Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 363211 - 2.6.38-gentoo-r1 NULL pointer dereference at wlc_dotxstatus (drivers/staging/brcm80211)
Summary: 2.6.38-gentoo-r1 NULL pointer dereference at wlc_dotxstatus (drivers/staging/...
Status: RESOLVED UPSTREAM
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] Core system (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Gentoo Kernel Bug Wranglers and Kernel Maintainers
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2011-04-12 02:07 UTC by randy
Modified: 2011-05-24 17:07 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments
brcm_nullptr_fix.patch (brcm_nullptr_fix.patch,631 bytes, patch)
2011-04-19 10:56 UTC, Stratos Psomadakis (RETIRED)
Details | Diff
.config (.config,74.08 KB, text/plain)
2011-05-09 02:28 UTC, randy
Details
dmesg (dmesg.txt,71.22 KB, text/plain)
2011-05-09 02:39 UTC, randy
Details

Note You need to log in before you can comment on or make changes to this bug.
Description randy 2011-04-12 02:07:53 UTC
Bug: unable to handle kernel NULL pointer dereference at    (null)
IP: [<ffffffffa001808b>] wlc_dotxstatus+0x86/0x93e[wl]
PGD ca04d067 PUD cf79f067 PMD 0
Oops:0000 [#1] SMP
Last sysfs file:/sys/devices/virtual/sound/times/uevent
CPU 3
Modules linked in: w83627ehf hwmon_vid fuse test_nx xt_mark scsi_wait_scan nvidia (P)
PID: 0: comm: kworker/0:1 Tainted: P  W 2.6.38-gentoo-r1
Comment 1 Jeroen Roovers (RETIRED) gentoo-dev 2011-04-12 18:07:13 UTC
1) Please post your `emerge --info' output.
2) Try reproducing the problem without the nvidia module loaded.
3) If you can't do (2), then post your `emerge -vpq nvidia-drivers' output too.
Comment 2 randy 2011-04-13 04:56:46 UTC
[CODE]Portage 2.1.9.45 (default/linux/amd64/10.0/desktop/gnome, gcc-4.5.2, glibc-2.13-r2, 2.6.38-gentoo-r1 x86_64)
=================================================================
System uname: Linux-2.6.38-gentoo-r1-x86_64-AMD_Phenom-tm-_9500_Quad-Core_Processor-with-gentoo-2.0.2
Timestamp of tree: Thu, 07 Apr 2011 18:45:01 +0000
app-shells/bash:     4.2_p8
dev-java/java-config: 2.1.11-r3
dev-lang/python:     2.6.6-r2, 2.7.1-r1, 3.1.3-r1
dev-util/cmake:      2.8.4
sys-apps/baselayout: 2.0.2
sys-apps/openrc:     0.8.0
sys-apps/sandbox:    2.5
sys-devel/autoconf:  2.13, 2.68
sys-devel/automake:  1.9.6-r3, 1.10.3, 1.11.1
sys-devel/binutils:  2.21
sys-devel/gcc:       4.5.2
sys-devel/gcc-config: 1.4.1
sys-devel/libtool:   2.4-r1
sys-devel/make:      3.82
virtual/os-headers:  2.6.38 (sys-kernel/linux-headers)
ACCEPT_KEYWORDS="amd64 ~amd64 ~x86"
ACCEPT_LICENSE="*"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-O2 -march=amdfam10 -fomit-frame-pointer -pipe"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/share/gnupg/qualified.txt"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/env.d/java/ /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/php/apache2-php5.3/ext-active/ /etc/php/cgi-php5.3/ext-active/ /etc/php/cli-php5.3/ext-active/ /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo"
