Bug#585608: linux-image-2.6.32-5-686: SAA7146: BUG: unable to handle kernel NULL pointer dereference at (null)
Hi Moritz,
Filed the bug as you suggested:
https://bugzilla.kernel.org/show_bug.cgi?id=16385
-- Matthias
On 07/13/2010 11:15 PM, Moritz Muehlenhoff wrote:
> On Sat, Jun 12, 2010 at 12:11:01PM +0200, Matthias Pitzl wrote:
>> Package: linux-2.6
>> Version: 2.6.32-15
>> Severity: important
>>
>>
>> When doing a channel scan with my Haupauge WinTV Nexus-S rev 2.3 card, i
>> get an kernel oops. Seems to be a general problem not only with this
>> kernel version. Unfortunately i only have a trace for 2.6.43-rc7 but
>> it's the same trace as i get with kernel versions 2.6.32-3 and 2.6.32-5:
>>
>> [ 773.280361] IP: [<f825a7ba>] saa7146_buffer_next+0x5e/0x1ed
>> [saa7146_vv]
>> [ 773.280361] *pde = 00000000
>> [ 773.280361] Oops: 0000 [#1] SMP
>> [ 773.280361] last sysfs file: /sys/module/nfsd/initstate
>> [ 773.280361] Modules linked in: nfsd exportfs nfs lockd nfs_acl
>> auth_rpcgss sunrpc f71882fg coretemp loop lnbp21 stv0299 dvb_ttpci
>> snd_hda_codec_realtek dvb_core saa7146_vv videodev v4l1_compat
>> snd_hda_intel saa7146 snd_hda_codec videobuf_dma_sg snd_hwdep
>> videobuf_core snd_pcm i2c_i801 ttpci_eeprom psmouse snd_timer intel_agp
>> evdev pcspkr snd i2c_core serio_raw agpgart video processor rng_core
>> soundcore button output snd_page_alloc usb_storage uhci_hcd ehci_hcd
>> thermal sd_mod crc_t10dif thermal_sys usbcore nls_base e1000e [last
>> unloaded: scsi_wait_scan]
>> [ 773.280361]
>> [ 773.280361] Pid: 0, comm: swapper Not tainted 2.6.34-rc7 #7
>> A9830IMS/A9830IMS
>> [ 773.280361] EIP: 0060:[<f825a7ba>] EFLAGS: 00010246 CPU: 0
>> [ 773.280361] EIP is at saa7146_buffer_next+0x5e/0x1ed [saa7146_vv]
>> [ 773.280361] EAX: f68b3008 EBX: f733d900 ECX: 00000001 EDX: 00000002
>> [ 773.280361] ESI: ffffffd4 EDI: f68b3000 EBP: 00000000 ESP: c135fefc
>> [ 773.280361] DS: 007b ES: 007b FS: 00d8 GS: 00e0 SS: 0068
>> [ 773.280361] Process swapper (pid: 0, ti=c135e000 task=c138cb60
>> task.ti=c135e000)
>> [ 773.280361] Stack:
>> [ 773.280361] f68b3000 f733d900 c13640bc 0000000a f825e5f6 f733d900
>> fff7fbf7 f825a759
>> [ 773.280361] <0> f733d900 ffffffff f812bdfc fff7fbf7 f6a1e240 00000000
>> c106793a 00000000
>> [ 773.280361] <0> 00000000 c1364080 0000000a c13640bc c135ff80 c1069072
>> 0000000a 0000000a
>> [ 773.280361] Call Trace:
>> [ 773.280361] [<f825e5f6>] ? vbi_irq_done+0x99/0x9f [saa7146_vv]
>> [ 773.280361] [<f825a759>] ? vv_callback+0x10f/0x112 [saa7146_vv]
>> [ 773.280361] [<f812bdfc>] ? interrupt_hw+0x9f/0x1a8 [saa7146]
>> [ 773.280361] [<c106793a>] ? handle_IRQ_event+0x49/0xe7
>> [ 773.280361] [<c1069072>] ? handle_level_irq+0x55/0x9e
