lkml.org 
[lkml]   [2006]   [Feb]   [13]   [last100]   RSS Feed
Views: [more markup]  [less markup]  [headers]  [forward] 
 
Messages in this thread
/
DateMon, 13 Feb 2006 09:57:49 +0300 (MSK)
SubjectPROBLEM: "rmmod snd_cmipci" cause an Oops
From<>



"rmmod snd_cmipci" cause an Oops.

Linux-2.6.14 does not have this bug.



# rmmod snd_cmipci

Unable to handle kernel NULL pointer dereference at virtual address 

00000018
 printing eip:

c011b9da

*pde = 00000000
Oops: 0000 [#1]
PREEMPT

Modules linked in: lp snd_cmipci snd_pcm_oss snd_mixer_oss snd_pcm 

snd_page_alloc snd_opl3_lib snd_timer snd_hwdep 

snd_mpu401_uart snd_rawmidi snd_seq_device snd soundcore pl2303 usbserial 

ohci_hcd usbcore sis_agp agpgart nls_cp866 

vfat fat fuse parport_pc parport psmouse 8250 serial_core unix

CPU:    0

EIP:    0060:[<c011b9da>]    Not tainted VLI

EFLAGS: 00010202   (2.6.15.4-gaa)

EIP is at __release_resource+0xa/0x50

eax: 00000000   ebx: c145c000   ecx: 00000018   edx: c2f5f3a0
esi: c2c7e540   edi: 00001fff   ebp: c2c7e400   esp: c145de64
ds: 007b   es: 007b   ss: 0068

Process rmmod (pid: 2685, threadinfo=c145c000 task=c34d7560)

Stack: c011bae1 c2f5f3a0 c2f5f3a0 c2c7e540 c4a67914 c2f5f3a0 c3655400 

c49ed65f

       c2f5f3a0 c2f5f3e0 c4a679fd c3655400 00001000 c4a67c72 c2c7e400 
c3655400

       c145c000 c2c7e400 c4a9c548 c4a9c548 c4a62de9 c2c7e400 00000001 
c01ec0cf

Call Trace:

 [<c011bae1>] release_resource+0x21/0x50

 [<c4a67914>] release_and_free_resource+0x14/0x30 [snd]

 [<c49ed65f>] snd_opl3_free+0x1f/0x40 [snd_opl3_lib]

 [<c4a679fd>] snd_device_free+0x5d/0xb0 [snd]

 [<c4a67c72>] snd_device_free_all+0x62/0x70 [snd]

 [<c4a62de9>] snd_card_free+0x109/0x210 [snd]

 [<c01ec0cf>] kref_put+0x2f/0x80

 [<c4a97bf9>] snd_cmipci_remove+0x19/0x24 [snd_cmipci]

 [<c01f621e>] pci_device_remove+0x1e/0x40

 [<c0227522>] __device_release_driver+0x62/0xa0

 [<c0227634>] driver_detach+0xa4/0xbe

 [<c0226e83>] bus_remove_driver+0x53/0x80

 [<c0227950>] driver_unregister+0x10/0x20

 [<c01f64a3>] pci_unregister_driver+0x13/0x20

 [<c4a97c9f>] alsa_card_cmipci_exit+0xf/0x11 [snd_cmipci]

 [<c0131425>] sys_delete_module+0x155/0x1a0

 [<c014c9d4>] sys_munmap+0x44/0x70

 [<c0102f21>] syscall_call+0x7/0xb

Code: 0c c3 89 47 14 89 3a 89 77 10 31 f6 89 f0 8b 1c 24 8b 74 24 04 8b 7c 

24 08 83 c4 0c c3 8d 74 26 00 8b 54 24 04 8b 

42 10 8d 48 18 <8b> 40 18 85 c0 74 2f 39 c2 75 13 8b 42 14 89 01 31 c0 c7 

42 10

 <6>note: rmmod[2685] exited with preempt_count 1

Segmentation fault



# cat /proc/version

Linux version 2.6.15.4-gaa (root@gaa) (gcc version 4.0.3 20060115 

(prerelease) (Debian 4.0.2-7)) #1 PREEMPT Sat Feb 11 22:11:07 MSK 2006



# ./ver_linux

If some fields are empty or look unusual you may have an old version.

Compare to the current minimal requirements in Documentation/Changes.



