New oops in 1.99.14

Jochen Heuer (jogi@ping.de)
Mon, 10 Jun 1996 15:59:05 +0200 (MET DST)


Hi,
today we got the following oops at our ISP's server. It's a P100
with 64MB of ram, running Linux-pre2.0.14, gcc-2.7.2, libc-5.2.18.

-----------8<-----------
general protection: 0000
CPU: 0
EIP: 0010:[<00188ca2>]
EFLAGS: 00010206
eax: 6f000000 ebx: 00019820 ecx: 00bab0e8 edx: 00019820
esi: 00bab0e8 edi: 001c03fc ebp: 0000e400 esp: 001b3be0
ds: 0018 es: 0018 fs: 002b gs: 0018 ss: 0018
Process swapper (pid: 0, process nr: 0, stackpage=001b1e2c)
Stack: 00185843 001c03fc 00bab0e8 00000000 00bab0e8 001c0488 001c03fc 00000020
001371f0 00bab0e8 001c03fc 00bab0e8 0375f214 00bab038 001c03fc 00000000
00000202 0013723a 00bab0e8 001c03fc 00000000 0013f3c5 00bab0e8 001c03fc
Call Trace: [<00185843>] [<001371f0>] [<0013723a>] [<0013f3c5>] [<00144fb5>] [<001438ec>] [<0014491f>]
[<001887ed>] [<00185d36>] [<0013ce2b>] [<00137400>] [<0011618b>] [<0010a33b>] [<00109544>] [<0010a3b2>]
[<00109284>] [<0010910f>]
Code: 83 38 00 75 f9 89 08 eb 07 90 89 8a 98 06 00 00 c7 01 00 00
Aiee, killing interrupt handler
kfree of non-kmalloced memory: 001b3e6c, next= 00000000, order=0
-----------8<-----------

This is the output of ksymoops:

-----------8<-----------

Using `/usr/src/linux/System.map' to map addresses to symbols.

>>EIP: 188ca2 <de4x5_put_cache+1e/38>
Trace: 185843 <de4x5_queue_pkt+87/280>
Trace: 1371f0 <do_dev_queue_xmit+178/1a8>
Trace: 13723a <dev_queue_xmit+1a/24>
Trace: 13f3c5 <ip_queue_xmit+1dd/240>
Trace: 144fb5 <tcp_write_xmit+199/1e0>
Trace: 1438ec <tcp_ack+4e0/81c>
Trace: 14491f <tcp_rcv+6bb/7e8>
Trace: 1887ed <de4x5_alloc_rx_buff+1d/94>
Trace: 185d36 <de4x5_rx+146/278>
Trace: 13ce2b <ip_rcv+38b/4a4>
Trace: 137400 <net_bh+ec/10c>
Trace: 11618b <do_bottom_half+3b/60>
Trace: 10a33b <handle_bottom_half+b/20>
Trace: 109544 <sys_idle+5c/70>
Trace: 10a3b2 <system_call+52/80>
Trace: 109284 <init>
Trace: 10910f <start_kernel+177/184>

Code: 188ca2 <de4x5_put_cache+1e/38> cmpl $0x0,(%eax)
Code: 188ca5 <de4x5_put_cache+21/38> jne fffffffe <_EIP+fffffffe>
Code: 188ca7 <de4x5_put_cache+23/38> movl %ecx,(%eax)
Code: 188ca9 <de4x5_put_cache+25/38> jmp 188cb2 <de4x5_put_cache+2e/38>
Code: 188cab <de4x5_put_cache+27/38> nop
Code: 188cac <de4x5_put_cache+28/38> movl %ecx,0x698(%edx)
Code: 188cb2 <de4x5_put_cache+2e/38> movl $0x90000000,(%ecx)
Code: 188cb8 <de4x5_put_cache+34/38> nop
-----------8<-----------
The machine did not crash but it produced lots of socket destroy delayed
warnings.

Hope it helps,

Jogi