1.3.69: smbfs/vfat Oops...

Flavius (flav@ld301.ec-lille.fr)
Thu, 29 Feb 1996 19:53:48 +0100 (MET)


Hi,

I've got un oops while running smbfs/vfat/[ctrl][scroll_lock].

I'm using linux-1.3.69 with vfat/smbfs as modules. I'm using kerneld
to load modules.
My system is a 486DX2-66,VESA / 20MoRAM / AHA-1542C / NE-2000.

It is the first time I'm using smbfs and I had to patch smbmount because
the in the ksmbfs-0.3 distribution it searches smbfs.o in /lib/modules/x.xx.xx
and not in /lib/modules/x.xx.xx/fs where it is now.
I was using smbfs for 24 hours only.
Someone was makeing a 'cp -a' from a smbfs mounted partition to a vfat one.
At the same time I was doing several [ctrl][scroll_lock] and
[shift][scroll_lock].
I've got some 'Aiee/Oops' messages and system crashed...

I'm new in kernel hacking so I can't fix more....

Regards,

Flavius

Here are my log files:

/var/adm/syslog:

Feb 29 16:11:15 ld301 kernel:
release: cp kernel stack corruption. Aiee
Feb 29 17:57:41 ld301 kernel:
Unable to handle kernel NULL pointer dereference at virtual address c0000010
current->tss.cr3 = 00707000,
*pde = 00102067
*pte = 00000027
release: cp kernel stack corruption. Aiee

/var/adm/messages:

