2.6.0-test4-mm1 oopses

From: Siim Vahtre
Date: Tue Aug 26 2003 - 04:32:46 EST



I did "modprobe i810fb fbcon" and I got two oopses (dmesg attatched).

After that, all VTs (except the first) were locked and unusable.Linux version 2.6.0-test4-mm1 (siim@void) (gcc version 3.3.2 20030812 (Debian prerelease)) #0 Sun Aug 24 01:07:38 EEST 2003
Video mode to be used for restore is f00
BIOS-provided physical RAM map:
BIOS-e820: 0000000000000000 - 000000000009fc00 (usable)
BIOS-e820: 000000000009fc00 - 00000000000a0000 (reserved)
BIOS-e820: 00000000000e0000 - 0000000000100000 (reserved)
BIOS-e820: 0000000000100000 - 000000000fec0000 (usable)
BIOS-e820: 000000000fec0000 - 000000000fef8000 (ACPI data)
BIOS-e820: 000000000fef8000 - 000000000ff00000 (ACPI NVS)
BIOS-e820: 00000000ffb80000 - 00000000ffc00000 (reserved)
BIOS-e820: 00000000fff00000 - 0000000100000000 (reserved)
254MB LOWMEM available.
On node 0 totalpages: 65216
DMA zone: 4096 pages, LIFO batch:1
Normal zone: 61120 pages, LIFO batch:14
HighMem zone: 0 pages, LIFO batch:1
DMI 2.3 present.
ACPI: RSDP (v000 AMI ) @ 0x000ff980
ACPI: RSDT (v001 D815EA D815EPFV 0x20010918 MSFT 0x00001011) @ 0x0fef0000
ACPI: FADT (v001 D815EA EA81510A 0x20010918 MSFT 0x00001011) @ 0x0fef1000
ACPI: MADT (v001 D815EA EA81510A 0x20010918 MSFT 0x00001011) @ 0x0fee30e4
ACPI: DSDT (v001 D815E2 EA81520A 0x00000023 MSFT 0x0100000b) @ 0x00000000
ACPI: Local APIC address 0xfee00000
ACPI: LAPIC (acpi_id[0x01] lapic_id[0x00] enabled)
Processor #0 6:11 APIC version 17
Building zonelist for node : 0
Kernel command line: auto BOOT_IMAGE=2.6.0-4 ro root=301 console=tty0
Found and enabled local APIC!
current: c033e9c0
current->thread_info: c0388000
Initializing CPU#0
PID hash table entries: 1024 (order 10: 8192 bytes)
Detected 996.421 MHz processor.
Console: colour VGA+ 80x25
Calibrating delay loop... 1970.17 BogoMIPS
Memory: 254464k/260864k available (2001k kernel code, 5700k reserved, 584k data, 336k init, 0k highmem)
zapping low mappings.
Security Scaffold v1.0.0 initialized
Capability LSM initialized
Dentry cache hash table entries: 32768 (order: 5, 131072 bytes)
Inode-cache hash table entries: 16384 (order: 4, 65536 bytes)
Mount-cache hash table entries: 512 (order: 0, 4096 bytes)
-> /dev
-> /dev/console
-> /root
CPU: After generic identify, caps: 0383fbff 00000000 00000000 00000000
CPU: After vendor identify, caps: 0383fbff 00000000 00000000 00000000
CPU: L1 I cache: 16K, L1 D cache: 16K
CPU: L2 cache: 256K
CPU: After all inits, caps: 0383fbff 00000000 00000000 00000040
Intel machine check architecture supported.
Intel machine check reporting enabled on CPU#0.
CPU: Intel(R) Celeron(TM) CPU 1000MHz stepping 01
Enabling fast FPU save and restore... done.
Enabling unmasked SIMD FPU exception support... done.
Checking 'hlt' instruction... OK.
POSIX conformance testing by UNIFIX
enabled ExtINT on CPU#0
ESR value before enabling vector: 00000000
ESR value after enabling vector: 00000000
Using local APIC timer interrupts.
calibrating APIC timer ...
..... CPU clock speed is 1016.0101 MHz.
..... host bus clock speed is 101.0609 MHz.
PM: Adding info for No Bus:legacy
Initializing RT netlink socket
PCI: PCI BIOS revision 2.10 entry at 0xfda95, last bus=1
PCI: Using configuration type 1
mtrr: v2.0 (20020519)
BIO: pool of 256 setup, 14Kb (56 bytes/bio)
biovec pool[0]: 1 bvecs: 256 entries (12 bytes)
biovec pool[1]: 4 bvecs: 256 entries (48 bytes)
biovec pool[2]: 16 bvecs: 256 entries (192 bytes)
biovec pool[3]: 64 bvecs: 256 entries (768 bytes)
biovec pool[4]: 128 bvecs: 256 entries (1536 bytes)
biovec pool[5]: 256 bvecs: 256 entries (3072 bytes)
PCI: Probing PCI hardware
PCI: Probing PCI hardware (bus 00)
PM: Adding info for No Bus:pci0000:00
Transparent bridge - 0000:00:1e.0
PM: Adding info for pci:0000:00:00.0
PM: Adding info for pci:0000:00:02.0
PM: Adding info for pci:0000:00:1e.0
PM: Adding info for pci:0000:00:1f.0
PM: Adding info for pci:0000:00:1f.1
PM: Adding info for pci:0000:00:1f.2
PM: Adding info for pci:0000:00:1f.3
PM: Adding info for pci:0000:00:1f.4
PM: Adding info for pci:0000:00:1f.5
PM: Adding info for pci:0000:01:08.0
PM: Adding info for pci:0000:01:0b.0
PM: Adding info for pci:0000:01:0b.1
PCI: Using IRQ router PIIX [8086/2440] at 0000:00:1f.0
pty: 256 Unix98 ptys configured
Machine check exception polling timer started.
devfs: v1.22 (20021013) Richard Gooch (rgooch@xxxxxxxxxxxxx)
devfs: boot_options: 0x1
Initializing Cryptographic API
Real Time Clock Driver v1.11a
Linux agpgart interface v0.100 (c) Dave Jones
agpgart: Detected an Intel i815 Chipset.
agpgart: Maximum main memory to use for agp memory: 202M
agpgart: AGP aperture is 64M @ 0xf8000000
[drm] Initialized i810 1.4.0 20030605 on minor 0
Hangcheck: starting hangcheck timer 0.5.0 (tick is 180 seconds, margin is 60 seconds).
Serial: 8250/16550 driver $Revision: 1.90 $ IRQ sharing disabled
ttyS0 at I/O 0x3f8 (irq = 4) is a 16550A
ttyS1 at I/O 0x2f8 (irq = 3) is a 16550A
Intel(R) PRO/100 Network Driver - version 2.3.18-k1
Copyright (c) 2003 Intel Corporation

