Ooops

Joseph Gooch (mrwizard@psu.edu)
Tue, 16 Mar 1999 02:43:18 -0500


I got this oops on 2.2.1-ac3. Yeah it's ancient, but I had a 37 day uptime.
Still do. Just got this oops when I ran arp -a. arp itself segfaults. You
can run arp again, another oops and another segfault! Same happens if I try
to cat /proc/net/arp, or otherwise read from it. It's actually kind of
interesting that timer_bug_msg is referenced in the trace since that's a
const char [] definition in net/ipv4/tcp_timer.c. One would think that
wouldn't be an executable area. And also in my System.map :

c01de1c0 r rta_max
c01de2e5 r prio2band
c01e0200 R timer_bug_msg
c01e13b0 r msstab
c01e1cc0 R ide_pio_timings
c01e1f83 r ide_hwif_to_major

It's a much bigger area than the 86 bytes allocated to it in the .o file.

Now that my uptime is blemished I'm compiling 2.2.3. If it happens again in
37 days I'll let you all know again. It's a very odd error.

Peace and happy hunting
Joseph Gooch

Unable to handle kernel NULL pointer dereference at virtual address 00000001
current->tss.cr3 = 01d66000, %cr3 = 01d66000
*pde = 00000000
Oops: 0000
CPU: 0
EIP: 0010:[<c01d1ae5>]
EFLAGS: 00010297
eax: 00000001 ebx: ffffffff ecx: 00000001 edx: fffffffe
esi: c070fee4 edi: c05bc205 ebp: 00000000 esp: c070fe98
ds: 0018 es: 0018 ss: 0018
Process arp (pid: 32265, process nr: 48, stackpage=c070f000)
Stack: c1855800 c0b19f20 ffffffff c01d1ca4 c022cad0 c01e05e4 7370fed0
0000001b
731d1ca4 0000000a c01d1ca4 c05bc1ee c01e05f4 c070fee4 c016eb89
c05bc1ee
c01e05e8 c01e05e6 00000001 c082c394 ffffffea 00000000 00000400
c1855800
Call Trace: [<c01d1ca4>] [<c01e05e4>] [<c01d1ca4>] [<c01e05f4>] [<c016eb89>]
[<c01e05e8>] [<c01e05e6>]
[<c019ad00>] [<c0146390>] [<c0122706>] [<c0107a54>]
Code: 80 38 00 74 07 40 4a 83 fa ff 75 f4 29 c8 89 44 24 10 f7 c5
Warning: trailing garbage ignored on Code: line
Text: 'Code: 80 38 00 74 07 40 4a 83 fa ff 75 f4 29 c8 89 44 24 10 f7 c5 '
Garbage: ' '

>>EIP: c01d1ae5 <vsprintf+1c5/370>
Trace: c01d1ca4 <sprintf+14/1170>
Trace: c01e05e4 <timer_bug_msg+3e4/11b0>
Trace: c01d1ca4 <sprintf+14/1170>
Trace: c01e05f4 <timer_bug_msg+3f4/11b0>
Trace: c016eb89 <arp_get_info+24d/2dc>
Trace: c01e05e8 <timer_bug_msg+3e8/11b0>
Trace: c01e05e6 <timer_bug_msg+3e6/11b0>
Trace: c019ad00 <write_chan+6c/1e4>
Code: c01d1ae5 <vsprintf+1c5/370> 00000000 <_EIP>:
Code: c01d1ae5 <vsprintf+1c5/370> 0: 80 38 00 cmpb
$0x0,(%eax)
Code: c01d1ae8 <vsprintf+1c8/370> 3: 74 07 je
c <_EIP+0xc> c01d1af1 <vsprintf+1d1/370>
Code: c01d1aea <vsprintf+1ca/370> 5: 40 incl
%eax
Code: c01d1aeb <vsprintf+1cb/370> 6: 4a decl
%edx
Code: c01d1aec <vsprintf+1cc/370> 7: 83 fa ff cmpl
$0xffffffff,%edx
Code: c01d1aef <vsprintf+1cf/370> a: 75 f4 jne
0 <_EIP>
Code: c01d1af1 <vsprintf+1d1/370> c: 29 c8 subl
%ecx,%eax
Code: c01d1af3 <vsprintf+1d3/370> e: 89 44 24 10 movl
%eax,0x10(%esp,1)
Code: c01d1af7 <vsprintf+1d7/370> 12: f7 c5 00 00 00
testl $0x0,%ebp
Code: c01d1afc <vsprintf+1dc/370> 17: 00

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/