[Bugme-new] [Bug 12353] New: Stable reproducable exception in PPP (dial-up-modem) module causes SMP systems to crash.

[bugme-daemon at bugzilla.kernel.org]

http://bugzilla.kernel.org/show_bug.cgi?id=12353

           Summary: Stable reproducable exception in PPP (dial-up-modem)
                    module causes SMP systems to crash.
           Product: Other
           Version: 2.5
     KernelVersion: 2.6.28 (mainline, vanilla)
          Platform: All
        OS/Version: Linux
              Tree: Mainline
            Status: NEW
          Severity: high
          Priority: P1
         Component: Modules
        AssignedTo: other_modules at kernel-bugs.osdl.org
        ReportedBy: Markus_Daniel at gmx.de
                CC: paulus at samba.org


Latest working kernel version: 
unknown (I have just a dial-up connection and cannot test this out easily.)

Earliest failing kernel version:
at least since 2.6.27 (vanilla)

Distribution: 
SuSE 10.2 (32bit)

Hardware Environment:
AMD X2 5000+
NVIDIA nForce 630a  (no X11/GL modules loaded)
External serial 56k dial-up modem
4GB Ram

Software Environment:
- gcc 4.1.2 (shipped)
- vanilla kernel just with
  - IP4 / PPP / VESA / nForce-PATA / USB / ACPI
- IDE boot (not SATA) via kernel included nForce drivers
- boot into runlevel 3 (no X11)

Problem Description:
A fatal exception in the interrupt handler of the PPP module brings reliable
down SMP systems.

Steps to reproduce:
boot in runlevel 3
login as root
> ifup modem0
> wget www.anysite.com
press _quickly_ Control+Alt+F10 and you can see the following:

kernel BUG at net/core/skbuff.c:147!
invaild opcode: 0000 [#1] SMP DEBUG_PAGEALLOC
last sysfs file: /sys/devices/pci0000:00/0000:00:18.3/resource
Modules linked in:

Pid: 7, comm: ksoftirqd/1 Not tainted (2.6.28 #2) To Be Filled By O.E.M.
EIP: 0060:[<c03a026c>] EFLAGS: 00010287 CPU: 1
EIP is at skb_under_panic+0x5c/0x60
EAX: 00000077 EBX: f66f1000 ECX: c012775e EDX: 0227b000
ESI: 00000000 EDI: f6be9600 EBP: f7075ef0 ESP: f7075ec4
 DS: 007b ES: 007b FS: 00d8 GS: 0000 SS: 0068
Process ksoftirqd/1 (pid: 7, ti=f7074000 task=f7073130 task.ti=f7074000)
Stack:
 c050e4c4 c02dd812 000005e0 00000002 f66f1000 f66f0fff f66f1fdf f66f1600
 c04dd210 f6bb7140 f6bb7140 f7075efc c03a179a 00000000 f7075f28 c02dd812
 f6bb7140 f6be9600 f7075f28 c040d34f 00000000 00000001 f6be9000 f6bb7140
all Trace:
 [<c02dd812>] ? ppp_receive_frame+0x212/0x630
 [<c03a179a>] ? skb_push+0x2a/0x40
 [<c02dd812>] ? ppp_receive_frame+0x212/0x630
 [<c040d34f>] ? _spin_lock_bh+0x3f/0x50
 [<c02dee39>] ? ppp_input+0x99/0x110
 [<c02ddcc0>] ? ppp_input_error+0x90/0xb0
 [<c02dfbdf>] ? ppp_async_process+0x1f/0x70
 [<c012bff6>] ? tasklet_action+0x56/0xc0
 [<c012b957>] ? __do_softirq+0x87/0x150
 [<c012bbe0>] ? ksoftirq+0x0/0x0d
 [<c012ba5b>] ? do_softirq+0x3b/0x50
 [<c012bc37>] ? ksoftirqd+0x57/0xd0
 [<c0139cf2>] ? kthread+0x42/0x70
 [<c0139cb0>] ? kthread+0x0/0x70
 [<c0103eab>] ? kernel_thread_helper+0x7/0x1c
Code: 00 00 89 5c 24 14 8b 98 90 00 00 00 89 54 24 0c 89 5c 24 10 b8 40 40 50
89 4c 24 c7 04 24 c4 e4 50 c0 89 44 24 08 e8 04 7b
 d8 ff <0f> 0b eb fe 55 89 e5 56 53 bb 10 d2 4d c0 83 ec 24 8b 70 14 85
EIP: [<c03a026c>] skb_under_panic+0x5c/0x60 SS:ESP 0068:f7075ec4
Kernal panic - not syncing: Fatal exception in interrupt

As I had to copy this dialog manually, it maybe contain transcription error(s). 
If you have further questions, just write an email.
And yes, I can also apply your patches to test things out.


-- 
Configure bugmail: http://bugzilla.kernel.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.