PCI: Found IRQ 11 for device 0000:01:08.0
e100: selftest OK.
e100: eth0: Intel(R) PRO/100 Network Connection
Hardware receive checksums enabled

Uniform Multi-Platform E-IDE driver Revision: 7.00alpha2
ide: Assuming 33MHz system bus speed for PIO modes; override with idebus=xx
ICH2: IDE controller at PCI slot 0000:00:1f.1
ICH2: chipset revision 17
ICH2: not 100% native mode: will probe irqs later
ide0: BM-DMA at 0xffa0-0xffa7, BIOS settings: hda:DMA, hdb:pio
ide1: BM-DMA at 0xffa8-0xffaf, BIOS settings: hdc:pio, hdd:DMA
hda: QUANTUM FIREBALL_TM1280A, ATA DISK drive
PM: Adding info for No Bus:ide0
Using anticipatory scheduling elevator
ide0 at 0x1f0-0x1f7,0x3f6 on irq 14
PM: Adding info for ide:0.0
hdd: NEC CD-ROM DRIVE:282, ATAPI CD/DVD-ROM drive
PM: Adding info for No Bus:ide1
ide1 at 0x170-0x177,0x376 on irq 15
PM: Adding info for ide:1.1
hda: max request size: 128KiB
hda: 2503872 sectors (1281 MB) w/76KiB Cache, CHS=2484/16/63, DMA
/dev/ide/host0/bus0/target0/lun0: p1 p2
end_request: I/O error, dev hdd, sector 0
hdd: ATAPI 40X CD-ROM drive, 128kB Cache, UDMA(33)
Uniform CD-ROM driver Revision: 3.12
mice: PS/2 mouse device common for all mice
input: PC Speaker
input: PS/2 Logitech Mouse on isa0060/serio1
serio: i8042 AUX port at 0x60,0x64 irq 12
input: AT Set 2 keyboard on isa0060/serio0
serio: i8042 KBD port at 0x60,0x64 irq 1
Advanced Linux Sound Architecture Driver Version 0.9.6 (Wed Aug 20 20:27:13 2003 UTC).
PCI: Found IRQ 9 for device 0000:00:1f.5
PCI: Sharing IRQ 9 with 0000:00:1f.3
PCI: Setting latency timer of device 0000:00:1f.5 to 64
intel8x0_measure_ac97_clock: measured 49390 usecs
intel8x0: clocking to 41140
ALSA device list:
#0: Intel 82801BA-ICH2 at 0xe800, irq 9
NET4: Linux TCP/IP 1.0 for NET4.0
IP: routing cache hash table of 2048 buckets, 16Kbytes
TCP: Hash tables configured (established 16384 bind 32768)
NET4: Unix domain sockets 1.0/SMP for Linux NET4.0.
BIOS EDD facility v0.09 2003-Jan-22, 1 devices found
found reiserfs format "3.6" with standard journal
Reiserfs journal params: device hda1, size 8192, journal first block 18, max trans len 1024, max batch 900, max commit age 30, max trans age 30
reiserfs: checking transaction log (hda1) for (hda1)
Using r5 hash to sort names
VFS: Mounted root (reiserfs filesystem) readonly.
Mounted devfs on /dev
Freeing unused kernel memory: 336k freed
Adding 62488k swap on /dev/hda2. Priority:-1 extents:1
e100: eth0 NIC Link is Up 100 Mbps Half duplex
nfs warning: mount version older than kernel
PCI: Found IRQ 11 for device 0000:00:02.0
I810FB: fb0 : Intel(R) 815 (Internal Graphics with AGP) Framebuffer Device v0.9.0
I810FB: Video RAM : 4096K
I810FB: Monitor : H: 30-60 KHz V: 50-100 Hz
I810FB: Mode : 640x480-16bpp@99Hz
Unable to handle kernel NULL pointer dereference<1>Unable to handle kernel NULL pointer dereference at virtual address 00000000
printing eip:
d0971e9a
*pde = 00000000
Oops: 0000 [#1]
PREEMPT
CPU: 0
EIP: 0060:[<d0971e9a>] Not tainted VLI
EFLAGS: 00010287
EIP is at i810fb_cursor+0x1da/0x240 [i810fb]
eax: 00000000 ebx: cf1b6800 ecx: cf7042a0 edx: 00000000
esi: 00000000 edi: 00000010 ebp: cf3cfc00 esp: cdddd6f4
ds: 007b es: 007b ss: 0068
Process modprobe (pid: 796, threadinfo=cdddc000 task=ce2bd3a0)
Stack: d4979000 00000000 0c000c8c 220f202e 00000010 00000008 d4979000 f0000000
00000001 00000003 00240400 8f0f0087 00000001 00000000 00000000 00000000
00000000 cfda6e80 00000001 cfa476a0 0000007f cdf36c40 0000002e 00000000
Call Trace:
[<c02f42d6>] apic_timer_interrupt+0x1a/0x20
[<c01585b5>] bh_lru_install+0xb5/0x100
[<c0158673>] __find_get_block+0x73/0xf0
[<c015871b>] __getblk+0x2b/0x60
[<c01c5ccb>] is_tree_node+0x6b/0x70
[<c01c63c9>] search_by_key+0x6f9/0xf30
[<c01c6dbe>] search_for_position_by_key+0x1be/0x3d0
[<c02f42d6>] apic_timer_interrupt+0x1a/0x20
[<d4a024ac>] accel_putcs+0x2bc/0x370 [fbcon]
[<c0246e65>] move_buf_aligned+0x35/0x50
[<d4a038b5>] fbcon_cursor+0x3b5/0x500 [fbcon]
[<d4a034f0>] fbcon_putcs+0x90/0xa0 [fbcon]
[<c01f5e38>] set_cursor+0x78/0xa0
[<c01f94a8>] vt_console_print+0x1f8/0x300
[<c011fa0e>] __call_console_drivers+0x5e/0x60
[<c011faf5>] call_console_drivers+0x65/0x120
[<c011fe3d>] release_console_sem+0x4d/0xd0
[<c011fd56>] printk+0x136/0x190
[<d0971e9a>] i810fb_cursor+0x1da/0x240 [i810fb]
[<d0971e9a>] i810fb_cursor+0x1da/0x240 [i810fb]
[<c0119c7a>] do_page_fault+0xaa/0x479
[<c011d5b0>] autoremove_wake_function+0x0/0x50
[<c013c777>] mempool_alloc+0x77/0x160
[<c011d5b0>] autoremove_wake_function+0x0/0x50
[<c021ec25>] as_set_request+0x25/0x70
[<d0971566>] i810fb_getcolreg+0x76/0x150 [i810fb]
[<c0119bd0>] do_page_fault+0x0/0x479
[<c02f4373>] error_code+0x2f/0x38
[<d0971e9a>] i810fb_cursor+0x1da/0x240 [i810fb]
[<c011d5b0>] autoremove_wake_function+0x0/0x50
[<c013d580>] __rmqueue+0xe0/0x150
[<c013da03>] buffered_rmqueue+0xd3/0x190
[<c0158673>] __find_get_block+0x73/0xf0
[<c011b42e>] scheduler_tick+0x23e/0x490
[<c0127376>] update_process_times+0x46/0x60
[<c01271e6>] update_wall_time+0x16/0x40
[<c0127670>] do_timer+0xe0/0xf0
[<c010cd7d>] do_IRQ+0xfd/0x130
[<c02f42b4>] common_interrupt+0x18/0x20
[<d4a024ac>] accel_putcs+0x2bc/0x370 [fbcon]
[<c02f42d6>] apic_timer_interrupt+0x1a/0x20
[<c0246e65>] move_buf_aligned+0x35/0x50
[<d4a038b5>] fbcon_cursor+0x3b5/0x500 [fbcon]
[<c01f5e38>] set_cursor+0x78/0xa0
[<c01f5ff8>] redraw_screen+0x108/0x170
[<c01f66fe>] vc_resize+0x3fe/0x4e0
[<c0127376>] update_process_times+0x46/0x60
[<d4a02d13>] fbcon_set_display+0x353/0x760 [fbcon]
[<c010cd7d>] do_IRQ+0xfd/0x130
[<d4a0298d>] fbcon_init+0x4d/0x60 [fbcon]
[<c01f612a>] visual_init+0xaa/0x110
[<c01f9d42>] take_over_console+0x152/0x1d0
[<d0956254>] init_module+0x34/0x41 [fbcon]
[<c0135cef>] sys_init_module+0xff/0x210
[<c02f3947>] syscall_call+0x7/0xb

