[BUG] Fwd: segfault : modprobe dccp_probe/tcp_probe

["Ian McDonald" <ian.mcdonald@jandi.co.nz>]

Hi there,

We've seen a report of a problem with dccp_probe as shown below. The
user has also verified that it occurs in tcp_probe as well. This is on
Dave Miller's tree but that currently tracks Linus' tree quite
closely. I do note that it is around 2.6.22-rc2 timeframe so there is
a possibility fixes may have gone in since.

Ian

---------- Forwarded message ----------
From: Patrick Andrieux <patrick.andrieux@gmail.com>
Date: Jun 6, 2007 1:07 AM
Subject: segfault : modprobe dccp_probe
To: Ian McDonald <ian.mcdonald@jandi.co.nz>, Arnaldo Carvalho de Melo
<acme@ghostprotocols.net>
Cc: dccp@vger.kernel.org


Hi,

I have a segfault when inserting dccp_probe module on Dave Miller's
tree *without* Ian's patches. I got it using this cmd line :
#git-clone git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-2.6.git davem

Please find my .config in attachement.
I'm working on Debian testing (lenny).

config :
----------------             ----------------             -----------------
| dccpClient |----------| netembox |----------| dccpServer |
----------------             ----------------             -----------------


dccpServer # uname -a
  Linux dccpServer 2.6.22-rc2final-dccp #1 PREEMPT Tue May 29
18:16:08 IST 2007 i686 GNU/Linux

dccpClient # uname -a
  Linux dccpClient 2.6.22-rc2final-dccp #1 PREEMPT Tue May 29
18:16:08 IST 2007 i686 GNU/Linux


script I use when testing with CCID3:
#! /bin/sh

#modprobe dccp
modprobe dccp_ccid3
sysctl -w net.dccp.default.seq_window=10000
sysctl -w net.dccp.default.send_ackvec=0
sysctl -w net.dccp.default.rx_ccid=3
sysctl -w net.dccp.default.tx_ccid=3
sysctl -w net.dccp.default.tx_qlen=5


dccpServer # modprobe dccp_probe
Segmentation fault
dccpServer #  ls -l /proc/net/dccpprobe
-r-------- 1 root root 0 2007-06-05 12:31 /proc/net/dccpprobe


