public inbox for linux-kernel@vger.kernel.org
 help / color / mirror / Atom feed
From: Robert Fitzsimons <robfitz@273k.net>
To: Alexey Dobriyan <adobriyan@gmail.com>
Cc: FD Cami <francois.cami@free.fr>,
	Alessandro Suardi <alessandro.suardi@gmail.com>,
	charles gagalac <charles.gagalac@gmail.com>,
	daryll q <daryll_26m@yahoo.com.ph>,
	linux-kernel@vger.kernel.org
Subject: Re: Hang in 2.6.23-rc5
Date: Mon, 3 Sep 2007 22:04:56 +0100	[thread overview]
Message-ID: <20070903210440.GA2640@localhost> (raw)
In-Reply-To: <20070902214631.GA1892@martell.zuzino.mipt.ru>

Here is a relevant oops for this hang.

[ 7329.832382] BUG: unable to handle kernel NULL pointer dereference at virtual address 00000025
[ 7329.934755]  printing eip:
[ 7329.967145] 802cb921
[ 7329.993347] *pde = 00000000
[ 7330.026799] Oops: 0000 [#1]
[ 7330.060246] Modules linked in: usblp ipt_MASQUERADE iptable_nat nf_nat ipt_LOG xt_limit xt_tcpudp nf_conntrack_ipv4 xt_state nf_conntrack iptable_filter ip_tables x_tables pppoe pppox ppp_generic slhc dvb_pll cx22702 usbhid tuner hid cx88_dvb video_buf_dvb dvb_core cx8800 cx8802 cx88_alsa cx88xx ir_common i2c_algo_bit tveeprom i2c_core videodev compat_ioctl32 v4l2_common v4l1_compat video_buf ehci_hcd uhci_hcd btcx_risc usbcore
[ 7330.518076] CPU:    0
[ 7330.518077] EIP:    0060:[<802cb921>]    Not tainted VLI
[ 7330.518079] EFLAGS: 00210246   (2.6.23-rc5-dirty #72)
[ 7330.669129] EIP is at tcp_rto_min+0xb/0x16
[ 7330.718088] eax: 00000032   ebx: d76b5ab0   ecx: 0000209d   edx: 00000000
[ 7330.799277] esi: d76b5ab0   edi: 00000000   ebp: 803ecdd8   esp: 803ecdd8
[ 7330.880468] ds: 007b   es: 007b   fs: 0000  gs: 0033  ss: 0068
[ 7330.950225] Process firefox-bin (pid: 2625, ti=803ec000 task=d1bfcaa0 task.ti=d1bfd000)
[ 7331.043890] Stack: 803ecde8 802cb9e8 d76b5ab0 d76b5ab0 803ecdf4 802cc1e2 803bc3e0 803ece6c
[ 7331.144727]        802cd85f 03ccf75e 208b3367 291abfc5 6eaa5ef6 d6c52818 00000000 00000000
[ 7331.245564]        00000001 03ccf6f4 eddd6e3e 03ccf75e 00000001 00000001 803eceac 03ccf75e
[ 7331.346403] Call Trace:
[ 7331.377800]  [<80102abd>] show_trace_log_lvl+0x1a/0x2f
[ 7331.439343]  [<80102b6d>] show_stack_log_lvl+0x9b/0xa3
[ 7331.500885]  [<80102d1f>] show_registers+0x1aa/0x278
[ 7331.560349]  [<80102ed5>] die+0xe8/0x205
[ 7331.607336]  [<802f0bea>] do_page_fault+0x469/0x53a
[ 7331.665761]  [<802ef73a>] error_code+0x6a/0x70
[ 7331.718987]  [<802cb9e8>] tcp_rtt_estimator+0xbc/0x102
[ 7331.780529]  [<802cc1e2>] tcp_ack_saw_tstamp+0x17/0x47
[ 7331.842071]  [<802cd85f>] tcp_ack+0x6a5/0x1731
[ 7331.895298]  [<802d11be>] tcp_rcv_established+0x353/0x5f5
[ 7331.959959]  [<802d6358>] tcp_v4_do_rcv+0x2f/0x2fa
[ 7332.017344]  [<802d8413>] tcp_v4_rcv+0x6d1/0x71a
[ 7332.072650]  [<802c0919>] ip_local_deliver+0x12d/0x17c
[ 7332.134193]  [<802c07c0>] ip_rcv+0x40b/0x437
[ 7332.185339]  [<802ac6b0>] netif_receive_skb+0x161/0x1ac
[ 7332.247921]  [<802ae63a>] process_backlog+0x71/0xda
[ 7332.306345]  [<802ae6f9>] net_rx_action+0x56/0xd5
[ 7332.362690]  [<80114514>] __do_softirq+0x38/0x7a
[ 7332.417995]  [<801039cd>] do_softirq+0x41/0x91
[ 7332.471223]  =======================
[ 7332.513947] Code: e4 8b 82 54 03 00 00 89 82 f8 04 00 00 a1 30 e7 39 80 89 82 fc 04 00 00 83 c4 10 5b 5e 5f c9 c3 55 8b 50 64 b8 32 00 00 00 89 e5 <f6> 42 25 20 74 03 8b 42 54 c9 c3 55 85 d2 b9 01 00 00 00 0f 45
[ 7332.746397] EIP: [<802cb921>] tcp_rto_min+0xb/0x16 SS:ESP 0068:803ecdd8
[ 7332.825845] Kernel panic - not syncing: Fatal exception in interrupt

> Try this from net-2.6 tree:
> 
> --- a/net/ipv4/tcp_input.c
> +++ b/net/ipv4/tcp_input.c
> @@ -560,7 +560,7 @@ static u32 tcp_rto_min(struct sock *sk)
>  	struct dst_entry *dst = __sk_dst_get(sk);
>  	u32 rto_min = TCP_RTO_MIN;
>  
> -	if (dst_metric_locked(dst, RTAX_RTO_MIN))
> +	if (dst && dst_metric_locked(dst, RTAX_RTO_MIN))
>  		rto_min = dst->metrics[RTAX_RTO_MIN-1];
>  	return rto_min;
>  }

Looks like this is the fix.  I'm recompiling with it now.

Robert


  parent reply	other threads:[~2007-09-03 21:39 UTC|newest]

Thread overview: 17+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2007-09-02 18:42 Hang in 2.6.23-rc5 daryll q
2007-09-02 19:05 ` charles gagalac
2007-09-02 20:38   ` Alessandro Suardi
2007-09-02 21:26     ` Satyam Sharma
2007-09-02 21:29     ` FD Cami
2007-09-02 21:46       ` Alexey Dobriyan
2007-09-02 22:45         ` Satyam Sharma
2007-09-02 23:10           ` Alessandro Suardi
2007-09-03  6:39           ` Patrick Mau
2007-09-04  9:32             ` Romano Giannetti
2007-09-05 17:11             ` Jean Delvare
2007-09-05 22:02               ` Satyam Sharma
2007-09-08  9:37           ` FD Cami
2007-09-03 21:04         ` Robert Fitzsimons [this message]
2007-09-02 22:05     ` Richard Mittendorfer
2007-09-02 22:14       ` Jesper Juhl
  -- strict thread matches above, loose matches on Subject: below --
2007-09-02 20:21 Andrew

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20070903210440.GA2640@localhost \
    --to=robfitz@273k.net \
    --cc=adobriyan@gmail.com \
    --cc=alessandro.suardi@gmail.com \
    --cc=charles.gagalac@gmail.com \
    --cc=daryll_26m@yahoo.com.ph \
    --cc=francois.cami@free.fr \
    --cc=linux-kernel@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox