Re: 2.6.23-rc4-mm1 OOPS in forcedeth?
On Mon, 17 Sep 2007, Denis V. Lunev wrote: > Dhaval Giani wrote: > > On Thu, Sep 13, 2007 at 11:51:33PM -0400, Andrew James Wade wrote: > >> EIP: [] tcp_rto_min+0xb/0x15 SS:ESP 0068:c0596dec As Vlad Yasevich mentioned, this one is already fixed in 23-rc6. The forcedeth oops is unrelated, but multiple people have reported that same oops now -- adding Manfred Spraul to CC. [ original thread is at: http://lkml.org/lkml/2007/9/1/115 ] - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Re: 2.6.23-rc4-mm1 OOPS in forcedeth?
Denis V. Lunev wrote: > I have also seen this OOPS on e1000 card. So, looks like driver independent. > > By the way, this one has been triggered in a semi-stable way by the > 'git-pull' Do you have this patch: commit 5c127c58ae9bf196d787815b1bd6b0aec5aee816 Author: David S. Miller <[EMAIL PROTECTED]> Date: Fri Aug 31 14:39:44 2007 -0700 [TCP]: 'dst' can be NULL in tcp_rto_min() Reported by Rick Jones. Signed-off-by: David S. Miller <[EMAIL PROTECTED]> diff --git a/net/ipv4/tcp_input.c b/net/ipv4/tcp_input.c index 1ee7212..bbad2cd 100644 --- a/net/ipv4/tcp_input.c +++ b/net/ipv4/tcp_input.c @@ -560,7 +560,7 @@ static u32 tcp_rto_min(struct sock *sk) struct dst_entry *dst = __sk_dst_get(sk); u32 rto_min = TCP_RTO_MIN; - if (dst_metric_locked(dst, RTAX_RTO_MIN)) + if (dst && dst_metric_locked(dst, RTAX_RTO_MIN)) rto_min = dst->metrics[RTAX_RTO_MIN-1]; return rto_min; } > > Regards, > Den > > Dhaval Giani wrote: >> On Thu, Sep 13, 2007 at 11:51:33PM -0400, Andrew James Wade wrote: >>> I have an Oops that may be related: >>> >>> BUG: unable to handle kernel NULL pointer dereference at virtual address >>> 0025 >>> printing eip: c037d81b *pde = >>> Oops: [#1] >>> last sysfs file: /devices/pci:00/:00:01.0/:01:00.0/class >>> >>> Pid: 0, comm: swapper Not tainted (2.6.23-rc4-mm1-config2 #2) >>> EIP: 0060:[] EFLAGS: 00010246 CPU: 0 >>> EIP is at tcp_rto_min+0xb/0x15 >>> EAX: 0032 EBX: c4c98b68 ECX: fffe EDX: >>> ESI: c4c98b68 EDI: c055f600 EBP: c4432e40 ESP: c0596dec >>> DS: 007b ES: 007b FS: GS: SS: 0068 >>> Process swapper (pid: 0, ti=c0596000 task=c052a340 task.ti=c0568000) >>> Stack: c037d8de c4c98b68 c4c98b68 c037e0ec 0001 c037f879 c052a8b4 >>> c052a340 >>> 0001 c25e1e60 0001 8c176265 >>> 8c17678a >>> 0001 0001 8c17678a 8600 >>> 007d8b21 >>> Call Trace: >>> [] tcp_rtt_estimator+0xb9/0xfe >>> [] tcp_ack_saw_tstamp+0x14/0x43 >>> [] tcp_ack+0x6b8/0x17b8 >>> [] tcp_rcv_established+0x519/0x5f1 >>> [] tcp_v4_do_rcv+0x28/0x2f8 >>> [] tcp_v4_rcv+0x7df/0x83d >>> [] ip_local_deliver+0xcc/0x148 >>> [] ip_rcv+0x3b7/0x3de >>> [] netif_receive_skb+0x17a/0x1c2 >>> [] rtl8139_poll+0x2d9/0x425 >>> [] net_rx_action+0xa8/0xc8 >>> [] __do_softirq+0x40/0x90 >>> [] do_softirq+0x4d/0xb6 >>> === >>> INFO: lockdep is turned off. >>> Code: 24 8b 82 88 03 00 00 89 82 40 05 00 00 a1 a0 23 53 c0 89 82 44 05 00 >>> 00 83 c4 0c 5b 5e 5f 5d c3 8b 90 88 00 00 00 b8 32 00 00 00 42 25 20 >>> 74 03 8b 42 54 c3 56 >>> 85 d2 b9 01 00 00 00 0f 45 ca >>> EIP: [] tcp_rto_min+0xb/0x15 SS:ESP 0068:c0596dec >>> Kernel panic - not syncing: Fatal exception in interrupt > - > To unsubscribe from this list: send the line "unsubscribe netdev" in > the body of a message to [EMAIL PROTECTED] > More majordomo info at http://vger.kernel.org/majordomo-info.html > - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Re: 2.6.23-rc4-mm1 OOPS in forcedeth?
I have also seen this OOPS on e1000 card. So, looks like driver independent. By the way, this one has been triggered in a semi-stable way by the 'git-pull' Regards, Den Dhaval Giani wrote: > On Thu, Sep 13, 2007 at 11:51:33PM -0400, Andrew James Wade wrote: >> I have an Oops that may be related: >> >> BUG: unable to handle kernel NULL pointer dereference at virtual address >> 0025 >> printing eip: c037d81b *pde = >> Oops: [#1] >> last sysfs file: /devices/pci:00/:00:01.0/:01:00.0/class >> >> Pid: 0, comm: swapper Not tainted (2.6.23-rc4-mm1-config2 #2) >> EIP: 0060:[] EFLAGS: 00010246 CPU: 0 >> EIP is at tcp_rto_min+0xb/0x15 >> EAX: 0032 EBX: c4c98b68 ECX: fffe EDX: >> ESI: c4c98b68 EDI: c055f600 EBP: c4432e40 ESP: c0596dec >> DS: 007b ES: 007b FS: GS: SS: 0068 >> Process swapper (pid: 0, ti=c0596000 task=c052a340 task.ti=c0568000) >> Stack: c037d8de c4c98b68 c4c98b68 c037e0ec 0001 c037f879 c052a8b4 >> c052a340 >> 0001 c25e1e60 0001 8c176265 >> 8c17678a >> 0001 0001 8c17678a 8600 >> 007d8b21 >> Call Trace: >> [] tcp_rtt_estimator+0xb9/0xfe >> [] tcp_ack_saw_tstamp+0x14/0x43 >> [] tcp_ack+0x6b8/0x17b8 >> [] tcp_rcv_established+0x519/0x5f1 >> [] tcp_v4_do_rcv+0x28/0x2f8 >> [] tcp_v4_rcv+0x7df/0x83d >> [] ip_local_deliver+0xcc/0x148 >> [] ip_rcv+0x3b7/0x3de >> [] netif_receive_skb+0x17a/0x1c2 >> [] rtl8139_poll+0x2d9/0x425 >> [] net_rx_action+0xa8/0xc8 >> [] __do_softirq+0x40/0x90 >> [] do_softirq+0x4d/0xb6 >> === >> INFO: lockdep is turned off. >> Code: 24 8b 82 88 03 00 00 89 82 40 05 00 00 a1 a0 23 53 c0 89 82 44 05 00 >> 00 83 c4 0c 5b 5e 5f 5d c3 8b 90 88 00 00 00 b8 32 00 00 00 42 25 20 74 >> 03 8b 42 54 c3 56 >> 85 d2 b9 01 00 00 00 0f 45 ca >> EIP: [] tcp_rto_min+0xb/0x15 SS:ESP 0068:c0596dec >> Kernel panic - not syncing: Fatal exception in interrupt - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Re: 2.6.23-rc4-mm1 OOPS in forcedeth?
On Thu, Sep 13, 2007 at 11:51:33PM -0400, Andrew James Wade wrote: > I have an Oops that may be related: > > BUG: unable to handle kernel NULL pointer dereference at virtual address > 0025 > printing eip: c037d81b *pde = > Oops: [#1] > last sysfs file: /devices/pci:00/:00:01.0/:01:00.0/class > > Pid: 0, comm: swapper Not tainted (2.6.23-rc4-mm1-config2 #2) > EIP: 0060:[] EFLAGS: 00010246 CPU: 0 > EIP is at tcp_rto_min+0xb/0x15 > EAX: 0032 EBX: c4c98b68 ECX: fffe EDX: > ESI: c4c98b68 EDI: c055f600 EBP: c4432e40 ESP: c0596dec > DS: 007b ES: 007b FS: GS: SS: 0068 > Process swapper (pid: 0, ti=c0596000 task=c052a340 task.ti=c0568000) > Stack: c037d8de c4c98b68 c4c98b68 c037e0ec 0001 c037f879 c052a8b4 c052a340 > 0001 c25e1e60 0001 8c176265 8c17678a > 0001 0001 8c17678a 8600 007d8b21 > Call Trace: > [] tcp_rtt_estimator+0xb9/0xfe > [] tcp_ack_saw_tstamp+0x14/0x43 > [] tcp_ack+0x6b8/0x17b8 > [] tcp_rcv_established+0x519/0x5f1 > [] tcp_v4_do_rcv+0x28/0x2f8 > [] tcp_v4_rcv+0x7df/0x83d > [] ip_local_deliver+0xcc/0x148 > [] ip_rcv+0x3b7/0x3de > [] netif_receive_skb+0x17a/0x1c2 > [] rtl8139_poll+0x2d9/0x425 > [] net_rx_action+0xa8/0xc8 > [] __do_softirq+0x40/0x90 > [] do_softirq+0x4d/0xb6 > === > INFO: lockdep is turned off. > Code: 24 8b 82 88 03 00 00 89 82 40 05 00 00 a1 a0 23 53 c0 89 82 44 05 00 00 > 83 c4 0c 5b 5e 5f 5d c3 8b 90 88 00 00 00 b8 32 00 00 00 42 25 20 74 03 > 8b 42 54 c3 56 > 85 d2 b9 01 00 00 00 0f 45 ca > EIP: [] tcp_rto_min+0xb/0x15 SS:ESP 0068:c0596dec > Kernel panic - not syncing: Fatal exception in interrupt > Hi, Any solutions for this one? I too have been hitting it on my system. === BUG: unable to handle kernel NULL pointer dereference at virtual address 0025 printing eip: c03e790d *pdpt = 097c2001 <1>*pde = Oops: [#1] SMP last sysfs file: /class/vc/vcs1/dev Modules linked in: Pid: 0, comm: swapper Not tainted (2.6.23-rc4-mm1-cpuctl #12) EIP: 0060:[] EFLAGS: 00010246 CPU: 0 EIP is at tcp_rto_min+0xe/0x19 EAX: 0032 EBX: cc4a8180 ECX: 0095 EDX: ESI: cc4a8180 EDI: c05b28e0 EBP: c05c7cfc ESP: c05c7cfc DS: 007b ES: 007b FS: 00d8 GS: SS: 0068 Process swapper (pid: 0, ti=c05c6000 task=c0559cc0 task.ti=c05c6000) Stack: c05c7d0c c03e79d2 cc4a8180 cc4a8180 c05c7d18 c03e9eb2 cc48a200 c05c7d68 c03ea37b 0001 ff8f ca52e8c0 005c7d48 006f7c09 0001 86cff480 0001 000c 000333ff c05c7d94 Call Trace: [] show_trace_log_lvl+0x19/0x2e [] show_stack_log_lvl+0x99/0xa8 [] show_registers+0xb6/0x185 [] die+0x108/0x1ed [] do_page_fault+0x64e/0x735 [] error_code+0x72/0x78 [] tcp_rtt_estimator+0xba/0x100 [] tcp_ack_saw_tstamp+0x17/0x47 [] tcp_clean_rtx_queue+0x298/0x45d [] tcp_ack+0x183/0x2d4 [] tcp_rcv_established+0xd3/0x5ba [] tcp_v4_do_rcv+0x25/0xc2 [] tcp_v4_rcv+0x475/0x7c0 [] ip_local_deliver+0xd9/0x17a [] ip_rcv+0x420/0x45a [] netif_receive_skb+0x22b/0x249 [] tg3_rx+0x24c/0x359 [] tg3_poll+0xdd/0x17c [] net_rx_action+0x114/0x14a [] __do_softirq+0x73/0xe6 [] do_softirq+0x39/0x51 [] irq_exit+0x47/0x49 [] do_IRQ+0x5d/0x71 [] common_interrupt+0x2e/0x34 [] cpu_idle+0x9e/0xb7 [] rest_init+0x52/0x54 [] start_kernel+0x21f/0x221 [<>] 0x0 === INFO: lockdep is turned off. Code: 75 07 89 d8 e8 32 fa ff ff 83 7e 50 7f 76 09 89 f2 89 d8 e8 fc fa ff ff 5b 5e 5f 5d c3 55 8b 90 88 00 00 00 89 e5 b8 32 00 00 00 42 25 20 74 03 8b 42 54 5d c3 5 EIP: [] tcp_rto_min+0xe/0x19 SS:ESP 0068:c05c7cfc Kernel panic - not syncing: Fatal exception in interrupt .config follows. # # Automatically generated make config: don't edit # Linux kernel version: 2.6.23-rc4-mm1-cpuctl # Mon Sep 17 15:54:33 2007 # CONFIG_X86_32=y CONFIG_GENERIC_TIME=y CONFIG_GENERIC_CMOS_UPDATE=y CONFIG_CLOCKSOURCE_WATCHDOG=y CONFIG_GENERIC_CLOCKEVENTS=y CONFIG_GENERIC_CLOCKEVENTS_BROADCAST=y CONFIG_LOCKDEP_SUPPORT=y CONFIG_STACKTRACE_SUPPORT=y CONFIG_SEMAPHORE_SLEEPERS=y CONFIG_X86=y CONFIG_MMU=y CONFIG_ZONE_DMA=y CONFIG_QUICKLIST=y CONFIG_GENERIC_ISA_DMA=y CONFIG_GENERIC_IOMAP=y CONFIG_GENERIC_BUG=y CONFIG_GENERIC_HWEIGHT=y CONFIG_ARCH_MAY_HAVE_PC_FDC=y CONFIG_DMI=y CONFIG_DEFCONFIG_LIST="/lib/modules/$UNAME_RELEASE/.config" # # General setup # CONFIG_EXPERIMENTAL=y CONFIG_LOCK_KERNEL=y CONFIG_INIT_ENV_ARG_LIMIT=32 CONFIG_LOCALVERSION="" CONFIG_LOCALVERSION_AUTO=y CONFIG_SWAP=y CONFIG_SYSVIPC=y CONFIG_SYSVIPC_SYSCTL=y CONFIG_POSIX_MQUEUE=y # CONFIG_BSD_PROCESS_ACCT is not set # CONFIG_TASKSTATS is not set # CONFIG_USER_NS is not set CONFIG_AUDIT=y CONFIG_AUDITSYSCALL=y CONFIG_AUDIT_TREE=y CONFIG_IKCONFIG=y CONFIG_IKCONFIG_PROC=y CONFIG_LOG_BUF_SHIFT=15 CONFIG_CONTAINERS=y # CONFIG_CONTAINER_DEBUG is not set # CONFIG_CONTAINER_NS is not set # CONFIG_CONTAINER_CPUACCT
Re: 2.6.23-rc4-mm1 OOPS in forcedeth?