/etc/log/syslog :
Jun  5 12:19:55 dccpServer kernel: [  609.085205] CCID: Registered
CCID 3 (ccid3)
Jun  5 12:26:55 dccpServer kernel: [ 1027.751606] BUG: unable to
handle kernel paging request at virtual address c0316c18
Jun  5 12:26:55 dccpServer kernel: [ 1027.751614]  printing eip:
Jun  5 12:26:55 dccpServer kernel: [ 1027.751616] c0320687
Jun  5 12:26:55 dccpServer kernel: [ 1027.751618] *pde = 1fe5d163
Jun  5 12:26:55 dccpServer kernel: [  1027.751620] *pte = 00316161
Jun  5 12:26:55 dccpServer kernel: [ 1027.751624] Oops: 0003 [#1]
Jun  5 12:26:55 dccpServer kernel: [ 1027.751625] PREEMPT
Jun  5 12:26:55 dccpServer kernel: [ 1027.751628] Modules linked in:
dccp_probe dccp_ccid3 dccp_tfrc_lib ppdev lp af_packet snd_intel8x0
snd_ac97_codec ac97_bus snd_pcm_oss snd_mixer_oss mousedev snd_pcm
snd_
timer evdev parport_pc parport snd soundcore psmouse pcspkr rtc usbhid
snd_page_alloc intel_agp agpgart floppy ehci_hcd tg3 uhci_hcd usbcore
thermal processor fan unix
Jun  5 12:26:55 dccpServer kernel: [ 1027.751657 ] CPU:    0
Jun  5 12:26:55 dccpServer kernel: [ 1027.751658] EIP:
0060:[<c0320687>]    Not tainted VLI
Jun  5 12:26:55 dccpServer kernel: [ 1027.751659] EFLAGS: 00210246
(2.6.22-rc2final-dccp #1)
Jun  5 12:26:55 dccpServer kernel: [  1027.751666] EIP is at
arch_arm_kprobe+0x6/0xb
Jun  5 12:26:55 dccpServer kernel: [ 1027.751669] eax: c0316c18   ebx:
00000000   ecx: e5f74000   edx: 00000000
Jun  5 12:26:55 dccpServer kernel: [ 1027.751672] esi: f8a25740   edi:
00000000   ebp: e5f74ea0   esp: e5f74ea0
Jun  5 12:26:55 dccpServer kernel: [ 1027.751675] ds: 007b   es: 007b
fs: 0000  gs: 0033  ss: 0068
Jun  5 12:26:55 dccpServer kernel: [ 1027.751679] Process modprobe
(pid: 4889, ti=e5f74000 task=e5ae6a80 task.ti=e5f74000 )
Jun  5 12:26:55 dccpServer kernel: [ 1027.751681] Stack: e5f74eb4
c0321921 fffffff4 efa1c498 efa1c6b4 e5f74ebc c0321994 e5f74ed0
Jun  5 12:26:55 dccpServer kernel: [ 1027.751690]        f8a27076
c01220c0 ffffffff efa1c684 e5f74fb0 c0137d1f 00000002 00000000
Jun  5 12:26:55 dccpServer kernel: [ 1027.751698]        00200246
00000000 0001b486 ee5379b8 f8a2580c 00000650 00200246 e65a9de4
Jun  5 12:26:55 dccpServer kernel: [ 1027.751707] Call Trace:
Jun  5 12:26:55 dccpServer kernel: [  1027.751709]  [<c0104d52>]
show_trace_log_lvl+0x1a/0x2f
Jun  5 12:26:55 dccpServer kernel: [ 1027.751714]  [<c0104e04>]
show_stack_log_lvl+0x9d/0xa5
Jun  5 12:26:55 dccpServer kernel: [ 1027.751718]  [<c0105006>]
show_registers+0x1fa/0x33b
Jun  5 12:26:55 dccpServer kernel: [ 1027.751722]  [<c0105245>] die+0xfe/0x200
Jun  5 12:26:55 dccpServer kernel: [ 1027.751726]  [<c03213ab>]
do_page_fault+0x436/0x509
Jun  5 12:26:55 dccpServer kernel: [  1027.751730]  [<c031fd4a>]
error_code+0x6a/0x70
Jun  5 12:26:55 dccpServer kernel: [ 1027.751733]  [<c0321921>]
__register_kprobe+0x23a/0x294
Jun  5 12:26:55 dccpServer kernel: [ 1027.751737]  [<c0321994>]
register_jprobe+0x19/0x1b
Jun  5 12:26:55 dccpServer kernel: [ 1027.751741]  [<f8a27076>]
dccpprobe_init+0x76/0xb4 [dccp_probe]
Jun  5 12:26:55 dccpServer kernel: [ 1027.751747]  [<c0137d1f>]
