All pastes #537932 Raw Edit

apachebug-tntgs

public text v1 · immutable
·published 2007-06-04 22:02 UTC
rendered paste body
/var/log/messages:

May 27 16:19:36 BUG: unable to handle kernel NULL pointer dereference at virtual address 00000b78
May 27 16:19:36 printing eip:
May 27 16:19:36 c01340c0
May 27 16:19:36 *pde = 00000000
May 27 16:19:36 Oops: 0000 [#1]
May 27 16:19:36 Modules linked in: snd_emu10k1 snd_util_mem snd_hwdep
May 27 16:19:36 CPU:    0
May 27 16:19:36 EIP:    0060:[<c01340c0>]    Not tainted VLI
May 27 16:19:36 EFLAGS: 00210206   (2.6.17-gentoo-r8 #3)
May 27 16:19:36 EIP is at unmap_vmas+0x12c/0x41a
May 27 16:19:36 eax: 00000b78   ebx: c13140c0   ecx: 00000b78   edx: b7a96b00
May 27 16:19:36 esi: b7a90000   edi: c6e49a3c   ebp: 00000020   esp: cfaf1f10
May 27 16:19:36 ds: 007b   es: 007b   ss: 0068
May 27 16:19:36 Process apache2 (pid: 20606, threadinfo=cfaf0000 task=c2615580)
May 27 16:19:36 Stack: 00000000 c7fff8b4 cfaf1f70 000333be 00000000 00000001 b7a96b00 00000b78
May 27 16:19:36 db71f5c0 c0413a6c 00000000 fffffffc 00000b78 b7a96b00 00000000 cfaf1f70
May 27 16:19:36 c907c5f4 db71f5c0 cfaf1fac c0136458 ffffffff cfaf1f6c 00000000 00000da1
May 27 16:19:36 Call Trace:
May 27 16:19:36 <c0136458> exit_mmap+0x50/0xb9  <c0113074> mmput+0x1b/0x5e
May 27 16:19:36 <c0116caf> do_exit+0x164/0x619  <c01171b6> sys_exit_group+0x0/0xd
May 27 16:19:36 <c0102967> syscall_call+0x7/0xb
May 27 16:19:36 Code: 4c 24 1c 25 00 00 c0 ff 89 44 24 18 89 c2 8b 44 24 34 4a 89 4c 24 30 48 39 c2 8b 54 24 34 0f 42 54 24 18 89 54 24 18 8b 4$
May 27 16:19:36 EIP: [<c01340c0>] unmap_vmas+0x12c/0x41a SS:ESP 0068:cfaf1f10
May 27 16:19:36 <1>Fixing recursive fault but reboot is needed!

access_log (seconds leading up to kernel fault):