On Thu, Sep 13, 2007 at 11:51:33PM -0400, Andrew James Wade wrote: I have an Oops that may be related: BUG: unable to handle kernel NULL pointer dereference at virtual address 0025 printing eip: c037d81b *pde = Oops: [#1] last sysfs file: /devices/pci:00/:00:01.0/:01:00.0/class Pid: 0, comm: swapper Not tainted (2.6.23-rc4-mm1-config2 #2) EIP: 0060:[c037d81b] EFLAGS: 00010246 CPU: 0 EIP is at tcp_rto_min+0xb/0x15 EAX: 0032 EBX: c4c98b68 ECX: fffe EDX: ESI: c4c98b68 EDI: c055f600 EBP: c4432e40 ESP: c0596dec DS: 007b ES: 007b FS: GS: SS: 0068 Process swapper (pid: 0, ti=c0596000 task=c052a340 task.ti=c0568000) Stack: c037d8de c4c98b68 c4c98b68 c037e0ec 0001 c037f879 c052a8b4 c052a340 0001 c25e1e60 0001 8c176265 8c17678a 0001 0001 8c17678a 8600 007d8b21 Call Trace: [c037d8de] tcp_rtt_estimator+0xb9/0xfe [c037e0ec] tcp_ack_saw_tstamp+0x14/0x43 [c037f879] tcp_ack+0x6b8/0x17b8 [c03833cc] tcp_rcv_established+0x519/0x5f1 [c038838d] tcp_v4_do_rcv+0x28/0x2f8 [c038a4ce] tcp_v4_rcv+0x7df/0x83d [c0372542] ip_local_deliver+0xcc/0x148 [c0372975] ip_rcv+0x3b7/0x3de [c035fa0e] netif_receive_skb+0x17a/0x1c2 [c02cc121] rtl8139_poll+0x2d9/0x425 [c03616d7] net_rx_action+0xa8/0xc8 [c011e8e0] __do_softirq+0x40/0x90 [c010635d] do_softirq+0x4d/0xb6 === INFO: lockdep is turned off. Code: 24 8b 82 88 03 00 00 89 82 40 05 00 00 a1 a0 23 53 c0 89 82 44 05 00 00 83 c4 0c 5b 5e 5f 5d c3 8b 90 88 00 00 00 b8 32 00 00 00 f6 42 25 20 74 03 8b 42 54 c3 56 85 d2 b9 01 00 00 00 0f 45 ca EIP: [c037d81b] tcp_rto_min+0xb/0x15 SS:ESP 0068:c0596dec Kernel panic - not syncing: Fatal exception in interrupt Hi, Any solutions for this one? I too have been hitting it on my system. === BUG: unable to handle kernel NULL pointer dereference at virtual address 0025 printing eip: c03e790d *pdpt = 097c2001 1*pde = Oops: [#1] SMP last sysfs file: /class/vc/vcs1/dev Modules linked in: Pid: 0, comm: swapper Not tainted (2.6.23-rc4-mm1-cpuctl #12) EIP: 0060:[c03e790d] EFLAGS: 00010246 CPU: 0 EIP is at tcp_rto_min+0xe/0x19 EAX: 0032 EBX: cc4a8180 ECX: 0095 EDX: ESI: cc4a8180 EDI: c05b28e0 EBP: c05c7cfc ESP: c05c7cfc DS: 007b ES: 007b FS: 00d8 GS: SS: 0068 Process swapper (pid: 0, ti=c05c6000 task=c0559cc0 task.ti=c05c6000) Stack: c05c7d0c c03e79d2 cc4a8180 cc4a8180 c05c7d18 c03e9eb2 cc48a200 c05c7d68 c03ea37b 0001 ff8f ca52e8c0 005c7d48 006f7c09 0001 86cff480 0001 000c 000333ff c05c7d94 Call Trace: [c0105c64] show_trace_log_lvl+0x19/0x2e [c0105d26] show_stack_log_lvl+0x99/0xa8 [c0105e2e] show_registers+0xb6/0x185 [c010604a] die+0x108/0x1ed [c0419b3e] do_page_fault+0x64e/0x735 [c04180b2] error_code+0x72/0x78 [c03e79d2] tcp_rtt_estimator+0xba/0x100 [c03e9eb2] tcp_ack_saw_tstamp+0x17/0x47 [c03ea37b] tcp_clean_rtx_queue+0x298/0x45d [c03eaac2] tcp_ack+0x183/0x2d4 [c03ec6a0] tcp_rcv_established+0xd3/0x5ba [c03f35ae] tcp_v4_do_rcv+0x25/0xc2 [c03f3ac0] tcp_v4_rcv+0x475/0x7c0 [c03db831] ip_local_deliver+0xd9/0x17a [c03dbcf2] ip_rcv+0x420/0x45a [c03c65be] netif_receive_skb+0x22b/0x249 [c02e215f] tg3_rx+0x24c/0x359 [c02e2349] tg3_poll+0xdd/0x17c [c03c6814] net_rx_action+0x114/0x14a [c0129163] __do_softirq+0x73/0xe6 [c012920f] do_softirq+0x39/0x51 [c012928d] irq_exit+0x47/0x49 [c0106a95] do_IRQ+0x5d/0x71 [c01058a2] common_interrupt+0x2e/0x34 [c0103123] cpu_idle+0x9e/0xb7 [c041557e] rest_init+0x52/0x54 [c05cc73d] start_kernel+0x21f/0x221 [] 0x0 === INFO: lockdep is turned off. Code: 75 07 89 d8 e8 32 fa ff ff 83 7e 50 7f 76 09 89 f2 89 d8 e8 fc fa ff ff 5b 5e 5f 5d c3 55 8b 90 88 00 00 00 89 e5 b8 32 00 00 00 f6 42 25 20 74 03 8b 42 54 5d c3 5 EIP: [c03e790d] tcp_rto_min+0xe/0x19 SS:ESP 0068:c05c7cfc Kernel panic - not syncing: Fatal exception in interrupt .config follows. # # Automatically generated make config: don't edit # Linux kernel version: 2.6.23-rc4-mm1-cpuctl # Mon Sep 17 15:54:33 2007 # CONFIG_X86_32=y CONFIG_GENERIC_TIME=y CONFIG_GENERIC_CMOS_UPDATE=y CONFIG_CLOCKSOURCE_WATCHDOG=y CONFIG_GENERIC_CLOCKEVENTS=y CONFIG_GENERIC_CLOCKEVENTS_BROADCAST=y CONFIG_LOCKDEP_SUPPORT=y CONFIG_STACKTRACE_SUPPORT=y CONFIG_SEMAPHORE_SLEEPERS=y CONFIG_X86=y CONFIG_MMU=y CONFIG_ZONE_DMA=y CONFIG_QUICKLIST=y CONFIG_GENERIC_ISA_DMA=y CONFIG_GENERIC_IOMAP=y CONFIG_GENERIC_BUG=y CONFIG_GENERIC_HWEIGHT=y CONFIG_ARCH_MAY_HAVE_PC_FDC=y CONFIG_DMI=y CONFIG_DEFCONFIG_LIST=/lib/modules/$UNAME_RELEASE/.config # # General setup # CONFIG_EXPERIMENTAL=y CONFIG_LOCK_KERNEL=y CONFIG_INIT_ENV_ARG_LIMIT=32 CONFIG_LOCALVERSION= CONFIG_LOCALVERSION_AUTO=y CONFIG_SWAP=y CONFIG_SYSVIPC=y CONFIG_SYSVIPC_SYSCTL=y CONFIG_POSIX_MQUEUE=y # CONFIG_BSD_PROCESS_ACCT
Re: 2.6.23-rc4-mm1 OOPS in forcedeth?
I have also seen this OOPS on e1000 card. So, looks like driver independent. By the way, this one has been triggered in a semi-stable way by the 'git-pull' Regards, Den Dhaval Giani wrote: On Thu, Sep 13, 2007 at 11:51:33PM -0400, Andrew James Wade wrote: I have an Oops that may be related: BUG: unable to handle kernel NULL pointer dereference at virtual address 0025 printing eip: c037d81b *pde = Oops: [#1] last sysfs file: /devices/pci:00/:00:01.0/:01:00.0/class Pid: 0, comm: swapper Not tainted (2.6.23-rc4-mm1-config2 #2) EIP: 0060:[c037d81b] EFLAGS: 00010246 CPU: 0 EIP is at tcp_rto_min+0xb/0x15 EAX: 0032 EBX: c4c98b68 ECX: fffe EDX: ESI: c4c98b68 EDI: c055f600 EBP: c4432e40 ESP: c0596dec DS: 007b ES: 007b FS: GS: SS: 0068 Process swapper (pid: 0, ti=c0596000 task=c052a340 task.ti=c0568000) Stack: c037d8de c4c98b68 c4c98b68 c037e0ec 0001 c037f879 c052a8b4 c052a340 0001 c25e1e60 0001 8c176265 8c17678a 0001 0001 8c17678a 8600 007d8b21 Call Trace: [c037d8de] tcp_rtt_estimator+0xb9/0xfe [c037e0ec] tcp_ack_saw_tstamp+0x14/0x43 [c037f879] tcp_ack+0x6b8/0x17b8 [c03833cc] tcp_rcv_established+0x519/0x5f1 [c038838d] tcp_v4_do_rcv+0x28/0x2f8 [c038a4ce] tcp_v4_rcv+0x7df/0x83d [c0372542] ip_local_deliver+0xcc/0x148 [c0372975] ip_rcv+0x3b7/0x3de [c035fa0e] netif_receive_skb+0x17a/0x1c2 [c02cc121] rtl8139_poll+0x2d9/0x425 [c03616d7] net_rx_action+0xa8/0xc8 [c011e8e0] __do_softirq+0x40/0x90 [c010635d] do_softirq+0x4d/0xb6 === INFO: lockdep is turned off. Code: 24 8b 82 88 03 00 00 89 82 40 05 00 00 a1 a0 23 53 c0 89 82 44 05 00 00 83 c4 0c 5b 5e 5f 5d c3 8b 90 88 00 00 00 b8 32 00 00 00 f6 42 25 20 74 03 8b 42 54 c3 56 85 d2 b9 01 00 00 00 0f 45 ca EIP: [c037d81b] tcp_rto_min+0xb/0x15 SS:ESP 0068:c0596dec Kernel panic - not syncing: Fatal exception in interrupt - To unsubscribe from this list: send the line unsubscribe linux-kernel in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Re: 2.6.23-rc4-mm1 OOPS in forcedeth?
