← Back to team overview

tiomap-dev team mailing list archive

[Bug 687252] [NEW] [PVR] Unable to handle kernel NULL pointer dereference at virtual address

 

Public bug reported:

Kernel crashed with NULL pointer at the pvrsrvkm kernel module while
running glmemperf.

Using Ubuntu Maverick with the following packages:
pvr-omap4 0.24.9c-1
pvr-omap4-data 0.24.9c-1
pvr-omap4-kernel-dkms 0.24.9-2

[ 5095.570800] Unable to handle kernel NULL pointer dereference at virtual address 00000048
[ 5095.579620] pgd = 80004000
[ 5095.582489] [00000048] *pgd=00000000
[ 5095.586212] Internal error: Oops: 17 [#1] PREEMPT SMP
[ 5095.591461] last sysfs file: /sys/devices/virtual/bdi/0:21/uevent
[ 5095.597808] Modules linked in: fuse dm_crypt pvrsrvkm asix twl4030_pwrbutton sg usbhid usb_storage dm_mirror dm_region_hash dm_log btrfs
[ 5095.610595] CPU: 0    Not tainted  (2.6.35-903-omap4 #18rsalveti2)
[ 5095.617218] PC is at HASH_Key_Comp_Default+0x14/0x44 [pvrsrvkm]
[ 5095.623413] LR is at HASH_Remove_Extended+0x48/0xc8 [pvrsrvkm]
[ 5095.629455] pc : [<7f0f5ac0>]    lr : [<7f0f5d3c>]    psr: 80000013
[ 5095.629486] sp : 91491e0c  ip : 00000000  fp : 00000000
[ 5095.641418] r10: 00000000  r9 : 91490000  r8 : 00000000
[ 5095.646850] r7 : 00000001  r6 : 8f54e5e4  r5 : 91491e2c  r4 : 8f54e660
[ 5095.653625] r3 : 00000000  r2 : 91491e2c  r1 : 00000048  r0 : 00000001
[ 5095.660430] Flags: Nzcv  IRQs on  FIQs on  Mode SVC_32  ISA ARM  Segment user
[ 5095.667846] Control: 10c53c7d  Table: aef3c04a  DAC: 00000015
[ 5095.673828] Process glmemperf (pid: 1930, stack limit = 0x914902f8)
[ 5095.680358] Stack: (0x91491e0c to 0x91492000)
[ 5095.684875] 1e00:                            8f54e660 91491e2c 7f0f5d3c aef8ce00 00000001
[ 5095.693389] 1e20: 00021000 7f0f5dd0 8f54e660 03c18000 00000001 7f0f9398 ac645ba0 a1089740
[ 5095.701904] 1e40: 00021000 7f0f0a8c 00000000 7f0f0c38 a1089400 ac645740 00000001 8f54e820
[ 5095.710418] 1e60: 00000000 7f0f2388 ac645be0 7f0f262c 7f0f25b4 00000001 ac645740 7f0f9ed4
[ 5095.718933] 1e80: 00000000 0000000d 00000001 7f0fa22c 00000000 00000000 0000000d 00000000
[ 5095.727447] 1ea0: 8f54e820 8f54e82c 00000000 ac0f1990 afcb7280 7f0fa448 00000000 00000000
[ 5095.735961] 1ec0: 8fdfc600 7f10c1c8 00000008 7f0fdeec 8fab4d80 7f0eefc0 8fab4d80 a8094e30
[ 5095.744445] 1ee0: 00000008 7f10425c a4edf3c0 80115330 00000000 00000000 a4edf3dc 9077cc60
[ 5095.752960] 1f00: a1185b58 00000000 ac5f1bd8 8003fc48 00000000 800f937c 00000000 ac5f1ba0
[ 5095.761474] 1f20: a1185b58 800f94d4 00000020 00000000 00000169 83de0140 ac5f1ba0 00000000
[ 5095.769989] 1f40: 8159c390 8007a668 ac5f1ba0 8159c000 8159c390 8007e87c 8159c000 8159c000
[ 5095.778503] 1f60: 00000001 8159c000 00000000 00000001 000000f8 800800a0 ac66e000 00000000
[ 5095.787017] 1f80: 91490000 80080298 0000ffff 2aef9174 2aef7754 2aef7754 000000f8 800802d8
[ 5095.795532] 1fa0: 00000000 8003faa0 2aef9174 2aef7754 00000000 2aef9174 2ae7b69c 00000000
