[OOPS] network dump in [unix_dgram_sendmsg]

Robbert Muller (mjrider@Cam031312.student.utwente.nl)
Thu, 11 Nov 1999 23:20:33 +0100 (CET)


Hi

got a oops in the network code,
here is the report

[1.] One line summary of the problem:
Oops in netwerk code [unix_dgram_sendmsg]

[2.] Full description of the problem/report:
I'm running a scanlogd ( from http://www.openwall.com )
which checks connections made to my machine and report them when it looks
like a portscan

[3.] Keywords (i.e., modules, networking, kernel):
Network Datagram Sending
[4.] Kernel version (from /proc/version):
Linux version 2.2.13 (root@mjrider.student.utwente.nl) (gcc version egcs-2.91.66 19990314/Linux (egcs-1.1.2 release)) #1 Sat Oct 23 14:34:41 CEST 1999

[5.] Output of Oops.. message (if applicable) with symbolic information
resolved (see Documentation/oops-tracing.txt)
WARNING: This version of ksymoops is obsolete.
WARNING: The current version can be obtained from ftp://ftp.ocs.com.au/pub/ksymoops
Options used: -V (default)
-o /lib/modules/2.2.13/ (default)
-k /proc/ksyms (default)
-l /proc/modules (default)
-m /usr/src/linux/System.map (default)
-c 1 (default)

You did not tell me where to find symbol information. I will assume
that the log matches the kernel and modules that are running right now
and I'll use the default options above for symbol resolution.
If the current kernel and/or modules do not match the log, you can get
more accurate output by telling me the kernel version and where to find
map, modules, ksyms etc. ksymoops -h explains the options.

Warning in compare_ksyms_lsmod, module 3c59x is in lsmod but not in ksyms, probably no symbols exported
Warning in compare_ksyms_lsmod, module ip_masq_ftp is in lsmod but not in ksyms, probably no symbols exported
Warning in compare_ksyms_lsmod, module ip_masq_irc is in lsmod but not in ksyms, probably no symbols exported
Warning in compare_ksyms_lsmod, module ip_masq_quake is in lsmod but not in ksyms, probably no symbols exported
Warning in compare_ksyms_lsmod, module ip_masq_raudio is in lsmod but not in ksyms, probably no symbols exported
Unable to handle kernel NULL pointer dereference at virtual address 00000000
current->tss.cr3 = 00ddf000, %cr3 = 00ddf000
*pde = 00000000
Oops: 0002
CPU: 0
EIP: 0010:[<c01850f9>]
EFLAGS: 00010003
eax: 00000000 ebx: c240f340 ecx: c3229960 edx: 00000297
esi: c240f384 edi: c14dc020 ebp: c33f1e60 esp: c33f1e40
ds: 0018 es: 0018 ss: 0018
Process scanlogd-ipchai (pid: 15943, process nr: 88, stackpage=c33f1000)
Stack: c0184e9c c3229960 c33f1e58 00035a4d 00000000 00000000 00000000 0000000e
c3f98b3c c015a170 c3f98b3c c33f1ed4 00000030 c33f1e94 00000004 c3f98b3c
00000000 00000000 c33f1e94 c0184e9c c33f1e94 00003e47 00000000 00000000
Call Trace: [<c0184e9c>] [<c015a170>] [<c0184e9c>] [<c015ac4f>] [<c0120396>] [<c011fd5c>] [<c0118d15>]
[<c0118d6f>] [<c0118e3c>] [<c015ac92>] [<c015b405>] [<c0107a85>] [<c0107980>]
Code: 89 38 52 9d 8b 4d 10 51 53 8b 83 f4 02 00 00 ff d0 8b 4d e4

