tcp oopses in 1.3.29 kernel

Peter Young (pwyF91@hamp.hampshire.edu)
Sun, 15 Oct 1995 20:26:43 -0400


Hi,

I realize I'm a couple of versions behind, but I thought I'd post this
in case it has not been seen before...I noticed that release 33 was
supposed to fix a couple of (unspecified) network bugs, so this may be
obsolete.

After 4 days of heavy, moderately abusive use (I was using the
userfs.o kernel module) I got the following two oopses logged during
the same second. I did not notice until this morning, when I tried to
telnet to a host on my local ethernet (i.e. apparently nothing else
was affected).

I don't know anything about the networking code, so I have not tried
to narrow this down. ksymoops output follows.

Oct 14 23:21:29 eth212 kernel: Unable to handle kernel paging request at virtual address c0c00028
Oct 14 23:21:29 eth212 kernel: current->tss.cr3 = 00101000, ^Hr3 = 00101000
Oct 14 23:21:29 eth212 kernel: *pde = 00000000
Oct 14 23:21:29 eth212 kernel: Oops: 0002
Oct 14 23:21:29 eth212 kernel: EIP: 0010:001417ac
Oct 14 23:21:29 eth212 kernel: EFLAGS: 00010006
Oct 14 23:21:29 eth212 kernel: eax: 00c00028 ebx: 8b0c21c0 ecx: ad970000 edx: 00000006
Oct 14 23:21:29 eth212 kernel: esi: 006b3808 edi: 00818164 ebp: 001839f0 esp: 0017991c
Oct 14 23:21:29 eth212 kernel: ds: 0018 es: 0018 fs: 002b gs: 0018 ss: 0018
Oct 14 23:21:29 eth212 kernel: Process swapper (pid: 0, process nr: 0, stackpage=00177a80)
Oct 14 23:21:29 eth212 kernel: Stack: 0017c240 00818164 00818134 00818164 00000003 00000018 ffffffff 00000246
Oct 14 23:21:29 eth212 kernel: 00134920 000000b0 00818164 00000246 00818148 00810018 00818164 001839f0
Oct 14 23:21:29 eth212 kernel: 0013b3fb 00818164 001839f0 00000000 d4b072c6 00000018 8b0c21c0 00000000
Oct 14 23:21:29 eth212 kernel: Call Trace: 00134920 0013b3fb 00135c64 00116f1a 0010a705 00170018 0017002b
Oct 14 23:21:29 eth212 kernel: 00110018 001098ec 0010a781 001093ff
Oct 14 23:21:29 eth212 kernel: Code: 89 38 52 9d fb 31 c0 5b 5e 5f 5d 83 c4 30 c3 90 90 90 90 90
Oct 14 23:21:29 eth212 kernel: Aiee, killing interrupt handler
Oct 14 23:21:29 eth212 kernel: Unable to handle kernel paging request at virtual address c0001004
Oct 14 23:21:29 eth212 kernel: current->tss.cr3 = 00101000, ^Hr3 = 00101000
Oct 14 23:21:29 eth212 kernel: *pde = 00102067
Oct 14 23:21:29 eth212 kernel: *pte = 00000000
Oct 14 23:21:29 eth212 kernel: Oops: 0002
Oct 14 23:21:29 eth212 kernel: EIP: 0010:0011adfe
Oct 14 23:21:29 eth212 kernel: EFLAGS: 00010046
Oct 14 23:21:29 eth212 kernel: eax: 00000000 ebx: 00000000 ecx: 0018dde0 edx: 00198200
Oct 14 23:21:29 eth212 kernel: esi: fffff000 edi: 00001000 ebp: 00000000 esp: 0017980c
Oct 14 23:21:29 eth212 kernel: ds: 0018 es: 0018 fs: 002b gs: 0018 ss: 0018
Oct 14 23:21:29 eth212 kernel: Process swapper (pid: 0, process nr: 0, stackpage=00177a80)
Oct 14 23:21:29 eth212 kernel: Stack: 00001000 00102004 00001000 00400000 00196104 00000002 00118668 00001000
Oct 14 23:21:29 eth212 kernel: 00000000 00179a80 00000000 0017a0f0 001798e0 00400000 00101000 00000000
Oct 14 23:21:29 eth212 kernel: 40000000 00101000 0011ccac 0017a0f0 00000000 40000000 0017a0f0 00000014
Oct 14 23:21:29 eth212 kernel: Call Trace: 00118668 0011ccac 001154c9 001156d6 0010ae96 0010abdd 01800000
Oct 14 23:21:29 eth212 kernel: 01000000 00110123 0010fed3 0010fed8 0010a943 001417ac 00134920 0013b3fb
Oct 14 23:21:29 eth212 kernel: 00135c64 00116f1a 0010a705 00170018 0017002b 00110018 001098ec 0010a781
Oct 14 23:21:29 eth212 kernel: 001093ff
Oct 14 23:21:29 eth212 kernel: Code: 89 4f 04 8b 90 e0 dd 18 00 89 17 89 7a 04 89 b8 e0 dd 18 00
Oct 14 23:21:29 eth212 kernel: kfree of non-kmalloced memory: 00179ac0, next= 00000000, order=0
Oct 14 23:21:29 eth212 kernel: kfree of non-kmalloced memory: 00179ab0, next= 00000000, order=0
Oct 14 23:21:29 eth212 kernel: kfree of non-kmalloced memory: 00179ee4, next= 00000000, order=0
Oct 14 23:21:29 eth212 kernel: idle task may not sleep

