2007-10-23 17:50:51

by Alon Bar-Lev

[permalink] [raw]
Subject: [BUG] rfcomm]


Hello,

I have this issue for long time (At least from linux-2.6.18).
I think it is about time I report this... :)

When coming out of suspend (uswsusp or suspend2) if rfcomm was
active it creates this dump.

If you need any more info I will be glad to provide.

Best Regards,
Alon Bar-Lev.

---

Oct 23 17:51:33 alon1 acpid: received event "button/power PWRF 00000080 00000001"
Oct 23 17:51:33 alon1 acpid: notifying client 7903[0:0]
Oct 23 17:51:33 alon1 acpid: notifying client 7804[0:0]
Oct 23 17:51:33 alon1 acpid: executing action "/etc/acpi/default.sh button/power PWRF 00000080 00000001"
Oct 23 17:52:13 alon1 ntpd[8186]: synchronized to 192.115.25.179, stratum 2
Oct 23 17:52:16 alon1 swsusp: Marking nosave pages: 000000000009f000 - 0000000000100000
Oct 23 17:52:16 alon1 swsusp: Basic memory bitmaps created
Oct 23 19:41:22 alon1 pppd[25041]: Hangup (SIGHUP)
Oct 23 19:41:22 alon1 pppd[25041]: Modem hangup
Oct 23 19:41:22 alon1 pppd[25041]: Connect time 384.5 minutes.
Oct 23 19:41:22 alon1 pppd[25041]: Sent 512470 bytes, received 1546102 bytes.
Oct 23 19:41:22 alon1 pppd[25041]: Connection terminated.
Oct 23 19:41:40 alon1 Stopping tasks ... done.
Oct 23 19:41:40 alon1 Shrinking memory... - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | done (224831 pages freed)
Oct 23 19:41:40 alon1 Freed 899324 kbytes in 14.70 seconds (61.17 MB/s)
Oct 23 19:41:40 alon1 Suspending console(s)
Oct 23 19:41:40 alon1 usbfs 2-2:1.0: no suspend for driver usbfs?
Oct 23 19:41:40 alon1 pnp: Device 00:0c disabled.
Oct 23 19:41:40 alon1 eth0: Going into suspend...
Oct 23 19:41:40 alon1 ACPI: PCI interrupt for device 0000:02:02.0 disabled
Oct 23 19:41:40 alon1 ACPI handle has no context!
Oct 23 19:41:40 alon1 ACPI: PCI interrupt for device 0000:02:01.0 disabled
Oct 23 19:41:40 alon1 ACPI handle has no context!
Oct 23 19:41:40 alon1 radeonfb (0000:01:00.0): suspending for event: 1...
Oct 23 19:41:40 alon1 ACPI: PCI interrupt for device 0000:00:1f.5 disabled
Oct 23 19:41:40 alon1 ACPI: PCI interrupt for device 0000:00:1d.7 disabled
Oct 23 19:41:40 alon1 ACPI: PCI interrupt for device 0000:00:1d.2 disabled
Oct 23 19:41:40 alon1 ACPI: PCI interrupt for device 0000:00:1d.1 disabled
Oct 23 19:41:40 alon1 ACPI: PCI interrupt for device 0000:00:1d.0 disabled
Oct 23 19:41:40 alon1 swsusp: critical section:
Oct 23 19:41:40 alon1 swsusp: Need to copy 126188 pages
Oct 23 19:41:40 alon1 Intel machine check architecture supported.
Oct 23 19:41:40 alon1 Intel machine check reporting enabled on CPU#0.
Oct 23 19:41:40 alon1 ACPI: PCI Interrupt 0000:00:1d.0[A] -> Link [LNKA] -> GSI 11 (level, low) -> IRQ 11
Oct 23 19:41:40 alon1 PCI: Setting latency timer of device 0000:00:1d.0 to 64
Oct 23 19:41:40 alon1 usb usb1: root hub lost power or was reset
Oct 23 19:41:40 alon1 ACPI: PCI Interrupt 0000:00:1d.1[B] -> Link [LNKD] -> GSI 11 (level, low) -> IRQ 11
Oct 23 19:41:40 alon1 PCI: Setting latency timer of device 0000:00:1d.1 to 64
Oct 23 19:41:40 alon1 usb usb2: root hub lost power or was reset
Oct 23 19:41:40 alon1 ACPI: PCI Interrupt 0000:00:1d.2[C] -> Link [LNKC] -> GSI 11 (level, low) -> IRQ 11
Oct 23 19:41:40 alon1 PCI: Setting latency timer of device 0000:00:1d.2 to 64
Oct 23 19:41:40 alon1 usb usb3: root hub lost power or was reset
Oct 23 19:41:40 alon1 ACPI: PCI Interrupt 0000:00:1d.7[D] -> Link [LNKH] -> GSI 11 (level, low) -> IRQ 11
Oct 23 19:41:40 alon1 PCI: Setting latency timer of device 0000:00:1d.7 to 64
Oct 23 19:41:40 alon1 usb usb4: root hub lost power or was reset
Oct 23 19:41:40 alon1 ehci_hcd 0000:00:1d.7: debug port 1
Oct 23 19:41:40 alon1 PCI: cache line size of 32 is not supported by device 0000:00:1d.7
Oct 23 19:41:40 alon1 PCI: Setting latency timer of device 0000:00:1e.0 to 64
Oct 23 19:41:40 alon1 ACPI: PCI Interrupt 0000:00:1f.1[A] -> Link [LNKC] -> GSI 11 (level, low) -> IRQ 11
Oct 23 19:41:42 alon1 PM: Writing back config space on device 0000:00:1f.5 at offset 1 (was 2900007, writing 2900003)
Oct 23 19:41:42 alon1 ACPI: PCI Interrupt 0000:00:1f.5[B] -> Link [LNKB] -> GSI 11 (level, low) -> IRQ 11
Oct 23 19:41:42 alon1 PCI: Setting latency timer of device 0000:00:1f.5 to 64
Oct 23 19:41:42 alon1 radeonfb (0000:01:00.0): resuming from state: 1...
Oct 23 19:41:42 alon1 PM: Writing back config space on device 0000:02:00.0 at offset f (was 3c0010b, writing 5c0010b)
Oct 23 19:41:42 alon1 PM: Writing back config space on device 0000:02:00.0 at offset 3 (was 824008, writing 82a810)
Oct 23 19:41:42 alon1 PM: Writing back config space on device 0000:02:00.0 at offset 1 (was 2100107, writing 2100007)
Oct 23 19:41:42 alon1 PM: Writing back config space on device 0000:02:00.1 at offset f (was 3c0020b, writing 5c0020b)
Oct 23 19:41:42 alon1 PM: Writing back config space on device 0000:02:00.1 at offset 3 (was 824008, writing 82a810)
Oct 23 19:41:42 alon1 PM: Writing back config space on device 0000:02:00.1 at offset 1 (was 2100107, writing 2100007)
Oct 23 19:41:42 alon1 ACPI: PCI Interrupt 0000:02:01.0[A] -> Link [LNKA] -> GSI 11 (level, low) -> IRQ 11
Oct 23 19:41:42 alon1 eth0: Coming out of suspend...
Oct 23 19:41:42 alon1 ACPI: PCI Interrupt 0000:02:02.0[A] -> Link [LNKC] -> GSI 11 (level, low) -> IRQ 11
Oct 23 19:41:42 alon1 pnp: Device 00:0c activated.
Oct 23 19:41:42 alon1 ipw2200: Radio disabled by module parameter.
Oct 23 19:41:42 alon1 hda: selected mode 0x45
Oct 23 19:41:42 alon1 hdc: selected mode 0x42
Oct 23 19:41:42 alon1 Restarting tasks ... <6>usb 2-2: USB disconnect, address 4
Oct 23 19:41:42 alon1 done.
Oct 23 19:41:42 alon1 usb 3-1: USB disconnect, address 4
Oct 23 19:41:42 alon1 usb 3-2: USB disconnect, address 3
Oct 23 19:41:42 alon1 usb 3-1: new full speed USB device using uhci_hcd and address 5
Oct 23 19:41:42 alon1 usb 3-1: configuration #1 chosen from 1 choice
Oct 23 19:41:42 alon1 usb 3-2: new full speed USB device using uhci_hcd and address 6
Oct 23 19:41:42 alon1 usb 3-2: configuration #1 chosen from 1 choice
Oct 23 19:41:42 alon1 general protection fault: 0000 [#1]
Oct 23 19:41:42 alon1 PREEMPT
Oct 23 19:41:42 alon1 hcid[7849]: HCI dev 0 down
Oct 23 19:41:42 alon1 Modules linked in: ppp_deflate zlib_deflate zlib_inflate bsd_comp ppp_async hci_usb vmnet(P) vmmon(P) rfcomm l2cap radeon drm ipv6 autofs4 nf_nat_irc nf_nat_ftp nf_conntrack_irc nf_conntrack_ftp ipt_MASQUERADE iptable_nat nf_nat ipt_REJECT xt_tcpudp ipt_LOG xt_limit xt_state nf_conntrack_ipv4 nf_conntrack iptable_filter ip_tables x_tables aes crypto_algapi ieee80211_crypt_ccmp snd_pcm_oss snd_mixer_oss snd_seq_dummy snd_seq_oss snd_seq_midi_event snd_seq snd_seq_device sd_mod scsi_mod bluetooth ppp_generic slhc ioatdma cfq_iosched cpufreq_powersave cpufreq_ondemand cpufreq_conservative acpi_cpufreq freq_table ecryptfs dazuko commoncap apm thermal processor fan button battery ac hdaps thinkpad_acpi hwmon nvram af_packet nls_cp1255 nls_iso8859_1 nls_utf8 nls_base pcmcia ipw2200 ieee80211 ieee80211_crypt firmware_class e1000 snd_intel8x0 snd_ac97_codec ac97_bus snd_pcm snd_timer snd soundcore yenta_socket snd_page_alloc rsrc_nonstatic pcmcia_core nsc_ircc ide_cd irda crc_ccitt ehci_hcd cdrom uhci_hcd intel_agp agpgart psmouse usbcore i2c_i801 rtc unix evdev ext3 jbd ext2 mbcache loop ide_disk piix ide_core
Oct 23 19:41:42 alon1 CPU: 0
Oct 23 19:41:42 alon1 EIP: 0060:[<c01c575b>] Tainted: P VLI
Oct 23 19:41:42 alon1 EFLAGS: 00210202 (2.6.23-gentoo #4)
Oct 23 19:41:42 alon1 EIP is at _atomic_dec_and_lock+0xb/0x40
Oct 23 19:41:42 alon1 eax: fffffffe ebx: fffffffe ecx: 00000000 edx: e1ae8000
Oct 23 19:41:42 alon1 esi: fffffffe edi: f672aec0 ebp: dffefac8 esp: e1ae9e50
Oct 23 19:41:42 alon1 ds: 007b es: 007b fs: 0000 gs: 0033 ss: 0068
Oct 23 19:41:42 alon1 Process pppd (pid: 25041, ti=e1ae8000 task=f61bbab0 task.ti=e1ae8000)
Oct 23 19:41:42 alon1 Stack: c017f8bc f65f5468 c01ab7cd 00000000 ffffffff ffffffff fffffffe f4c32754
Oct 23 19:41:42 alon1 00000000 fffffffe 00000000 df7244c0 f65f5468 f672aec0 c02fb514 c01c6c7b
Oct 23 19:41:42 alon1 f67f37c0 c02fb514 f672aec0 f67f37c0 f67f37c0 00000000 f65f5400 00000000
Oct 23 19:41:42 alon1 Call Trace:
Oct 23 19:41:42 alon1 [<c017f8bc>] dput+0x1c/0x160
Oct 23 19:41:42 alon1 [<c01ab7cd>] sysfs_move_dir+0x15d/0x1d0
Oct 23 19:41:42 alon1 [<c01c6c7b>] kobject_move+0x9b/0x120
Oct 23 19:41:42 alon1 [<c0238191>] device_move+0x51/0x110
Oct 23 19:41:42 alon1 [<f9c4ed91>] rfcomm_tty_close+0x51/0xa0 [rfcomm]
Oct 23 19:41:42 alon1 [<c01dd646>] release_dev+0x146/0x6a0
Oct 23 19:41:42 alon1 [<c015bd60>] handle_mm_fault+0x160/0x6b0
Oct 23 19:41:42 alon1 [<c01ddbaf>] tty_release+0xf/0x20
Oct 23 19:41:42 alon1 [<c016eac1>] __fput+0x91/0x190
Oct 23 19:41:42 alon1 [<c016bdf7>] filp_close+0x47/0x80
Oct 23 19:41:42 alon1 [<c016d298>] sys_close+0x78/0xe0
Oct 23 19:41:42 alon1 [<c01040ae>] sysenter_past_esp+0x5f/0x85
Oct 23 19:41:42 alon1 =======================
Oct 23 19:41:42 alon1 Code: 39 f5 7f b6 8d 46 ff 8b 14 24 89 02 8b 44 24 04 83 c4 08 5b 5e 5f 5d c3 90 90 90 90 90 90 90 90 89 e2 81 e2 00 e0 ff ff ff 42 14 <ff> 08 0f 94 c2 84 d2 b9 01 00 00 00 74 07 89 c8 c3 8d 74 26 00
Oct 23 19:41:42 alon1 EIP: [<c01c575b>] _atomic_dec_and_lock+0xb/0x40 SS:ESP 0068:e1ae9e50
Oct 23 19:41:42 alon1 note: pppd[25041] exited with preempt_count 1
Oct 23 19:41:42 alon1 swsusp: Basic memory bitmaps freed
Oct 23 19:41:42 alon1 usb 2-2: new full speed USB device using uhci_hcd and address 5
Oct 23 19:41:42 alon1 usb 2-2: configuration #1 chosen from 1 choice
Oct 23 19:41:42 alon1 pcscd[8214]: segfault at 00000000 eip b7fb07ff esp b760fe30 error 4
Oct 23 19:41:42 alon1 /etc/init.d/net.ppp0[2070]: status: crashed
Oct 23 19:41:45 alon1 hcid[7849]: Stopping security manager 0
Oct 23 19:41:45 alon1 hcid[7849]: Device hci0 has been disabled
Oct 23 19:41:45 alon1 hcid[7849]: HCI dev 0 unregistered
Oct 23 19:41:45 alon1 hcid[7849]: Unregister path: /org/bluez/hci0
Oct 23 19:41:49 alon1 /etc/init.d/bluetooth[2135]: status: crashed
Oct 23 19:41:54 alon1 fbcondecor: console 1 using theme 'livecd-2007.0'
Oct 23 19:41:54 alon1 fbcondecor: switched decor state to 'on' on console 1
Oct 23 19:42:00 alon1 agpgart: Found an AGP 2.0 compliant device at 0000:00:00.0.
Oct 23 19:42:00 alon1 agpgart: Putting AGP V2 device at 0000:00:00.0 into 1x mode
Oct 23 19:42:00 alon1 agpgart: Putting AGP V2 device at 0000:01:00.0 into 1x mode
Oct 23 19:42:00 alon1 [drm] Loading R300 Microcode
Oct 23 19:42:06 alon1 acpid: action exited with status 0
Oct 23 19:42:06 alon1 acpid: completed event "button/power PWRF 00000080 00000001"
Oct 23 19:42:06 alon1 acpid: client connected from 7804[0:0]
Oct 23 19:42:06 alon1 acpid: 1 client rule loaded


