IPv6 kernel ooops

IPv6 kernel ooops

[Guðmundur D. Haraldsson]

[-- Attachment #1: Type: text/plain, Size: 6297 bytes --]


Hi

I got this oops on my machine tonight.

I don't know what query to BIND caused it, but I've got an oops like this before!

[root@binhex gdh]# ksymoops  -k /proc/ksyms -l /proc/modules -o /lib/modules/2.4.22-1.2174.nptl/ -m /boot/System.map-2.4.22-1.2174.nptl  < blah
ksymoops 2.4.5 on i586 2.4.22-1.2174.nptl.  Options used
     -V (default)
     -k /proc/ksyms (specified)
     -l /proc/modules (specified)
     -o /lib/modules/2.4.22-1.2174.nptl/ (specified)
     -m /boot/System.map-2.4.22-1.2174.nptl (specified)

Unable to handle kernel NULL pointer dereference at virtual address 0000000c
c68d4fd5
*pde = 034ff067
Oops: 0000
CPU:    0
EIP:    0060:[<c68d4fd5>]    Not tainted
Using defaults from ksymoops -t elf32-i386 -a i386
EFLAGS: 00010202
eax: 00000000   ebx: c26271a0   ecx: c5e97bbc   edx: 0000a7eb
esi: 00000000   edi: c39d9d94   ebp: 091dc910   esp: c39d9d04
ds: 0068   es: 0068   ss: 0068
Process named (pid: 19424, stackpage=c39d9000)
Stack: c26271a0 0000a7eb c02112f0 00000000 c5e97bbc 00000000 c3b2f220 00000000 
       c03e2458 c39d9dc4 00000064 00000000 c39d9d94 c5e97b00 c68e2df1 c5e97b00 
       c68e2a90 c39d9db4 c39d9d94 0000006c 00000000 ffffffff 00000040 c39d9efc 
Call Trace:   [<c02112f0>] output_maybe_reroute [kernel] 0x0 (0xc39d9d0c)
[<c68e2df1>] udpv6_sendmsg [ipv6] 0x271 (0xc39d9d3c)
[<c68e2a90>] udpv6_getfrag [ipv6] 0x0 (0xc39d9d44)
[<c022bacc>] udp_recvmsg [kernel] 0x5c (0xc39d9dcc)
[<c0231e83>] inet_sendmsg [kernel] 0x33 (0xc39d9e04)
[<c01f195d>] sock_sendmsg [kernel] 0x5d (0xc39d9e18)
[<c01f2b36>] sys_sendmsg [kernel] 0x196 (0xc39d9e5c)
[<c0108d41>] setup_frame [kernel] 0x111 (0xc39d9eb0)
[<c01091cd>] handle_signal [kernel] 0xbd (0xc39d9edc)
[<c0116fb0>] recalc_task_prio [kernel] 0xa0 (0xc39d9eec)
[<c0117e4b>] __wake_up [kernel] 0x4b (0xc39d9f40)
[<c0148098>] pipe_write [kernel] 0x178 (0xc39d9f68)
[<c01f2f6c>] sys_socketcall [kernel] 0x18c (0xc39d9f8c)
[<c01093a3>] system_call [kernel] 0x33 (0xc39d9fc0)
Code: ff 50 0c 5e 85 c0 5f 0f 85 54 fa ff ff 8b 54 24 34 31 ed c7 


>>EIP; c68d4fd5 <[ipv6]ip6_build_xmit+625/650>   <=====

>>ebx; c26271a0 <_end+22418a8/6427768>
>>ecx; c5e97bbc <_end+5ab22c4/6427768>
>>edx; 0000a7eb Before first symbol
>>edi; c39d9d94 <_end+35f449c/6427768>
>>ebp; 091dc910 Before first symbol
>>esp; c39d9d04 <_end+35f440c/6427768>

Trace; c02112f0 <output_maybe_reroute+0/10>
Trace; c68e2df1 <[ipv6]udpv6_sendmsg+271/480>
Trace; c68e2a90 <[ipv6]udpv6_getfrag+0/f0>
Trace; c022bacc <udp_recvmsg+5c/260>
Trace; c0231e83 <inet_sendmsg+33/40>
Trace; c01f195d <sock_sendmsg+5d/90>
Trace; c01f2b36 <sys_sendmsg+196/200>
Trace; c0108d41 <setup_frame+111/210>
Trace; c01091cd <handle_signal+bd/100>
Trace; c0116fb0 <recalc_task_prio+a0/1e0>
Trace; c0117e4b <__wake_up+4b/60>
Trace; c0148098 <pipe_write+178/2b0>
Trace; c01f2f6c <sys_socketcall+18c/1b0>
Trace; c01093a3 <system_call+33/40>