Denis V. Lunev wrote: I have also seen this OOPS on e1000 card. So, looks like driver independent. By the way, this one has been triggered in a semi-stable way by the 'git-pull' Do you have this patch: commit 5c127c58ae9bf196d787815b1bd6b0aec5aee816 Author: David S. Miller [EMAIL PROTECTED] Date: Fri Aug 31 14:39:44 2007 -0700 [TCP]: 'dst' can be NULL in tcp_rto_min() Reported by Rick Jones. Signed-off-by: David S. Miller [EMAIL PROTECTED] diff --git a/net/ipv4/tcp_input.c b/net/ipv4/tcp_input.c index 1ee7212..bbad2cd 100644 --- a/net/ipv4/tcp_input.c +++ b/net/ipv4/tcp_input.c @@ -560,7 +560,7 @@ static u32 tcp_rto_min(struct sock *sk) struct dst_entry *dst = __sk_dst_get(sk); u32 rto_min = TCP_RTO_MIN; - if (dst_metric_locked(dst, RTAX_RTO_MIN)) + if (dst dst_metric_locked(dst, RTAX_RTO_MIN)) rto_min = dst-metrics[RTAX_RTO_MIN-1]; return rto_min; } Regards, Den Dhaval Giani wrote: On Thu, Sep 13, 2007 at 11:51:33PM -0400, Andrew James Wade wrote: I have an Oops that may be related: BUG: unable to handle kernel NULL pointer dereference at virtual address 0025 printing eip: c037d81b *pde = Oops: [#1] last sysfs file: /devices/pci:00/:00:01.0/:01:00.0/class Pid: 0, comm: swapper Not tainted (2.6.23-rc4-mm1-config2 #2) EIP: 0060:[c037d81b] EFLAGS: 00010246 CPU: 0 EIP is at tcp_rto_min+0xb/0x15 EAX: 0032 EBX: c4c98b68 ECX: fffe EDX: ESI: c4c98b68 EDI: c055f600 EBP: c4432e40 ESP: c0596dec DS: 007b ES: 007b FS: GS: SS: 0068 Process swapper (pid: 0, ti=c0596000 task=c052a340 task.ti=c0568000) Stack: c037d8de c4c98b68 c4c98b68 c037e0ec 0001 c037f879 c052a8b4 c052a340 0001 c25e1e60 0001 8c176265 8c17678a 0001 0001 8c17678a 8600 007d8b21 Call Trace: [c037d8de] tcp_rtt_estimator+0xb9/0xfe [c037e0ec] tcp_ack_saw_tstamp+0x14/0x43 [c037f879] tcp_ack+0x6b8/0x17b8 [c03833cc] tcp_rcv_established+0x519/0x5f1 [c038838d] tcp_v4_do_rcv+0x28/0x2f8 [c038a4ce] tcp_v4_rcv+0x7df/0x83d [c0372542] ip_local_deliver+0xcc/0x148 [c0372975] ip_rcv+0x3b7/0x3de [c035fa0e] netif_receive_skb+0x17a/0x1c2 [c02cc121] rtl8139_poll+0x2d9/0x425 [c03616d7] net_rx_action+0xa8/0xc8 [c011e8e0] __do_softirq+0x40/0x90 [c010635d] do_softirq+0x4d/0xb6 === INFO: lockdep is turned off. Code: 24 8b 82 88 03 00 00 89 82 40 05 00 00 a1 a0 23 53 c0 89 82 44 05 00 00 83 c4 0c 5b 5e 5f 5d c3 8b 90 88 00 00 00 b8 32 00 00 00 f6 42 25 20 74 03 8b 42 54 c3 56 85 d2 b9 01 00 00 00 0f 45 ca EIP: [c037d81b] tcp_rto_min+0xb/0x15 SS:ESP 0068:c0596dec Kernel panic - not syncing: Fatal exception in interrupt - To unsubscribe from this list: send the line unsubscribe netdev in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html - To unsubscribe from this list: send the line unsubscribe linux-kernel in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Re: 2.6.23-rc4-mm1 OOPS in forcedeth?
On Mon, 17 Sep 2007, Denis V. Lunev wrote: Dhaval Giani wrote: On Thu, Sep 13, 2007 at 11:51:33PM -0400, Andrew James Wade wrote: EIP: [c037d81b] tcp_rto_min+0xb/0x15 SS:ESP 0068:c0596dec As Vlad Yasevich mentioned, this one is already fixed in 23-rc6. The forcedeth oops is unrelated, but multiple people have reported that same oops now -- adding Manfred Spraul to CC. [ original thread is at: http://lkml.org/lkml/2007/9/1/115 ] - To unsubscribe from this list: send the line unsubscribe linux-kernel in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Re: 2.6.23-rc4-mm1 OOPS in forcedeth?
I have an Oops that may be related:
BUG: unable to handle kernel NULL pointer dereference at virtual address
0025
printing eip: c037d81b *pde =
Oops: [#1]
last sysfs file: /devices/pci:00/:00:01.0/:01:00.0/class
Pid: 0, comm: swapper Not tainted (2.6.23-rc4-mm1-config2 #2)
EIP: 0060:[] EFLAGS: 00010246 CPU: 0
EIP is at tcp_rto_min+0xb/0x15
EAX: 0032 EBX: c4c98b68 ECX: fffe EDX:
ESI: c4c98b68 EDI: c055f600 EBP: c4432e40 ESP: c0596dec
DS: 007b ES: 007b FS: GS: SS: 0068
Process swapper (pid: 0, ti=c0596000 task=c052a340 task.ti=c0568000)
Stack: c037d8de c4c98b68 c4c98b68 c037e0ec 0001 c037f879 c052a8b4 c052a340
0001 c25e1e60 0001 8c176265 8c17678a
0001 0001 8c17678a 8600 007d8b21
Call Trace:
[] tcp_rtt_estimator+0xb9/0xfe
[] tcp_ack_saw_tstamp+0x14/0x43
[] tcp_ack+0x6b8/0x17b8
[] tcp_rcv_established+0x519/0x5f1
[] tcp_v4_do_rcv+0x28/0x2f8
[] tcp_v4_rcv+0x7df/0x83d
[] ip_local_deliver+0xcc/0x148
[] ip_rcv+0x3b7/0x3de
[] netif_receive_skb+0x17a/0x1c2
[] rtl8139_poll+0x2d9/0x425
[] net_rx_action+0xa8/0xc8
[] __do_softirq+0x40/0x90
[] do_softirq+0x4d/0xb6
===
INFO: lockdep is turned off.