2007-10-23 17:54:16

by Marcel Holtmann

[permalink] [raw]
Subject: Re: [BUG] rfcomm]

Hi Alon,

> I have this issue for long time (At least from linux-2.6.18).
> I think it is about time I report this... :)
>
> When coming out of suspend (uswsusp or suspend2) if rfcomm was
> active it creates this dump.
>
> If you need any more info I will be glad to provide.

first of all, please check if this still happens with 2.6.23, because we
had some patches in the area of the RFCOMM TTY code that might have
fixed this. Second, can you try without uswsusp or suspend2. Both of
them are not upstream and I can't tell how much these would effect this
kind of behavior.

Regards

Marcel


2007-10-23 17:57:44

by Alon Bar-Lev

[permalink] [raw]
Subject: Re: [BUG] rfcomm]

On 10/23/07, Marcel Holtmann <[email protected]> wrote:
> first of all, please check if this still happens with 2.6.23, because we
> had some patches in the area of the RFCOMM TTY code that might have
> fixed this.

These messages are of 2.6.23.

> Second, can you try without uswsusp or suspend2. Both of
> them are not upstream and I can't tell how much these would effect this
> kind of behavior.

How can I test this without doing suspend?
uswsusp is not upstream?!?! Rafael?

Best Regards,
Alon Bar-Lev.

2007-10-23 18:07:15

by Jiri Kosina

[permalink] [raw]
Subject: Re: [BUG] rfcomm]

On Tue, 23 Oct 2007, Marcel Holtmann wrote:

> Second, can you try without uswsusp or suspend2. Both of them are not
> upstream and I can't tell how much these would effect this kind of
> behavior.