Code;  c68d4fd5 <[ipv6]ip6_build_xmit+625/650>
00000000 <_EIP>:
Code;  c68d4fd5 <[ipv6]ip6_build_xmit+625/650>   <=====
   0:   ff 50 0c                  call   *0xc(%eax)   <=====
Code;  c68d4fd8 <[ipv6]ip6_build_xmit+628/650>
   3:   5e                        pop    %esi
Code;  c68d4fd9 <[ipv6]ip6_build_xmit+629/650>
   4:   85 c0                     test   %eax,%eax
Code;  c68d4fdb <[ipv6]ip6_build_xmit+62b/650>
   6:   5f                        pop    %edi
Code;  c68d4fdc <[ipv6]ip6_build_xmit+62c/650>
   7:   0f 85 54 fa ff ff         jne    fffffa61 <_EIP+0xfffffa61>
Code;  c68d4fe2 <[ipv6]ip6_build_xmit+632/650>
   d:   8b 54 24 34               mov    0x34(%esp,1),%edx
Code;  c68d4fe6 <[ipv6]ip6_build_xmit+636/650>
  11:   31 ed                     xor    %ebp,%ebp
Code;  c68d4fe8 <[ipv6]ip6_build_xmit+638/650>
  13:   c7 00 00 00 00 00         movl   $0x0,(%eax)


Machine/OS info:
Linux binhex.EU.org 2.4.22-1.2174.nptl #1 Wed Feb 18 14:02:36 EST 2004 i586 i586 i386 GNU/Linux
 
Gnu C                  3.3.2
Gnu make               3.79.1
util-linux             2.11y
mount                  2.11y
modutils               2.4.25
e2fsprogs              1.34
reiserfsprogs          3.6.8
quota-tools            3.06.
PPP                    2.4.1
isdn4k-utils           3.3
Linux C Library        2.3.2
Dynamic linker (ldd)   2.3.2
Procps                 2.0.17
Net-tools              1.60
Kbd                    1.08
Sh-utils               5.0
Modules Loaded         nls_iso8859-1 autofs 3c59x ipv6 ipt_REJECT iptable_filter ip_tables ext3 jbd loop lvm-mod

processor	: 0
vendor_id	: AuthenticAMD
cpu family	: 5
model		: 8
model name	: AMD-K6(tm) 3D processor
stepping	: 12
cpu MHz		: 350.805
cache size	: 64 KB
fdiv_bug	: no
hlt_bug		: no
f00f_bug	: no
coma_bug	: no
fpu		: yes
fpu_exception	: yes
cpuid level	: 1
wp		: yes
flags		: fpu vme de pse tsc msr mce cx8 pge mmx syscall 3dnow k6_mtrr
bogomips	: 699.59

nls_iso8859-1           3484  12 (autoclean)
autofs                 11156   0 (autoclean) (unused)
3c59x                  29360   1
ipv6                  173076  -1
ipt_REJECT              3960  19 (autoclean)
iptable_filter          2348   1 (autoclean)
ip_tables              14656   2 [ipt_REJECT iptable_filter]
ext3                   65508   3 (autoclean)
jbd                    47596   3 (autoclean) [ext3]
loop                   10808  36 (autoclean)
lvm-mod                63552   0

Please CC to me, since I'm not on the list.

Best regards, 
Guðmundur.


-- 
===================================================================================
| Guðmundur D. Haraldsson               | When you have eliminated the impossible,|
| gdh@binhex.EU.org                     | what ever remains, however improbable,  |
| http://www.binhex.EU.org/             | must be the truth.			  |
|                                       | - Sherlock Holmes, "The sign of four"	  |
|---------------------------------------------------------------------------------|
| GPG key: lynx -dump http://vlug.eyjar.is/gdh/gpgkey.asc | gpg --import          |
| Key fingerprint = DE6D A875 EA92 0699 9B49  8C49 2DBB 76BF ADD4 C933		  |
===================================================================================
// Spammers will be asphyxiated in paté!