CXXFLAGS="-O2 -march=amdfam10 -fomit-frame-pointer -pipe"
DISTDIR="/usr/portage/distfiles"
FEATURES="assume-digests binpkg-logs distlocks fixlafiles fixpackages news parallel-fetch protect-owned sandbox sfperms strict unknown-features-warn unmerge-logs unmerge-orphans userfetch"
FFLAGS=""
GENTOO_MIRRORS="http://mirror.mcs.anl.gov/pub/gentoo/ http://gentoo.chem.wisc.edu/gentoo/"
LANG="C"
LDFLAGS="-Wl,-O1 -Wl,--as-needed"
MAKEOPTS="-j5"
PKGDIR="/usr/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY=""
SYNC="rsync://rsync.us.gentoo.org/gentoo-portage"
USE="3dnow NetworkManager X a52 aac aalib acl acpi aim alsa amd64 apache2 apm atm bash-completion bluetooth bonobo branding bzip2 cairo calendar caps cdb cdda cddb cdinstall cdparanoia cdr cgi cli consolekit cracklib crypt cscope css cups curl curlwrappers cvs cxx dbus dbx debug dga djvu dri dts dvb dvd dvdr eds emacs emboss emerald encode enscript evo examples exif expat fam fastcgi fbcon ffmpeg fftw firefox flac fontconfig fortran freetds ftp gcj gd gdu geoip gif gimp ginac glut gnome gnome-keyring gnuplot gnustep gnutils gphoto gpm gps graphviz gsl gstreamer gtk gtkhtml gzip hardened hddtemp hdf5 iconv icu ieee1394 imagemagick imlib inifile innodb ipod ipv6 jabber java6 javascript jbig joystick jpeg lame latex lcms libcaca libgda libnotify libsamplerate libwww lirc lm_sensors lua lzma lzo mad matroska mbox mdnsresponder-compat mikmod mime mmap mmx mmxext mng modules mono motif mozilla mp3 mp4 mpeg mplayer msql mssql mtp mudflap multilib nas nautilus ncurses neXt nis nls nntp nptl nptlonly nsplugin odbc offensive ogg openal opengl openmp oravle osc oss pam pango pcntl pcre pda pdf perl php plotutils png policykit posix postgres ppds pppd prelude pulseaudio python qdbm qt3support quicktime raw rdesktop readline recode rss ruby samba sasl scanner sdl session sharedext sharedmem slang slp smartcard smp sndfile snmp soap sockets socks5 sound source spell sqlite sse sse2 sse3 sse4a ssl startup-notification static-libs subversion suid svg symlink sysfs syslog taglib tcpd theora threads tidy tiff timidity tk tokenizer truetype udev unicode usb v4l v4l2 vcd vhosts videos vnc vorbis wavpack wifi x264 xcb xcomposite xft xine xinerama xinetd xml xmlrpc xorg xosd xpm xscreensaver xulrunner xv xvid zeroconf zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CAMERAS="ptp2" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ubx" INPUT_DEVICES="evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" PHP_TARGETS="php5-3" RUBY_TARGETS="ruby18" USERLAND="GNU" VIDEO_CARDS="nvidia" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account" 
Unset:  CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LC_ALL, LINGUAS, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS[/CODE]