Hi Marcel,

actually uswsusp has been upstream for quite some time already. See
Documentation/power/userland-swsusp.txt

Thanks,

--
Jiri Kosina

2007-10-23 18:24:17

by Marcel Holtmann

[permalink] [raw]
Subject: Re: [BUG] rfcomm]

Hi Jiri,

> > Second, can you try without uswsusp or suspend2. Both of them are not
> > upstream and I can't tell how much these would effect this kind of
> > behavior.
>
> Hi Marcel,
>
> actually uswsusp has been upstream for quite some time already. See
> Documentation/power/userland-swsusp.txt

nice. I've never used it. Currently I am using what comes with Ubuntu
7.10 and that seems to work.

Regards

Marcel


2007-10-23 18:25:53

by Marcel Holtmann

[permalink] [raw]
Subject: Re: [BUG] rfcomm]

Hi Alon,

> > first of all, please check if this still happens with 2.6.23, because we
> > had some patches in the area of the RFCOMM TTY code that might have
> > fixed this.
>
> These messages are of 2.6.23.

still another one to go :( Anyway since you have experience and you have
a way to reproduce it, please test the latest kernel from Linus' Git
tree.

I can also whip up a patch that disables the device_move() usage and see
if that is the reason for the falling over.

Regards

Marcel


2007-10-23 18:27:26

by Alon Bar-Lev

[permalink] [raw]
Subject: Re: [BUG] rfcomm]

On 10/23/07, Marcel Holtmann <[email protected]> wrote:
> nice. I've never used it. Currently I am using what comes with Ubuntu
> 7.10 and that seems to work.

Have you tried to suspend while pppd is using rfcomm?

The fact that it happens with suspend2 and uswsusp means that the
issue is suspend blind.
Do you need any more information in order to determine what is the problem?

Best Regards,
Alon Bar-Lev.

2007-10-23 18:28:29

by Jiri Kosina

[permalink] [raw]
Subject: Re: [BUG] rfcomm]

On Tue, 23 Oct 2007, Marcel Holtmann wrote:

> > actually uswsusp has been upstream for quite some time already. See
> > Documentation/power/userland-swsusp.txt
> nice. I've never used it. Currently I am using what comes with Ubuntu
> 7.10 and that seems to work.

Never used ubuntu, so I have no idea what they ship, I guess you use
s2ram/s2disk utilitie. If so, you are using uswsusp too.

--
Jiri Kosina

2007-10-23 18:29:15

by Alon Bar-Lev

[permalink] [raw]
Subject: Re: [BUG] rfcomm]

On 10/23/07, Marcel Holtmann <[email protected]> wrote:
> still another one to go :( Anyway since you have experience and you have
> a way to reproduce it, please test the latest kernel from Linus' Git
> tree.

I can reproduce this.
But I cannot use git snapshot as I have too much dependencies.

> I can also whip up a patch that disables the device_move() usage and see
> if that is the reason for the falling over.

This would be nice!
I can test separate patches.

Best Regards,
Alon Bar-Lev.

2007-10-23 18:29:27

by Marcel Holtmann

[permalink] [raw]
Subject: Re: [BUG] rfcomm]

Hi Alon,

> > nice. I've never used it. Currently I am using what comes with Ubuntu
> > 7.10 and that seems to work.
>
> Have you tried to suspend while pppd is using rfcomm?
>
> The fact that it happens with suspend2 and uswsusp means that the
> issue is suspend blind.
> Do you need any more information in order to determine what is the problem?

the code in net/bluetooth/rfcomm/tty.c contains two calls to
device_move(). Please comment these out and try again. At least then we
know that it is in issue on how we use the driver model.

Regards

Marcel


2007-10-23 18:56:20

by Alon Bar-Lev

[permalink] [raw]
Subject: Re: [BUG] rfcomm]

On 10/23/07, Marcel Holtmann <[email protected]> wrote:
> the code in net/bluetooth/rfcomm/tty.c contains two calls to
> device_move(). Please comment these out and try again. At least then we
> know that it is in issue on how we use the driver model.

No bugs...
Looks OK, although I don't know what removed :)

Regards,
Alon Bar-Lev.

2007-10-23 21:54:41

by Rafael J. Wysocki

[permalink] [raw]
Subject: Re: [BUG] rfcomm]

On Tuesday, 23 October 2007 19:57, Alon Bar-Lev wrote:
> On 10/23/07, Marcel Holtmann <[email protected]> wrote:
> > first of all, please check if this still happens with 2.6.23, because we
> > had some patches in the area of the RFCOMM TTY code that might have
> > fixed this.
>
> These messages are of 2.6.23.
>
> > Second, can you try without uswsusp or suspend2. Both of
> > them are not upstream and I can't tell how much these would effect this
> > kind of behavior.
>
> How can I test this without doing suspend?
> uswsusp is not upstream?!?! Rafael?

It is upstream and is supposed to work.

Greetings,
Rafael

2007-10-24 08:44:20

by Cornelia Huck

[permalink] [raw]
Subject: Re: [BUG] rfcomm]

On Tue, 23 Oct 2007 20:55:54 +0200,
"Alon Bar-Lev" <[email protected]> wrote:

> On 10/23/07, Marcel Holtmann <[email protected]> wrote:
> > the code in net/bluetooth/rfcomm/tty.c contains two calls to
> > device_move(). Please comment these out and try again. At least then we
> > know that it is in issue on how we use the driver model.
>
> No bugs...
> Looks OK, although I don't know what removed :)

Hm, this might be similar to
http://marc.info/?l=linux-kernel&m=119124209009812&w=2. To confirm,
could you try with CONFIG_DEBUG_DRIVER and CONFIG_DEBUG_KOBJECT set
(and the device_move() calls in again)?

2007-10-24 09:56:27

by Pavel Machek

[permalink] [raw]
Subject: Re: [BUG] rfcomm]

On Tue 2007-10-23 20:28:04, Jiri Kosina wrote:
> On Tue, 23 Oct 2007, Marcel Holtmann wrote:
>
> > > actually uswsusp has been upstream for quite some time already. See
> > > Documentation/power/userland-swsusp.txt
> > nice. I've never used it. Currently I am using what comes with Ubuntu
> > 7.10 and that seems to work.
>
> Never used ubuntu, so I have no idea what they ship, I guess you use
> s2ram/s2disk utilitie. If so, you are using uswsusp too.

Ubuntu may be crazy enough to use suspend2. Anyway, this is driver
problem, and I believe it is reproducible even with plain-old
in-kernel swsusp.
Pavel
--
(english) http://www.livejournal.com/~pavelmachek
(cesky, pictures) http://atrey.karlin.mff.cuni.cz/~pavel/picture/horses/blog.html

2007-11-05 05:08:21

by Dave Young

[permalink] [raw]
Subject: Re: [Bluez-devel] [BUG] rfcomm]