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]

Re: IPv6 kernel ooops

[YOSHIFUJI Hideaki / 吉藤英明]

In article <20040424222340.GA10595@binhex.EU.org> (at Sat, 24 Apr 2004 22:23:41 +0000), Guðmundur D. Haraldsson <gdh@binhex.EU.org> says:

> I got this oops on my machine tonight.
>
> I don't know what query to BIND caused it, but I've got an oops like this before!

Is this reproducable? How frequently do you see this?


> Call Trace:   [<c02112f0>] output_maybe_reroute [kernel] 0x0 (0xc39d9d0c)

(Umm, I cannot find "output_maybe_reroute" in my source...)

> [<c68e2df1>] udpv6_sendmsg [ipv6] 0x271 (0xc39d9d3c)
> [<c68e2a90>] udpv6_getfrag [ipv6] 0x0 (0xc39d9d44)
:

Would you test latest rc (or bk tree), please?

-- 
Hideaki YOSHIFUJI @ USAGI Project <yoshfuji@linux-ipv6.org>
GPG FP: 9022 65EB 1ECF 3AD1 0BDF  80D8 4807 F894 E062 0EEA

Re: IPv6 kernel ooops

[YOSHIFUJI Hideaki / 吉藤英明]

In article <20040425.104217.31070133.yoshfuji@wide.ad.jp> (at Sun, 25 Apr 2004 10:42:17 +0900 (JST)), YOSHIFUJI Hideaki / 吉藤英明 <yoshfuji@wide.ad.jp> says:

> In article <20040424222340.GA10595@binhex.EU.org> (at Sat, 24 Apr 2004 22:23:41 +0000), Guðmundur D. Haraldsson <gdh@binhex.EU.org> says:
> 
> > I got this oops on my machine tonight.
> >
> > I don't know what query to BIND caused it, but I've got an oops like this before!
> 
> Is this reproducable? How frequently do you see this?

Oh, sorry, I looked into 2.6.x.
I've found it at net/ipv4/ip_output.c in 2.4.x.
I haven't seen that oops before, as far as I can recall.
Please try latest vanilla kernel (2.4.26 or so).
Thanks.

--yoshfuji

Re: IPv6 kernel ooops

[Guðmundur D. Haraldsson]

[-- Attachment #1: Type: text/plain, Size: 1744 bytes --]

-*- YOSHIFUJI Hideaki / ?$B5HF#1QL@ <yoshfuji@wide.ad.jp> [ 2004-04-25 01:43 ]:
> In article <20040424222340.GA10595@binhex.EU.org> (at Sat, 24 Apr 2004 22:23:41 +0000), Guðmundur D. Haraldsson <gdh@binhex.EU.org> says:
> 
> > I got this oops on my machine tonight.
> >
> > I don't know what query to BIND caused it, but I've got an oops like this before!
> 
> Is this reproducable? How frequently do you see this?

I belive this is hard to reproduce, I had this once some months ago.

> 
> 
> > Call Trace:   [<c02112f0>] output_maybe_reroute [kernel] 0x0 (0xc39d9d0c)
> 
> (Umm, I cannot find "output_maybe_reroute" in my source...)
> 
> > [<c68e2df1>] udpv6_sendmsg [ipv6] 0x271 (0xc39d9d3c)
> > [<c68e2a90>] udpv6_getfrag [ipv6] 0x0 (0xc39d9d44)
> :

Dunno... it's a RedHat kernel... some patch maybe?

> 
> Would you test latest rc (or bk tree), please?

Well... I need a test-case first...


Best regards,
-Gudmundur.

-- 
===================================================================================
| Guðmundur D. Haraldsson               | When you have eliminated the impossible,|
| gdh@binhex.EU.org                     | what ever remains, however improbable,  |
| http://www.binhex.EU.org/             | must be the truth.			  |
|                                       | - Sherlock Holmes, "The sign of four"	  |
|---------------------------------------------------------------------------------|
| GPG key: lynx -dump http://vlug.eyjar.is/gdh/gpgkey.asc | gpg --import          |
| Key fingerprint = DE6D A875 EA92 0699 9B49  8C49 2DBB 76BF ADD4 C933		  |
===================================================================================
// Spammers will be asphyxiated in paté!

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]