It seems I can't reproduce with xdm stopped so...:

[CODE][ebuild   R   ] x11-drivers/nvidia-drivers-260.19.44  USE="acpi gtk (multilib) -custom-cflags"[/CODE](In reply to comment #1)
> 1) Please post your `emerge --info' output.
> 2) Try reproducing the problem without the nvidia module loaded.
> 3) If you can't do (2), then post your `emerge -vpq nvidia-drivers' output too.

(In reply to comment #1)
> 1) Please post your `emerge --info' output.
> 2) Try reproducing the problem without the nvidia module loaded.
> 3) If you can't do (2), then post your `emerge -vpq nvidia-drivers' output too.
Comment 3 Stratos Psomadakis (RETIRED) gentoo-dev 2011-04-19 10:56:51 UTC
Created attachment 270511 [details, diff]
brcm_nullptr_fix.patch

This patch [1] seems to fix a NULL pointer dereference at wlc_dotxstatus.c

It's included in 2.6.39-rcs, along with another patch [2] that fixes another possible NULL pointer dereference which doesn't seem to be related to your bug, but anyway.

Either try the patch, or try booting a 2.6.39-rc, and see if the bug occurs again.

[1] http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=8ada0be34014565dc4e57d1194d18594a5bcd161;hp=0bf97bb1cff7204111c479c899dae30823314761
[2] http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=0bf97bb1cff7204111c479c899dae30823314761;hp=0789b0033112e301f086f99bd15c7d67c051a51e
Comment 4 randy 2011-04-20 19:08:59 UTC
Hey thanks for the info but... no dice. I get the exact same trace on 2.6.39-rc3.


(In reply to comment #3)
> Created attachment 270511 [details, diff]
> brcm_nullptr_fix.patch
> 
> This patch [1] seems to fix a NULL pointer dereference at wlc_dotxstatus.c
> 
> It's included in 2.6.39-rcs, along with another patch [2] that fixes another
> possible NULL pointer dereference which doesn't seem to be related to your bug,
> but anyway.
> 
> Either try the patch, or try booting a 2.6.39-rc, and see if the bug occurs
> again.
> 
> [1]
> http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=8ada0be34014565dc4e57d1194d18594a5bcd161;hp=0bf97bb1cff7204111c479c899dae30823314761
> [2]
> http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=0bf97bb1cff7204111c479c899dae30823314761;hp=0789b0033112e301f086f99bd15c7d67c051a51e
Comment 5 Stratos Psomadakis (RETIRED) gentoo-dev 2011-04-30 13:41:45 UTC
1) Can you post your .config and dmesg output?

2) Have you succeeded in reproducing the bug when the nvidia module is not in use?

3) Have you tried reproducing the problem with a 2.6.37 kernel?

And because brcm80211 is a 'beta version' driver, bugs/crashes etc are to be expected (according to the README file).

You can try reporting the bug upstream (to the brcm80211 dev team), especially if you can reproduce the bug without the nvidia module loaded, and if you do so, please add the bug report url to the URL field, so that we can track the bug.

You can also do some debugging yourself, eg using objdump -d to check where the bug occurs (using the offset from the trace), or, if you can't reproduce the bug with a 2.6.37 kernel, maybe you can try to do some bisecting.
Comment 6 randy 2011-05-09 02:28:19 UTC
Created attachment 272551 [details]
.config
Comment 7 randy 2011-05-09 02:39:47 UTC
Created attachment 272553 [details]
dmesg

The .config and this dmesg are both from 2.6.39-rc5-git1. I did finally reproduce the bug with nvidia module not running and I'm about to compile 2.6.37-gentoo-rc4 momentarily to see. I will report upstream... seems I should have gathered that to be necessary but I'm not that bright. Excuse my noobiness but I'm not entirely sure what to do with objdump. I assume I should use it to decompile one of the files in /usr/src/linux-2.6.39-rc5-git1/drivers/staging/brcm80211 but not entirely sure or comfortable with guessing... I'll research it and see what I can muster until you, perhaps, can give me more details. Thanks again.
Comment 8 randy 2011-05-09 03:47:24 UTC
No, kernel 2.6.36 is the only kernel I can use without a panic. Just tried 2.6.37-gentoo-r4. I saw that someone was having the same problems in SUSE and said that bcmwl is still working so blacklisting brcm80211 worked for him so I'll try that.
Comment 9 Mike Pagano gentoo-dev 2011-05-17 00:21:02 UTC
Did you report this upstream?
Comment 10 randy 2011-05-17 00:42:23 UTC
No, I've been trying to work through a seemingly unrelated bug to see if this was actually fixed in one of the last 2 .29 releases. I keep running out of iommu space regardless of kernel perameters and BIOS settings now. Figured if I could resolve this and get no more panics then I wouldn't have to bother anyone else with this problem. So far no luck... might be opening another bug soon Would have already but had some personal problems and just got my rig put back together. Thanks for the concern though.
Comment 11 Mike Pagano gentoo-dev 2011-05-24 17:07:39 UTC
If you feel like it, please report upstream and copy the url back down here.
Thanks.