On 10/24/07, Alon Bar-Lev <[email protected]> wrote:
>
> Hello,
>
> I have this issue for long time (At least from linux-2.6.18).
> I think it is about time I report this... :)
>
> When coming out of suspend (uswsusp or suspend2) if rfcomm was
> active it creates this dump.
>
> If you need any more info I will be glad to provide.
>
> Best Regards,
> Alon Bar-Lev.
>
> ---
>
> Oct 23 17:51:33 alon1 acpid: received event "button/power PWRF 00000080 00000001"
> Oct 23 17:51:33 alon1 acpid: notifying client 7903[0:0]
> Oct 23 17:51:33 alon1 acpid: notifying client 7804[0:0]
> Oct 23 17:51:33 alon1 acpid: executing action "/etc/acpi/default.sh button/power PWRF 00000080 00000001"
> Oct 23 17:52:13 alon1 ntpd[8186]: synchronized to 192.115.25.179, stratum 2
> Oct 23 17:52:16 alon1 swsusp: Marking nosave pages: 000000000009f000 - 0000000000100000
> Oct 23 17:52:16 alon1 swsusp: Basic memory bitmaps created
> Oct 23 19:41:22 alon1 pppd[25041]: Hangup (SIGHUP)
> Oct 23 19:41:22 alon1 pppd[25041]: Modem hangup
> Oct 23 19:41:22 alon1 pppd[25041]: Connect time 384.5 minutes.
> Oct 23 19:41:22 alon1 pppd[25041]: Sent 512470 bytes, received 1546102 bytes.
> Oct 23 19:41:22 alon1 pppd[25041]: Connection terminated.
> Oct 23 19:41:40 alon1 Stopping tasks ... done.
> Oct 23 19:41:40 alon1 Shrinking memory... - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | done (224831 pages freed)
> Oct 23 19:41:40 alon1 Freed 899324 kbytes in 14.70 seconds (61.17 MB/s)
> Oct 23 19:41:40 alon1 Suspending console(s)
> Oct 23 19:41:40 alon1 usbfs 2-2:1.0: no suspend for driver usbfs?
> Oct 23 19:41:40 alon1 pnp: Device 00:0c disabled.
> Oct 23 19:41:40 alon1 eth0: Going into suspend...
> Oct 23 19:41:40 alon1 ACPI: PCI interrupt for device 0000:02:02.0 disabled
> Oct 23 19:41:40 alon1 ACPI handle has no context!
> Oct 23 19:41:40 alon1 ACPI: PCI interrupt for device 0000:02:01.0 disabled
> Oct 23 19:41:40 alon1 ACPI handle has no context!
> Oct 23 19:41:40 alon1 radeonfb (0000:01:00.0): suspending for event: 1...
> Oct 23 19:41:40 alon1 ACPI: PCI interrupt for device 0000:00:1f.5 disabled
> Oct 23 19:41:40 alon1 ACPI: PCI interrupt for device 0000:00:1d.7 disabled
> Oct 23 19:41:40 alon1 ACPI: PCI interrupt for device 0000:00:1d.2 disabled
> Oct 23 19:41:40 alon1 ACPI: PCI interrupt for device 0000:00:1d.1 disabled
> Oct 23 19:41:40 alon1 ACPI: PCI interrupt for device 0000:00:1d.0 disabled
> Oct 23 19:41:40 alon1 swsusp: critical section:
> Oct 23 19:41:40 alon1 swsusp: Need to copy 126188 pages
> Oct 23 19:41:40 alon1 Intel machine check architecture supported.
> Oct 23 19:41:40 alon1 Intel machine check reporting enabled on CPU#0.
> Oct 23 19:41:40 alon1 ACPI: PCI Interrupt 0000:00:1d.0[A] -> Link [LNKA] -> GSI 11 (level, low) -> IRQ 11
> Oct 23 19:41:40 alon1 PCI: Setting latency timer of device 0000:00:1d.0 to 64
> Oct 23 19:41:40 alon1 usb usb1: root hub lost power or was reset
> Oct 23 19:41:40 alon1 ACPI: PCI Interrupt 0000:00:1d.1[B] -> Link [LNKD] -> GSI 11 (level, low) -> IRQ 11
> Oct 23 19:41:40 alon1 PCI: Setting latency timer of device 0000:00:1d.1 to 64
> Oct 23 19:41:40 alon1 usb usb2: root hub lost power or was reset
> Oct 23 19:41:40 alon1 ACPI: PCI Interrupt 0000:00:1d.2[C] -> Link [LNKC] -> GSI 11 (level, low) -> IRQ 11
> Oct 23 19:41:40 alon1 PCI: Setting latency timer of device 0000:00:1d.2 to 64
> Oct 23 19:41:40 alon1 usb usb3: root hub lost power or was reset
> Oct 23 19:41:40 alon1 ACPI: PCI Interrupt 0000:00:1d.7[D] -> Link [LNKH] -> GSI 11 (level, low) -> IRQ 11
> Oct 23 19:41:40 alon1 PCI: Setting latency timer of device 0000:00:1d.7 to 64
> Oct 23 19:41:40 alon1 usb usb4: root hub lost power or was reset
> Oct 23 19:41:40 alon1 ehci_hcd 0000:00:1d.7: debug port 1
> Oct 23 19:41:40 alon1 PCI: cache line size of 32 is not supported by device 0000:00:1d.7
> Oct 23 19:41:40 alon1 PCI: Setting latency timer of device 0000:00:1e.0 to 64
> Oct 23 19:41:40 alon1 ACPI: PCI Interrupt 0000:00:1f.1[A] -> Link [LNKC] -> GSI 11 (level, low) -> IRQ 11
> Oct 23 19:41:42 alon1 PM: Writing back config space on device 0000:00:1f.5 at offset 1 (was 2900007, writing 2900003)
> Oct 23 19:41:42 alon1 ACPI: PCI Interrupt 0000:00:1f.5[B] -> Link [LNKB] -> GSI 11 (level, low) -> IRQ 11
> Oct 23 19:41:42 alon1 PCI: Setting latency timer of device 0000:00:1f.5 to 64
> Oct 23 19:41:42 alon1 radeonfb (0000:01:00.0): resuming from state: 1...
> Oct 23 19:41:42 alon1 PM: Writing back config space on device 0000:02:00.0 at offset f (was 3c0010b, writing 5c0010b)
> Oct 23 19:41:42 alon1 PM: Writing back config space on device 0000:02:00.0 at offset 3 (was 824008, writing 82a810)
> Oct 23 19:41:42 alon1 PM: Writing back config space on device 0000:02:00.0 at offset 1 (was 2100107, writing 2100007)
> Oct 23 19:41:42 alon1 PM: Writing back config space on device 0000:02:00.1 at offset f (was 3c0020b, writing 5c0020b)
> Oct 23 19:41:42 alon1 PM: Writing back config space on device 0000:02:00.1 at offset 3 (was 824008, writing 82a810)
> Oct 23 19:41:42 alon1 PM: Writing back config space on device 0000:02:00.1 at offset 1 (was 2100107, writing 2100007)
> Oct 23 19:41:42 alon1 ACPI: PCI Interrupt 0000:02:01.0[A] -> Link [LNKA] -> GSI 11 (level, low) -> IRQ 11
> Oct 23 19:41:42 alon1 eth0: Coming out of suspend...
> Oct 23 19:41:42 alon1 ACPI: PCI Interrupt 0000:02:02.0[A] -> Link [LNKC] -> GSI 11 (level, low) -> IRQ 11
> Oct 23 19:41:42 alon1 pnp: Device 00:0c activated.
> Oct 23 19:41:42 alon1 ipw2200: Radio disabled by module parameter.
> Oct 23 19:41:42 alon1 hda: selected mode 0x45
