Segfault at DllMain() about loadlibrary HOT 8 CLOSED

$ zgrep MODIFY_LDT /proc/config.gz
CONFIG_MODIFY_LDT_SYSCALL=y

Program received signal SIGSEGV, Segmentation fault.
0xf6da4f3d in ?? ()
(gdb) bt
#0  0xf6da4f3d in ?? ()
#1  0x0804c534 in main (argc=<optimized out>, argv=<optimized out>, envp=<optimized out>) at mpclient.c:187
(gdb) x/i $pc
=> 0xf6da4f3d:	pushl  %fs:0x0
(gdb) i r
eax            0xffffbc4c	-17332
ecx            0x43a3	17315
edx            0x0	0
ebx            0xf6912110	-158260976
esp            0xffffbc38	0xffffbc38
ebp            0xffffbc58	0xffffbc58
esi            0xf7eb1000	-135589888
edi            0xffffbd0c	-17140
eip            0xf6da4f3d	0xf6da4f3d
eflags         0x10286	[ PF SF IF RF ]
cs             0x23	35
ss             0x2b	43
ds             0x2b	43
es             0x2b	43
fs             0x0	0
gs             0x63	99
(gdb) frame 1
#1  0x0804c534 in main (argc=<optimized out>, argv=<optimized out>, envp=<optimized out>) at mpclient.c:187
187	    image.entry((PVOID) 'MPEN', DLL_PROCESS_ATTACH, NULL);
(gdb) p image
$1 = {name = "engine/mpengine.dll", '\000' <repeats 108 times>, entry = 0xf6da48c8, image = 0xf6912008, 
  size = 10395648, type = 2, nt_hdr = 0xf6912110, opt_hdr = 0xf6912128}

Dump of assembler code for function setup_nt_threadinfo:
626	{
   0x08057330 <+0>:	sub    $0x1c,%esp
   0x08057338 <+8>:	mov    0x20(%esp),%edx

627	    static EXCEPTION_FRAME ExceptionFrame;
628	    static NT_TIB ThreadInfo;
629	    struct user_desc pebdescriptor = {
   0x08057333 <+3>:	movzbl 0xc(%esp),%eax
   0x0805733c <+12>:	movl   $0x0,(%esp)
   0x08057343 <+19>:	movl   $0x8096628,0x4(%esp)
   0x0805734b <+27>:	and    $0xffffff80,%eax
   0x0805734e <+30>:	movl   $0x1c,0x8(%esp)
   0x08057356 <+38>:	or     $0x41,%eax
   0x08057359 <+41>:	mov    %al,0xc(%esp)

630	        .entry_number       = 0,
631	        .base_addr          = (uintptr_t) &ThreadInfo,
632	        .limit              = sizeof ThreadInfo,
633	        .seg_32bit          = 1,
634	        .contents           = 0,
635	        .read_exec_only     = 0,
636	        .limit_in_pages     = 0,
637	        .seg_not_present    = 0,
638	        .useable            = 1,
639	    };
640	
641	    if (ExceptionHandler) {
   0x0805735d <+45>:	test   %edx,%edx
   0x0805735f <+47>:	je     0x805737b <setup_nt_threadinfo+75>

642	        if (ThreadInfo.ExceptionList) {
643	            DebugLog("Resetting ThreadInfo.ExceptionList");
644	        }
645	        ExceptionFrame.handler      = ExceptionHandler;
   0x08057361 <+49>:	mov    %edx,0x8096624

646	        ExceptionFrame.prev         = NULL;
   0x08057367 <+55>:	movl   $0x0,0x8096620

647	        ThreadInfo.ExceptionList    = &ExceptionFrame;
   0x08057371 <+65>:	movl   $0x8096620,0x8096628

648	    }
649	
650	    if (syscall(__NR_modify_ldt, LDT_WRITE, &pebdescriptor, sizeof pebdescriptor) != 0) {
   0x0805737b <+75>:	push   $0x10
   0x0805737d <+77>:	lea    0x4(%esp),%eax
   0x08057381 <+81>:	push   %eax
   0x08057382 <+82>:	push   $0x1
   0x08057384 <+84>:	push   $0x7b
   0x08057386 <+86>:	call   0x8048fd0 <syscall@plt>
   0x0805738b <+91>:	add    $0x10,%esp
   0x08057390 <+96>:	test   %eax,%eax
   0x08057392 <+98>:	jne    0x80573a0 <setup_nt_threadinfo+112>

651	        return false;
   0x0805738e <+94>:	xor    %edx,%edx

652	    }
653	
654	    // Install descriptor
655	    asm("mov %[segment], %%fs" :: [segment] "r"(7));
   0x08057394 <+100>:	mov    $0x7,%eax
   0x08057399 <+105>:	mov    %eax,%fs

656	
657	    return true;
   0x0805739b <+107>:	mov    $0x1,%edx

658	}
   0x080573a0 <+112>:	mov    %edx,%eax
   0x080573a2 <+114>:	add    $0x1c,%esp
   0x080573a5 <+117>:	ret    

End of assembler dump.