>>EIP: c01850f9 <unix_dgram_sendmsg+25d/2cc>
Trace: c0184e9c <unix_dgram_sendmsg+0/2cc>
Trace: c015a170 <sock_sendmsg+88/ac>
Trace: c0184e9c <unix_dgram_sendmsg+0/2cc>
Trace: c015ac4f <sys_sendto+c7/ec>
Trace: c0120396 <read_swap_cache_async+92/9c>
Trace: c011fd5c <swap_in+2c/160>
Trace: c0118d15 <do_no_page+51/b8>
Trace: c0118d6f <do_no_page+ab/b8>
Code: c01850f9 <unix_dgram_sendmsg+25d/2cc> 00000000 <_EIP>: <===
Code: c01850f9 <unix_dgram_sendmsg+25d/2cc> 0: 89 38 movl %edi,(%eax) <===
Code: c01850fb <unix_dgram_sendmsg+25f/2cc> 2: 52 pushl %edx
Code: c01850fc <unix_dgram_sendmsg+260/2cc> 3: 9d popf
Code: c01850fd <unix_dgram_sendmsg+261/2cc> 4: 8b 4d 10 movl 0x10(%ebp),%ecx
Code: c0185100 <unix_dgram_sendmsg+264/2cc> 7: 51 pushl %ecx
Code: c0185101 <unix_dgram_sendmsg+265/2cc> 8: 53 pushl %ebx
Code: c0185102 <unix_dgram_sendmsg+266/2cc> 9: 8b 83 f4 02 00 00 movl 0x2f4(%ebx),%eax
Code: c0185108 <unix_dgram_sendmsg+26c/2cc> f: ff d0 call *%eax
Code: c018510a <unix_dgram_sendmsg+26e/2cc> 11: 8b 4d e4 movl 0xffffffe4(%ebp),%ecx

8 warnings issued. Results may not be reliable.

[6.] A small shell script or example program which triggers the
problem (if possible)
Sorry got my version of scanlogd source in
http://mjrider.student.utwente.nl/scanlogd-ipchains.c

which is modified to call ipchains to generate a firewall rule

[7.] Environment
RedHat linux 6.1 with home made kernel
Updated to the last update

[7.1.] Software (add the output of the ver_linux script here)
-- Versions installed: (if some fields are empty or looks
-- unusual then possibly you have very old versions)
Linux mjrider.student.utwente.nl 2.2.13 #1 Sat Oct 23 14:34:41 CEST 1999 i586 unknown
Kernel modules 2.1.121
Gnu C egcs-2.91.66
Binutils 2.9.1.0.24
Linux C Library 2.1.2
Dynamic linker ldd (GNU libc) 2.1.2
Procps 2.0.4
Mount 2.9u
Net-tools 1.53
Console-tools 1999.03.02
Sh-utils 2.0
Sh-utils Parker.
Sh-utils
Sh-utils Inc.
Sh-utils NO
Sh-utils PURPOSE.
Modules Loaded ip_masq_quake ip_masq_raudio ip_masq_irc ip_masq_ftp 3c509 3c59x

[7.2.] Processor information (from /proc/cpuinfo):
processor : 0
vendor_id : AuthenticAMD
cpu family : 5
model : 8
model name : AMD-K6(tm) 3D processor
stepping : 0
cpu MHz : 299.382201
fdiv_bug : no
hlt_bug : no
sep_bug : no
f00f_bug : no
coma_bug : no
fpu : yes
fpu_exception : yes
cpuid level : 1
wp : yes
flags : fpu vme de pse tsc msr mce cx8 sep mmx 3dnow
bogomips : 598.02

[7.3.] Module information (from /proc/modules):
ip_masq_quake 1092 0 (unused)
ip_masq_raudio 2736 0 (unused)
ip_masq_irc 1360 0
ip_masq_ftp 2352 0
3c509 5812 1 (autoclean)
3c59x 19112 1 (autoclean)
[7.4.] SCSI information (from /proc/scsi/scsi)
No scsiB

[7.5.] Other information that might be relevant to the problem
(please look in /proc and include all information that you
think to be relevant):
Nothing i think

[X.] Other notes, patches, fixes, workarounds:
noting from that all

-- 
Robbert Muller

mjrider@writeme dot com | Never let a luser on your console. uin: 9659330 | Because that means they're in your room.

- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/