> Oct 23 19:41:42 alon1 hdc: selected mode 0x42
> Oct 23 19:41:42 alon1 Restarting tasks ... <6>usb 2-2: USB disconnect, address 4
> Oct 23 19:41:42 alon1 done.
> Oct 23 19:41:42 alon1 usb 3-1: USB disconnect, address 4
> Oct 23 19:41:42 alon1 usb 3-2: USB disconnect, address 3
> Oct 23 19:41:42 alon1 usb 3-1: new full speed USB device using uhci_hcd and address 5
> Oct 23 19:41:42 alon1 usb 3-1: configuration #1 chosen from 1 choice
> Oct 23 19:41:42 alon1 usb 3-2: new full speed USB device using uhci_hcd and address 6
> Oct 23 19:41:42 alon1 usb 3-2: configuration #1 chosen from 1 choice
> Oct 23 19:41:42 alon1 general protection fault: 0000 [#1]
> Oct 23 19:41:42 alon1 PREEMPT
> Oct 23 19:41:42 alon1 hcid[7849]: HCI dev 0 down
> Oct 23 19:41:42 alon1 Modules linked in: ppp_deflate zlib_deflate zlib_inflate bsd_comp ppp_async hci_usb vmnet(P) vmmon(P) rfcomm l2cap radeon drm ipv6 autofs4 nf_nat_irc nf_nat_ftp nf_conntrack_irc nf_conntrack_ftp ipt_MASQUERADE iptable_nat nf_nat ipt_REJECT xt_tcpudp ipt_LOG xt_limit xt_state nf_conntrack_ipv4 nf_conntrack iptable_filter ip_tables x_tables aes crypto_algapi ieee80211_crypt_ccmp snd_pcm_oss snd_mixer_oss snd_seq_dummy snd_seq_oss snd_seq_midi_event snd_seq snd_seq_device sd_mod scsi_mod bluetooth ppp_generic slhc ioatdma cfq_iosched cpufreq_powersave cpufreq_ondemand cpufreq_conservative acpi_cpufreq freq_table ecryptfs dazuko commoncap apm thermal processor fan button battery ac hdaps thinkpad_acpi hwmon nvram af_packet nls_cp1255 nls_iso8859_1 nls_utf8 nls_base pcmcia ipw2200 ieee80211 ieee80211_crypt firmware_class e1000 snd_intel8x0 snd_ac97_codec ac97_bus snd_pcm snd_timer snd soundcore yenta_socket snd_page_alloc rsrc_nonstatic pcmcia_core nsc_ircc i
> de_cd irda crc_ccitt ehci_hcd cdrom uhci_hcd intel_agp agpgart psmouse usbcore i2c_i801 rtc unix evdev ext3 jbd ext2 mbcache loop ide_disk piix ide_core
> Oct 23 19:41:42 alon1 CPU: 0
> Oct 23 19:41:42 alon1 EIP: 0060:[<c01c575b>] Tainted: P VLI
> Oct 23 19:41:42 alon1 EFLAGS: 00210202 (2.6.23-gentoo #4)
> Oct 23 19:41:42 alon1 EIP is at _atomic_dec_and_lock+0xb/0x40
> Oct 23 19:41:42 alon1 eax: fffffffe ebx: fffffffe ecx: 00000000 edx: e1ae8000
> Oct 23 19:41:42 alon1 esi: fffffffe edi: f672aec0 ebp: dffefac8 esp: e1ae9e50
> Oct 23 19:41:42 alon1 ds: 007b es: 007b fs: 0000 gs: 0033 ss: 0068
> Oct 23 19:41:42 alon1 Process pppd (pid: 25041, ti=e1ae8000 task=f61bbab0 task.ti=e1ae8000)
> Oct 23 19:41:42 alon1 Stack: c017f8bc f65f5468 c01ab7cd 00000000 ffffffff ffffffff fffffffe f4c32754
> Oct 23 19:41:42 alon1 00000000 fffffffe 00000000 df7244c0 f65f5468 f672aec0 c02fb514 c01c6c7b
> Oct 23 19:41:42 alon1 f67f37c0 c02fb514 f672aec0 f67f37c0 f67f37c0 00000000 f65f5400 00000000
> Oct 23 19:41:42 alon1 Call Trace:
> Oct 23 19:41:42 alon1 [<c017f8bc>] dput+0x1c/0x160
> Oct 23 19:41:42 alon1 [<c01ab7cd>] sysfs_move_dir+0x15d/0x1d0
> Oct 23 19:41:42 alon1 [<c01c6c7b>] kobject_move+0x9b/0x120
> Oct 23 19:41:42 alon1 [<c0238191>] device_move+0x51/0x110
> Oct 23 19:41:42 alon1 [<f9c4ed91>] rfcomm_tty_close+0x51/0xa0 [rfcomm]
> Oct 23 19:41:42 alon1 [<c01dd646>] release_dev+0x146/0x6a0
> Oct 23 19:41:42 alon1 [<c015bd60>] handle_mm_fault+0x160/0x6b0
> Oct 23 19:41:42 alon1 [<c01ddbaf>] tty_release+0xf/0x20
> Oct 23 19:41:42 alon1 [<c016eac1>] __fput+0x91/0x190
> Oct 23 19:41:42 alon1 [<c016bdf7>] filp_close+0x47/0x80
> Oct 23 19:41:42 alon1 [<c016d298>] sys_close+0x78/0xe0
> Oct 23 19:41:42 alon1 [<c01040ae>] sysenter_past_esp+0x5f/0x85
> Oct 23 19:41:42 alon1 =======================
> Oct 23 19:41:42 alon1 Code: 39 f5 7f b6 8d 46 ff 8b 14 24 89 02 8b 44 24 04 83 c4 08 5b 5e 5f 5d c3 90 90 90 90 90 90 90 90 89 e2 81 e2 00 e0 ff ff ff 42 14 <ff> 08 0f 94 c2 84 d2 b9 01 00 00 00 74 07 89 c8 c3 8d 74 26 00
> Oct 23 19:41:42 alon1 EIP: [<c01c575b>] _atomic_dec_and_lock+0xb/0x40 SS:ESP 0068:e1ae9e50
> Oct 23 19:41:42 alon1 note: pppd[25041] exited with preempt_count 1
> Oct 23 19:41:42 alon1 swsusp: Basic memory bitmaps freed
> Oct 23 19:41:42 alon1 usb 2-2: new full speed USB device using uhci_hcd and address 5
> Oct 23 19:41:42 alon1 usb 2-2: configuration #1 chosen from 1 choice
> Oct 23 19:41:42 alon1 pcscd[8214]: segfault at 00000000 eip b7fb07ff esp b760fe30 error 4
> Oct 23 19:41:42 alon1 /etc/init.d/net.ppp0[2070]: status: crashed
> Oct 23 19:41:45 alon1 hcid[7849]: Stopping security manager 0
> Oct 23 19:41:45 alon1 hcid[7849]: Device hci0 has been disabled
> Oct 23 19:41:45 alon1 hcid[7849]: HCI dev 0 unregistered
> Oct 23 19:41:45 alon1 hcid[7849]: Unregister path: /org/bluez/hci0
> Oct 23 19:41:49 alon1 /etc/init.d/bluetooth[2135]: status: crashed
> Oct 23 19:41:54 alon1 fbcondecor: console 1 using theme 'livecd-2007.0'
> Oct 23 19:41:54 alon1 fbcondecor: switched decor state to 'on' on console 1
> Oct 23 19:42:00 alon1 agpgart: Found an AGP 2.0 compliant device at 0000:00:00.0.
> Oct 23 19:42:00 alon1 agpgart: Putting AGP V2 device at 0000:00:00.0 into 1x mode
> Oct 23 19:42:00 alon1 agpgart: Putting AGP V2 device at 0000:01:00.0 into 1x mode
> Oct 23 19:42:00 alon1 [drm] Loading R300 Microcode
> Oct 23 19:42:06 alon1 acpid: action exited with status 0
> Oct 23 19:42:06 alon1 acpid: completed event "button/power PWRF 00000080 00000001"
> Oct 23 19:42:06 alon1 acpid: client connected from 7804[0:0]
> Oct 23 19:42:06 alon1 acpid: 1 client rule loaded
>
Hi,
I managed to produce this bug last weekend. I debugged it and found a
rfcomm_dev refcnt BUG.
please try the patch of attachment, sorry for attachement because of
my gmail/mutt configuration problem.

I post it in below thread:
http://lkml.org/lkml/2007/11/4/207


Attachments:
(No filename) (10.97 kB)
diff.rfcomm (742.00 B)
Download all attachments

2007-11-05 15:47:09

by Alon Bar-Lev

[permalink] [raw]
Subject: Re: [Bluez-devel] [BUG] rfcomm]

On 11/5/07, Dave Young <[email protected]> wrote:
> Hi,
> I managed to produce this bug last weekend. I debugged it and found a
> rfcomm_dev refcnt BUG.
> please try the patch of attachment, sorry for attachement because of
> my gmail/mutt configuration problem.
>
> I post it in below thread:
> http://lkml.org/lkml/2007/11/4/207

It actually worse... :(

Best Regards,
Alon Bar-Lev

---

terrupt 0000:02:01.0[A] -> Link [LNKA] -> GSI 11 (level, low) -> IRQ 11
ieee80211_crypt: registered algorithm 'NULL'
ieee80211: 802.11 data/management/control stack, git-1.1.13
ieee80211: Copyright (C) 2004-2005 Intel Corporation <[email protected]>
ipw2200: Intel(R) PRO/Wireless 2200/2915 Network Driver, 1.2.2kmprq
ipw2200: Copyright(c) 2003-2006 Intel Corporation
Synaptics Touchpad, model: 1, fw: 5.9, id: 0x2c6ab1, caps: 0x884793/0x0
serio: Synaptics pass-through port at isa0060/serio1/input0
input: SynPS/2 Synaptics TouchPad as /devices/platform/i8042/serio1/input/input2
pnp: Device 00:0c activated.
nsc-ircc, chip->init
nsc-ircc, Found chip at base=0x02e
nsc-ircc, driver loaded (Dag Brattli)
IrDA: Registered device irda0
nsc-ircc, Found dongle: HP HSDL-1100/HSDL-2100
e1000: 0000:02:01.0: e1000_probe: (PCI:33MHz:32-bit) 00:11:25:2e:e5:1f
e1000: eth0: e1000_probe: Intel(R) PRO/1000 Network Connection
Yenta: CardBus bridge found at 0000:02:00.1 [1014:0552]
Yenta: Using INTVAL to route CSC interrupts to PCI
Yenta: Routing CardBus interrupts to PCI
Yenta TI: socket 0000:02:00.1, mfunc 0x01d21b22, devctl 0x64
Yenta: ISA IRQ mask 0x04b0, PCI irq 11
Socket status: 30000086
pcmcia: parent PCI bridge I/O window: 0x4000 - 0x8fff
pcmcia: parent PCI bridge Memory window: 0xc0200000 - 0xcfffffff
pcmcia: parent PCI bridge Memory window: 0xe8000000 - 0xefffffff
ACPI: PCI Interrupt 0000:00:1f.5[B] -> Link [LNKB] -> GSI 11 (level,
low) -> IRQ 11
PCI: Setting latency timer of device 0000:00:1f.5 to 64
udev: renamed network interface eth0 to eth1
usb 2-1: new full speed USB device using uhci_hcd and address 3
usb 2-1: configuration #1 chosen from 1 choice
usb 3-1: new full speed USB device using uhci_hcd and address 2
usb 3-1: configuration #1 chosen from 1 choice
Bluetooth: Core ver 2.11
NET: Registered protocol family 31
Bluetooth: HCI device and connection manager initialized
Bluetooth: HCI socket layer initialized
Bluetooth: HCI USB driver ver 2.9
intel8x0_measure_ac97_clock: measured 50304 usecs
intel8x0: clocking to 48000
ACPI: PCI Interrupt 0000:02:02.0[A] -> Link [LNKC] -> GSI 11 (level,
low) -> IRQ 11
ipw2200: Detected Intel PRO/Wireless 2200BG Network Connection
usb 3-2: new full speed USB device using uhci_hcd and address 3
usb 3-2: configuration #1 chosen from 1 choice
usbcore: registered new interface driver hci_usb
ipw2200: Detected geography ZZR (14 802.11bg channels, 0 802.11a channels)
IBM TrackPoint firmware: 0x0e, buttons: 3/3
input: TPPS/2 IBM TrackPoint as
/devices/platform/i8042/serio1/serio2/input/input3
EXT3 FS on loop5, internal journal
NET: Registered protocol family 17
Non-volatile memory driver v1.2
thinkpad_acpi: ThinkPad ACPI Extras v0.16
thinkpad_acpi: http://ibm-acpi.sf.net/
thinkpad_acpi: ThinkPad BIOS 1RETDPWW (3.21 ), EC 1RHT71WW-3.04
thinkpad_acpi: IBM ThinkPad T42
input: ThinkPad Extra Buttons as /devices/virtual/input/input4
hdaps: IBM ThinkPad T42 detected.
hdaps: initial latch check good (0x01).
hdaps: device successfully initialized.
input: hdaps as /devices/platform/hdaps/input/input5
hdaps: driver successfully loaded.
ACPI: AC Adapter [AC] (on-line)
ACPI: Battery Slot [BAT0] (battery present)
input: Power Button (FF) as /devices/virtual/input/input6
ACPI: Power Button (FF) [PWRF]
input: Lid Switch as /devices/virtual/input/input7
ACPI: Lid Switch [LID]
input: Sleep Button (CM) as /devices/virtual/input/input8
ACPI: Sleep Button (CM) [SLPB]
ACPI: CPU0 (power states: C1[C1] C2[C2] C3[C3])
ACPI: Processor [CPU] (supports 8 throttling states)
ACPI: Thermal Zone [THM0] (57 C)
Marking TSC unstable due to: possible TSC halt in C2.
Time: acpi_pm clocksource has been installed.
IBM machine detected. Enabling interrupts during APM calls.
apm: BIOS version 1.2 Flags 0x03 (Driver version 1.16ac)
dazuko: loaded, version=2.3.4
io scheduler cfq registered
Module ioatdma cannot be unloaded due to unsafe usage in
drivers/dma/ioatdma.c:805
PPP generic driver version 2.4.2
SCSI subsystem initialized
Adding 1465120k swap on /dev/loop/4. Priority:-1 extents:1 across:1465120k
hda: selected mode 0x45
hda: cache flushes supported
hdc: selected mode 0x42
hdc: host side 80-wire cable detection failed, limiting max speed to UDMA33
hdc: UDMA speeds >UDMA33 cannot be set
Bluetooth: L2CAP ver 2.8
Bluetooth: L2CAP socket layer initialized
Bluetooth: RFCOMM socket layer initialized
Bluetooth: RFCOMM TTY layer initialized
Bluetooth: RFCOMM ver 1.8
ip_tables: (C) 2000-2006 Netfilter Core Team
nf_conntrack version 0.5.0 (16384 buckets, 65536 max)
eth0: Setting MAC to 00:a0:68:7c:46:06
fbcondecor: console 1 using theme 'livecd-2007.0'
fbcondecor: switched decor state to 'on' on console 1
fbcondecor: console 2 using theme 'livecd-2007.0'
fbcondecor: switched decor state to 'on' on console 2
fbcondecor: console 3 using theme 'livecd-2007.0'
fbcondecor: switched decor state to 'on' on console 3
fbcondecor: console 4 using theme 'livecd-2007.0'
fbcondecor: switched decor state to 'on' on console 4
fbcondecor: console 5 using theme 'livecd-2007.0'
fbcondecor: switched decor state to 'on' on console 5
NET: Registered protocol family 10
lo: Disabled Privacy Extensions
ADDRCONF(NETDEV_UP): eth1: link is not ready
ADDRCONF(NETDEV_UP): eth0: link is not ready
audit(1194276481.266:2): audit_pid=6656 old=0 by auid=4294967295
[drm] Initialized drm 1.1.0 20060810
[drm] Initialized radeon 1.28.0 20060524 on minor 0
agpgart: Found an AGP 2.0 compliant device at 0000:00:00.0.
agpgart: Putting AGP V2 device at 0000:00:00.0 into 1x mode
agpgart: Putting AGP V2 device at 0000:01:00.0 into 1x mode
[drm] Setting GART location based on new memory map
[drm] Loading R300 Microcode
[drm] writeback test succeeded in 2 usecs
vmmon: module license 'unspecified' taints kernel.
/dev/vmmon[7085]: VMCI: Driver initialized.
/dev/vmmon[7085]: Module vmmon: registered with major=10 minor=165
/dev/vmmon[7085]: Module vmmon: initialized
/dev/vmnet: open called by PID 7137 (vmnet-netifup)
/dev/vmnet: hub 1 does not exist, allocating memory.
/dev/vmnet: port on hub 1 successfully opened
/dev/vmnet: open called by PID 7150 (vmnet-dhcpd)
/dev/vmnet: port on hub 1 successfully opened
fbcondecor: console 0 using theme 'livecd-2007.0'
fbcondecor: switched decor state to 'on' on console 0
vmnet1: no IPv6 routers present
PPP BSD Compression module registered
PPP Deflate Compression module registered
swsusp: Marking nosave pages: 000000000009f000 - 0000000000100000
swsusp: Basic memory bitmaps created
fbcondecor: console 0 using theme 'livecd-2007.0'
fbcondecor: switched decor state to 'on' on console 0
Stopping tasks ... done.
Shrinking memory... - done (0 pages freed)
Freed 0 kbytes in 0.04 seconds (0.00 MB/s)
Suspending console(s)
usbfs 2-1:1.0: no suspend for driver usbfs?
pnp: Device 00:0c disabled.
eth0: Going into suspend...
ACPI: PCI interrupt for device 0000:02:02.0 disabled
ACPI handle has no context!
ACPI: PCI interrupt for device 0000:02:01.0 disabled
ACPI handle has no context!
radeonfb (0000:01:00.0): suspending for event: 1...
ACPI: PCI interrupt for device 0000:00:1f.5 disabled
ACPI: PCI interrupt for device 0000:00:1d.7 disabled
ACPI: PCI interrupt for device 0000:00:1d.2 disabled
ACPI: PCI interrupt for device 0000:00:1d.1 disabled
ACPI: PCI interrupt for device 0000:00:1d.0 disabled
swsusp: critical section:
swsusp: Need to copy 75254 pages
Intel machine check architecture supported.
