ARM 内核crash示例
来自Jack's Lab
概述
CPU: 0 Tainted: P (2.6.36.4jackslab #6) PC is at _ctf_isenabled+0x28/0x8c [ctf] LR is at ip_conntrack_is_ipc_allowed+0x74/0xa4 pc : [<bf293934>] lr : [<c03b2c0c>] psr: a0000113 sp : cd34bc28 ip : cd34bc84 fp : 00000000 r10: 00000002 r9 : c040dd8c r8 : cf160000 r7 : 00000000 r6 : c8215a30 r5 : bf296c60 r4 : cf160000 r3 : 00000000 r2 : c8215a30 r1 : cf160000 r0 : bf296c60 Flags: NzCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user Control: 10c53c7d Table: 9d34004a DAC: 00000015 Process insmod (pid: 1138, stack limit = 0xcd34a270) Stack: (0xcd34bc28 to 0xcd34c000) bc20: bf29390c cf1fa8c0 cf160000 c03b2c0c 00000002 cf1fa8c0 bc40: 00000000 c03b2c68 c05e60cc 00000000 c0614404 cf1fa8c0 00000000 c0574a50 bc60: 0000003a cd34bcac c05e5fe4 c05e60cc 00000000 cd34bc84 00000028 00000000 bc80: 00000000 000002ff 00000000 00000000 02000000 000a0000 000080fe 00000000 bca0: ff9f0402 49a402fe 013a0000 000080fe 00000000 ff9f0402 49a402fe 000a0000 bcc0: 000002ff 00000000 00000000 02000000 003a0085 00000028 a0000113 3a000021 bce0: c033f5b0 cf1fa8c0 00000000 00000001 00000000 cf160000 c040dd8c 00000000 bd00: 80000000 c04390d8 00000000 00000000 cf1fa8c0 cd34bd6c cf1fa8c0 c06151f4 bd20: 00000000 c057407c c040dd8c cf1fa8c0 00000000 c0614404 cf1fa8c0 cd34bd6c bd40: 00000000 cf160000 c06151f4 0000000a c06149d8 c03af818 00000000 cd34bd6c bd60: c040dd8c 80000000 0000082d c05e603c 00000000 c0614404 cf160000 cf1fa8c0 bd80: cf0a8a00 cf1fa8e8 0000dd86 cf160000 c06149d8 c040e3a8 00000000 c040dd8c bda0: 80000000 cf160000 cf1fa8c0 cf160000 c06149b8 c05e449c 00000000 c0388f00 bdc0: 00000001 cf1fa980 00000030 bf00cdc4 cf0a8400 c8216400 00000000 c821647c bde0: 00000000 c8216414 00100100 00000002 c0614a40 c03895e8 c821647c c8216474 be00: c05c2080 c821647c c8216400 00000001 0000012c 00000040 c8216408 c06148cc be20: ffff8f50 c0572fc8 c05c204c cd34a000 00000001 c05c204c 00000102 c013d140 be40: c05ce3dc 00000009 00000000 c057df94 00000000 00000000 000000b3 00000003 be60: 00080000 000000b3 00000000 000000b3 00000001 00000000 cd34a000 00000ae6 be80: d439b322 c0165a84 00000000 c057dc2c 80000013 ffffffff f0100100 c057d728 bea0: 00000000 00000000 55555555 00000000 cd418000 00002b33 00015cda 0000046f bec0: cd4191bc 00000028 00000ae6 d439b322 bf6478e8 cd34bee8 c02c3fe0 c02c5590 bee0: 80000013 ffffffff 00010074 bf63de78 bf6895a8 bf63de84 00000961 bf63e2d8 bf00: 0000194e c018b7c0 bf63de78 cf4e6368 d439b10b c047af60 bf63dfac 00079048 bf20: cf4e4440 d4004000 00457308 d439b334 d439b10b d43cc25c cd418000 003962d8 bf40: 003af628 00000000 00000000 0000002f 00000030 00000025 00000000 0000001f bf60: 00000000 00000000 cf1a27e0 00000002 cfb6f140 00000000 cf1a27e0 c01ce57c bf80: cf1a27e0 00079008 401fa008 00079048 00000080 c013fc28 cd34a000 00000000 bfa0: 00000000 c013fa80 00079008 401fa008 401fa008 00457308 00079048 00000000 bfc0: 00079008 401fa008 00079048 00000080 00000000 bed5ba58 40109000 00000000 bfe0: 40162e30 bed5b824 00012474 40162e40 20000010 401fa008 e1833c02 e28d2010 [<bf293934>] (PC is at _ctf_isenabled+0x28/0x8c [ctf]) [<bf293934>] (_ctf_isenabled+0x28/0x8c [ctf]) from [<c03b2c0c>] (ip_conntrack_is_ipc_allowed+0x74/0xa4) [<c03b2c0c>] (ip_conntrack_is_ipc_allowed+0x74/0xa4) from [<c03b2c68>] (ip_conntrack_ipct_add+0x2c/0x70c) [<c03b2c68>] (ip_conntrack_ipct_add+0x2c/0x70c) from [<c04390d8>] (__ipv6_conntrack_in.clone.6+0xbc/0xc4) [<c04390d8>] (__ipv6_conntrack_in.clone.6+0xbc/0xc4) from [<c057407c>] (nf_iterate+0x4c/0x90) [<c057407c>] (nf_iterate+0x4c/0x90) from [<c03af818>] (nf_hook_slow+0x90/0x16c) [<c03af818>] (nf_hook_slow+0x90/0x16c) from [<c040e3a8>] (ipv6_rcv+0x5ec/0x700) [<c040e3a8>] (ipv6_rcv+0x5ec/0x700) from [<c0388f00>] (__netif_receive_skb+0x470/0x4d0) [<c0388f00>] (__netif_receive_skb+0x470/0x4d0) from [<c03895e8>] (process_backlog+0x7c/0x1a0) [<c03895e8>] (process_backlog+0x7c/0x1a0) from [<c0572fc8>] (net_rx_action+0x78/0x178) [<c0572fc8>] (net_rx_action+0x78/0x178) from [<c057df94>] (__do_softirq+0x9c/0x130) [<c057df94>] (__do_softirq+0x9c/0x130) from [<c0165a84>] (irq_exit+0x48/0x68) [<c0165a84>] (irq_exit+0x48/0x68) from [<c057dc2c>] (asm_do_IRQ+0x8c/0xc8) [<c057dc2c>] (asm_do_IRQ+0x8c/0xc8) from [<c057d728>] (__irq_svc+0x48/0xe8) [<c057d728>] (__irq_svc+0x48/0xe8) from [<c02c5590>] (__sw_hweight32+0x4/0x44) [<c02c5590>] (__sw_hweight32+0x4/0x44) from [<c02c3fe0>] (__bitmap_weight+0x38/0x7c) [<c02c3fe0>] (__bitmap_weight+0x38/0x7c) from [<c018b7c0>] (sys_init_module+0xd78/0x1868) [<c018b7c0>] (sys_init_module+0xd78/0x1868) from [<c013fa80>] (ret_fast_syscall+0x0/0x30) Code: 1a000001 e1a00004 e8bd8038 e5903098 (e5930004) ---[ end trace 98c7316fed763288 ]--- Kernel panic - not syncing: Fatal exception in interrupt [<c0145c08>] (unwind_backtrace+0x0/0xe4) from [<c047405c>] (panic+0x68/0x18c) [<c047405c>] (panic+0x68/0x18c) from [<c01435b4>] (die+0x194/0x1dc) [<c01435b4>] (die+0x194/0x1dc) from [<c0146cbc>] (__do_kernel_fault+0x64/0x84) [<c0146cbc>] (__do_kernel_fault+0x64/0x84) from [<c0146ea0>] (do_page_fault+0x1c4/0x1d8) [<c0146ea0>] (do_page_fault+0x1c4/0x1d8) from [<c013f374>] (do_DataAbort+0x30/0x98) [<c013f374>] (do_DataAbort+0x30/0x98) from [<c057d6cc>] (__dabt_svc+0x4c/0x60) Exception stack(0xcd34bbe0 to 0xcd34bc28) bbe0: bf296c60 cf160000 c8215a30 00000000 cf160000 bf296c60 c8215a30 00000000 bc00: cf160000 c040dd8c 00000002 00000000 cd34bc84 