Code: 24 8b 82 88 03 00 00 89 82 40 05 00 00 a1 a0 23 53 c0 89 82 44 05 00 00
83 c4 0c 5b 5e 5f 5d c3 8b 90 88 00 00 00 b8 32 00 00 00 42 25 20 74 03 8b
42 54 c3 56
85 d2 b9 01 00 00 00 0f 45 ca
EIP: [] tcp_rto_min+0xb/0x15 SS:ESP 0068:c0596dec
Kernel panic - not syncing: Fatal exception in interrupt
config:
#
# Automatically generated make config: don't edit
# Linux kernel version: 2.6.23-rc4-mm1
# Wed Sep 12 19:53:26 2007
#
CONFIG_X86_32=y
CONFIG_GENERIC_TIME=y
CONFIG_GENERIC_CMOS_UPDATE=y
CONFIG_CLOCKSOURCE_WATCHDOG=y
CONFIG_GENERIC_CLOCKEVENTS=y
CONFIG_GENERIC_CLOCKEVENTS_BROADCAST=y
CONFIG_LOCKDEP_SUPPORT=y
CONFIG_STACKTRACE_SUPPORT=y
CONFIG_SEMAPHORE_SLEEPERS=y
CONFIG_X86=y
CONFIG_MMU=y
CONFIG_ZONE_DMA=y
CONFIG_QUICKLIST=y
CONFIG_GENERIC_ISA_DMA=y
CONFIG_GENERIC_IOMAP=y
CONFIG_GENERIC_BUG=y
CONFIG_GENERIC_HWEIGHT=y
CONFIG_ARCH_MAY_HAVE_PC_FDC=y
CONFIG_DMI=y
CONFIG_DEFCONFIG_LIST="/lib/modules/$UNAME_RELEASE/.config"
#
# General setup
#
CONFIG_EXPERIMENTAL=y
CONFIG_BROKEN_ON_SMP=y
CONFIG_INIT_ENV_ARG_LIMIT=32
CONFIG_LOCALVERSION="-config2"
CONFIG_LOCALVERSION_AUTO=y
CONFIG_SWAP=y
CONFIG_SYSVIPC=y
CONFIG_SYSVIPC_SYSCTL=y
CONFIG_POSIX_MQUEUE=y
# CONFIG_BSD_PROCESS_ACCT is not set
# CONFIG_TASKSTATS is not set
# CONFIG_USER_NS is not set
# CONFIG_AUDIT is not set
# CONFIG_IKCONFIG is not set
CONFIG_LOG_BUF_SHIFT=18
# CONFIG_CONTAINERS is not set
CONFIG_SYSFS_DEPRECATED=y
# CONFIG_RELAY is not set
# CONFIG_BLK_DEV_INITRD is not set
CONFIG_CC_OPTIMIZE_FOR_SIZE=y
CONFIG_SYSCTL=y
# CONFIG_EMBEDDED is not set
CONFIG_UID16=y
CONFIG_SYSCTL_SYSCALL=y
CONFIG_KALLSYMS=y
CONFIG_KALLSYMS_ALL=y
# CONFIG_KALLSYMS_EXTRA_PASS is not set
CONFIG_HOTPLUG=y
CONFIG_PRINTK=y
CONFIG_BUG=y
CONFIG_ELF_CORE=y
CONFIG_BASE_FULL=y
CONFIG_FUTEX=y
CONFIG_ANON_INODES=y
CONFIG_EPOLL=y
CONFIG_SIGNALFD=y
CONFIG_TIMERFD=y
CONFIG_EVENTFD=y
CONFIG_SHMEM=y
CONFIG_VM_EVENT_COUNTERS=y
CONFIG_SLAB=y
# CONFIG_SLUB is not set
# CONFIG_SLOB is not set
CONFIG_PROC_PAGE_MONITOR=y
CONFIG_PROC_KPAGEMAP=y
CONFIG_RT_MUTEXES=y
# CONFIG_TINY_SHMEM is not set
CONFIG_BASE_SMALL=0
# CONFIG_MODULES is not set
CONFIG_BLOCK=y
CONFIG_LBD=y
# CONFIG_BLK_DEV_IO_TRACE is not set
# CONFIG_LSF is not set
# CONFIG_BLK_DEV_BSG is not set
#
# IO Schedulers
#
CONFIG_IOSCHED_NOOP=y
CONFIG_IOSCHED_AS=y
CONFIG_IOSCHED_DEADLINE=y
CONFIG_IOSCHED_CFQ=y
CONFIG_DEFAULT_AS=y
# CONFIG_DEFAULT_DEADLINE is not set
# CONFIG_DEFAULT_CFQ is not set
# CONFIG_DEFAULT_NOOP is not set
CONFIG_DEFAULT_IOSCHED="anticipatory"
#
# Processor type and features
#
# CONFIG_TICK_ONESHOT is not set
# CONFIG_NO_HZ is not set
# CONFIG_HIGH_RES_TIMERS is not set
CONFIG_GENERIC_CLOCKEVENTS_BUILD=y
# CONFIG_SMP is not set
CONFIG_X86_PC=y
# CONFIG_X86_ELAN is not set
# CONFIG_X86_VOYAGER is not set
# CONFIG_X86_NUMAQ is not set
# CONFIG_X86_SUMMIT is not set
# CONFIG_X86_BIGSMP is not set
# CONFIG_X86_VISWS is not set
# CONFIG_X86_GENERICARCH is not set
# CONFIG_X86_ES7000 is not set
# CONFIG_PARAVIRT is not set
# CONFIG_M386 is not set
# CONFIG_M486 is not set
# CONFIG_M586 is not set
# CONFIG_M586TSC is not set
# CONFIG_M586MMX is not set
# CONFIG_M686 is not set
# CONFIG_MPENTIUMII is not set
# CONFIG_MPENTIUMIII is not set
# CONFIG_MPENTIUMM is not set
# CONFIG_MPENTIUM4 is not set
# CONFIG_MCORE2 is not set
# CONFIG_MK6 is not set
CONFIG_MK7=y
# CONFIG_MK8 is not set
# CONFIG_MCRUSOE is not set
# CONFIG_MEFFICEON is not set
# CONFIG_MWINCHIPC6 is not set
# CONFIG_MWINCHIP2 is not set
# CONFIG_MWINCHIP3D is not set
# CONFIG_MGEODEGX1 is not set
# CONFIG_MGEODE_LX is not set
# CONFIG_MCYRIXIII is not set
# CONFIG_MVIAC3_2 is not set
# CONFIG_MVIAC7 is not set
# CONFIG_X86_GENERIC is not set
CONFIG_X86_CMPXCHG=y
Re: 2.6.23-rc4-mm1 OOPS in forcedeth?
I have an Oops that may be related:
BUG: unable to handle kernel NULL pointer dereference at virtual address
0025
printing eip: c037d81b *pde =
Oops: [#1]
last sysfs file: /devices/pci:00/:00:01.0/:01:00.0/class
Pid: 0, comm: swapper Not tainted (2.6.23-rc4-mm1-config2 #2)
EIP: 0060:[c037d81b] EFLAGS: 00010246 CPU: 0
EIP is at tcp_rto_min+0xb/0x15
EAX: 0032 EBX: c4c98b68 ECX: fffe EDX:
ESI: c4c98b68 EDI: c055f600 EBP: c4432e40 ESP: c0596dec
DS: 007b ES: 007b FS: GS: SS: 0068
Process swapper (pid: 0, ti=c0596000 task=c052a340 task.ti=c0568000)
Stack: c037d8de c4c98b68 c4c98b68 c037e0ec 0001 c037f879 c052a8b4 c052a340
0001 c25e1e60 0001 8c176265 8c17678a
0001 0001 8c17678a 8600 007d8b21
Call Trace:
[c037d8de] tcp_rtt_estimator+0xb9/0xfe
[c037e0ec] tcp_ack_saw_tstamp+0x14/0x43
[c037f879] tcp_ack+0x6b8/0x17b8
[c03833cc] tcp_rcv_established+0x519/0x5f1
[c038838d] tcp_v4_do_rcv+0x28/0x2f8
[c038a4ce] tcp_v4_rcv+0x7df/0x83d
[c0372542] ip_local_deliver+0xcc/0x148
[c0372975] ip_rcv+0x3b7/0x3de
[c035fa0e] netif_receive_skb+0x17a/0x1c2
[c02cc121] rtl8139_poll+0x2d9/0x425
[c03616d7] net_rx_action+0xa8/0xc8
[c011e8e0] __do_softirq+0x40/0x90
[c010635d] do_softirq+0x4d/0xb6
===
INFO: lockdep is turned off.
