Oops with IrDA in 2.6.15-23-686

Bug #46947 reported by Johan Kiviniemi
60
Affects Status Importance Assigned to Milestone
linux-source-2.6.15 (Ubuntu)
Fix Released
Medium
Ben Collins

Bug Description

I don't know exactly how this should be investigated further, because i am not using IrDA. I just happened to notice this while reading dmesg.

This does NOT happen with 2.6.15-22-686.

The essential lines from dmesg:

Linux version 2.6.15-23-686 (buildd@rothera) (gcc version 4.0.3 (Ubuntu 4.0.3-1ubuntu5)) #1 SMP PREEMPT Tue May 23 14:03:07 UTC 2006
irda_init()
NET: Registered protocol family 23
**** SET: Misaligned resource pointer: db5ecc42 Type 00 Len 42
**** SET: Misaligned resource pointer: db5eccc6 Type 07 Len 0
pnp: Device 00:0b activated.
nsc_ircc_pnp_probe() : Found cfg_base 0x000 ; firbase 0x2F8 ; irq 3 ; dma 1.
nsc-ircc, Found chip at base=0x000
nsc-ircc, driver loaded (Dag Brattli)
IrDA: Registered device irda0
nsc-ircc, Found dongle: HP HSDL-1100/HSDL-2100
nsc-ircc, Found chip at base=0x02e
nsc-ircc, driver loaded (Dag Brattli)
nsc_ircc_open(), can't get iobase of 0x2f8
Unable to handle kernel NULL pointer dereference at virtual address 00000004
printing eip:
c013c886
*pde = 00000000
Oops: 0002 [#1]
PREEMPT SMP
Modules linked in: pcmcia irtty_sir sir_dev nsc_ircc irda tsdev floppy crc_ccitt parport_pc parport yenta_socket rsrc_nonstatic pcmcia_core ltserial ltmodem psmouse serio_raw snd_intel8x0 snd_ac97_codec snd_ac97_bus snd_pcm_oss snd_mixer_oss snd_pcm snd_timer e100 mii snd soundcore snd_page_alloc pcspkr hw_random shpchp pci_hotplug intel_agp agpgart evdev ext3 jbd ide_generic uhci_hcd usbcore ide_cd cdrom ide_disk piix generic thermal processor fan fbcon tileblit font bitblit softcursor capability commoncap
CPU: 0
EIP: 0060:[<c013c886>] Tainted: P VLI
EFLAGS: 00010092 (2.6.15-23-686)
EIP is at finish_wait+0x36/0x70
eax: 00000202 ebx: dbd07fd8 ecx: 00000000 edx: 00000000
esi: dbd07fcc edi: e0a562a8 ebp: 00000000 esp: dbd07fb4
ds: 007b es: 007b ss: 0068
Process kIrDAd (pid: 3157, threadinfo=dbd06000 task=da867050)
Stack: dbd06000 dbd07fcc 00000000 e0a52b83 e0a53b20 00000000 00000000 da867050
c011f4e0 00000000 00000000 e0a52ae0 00000000 c0101525 dab29f74 00000000
00000000 00000000 00000000
Call Trace:
[<e0a52b83>] irda_thread+0xa3/0xe0 [sir_dev]
[<c011f4e0>] default_wake_function+0x0/0x20
[<e0a52ae0>] irda_thread+0x0/0xe0 [sir_dev]
[<c0101525>] kernel_thread_helper+0x5/0x10
Code: 24 04 89 d6 89 7c 24 08 89 c7 b8 00 e0 ff ff 21 e0 8b 00 c7 00 00 00 00 00 3b 5a 0c 74 2f 89 f8 e8 a0 fe 1c 00 8b 53 04 8b 4e 0c <89> 51 04 89 0a 89 c2 89 f8 89 5e 0c 89 5b 04 8b 1c 24 8b 74 24
<6>note: kIrDAd[3157] exited with preempt_count 1

When running 2.6.15-22-686:

Linux version 2.6.15-22-686 (buildd@vernadsky) (gcc version 4.0.3 (Ubuntu 4.0.3-1ubuntu5)) #1 SMP PREEMPT Sun May 7 16:37:57 UTC 2006
irda_init()
NET: Registered protocol family 23
**** SET: Misaligned resource pointer: dbcbf242 Type 00 Len 42
**** SET: Misaligned resource pointer: dbcbf2c6 Type 07 Len 0
pnp: Device 00:0b activated.
nsc_ircc_pnp_probe() : Found cfg_base 0x000 ; firbase 0x2F8 ; irq 3 ; dma 1.
nsc-ircc, Found chip at base=0x000
nsc-ircc, driver loaded (Dag Brattli)
IrDA: Registered device irda0
nsc-ircc, Found dongle: HP HSDL-1100/HSDL-2100
nsc-ircc, Found chip at base=0x02e
nsc-ircc, driver loaded (Dag Brattli)
nsc_ircc_open(), can't get iobase of 0x2f8

Tags: kernel-oops
Revision history for this message
Matt Zimmerman (mdz) wrote :

Confirmed, happens here as well. The trace is the same, though my kernel is not tainted:

[4294705.848000] EIP: 0060:[<c013c886>] Not tainted VLI

Will attach full dmesg

Changed in linux-source-2.6.15:
status: Unconfirmed → Confirmed
Revision history for this message
Matt Zimmerman (mdz) wrote : dmesg (including oops)

My dmesg (including the oops). This is on a ThinkPad T42, not using IrDA in any explicit way.

Revision history for this message
Ben Collins (ben-collins) wrote :

Will try backporting for dapper-updates. Stay tuned for test requests.

Changed in linux-source-2.6.15:
assignee: nobody → ben-collins
status: Confirmed → In Progress
Changed in linux-source-2.6.15:
status: In Progress → Fix Committed
Revision history for this message
elele (elele-deactivatedaccount) wrote : dmesg with oops on amd64

This also happens on the 2.6.15-23-amd64-generic kernel. The trace looks a bit different so I'm including my dmesg with the oops.

Revision history for this message
Adriaan Peeters (apeeters) wrote :

This seems very related (the same?) to bug 45542.

Revision history for this message
Adriaan Peeters (apeeters) wrote :

Why is this bug marked fix committed btw? I do not see a newer version of the kernel in dapper-updates.

Revision history for this message
Daniel T Chen (crimsun) wrote :

@Adriaan: It's marked as such because the fixes have been committed in git [0].

[0] http://www.kernel.org/git/?p=linux/kernel/git/bcollins/ubuntu-dapper.git;a=commit;h=c0aff2d0dcf910e440b49087cf118d3cccb10fe3

Revision history for this message
Peter Meiser (meiser79) wrote :

For ThinkPads T43/R52, the patch in http://bugzilla.kernel.org/show_bug.cgi?id=3575 must be applied to get it to work.

Changed in linux-source-2.6.15:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.