[ 5095.804046] 1fc0: 2aef9174 2aef7754 2aef7754 000000f8 00000148 00000000 2ab46000 00000000
[ 5095.812561] 1fe0: 000000f8 7efb937c 2ae7b6c1 2ae17896 00000030 00000000 ff429a21 ff429a21
[ 5095.821136] [<7f0f5ac0>] (HASH_Key_Comp_Default+0x14/0x44 [pvrsrvkm]) from [<7f0f5d3c>] (HASH_Remove_Extended+0x48/0xc8 [pvrsrvkm])
[ 5095.833496] [<7f0f5d3c>] (HASH_Remove_Extended+0x48/0xc8 [pvrsrvkm]) from [<7f0f5dd0>] (HASH_Remove+0x14/0x18 [pvrsrvkm])
[ 5095.844970] [<7f0f5dd0>] (HASH_Remove+0x14/0x18 [pvrsrvkm]) from [<7f0f9398>] (RA_Free+0x18/0x3c [pvrsrvkm])
[ 5095.855255] [<7f0f9398>] (RA_Free+0x18/0x3c [pvrsrvkm]) from [<7f0f0a8c>] (DevMemoryFree+0x28/0x2c [pvrsrvkm])
[ 5095.865722] [<7f0f0a8c>] (DevMemoryFree+0x28/0x2c [pvrsrvkm]) from [<7f0f0c38>] (FreeBuf+0x12c/0x188 [pvrsrvkm])
[ 5095.876342] [<7f0f0c38>] (FreeBuf+0x12c/0x188 [pvrsrvkm]) from [<7f0f2388>] (FreeDeviceMem+0x1c/0x5c [pvrsrvkm])
[ 5095.886993] [<7f0f2388>] (FreeDeviceMem+0x1c/0x5c [pvrsrvkm]) from [<7f0f262c>] (UnmapDeviceMemoryCallBack+0x78/0xb0 [pvrsrvkm])
[ 5095.899078] [<7f0f262c>] (UnmapDeviceMemoryCallBack+0x78/0xb0 [pvrsrvkm]) from [<7f0f9ed4>] (FreeResourceByPtr+0x38/0x98 [pvrsrvkm])
[ 5095.911560] [<7f0f9ed4>] (FreeResourceByPtr+0x38/0x98 [pvrsrvkm]) from [<7f0fa22c>] (T.212+0x28/0x60 [pvrsrvkm])
[ 5095.922210] [<7f0fa22c>] (T.212+0x28/0x60 [pvrsrvkm]) from [<7f0fa448>] (PVRSRVResManDisconnect+0x1e4/0x290 [pvrsrvkm])
[ 5095.933502] [<7f0fa448>] (PVRSRVResManDisconnect+0x1e4/0x290 [pvrsrvkm]) from [<7f0fdeec>] (PVRSRVPerProcessDataDisconnect+0x38/0x58 [pvrsrvkm])
[ 5095.947021] [<7f0fdeec>] (PVRSRVPerProcessDataDisconnect+0x38/0x58 [pvrsrvkm]) from [<7f0eefc0>] (PVRSRVRelease+0x4c/0x80 [pvrsrvkm])
[ 5095.959594] [<7f0eefc0>] (PVRSRVRelease+0x4c/0x80 [pvrsrvkm]) from [<7f10425c>] (PVRSRVDrmRelease+0x18/0x20 [pvrsrvkm])
[ 5095.970855] [<7f10425c>] (PVRSRVDrmRelease+0x18/0x20 [pvrsrvkm]) from [<80115330>] (__fput+0x104/0x1d0)
[ 5095.980651] [<80115330>] (__fput+0x104/0x1d0) from [<800f937c>] (remove_vma+0x38/0x68)
[ 5095.988922] [<800f937c>] (remove_vma+0x38/0x68) from [<800f94d4>] (exit_mmap+0x128/0x160)
[ 5095.997436] [<800f94d4>] (exit_mmap+0x128/0x160) from [<8007a668>] (mmput+0x3c/0xf8)
[ 5096.005493] [<8007a668>] (mmput+0x3c/0xf8) from [<8007e87c>] (exit_mm+0x120/0x128)
[ 5096.013366] [<8007e87c>] (exit_mm+0x120/0x128) from [<800800a0>] (do_exit+0x1d4/0x33c)
[ 5096.021636] [<800800a0>] (do_exit+0x1d4/0x33c) from [<80080298>] (do_group_exit+0x90/0xc0)
[ 5096.030212] [<80080298>] (do_group_exit+0x90/0xc0) from [<800802d8>] (sys_exit_group+0x10/0x18)
[ 5096.039276] [<800802d8>] (sys_exit_group+0x10/0x18) from [<8003faa0>] (ret_fast_syscall+0x0/0x30)
[ 5096.048522] Code: e1a00120 e92d4030 e1a0c003 ea000007 (e7915003) 
[ 5096.057983] ---[ end trace 5777259082ba3f2d ]---
[ 5096.062805] Fixing recursive fault but reboot is needed!

** Affects: ubuntu-omap4-extras-graphics
     Importance: Medium
         Status: New

-- 
You received this bug notification because you are a member of TI OMAP
Developers, which is subscribed to ubuntu-omap4-extras-graphics.
https://bugs.launchpad.net/bugs/687252

Title:
  [PVR] Unable to handle kernel NULL pointer dereference at virtual address

Status in Ubuntu OMAP4 graphics addons:
  New

Bug description:
  Kernel crashed with NULL pointer at the pvrsrvkm kernel module while running glmemperf.

Using Ubuntu Maverick with the following packages:
pvr-omap4 0.24.9c-1
pvr-omap4-data 0.24.9c-1
pvr-omap4-kernel-dkms 0.24.9-2

[ 5095.570800] Unable to handle kernel NULL pointer dereference at virtual address 00000048
[ 5095.579620] pgd = 80004000
[ 5095.582489] [00000048] *pgd=00000000
[ 5095.586212] Internal error: Oops: 17 [#1] PREEMPT SMP
[ 5095.591461] last sysfs file: /sys/devices/virtual/bdi/0:21/uevent
[ 5095.597808] Modules linked in: fuse dm_crypt pvrsrvkm asix twl4030_pwrbutton sg usbhid usb_storage dm_mirror dm_region_hash dm_log btrfs
[ 5095.610595] CPU: 0    Not tainted  (2.6.35-903-omap4 #18rsalveti2)
[ 5095.617218] PC is at HASH_Key_Comp_Default+0x14/0x44 [pvrsrvkm]
[ 5095.623413] LR is at HASH_Remove_Extended+0x48/0xc8 [pvrsrvkm]
[ 5095.629455] pc : [<7f0f5ac0>]    lr : [<7f0f5d3c>]    psr: 80000013
[ 5095.629486] sp : 91491e0c  ip : 00000000  fp : 00000000
[ 5095.641418] r10: 00000000  r9 : 91490000  r8 : 00000000
[ 5095.646850] r7 : 00000001  r6 : 8f54e5e4  r5 : 91491e2c  r4 : 8f54e660
[ 5095.653625] r3 : 00000000  r2 : 91491e2c  r1 : 00000048  r0 : 00000001
[ 5095.660430] Flags: Nzcv  IRQs on  FIQs on  Mode SVC_32  ISA ARM  Segment user
[ 5095.667846] Control: 10c53c7d  Table: aef3c04a  DAC: 00000015
[ 5095.673828] Process glmemperf (pid: 1930, stack limit = 0x914902f8)
[ 5095.680358] Stack: (0x91491e0c to 0x91492000)
[ 5095.684875] 1e00:                            8f54e660 91491e2c 7f0f5d3c aef8ce00 00000001
[ 5095.693389] 1e20: 00021000 7f0f5dd0 8f54e660 03c18000 00000001 7f0f9398 ac645ba0 a1089740
[ 5095.701904] 1e40: 00021000 7f0f0a8c 00000000 7f0f0c38 a1089400 ac645740 00000001 8f54e820
[ 5095.710418] 1e60: 00000000 7f0f2388 ac645be0 7f0f262c 7f0f25b4 00000001 ac645740 7f0f9ed4
[ 5095.718933] 1e80: 00000000 0000000d 00000001 7f0fa22c 00000000 00000000 0000000d 00000000
[ 5095.727447] 1ea0: 8f54e820 8f54e82c 00000000 ac0f1990 afcb7280 7f0fa448 00000000 00000000
[ 5095.735961] 1ec0: 8fdfc600 7f10c1c8 00000008 7f0fdeec 8fab4d80 7f0eefc0 8fab4d80 a8094e30
[ 5095.744445] 1ee0: 00000008 7f10425c a4edf3c0 80115330 00000000 00000000 a4edf3dc 9077cc60
[ 5095.752960] 1f00: a1185b58 00000000 ac5f1bd8 8003fc48 00000000 800f937c 00000000 ac5f1ba0
[ 5095.761474] 1f20: a1185b58 800f94d4 00000020 00000000 00000169 83de0140 ac5f1ba0 00000000
[ 5095.769989] 1f40: 8159c390 8007a668 ac5f1ba0 8159c000 8159c390 8007e87c 8159c000 8159c000
[ 5095.778503] 1f60: 00000001 8159c000 00000000 00000001 000000f8 800800a0 ac66e000 00000000