Linux gaa 2.6.15.4-gaa #1 PREEMPT Sat Feb 11 22:11:07 MSK 2006 i686 GNU/

Linux



Gnu C                  4.0.3

Gnu make               3.80

binutils               2.16.91

util-linux             2.11z

mount                  2.12

module-init-tools      3.2-pre1

e2fsprogs              1.38

reiserfsprogs          line

reiser4progs           line

PPP                    2.4.3

Linux C Library        2.3.5

Dynamic linker (ldd)   2.3.5

Procps                 3.1.9

Net-tools              1.60

Console-tools          0.2.3

Sh-utils               5.2.1

udev                   056

Modules Loaded         lp snd_cmipci snd_pcm_oss snd_mixer_oss snd_pcm 

snd_page_alloc snd_opl3_lib snd_timer snd_hwdep snd_mpu401_uart 

snd_rawmidi snd_seq_device snd soundcore pl2303 usbserial ohci_hcd usbcore 

sis_agp agpgart nls_cp866 vfat fat fuse parport_pc parport psmouse 8250 

serial_core unix



# cat /proc/cpuinfo

processor: 0

vendor_id: CyrixInstead

cpu family: 6

model: 2

model name: M II 3.5x Core/Bus Clock

stepping: 4

cpu MHz: 292.363

fdiv_bug: no

hlt_bug: no

f00f_bug: no

coma_bug: no

fpu: yes

fpu_exception: yes

cpuid level: 1

wp: yes

flags: fpu de tsc msr cx8 pge cmov mmx cyrix_arr

bogomips: 585.45



# cat /proc/modules

lp 12904 0 - Live 0xc4a2e000

snd_cmipci 34720 0 - Unloading 0xc4a94000

snd_pcm_oss 55680 0 - Live 0xc4ab7000

snd_mixer_oss 19968 1 snd_pcm_oss, Live 0xc4a82000

snd_pcm 95176 2 snd_cmipci,snd_pcm_oss, Live 0xc4a9e000

snd_page_alloc 10952 1 snd_pcm, Live 0xc4a3b000

snd_opl3_lib 11104 1 snd_cmipci, Live 0xc49ed000

snd_timer 26212 2 snd_pcm,snd_opl3_lib, Live 0xc4a7a000

snd_hwdep 9504 1 snd_opl3_lib, Live 0xc4a2a000

snd_mpu401_uart 7840 1 snd_cmipci, Live 0xc4981000

snd_rawmidi 26272 1 snd_mpu401_uart, Live 0xc4a33000

snd_seq_device 8748 2 snd_opl3_lib,snd_rawmidi, Live 0xc49f1000

snd 55492 10 snd_cmipci,snd_pcm_oss,snd_mixer_oss,snd_pcm,snd_opl3_lib,

snd_timer,snd_hwdep,snd_mpu401_uart,snd_rawmidi,snd_seq_device, Live 

0xc4a62000

soundcore 10304 1 snd, Live 0xc49bd000

pl2303 21540 0 - Live 0xc4a17000

usbserial 29056 1 pl2303, Live 0xc4a21000

ohci_hcd 22340 0 - Live 0xc49f5000

usbcore 135748 4 pl2303,usbserial,ohci_hcd, Live 0xc4a3f000

sis_agp 8740 0 - Live 0xc49b9000

agpgart 35816 1 sis_agp, Live 0xc4a0d000

nls_cp866 5088 1 - Live 0xc4984000

vfat 14144 1 - Live 0xc49b4000

fat 53788 1 vfat, Live 0xc49fe000

fuse 40428 0 - Live 0xc49e2000

parport_pc 37124 1 - Live 0xc49d7000

parport 39592 2 lp,parport_pc, Live 0xc49cc000

psmouse 39268 0 - Live 0xc49c1000

8250 23924 0 - Live 0xc49ad000

serial_core 22688 1 8250, Live 0xc49a6000

unix 29424 8 - Live 0xc498b000



# cat /proc/ioports

0000-001f : dma1
0020-0021 : pic1

0040-0043 : timer0

0050-0053 : timer1

0060-006f : keyboard

0070-0077 : rtc

0080-008f : dma page reg

00a0-00a1 : pic2

00c0-00df : dma2

00f0-00ff : fpu

0170-0177 : ide1

01f0-01f7 : ide0

0376-0376 : ide1

0378-037a : parport0

037b-037f : parport0

03c0-03df : vesafb

03f6-03f6 : ide0

03f8-03ff : serial

0cf8-0cff : PCI conf1

4000-400f : 0000:00:01.1
  4000-4007 : ide0

  4008-400f : ide1

f400-f47f : 0000:00:14.0
f600-f6ff : 0000:00:0d.0
  f600-f6ff : CMI8738



# cat /proc/iomem

00000000-0009fbff : System RAM
0009fc00-0009ffff : reserved
000a0000-000bffff : Video RAM area
000c0000-000c7fff : Video ROM
000f0000-000fffff : System ROM
00100000-03bfffff : System RAM
  00100000-002c0126 : Kernel code
  002c0127-00333eff : Kernel data

