Bug#585608: linux-image-2.6.32-5-686: SAA7146: BUG: unable to handle kernel NULL pointer dereference at (null)
On Sat, Jun 12, 2010 at 12:11:01PM +0200, Matthias Pitzl wrote:
> Package: linux-2.6
> Version: 2.6.32-15
> Severity: important
>
>
> When doing a channel scan with my Haupauge WinTV Nexus-S rev 2.3 card, i
> get an kernel oops. Seems to be a general problem not only with this
> kernel version. Unfortunately i only have a trace for 2.6.43-rc7 but
> it's the same trace as i get with kernel versions 2.6.32-3 and 2.6.32-5:
>
> [ 773.280361] IP: [<f825a7ba>] saa7146_buffer_next+0x5e/0x1ed
> [saa7146_vv]
> [ 773.280361] *pde = 00000000
> [ 773.280361] Oops: 0000 [#1] SMP
> [ 773.280361] last sysfs file: /sys/module/nfsd/initstate
> [ 773.280361] Modules linked in: nfsd exportfs nfs lockd nfs_acl
> auth_rpcgss sunrpc f71882fg coretemp loop lnbp21 stv0299 dvb_ttpci
> snd_hda_codec_realtek dvb_core saa7146_vv videodev v4l1_compat
> snd_hda_intel saa7146 snd_hda_codec videobuf_dma_sg snd_hwdep
> videobuf_core snd_pcm i2c_i801 ttpci_eeprom psmouse snd_timer intel_agp
> evdev pcspkr snd i2c_core serio_raw agpgart video processor rng_core
> soundcore button output snd_page_alloc usb_storage uhci_hcd ehci_hcd
> thermal sd_mod crc_t10dif thermal_sys usbcore nls_base e1000e [last
> unloaded: scsi_wait_scan]
> [ 773.280361]
> [ 773.280361] Pid: 0, comm: swapper Not tainted 2.6.34-rc7 #7
> A9830IMS/A9830IMS
> [ 773.280361] EIP: 0060:[<f825a7ba>] EFLAGS: 00010246 CPU: 0
> [ 773.280361] EIP is at saa7146_buffer_next+0x5e/0x1ed [saa7146_vv]
> [ 773.280361] EAX: f68b3008 EBX: f733d900 ECX: 00000001 EDX: 00000002
> [ 773.280361] ESI: ffffffd4 EDI: f68b3000 EBP: 00000000 ESP: c135fefc
> [ 773.280361] DS: 007b ES: 007b FS: 00d8 GS: 00e0 SS: 0068
> [ 773.280361] Process swapper (pid: 0, ti=c135e000 task=c138cb60
> task.ti=c135e000)
> [ 773.280361] Stack:
> [ 773.280361] f68b3000 f733d900 c13640bc 0000000a f825e5f6 f733d900
> fff7fbf7 f825a759
> [ 773.280361] <0> f733d900 ffffffff f812bdfc fff7fbf7 f6a1e240 00000000
> c106793a 00000000
> [ 773.280361] <0> 00000000 c1364080 0000000a c13640bc c135ff80 c1069072
> 0000000a 0000000a
> [ 773.280361] Call Trace:
> [ 773.280361] [<f825e5f6>] ? vbi_irq_done+0x99/0x9f [saa7146_vv]
> [ 773.280361] [<f825a759>] ? vv_callback+0x10f/0x112 [saa7146_vv]
> [ 773.280361] [<f812bdfc>] ? interrupt_hw+0x9f/0x1a8 [saa7146]
> [ 773.280361] [<c106793a>] ? handle_IRQ_event+0x49/0xe7
> [ 773.280361] [<c1069072>] ? handle_level_irq+0x55/0x9e
> [ 773.280361] [<c10044cb>] ? handle_irq+0x17/0x1c
> [ 773.280361] [<c1003da9>] ? do_IRQ+0x38/0x8e
> [ 773.280361] [<c1002d30>] ? common_interrupt+0x30/0x38
> [ 773.280361] [<c10086e6>] ? mwait_idle+0x59/0x5e
> [ 773.280361] [<c1001ae7>] ? cpu_idle+0x91/0xaa
> [ 773.280361] [<c13b9881>] ? start_kernel+0x31c/0x321
> [ 773.280361] Code: 50 fc 25 f8 e8 9d 0e 01 c9 83 c4 1c 8b 43 44 89 c2
> c1 fa 08 38 c2 75 04 0f 0b eb fe 8b 77 08 8d 47 08 39 c6 74 6b 83 ee 2c
> 31 ed <8b> 4e 2c 8b 56 30 89 51 04 89 0a c7 46 2c 00 01 10 00 c7 46 30
> [ 773.280361] EIP: [<f825a7ba>] saa7146_buffer_next+0x5e/0x1ed
> [saa7146_vv] SS:ESP 0068:c135fefc
> [ 773.280361] CR2: 0000000000000000
> [ 773.985900] ---[ end trace ec43c18100749f7e ]---
> [ 773.999765] Kernel panic - not syncing: Fatal exception in interrupt
> [ 774.018832] Pid: 0, comm: swapper Tainted: G D 2.6.34-rc7 #7
> [ 774.037908] Call Trace:
> [ 774.045272] [<c126b5c4>] ? panic+0x37/0xa8
> [ 774.057844] [<c10050e0>] ? oops_end+0x88/0x93
> [ 774.071195] [<c1019bfd>] ? no_context+0x10d/0x116
> [ 774.085581] [<c1019f62>] ? do_page_fault+0x0/0x242
> [ 774.100232] [<c1019d04>] ? bad_area_nosemaphore+0xa/0xc
> [ 774.116194] [<c126d6c3>] ? error_code+0x73/0x78
> [ 774.130077] [<f825a7ba>] ? saa7146_buffer_next+0x5e/0x1ed
> [saa7146_vv]
> [ 774.149941] [<f825e5f6>] ? vbi_irq_done+0x99/0x9f [saa7146_vv]
> [ 774.167718] [<f825a759>] ? vv_callback+0x10f/0x112 [saa7146_vv]
> [ 774.185762] [<f812bdfc>] ? interrupt_hw+0x9f/0x1a8 [saa7146]
> [ 774.203023] [<c106793a>] ? handle_IRQ_event+0x49/0xe7
> [ 774.218459] [<c1069072>] ? handle_level_irq+0x55/0x9e
> [ 774.233890] [<c10044cb>] ? handle_irq+0x17/0x1c
> [ 774.247758] [<c1003da9>] ? do_IRQ+0x38/0x8e
> [ 774.260590] [<c1002d30>] ? common_interrupt+0x30/0x38
> [ 774.276023] [<c10086e6>] ? mwait_idle+0x59/0x5e
> [ 774.289890] [<c1001ae7>] ? cpu_idle+0x91/0xaa
> [ 774.303243] [<c13b9881>] ? start_kernel+0x31c/0x321
>
> This can be easily reproduced using the following command:
> scan -v /usr/share/dvb/dvb-s/Astra-19.2E
>
> The crash happens after a short random time.
>
> I tried also the different firmware versions for ths DVB-S card but this
> doesn't seem to make any difference. I already sent a bug report to
> linux-media@vger.kernel.org.
Please report this bug upstream at the upstream bugzilla
(http://bugzilla.kernel.org), so that it can be investigated/
fixed upstream and backported for Squeeze. (Product: v4l-dvb)
Once done, please add the bug number to this bug.
(We're asking you to file the bug report yourself, since the
kernel.org developers will have specific inquiries to your
hardware/setup)
Cheers,
Moritz
Reply to: