public inbox for linux-kernel@vger.kernel.org
 help / color / mirror / Atom feed
* Oops in 2.6.19.1
@ 2006-12-20 14:21 Alistair John Strachan
  2006-12-20 16:30 ` Greg KH
  2006-12-23 15:40 ` Alistair John Strachan
  0 siblings, 2 replies; 40+ messages in thread
From: Alistair John Strachan @ 2006-12-20 14:21 UTC (permalink / raw)
  To: LKML

Hi,

Any ideas?

BUG: unable to handle kernel NULL pointer dereference at virtual address 
00000009
 printing eip:
c0156f60
*pde = 00000000
Oops: 0002 [#1]
Modules linked in: ipt_recent ipt_REJECT xt_tcpudp ipt_MASQUERADE iptable_nat 
xt_state iptable_filter ip_tables x_tables prism54 yenta_socket 
rsrc_nonstatic pcmcia_core snd_via82xx snd_ac97_codec snd_ac97_bus snd_pcm 
snd_timer snd_page_alloc snd_mpu401_uart snd_rawmidi snd soundcore ehci_hcd 
usblp eth1394 uhci_hcd usbcore ohci1394 ieee1394 via_agp agpgart vt1211 
hwmon_vid hwmon ip_nat_ftp ip_nat ip_conntrack_ftp ip_conntrack
CPU:    0
EIP:    0060:[<c0156f60>]    Not tainted VLI
EFLAGS: 00010246   (2.6.19.1 #1)
EIP is at pipe_poll+0xa0/0xb0
eax: 00000008   ebx: 00000000   ecx: 00000008   edx: 00000000
esi: f70f3e9c   edi: f7017c00   ebp: f70f3c1c   esp: f70f3c0c
ds: 007b   es: 007b   ss: 0068
Process python (pid: 4178, ti=f70f2000 task=f70c4a90 task.ti=f70f2000)
Stack: 00000000 00000000 f70f3e9c f6e111c0 f70f3fa4 c015d7f3 f70f3c54 f70f3fac
       084c44a0 00000030 084c44d0 00000000 f70f3e94 f70f3e94 00000006 f70f3ecc
       00000000 f70f3e94 c015e580 00000000 00000000 00000006 f6e111c0 00000000
Call Trace:
 [<c015d7f3>] do_sys_poll+0x253/0x480
 [<c015da53>] sys_poll+0x33/0x50
 [<c0102c97>] syscall_call+0x7/0xb
 [<b7f6b402>] 0xb7f6b402
 =======================
Code: 58 01 00 00 0f 4f c2 09 c1 89 c8 83 c8 08 85 db 0f 44 c8 8b 5d f4 89 c8 
8b 75 f8 8b 7d fc 89 ec 5d c3 89 ca 8b 46 6c 83 ca 10 3b <87> 68 01 00 00 0f 
45 ca eb b6 8d b6 00 00 00 00 55 b8 01 00 00
EIP: [<c0156f60>] pipe_poll+0xa0/0xb0 SS:ESP 0068:f70f3c0c

-- 
Cheers,
Alistair.

Final year Computer Science undergraduate.
1F2 55 South Clerk Street, Edinburgh, UK.

^ permalink raw reply	[flat|nested] 40+ messages in thread
* Re: Oops in 2.6.19.1
@ 2006-12-20 20:48 Chuck Ebbert
  2006-12-20 22:15 ` Alistair John Strachan
  2006-12-30 18:06 ` James Courtier-Dutton
  0 siblings, 2 replies; 40+ messages in thread
From: Chuck Ebbert @ 2006-12-20 20:48 UTC (permalink / raw)
  To: Alistair John Strachan; +Cc: linux-kernel

In-Reply-To: <200612201421.03514.s0348365@sms.ed.ac.uk>

On Wed, 20 Dec 2006 14:21:03 +0000, Alistair John Strachan wrote:

> Any ideas?
> 
> BUG: unable to handle kernel NULL pointer dereference at virtual address 
> 00000009

    83 ca 10                  or     $0x10,%edx
    3b                        .byte 0x3b
    87 68 01                  xchg   %ebp,0x1(%eax)   <=====
    00 00                     add    %al,(%eax)

Somehow it is trying to execute code in the middle of an instruction.
That almost never works, even when the resulting fragment is a legal
opcode. :)

The real instruction is:

    3b 87 68 01 00 00 00        cmp    0x168(%edi),%eax

I'd guess you have some kind of hardware problem.  It could also be
a kernel problem where the saved address was corrupted during an
interrupt, but that's not likely.
-- 
MBTI: IXTP

^ permalink raw reply	[flat|nested] 40+ messages in thread
* Re: Oops in 2.6.19.1
@ 2006-12-21  8:05 Chuck Ebbert
  2006-12-21 14:22 ` Alistair John Strachan
  0 siblings, 1 reply; 40+ messages in thread
From: Chuck Ebbert @ 2006-12-21  8:05 UTC (permalink / raw)
  To: Alistair John Strachan; +Cc: linux-kernel

In-Reply-To: <200612202215.50315.s0348365@sms.ed.ac.uk>

On Wed, 20 Dec 2006 22:15:50 +0000, Alistair John Strachan wrote:

> > I'd guess you have some kind of hardware problem.  It could also be
> > a kernel problem where the saved address was corrupted during an
> > interrupt, but that's not likely.
> 
> Seems pretty unlikely on a 4 year old Via Epia. Never had any problems with it 
> before now.
> 
> Maybe a cosmic ray event? ;-)

The low byte of eip should be 5f and it changed to 60, so that's
probably not it.  And the oops report is consistent with that being
the instruction that was really executed, so it's not the kernel
misreporting the address after it happened.

