From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S261283AbVHAW6O (ORCPT ); Mon, 1 Aug 2005 18:58:14 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S261273AbVHAW6N (ORCPT ); Mon, 1 Aug 2005 18:58:13 -0400 Received: from hermes.domdv.de ([193.102.202.1]:56846 "EHLO hermes.domdv.de") by vger.kernel.org with ESMTP id S261283AbVHAW5r (ORCPT ); Mon, 1 Aug 2005 18:57:47 -0400 Message-ID: <42EEA8E9.5090107@domdv.de> Date: Tue, 02 Aug 2005 00:57:45 +0200 From: Andreas Steinmetz User-Agent: Mozilla Thunderbird 1.0.6 (X11/20050724) X-Accept-Language: en-us, en MIME-Version: 1.0 To: marcel@holtmann.org CC: rml@tech9.net, Dominik Brodowski , Linux Kernel Mailinglist Subject: 2.6.13-rc4-git4: bluetooth oops on pcmcia shutdown X-Enigmail-Version: 0.92.0.0 Content-Type: multipart/mixed; boundary="------------020201090308040708030208" Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org This is a multi-part message in MIME format. --------------020201090308040708030208 Content-Type: text/plain; charset=ISO-8859-15 Content-Transfer-Encoding: 7bit The attached bluetooth oops can be reliably reproduced on my x86_64 laptop. It happens when hciattach is still running while a sequence of "cardctl eject" and then "killproc /sbin/cardmgr" is executed. Though this seems to point to preempt I could manage to cause similar oopses on non-preemptible kernels a while ago. -- Andreas Steinmetz SPAMmers use robotrap@domdv.de --------------020201090308040708030208 Content-Type: text/plain; name="bluez_oops.txt" Content-Transfer-Encoding: 7bit Content-Disposition: inline; filename="bluez_oops.txt" Unable to handle kernel NULL pointer dereference at 0000000000000014 RIP: {uart_flush_buffer+43} PGD 0 Oops: 0002 [1] PREEMPT CPU 0 Modules linked in: hci_usb serial_cs pcmcia yenta_socket rsrc_nonstatic pcmcia_core ehci_hcd uhci_hcd parport_pc parport snd_via82xx_modem snd_seq_oss snd_seq_midi_event snd_seq snd_pcm_oss snd_mixer_oss hfc_usb ipaq usbhid pl2303 usbserial usb_storage snd_via82xx gameport sd_mod snd_ac97_codec snd_pcm snd_timer snd_page_alloc snd_mpu401_uart snd_rawmidi snd_seq_device hisax isdn nls_iso8859_15 nls_cp850 ip_conntrack_ftp ipt_state ip_conntrack ipt_ULOG iptable_filter ipt_REJECT ip_tables nfsd exportfs lockd sunrpc autofs4 cifs sbp2 Pid: 2995, comm: hciattach Not tainted 2.6.13-rc4-git4-gringo RIP: 0010:[] {uart_flush_buffer+43} RSP: 0018:ffff81001c0b9b68 EFLAGS: 00010013 RAX: 0000000000000000 RBX: ffff810002208c80 RCX: ffff81001e6d3018 RDX: 0000000000000000 RSI: ffff81001c0b9b58 RDI: 0000000000000001 RBP: ffff81001e6d3000 R08: ffff81003f01ce98 R09: 0000000000000001 R10: 00000000ffffffff R11: 0000000000000246 R12: ffff81003d76ba80 R13: ffffffff8052e6c0 R14: 0000000000000000 R15: 0000000000000000 FS: 00002aaaaaf3edb0(0000) GS:ffffffff8061c800(0000) knlGS:00000000556d16b0 CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b CR2: 0000000000000014 CR3: 000000001b1a2000 CR4: 00000000000006e0 Process hciattach (pid: 2995, threadinfo ffff81001c0b8000, task ffff81001f94f4a0) Stack: 0000000000000292 ffff81003db82200 ffff81001e6d3000 ffffffff803567ac 0000000000000000 ffff81003db82200 ffff81002614ac00 ffffffff803567e4 ffffffff8052e6c0 ffffffff80356931 Call Trace:{hci_uart_flush+92} {hci_uart_close+20} {hci_uart_tty_close+49} {release_dev+1805} {free_hot_cold_page+239} {free_pgd_range+1078} {_atomic_dec_and_lock+38} {dput+35} {tty_release+17} {__fput+178} {filp_close+110} {put_files_struct+115} {do_exit+522} {__dequeue_signal+501} {do_group_exit+269} {get_signal_to_deliver+1515} {do_signal+159} {thread_return+0} {thread_return+220} {lock_timer_base+49} {del_timer+104} {schedule_timeout+156} {process_timeout+0} {sysret_signal+28} {ptregscall_common+103} Code: c7 40 14 00 00 00 00 c7 40 10 00 00 00 00 ff 34 24 9d bf 01 RIP {uart_flush_buffer+43} RSP CR2: 0000000000000014 <1>Fixing recursive fault but reboot is needed! scheduling while atomic: hciattach/0x00000001/2995 Call Trace:{schedule+122} {do_exit+246} {do_unblank_screen+21} {do_page_fault+1807} {error_exit+0} {uart_flush_buffer+43} {uart_flush_buffer+39} {hci_uart_flush+92} {hci_uart_close+20} {hci_uart_tty_close+49} {release_dev+1805} {free_hot_cold_page+239} {free_pgd_range+1078} {_atomic_dec_and_lock+38} {dput+35} {tty_release+17} {__fput+178} {filp_close+110} {put_files_struct+115} {do_exit+522} {__dequeue_signal+501} {do_group_exit+269} {get_signal_to_deliver+1515} {do_signal+159} {thread_return+0} {thread_return+220} {lock_timer_base+49} {del_timer+104} {schedule_timeout+156} {process_timeout+0} {sysret_signal+28} {ptregscall_common+103} --------------020201090308040708030208--