2.6 kernel OOPs with Nomad MuVo MP3 player

From: Derek Witt
Date: Sat May 29 2004 - 02:41:59 EST


Good morning.

I am attempting to mount my Creative Nomad MuVo MP3 Player. However,
every time I try to mount or copy to the drive, I constantly get a
Kernel oops. I am currently running 2.6.6-rc1 under Gentoo 1.4. SuSE 9.0
running vanilla 2.6.5 returns the same problem.

My dump indicates a problem with usb-storage trying to preempt parts of
itself.

The included dump is during a copy attempt.

I am quite puzzled by this.. I'm going to rebuild my kernel sans preempt
and see what happens.

Here's my information below.

cat /proc/bus/usb/devices (for my Nomad):

T: Bus=01 Lev=01 Prnt=01 Port=01 Cnt=02 Dev#= 4 Spd=12 MxCh= 0
D: Ver= 1.10 Cls=00(>ifc ) Sub=00 Prot=00 MxPS=64 #Cfgs= 1
P: Vendor=041e ProdID=4106 Rev= 0.01
S: Manufacturer=Creative Tech
S: Product=NOMAD MuVo
S: SerialNumber=000000000000
C:* #Ifs= 1 Cfg#= 1 Atr=c0 MxPwr=100mA
I: If#= 0 Alt= 0 #EPs= 2 Cls=08(stor.) Sub=06 Prot=50
Driver=usb-storage
E: Ad=04(O) Atr=02(Bulk) MxPS= 64 Ivl=0ms
E: Ad=81(I) Atr=02(Bulk) MxPS= 64 Ivl=0ms


cat /proc/ioports:

0000-001f : dma1
0020-0021 : pic1
0040-005f : timer
0060-006f : keyboard
0070-0077 : rtc
0080-008f : dma page reg
00a0-00a1 : pic2
00c0-00df : dma2
00f0-00ff : fpu
0170-0177 : ide1
01f0-01f7 : ide0
0376-0376 : ide1
0378-037a : parport0
03c0-03df : vga+
03e8-03ef : serial
03f6-03f6 : ide0
0cf8-0cff : PCI conf1
5000-500f : 0000:00:07.4
6000-607f : 0000:00:07.4
d000-d00f : 0000:00:07.1
d400-d41f : 0000:00:07.2
d400-d41f : uhci_hcd
d800-d81f : 0000:00:07.3
d800-d81f : uhci_hcd
dc00-dc1f : 0000:00:0a.0
dc00-dc1f : EMU10K1
e000-e007 : 0000:00:0a.1
e400-e4ff : 0000:00:0b.0
e400-e4ff : 8139too

cat /proc/interrupts:

CPU0
0: 89597648 XT-PIC timer
1: 26427 XT-PIC i8042
2: 0 XT-PIC cascade
3: 436611 XT-PIC EMU10K1
4: 0 XT-PIC acpi
8: 2 XT-PIC rtc
10: 6019061 XT-PIC nvidia
11: 1906902 XT-PIC uhci_hcd, uhci_hcd, eth0
12: 229068 XT-PIC i8042
14: 240778 XT-PIC ide0
15: 38 XT-PIC ide1
NMI: 0
LOC: 89597802
ERR: 184
MIS: 0

lspci:

00:00.0 Host bridge: VIA Technologies, Inc. VT82C693A/694x [Apollo
PRO133x] (rev c4)
Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop-
ParErr- Stepping- SERR- FastB2B-
Status: Cap+ 66Mhz- UDF- FastB2B- ParErr- DEVSEL=medium >TAbort-
<TAbort- <MAbort+ >SERR- <PERR-
Latency: 8
Region 0: Memory at d8000000 (32-bit, prefetchable) [size=64M]
Capabilities: [a0] AGP version 2.0
Status: RQ=32 Iso- ArqSz=0 Cal=0 SBA+ ITACoh- GART64-
HTrans- 64bit- FW+ AGP3- Rate=x1,x2
Command: RQ=1 ArqSz=0 Cal=0 SBA- AGP+ GART64- 64bit- FW-
Rate=x2
Capabilities: [c0] Power Management version 2
Flags: PMEClk- DSI- D1- D2- AuxCurrent=0mA
PME(D0-,D1-,D2-,D3hot-,D3cold-)
Status: D0 PME-Enable- DSel=0 DScale=0 PME-

