Bug 119999 - Oops in sk98lin
Summary: Oops in sk98lin
Status: RESOLVED WONTFIX
Alias: None
Product: SUSE LINUX 10.0
Classification: openSUSE
Component: Kernel (show other bugs)
Version: RC 4
Hardware: Other All
: P5 - None : Normal
Target Milestone: ---
Assignee: Olaf Kirch
QA Contact: E-mail List
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2005-10-03 21:41 UTC by Jeff Mahoney
Modified: 2005-10-04 08:33 UTC (History)
0 users

See Also:
Found By: Other
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Jeff Mahoney 2005-10-03 21:41:40 UTC
Unable to handle kernel NULL pointer dereference at 0000000000000098 RIP:
<ffffffff8823475a>{:sk98lin:FreeTxDescriptors+186}
PGD 0
Oops: 0000 [1]
CPU 0
Modules linked in: hfsplus vfat fat subfs cpufreq_ondemand cpufreq_userspace
cpufreq_powersave powernow_k8 freq_table edd ipv6 nfsd exportfs snd_pcm_oss
snd_mixer_oss snd_seq_midi snd_emu10k1_synth snd_emux_synth snd_seq_virmidi
snd_seq_midi_event snd_seq_midi_emul snd_seq button battery ac usbhid floppy
matrox_w1 wire af_packet tuner tvaudio msp3400 ide_cd bttv snd_emu10k1
matroxfb_base matroxfb_DAC1064 matroxfb_accel matroxfb_Ti3026 matroxfb_g450
g450_pll matroxfb_misc video_buf snd_rawmidi firmware_class i2c_algo_bit
snd_seq_device v4l2_common snd_ac97_codec btcx_risc ohci1394 ieee1394
ivtv_tveeprom i2c_viapro ehci_hcd snd_pcm snd_timer snd_ac97_bus sk98lin
i2c_core emu10k1_gp gameport snd_page_alloc snd_util_mem videodev uhci_hcd
usbcore generic snd_hwdep shpchp pci_hotplug snd soundcore parport_pc lp parport
nls_utf8 ext3 jbd raid5 xor raid1 reiserfs dm_snapshot dm_mod fan thermal
processor via82cxxx sata_via libata sr_mod cdrom sg aic7xxx scsi_transport_spi
sd_mod scsi_mod ide_disk ide_core
Pid: 14845, comm: nfsd Tainted: G     U 2.6.13-15-default
RIP: 0010:[<ffffffff8823475a>] <ffffffff8823475a>{:sk98lin:FreeTxDescriptors+186}
RSP: 0018:ffff81003111da08  EFLAGS: 00010002
RAX: 0000000000000000 RBX: 0000000045570042 RCX: ffff810034b0d700
RDX: 0000000045570042 RSI: 0000000031146d3e RDI: 0000000000000000
RBP: ffff810034b855c0 R08: ffff810034b0d700 R09: 0000000000000218
R10: 0000000000001ad0 R11: 0000000000000000 R12: ffff8100344c7fb0
R13: ffff8100344c0000 R14: 0000000000000000 R15: 0000000000000020
FS:  00002aaaaadedb00(0000) GS:ffffffff8049b800(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
CR2: 0000000000000098 CR3: 0000000031fad000 CR4: 00000000000006e0
Process nfsd (pid: 14845, threadinfo ffff81003111c000, task ffff81003f32a0f0)
Stack: 000000000000005c ffff8100349e0800 ffff8100349e0800 ffff810034b0d700
       ffff8100344c7fb0 ffffffff88234ad9 ffff810001fb6400 ffffffff883a9a88
       ffff8100344c0000 ffff8100340f3700
Call Trace:<ffffffff88234ad9>{:sk98lin:XmitFrameSG+41}
<ffffffff883a9a88>{:af_packet:packet_rcv_spkt+648}
       <ffffffff88234ef7>{:sk98lin:SkGeXmit+151}
<ffffffff802d609c>{qdisc_restart+220}
       <ffffffff802c5a72>{dev_queue_xmit+242}
<ffffffff802e90e7>{ip_finish_output+455}
       <ffffffff802e94a9>{ip_output+281} <ffffffff802e68ad>{ip_dst_output+109}
       <ffffffff80147990>{autoremove_wake_function+0}
<ffffffff802e8eb0>{ip_queue_xmit+1120}
       <ffffffff801cd0d9>{isofs_read_inode+1353}
<ffffffff802f6e57>{tcp_transmit_skb+1735}
       <ffffffff802f8b71>{__tcp_push_pending_frames+721}
<ffffffff802ee126>{tcp_sendpage+1718}
       <ffffffff8032aa86>{svc_sock_enqueue+598} <ffffffff8032a12b>{svc_sendto+315}
       <ffffffff8032a554>{svc_tcp_sendto+68} <ffffffff8032b1d3>{svc_send+243}
       <ffffffff80329d5b>{svc_process+1131} <ffffffff8843b5a0>{:nfsd:nfsd+432}
       <ffffffff8010f392>{child_rip+8} <ffffffff8843b3f0>{:nfsd:nfsd+0}
       <ffffffff8010f38a>{child_rip+0}

Code: 8b 90 98 00 00 00 49 8b 85 30 7e 00 00 48 8d 48 70 48 85 c0
RIP <ffffffff8823475a>{:sk98lin:FreeTxDescriptors+186} RSP <ffff81003111da08>
CR2: 0000000000000098
 <0>Kernel panic - not syncing: Aiee, killing interrupt handler!


The isofs_read_inode is likely in there due to the system being mostly idle
except for serving the 10.0rc4 DVD9 ISO via NFS to another machine doing an
installation.
Comment 1 Jeff Mahoney 2005-10-03 21:45:32 UTC
Another oops, almost immediately after rebooting. The other system still had the
NFS mount going for the installation:

Unable to handle kernel NULL pointer dereference at 0000000000000098 RIP:
<ffffffff8825775a>{:sk98lin:FreeTxDescriptors+186}
PGD 0
Oops: 0000 [1]
CPU 0
Modules linked in: hfsplus vfat fat subfs cpufreq_ondemand cpufreq_userspace
cpufreq_powersave powernow_k8 freq_table edd ipv6 nfsd exportfs snd_pcm_oss
snd_mixer_oss snd_seq_midi snd_emu10k1_synth snd_emux_synth snd_seq_virmidi
snd_seq_midi_event snd_seq_midi_emul snd_seq button battery ac usbhid af_packet
floppy ide_cd tuner tvaudio msp3400 bttv matrox_w1 wire matroxfb_base
matroxfb_DAC1064 matroxfb_accel matroxfb_Ti3026 matroxfb_g450 g450_pll
matroxfb_misc video_buf snd_emu10k1 firmware_class i2c_algo_bit snd_rawmidi
v4l2_common ehci_hcd btcx_risc snd_seq_device ohci1394 ieee1394 ivtv_tveeprom
i2c_viapro snd_ac97_codec i2c_core sk98lin emu10k1_gp gameport videodev uhci_hcd
usbcore snd_pcm snd_timer snd_ac97_bus generic snd_page_alloc snd_util_mem
snd_hwdep shpchp pci_hotplug snd soundcore parport_pc lp parport nls_utf8 ext3
jbd raid5 xor raid1 reiserfs dm_snapshot dm_mod fan thermal processor via82cxxx
sata_via libata sr_mod cdrom sg aic7xxx scsi_transport_spi sd_mod scsi_mod
ide_disk ide_core
Pid: 5753, comm: nfsd Tainted: G     U 2.6.13-15-default
RIP: 0010:[<ffffffff8825775a>] <ffffffff8825775a>{:sk98lin:FreeTxDescriptors+186}
RSP: 0018:ffff81003455da28  EFLAGS: 00010002
RAX: 0000000000000000 RBX: 0000000045570042 RCX: ffff810034e65040
RDX: 0000000045570042 RSI: 0000000035f5053e RDI: 0000000000000000
RBP: ffff810036b42780 R08: ffff810034e65040 R09: 00000000000005a8
R10: 00000000000035a0 R11: 0000000000000001 R12: ffff8100373c7fb0
R13: ffff8100373c0000 R14: 0000000000000000 R15: 0000000000000020
FS:  00002aaaaadedb00(0000) GS:ffffffff8049b800(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
CR2: 0000000000000098 CR3: 0000000035553000 CR4: 00000000000006e0
Process nfsd (pid: 5753, threadinfo ffff81003455c000, task ffff81003727a3f0)
Stack: ffff81003455dbe8 ffff810036cda000 ffff810036cda000 ffff810034e65040
       ffff8100373c7fb0 ffffffff88257ad9 ffff810037031400 ffffffff883c9a88
       ffff8100373c0000 ffff8100352cf2c0
Call Trace:<ffffffff88257ad9>{:sk98lin:XmitFrameSG+41}
<ffffffff883c9a88>{:af_packet:packet_rcv_spkt+648}
       <ffffffff88257ef7>{:sk98lin:SkGeXmit+151}
<ffffffff802d609c>{qdisc_restart+220}
       <ffffffff802c5a72>{dev_queue_xmit+242}
<ffffffff802e90e7>{ip_finish_output+455}
       <ffffffff802e94a9>{ip_output+281} <ffffffff802e68ad>{ip_dst_output+109}
       <ffffffff802e8eb0>{ip_queue_xmit+1120}
<ffffffff802f6e57>{tcp_transmit_skb+1735}
       <ffffffff802f8784>{tcp_push_one+292} <ffffffff802edfc3>{tcp_sendpage+1363}
       <ffffffff8032a19f>{svc_sendto+431} <ffffffff8032a554>{svc_tcp_sendto+68}
       <ffffffff8032b1d3>{svc_send+243} <ffffffff80329d5b>{svc_process+1131}
       <ffffffff8843b5a0>{:nfsd:nfsd+432} <ffffffff8010f392>{child_rip+8}
       <ffffffff8843b3f0>{:nfsd:nfsd+0} <ffffffff8010f38a>{child_rip+0}


Code: 8b 90 98 00 00 00 49 8b 85 30 7e 00 00 48 8d 48 70 48 85 c0
RIP <ffffffff8825775a>{:sk98lin:FreeTxDescriptors+186} RSP <ffff81003455da28>
CR2: 0000000000000098
 <0>Kernel panic - not syncing: Aiee, killing interrupt handler!

Comment 2 Jeff Mahoney 2005-10-03 22:07:42 UTC
As a note, skge works on this hardware, so I've switched over to using that.

lspci -v for the controller.

00:0a.0 Ethernet controller: 3Com Corporation 3c940 10/100/1000Base-T [Marvell]
(rev 12)
        Subsystem: ASUSTeK Computer Inc. P4P800/K8V Deluxe motherboard
        Flags: bus master, 66MHz, medium devsel, latency 64, IRQ 201
        Memory at 00000000fdc00000 (32-bit, non-prefetchable) [size=16K]
        I/O ports at cc00 [size=256]
        Capabilities: [48] Power Management version 2
        Capabilities: [50] Vital Product Data
Comment 4 Olaf Kirch 2005-10-04 08:33:18 UTC
Nothing we can/will do about sk98lin, sorry. Closing as wontfix.