sys_init_module+0x12d5/0x1415
Jun  5 12:26:55 dccpServer kernel: [  1027.751753]  [<c0103db2>]
sysenter_past_esp+0x5f/0x99
Jun  5 12:26:55 dccpServer kernel: [ 1027.751756]  =======================
Jun  5 12:26:55 dccpServer kernel: [ 1027.751758] Code: 07 83 f8 02 75
15 eb 07 bb 01 00 00 00 eb 0c a1 2c 4b 41 c0 e8 f7 bc de ff 09 c3 83
c4 10 89 d8 5b 5e 5f 5d c3 55 8b 40 18 89 e5 <c6> 00 cc 5d c3 55 8b
50 18 89 e5 8a 40 34 88 02 5d c3 a3 20 cb
Jun  5 12:26:55 dccpServer kernel: [ 1027.751797] EIP: [<c0320687>]
arch_arm_kprobe+0x6/0xb SS:ESP 0068:e5f74ea0
Jun  5 12:26:55 dccpServer kernel: [ 1027.751806] BUG: sleeping
function called from invalid context at kernel/rwsem.c:20
Jun  5 12:26:55 dccpServer kernel: [ 1027.751809] in_atomic():0,
irqs_disabled():1
Jun  5 12:26:55 dccpServer kernel: [ 1027.751812] INFO: lockdep is turned off.
Jun  5 12:26:55 dccpServer kernel: [ 1027.751814] irq event stamp: 4018
Jun  5 12:26:55 dccpServer kernel: [ 1027.751815] hardirqs last
enabled at (4017): [<c031fa9d>] _spin_unlock_irqrestore+0x36/0x59
Jun  5 12:26:55 dccpServer kernel: [ 1027.751821] hardirqs last
disabled at (4018): [<c031f77f>] _spin_lock_irqsave+0x12/0x4e
Jun  5 12:26:55 dccpServer kernel: [ 1027.751825] softirqs last
enabled at (4002): [<c011bef6>] __do_softirq+0xa3/0xa8
Jun  5 12:26:55 dccpServer kernel: [ 1027.751831] softirqs last
disabled at (3993): [<c0105daa>] do_softirq+0x5b/0xc9
Jun  5 12:26:55 dccpServer kernel: [ 1027.751836]  [<c0104d52>]
show_trace_log_lvl+0x1a/0x2f
Jun  5 12:26:55 dccpServer kernel: [ 1027.751840]  [<c0105845>]
show_trace+0x12/0x14
Jun  5 12:26:55 dccpServer kernel: [  1027.751843]  [<c01058cb>]
dump_stack+0x15/0x17
Jun  5 12:26:55 dccpServer kernel: [ 1027.751847]  [<c0114420>]
__might_sleep+0xc7/0xcd
Jun  5 12:26:55 dccpServer kernel: [ 1027.751850]  [<c0129d91>]
down_read+0x18/0x4b
Jun  5 12:26:55 dccpServer kernel: [ 1027.751854]  [<c0139f71>]
acct_collect+0x3a/0x135
Jun  5 12:26:55 dccpServer kernel: [ 1027.751858]  [<c011a4d5>]
do_exit+0x1b2/0x6b1
Jun  5 12:26:55 dccpServer kernel: [  1027.751862]  [<c0105321>] die+0x1da/0x200
Jun  5 12:26:55 dccpServer kernel: [ 1027.751866]  [<c03213ab>]
do_page_fault+0x436/0x509
Jun  5 12:26:55 dccpServer kernel: [ 1027.751869]  [<c031fd4a>]
error_code+0x6a/0x70
Jun  5 12:26:55 dccpServer kernel: [ 1027.751873]  [<c0321921>]
__register_kprobe+0x23a/0x294
Jun  5 12:26:55 dccpServer kernel: [ 1027.751876]  [<c0321994>]
register_jprobe+0x19/0x1b
Jun  5 12:26:55 dccpServer kernel: [  1027.751880]  [<f8a27076>]
dccpprobe_init+0x76/0xb4 [dccp_probe]
Jun  5 12:26:55 dccpServer kernel: [ 1027.751885]  [<c0137d1f>]
sys_init_module+0x12d5/0x1415
Jun  5 12:26:55 dccpServer kernel: [ 1027.751890 ]  [<c0103db2>]
sysenter_past_esp+0x5f/0x99
Jun  5 12:26:55 dccpServer kernel: [ 1027.751893]  =======================

Let me know if you need anything else.

rgds,
Patrick.



--
Web: http://wand.net.nz/~iam4/
Blog: http://iansblog.jandi.co.nz
WAND Network Research Group

Attachment: config-2.6.22-rc2final-dccp
Description: Binary data