[ 368.230313] BUG: unable to handle kernel NULL pointer dereference at 0000000000000038 [ 368.233309] IP: [] pick_next_task_fair+0xba/0x150 [ 368.233309] PGD 6b941067 PUD 6b958067 PMD 0 [ 368.233309] Oops: 0000 [#1] SMP [ 368.233309] last sysfs file: /sys/devices/virtual/dmi/id/chassis_asset_tag [ 368.233309] CPU 0 [ 368.233309] Modules linked in: sch_sfq ext3 jbd mbcache uhci_hcd ehci_hcd i2c_i801 iTCO_wdt iTCO_vendor_support sg r8169 ppdev usbcore i2c_core mii inteld [ 368.233309] Pid: 19554, comm: bash xid: #55 Not tainted 2.6.31.1-0.1 #1 G31M-S2L [ 368.233309] RIP: 0010:[] [] pick_next_task_fair+0xba/0x150 [ 368.233309] RSP: 0000:ffff880069053ad8 EFLAGS: 00010046 [ 368.233309] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff880069053bb8 [ 368.233309] RDX: 0000000000000000 RSI: ffff880001862a58 RDI: 0000000000000000 [ 368.233309] RBP: ffff880069053b08 R08: ffff880001862a70 R09: 0000000000000000 [ 368.233309] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8800018621b0 [ 368.233309] R13: 0000000000000000 R14: ffff880001862140 R15: ffffffff810f5e60 [ 368.233309] FS: 00007f495b9326f0(0000) GS:ffff880001851000(0000) knlGS:0000000000000000 [ 368.233309] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 368.233309] CR2: 0000000000000038 CR3: 000000006b939000 CR4: 00000000000006f0 [ 368.233309] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 368.233309] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 368.233309] Process bash (pid: 19554, threadinfo ffff880069052000, task ffff88006d90c7e0) [ 368.233309] Stack: [ 368.233309] ffff880069053b08 e32f64e6626e8ed8 ffff880001862140 ffffffff814be320 [ 368.233309] <0> ffffc90010912638 ffff880001862a70 ffff880069053bf8 ffffffff81469402 [ 368.233309] <0> 0000000000000001 ffff880079821012 ffff880069053b58 ffff88006d90c8e0 [ 368.233309] Call Trace: [ 368.233309] [] thread_return+0x298/0x916 [ 368.233309] [] ? ktime_get_ts+0x69/0xa0 [ 368.233309] [] ? sync_page+0x0/0x80 [ 368.233309] [] io_schedule+0x70/0xd0 [ 368.233309] [] sync_page+0x4d/0x80 [ 368.233309] [] __wait_on_bit_lock+0x62/0xd0 [ 368.233309] [] __lock_page+0x6f/0x90 [ 368.233309] [] ? wake_bit_function+0x0/0x60 [ 368.233309] [] filemap_fault+0x3dd/0x480 [ 368.233309] [] __do_fault+0x6a/0x570 [ 368.233309] [] handle_mm_fault+0x1af/0xb40 [ 368.233309] [] ? __down_read_trylock+0x4b/0x90 [ 368.233309] [] do_page_fault+0x1cf/0x3a0 [ 368.233309] [] page_fault+0x1f/0x30 [ 368.233309] Code: 85 c0 7e 4d 49 8b 7c 24 60 48 85 ff 74 3b 48 89 de e8 1b da ff ff 85 c0 7e 47 49 8b 44 24 60 48 39 c3 74 42 49 3b 5c 24 58 74 4e <8b> 7 [ 368.233309] RIP [] pick_next_task_fair+0xba/0x150 [ 368.233309] RSP [ 368.233309] CR2: 0000000000000038 [ 368.233309] ---[ end trace e52b95922aef31b6 ]--- ffffffff8104033a /home/users/arekm/rpm/BUILD/kernel-2.6.31.1/linux-2.6.31/kernel/sched_fair.c:810 set_next_entity(struct cfs_rq *cfs_rq, struct sched_entity *se) { /* 'current' is not kept within the tree. */ here if (se->on_rq) { ffffffff81469402 /home/users/arekm/rpm/BUILD/kernel-2.6.31.1/linux-2.6.31/kernel/sched.c:5347 for ( ; ; ) { p = class->pick_next_task(rq); here if (p) ffffffff81078b99 /home/users/arekm/rpm/BUILD/kernel-2.6.31.1/linux-2.6.31/kernel/hrtimer.c:131 set_normalized_timespec(ts, ts->tv_sec + tomono.tv_sec, ts->tv_nsec + tomono.tv_nsec); here } ffffffff810f5e60 /home/users/arekm/rpm/BUILD/kernel-2.6.31.1/linux-2.6.31/mm/filemap.c:153 static int sync_page(void *word) here { struct address_space *mapping; ffffffff81469af0 /home/users/arekm/rpm/BUILD/kernel-2.6.31.1/linux-2.6.31/arch/x86/include/asm/atomic_64.h:207 */ static inline void atomic_dec(atomic_t *v) { here asm volatile(LOCK_PREFIX "decl %0\n" ffffffff810f5ead /home/users/arekm/rpm/BUILD/kernel-2.6.31.1/linux-2.6.31/mm/filemap.c:186 mapping->a_ops->sync_page(page); io_schedule(); return 0; here } ffffffff8146a352 /home/users/arekm/rpm/BUILD/kernel-2.6.31.1/linux-2.6.31/kernel/wait.c:230 ret = action(q->key.flags); here if (!ret) continue; ffffffff810f5dff /home/users/arekm/rpm/BUILD/kernel-2.6.31.1/linux-2.6.31/mm/filemap.c:642 __wait_on_bit_lock(page_waitqueue(page), &wait, sync_page, TASK_UNINTERRUPTIBLE); here } ffffffff81073ff0 /home/users/arekm/rpm/BUILD/kernel-2.6.31.1/linux-2.6.31/kernel/wait.c:174 int wake_bit_function(wait_queue_t *wait, unsigned mode, int sync, void *arg) here { struct wait_bit_key *key = arg; ffffffff810f6b3d /home/users/arekm/rpm/BUILD/kernel-2.6.31.1/linux-2.6.31/include/linux/pagemap.h:317 ffffffff8111336a /home/users/arekm/rpm/BUILD/kernel-2.6.31.1/linux-2.6.31/mm/memory.c:2919 ffffffff81115baf /home/users/arekm/rpm/BUILD/kernel-2.6.31.1/linux-2.6.31/mm/memory.c:3124 ffffffff812666fb /home/users/arekm/rpm/BUILD/kernel-2.6.31.1/linux-2.6.31/lib/rwsem-spinlock.c:188 ffffffff8146f56f /home/users/arekm/rpm/BUILD/kernel-2.6.31.1/linux-2.6.31/arch/x86/mm/fault.c:1338