Intel machine check reporting enabled on CPU#0.
ACPI: PCI Interrupt 0000:00:1d.0[A] -> Link [LNKA] -> GSI 11 (level,
low) -> IRQ 11
PCI: Setting latency timer of device 0000:00:1d.0 to 64
usb usb1: root hub lost power or was reset
ACPI: PCI Interrupt 0000:00:1d.1[B] -> Link [LNKD] -> GSI 11 (level,
low) -> IRQ 11
PCI: Setting latency timer of device 0000:00:1d.1 to 64
usb usb2: root hub lost power or was reset
ACPI: PCI Interrupt 0000:00:1d.2[C] -> Link [LNKC] -> GSI 11 (level,
low) -> IRQ 11
PCI: Setting latency timer of device 0000:00:1d.2 to 64
usb usb3: root hub lost power or was reset
ACPI: PCI Interrupt 0000:00:1d.7[D] -> Link [LNKH] -> GSI 11 (level,
low) -> IRQ 11
PCI: Setting latency timer of device 0000:00:1d.7 to 64
usb usb4: root hub lost power or was reset
ehci_hcd 0000:00:1d.7: debug port 1
PCI: cache line size of 32 is not supported by device 0000:00:1d.7
PCI: Setting latency timer of device 0000:00:1e.0 to 64
ACPI: PCI Interrupt 0000:00:1f.1[A] -> Link [LNKC] -> GSI 11 (level,
low) -> IRQ 11
PM: Writing back config space on device 0000:00:1f.5 at offset 1 (was
2900007, writing 2900003)
ACPI: PCI Interrupt 0000:00:1f.5[B] -> Link [LNKB] -> GSI 11 (level,
low) -> IRQ 11
PCI: Setting latency timer of device 0000:00:1f.5 to 64
Clocksource tsc unstable (delta = -451320663 ns)
radeonfb (0000:01:00.0): resuming from state: 1...
PM: Writing back config space on device 0000:02:00.0 at offset f (was
3c0010b, writing 5c0010b)
PM: Writing back config space on device 0000:02:00.0 at offset 3 (was
824008, writing 82a810)
PM: Writing back config space on device 0000:02:00.0 at offset 1 (was
2100107, writing 2100007)
PM: Writing back config space on device 0000:02:00.1 at offset f (was
3c0020b, writing 5c0020b)
PM: Writing back config space on device 0000:02:00.1 at offset 3 (was
824008, writing 82a810)
PM: Writing back config space on device 0000:02:00.1 at offset 1 (was
2100107, writing 2100007)
ACPI: PCI Interrupt 0000:02:01.0[A] -> Link [LNKA] -> GSI 11 (level,
low) -> IRQ 11
eth0: Coming out of suspend...
ACPI: PCI Interrupt 0000:02:02.0[A] -> Link [LNKC] -> GSI 11 (level,
low) -> IRQ 11
pnp: Device 00:0c activated.
hda: selected mode 0x45
hdc: selected mode 0x42
hdaps: initial latch check good (0x02).
Restarting tasks ... <6>usb 2-1: USB disconnect, address 3
__tx_submit: hci0 tx submit failed urb f72a11d4 type 2 err -19
done.
usb 3-1: USB disconnect, address 2
BUG: unable to handle kernel NULL pointer dereference at virtual
address 00000000
printing eip:
c01555c0
*pde = 00000000
Oops: 0000 [#1]
PREEMPT
Modules linked in: ppp_deflate zlib_deflate zlib_inflate bsd_comp
ppp_async vmnet(P) vmmon(P) radeon drm ipv6 autofs4 snd_pcm_oss
snd_mixer_oss snd_seq_dummy snd_seq_oss snd_seq_midi_event snd_seq
snd_seq_device nf_nat_irc nf_nat_ftp nf_conntrack_irc nf_conntrack_ftp
ipt_MASQUERADE iptable_nat nf_nat ipt_REJECT xt_tcpudp ipt_LOG
xt_limit xt_state nf_conntrack_ipv4 nf_conntrack iptable_filter
ip_tables x_tables rfcomm l2cap sd_mod scsi_mod ppp_generic slhc
ioatdma cfq_iosched cpufreq_powersave cpufreq_ondemand
cpufreq_conservative acpi_cpufreq freq_table ecryptfs dazuko commoncap
uinput apm thermal processor fan button battery ac hdaps thinkpad_acpi
hwmon nvram af_packet nls_cp1255 nls_iso8859_1 nls_utf8 nls_base
hci_usb bluetooth pcmcia snd_intel8x0 snd_ac97_codec ac97_bus snd_pcm
snd_timer snd soundcore snd_page_alloc ipw2200 ieee80211
ieee80211_crypt firmware_class ide_cd cdrom nsc_ircc irda crc_ccitt
e1000 yenta_socket rsrc_nonstatic pcmcia_core psmouse ehci_hcd
intel_agp agpgart uhci_hcd usbcore i2c_i801 rtc pcspkr unix evdev ext3
jbd ext2 mbcache loop ide_disk piix ide_core
CPU: 0
EIP: 0060:[<c01555c0>] Tainted: P VLI
EFLAGS: 00010296 (2.6.23-gentoo-r1 #1)
EIP is at put_page+0x10/0xf0
eax: 00000000 ebx: 00000000 ecx: f7075b58 edx: c1fe2c40
esi: 00000001 edi: c1fc4480 ebp: c1fc4480 esp: f7f7bdb8
ds: 007b es: 007b fs: 0000 gs: 0033 ss: 0068
Process syslog-ng (pid: 6451, ti=f7f7a000 task=f7d1bab0 task.ti=f7f7a000)
Stack: 0000000c 00000001 c1fc4480 c025893d c1fc4480 0000002f c1fc44a0 c02586d8
df9e60c0 f886ab59 00100100 00200200 f7f7be24 c1fc44a0 df9e6200 df9e6120
f7f7be9c f67970c0 00000000 0000002f 00000001 00000001 ffffffa1 00000000
Call Trace:
[<c025893d>] skb_release_data+0x7d/0xa0
[<c02586d8>] kfree_skbmem+0x8/0x80
[<f886ab59>] unix_stream_recvmsg+0x1d9/0x610 [unix]
[<c0119670>] default_wake_function+0x0/0x10
[<c0251d68>] sock_aio_read+0x118/0x140
[<c014fd6f>] generic_file_aio_write+0x5f/0xd0
[<c016d906>] do_sync_read+0xc6/0x110
[<c012fb50>] autoremove_wake_function+0x0/0x50
[<c016e28b>] vfs_read+0x14b/0x160
[<c016e641>] sys_read+0x41/0x70
[<c01040ae>] sysenter_past_esp+0x5f/0x85
=======================
Code: 90 90 90 90 90 90 90 90 90 90 90 e8 8b ff ff ff 31 c0 c3 90 8d
b4 26 00 00 00 00 83 ec 0c 89 1c 24 89 c3 89 74 24 04 89 7c 24 08 <8b>
00 f6 c4 40 0f 85 b8 00 00 00 ff 4b 04 0f 94 c0 84 c0 0f 84
EIP: [<c01555c0>] put_page+0x10/0xf0 SS:ESP 0068:f7f7bdb8
general protection fault: 0000 [#2]
PREEMPT
Modules linked in: ppp_deflate zlib_deflate zlib_inflate bsd_comp
ppp_async vmnet(P) vmmon(P) radeon drm ipv6 autofs4 snd_pcm_oss
snd_mixer_oss snd_seq_dummy snd_seq_oss snd_seq_midi_event snd_seq
snd_seq_device nf_nat_irc nf_nat_ftp nf_conntrack_irc nf_conntrack_ftp
ipt_MASQUERADE iptable_nat nf_nat ipt_REJECT xt_tcpudp ipt_LOG
xt_limit xt_state nf_conntrack_ipv4 nf_conntrack iptable_filter
ip_tables x_tables rfcomm l2cap sd_mod scsi_mod ppp_generic slhc
ioatdma cfq_iosched cpufreq_powersave cpufreq_ondemand
cpufreq_conservative acpi_cpufreq freq_table ecryptfs dazuko commoncap
uinput apm thermal processor fan button battery ac hdaps thinkpad_acpi
hwmon nvram af_packet nls_cp1255 nls_iso8859_1 nls_utf8 nls_base
hci_usb bluetooth pcmcia snd_intel8x0 snd_ac97_codec ac97_bus snd_pcm
snd_timer snd soundcore snd_page_alloc ipw2200 ieee80211
ieee80211_crypt firmware_class ide_cd cdrom nsc_ircc irda crc_ccitt
e1000 yenta_socket rsrc_nonstatic pcmcia_core psmouse ehci_hcd
intel_agp agpgart uhci_hcd usbcore i2c_i801 rtc pcspkr unix evdev ext3
jbd ext2 mbcache loop ide_disk piix ide_core
CPU: 0
EIP: 0060:[<c01c575b>] Tainted: P D VLI
EFLAGS: 00010202 (2.6.23-gentoo-r1 #1)
EIP is at _atomic_dec_and_lock+0xb/0x40
eax: fffffffe ebx: fffffffe ecx: 00000000 edx: f65da000
esi: fffffffe edi: dff803c0 ebp: dffefac8 esp: f65dbe50
ds: 007b es: 007b fs: 0000 gs: 0033 ss: 0068
Process pppd (pid: 7271, ti=f65da000 task=f7c61ab0 task.ti=f65da000)
Stack: c017f8bc f7bf6868 c01ab7cd 00000000 ffffffff ffffffff fffffffe f7859824
00000000 fffffffe 00000000 c1d16c80 f7bf6868 dff803c0 c02fb514 c01c6c7b
f7009440 c02fb514 dff803c0 f7009440 f7009440 00000000 f7bf6800 00000000
Call Trace:
[<c017f8bc>] dput+0x1c/0x160
[<c01ab7cd>] sysfs_move_dir+0x15d/0x1d0
[<c01c6c7b>] kobject_move+0x9b/0x120
[<c0238191>] device_move+0x51/0x110
[<f9b18981>] rfcomm_tty_close+0x51/0xa0 [rfcomm]
[<c01dd646>] release_dev+0x146/0x6a0
[<c0125c5a>] recalc_sigpending+0xa/0x20
[<c013313d>] ktime_get_ts+0x1d/0x50
[<c01ddbaf>] tty_release+0xf/0x20
[<c016eac1>] __fput+0x91/0x190
[<c016bdf7>] filp_close+0x47/0x80
[<c016d298>] sys_close+0x78/0xe0
[<c0104116>] syscall_call+0x7/0xb
[<c0193180>] bio_fs_destructor+0x0/0x10
=======================
Code: 39 f5 7f b6 8d 46 ff 8b 14 24 89 02 8b 44 24 04 83 c4 08 5b 5e
5f 5d c3 90 90 90 90 90 90 90 90 89 e2 81 e2 00 e0 ff ff ff 42 14 <ff>
08 0f 94 c2 84 d2 b9 01 00 00 00 74 07 89 c8 c3 8d 74 26 00
EIP: [<c01c575b>] _atomic_dec_and_lock+0xb/0x40 SS:ESP 0068:f65dbe50
note: pppd[7271] exited with preempt_count 1
usb 3-2: USB disconnect, address 3
usb 3-1: new full speed USB device using uhci_hcd and address 4
usb 3-1: configuration #1 chosen from 1 choice
usb 3-2: new full speed USB device using uhci_hcd and address 5
usb 3-2: configuration #1 chosen from 1 choice
usb 2-1: new full speed USB device using uhci_hcd and address 4
swsusp: Basic memory bitmaps freed
usb 2-1: configuration #1 chosen from 1 choice
fbcondecor: console 1 using theme 'livecd-2007.0'
fbcondecor: switched decor state to 'on' on console 1