Code: 24 8b 82 88 03 00 00 89 82 40 05 00 00 a1 a0 23 53 c0 89 82 44 05 00 00
83 c4 0c 5b 5e 5f 5d c3 8b 90 88 00 00 00 b8 32 00 00 00 f6 42 25 20 74 03 8b
42 54 c3 56
85 d2 b9 01 00 00 00 0f 45 ca
EIP: [c037d81b] tcp_rto_min+0xb/0x15 SS:ESP 0068:c0596dec
Kernel panic - not syncing: Fatal exception in interrupt
config:
#
# Automatically generated make config: don't edit
# Linux kernel version: 2.6.23-rc4-mm1
# Wed Sep 12 19:53:26 2007
#
CONFIG_X86_32=y
CONFIG_GENERIC_TIME=y
CONFIG_GENERIC_CMOS_UPDATE=y
CONFIG_CLOCKSOURCE_WATCHDOG=y
CONFIG_GENERIC_CLOCKEVENTS=y
CONFIG_GENERIC_CLOCKEVENTS_BROADCAST=y
CONFIG_LOCKDEP_SUPPORT=y
CONFIG_STACKTRACE_SUPPORT=y
CONFIG_SEMAPHORE_SLEEPERS=y
CONFIG_X86=y
CONFIG_MMU=y
CONFIG_ZONE_DMA=y
CONFIG_QUICKLIST=y
CONFIG_GENERIC_ISA_DMA=y
CONFIG_GENERIC_IOMAP=y
CONFIG_GENERIC_BUG=y
CONFIG_GENERIC_HWEIGHT=y
CONFIG_ARCH_MAY_HAVE_PC_FDC=y
CONFIG_DMI=y
CONFIG_DEFCONFIG_LIST=/lib/modules/$UNAME_RELEASE/.config
#
# General setup
#
CONFIG_EXPERIMENTAL=y
CONFIG_BROKEN_ON_SMP=y
CONFIG_INIT_ENV_ARG_LIMIT=32
CONFIG_LOCALVERSION=-config2
CONFIG_LOCALVERSION_AUTO=y
CONFIG_SWAP=y
CONFIG_SYSVIPC=y
CONFIG_SYSVIPC_SYSCTL=y
CONFIG_POSIX_MQUEUE=y
# CONFIG_BSD_PROCESS_ACCT is not set
# CONFIG_TASKSTATS is not set
# CONFIG_USER_NS is not set
# CONFIG_AUDIT is not set
# CONFIG_IKCONFIG is not set
CONFIG_LOG_BUF_SHIFT=18
# CONFIG_CONTAINERS is not set
CONFIG_SYSFS_DEPRECATED=y
# CONFIG_RELAY is not set
# CONFIG_BLK_DEV_INITRD is not set
CONFIG_CC_OPTIMIZE_FOR_SIZE=y
CONFIG_SYSCTL=y
# CONFIG_EMBEDDED is not set
CONFIG_UID16=y
CONFIG_SYSCTL_SYSCALL=y
CONFIG_KALLSYMS=y
CONFIG_KALLSYMS_ALL=y
# CONFIG_KALLSYMS_EXTRA_PASS is not set
CONFIG_HOTPLUG=y
CONFIG_PRINTK=y
CONFIG_BUG=y
CONFIG_ELF_CORE=y
CONFIG_BASE_FULL=y
CONFIG_FUTEX=y
CONFIG_ANON_INODES=y
CONFIG_EPOLL=y
CONFIG_SIGNALFD=y
CONFIG_TIMERFD=y
CONFIG_EVENTFD=y
CONFIG_SHMEM=y
CONFIG_VM_EVENT_COUNTERS=y
CONFIG_SLAB=y
# CONFIG_SLUB is not set
# CONFIG_SLOB is not set
CONFIG_PROC_PAGE_MONITOR=y
CONFIG_PROC_KPAGEMAP=y
CONFIG_RT_MUTEXES=y
# CONFIG_TINY_SHMEM is not set
CONFIG_BASE_SMALL=0
# CONFIG_MODULES is not set
CONFIG_BLOCK=y
CONFIG_LBD=y
# CONFIG_BLK_DEV_IO_TRACE is not set
# CONFIG_LSF is not set
# CONFIG_BLK_DEV_BSG is not set
#
# IO Schedulers
#
CONFIG_IOSCHED_NOOP=y
CONFIG_IOSCHED_AS=y
CONFIG_IOSCHED_DEADLINE=y
CONFIG_IOSCHED_CFQ=y
CONFIG_DEFAULT_AS=y
# CONFIG_DEFAULT_DEADLINE is not set
# CONFIG_DEFAULT_CFQ is not set
# CONFIG_DEFAULT_NOOP is not set
CONFIG_DEFAULT_IOSCHED=anticipatory
#
# Processor type and features
#
# CONFIG_TICK_ONESHOT is not set
# CONFIG_NO_HZ is not set
# CONFIG_HIGH_RES_TIMERS is not set
CONFIG_GENERIC_CLOCKEVENTS_BUILD=y
# CONFIG_SMP is not set
CONFIG_X86_PC=y
# CONFIG_X86_ELAN is not set
# CONFIG_X86_VOYAGER is not set
# CONFIG_X86_NUMAQ is not set
# CONFIG_X86_SUMMIT is not set
# CONFIG_X86_BIGSMP is not set
# CONFIG_X86_VISWS is not set
# CONFIG_X86_GENERICARCH is not set
# CONFIG_X86_ES7000 is not set
# CONFIG_PARAVIRT is not set
# CONFIG_M386 is not set
# CONFIG_M486 is not set
# CONFIG_M586 is not set
# CONFIG_M586TSC is not set
# CONFIG_M586MMX is not set
# CONFIG_M686 is not set
# CONFIG_MPENTIUMII is not set
# CONFIG_MPENTIUMIII is not set
# CONFIG_MPENTIUMM is not set
# CONFIG_MPENTIUM4 is not set
# CONFIG_MCORE2 is not set
# CONFIG_MK6 is not set
CONFIG_MK7=y
# CONFIG_MK8 is not set
# CONFIG_MCRUSOE is not set
# CONFIG_MEFFICEON is not set
# CONFIG_MWINCHIPC6 is not set
# CONFIG_MWINCHIP2 is not set
# CONFIG_MWINCHIP3D is not set
# CONFIG_MGEODEGX1 is not set
# CONFIG_MGEODE_LX is not set
# CONFIG_MCYRIXIII is not set
# CONFIG_MVIAC3_2
Re: 2.6.23-rc4-mm1 OOPS in forcedeth?
On Sun, 2 Sep 2007, [EMAIL PROTECTED] wrote: > > > > [EMAIL PROTECTED] wrote: > > > > > > > > On this machine (Athlon 64 X2 4600, 4 GiB memory, lots of disks), > > > > 2.6.23-rc1-mm2 runs fine. 2.6.23-rc4-mm1 reproducably dies within > > > > seconds of > > > > starting > > > > a rsync session on another PC against this machine. > > > > > > > > NULL pointer dereference > > > > code: nv_napi_poll+0x108 > > > > trace: net_rx_action+0xab > > > > __do_softirq+0x74 > > > > call_softirq+0x1c > > > > do_softirq+0x3d > > > > irq_exit+0x85 > > > > do_IRQ+0x85 > > > > ret_from_intr+0x0 > > There are 4 pictures of oopses here: > > http://www.xs4all.nl/~thunder7/oops_2623rc4mm1_1.jpg > http://www.xs4all.nl/~thunder7/oops_2623rc4mm1_2.jpg > http://www.xs4all.nl/~thunder7/oops_2623rc4mm1_3.jpg > http://www.xs4all.nl/~thunder7/oops_2623rc4mm1_4.jpg OK, I've been pouring over forcedeth.c and the newly introduce NAPI code, but didn't debug this yet, so I'll at least lay out the situation so that somebody else who's more experienced @netdev can pick up from here with minimal time wastage. Here's what's happening (repeatedly, reproducibly) on Jurriaan's x64 box: (1) The following NULL dereference oops: nv_rx_process_optimized(), inlined from nv_napi_poll(), found that "skb" i.e. np->get_rx_ctx->skb == NULL when trying to update skb->ip_summed. (2) The following BUG in napi_complete(): BUG_ON(!test_bit(NAPI_STATE_SCHED, >state)); from the nv_napi_poll()->__netif_rx_complete()->napi_complete() callchain is triggering. IOW napi_complete() found that a NAPI poll wasn't/shouldn't have been scheduled at all (!) The above two problems appear to be occurring independently, AFAICT. Satyam - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Re: 2.6.23-rc4-mm1 OOPS in forcedeth?