>> [ 773.280361] [<c10044cb>] ? handle_irq+0x17/0x1c
>> [ 773.280361] [<c1003da9>] ? do_IRQ+0x38/0x8e
>> [ 773.280361] [<c1002d30>] ? common_interrupt+0x30/0x38
>> [ 773.280361] [<c10086e6>] ? mwait_idle+0x59/0x5e
>> [ 773.280361] [<c1001ae7>] ? cpu_idle+0x91/0xaa
>> [ 773.280361] [<c13b9881>] ? start_kernel+0x31c/0x321
>> [ 773.280361] Code: 50 fc 25 f8 e8 9d 0e 01 c9 83 c4 1c 8b 43 44 89 c2
>> c1 fa 08 38 c2 75 04 0f 0b eb fe 8b 77 08 8d 47 08 39 c6 74 6b 83 ee 2c
>> 31 ed <8b> 4e 2c 8b 56 30 89 51 04 89 0a c7 46 2c 00 01 10 00 c7 46 30
>> [ 773.280361] EIP: [<f825a7ba>] saa7146_buffer_next+0x5e/0x1ed
>> [saa7146_vv] SS:ESP 0068:c135fefc
>> [ 773.280361] CR2: 0000000000000000
>> [ 773.985900] ---[ end trace ec43c18100749f7e ]---
>> [ 773.999765] Kernel panic - not syncing: Fatal exception in interrupt
>> [ 774.018832] Pid: 0, comm: swapper Tainted: G D 2.6.34-rc7 #7
>> [ 774.037908] Call Trace:
>> [ 774.045272] [<c126b5c4>] ? panic+0x37/0xa8
>> [ 774.057844] [<c10050e0>] ? oops_end+0x88/0x93
>> [ 774.071195] [<c1019bfd>] ? no_context+0x10d/0x116
>> [ 774.085581] [<c1019f62>] ? do_page_fault+0x0/0x242
>> [ 774.100232] [<c1019d04>] ? bad_area_nosemaphore+0xa/0xc
>> [ 774.116194] [<c126d6c3>] ? error_code+0x73/0x78
>> [ 774.130077] [<f825a7ba>] ? saa7146_buffer_next+0x5e/0x1ed
>> [saa7146_vv]
>> [ 774.149941] [<f825e5f6>] ? vbi_irq_done+0x99/0x9f [saa7146_vv]
>> [ 774.167718] [<f825a759>] ? vv_callback+0x10f/0x112 [saa7146_vv]
>> [ 774.185762] [<f812bdfc>] ? interrupt_hw+0x9f/0x1a8 [saa7146]
>> [ 774.203023] [<c106793a>] ? handle_IRQ_event+0x49/0xe7
>> [ 774.218459] [<c1069072>] ? handle_level_irq+0x55/0x9e
>> [ 774.233890] [<c10044cb>] ? handle_irq+0x17/0x1c
>> [ 774.247758] [<c1003da9>] ? do_IRQ+0x38/0x8e
>> [ 774.260590] [<c1002d30>] ? common_interrupt+0x30/0x38
>> [ 774.276023] [<c10086e6>] ? mwait_idle+0x59/0x5e
>> [ 774.289890] [<c1001ae7>] ? cpu_idle+0x91/0xaa
>> [ 774.303243] [<c13b9881>] ? start_kernel+0x31c/0x321
>>
>> This can be easily reproduced using the following command:
>> scan -v /usr/share/dvb/dvb-s/Astra-19.2E
>>
>> The crash happens after a short random time.
>>
>> I tried also the different firmware versions for ths DVB-S card but this
>> doesn't seem to make any difference. I already sent a bug report to
>> linux-media@vger.kernel.org.
>
> Please report this bug upstream at the upstream bugzilla
> (http://bugzilla.kernel.org), so that it can be investigated/
> fixed upstream and backported for Squeeze. (Product: v4l-dvb)
>
> Once done, please add the bug number to this bug.
>
> (We're asking you to file the bug report yourself, since the
> kernel.org developers will have specific inquiries to your
> hardware/setup)
>
> Cheers,
> Moritz
Reply to: