1.3.15 panic in tcp_rcv

Blake A. Jones (foo@ugcs.caltech.edu)
Thu, 10 Aug 1995 21:19:29 -0700 (PDT)

I experienced a panic in 1.3.15 recently. I had slip w/ shlc active at the
time, but I wasn't generating any net traffic in particular at that point.
I had seen a

rift kernel: ncftp trying to free kernel page-directory: not good

earlier in the day, but I didn't have slip active at that time.
Coincidentally, I had just run "readprofile", and I noticed that there
were 7 _free_page_table's and 23 _clear_page_table's, after being up
for about 1 hour. Seemed odd to me.

GCC 2.5.8, 1.3.15 kernel. Panic copied by hand, but I double-checked the EIP.

Blake <blakej@cco.caltech.edu>


general protection: 0000 EIP: 0010:0014e298 EFLAGS: 00010006 eax: 65e850fc ebx: 00402640 ecx: 8cf95fe0 edx: 00000006 esi: 65e850fc edi: 01ec6580 ebp: 00402624 esp: 001bd01c ds: 0018 es: 0026 gs: 0018 ss: 0018 Process swapper (pid: 0, process nr: 0, stackpage=001bb178) Stack: 001bf2fc 00402640 00402610 00402640 00000206 00000014 00e4c11d 00e4a018 00000028 00000246 001e72f8 00402640 001a0014 00402640 001e72f8 00147c02 00402640 001ca160 00000000 33195ea0 00000014 01ec6580 00000000 001b0018 Call Trace: 001a0014 00147c02 01ec6580 0013fc84 0011cd1a 0010adad 001b0018 001b0018 00110018 0010987c 0010ae29 0010936f 0011a7c8 00112108 Code: 89 18 52 9d fb 31 c0 5b 5e 5f 5d 83 c4 2c c3 90 90 90 90 90 Aiee, killing interrupt handler kfree of non-kmalloced memory: 001bd170, next=00000018, order=24 task[0] (swapper) killed: unable to recover Kernel panic: Trying to free up swapper memory space In swapper task - not syncing


Using `System.map-1.3.15' to map addresses to symbols. >>EIP: 14e298 <_tcp_rcv+22c/2340> Trace: 1a0014 <_chr_dev_init+1c/4c> Trace: 147c02 <_ip_rcv+45a/4f0> Trace: 1ec6580 Trace: 13fc84 <_net_bh+110/160> Trace: 11cd1a <_do_bottom_half+3e/a4> Trace: 10adad <handle_bottom_half+d/20> Trace: 1b0018 <_pmgr_inform+44/19c> Trace: 1b0018 <_pmgr_inform+44/19c> Trace: 110018 <_setup_arch+17c/340> Trace: 10987c <_sys_idle+64/70> Trace: 10ae29 <_system_call+59/a0> Trace: 10936f <_start_kernel+19f/1b0> Trace: 11a7c8 <_it_real_fn> Trace: 112108 <_schedule+1f4/240>

Code: 14e298 <_tcp_rcv+22c/2340> movl %ebx,(%eax) Code: 14e29a <_tcp_rcv+22e/2340> pushl %edx Code: 14e29b <_tcp_rcv+22f/2340> popf Code: 14e29c <_tcp_rcv+230/2340> sti Code: 14e29d <_tcp_rcv+231/2340> xorl %eax,%eax Code: 14e29f <_tcp_rcv+233/2340> popl %ebx Code: 14e2a0 <_tcp_rcv+234/2340> popl %esi Code: 14e2a1 <_tcp_rcv+235/2340> popl %edi Code: 14e2a2 <_tcp_rcv+236/2340> popl %ebp Code: 14e2a3 <_tcp_rcv+237/2340> addl $0x2c,%esp Code: 14e2a6 <_tcp_rcv+23a/2340> ret Code: 14e2a7 <_tcp_rcv+23b/2340> nop Code: 14e2a8 <_tcp_rcv+23c/2340> nop Code: 14e2a9 <_tcp_rcv+23d/2340> nop Code: 14e2aa <_tcp_rcv+23e/2340> nop Code: 14e2ab <_tcp_rcv+23f/2340> nop