Using `/etc/kernels/map.1.3.29.mdu29' to map addresses to symbols.

>>EIP: 1417ac <_tcp_rcv+23c/23d0>
Trace: 134920 <_alloc_skb+54/110>
Trace: 13b3fb <_ip_rcv+43b/4d0>
Trace: 135c64 <_net_bh+114/160>
Trace: 116f1a <_do_bottom_half+3e/a4>
Trace: 10a705 <handle_bottom_half+d/20>
Trace: 170018 <_set_selection+6c/6b0>
Trace: 17002b <_set_selection+7f/6b0>
Trace: 110018 <_do_page_fault+140/2d0>
Trace: 1098ec <_sys_idle+44/50>
Trace: 10a781 <_system_call+59/a0>
Trace: 1093ff <_start_kernel+19f/1b0>

Code: 1417ac <_tcp_rcv+23c/23d0> movl %edi,(%eax)
Code: 1417ae <_tcp_rcv+23e/23d0> pushl %edx
Code: 1417af <_tcp_rcv+23f/23d0> popf
Code: 1417b0 <_tcp_rcv+240/23d0> sti
Code: 1417b1 <_tcp_rcv+241/23d0> xorl %eax,%eax
Code: 1417b3 <_tcp_rcv+243/23d0> popl %ebx
Code: 1417b4 <_tcp_rcv+244/23d0> popl %esi
Code: 1417b5 <_tcp_rcv+245/23d0> popl %edi
Code: 1417b6 <_tcp_rcv+246/23d0> popl %ebp
Code: 1417b7 <_tcp_rcv+247/23d0> addl $0x30,%esp
Code: 1417ba <_tcp_rcv+24a/23d0> ret
Code: 1417bb <_tcp_rcv+24b/23d0> nop
Code: 1417bc <_tcp_rcv+24c/23d0> nop
Code: 1417bd <_tcp_rcv+24d/23d0> nop
Code: 1417be <_tcp_rcv+24e/23d0> nop
Code: 1417bf <_tcp_rcv+24f/23d0> nop

Using `/etc/kernels/map.1.3.29.mdu29' to map addresses to symbols.

>>EIP: 11adfe <_free_pages+de/1e0>
Trace: 118668 <_zap_page_range+120/1c0>
Trace: 11ccac <_exit_mmap+5c/a0>
Trace: 1154c9 <_exit_mm+29/50>
Trace: 1156d6 <_do_exit+46/c0>
Trace: 10ae96 <_die_if_kernel+2b2/2e0>
Trace: 10abdd <_page_fault+155/15c>
Trace: 1800000
Trace: 1000000
Trace: 110123 <_do_page_fault+24b/2d0>
Trace: 10fed3 <_si_meminfo+1a3/1a8>
Trace: 110123 <_do_page_fault+24b/2d0>
Trace: 10a943 <error_code+4b/60>
Trace: 1417ac <_tcp_rcv+23c/23d0>
Trace: 134920 <_alloc_skb+54/110>
Trace: 13b3fb <_ip_rcv+43b/4d0>
Trace: 135c64 <_net_bh+114/160>
Trace: 116f1a <_do_bottom_half+3e/a4>
Trace: 10a705 <handle_bottom_half+d/20>
Trace: 170018 <_set_selection+6c/6b0>
Trace: 17002b <_set_selection+7f/6b0>
Trace: 110018 <_do_page_fault+140/2d0>
Trace: 1098ec <_sys_idle+44/50>
Trace: 10a781 <_system_call+59/a0>
Trace: 1093ff <_start_kernel+19f/1b0>

Code: 11adfe <_free_pages+de/1e0> movl %ecx,0x4(%edi)
Code: 11ae01 <_free_pages+e1/1e0> movl 0x18dde0(%eax),%edx
Code: 11ae07 <_free_pages+e7/1e0> movl %edx,(%edi)
Code: 11ae09 <_free_pages+e9/1e0> movl %edi,0x4(%edx)
Code: 11ae0c <_free_pages+ec/1e0> movl %edi,0x18dde0(%eax)

_____________________
pwyoung@hampshire.edu
Hampshire College
(413) 582-5097