Oops 0002

Oops 0002

[john moser]

icebox regression # ./memkmemport_test
Testing denied write of /dev/mem... : FAILED
Testing denied mmap write of /dev/kmem... : FAILED
Testing denied open of /dev/port... : FAILED
<1>Unable to handle kernel NULL pointer dereference at virtual address
00000000
 printing eip:
c0387645
*pde = 00000000
Oops: 0002 [#3]
CPU:    0
EIP:    0060:[<c0387645>]    Tainted: PF
EFLAGS: 00010246
eax: 00000000   ebx: 00000004   ecx: 00000004   edx: 00000000
esi: 080487eb   edi: 00000000   ebp: 080487ef   esp: d0f55e80
ds: 007b   es: 007b   ss: 0068
Process memkmemport_tes (pid: 7355, threadinfo=d0f54000 task=dbdd0c80)
Stack: 00000004 00000004 efd516c0 c02b7523 ef5aa9c0 00000004 00000000 c02b6a48
       00000000 080487eb 00000004 e69cd140 c02b6dd0 00000004 e69cd160 080487eb
       c02b6e39 e69cd140 00000000 00000000 080487eb 00000004 e69cd160 e69cd140
Call Trace: [<c02b7523>]  [<c02b6a48>]  [<c02b6dd0>]  [<c02b6e39>]
[<c02b6dd0>]  [<c01ed0e8>]  [<c01ed212>]  [<c019d417>]  [<c019d42f>]
Code: f3 aa 58 59 e9 fc 4c f0 ff b8 f2 ff ff ff e9 b3 9e f0 ff b8
 Segmentation fault


regression tools that I pulled out of the grsecurity.net cvs and tested on a PaX patched kernel AND a kernel that I'm working a bit on (without pax), neither should oops.  I don't readily reboot to run vanillas. This is a NULL dereference INSIDE the kernel, right?  Something's broke, and it does this on 2.6.1-rc2 so whatever it is is probably still broke.

--Bluefox

_____________________________________________________________
Linux.Net -->Open Source to everyone
Powered by Linare Corporation
http://www.linare.com/

Re: Oops 0002

[Randy.Dunlap]

On Thu, 8 Jan 2004 10:49:35 -0800 (PST) john moser <bluefoxicy@linux.net> wrote:

| icebox regression # ./memkmemport_test
| Testing denied write of /dev/mem... : FAILED
| Testing denied mmap write of /dev/kmem... : FAILED
| Testing denied open of /dev/port... : FAILED
| <1>Unable to handle kernel NULL pointer dereference at virtual address
| 00000000
|  printing eip:
| c0387645
| *pde = 00000000
| Oops: 0002 [#3]
| CPU:    0
| EIP:    0060:[<c0387645>]    Tainted: PF
| EFLAGS: 00010246
| eax: 00000000   ebx: 00000004   ecx: 00000004   edx: 00000000
| esi: 080487eb   edi: 00000000   ebp: 080487ef   esp: d0f55e80
| ds: 007b   es: 007b   ss: 0068
| Process memkmemport_tes (pid: 7355, threadinfo=d0f54000 task=dbdd0c80)
| Stack: 00000004 00000004 efd516c0 c02b7523 ef5aa9c0 00000004 00000000 c02b6a48
|        00000000 080487eb 00000004 e69cd140 c02b6dd0 00000004 e69cd160 080487eb
|        c02b6e39 e69cd140 00000000 00000000 080487eb 00000004 e69cd160 e69cd140
| Call Trace: [<c02b7523>]  [<c02b6a48>]  [<c02b6dd0>]  [<c02b6e39>]
| [<c02b6dd0>]  [<c01ed0e8>]  [<c01ed212>]  [<c019d417>]  [<c019d42f>]
| Code: f3 aa 58 59 e9 fc 4c f0 ff b8 f2 ff ff ff e9 b3 9e f0 ff b8
|  Segmentation fault
| 
| 
| regression tools that I pulled out of the grsecurity.net cvs and tested on a PaX patched kernel AND a kernel that I'm working a bit on (without pax), neither should oops.  I don't readily reboot to run vanillas. This is a NULL dereference INSIDE the kernel, right?  Something's broke, and it does this on 2.6.1-rc2 so whatever it is is probably still broke.

Yes, it's a NULL reference inside (some) kernel.

1.  Please wrap email lines around 70-72 characters.

2.  What kernel version is this?  What patches applied?

3.  This is the 3rd oops for this kernel.  What were the first 2?

4.  Please use CONFIG_KALLSYMS=y so that addresses will be
converted to symbols, or run the oops thru ksymoops.


--
~Randy
MOTD:  Always include version info.

Re: Oops 0002

[Christian Borntraeger]

john moser wrote:
> icebox regression # ./memkmemport_test
> Testing denied write of /dev/mem... : FAILED
[...]
> Oops: 0002 [#3]

You started this testcase as root? I think writing to /dev/kmem as root is 
working as designed.
Having an oops after this artificial memory corruption is quite normal.
Your oops is only interesting if this happens with a non-root user.


cheers

Christian

Oops 0002

[Barry Gamblin]

[-- Attachment #1: Type: TEXT/plain, Size: 985 bytes --]

I have a server that is hanging and/or crashing quite regularly. It has 
a Supermicro p4dc6 motherboard with dual Xeon 1.7G processors. I am 
using the onboard scsi with two 36G IBM drives and the onboard ethernet 
eepro100. I have it running Redhat 7.3 with the 2-4-18-19.7.xsmp kernel. 
The BIOS is version 1.0.