cd34bc28 c03b2c0c bf293934 bc20: a0000113 ffffffff [<c057d6cc>] (__dabt_svc+0x4c/0x60) from [<bf293934>] (_ctf_isenabled+0x28/0x8c [ctf]) [<bf293934>] (_ctf_isenabled+0x28/0x8c [ctf]) from [<c03b2c0c>] (ip_conntrack_is_ipc_allowed+0x74/0xa4) [<c03b2c0c>] (ip_conntrack_is_ipc_allowed+0x74/0xa4) from [<c03b2c68>] (ip_conntrack_ipct_add+0x2c/0x70c) [<c03b2c68>] (ip_conntrack_ipct_add+0x2c/0x70c) from [<c04390d8>] (__ipv6_conntrack_in.clone.6+0xbc/0xc4) [<c04390d8>] (__ipv6_conntrack_in.clone.6+0xbc/0xc4) from [<c057407c>] (nf_iterate+0x4c/0x90) [<c057407c>] (nf_iterate+0x4c/0x90) from [<c03af818>] (nf_hook_slow+0x90/0x16c) [<c03af818>] (nf_hook_slow+0x90/0x16c) from [<c040e3a8>] (ipv6_rcv+0x5ec/0x700) [<c040e3a8>] (ipv6_rcv+0x5ec/0x700) from [<c0388f00>] (__netif_receive_skb+0x470/0x4d0) [<c0388f00>] (__netif_receive_skb+0x470/0x4d0) from [<c03895e8>] (process_backlog+0x7c/0x1a0) [<c03895e8>] (process_backlog+0x7c/0x1a0) from [<c0572fc8>] (net_rx_action+0x78/0x178) [<c0572fc8>] (net_rx_action+0x78/0x178) from [<c057df94>] (__do_softirq+0x9c/0x130) [<c057df94>] (__do_softirq+0x9c/0x130) from [<c0165a84>] (irq_exit+0x48/0x68) [<c0165a84>] (irq_exit+0x48/0x68) from [<c057dc2c>] (asm_do_IRQ+0x8c/0xc8) [<c057dc2c>] (asm_do_IRQ+0x8c/0xc8) from [<c057d728>] (__irq_svc+0x48/0xe8) [<c057d728>] (__irq_svc+0x48/0xe8) from [<c02c5590>] (__sw_hweight32+0x4/0x44) [<c02c5590>] (__sw_hweight32+0x4/0x44) from [<c02c3fe0>] (__bitmap_weight+0x38/0x7c) [<c02c3fe0>] (__bitmap_weight+0x38/0x7c) from [<c018b7c0>] (sys_init_module+0xd78/0x1868) [<c018b7c0>] (sys_init_module+0xd78/0x1868) from [<c013fa80>] (ret_fast_syscall+0x0/0x30) Trying to store crash CPU1: stopping [<c0145c08>] (unwind_backtrace+0x0/0xe4) from [<c013f2cc>] (do_IPI+0xd8/0x150) [<c013f2cc>] (do_IPI+0xd8/0x150) from [<c057d728>] (__irq_svc+0x48/0xe8) Exception stack(0xcd07bad0 to 0xcd07bb18) bac0: c8225ea0 00000000 00000001 00000000 bae0: c8225ea0 cd03a700 cf821d40 c04786e8 cd07a000 cd03a87c 00000001 cd07bb64 bb00: 00000001 cd07bb18 c0474a1c c0476a7c 00000013 ffffffff [<c057d728>] (__irq_svc+0x48/0xe8) from [<c0476a7c>] (_raw_spin_unlock_irq+0x18/0x40) [<c0476a7c>] (_raw_spin_unlock_irq+0x18/0x40) from [<c0474a1c>] (schedule+0x4c4/0x6c4) [<c0474a1c>] (schedule+0x4c4/0x6c4) from [<c0475d94>] (schedule_hrtimeout_range_clock+0x124/0x164) [<c0475d94>] (schedule_hrtimeout_range_clock+0x124/0x164) from [<c01de600>] (poll_schedule_timeout+0x3c/0x60) [<c01de600>] (poll_schedule_timeout+0x3c/0x60) from [<c01df1fc>] (do_sys_poll+0x2bc/0x364) [<c01df1fc>] (do_sys_poll+0x2bc/0x364) from [<c01df348>] (sys_poll+0x5c/0xbc) [<c01df348>] (sys_poll+0x5c/0xbc) from [<c013fa80>] (ret_fast_syscall+0x0/0x30)