Kernel oops with 2.1.17 when PPP server went down

Farzad FARID (farzy@publicis.fr)
Sat, 4 Jan 1997 12:42:59 +0100 (MET)

I'm running Linux 2.1.17 with PPP compiled as a module and running kerneld
from modules-2.1.13. Yesterday I was connected when a power failure shut
down the PPP server, my modem disconnected and I got this oops, the
kerneld program died too:

Jan 3 16:58:58 aion kernel: Unable to handle kernel NULL pointer
dereference at virtual address 0000008a
Jan 3 16:58:58 aion kernel: current->tss.cr3 = 00101000, ^Lr3 = 00101000
Jan 3 16:58:58 aion kernel: *pde = 00000000
Jan 3 16:58:58 aion kernel: Oops: 0000
Jan 3 16:58:58 aion kernel: CPU: 0
Jan 3 16:58:58 aion kernel: EIP: 0010:[<c0144368>]
Jan 3 16:58:58 aion kernel: EFLAGS: 00010202
Jan 3 16:58:58 aion kernel: eax: 00000020 ebx: c0658018 ecx: c1af2430
edx: 00000040
Jan 3 16:58:58 aion kernel: esi: c1af2430 edi: 00000040 ebp: c1af2430
esp: c01af44c
Jan 3 16:58:58 aion kernel: ds: 0018 es: 0018 ss: 0018
Jan 3 16:58:58 aion kernel: Process swapper (pid: 0, process nr: 0,
stackpage=c01ad57c)
Jan 3 16:58:58 aion kernel: Stack: c0658018 c1af2560 c19ab810 c19ab900
c1af2560 c19ab810 c19ab900 c1af2430
Jan 3 16:58:58 aion kernel: 00000029 00000040 c19d5098 c19ab810
c014a4ec c0658018 c19ab810 c19ab900
Jan 3 16:58:58 aion kernel: 00000001 c01af4c4 c014afbf 00000000
c014b484 c19ab810 00000000 c014b408
Jan 3 16:58:58 aion kernel: Call Trace: [<c014a4ec>] [<c014afbf>]
[<c014b484>] [<c014b408>] [<c0112828>] [<c011869b>] [<c010a81b>]
Jan 3 16:58:58 aion kernel: [<c01096d4>] [<c010a876>] [<c01093c4>]
[<c010922b>] [<c019d108>] [<c0117d1c>] [<c0111dc0>]
Jan 3 16:58:58 aion kernel: Code: 0f b7 6a 4a 39 e8 7d 41 83 ba cc 00 00
00 00 74 38 8d 45 0f
Jan 3 16:58:58 aion kernel: Aiee, killing interrupt handler
Jan 3 16:58:58 aion kernel: kfree of non-kmalloced memory: c01af5c4,
next= 00000000, order=0
Jan 3 16:58:58 aion kernel: kfree of non-kmalloced memory: c01af5b4,
next= 00000000, order=0
Jan 3 16:58:58 aion kernel: kfree of non-kmalloced memory: c01afac8,
next= 00000000, order=0
Jan 3 16:58:58 aion kernel: idle task may not sleep
Jan 3 16:58:58 aion last message repeated 4 times
Jan 3 16:59:58 aion kernel: Socket destroy delayed (r=0 w=488)
Jan 3 17:00:38 aion last message repeated 4 times

And ksymoops says:

12:38 [farzy:p0] Aion:~% ksymoops /boot/System.map.2.1.17 < oops-kerneld-2.1.17.
log
Using `/boot/System.map.2.1.17' to map addresses to symbols.

>>EIP: c0144368 <ip_queue_xmit+b8/258>
Trace: c014a4ec <tcp_do_retransmit+18c/208>
Trace: c014afbf <tcp_clear_xmit_timer+2b/50>
Trace: c014b484 <tcp_retransmit_timer+7c/b0>
Trace: c014b484 <tcp_retransmit_timer+7c/b0>
Trace: c0112828 <timer_bh+12c/14c>
Trace: c011869b <do_bottom_half+3b/60>
Trace: c010a81b <handle_bottom_half+b/20>
Trace: c01096d4 <sys_idle+5c/70>
Trace: c010a876 <system_call+36/40>
Trace: c01093c4 <init>
Trace: c010922b <start_kernel+1b7/1c4>
Trace: c019d108 <__stop___ex_table>
Trace: c0117d1c <it_real_fn>
Trace: c0111dc0 <schedule+230/290>

Code: c0144368 <ip_queue_xmit+b8/258> movzwl 0x4a(%edx),%ebp
Code: c014436c <ip_queue_xmit+bc/258> cmpl %ebp,%eax
Code: c014436e <ip_queue_xmit+be/258> jnl c01443b1 <ip_queue_xmit+101/258>
Code: c0144370 <ip_queue_xmit+c0/258> cmpl $0x0,0xcc(%edx)
Code: c0144377 <ip_queue_xmit+c7/258> je c01443b1 <ip_queue_xmit+101/258>
Code: c0144379 <ip_queue_xmit+c9/258> leal 0xf(%ebp),%eax

Hope this helps.

--
Farzad FARID
Administrateur Reseau
SGIP - Publicis