From: Satyam Sharma <[EMAIL PROTECTED]> Date: Sun, Sep 02, 2007 at 06:24:29AM +0530 > Hi Jurriaan, > > > > [EMAIL PROTECTED] wrote: > > > From: Andrew Morton <[EMAIL PROTECTED]> > > > Date: Fri, Aug 31, 2007 at 09:58:22PM -0700 > > > > ftp://ftp.kernel.org/pub/linux/kernel/people/akpm/patches/2.6/2.6.23-rc4/2.6.23-rc4-mm1/ > > > > > > > On this machine (Athlon 64 X2 4600, 4 GiB memory, lots of disks), > > > 2.6.23-rc1-mm2 runs fine. 2.6.23-rc4-mm1 reproducably dies within seconds > > > of > > > starting > > > a rsync session on another PC against this machine. > > > > > > NULL pointer dereference > > > code: nv_napi_poll+0x108 > > > trace:net_rx_action+0xab > > > __do_softirq+0x74 > > > call_softirq+0x1c > > > do_softirq+0x3d > > > irq_exit+0x85 > > > do_IRQ+0x85 > > > ret_from_intr+0x0 > > The dmesg you posted below doesn't cover the messages from this oops > itself. As you mentioned you can reproduce this oops easily, please do so, > and post the *full* oops log (if it doesn't get logged to disk, you can > try taking digicam photo, or write down *all* the messages and post here). > I built an x86_64 kernel as per your .config, but don't see any memory > dereference at nv_napi_poll+0x108 -- could be toolchain differences. > There are 4 pictures of oopses here: http://www.xs4all.nl/~thunder7/oops_2623rc4mm1_1.jpg http://www.xs4all.nl/~thunder7/oops_2623rc4mm1_2.jpg http://www.xs4all.nl/~thunder7/oops_2623rc4mm1_3.jpg http://www.xs4all.nl/~thunder7/oops_2623rc4mm1_4.jpg image quality, well, they're readable. Good luck, Jurriaan -- management n. 1. Corporate power elites distinguished primarily by their distance from actual productive work and their chronic failure to manage (see also suit). Spoken derisively, as in "Management decided that ...". 2. Mythically, a vast bureaucracy responsible for all the world's minor irritations. Hackers' satirical public notices are often signed `The Mgt'; this derives from the "Illuminatus" novels (see the Bibliography in Appendix C). Debian (Unstable) GNU/Linux 2.6.23-rc1-mm2 2x2010 bogomips load 0.43 the Jack Vance Integral Edition: http://www.integralarchive.org - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Re: 2.6.23-rc4-mm1 OOPS in forcedeth?
From: Satyam Sharma [EMAIL PROTECTED] Date: Sun, Sep 02, 2007 at 06:24:29AM +0530 Hi Jurriaan, [EMAIL PROTECTED] wrote: From: Andrew Morton [EMAIL PROTECTED] Date: Fri, Aug 31, 2007 at 09:58:22PM -0700 ftp://ftp.kernel.org/pub/linux/kernel/people/akpm/patches/2.6/2.6.23-rc4/2.6.23-rc4-mm1/ On this machine (Athlon 64 X2 4600, 4 GiB memory, lots of disks), 2.6.23-rc1-mm2 runs fine. 2.6.23-rc4-mm1 reproducably dies within seconds of starting a rsync session on another PC against this machine. NULL pointer dereference code: nv_napi_poll+0x108 trace:net_rx_action+0xab __do_softirq+0x74 call_softirq+0x1c do_softirq+0x3d irq_exit+0x85 do_IRQ+0x85 ret_from_intr+0x0 The dmesg you posted below doesn't cover the messages from this oops itself. As you mentioned you can reproduce this oops easily, please do so, and post the *full* oops log (if it doesn't get logged to disk, you can try taking digicam photo, or write down *all* the messages and post here). I built an x86_64 kernel as per your .config, but don't see any memory dereference at nv_napi_poll+0x108 -- could be toolchain differences. There are 4 pictures of oopses here: http://www.xs4all.nl/~thunder7/oops_2623rc4mm1_1.jpg http://www.xs4all.nl/~thunder7/oops_2623rc4mm1_2.jpg http://www.xs4all.nl/~thunder7/oops_2623rc4mm1_3.jpg http://www.xs4all.nl/~thunder7/oops_2623rc4mm1_4.jpg image quality, well, they're readable. Good luck, Jurriaan -- management n. 1. Corporate power elites distinguished primarily by their distance from actual productive work and their chronic failure to manage (see also suit). Spoken derisively, as in Management decided that 2. Mythically, a vast bureaucracy responsible for all the world's minor irritations. Hackers' satirical public notices are often signed `The Mgt'; this derives from the Illuminatus novels (see the Bibliography in Appendix C). Debian (Unstable) GNU/Linux 2.6.23-rc1-mm2 2x2010 bogomips load 0.43 the Jack Vance Integral Edition: http://www.integralarchive.org - To unsubscribe from this list: send the line unsubscribe linux-kernel in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Re: 2.6.23-rc4-mm1 OOPS in forcedeth?
On Sun, 2 Sep 2007, [EMAIL PROTECTED] wrote: [EMAIL PROTECTED] wrote: On this machine (Athlon 64 X2 4600, 4 GiB memory, lots of disks), 2.6.23-rc1-mm2 runs fine. 2.6.23-rc4-mm1 reproducably dies within seconds of starting a rsync session on another PC against this machine. NULL pointer dereference code: nv_napi_poll+0x108 trace: net_rx_action+0xab __do_softirq+0x74 call_softirq+0x1c do_softirq+0x3d irq_exit+0x85 do_IRQ+0x85 ret_from_intr+0x0 There are 4 pictures of oopses here: http://www.xs4all.nl/~thunder7/oops_2623rc4mm1_1.jpg http://www.xs4all.nl/~thunder7/oops_2623rc4mm1_2.jpg http://www.xs4all.nl/~thunder7/oops_2623rc4mm1_3.jpg http://www.xs4all.nl/~thunder7/oops_2623rc4mm1_4.jpg OK, I've been pouring over forcedeth.c and the newly introduce NAPI code, but didn't debug this yet, so I'll at least lay out the situation so that somebody else who's more experienced @netdev can pick up from here with minimal time wastage. Here's what's happening (repeatedly, reproducibly) on Jurriaan's x64 box: (1) The following NULL dereference oops: nv_rx_process_optimized(), inlined from nv_napi_poll(), found that skb i.e. np-get_rx_ctx-skb == NULL when trying to update skb-ip_summed. (2) The following BUG in napi_complete(): BUG_ON(!test_bit(NAPI_STATE_SCHED, n-state)); from the nv_napi_poll()-__netif_rx_complete()-napi_complete() callchain is triggering. IOW napi_complete() found that a NAPI poll wasn't/shouldn't have been scheduled at all (!) The above two problems appear to be occurring independently, AFAICT. Satyam - To unsubscribe from this list: send the line unsubscribe linux-kernel in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Re: 2.6.23-rc4-mm1 OOPS in forcedeth?
From: Satyam Sharma <[EMAIL PROTECTED]>
Date: Sun, Sep 02, 2007 at 06:24:29AM +0530
>
> The dmesg you posted below doesn't cover the messages from this oops
> itself. As you mentioned you can reproduce this oops easily, please do so,
> and post the *full* oops log (if it doesn't get logged to disk, you can
> try taking digicam photo, or write down *all* the messages and post here).
> I built an x86_64 kernel as per your .config, but don't see any memory
> dereference at nv_napi_poll+0x108 -- could be toolchain differences.
>
> Else, can you run:
> $ gdb ./vmlinux
>
> and then:
> (gdb) l *nv_napi_poll+0x108
>
> and send us the output?
>
That seems to be the easier option:
AMD64 :gdb /usr/src/linux-2.6.23-rc4-mm1/vmlinux
GNU gdb 6.6-debian
(gdb) l *nv_napi_poll+0x108
0x80418f28 is in nv_napi_poll (drivers/net/forcedeth.c:2470).
2465if ((flags & NV_RX2_CHECKSUMMASK) ==
NV_RX2_CHECKSUMOK2)/*ip and tcp */ {
2466skb->ip_summed = CHECKSUM_UNNECESSARY;
2467} else {
2468if ((flags & NV_RX2_CHECKSUMMASK) ==
NV_RX2_CHECKSUMOK1 ||
2469(flags & NV_RX2_CHECKSUMMASK) ==
NV_RX2_CHECKSUMOK3) {
2470skb->ip_summed =
CHECKSUM_UNNECESSARY;
2471}
2472}
2473
2474/* got a valid packet - forward it to the
network core */
(gdb) q
as for toolchain differences: this is Debian Unstable, up-to-date as of
yesterday morning.
If some fields are empty or look unusual you may have an old version.
Compare to the current minimal requirements in Documentation/Changes.