Feb 29 17:57:03 ld301 kernel:
free sibling
task PC stack pid father child younger older
swapper 0 R current 4096 0 0 1
init 1 S 001A114C 2428 1 0 2055
kflushd 2 S 001A114C 2832 2 1 3
kswapd 3 S 001A114C 2312 3 1 9 2
csh 4 S 001A114C 2504 2055 1 126
kerneld 5 S 001A114C 2956 10 1 78 9
wu.ftpd 6 S 001A114C 2636 2113 98 2106
crond 7 S 001A114C 2900 78 1 92 10
update 8 S 001A114C 2224 9 1 10 3
syslogd 9 S 001A114C 2564 92 1 94 78
klogd 10 R 001A114C 2964 94 1 96 92
rpc.portmap 11 S 001A114C 2476 96 1 98 94
inetd 12 S 001A114C 2716 98 1 2113 100 96
rwhod 13 S 001A114C 2664 100 1 102 98
lpd 14 S 001A114C 3000 102 1 106 100
rpc.nfsd 15 S 001A114C 2956 108 1 112 106
sendmail 16 S 001A114C 2776 112 1 116 108
rpc.mountd 17 S 001A114C 2760 106 1 108 102
nmbd 18 S 001A114C 2184 116 1 118 112
smbd 19 S 001A114C 2780 118 1 121 116
getty 20 S 001A114C 2828 121 1 122 118
getty 21 S 001A114C 2828 122 1 123 121
getty 22 S 001A114C 2316 123 1 124 122
getty 23 S 001A114C 2828 124 1 125 123
getty 24 S 001A114C 2496 125 1 126 124
gpm 25 S 001A114C 2696 126 1 2055 125
in.telnetd 26 S 001A114C 2636 2106 98 2107 2113
csh 27 S 001A114C 2084 2107 2106 2116
cp 28 S 001A114C 40 2116 2107
Feb 29 17:57:07 ld301 ftpd[2113]: FTP session closed
Feb 29 17:57:08 ld301 kernel:
free sibling
task PC stack pid father child younger older
swapper 0 R current 4096 0 0 1
init 1 S 001A114C 2428 1 0 2055
kflushd 2 S 001A114C 2832 2 1 3
kswapd 3 S 001A114C 2312 3 1 9 2
csh 4 S 001A114C 2504 2055 1 126
kerneld 5 S 001A114C 2956 10 1 78 9
crond 7 S 001A114C 2900 78 1 92 10
update 8 S 001A114C 2224 9 1 10 3
syslogd 9 S 001A114C 2432 92 1 94 78
klogd 10 R 001A114C 2964 94 1 96 92
rpc.portmap 11 S 001A114C 2476 96 1 98 94
inetd 12 S 001A114C 2716 98 1 2106 100 96
rwhod 13 S 001A114C 2664 100 1 102 98
lpd 14 S 001A114C 3000 102 1 106 100
rpc.nfsd 15 S 001A114C 2956 108 1 112 106
sendmail 16 S 001A114C 2776 112 1 116 108
rpc.mountd 17 S 001A114C 2760 106 1 108 102
nmbd 18 S 001A114C 2184 116 1 118 112
smbd 19 S 001A114C 2780 118 1 121 116
getty 20 S 001A114C 2828 121 1 122 118
getty 21 S 001A114C 2828 122 1 123 121
getty 22 S 001A114C 2316 123 1 124 122
getty 23 S 001A114C 2828 124 1 125 123
getty 24 S 001A114C 2496 125 1 126 124
gpm 25 S 001A114C 2696 126 1 2055 125
in.telnetd 26 S 001A114C 2636 2106 98 2107
csh 27 S 001A114C 2084 2107 2106 2116
cp 28 S 001A114C 40 2116 2107
Feb 29 17:57:19 ld301 kernel:
Mem-info:
Free pages: 316kB
( 1*4kB 1*8kB 1*16kB 5*32kB 0*64kB 1*128kB = 316kB)
Swap cache: add 6265/6265, delete 1399999/5741, find 4199/484
Free swap: 39904kB
5120 pages of RAM
79 free pages
360 reserved pages
707 pages shared
Buffer memory: 8504kB
Buffer heads: 16768
Buffer blocks: 16760
Buffer[0] mem: 183 buffers, 35 used (last=35), 0 locked, 0 protected, 0 dirty 0 shrd
Buffer[2] mem: 12760 buffers, 52 used (last=6592), 362 locked, 0 protected, 0 dirty 0 shrd
Buffer[4] mem: 3748 buffers, 4 used (last=1059), 0 locked, 0 protected, 3748 dirty 0 shrd
Size [LAV] Free Clean Unshar Lck Lck1 Dirty Shared
512 [ 6672]: 19 64 0 12685 0 3744 0
1024 [ 335]: 50 119 0 75 0 4 0
2048 [ 0]: 0 0 0 0 0 0 0
4096 [ 0]: 0 0 0 0 0 0 0
8192 [ 0]: 0 0 0 0 0 0 0
Networking buffers in use : 5
Network buffers locked by drivers : 0
Total network buffer allocations : 954780
Total failed network buffer allocs : 10
Total free while locked events : 0
IP fragment buffer size : 0
Feb 29 17:57:41 ld301 kernel:
Oops: 0000
CPU: 0
EIP: 0010:[<00125bc8>]
EFLAGS: 00010286
eax: 00000000 ebx: ffffffff ecx: 00000400 edx: 00000000
esi: 00f4bf40 edi: 00000546 ebp: 00000002 esp: 00fa4e2c
ds: 0018 es: 0018 fs: 002b gs: 002b ss: 0018
Corrupted stack page
Process cp (pid: 2116, process nr: 28, stackpage=00fa4000)
Stack: 00000001 fffeb970 00001eaf 00000000 00000003 00000203 00f4bf40 00125a7f
00000006 00000400 00000000 00000000 00008000 00fa4eac 00123d69 00000200
00000000 00000000 00cb0831 00000131 00000200 00000000 00124c42 01397c40
Call Trace: [<00125a7f>] [<00123d69>] [<00124c42>] [<0181b613>] [<001242da>] [<00124496>] [<0181e9ab>]
[<0181b0d4>] [<0181e953>] [<0181b95d>] [<0181cb5b>] [<00121d27>] [<0010a569>]
Code: 0f ba 6a 10 05 19 c0 39 f2 75 e9 0f ba 76 10 05 19 c0 85 db
Feb 29 17:59:50 ld301 kernel:
general protection: 0000
CPU: 0
EIP: 0010:[<00123a60>]
EFLAGS: 00010282
eax: f9e5958f ebx: 005b0831 ecx: 00000013 edx: 000001eb
esi: 000d8149 edi: 00000831 ebp: 000d8978 esp: 007e5e94
ds: 0018 es: 0018 fs: 002b gs: 002b ss: 0018
Process cp (pid: 2132, process nr: 6, stackpage=007e5000)
Stack: 005b5340 00000000 00c60831 00000200 00000000 001242da 00000831 000d8978
00000200 005b5340 000d8978 00c60ba0 0000001f 0181e9ab 00000831 0181b0d4
00000831 000d8978 00000200 0181e953 001c0a38 000d8978 00c60ba0 00c60ba0
Call Trace: [<001242da>] [<0181e9ab>] [<0181b0d4>] [<0181e953>] [<0181b95d>] [<0181cb5b>] [<00121d27>]
[<0010a569>]
Code: 39 28 75 2c 66 39 58 04 75 26 8b 4c 24 20 39 48 1c 74 26 57