66.221.181.10 - - [27/May/2007:11:57:07 -0500] "GET /email//README HTTP/1.1" 404 275
66.221.181.10 - - [27/May/2007:11:57:07 -0500] "GET /webmail//README HTTP/1.1" 404 277
66.221.181.10 - - [27/May/2007:11:57:08 -0500] "GET /newmail//README HTTP/1.1" 404 277
66.221.181.10 - - [27/May/2007:11:57:08 -0500] "GET /mails//README HTTP/1.1" 404 275
66.221.181.10 - - [27/May/2007:11:57:08 -0500] "GET /mailz//README HTTP/1.1" 404 275
66.221.181.10 - - [27/May/2007:12:55:57 -0500] "GET //chat/messagesL.php3 HTTP/1.1" 404 282
66.221.181.10 - - [27/May/2007:12:55:57 -0500] "GET /chat//chat/messagesL.php3 HTTP/1.1" 404 287
66.221.181.10 - - [27/May/2007:12:55:57 -0500] "GET /phpchat//chat/messagesL.php3 HTTP/1.1" 404 290
66.221.181.10 - - [27/May/2007:12:55:57 -0500] "GET /PhpMyChat//chat/messagesL.php3 HTTP/1.1" 404 292
66.221.181.10 - - [27/May/2007:12:55:57 -0500] "GET /chatroom//chat/messagesL.php3 HTTP/1.1" 404 291
66.221.181.10 - - [27/May/2007:12:55:57 -0500] "GET /chats//chat/messagesL.php3 HTTP/1.1" 404 288
66.221.181.10 - - [27/May/2007:12:55:57 -0500] "GET /forum//chat/messagesL.php3 HTTP/1.1" 404 288
66.221.181.10 - - [27/May/2007:12:55:57 -0500] "GET /php/phpmychat//chat/messagesL.php3 HTTP/1.1" 404 296
66.221.181.10 - - [27/May/2007:12:55:57 -0500] "GET /phpMyChat-0.14.2//chat/messagesL.php3 HTTP/1.1" 404 299
66.221.181.10 - - [27/May/2007:12:55:57 -0500] "GET /phpMyChat-0.14.5//chat/messagesL.php3 HTTP/1.1" 404 299
66.221.181.10 - - [27/May/2007:12:55:58 -0500] "GET /phpMyChat//chat/messagesL.php3 HTTP/1.1" 404 292
66.221.181.10 - - [27/May/2007:12:55:59 -0500] "GET /phpMyChat-0.14.3//chat/messagesL.php3 HTTP/1.1" 404 299
66.221.181.10 - - [27/May/2007:12:55:59 -0500] "GET /phpMyChat-0.14.4//chat/messagesL.php3 HTTP/1.1" 404 299
66.221.181.10 - - [27/May/2007:12:56:02 -0500] "GET /forums//chat/messagesL.php3 HTTP/1.1" 404 289
66.221.181.10 - - [27/May/2007:12:56:02 -0500] "GET /chat2//chat/messagesL.php3 HTTP/1.1" 404 288
66.221.181.10 - - [27/May/2007:12:56:02 -0500] "GET /chat3//chat/messagesL.php3 HTTP/1.1" 404 288
66.221.181.10 - - [27/May/2007:12:56:02 -0500] "GET /community//chat/messagesL.php3 HTTP/1.1" 404 292
66.221.181.10 - - [27/May/2007:14:50:44 -0500] "GET //xmlrpc.php HTTP/1.1" 404 273
66.221.181.10 - - [27/May/2007:14:50:44 -0500] "GET //xmlrpc/xmlrpc.php HTTP/1.1" 404 280
66.221.181.10 - - [27/May/2007:14:50:44 -0500] "GET //xmlsrv/xmlrpc.php HTTP/1.1" 404 280
66.221.181.10 - - [27/May/2007:14:50:44 -0500] "GET //blog/xmlrpc.php HTTP/1.1" 404 278
66.221.181.10 - - [27/May/2007:14:50:44 -0500] "GET //drupal/xmlrpc.php HTTP/1.1" 404 280
66.221.181.10 - - [27/May/2007:14:50:44 -0500] "GET //community/xmlrpc.php HTTP/1.1" 404 283
66.221.181.10 - - [27/May/2007:14:50:44 -0500] "GET //blogs/xmlrpc.php HTTP/1.1" 404 279
66.221.181.10 - - [27/May/2007:14:50:51 -0500] "GET //blogtest/xmlsrv/xmlrpc.php HTTP/1.1" 404 289
66.221.181.10 - - [27/May/2007:14:50:51 -0500] "GET //b2/xmlsrv/xmlrpc.php HTTP/1.1" 404 283
66.221.181.10 - - [27/May/2007:14:50:54 -0500] "GET //wordpress/xmlrpc.php HTTP/1.1" 404 283
66.221.181.10 - - [27/May/2007:14:50:54 -0500] "GET //phpgroupware/xmlrpc.php HTTP/1.1" 404 286
66.221.181.10 - - [27/May/2007:16:19:31 -0500] "GET //awstats.pl HTTP/1.1" 404 273
66.221.181.10 - - [27/May/2007:16:19:31 -0500] "GET //cgi-bin/awstats.pl HTTP/1.1" 404 281
66.221.181.10 - - [27/May/2007:16:19:31 -0500] "GET //scgi-bin/awstats.pl HTTP/1.1" 404 282
66.221.181.10 - - [27/May/2007:16:19:31 -0500] "GET //awstats/awstats.pl HTTP/1.1" 404 281
66.221.181.10 - - [27/May/2007:16:19:31 -0500] "GET //cgi-bin/awstats/awstats.pl HTTP/1.1" 404 289
66.221.181.10 - - [27/May/2007:16:19:31 -0500] "GET //scgi-bin/awstats/awstats.pl HTTP/1.1" 404 290
66.221.181.10 - - [27/May/2007:16:19:31 -0500] "GET //cgi/awstats/awstats.pl HTTP/1.1" 404 285
66.221.181.10 - - [27/May/2007:16:19:31 -0500] "GET //scgi/awstats/awstats.pl HTTP/1.1" 404 286
66.221.181.10 - - [27/May/2007:16:19:31 -0500] "GET //scripts/awstats.pl HTTP/1.1" 404 281
66.221.181.10 - - [27/May/2007:16:19:31 -0500] "GET //cgi-bin/awstats/awstats.pl HTTP/1.1" 404 289
66.221.181.10 - - [27/May/2007:16:19:32 -0500] "GET //scgi-bin/awstats/awstats.pl HTTP/1.1" 404 290
66.221.181.10 - - [27/May/2007:16:19:33 -0500] "GET //cgi-bin/stats/awstats.pl HTTP/1.1" 404 287
66.221.181.10 - - [27/May/2007:16:19:33 -0500] "GET //scgi-bin/stats/awstats.pl HTTP/1.1" 404 288
66.221.181.10 - - [27/May/2007:16:19:33 -0500] "GET //stats/awstats.pl HTTP/1.1" 404 279

lsof output:

apache2   20606 apache  cwd       DIR        3,2    4096          2 /
apache2   20606 apache  rtd       DIR        3,2    4096          2 /
apache2   20606 apache  txt   unknown                               /proc/20606/exe (readlink: No such file or directory)
apache2   20606 apache    0r      CHR        1,3               1114 /dev/null
apache2   20606 apache    1w      CHR        1,3               1114 /dev/null
apache2   20606 apache    2w      REG        3,2  364317    1277287 /var/log/apache2/error_log
apache2   20606 apache    3u     IPv4  100098588                TCP *:http (LISTEN)
apache2   20606 apache    6w      REG        3,2  364317    1277287 /var/log/apache2/error_log
apache2   20606 apache    7w      REG        3,2  873204    1277296 /var/log/apache2/access_log

relevant ps -ef output:

sbin # ps -ef
UID        PID  PPID  C STIME TTY          TIME CMD
root         1     0  0 May09 ?        00:00:00 init [3]
apache   20606     1  0 May14 ?        00:01:11 [apache2]

ps -aux output:

USER       PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
apache   20606  0.0  0.0      0     0 ?        D    May14   1:11 [apache2]