Code: ff ff c7 44 24 04 01 00 00 00 8b 54 24 18 89 14 24 e8 4b ed ff ff eb e3 31 d2 39 fa 7d b3 8b 76 2c 8b 8b 0c 01 00 00 0f b6 04 0a <32> 04 32 88 44 14 1c 42 39 fa 7c f0 eb 98 8b 46 20 89 83 24 01
<1>Unable to handle kernel NULL pointer dereference at virtual address 00000000
printing eip:
d0971e9a
*pde = 00000000
Oops: 0000 [#2]
PREEMPT
CPU: 0
EIP: 0060:[<d0971e9a>] Not tainted VLI
EFLAGS: 00010287
EIP is at i810fb_cursor+0x1da/0x240 [i810fb]
eax: 00000000 ebx: cf1b6800 ecx: cf7042a0 edx: 00000000
esi: 00000000 edi: 00000010 ebp: cf3cfc00 esp: cef71b68
ds: 007b es: 007b ss: 0068
Process bash (pid: 794, threadinfo=cef70000 task=ce68e100)
Stack: d4979000 00000000 00000000 00000003 00000010 00000008 d4979000 00000000
00000000 cfd8c800 cef71c1c 00000000 c01cfd76 cef71c1c cfd7b200 00000001
00000000 00000000 cfda6e80 00000002 00000000 00000000 00000000 00000012
Call Trace:
[<c01cfd76>] do_journal_end+0xf6/0xcc0
[<c01585b5>] bh_lru_install+0xb5/0x100
[<c0158673>] __find_get_block+0x73/0xf0
[<c015871b>] __getblk+0x2b/0x60
[<c01c5ccb>] is_tree_node+0x6b/0x70
[<c01c63c9>] search_by_key+0x6f9/0xf30
[<c0148100>] handle_mm_fault+0x100/0x180
[<c01cb2cb>] get_cnode+0x1b/0x90
[<c01cedff>] journal_mark_dirty+0x17f/0x300
[<c01b127a>] make_cpu_key+0x5a/0x70
[<c01cf729>] check_journal_end+0x199/0x2b0
[<c01cfd76>] do_journal_end+0xf6/0xcc0
[<c0246e65>] move_buf_aligned+0x35/0x50
[<d4a038b5>] fbcon_cursor+0x3b5/0x500 [fbcon]
[<c01f5e38>] set_cursor+0x78/0xa0
[<c01f999a>] con_flush_chars+0x4a/0x50
[<c01e97d5>] opost_block+0x135/0x1f0
[<c01ebb64>] write_chan+0x1b4/0x260
[<c01480e0>] handle_mm_fault+0xe0/0x180
[<c011bcb0>] default_wake_function+0x0/0x30
[<c011bcb0>] default_wake_function+0x0/0x30
[<c01e5c98>] tty_write+0x278/0x330
[<c01eb9b0>] write_chan+0x0/0x260
[<c01e5a20>] tty_write+0x0/0x330
[<c01559bc>] vfs_write+0xec/0x150
[<c0155ad2>] sys_write+0x42/0x70
[<c02f3947>] syscall_call+0x7/0xb

Code: ff ff c7 44 24 04 01 00 00 00 8b 54 24 18 89 14 24 e8 4b ed ff ff eb e3 31 d2 39 fa 7d b3 8b 76 2c 8b 8b 0c 01 00 00 0f b6 04 0a <32> 04 32 88 44 14 1c 42 39 fa 7c f0 eb 98 8b 46 20 89 83 24 01