Kernel panic (networking-related?)

[Darren Salt]

I've had occasional apparent hard lockups on one computer here for some time.
I'd previously been not doing much about it other than pressing the reset
button, since there was nothing which marked it as a kernel panic (no
blinkenlights; USB keyboard). However, I'd decided to make use of netconsole;
this eventually logged the panic at the end of this message.

The kernel is 2.6.23.17-hrt5 (I had to do a few manual fixups, but nothing
non-trivial); the DVB modules come from v4l-dvb (cset 127f67dea087); the
attached mouse patch is in use (my mouse is weird).

The board is an Abit KN8 v1.1 (nForce 4); on-board ethernet is in use. Full
kernel log & config are attached.


Unable to handle kernel NULL pointer dereference at 000000000000007f RIP: 
 [<ffffffff80426872>] tcp_v4_rcv+0x2ae/0x8c8
PGD 3bb9a067 PUD 1de4d067 PMD 0 
Oops: 0000 [1] 
CPU 0 
Modules linked in: vfat fat usb_storage sd_mod mt2060 dvb_usb_dib0700
dib7000p dib7000m dvb_usb dib3000mc dibx000_common dib0070 snd_rtctimer
dvb_pll cx22702 cx88_dvb cx8802 cx88xx videodev v4l1_compat ir_common
tveeprom btcx_risc videobuf_dvb videobuf_dma_sg videobuf_core dvb_core radeon
drm ip6t_owner ip6t_LOG xt_tcpudp ip6t_REJECT nf_conntrack_ipv6 xt_state
nf_conntrack ip6table_mangle ip6table_filter ip6_tables x_tables
snd_emu10k1_synth snd_emux_synth snd_seq_virmidi snd_seq_midi_emul
snd_emu10k1 snd_seq_dummy snd_seq_oss snd_seq_midi snd_seq_midi_event snd_seq
snd_intel8x0 snd_rawmidi snd_ac97_codec ac97_bus snd_pcm_oss snd_mixer_oss
snd_pcm snd_seq_device snd_timer snd_util_mem snd_hwdep snd snd_page_alloc
Pid: 0, comm: swapper Not tainted 2.6.23.17-hrt5 #1
RIP: 0010:[<ffffffff80426872>]  [<ffffffff80426872>] tcp_v4_rcv+0x2ae/0x8c8
RSP: 0018:ffffffff8062ade0  EFLAGS: 00010202
RAX: 000000000000007f RBX: ffff81003fe98a80 RCX: 00000000b7627522
RDX: ffff81003fb6f7f0 RSI: 0000000014756f7f RDI: 0000000038627a43
RBP: ffff810024dd1032 R08: 0000000089404612 R09: 0500a8c04cf31d52
R10: ffff81003fe98940 R11: 0000000000000002 R12: ffff81003fe98a80
R13: 000000000500a8c0 R14: 00000001085fd2e0 R15: ffff810024dd101e
FS:  0000000040800950(0000) GS:ffffffff805eb000(0000) knlGS:00000000f74f26c0
CS:  0010 DS: 0018 ES: 0018 CR0: 000000008005003b
CR2: 000000000000007f CR3: 00000000266b3000 CR4: 00000000000006e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff4ff0 DR7: 0000000000000400
Process swapper (pid: 0, threadinfo ffffffff805f4000, task ffffffff805a5360)
Stack:  ffff81003e8e2400 ffff81003fe98a80 ffffffff805e3ed0 0000000000000000
 ffffffff8062aef4 00000001085fd2e0 0000000000000040 ffffffff8040d550
 ffff81003fe98a80 ffff81003fe98a80 ffff810024dd101e ffff81003fe98a80
Call Trace:
 <IRQ>  [<ffffffff8040d550>] ip_local_deliver+0x19e/0x22a
 [<ffffffff8040d37b>] ip_rcv+0x477/0x4ae
 [<ffffffff803f852b>] process_backlog+0x7d/0xf6
 [<ffffffff80210ee9>] nommu_map_single+0x2b/0x42
 [<ffffffff803f86bc>] net_rx_action+0x85/0x15a
 [<ffffffff8022b7b3>] __do_softirq+0x4f/0x9c
 [<ffffffff8020c10c>] call_softirq+0x1c/0x28
 [<ffffffff8020d6a4>] do_softirq+0x2c/0x7d
 [<ffffffff8022b726>] irq_exit+0x3f/0x7d
 [<ffffffff8020d9d1>] do_IRQ+0x11e/0x135
 [<ffffffff8020a6f9>] default_idle+0x0/0x3a
 [<ffffffff8020b961>] ret_from_intr+0x0/0xa
 <EOI>  [<ffffffff8020a6f9>] default_idle+0x0/0x3a
 [<ffffffff8020a71f>] default_idle+0x26/0x3a
 [<ffffffff8020a783>] cpu_idle+0x50/0x74
 [<ffffffff805f7935>] start_kernel+0x252/0x25e
 [<ffffffff805f712a>] _sinittext+0x12a/0x12e

Code: 48 8b 08 0f 18 09 48 8d 58 f8 39 73 2c 75 e9 eb c9 48 8b 42 
RIP  [<ffffffff80426872>] tcp_v4_rcv+0x2ae/0x8c8
 RSP <ffffffff8062ade0>
CR2: 000000000000007f
Kernel panic - not syncing: Aiee, killing interrupt handler!

-- 
| Darren Salt    | linux or ds at              | nr. Ashington, | Toon
| RISC OS, Linux | youmustbejoking,demon,co,uk | Northumberland | Army
| + Output less CO2 => avoid boiling weather.     TIME IS RUNNING OUT *FAST*.

There is nothing so small that it can't be blown out of all proportion.

Attachment: crash.log.gz
Description: GNU Zip compressed data

Attachment: config.gz
Description: GNU Zip compressed data

Attachment: browser-mouse.patch
Description: Binary data