The last time it crashed it gave an Oops 0002 which I copied down from 
the screen. I ran that through ksymoops, but I do not really know what I 
am looking for. I have attached both the Oops text and the ksymoops 
output to this message. Can anyone tell from this what is going on? I 
need to get this machine stablized before it can go into production. I 
cannot tell if I have a software or a hardware problem.

Any help is greatly appreciated.

Thanks, Barry

Barry S. Gamblin, UNIX Administrator III, bgamblin@ucar.edu
High Altitude Observatory - National Center for Atmospheric Research
P.O.Box 3000, Boulder CO 80307-3000
voice - 303-497-1509  fax - 303-497-1589

[-- Attachment #2: oops.txt --]
[-- Type: TEXT/plain, Size: 659 bytes --]

<1> Unable to handle kernel NULL pointer dereference at virtual address 00000000
printing eip:
c012108b
*pde=00000000
Oops: 0002
nfsd autofs nfs lockd sunrpc eepro100 usb_uhci usbcore aic7xxx sd_mod scsi_mod
CPU: 0
EIP: 0010 [<c012108b>] Not tainted
EFLAGS: 00010a87

EIP is at sys_wait4 [kernel] 0xeb (2.4.18-19,7.xsmp)
eax: c0393c80 ebx: f6f20000 ecx: f748e000 edx: f748e000
esi: f748e000 edi: 00000000 ebp: ffffffff esp: e0000000
ds: 0018 es: 0018 ss: 0018
Process (pid:0, stackpage=dffff000)
Stack:
Call Trace:

Code: ab c8 90 51 53 02 00 00 f7 44 24 3c 00 00 00 80 8b 43 68 74
<0>Kernel Panic: Attempted to kill the idle task!
In idle task - not syncing

[-- Attachment #3: ksymoops.out --]
[-- Type: TEXT/plain, Size: 2228 bytes --]

ksymoops 2.4.4 on i686 2.4.18-19.7.xsmp.  Options used
     -V (default)
     -k /proc/ksyms (default)
     -l /proc/modules (default)
     -o /lib/modules/2.4.18-19.7.xsmp/ (default)
     -m /boot/System.map-2.4.18-19.7.xsmp (default)

Warning: You did not tell me where to find symbol information.  I will
assume that the log matches the kernel and modules that are running
right now and I'll use the default options above for symbol resolution.
If the current kernel and/or modules do not match the log, you can get
more accurate output by telling me the kernel version and where to find
map, modules, ksyms etc.  ksymoops -h explains the options.

Error (expand_objects): cannot stat(/lib/aic7xxx.o) for aic7xxx
Error (expand_objects): cannot stat(/lib/sd_mod.o) for sd_mod
Error (expand_objects): cannot stat(/lib/scsi_mod.o) for scsi_mod
<1> Unable to handle kernel NULL pointer dereference at virtual address 00000000
c012108b
Oops: 0002
CPU: 0
EIP: 0010 [<c012108b>] Not tainted
Using defaults from ksymoops -t elf32-i386 -a i386
EFLAGS: 00010a87
eax: c0393c80 ebx: f6f20000 ecx: f748e000 edx: f748e000
esi: f748e000 edi: 00000000 ebp: ffffffff esp: e0000000
ds: 0018 es: 0018 ss: 0018
Process (pid:0, stackpage=dffff000)
Code: ab c8 90 51 53 02 00 00 f7 44 24 3c 00 00 00 80 8b 43 68 74

>>EIP; c012108b <sys_wait4+eb/3f0>   <=====
Code;  c012108b <sys_wait4+eb/3f0>
00000000 <_EIP>:
Code;  c012108b <sys_wait4+eb/3f0>   <=====
   0:   ab                        stos   %eax,%es:(%edi)   <=====
Code;  c012108c <sys_wait4+ec/3f0>
   1:   c8 90 51 53               enter  $0x5190,$0x53
Code;  c0121090 <sys_wait4+f0/3f0>
   5:   02 00                     add    (%eax),%al
Code;  c0121092 <sys_wait4+f2/3f0>
   7:   00 f7                     add    %dh,%bh
Code;  c0121094 <sys_wait4+f4/3f0>
   9:   44                        inc    %esp
Code;  c0121095 <sys_wait4+f5/3f0>
   a:   24 3c                     and    $0x3c,%al
Code;  c0121097 <sys_wait4+f7/3f0>
   c:   00 00                     add    %al,(%eax)
Code;  c0121099 <sys_wait4+f9/3f0>
   e:   00 80 8b 43 68 74         add    %al,0x7468438b(%eax)

<0>Kernel Panic: Attempted to kill the idle task!

1 warning and 3 errors issued.  Results may not be reliable.