You weren't trying kprobes or something, were you? Have you ever
had another unexplained oops with this machine?

-- 
MBTI: IXTP


^ permalink raw reply	[flat|nested] 40+ messages in thread
[parent not found: <200612232325_MC3-1-D634-10E4@compuserve.com>]
* Re: Oops in 2.6.19.1
@ 2006-12-30 17:21 Chuck Ebbert
  2006-12-30 18:29 ` Alistair John Strachan
  0 siblings, 1 reply; 40+ messages in thread
From: Chuck Ebbert @ 2006-12-30 17:21 UTC (permalink / raw)
  To: Alistair John Strachan; +Cc: Greg KH, LKML

In-Reply-To: <200612301659.35982.s0348365@sms.ed.ac.uk>

On Sat, 30 Dec 2006 16:59:35 +0000, Alistair John Strachan wrote:

> I've eliminated 2.6.19.1 as the culprit, and also tried toggling "optimize for 
> size", various debug options. 2.6.19 compiled with GCC 4.1.1 on an Via 
> Nehemiah C3-2 seems to crash in pipe_poll reliably, within approximately 12 
> hours.

Which CPU are you compiling for?  You should try different options.

Can you post disassembly of pipe_poll() for both the one that crashes
and the one that doesn't?  Use 'objdump -D -r fs/pipe.o' so we get the
relocation info and post just the one function from each for now.

-- 
MBTI: IXTP


^ permalink raw reply	[flat|nested] 40+ messages in thread
* Re: Oops in 2.6.19.1
@ 2006-12-31 21:43 Chuck Ebbert
  2006-12-31 22:16 ` Alistair John Strachan
  0 siblings, 1 reply; 40+ messages in thread
From: Chuck Ebbert @ 2006-12-31 21:43 UTC (permalink / raw)
  To: Alistair John Strachan; +Cc: LKML, Greg KH

In-Reply-To: <200612301829.15980.s0348365@sms.ed.ac.uk>

On Sat, 30 Dec 2006 18:29:15 +0000, Alistair John Strachan wrote:

> > Can you post disassembly of pipe_poll() for both the one that crashes
> > and the one that doesn't?  Use 'objdump -D -r fs/pipe.o' so we get the
> > relocation info and post just the one function from each for now.
> 
> Sure, no problem:
> 
> http://devzero.co.uk/~alistair/2.6.19-via-c3-pipe_poll/
> 
> Both use identical configs, neither are optimised for size. The config is 
> available from the same location.

Those were compiled without frame pointers.  Can you post them compiled
with frame pointers so they match your original bug report? And confirm
that pipe_poll() is still at 0xc0156ec0 in vmlinux?

-- 
MBTI: IXTP


^ permalink raw reply	[flat|nested] 40+ messages in thread

end of thread, other threads:[~2007-01-03  2:07 UTC | newest]

Thread overview: 40+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2006-12-20 14:21 Oops in 2.6.19.1 Alistair John Strachan
2006-12-20 16:30 ` Greg KH
2006-12-20 16:44   ` Alistair John Strachan
2006-12-23 15:40 ` Alistair John Strachan
2006-12-27  2:07   ` Zhang, Yanmin
2006-12-27 12:35     ` Alistair John Strachan
2006-12-28  2:41       ` Zhang, Yanmin
2006-12-28  4:02         ` Alistair John Strachan
2006-12-28  4:14           ` Alistair John Strachan
2006-12-30 16:59             ` Alistair John Strachan
2006-12-31 13:47               ` Alistair John Strachan
2006-12-31 16:27               ` Adrian Bunk
2006-12-31 16:55                 ` Alistair John Strachan
2007-01-02 21:10                   ` kernel + gcc 4.1 = several problems Adrian Bunk
2007-01-02 21:56                     ` Alistair John Strachan
2007-01-02 22:06                       ` D. Hazelton
2007-01-02 23:24                         ` Adrian Bunk
2007-01-02 23:41                           ` D. Hazelton
2007-01-03  2:05                             ` Horst H. von Brand
2007-01-02 22:13                       ` Linus Torvalds
2007-01-02 23:18                         ` Alistair John Strachan
2007-01-03  1:43                           ` Linus Torvalds
2007-01-02 22:01                     ` Linus Torvalds
2007-01-02 23:09                       ` David Rientjes
  -- strict thread matches above, loose matches on Subject: below --
2006-12-20 20:48 Oops in 2.6.19.1 Chuck Ebbert
2006-12-20 22:15 ` Alistair John Strachan
2006-12-21 15:31   ` Valdis.Kletnieks
2006-12-30 18:06 ` James Courtier-Dutton
2006-12-30 18:32   ` Alistair John Strachan
2006-12-21  8:05 Chuck Ebbert
2006-12-21 14:22 ` Alistair John Strachan
     [not found] <200612232325_MC3-1-D634-10E4@compuserve.com>
2006-12-24 14:40 ` Alistair John Strachan
2006-12-24 14:51 ` Alistair John Strachan
2006-12-30 17:21 Chuck Ebbert
2006-12-30 18:29 ` Alistair John Strachan
2006-12-31 16:28   ` Adrian Bunk
2006-12-31 16:48     ` Alistair John Strachan
2007-01-02 21:12       ` Adrian Bunk
2006-12-31 21:43 Chuck Ebbert
2006-12-31 22:16 ` Alistair John Strachan

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox