)
kernel: 00:00:00.009801 main     Executable: /usr/bin/VBoxService
        00:00:00.009806 main     Process ID: 876
        00:00:00.009809 main     Package type: LINUX_64BITS_GENERIC (OSE)
kernel: 00:00:00.015927 main     4.3.30_SUSE r101610 started. Verbose level = 0

The bug is not reproducible.