08000000-083fffff : vesafb
fec00000-fec00fff : reserved
fee00000-fee00fff : reserved
ff400000-ff7fffff : 0000:00:14.0
ffadf000-ffadffff : 0000:00:01.2
  ffadf000-ffadffff : ohci_hcd
ffae0000-ffae7fff : 0000:00:14.0
ffaf0000-ffafffff : 0000:00:14.0
fffe0000-ffffffff : reserved


# lspci -vvv

0000:00:00.0 Host bridge: Silicon Integrated Systems [SiS] 5597 [SiS5582] 
(rev 10)

Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- 

Stepping- SERR- FastB2B-

Status: Cap- 66MHz- UDF- FastB2B- ParErr- DEVSEL=medium >TAbort- <TAbort- 

<MAbort+ >SERR- <PERR-

Latency: 64



0000:00:01.0 ISA bridge: Silicon Integrated Systems [SiS] SiS85C503/5513 
(LPC Bridge) (rev 01)

Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- 

Stepping- SERR- FastB2B-

Status: Cap- 66MHz- UDF- FastB2B- ParErr- DEVSEL=medium >TAbort- <TAbort- 

<MAbort- >SERR- <PERR-

Latency: 0



0000:00:01.1 IDE interface: Silicon Integrated Systems [SiS] 5513 [IDE] 
(rev d0) (prog-if 8a [Master SecP PriP])

Subsystem: Unknown device 2841:a212

Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- 

Stepping- SERR- FastB2B-

Status: Cap- 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- 

<MAbort- >SERR- <PERR-

Latency: 128

Interrupt: pin A routed to IRQ 0

Region 0: I/O ports at <ignored>

Region 1: I/O ports at <ignored>

Region 2: I/O ports at <ignored>

Region 3: I/O ports at <ignored>

Region 4: I/O ports at 4000 [size=16]



0000:00:01.2 USB Controller: Silicon Integrated Systems [SiS] USB 1.0 
Controller (rev 10) (prog-if 10 [OHCI])

Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV+ VGASnoop- ParErr- 

Stepping- SERR+ FastB2B-

Status: Cap- 66MHz- UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort- <TAbort- 

<MAbort- >SERR- <PERR+

Latency: 32, Cache Line Size: 0x08 (32 bytes)

Interrupt: pin A routed to IRQ 11

Region 0: Memory at ffadf000 (32-bit, non-prefetchable) [size=4K]



0000:00:0d.0 Multimedia audio controller: C-Media Electronics Inc CM8738 
(rev 10)

Subsystem: C-Media Electronics Inc CMI8738/C3DX PCI Audio Device

Control: I/O+ Mem- BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- 

Stepping- SERR+ FastB2B-

Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=medium >TAbort- <TAbort- 

<MAbort- >SERR- <PERR-

Latency: 32 (500ns min, 6000ns max)

Interrupt: pin A routed to IRQ 10

Region 0: I/O ports at f600 [size=256]

Capabilities: [c0] Power Management version 2

Flags: PMEClk- DSI- D1+ D2+ AuxCurrent=0mA PME(D0-,D1-,D2-,D3hot-,D3cold-)

Status: D0 PME-Enable- DSel=0 DScale=0 PME-



0000:00:14.0 VGA compatible controller: Silicon Integrated Systems [SiS] 
5597/5598/6326 VGA (rev 68) (prog-if 00 [VGA])

Subsystem: Silicon Integrated Systems [SiS] 5597/5598/6326 VGA

Control: I/O+ Mem+ BusMaster- SpecCycle- MemWINV- VGASnoop- ParErr- 

Stepping- SERR- FastB2B-

Status: Cap- 66MHz- UDF- FastB2B- ParErr- DEVSEL=medium >TAbort- <TAbort- 

<MAbort- >SERR- <PERR-

Interrupt: pin A routed to IRQ 0

Region 0: Memory at ff400000 (32-bit, prefetchable) [size=4M]
Region 1: Memory at ffaf0000 (32-bit, non-prefetchable) [size=64K]
Region 2: I/O ports at f400 [size=128]

Expansion ROM at ffae0000 [disabled] [size=32K]
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/
\
 
 \ /
  Last update: 2006-02-13 07:05    [from the cache]
©2003-2008