00:01.0 PCI bridge: VIA Technologies, Inc. VT82C598/694x [Apollo
MVP3/Pro133x AGP] (prog-if 00 [Normal decode])
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop-
ParErr- Stepping- SERR- FastB2B-
Status: Cap+ 66Mhz+ UDF- FastB2B- ParErr- DEVSEL=medium >TAbort-
<TAbort- <MAbort+ >SERR- <PERR-
Latency: 0
Bus: primary=00, secondary=01, subordinate=01, sec-latency=0
I/O behind bridge: 0000f000-00000fff
Memory behind bridge: dc000000-ddffffff
Prefetchable memory behind bridge: d0000000-d7ffffff
BridgeCtl: Parity- SERR- NoISA+ VGA+ MAbort- >Reset- FastB2B-
Capabilities: [80] Power Management version 2
Flags: PMEClk- DSI- D1+ D2- AuxCurrent=0mA
PME(D0-,D1-,D2-,D3hot-,D3cold-)
Status: D0 PME-Enable- DSel=0 DScale=0 PME-

00:07.0 ISA bridge: VIA Technologies, Inc. VT82C686 [Apollo Super South]
(rev 40)
Subsystem: VIA Technologies, Inc. VT82C686/A PCI to ISA Bridge
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop-
ParErr- Stepping+ SERR- FastB2B-
Status: Cap+ 66Mhz- UDF- FastB2B- ParErr- DEVSEL=medium >TAbort-
<TAbort- <MAbort- >SERR- <PERR-
Latency: 0
Capabilities: [c0] Power Management version 2
Flags: PMEClk- DSI- D1- D2- AuxCurrent=0mA
PME(D0-,D1-,D2-,D3hot-,D3cold-)
Status: D0 PME-Enable- DSel=0 DScale=0 PME-

00:07.1 IDE interface: VIA Technologies, Inc.
VT82C586A/B/VT82C686/A/B/VT823x/A/C PIPC Bus Master IDE (rev 06)
(prog-if 8a [Master SecP PriP])
Subsystem: VIA Technologies, Inc.
VT82C586/B/VT82C686/A/B/VT8233/A/C/VT8235 PIPC Bus Master IDE
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop-
ParErr- Stepping- SERR- FastB2B-
Status: Cap+ 66Mhz- UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort-
<TAbort- <MAbort- >SERR- <PERR-
Latency: 32
Region 4: I/O ports at d000 [size=16]
Capabilities: [c0] Power Management version 2
Flags: PMEClk- DSI- D1- D2- AuxCurrent=0mA
PME(D0-,D1-,D2-,D3hot-,D3cold-)
Status: D0 PME-Enable- DSel=0 DScale=0 PME-

00:07.2 USB Controller: VIA Technologies, Inc. VT82xxxxx UHCI USB 1.1
Controller (rev 16) (prog-if 00 [UHCI])
Subsystem: VIA Technologies, Inc. (Wrong ID) USB Controller
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop-
ParErr- Stepping- SERR- FastB2B-
Status: Cap+ 66Mhz- UDF- FastB2B- ParErr- DEVSEL=medium >TAbort-
<TAbort- <MAbort- >SERR- <PERR-
Latency: 32, cache line size 08
Interrupt: pin D routed to IRQ 11
Region 4: I/O ports at d400 [size=32]
Capabilities: [80] Power Management version 2
Flags: PMEClk- DSI- D1- D2- AuxCurrent=0mA
PME(D0-,D1-,D2-,D3hot-,D3cold-)
Status: D0 PME-Enable- DSel=0 DScale=0 PME-

00:07.3 USB Controller: VIA Technologies, Inc. VT82xxxxx UHCI USB 1.1
Controller (rev 16) (prog-if 00 [UHCI])
Subsystem: VIA Technologies, Inc. (Wrong ID) USB Controller
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop-
ParErr- Stepping- SERR- FastB2B-
Status: Cap+ 66Mhz- UDF- FastB2B- ParErr- DEVSEL=medium >TAbort-
<TAbort- <MAbort- >SERR- <PERR-
Latency: 32, cache line size 08
Interrupt: pin D routed to IRQ 11
Region 4: I/O ports at d800 [size=32]
Capabilities: [80] Power Management version 2
Flags: PMEClk- DSI- D1- D2- AuxCurrent=0mA
PME(D0-,D1-,D2-,D3hot-,D3cold-)
Status: D0 PME-Enable- DSel=0 DScale=0 PME-

00:07.4 Bridge: VIA Technologies, Inc. VT82C686 [Apollo Super ACPI] (rev
40)
Control: I/O- Mem- BusMaster- SpecCycle- MemWINV- VGASnoop-
ParErr- Stepping- SERR- FastB2B-
Status: Cap+ 66Mhz- UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort-
<TAbort- <MAbort- >SERR- <PERR-
Interrupt: pin ? routed to IRQ 4
Capabilities: [68] Power Management version 2
Flags: PMEClk- DSI- D1- D2- AuxCurrent=0mA
PME(D0-,D1-,D2-,D3hot-,D3cold-)
Status: D0 PME-Enable- DSel=0 DScale=0 PME-




Derek J Witt,
dwitt1@xxxxxxxxxx

FAT: Directory bread(block 494) failed
Unable to handle kernel NULL pointer dereference at virtual address 00000164
printing eip:
c027e8bc
*pde = 00000000
Oops: 0000 [#1]
PREEMPT
CPU: 0
EIP: 0060:[<c027e8bc>] Tainted: P
EFLAGS: 00210803 (2.6.6-rc1)
EIP is at as_find_arq_hash+0x2c/0xb0
eax: 00000164 ebx: 00000000 ecx: cbcf52a0 edx: 00000004
esi: cbcf52a0 edi: 000001ef ebp: 00000000 esp: d1f97b50
ds: 007b es: 007b ss: 0068
Process cp (pid: 12777, threadinfo=d1f96000 task=cdbf05f0)
Stack: c011888a d1f97c64 00000164 00000000 cbcf52a0 000001f0 00000000 c028071d
cbcf52a0 000001ef 00000000 c468aca0 c468aca0 cbcf52a0 00000000 c5664000
00000000 00000000 c02778a9 c5664000 d1f97bd0 c468a3a0 c027ac78 c5664000
Call Trace:
[<c011888a>] __wake_up_common+0x3a/0x60
[<c028071d>] as_merge+0x11d/0x200
[<c02778a9>] elv_merge+0x29/0x30
[<c027ac78>] __make_request+0x368/0x5c0
[<c027b03e>] generic_make_request+0x16e/0x1f0
[<c0119b30>] autoremove_wake_function+0x0/0x50
[<c027b11d>] submit_bio+0x5d/0x100
[<c01561d0>] submit_bh+0xa0/0x200
[<c0153de9>] __bread_slow+0x59/0xb0
[<c015416e>] __bread+0x3e/0x50
[<c01e0356>] fat__get_entry+0xb6/0x194
[<c01dd3bc>] fat_get_short_entry+0xac/0xb0
[<c01dd58c>] fat_scan+0x5c/0x94
[<c01e1d2b>] vfat_find_form+0x3b/0x60
[<c01e2143>] vfat_create_shortname+0x3f3/0x790
[<c0138e34>] __alloc_pages+0xa4/0x320
[<c01e2860>] vfat_build_slots+0x150/0x2f0
[<c01e2a80>] vfat_add_entry+0x80/0x280
[<c016993a>] d_splice_alias+0x4a/0x110
[<c01e3023>] vfat_create+0x63/0x180
[<c0169649>] d_alloc+0x199/0x1d0
[<c015f02f>] permission+0x2f/0x50
[<c01605b9>] vfs_create+0x79/0xd0
[<c0160baf>] open_namei+0x3bf/0x410
[<c0150393>] filp_open+0x43/0x70
[<c015086b>] sys_open+0x5b/0x90
[<c01061ab>] syscall_call+0x7/0xb

Code: 8b 30 39 c6 74 40 8d b4 26 00 00 00 00 8d bc 27 00 00 00 00
<6>note: cp[12777] exited with preempt_count 2
bad: scheduling while atomic!
Call Trace:
[<c0383687>] schedule+0x5a7/0x5b0
[<c0141aeb>] zap_pmd_range+0x4b/0x70
[<c0141b5b>] unmap_page_range+0x4b/0x80
[<c0141d6d>] unmap_vmas+0x1dd/0x240
[<c0145d70>] exit_mmap+0x80/0x1a0
[<c0119e35>] mmput+0x65/0x90
[<c011e277>] do_exit+0x167/0x3f0
[<c01072ac>] die+0xfc/0x100
[<c0116e89>] do_page_fault+0x1f9/0x519
[<c0117df3>] try_to_wake_up+0xa3/0x160
[<c0117df3>] try_to_wake_up+0xa3/0x160
[<c0123eb0>] run_timer_softirq+0x110/0x1b0
[<c011888a>] __wake_up_common+0x3a/0x60
[<c0118932>] __wake_up_locked+0x22/0x30
[<c0105101>] __down_trylock+0x51/0x70
[<c0137a31>] mempool_alloc+0x91/0x190
[<c0116c90>] do_page_fault+0x0/0x519
[<c0106bd5>] error_code+0x2d/0x38
[<c011007b>] mtrr_close+0x1b/0x90
[<c027e8bc>] as_find_arq_hash+0x2c/0xb0
[<c011888a>] __wake_up_common+0x3a/0x60
[<c028071d>] as_merge+0x11d/0x200
[<c02778a9>] elv_merge+0x29/0x30
[<c027ac78>] __make_request+0x368/0x5c0
[<c027b03e>] generic_make_request+0x16e/0x1f0
[<c0119b30>] autoremove_wake_function+0x0/0x50
[<c027b11d>] submit_bio+0x5d/0x100
[<c01561d0>] submit_bh+0xa0/0x200
[<c0153de9>] __bread_slow+0x59/0xb0
[<c015416e>] __bread+0x3e/0x50
[<c01e0356>] fat__get_entry+0xb6/0x194
[<c01dd3bc>] fat_get_short_entry+0xac/0xb0
[<c01dd58c>] fat_scan+0x5c/0x94
[<c01e1d2b>] vfat_find_form+0x3b/0x60
[<c01e2143>] vfat_create_shortname+0x3f3/0x790
[<c0138e34>] __alloc_pages+0xa4/0x320
[<c01e2860>] vfat_build_slots+0x150/0x2f0
[<c01e2a80>] vfat_add_entry+0x80/0x280
[<c016993a>] d_splice_alias+0x4a/0x110
[<c01e3023>] vfat_create+0x63/0x180
[<c0169649>] d_alloc+0x199/0x1d0
[<c015f02f>] permission+0x2f/0x50
[<c01605b9>] vfs_create+0x79/0xd0
[<c0160baf>] open_namei+0x3bf/0x410
[<c0150393>] filp_open+0x43/0x70
[<c015086b>] sys_open+0x5b/0x90
[<c01061ab>] syscall_call+0x7/0xb

Attachment: signature.asc
Description: This is a digitally signed message part