2.6.34-rc5+: oops in IPv6

2.6.34-rc5+: oops in IPv6

[Manuel Lauss]

2.6.34-rc5-00204-gddc9b34  dies when sshd (openssh 5.5) is started
Last pull I made on April 23 was fine.

(transcribed from a photo):

BUG: unable to handle kernel NULL pointer dereference at 00000004
IP: [<b1535b72>] inet6_csk_bind_conflict+0x6e/0xb0

EIP: 0060:[<b1535b72>] EFLAGS: 00010293 CPU: 0
EAX: 0000 EBX: ed49c8c0 ECX: 00000000 EDX: 00000000
ESI: ed49c8dc EDI: ee223040 EBP: ef940058 ESP: ed7e9e84
 DS: 007b ES: 007b FS: 0000 GS: 0033 SS: 0068

Stack:
 ee223040 eebf12e0 b1927198 b14dee45 00000016 ffffffff 00000016 00000005
<0> e8dd766c c8dd75d0 ed7e9ee0 ee223040 ed7e9f04 ee22346c b1517846
<0> ed7e9ef4 00000000 00000016 0000001c 00000000 b166ae1c ef422800 affdb8ab
Call Trace:
b144dee45  inet_csk_get_port+0x1a5/0x27c
b1517846 inet6_bind+0x1b5/0x293
b14aec6c sys_bind+0x63
b1524fdc ipv6_setsockopt+0x38/0x88
b14e0cd7 tcp_setsockopt+0x1b/0x36
b14afa68 sock_common_setsockopt+0x12
b14ae653 sys_setsockopt+0x5e
sys_socketcall
...

GDB says:

0xb1535b72 is in inet6_csk_bind_conflict
(/usr/src/linux-2.6.git/include/net/ipv6.h:376).
371     void ip6_frag_init(struct inet_frag_queue *q, void *a);
372     int ip6_frag_match(struct inet_frag_queue *q, void *a);
373
374     static inline int ipv6_addr_any(const struct in6_addr *a)
375     {
376             return ((a->s6_addr32[0] | a->s6_addr32[1] |
377                      a->s6_addr32[2] | a->s6_addr32[3] ) == 0);
378     }
379
380     static inline int ipv6_addr_loopback(const struct in6_addr *a)


Thanks,
      Manuel Lauss

Re: 2.6.34-rc5+: oops in IPv6

[Tetsuo Handa]

Manuel Lauss wrote:
> 2.6.34-rc5-00204-gddc9b34  dies when sshd (openssh 5.5) is started
> Last pull I made on April 23 was fine.

This seems a regression introduced while handling
"PROBLEM: Linux kernel 2.6.31 IPv4 TCP fails to open hugeamount of outgoing connections (unable to bind ... )"
problem. It is in https://bugzilla.kernel.org/show_bug.cgi?id=15847 .

Regards.

Re: 2.6.34-rc5+: oops in IPv6

[Maciej Rutecki]

On niedziela, 25 kwietnia 2010 o 16:45:41 Manuel Lauss wrote:
> 2.6.34-rc5-00204-gddc9b34  dies when sshd (openssh 5.5) is started
> Last pull I made on April 23 was fine.
> 
> (transcribed from a photo):
> 
> BUG: unable to handle kernel NULL pointer dereference at 00000004
> IP: [<b1535b72>] inet6_csk_bind_conflict+0x6e/0xb0

I created a Bugzilla entry at 
https://bugzilla.kernel.org/show_bug.cgi?id=15857
for your bug report, please add your address to the CC list in there, thanks!

-- 
Maciej Rutecki
http://www.maciek.unixy.pl

Re: 2.6.34-rc5+: oops in IPv6

[David Miller]

From: Maciej Rutecki <maciej.rutecki@gmail.com>
Date: Mon, 26 Apr 2010 20:58:24 +0200

> On niedziela, 25 kwietnia 2010 o 16:45:41 Manuel Lauss wrote:
>> 2.6.34-rc5-00204-gddc9b34  dies when sshd (openssh 5.5) is started
>> Last pull I made on April 23 was fine.
>> 
>> (transcribed from a photo):
>> 
>> BUG: unable to handle kernel NULL pointer dereference at 00000004
>> IP: [<b1535b72>] inet6_csk_bind_conflict+0x6e/0xb0
> 
> I created a Bugzilla entry at 
> https://bugzilla.kernel.org/show_bug.cgi?id=15857
> for your bug report, please add your address to the CC list in there, thanks!

It's fixed in Linus's tree like an hour after he reported this.

Re: 2.6.34-rc5+: oops in IPv6

[Maciej Rutecki]

On poniedziałek, 26 kwietnia 2010 o 21:02:00 David Miller wrote:
> From: Maciej Rutecki <maciej.rutecki@gmail.com>
> Date: Mon, 26 Apr 2010 20:58:24 +0200
> 
> > On niedziela, 25 kwietnia 2010 o 16:45:41 Manuel Lauss wrote:
> >> 2.6.34-rc5-00204-gddc9b34  dies when sshd (openssh 5.5) is started
> >> Last pull I made on April 23 was fine.
> >>
> >> (transcribed from a photo):
> >>
> >> BUG: unable to handle kernel NULL pointer dereference at 00000004
> >> IP: [<b1535b72>] inet6_csk_bind_conflict+0x6e/0xb0
> >
> > I created a Bugzilla entry at
> > https://bugzilla.kernel.org/show_bug.cgi?id=15857
> > for your bug report, please add your address to the CC list in there,
> > thanks!
> 
> It's fixed in Linus's tree like an hour after he reported this.
> 

Thanks for information. Closed.

Regards
-- 
Maciej Rutecki
http://www.maciek.unixy.pl