Linux middle 2.6.23-rc1-mm2 #1 SMP Wed Aug 1 14:58:22 CEST 2007 x86_64 GNU/Linux
Gnu C 4.1.3
Gnu make 3.81
binutils Binutils
util-linux 2.13
mount 2.13
module-init-tools 3.3-pre11
e2fsprogs 1.40.2
reiserfsprogs 3.6.19
Linux C Library6.1
Dynamic linker (ldd) 2.6.1
Procps 3.2.7
Net-tools 1.60
Console-tools 0.2.3
Sh-utils 5.97
Modules Loaded nf_nat_ftp nf_nat_irc nf_conntrack_irc nf_conntrack_ftp
ipt_MASQUERADE iptable_nat nf_nat ipt_REJECT ipt_LOG xt_limit nf_conntrack_ipv4
xt_state xt_tcpudp iptable_filter ip_tables x_tables snd_emu10k1_synth
snd_emux_synth snd_seq_virmidi snd_seq_midi_emul snd_emu10k1 snd_seq_dummy
snd_seq_oss snd_seq_midi snd_seq_midi_event snd_seq snd_rawmidi snd_ac97_codec
ac97_bus snd_pcm_oss snd_mixer_oss snd_pcm snd_seq_device snd_timer
snd_page_alloc snd_util_mem snd_hwdep snd soundcore k8temp it87 hwmon_vid hwmon
i2c_nforce2
Good luck,
Jurriaan
--
His pride could withstand anything. He simply wouldn't care.
Melanie Rawn - Skybowl
Debian (Unstable) GNU/Linux 2.6.23-rc1-mm2 2x2010 bogomips load 0.43
the Jack Vance Integral Edition: http://www.integralarchive.org
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to [EMAIL PROTECTED]
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/
Re: 2.6.23-rc4-mm1 OOPS in forcedeth?
Hi Jurriaan, > [EMAIL PROTECTED] wrote: > > From: Andrew Morton <[EMAIL PROTECTED]> > > Date: Fri, Aug 31, 2007 at 09:58:22PM -0700 > > > ftp://ftp.kernel.org/pub/linux/kernel/people/akpm/patches/2.6/2.6.23-rc4/2.6.23-rc4-mm1/ > > > > > On this machine (Athlon 64 X2 4600, 4 GiB memory, lots of disks), > > 2.6.23-rc1-mm2 runs fine. 2.6.23-rc4-mm1 reproducably dies within seconds of > > starting > > a rsync session on another PC against this machine. > > > > NULL pointer dereference > > code: nv_napi_poll+0x108 > > trace: net_rx_action+0xab > > __do_softirq+0x74 > > call_softirq+0x1c > > do_softirq+0x3d > > irq_exit+0x85 > > do_IRQ+0x85 > > ret_from_intr+0x0 The dmesg you posted below doesn't cover the messages from this oops itself. As you mentioned you can reproduce this oops easily, please do so, and post the *full* oops log (if it doesn't get logged to disk, you can try taking digicam photo, or write down *all* the messages and post here). I built an x86_64 kernel as per your .config, but don't see any memory dereference at nv_napi_poll+0x108 -- could be toolchain differences. Else, can you run: $ gdb ./vmlinux and then: (gdb) l *nv_napi_poll+0x108 and send us the output? Satyam - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Re: 2.6.23-rc4-mm1 OOPS in forcedeth?
[EMAIL PROTECTED] wrote: From: Andrew Morton <[EMAIL PROTECTED]> Date: Fri, Aug 31, 2007 at 09:58:22PM -0700 ftp://ftp.kernel.org/pub/linux/kernel/people/akpm/patches/2.6/2.6.23-rc4/2.6.23-rc4-mm1/ On this machine (Athlon 64 X2 4600, 4 GiB memory, lots of disks), 2.6.23-rc1-mm2 runs fine. 2.6.23-rc4-mm1 reproducably dies within seconds of starting a rsync session on another PC against this machine. NULL pointer dereference code: nv_napi_poll+0x108 trace: net_rx_action+0xab __do_softirq+0x74 call_softirq+0x1c do_softirq+0x3d irq_exit+0x85 do_IRQ+0x85 ret_from_intr+0x0 (added netdev to CC) I'm guessing that this is net-2.6.24.git's NAPI update. Jeff - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Re: 2.6.23-rc4-mm1 OOPS in forcedeth?
[EMAIL PROTECTED] wrote: From: Andrew Morton [EMAIL PROTECTED] Date: Fri, Aug 31, 2007 at 09:58:22PM -0700 ftp://ftp.kernel.org/pub/linux/kernel/people/akpm/patches/2.6/2.6.23-rc4/2.6.23-rc4-mm1/ On this machine (Athlon 64 X2 4600, 4 GiB memory, lots of disks), 2.6.23-rc1-mm2 runs fine. 2.6.23-rc4-mm1 reproducably dies within seconds of starting a rsync session on another PC against this machine. NULL pointer dereference code: nv_napi_poll+0x108 trace: net_rx_action+0xab __do_softirq+0x74 call_softirq+0x1c do_softirq+0x3d irq_exit+0x85 do_IRQ+0x85 ret_from_intr+0x0 (added netdev to CC) I'm guessing that this is net-2.6.24.git's NAPI update. Jeff - To unsubscribe from this list: send the line unsubscribe linux-kernel in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Re: 2.6.23-rc4-mm1 OOPS in forcedeth?
From: Satyam Sharma [EMAIL PROTECTED]
Date: Sun, Sep 02, 2007 at 06:24:29AM +0530
The dmesg you posted below doesn't cover the messages from this oops
itself. As you mentioned you can reproduce this oops easily, please do so,
and post the *full* oops log (if it doesn't get logged to disk, you can
try taking digicam photo, or write down *all* the messages and post here).
I built an x86_64 kernel as per your .config, but don't see any memory
dereference at nv_napi_poll+0x108 -- could be toolchain differences.
Else, can you run:
$ gdb ./vmlinux
and then:
(gdb) l *nv_napi_poll+0x108
and send us the output?
That seems to be the easier option:
AMD64 :gdb /usr/src/linux-2.6.23-rc4-mm1/vmlinux
GNU gdb 6.6-debian
(gdb) l *nv_napi_poll+0x108
0x80418f28 is in nv_napi_poll (drivers/net/forcedeth.c:2470).
2465if ((flags NV_RX2_CHECKSUMMASK) ==
NV_RX2_CHECKSUMOK2)/*ip and tcp */ {
2466skb-ip_summed = CHECKSUM_UNNECESSARY;
2467} else {
2468if ((flags NV_RX2_CHECKSUMMASK) ==
NV_RX2_CHECKSUMOK1 ||
2469(flags NV_RX2_CHECKSUMMASK) ==
NV_RX2_CHECKSUMOK3) {
2470skb-ip_summed =
CHECKSUM_UNNECESSARY;
2471}
2472}
2473
2474/* got a valid packet - forward it to the
network core */
(gdb) q
as for toolchain differences: this is Debian Unstable, up-to-date as of
yesterday morning.
If some fields are empty or look unusual you may have an old version.
Compare to the current minimal requirements in Documentation/Changes.
Linux middle 2.6.23-rc1-mm2 #1 SMP Wed Aug 1 14:58:22 CEST 2007 x86_64 GNU/Linux
Gnu C 4.1.3
Gnu make 3.81
binutils Binutils
util-linux 2.13
mount 2.13
module-init-tools 3.3-pre11
e2fsprogs 1.40.2
reiserfsprogs 3.6.19
Linux C Library6.1
Dynamic linker (ldd) 2.6.1
Procps 3.2.7
Net-tools 1.60
Console-tools 0.2.3
Sh-utils 5.97
Modules Loaded nf_nat_ftp nf_nat_irc nf_conntrack_irc nf_conntrack_ftp
ipt_MASQUERADE iptable_nat nf_nat ipt_REJECT ipt_LOG xt_limit nf_conntrack_ipv4
xt_state xt_tcpudp iptable_filter ip_tables x_tables snd_emu10k1_synth
snd_emux_synth snd_seq_virmidi snd_seq_midi_emul snd_emu10k1 snd_seq_dummy
snd_seq_oss snd_seq_midi snd_seq_midi_event snd_seq snd_rawmidi snd_ac97_codec
ac97_bus snd_pcm_oss snd_mixer_oss snd_pcm snd_seq_device snd_timer
snd_page_alloc snd_util_mem snd_hwdep snd soundcore k8temp it87 hwmon_vid hwmon
i2c_nforce2
Good luck,
Jurriaan
--
His pride could withstand anything. He simply wouldn't care.
Melanie Rawn - Skybowl
Debian (Unstable) GNU/Linux 2.6.23-rc1-mm2 2x2010 bogomips load 0.43
the Jack Vance Integral Edition: http://www.integralarchive.org
-
To unsubscribe from this list: send the line unsubscribe linux-kernel in
the body of a message to [EMAIL PROTECTED]
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/