[ 5095.787017] 1f80: 91490000 80080298 0000ffff 2aef9174 2aef7754 2aef7754 000000f8 800802d8
[ 5095.795532] 1fa0: 00000000 8003faa0 2aef9174 2aef7754 00000000 2aef9174 2ae7b69c 00000000
[ 5095.804046] 1fc0: 2aef9174 2aef7754 2aef7754 000000f8 00000148 00000000 2ab46000 00000000
[ 5095.812561] 1fe0: 000000f8 7efb937c 2ae7b6c1 2ae17896 00000030 00000000 ff429a21 ff429a21
[ 5095.821136] [<7f0f5ac0>] (HASH_Key_Comp_Default+0x14/0x44 [pvrsrvkm]) from [<7f0f5d3c>] (HASH_Remove_Extended+0x48/0xc8 [pvrsrvkm])
[ 5095.833496] [<7f0f5d3c>] (HASH_Remove_Extended+0x48/0xc8 [pvrsrvkm]) from [<7f0f5dd0>] (HASH_Remove+0x14/0x18 [pvrsrvkm])
[ 5095.844970] [<7f0f5dd0>] (HASH_Remove+0x14/0x18 [pvrsrvkm]) from [<7f0f9398>] (RA_Free+0x18/0x3c [pvrsrvkm])
[ 5095.855255] [<7f0f9398>] (RA_Free+0x18/0x3c [pvrsrvkm]) from [<7f0f0a8c>] (DevMemoryFree+0x28/0x2c [pvrsrvkm])
[ 5095.865722] [<7f0f0a8c>] (DevMemoryFree+0x28/0x2c [pvrsrvkm]) from [<7f0f0c38>] (FreeBuf+0x12c/0x188 [pvrsrvkm])
[ 5095.876342] [<7f0f0c38>] (FreeBuf+0x12c/0x188 [pvrsrvkm]) from [<7f0f2388>] (FreeDeviceMem+0x1c/0x5c [pvrsrvkm])
[ 5095.886993] [<7f0f2388>] (FreeDeviceMem+0x1c/0x5c [pvrsrvkm]) from [<7f0f262c>] (UnmapDeviceMemoryCallBack+0x78/0xb0 [pvrsrvkm])
[ 5095.899078] [<7f0f262c>] (UnmapDeviceMemoryCallBack+0x78/0xb0 [pvrsrvkm]) from [<7f0f9ed4>] (FreeResourceByPtr+0x38/0x98 [pvrsrvkm])
[ 5095.911560] [<7f0f9ed4>] (FreeResourceByPtr+0x38/0x98 [pvrsrvkm]) from [<7f0fa22c>] (T.212+0x28/0x60 [pvrsrvkm])
[ 5095.922210] [<7f0fa22c>] (T.212+0x28/0x60 [pvrsrvkm]) from [<7f0fa448>] (PVRSRVResManDisconnect+0x1e4/0x290 [pvrsrvkm])
[ 5095.933502] [<7f0fa448>] (PVRSRVResManDisconnect+0x1e4/0x290 [pvrsrvkm]) from [<7f0fdeec>] (PVRSRVPerProcessDataDisconnect+0x38/0x58 [pvrsrvkm])
[ 5095.947021] [<7f0fdeec>] (PVRSRVPerProcessDataDisconnect+0x38/0x58 [pvrsrvkm]) from [<7f0eefc0>] (PVRSRVRelease+0x4c/0x80 [pvrsrvkm])
[ 5095.959594] [<7f0eefc0>] (PVRSRVRelease+0x4c/0x80 [pvrsrvkm]) from [<7f10425c>] (PVRSRVDrmRelease+0x18/0x20 [pvrsrvkm])
[ 5095.970855] [<7f10425c>] (PVRSRVDrmRelease+0x18/0x20 [pvrsrvkm]) from [<80115330>] (__fput+0x104/0x1d0)
[ 5095.980651] [<80115330>] (__fput+0x104/0x1d0) from [<800f937c>] (remove_vma+0x38/0x68)
[ 5095.988922] [<800f937c>] (remove_vma+0x38/0x68) from [<800f94d4>] (exit_mmap+0x128/0x160)
[ 5095.997436] [<800f94d4>] (exit_mmap+0x128/0x160) from [<8007a668>] (mmput+0x3c/0xf8)
[ 5096.005493] [<8007a668>] (mmput+0x3c/0xf8) from [<8007e87c>] (exit_mm+0x120/0x128)
[ 5096.013366] [<8007e87c>] (exit_mm+0x120/0x128) from [<800800a0>] (do_exit+0x1d4/0x33c)
[ 5096.021636] [<800800a0>] (do_exit+0x1d4/0x33c) from [<80080298>] (do_group_exit+0x90/0xc0)
[ 5096.030212] [<80080298>] (do_group_exit+0x90/0xc0) from [<800802d8>] (sys_exit_group+0x10/0x18)
[ 5096.039276] [<800802d8>] (sys_exit_group+0x10/0x18) from [<8003faa0>] (ret_fast_syscall+0x0/0x30)
[ 5096.048522] Code: e1a00120 e92d4030 e1a0c003 ea000007 (e7915003) 
[ 5096.057983] ---[ end trace 5777259082ba3f2d ]---
[ 5096.062805] Fixing recursive fault but reboot is needed!





Follow ups

References