Here is what I've got using ksymoops:
For the oops:
>>EIP: 125bc8 <shrink_specific_buffers+128/2b0>
Trace: 125a7f <maybe_shrink_lav_buffers+af/d0>
Trace: 123d69 <refill_freelist+89/5c0>
Trace: 124c42 <__brelse+22/50>
Trace: 181b613
Trace: 1242da <getblk+3a/4c0>
Trace: 124496 <getblk+1f6/4c0>
Trace: 181e9ab
Trace: 181b0d4
Trace: 181e953
Trace: 181b95d
Trace: 181cb5b
Trace: 121d27 <sys_write+e7/110>
Trace: 10a569 <system_call+59/a0>

Code: 125bc8 <shrink_specific_buffers+128/2b0> btsl $0x5,0x10(%edx)
Code: 125bcd <shrink_specific_buffers+12d/2b0> sbbl %eax,%eax
Code: 125bcf <shrink_specific_buffers+12f/2b0> cmpl %esi,%edx
Code: 125bd1 <shrink_specific_buffers+131/2b0> jne fffffff4 <gcc2_compiled.+fffffff4>
Code: 125bd3 <shrink_specific_buffers+133/2b0> btrl $0x5,0x10(%esi)
Code: 125bd8 <shrink_specific_buffers+138/2b0> sbbl %eax,%eax
Code: 125bda <shrink_specific_buffers+13a/2b0> testl %ebx,%ebx

For 'general protection':
>>EIP: 123a60 <get_hash_table+30/d0>
Trace: 1242da <getblk+3a/4c0>
Trace: 181e9ab
Trace: 181b0d4
Trace: 181e953
Trace: 181b95d
Trace: 181cb5b
Trace: 121d27 <sys_write+e7/110>
Trace: 10a569 <system_call+59/a0>

Code: 123a60 <get_hash_table+30/d0> cmpl %ebp,(%eax)
Code: 123a62 <get_hash_table+32/d0> jne 123a90 <get_hash_table+60/d0>
Code: 123a64 <get_hash_table+34/d0> cmpw %bx,0x4(%eax)
Code: 123a68 <get_hash_table+38/d0> jne 123a90 <get_hash_table+60/d0>
Code: 123a6a <get_hash_table+3a/d0> movl 0x20(%esp,1),%ecx
Code: 123a6e <get_hash_table+3e/d0> cmpl %ecx,0x1c(%eax)
Code: 123a71 <get_hash_table+41/d0> je 123a99 <get_hash_table+69/d0>
Code: 123a73 <get_hash_table+43/d0> pushl %edi

=============================================================================
Flavius Bindea || email: flav@acdc.ec-lille.fr || / @@ \
Ecole Centrale de Lille || flavius@lails1.ec-lille.fr || -oOo-()-oOo-
France || http://www.ec-lille.fr/~flavius ||
=============================================================================
Try this: main(){while(1)fork();}