2007-11-06 01:48:45

by Dave Young

[permalink] [raw]
Subject: Re: [Bluez-devel] [BUG] rfcomm]

On 11/5/07, Alon Bar-Lev <[email protected]> wrote:
> On 11/5/07, Dave Young <[email protected]> wrote:
> > Hi,
> > I managed to produce this bug last weekend. I debugged it and found a
> > rfcomm_dev refcnt BUG.
> > please try the patch of attachment, sorry for attachement because of
> > my gmail/mutt configuration problem.
> >
> > I post it in below thread:
> > http://lkml.org/lkml/2007/11/4/207
>
> It actually worse... :(

could you tell me your usage steps of rfcomm?

Oct 23 19:41:42 alon1 EIP: 0060:[<c01c575b>] Tainted: P VLI
Your kernel seems tainted.

Regards
dave

>
> Best Regards,
> Alon Bar-Lev
>
> ---
>
> terrupt 0000:02:01.0[A] -> Link [LNKA] -> GSI 11 (level, low) -> IRQ 11
> ieee80211_crypt: registered algorithm 'NULL'
> ieee80211: 802.11 data/management/control stack, git-1.1.13
> ieee80211: Copyright (C) 2004-2005 Intel Corporation <[email protected]>
> ipw2200: Intel(R) PRO/Wireless 2200/2915 Network Driver, 1.2.2kmprq
> ipw2200: Copyright(c) 2003-2006 Intel Corporation
> Synaptics Touchpad, model: 1, fw: 5.9, id: 0x2c6ab1, caps: 0x884793/0x0
> serio: Synaptics pass-through port at isa0060/serio1/input0
> input: SynPS/2 Synaptics TouchPad as /devices/platform/i8042/serio1/input/input2
> pnp: Device 00:0c activated.
> nsc-ircc, chip->init
> nsc-ircc, Found chip at base=0x02e
> nsc-ircc, driver loaded (Dag Brattli)
> IrDA: Registered device irda0
> nsc-ircc, Found dongle: HP HSDL-1100/HSDL-2100
> e1000: 0000:02:01.0: e1000_probe: (PCI:33MHz:32-bit) 00:11:25:2e:e5:1f
> e1000: eth0: e1000_probe: Intel(R) PRO/1000 Network Connection
> Yenta: CardBus bridge found at 0000:02:00.1 [1014:0552]
> Yenta: Using INTVAL to route CSC interrupts to PCI
> Yenta: Routing CardBus interrupts to PCI
> Yenta TI: socket 0000:02:00.1, mfunc 0x01d21b22, devctl 0x64
> Yenta: ISA IRQ mask 0x04b0, PCI irq 11
> Socket status: 30000086
> pcmcia: parent PCI bridge I/O window: 0x4000 - 0x8fff
> pcmcia: parent PCI bridge Memory window: 0xc0200000 - 0xcfffffff
> pcmcia: parent PCI bridge Memory window: 0xe8000000 - 0xefffffff
> ACPI: PCI Interrupt 0000:00:1f.5[B] -> Link [LNKB] -> GSI 11 (level,
> low) -> IRQ 11
> PCI: Setting latency timer of device 0000:00:1f.5 to 64
> udev: renamed network interface eth0 to eth1
> usb 2-1: new full speed USB device using uhci_hcd and address 3
> usb 2-1: configuration #1 chosen from 1 choice
> usb 3-1: new full speed USB device using uhci_hcd and address 2
> usb 3-1: configuration #1 chosen from 1 choice
> Bluetooth: Core ver 2.11
> NET: Registered protocol family 31
> Bluetooth: HCI device and connection manager initialized
> Bluetooth: HCI socket layer initialized
> Bluetooth: HCI USB driver ver 2.9
> intel8x0_measure_ac97_clock: measured 50304 usecs
> intel8x0: clocking to 48000
> ACPI: PCI Interrupt 0000:02:02.0[A] -> Link [LNKC] -> GSI 11 (level,
> low) -> IRQ 11
> ipw2200: Detected Intel PRO/Wireless 2200BG Network Connection
> usb 3-2: new full speed USB device using uhci_hcd and address 3
> usb 3-2: configuration #1 chosen from 1 choice
> usbcore: registered new interface driver hci_usb
> ipw2200: Detected geography ZZR (14 802.11bg channels, 0 802.11a channels)
> IBM TrackPoint firmware: 0x0e, buttons: 3/3
> input: TPPS/2 IBM TrackPoint as
> /devices/platform/i8042/serio1/serio2/input/input3
> EXT3 FS on loop5, internal journal
> NET: Registered protocol family 17
> Non-volatile memory driver v1.2
> thinkpad_acpi: ThinkPad ACPI Extras v0.16
> thinkpad_acpi: http://ibm-acpi.sf.net/
> thinkpad_acpi: ThinkPad BIOS 1RETDPWW (3.21 ), EC 1RHT71WW-3.04
> thinkpad_acpi: IBM ThinkPad T42
> input: ThinkPad Extra Buttons as /devices/virtual/input/input4
> hdaps: IBM ThinkPad T42 detected.
> hdaps: initial latch check good (0x01).
> hdaps: device successfully initialized.
> input: hdaps as /devices/platform/hdaps/input/input5
> hdaps: driver successfully loaded.
> ACPI: AC Adapter [AC] (on-line)
> ACPI: Battery Slot [BAT0] (battery present)
> input: Power Button (FF) as /devices/virtual/input/input6
> ACPI: Power Button (FF) [PWRF]
> input: Lid Switch as /devices/virtual/input/input7
> ACPI: Lid Switch [LID]
> input: Sleep Button (CM) as /devices/virtual/input/input8
> ACPI: Sleep Button (CM) [SLPB]
> ACPI: CPU0 (power states: C1[C1] C2[C2] C3[C3])
> ACPI: Processor [CPU] (supports 8 throttling states)
> ACPI: Thermal Zone [THM0] (57 C)
> Marking TSC unstable due to: possible TSC halt in C2.
> Time: acpi_pm clocksource has been installed.
> IBM machine detected. Enabling interrupts during APM calls.
> apm: BIOS version 1.2 Flags 0x03 (Driver version 1.16ac)
> dazuko: loaded, version=2.3.4
> io scheduler cfq registered
> Module ioatdma cannot be unloaded due to unsafe usage in
> drivers/dma/ioatdma.c:805
> PPP generic driver version 2.4.2
> SCSI subsystem initialized
> Adding 1465120k swap on /dev/loop/4. Priority:-1 extents:1 across:1465120k
> hda: selected mode 0x45
> hda: cache flushes supported
> hdc: selected mode 0x42
> hdc: host side 80-wire cable detection failed, limiting max speed to UDMA33
> hdc: UDMA speeds >UDMA33 cannot be set
> Bluetooth: L2CAP ver 2.8
> Bluetooth: L2CAP socket layer initialized
> Bluetooth: RFCOMM socket layer initialized
> Bluetooth: RFCOMM TTY layer initialized
> Bluetooth: RFCOMM ver 1.8
> ip_tables: (C) 2000-2006 Netfilter Core Team
> nf_conntrack version 0.5.0 (16384 buckets, 65536 max)
> eth0: Setting MAC to 00:a0:68:7c:46:06
> fbcondecor: console 1 using theme 'livecd-2007.0'
> fbcondecor: switched decor state to 'on' on console 1
> fbcondecor: console 2 using theme 'livecd-2007.0'
> fbcondecor: switched decor state to 'on' on console 2
> fbcondecor: console 3 using theme 'livecd-2007.0'
> fbcondecor: switched decor state to 'on' on console 3
> fbcondecor: console 4 using theme 'livecd-2007.0'
> fbcondecor: switched decor state to 'on' on console 4
> fbcondecor: console 5 using theme 'livecd-2007.0'
> fbcondecor: switched decor state to 'on' on console 5
> NET: Registered protocol family 10
> lo: Disabled Privacy Extensions
> ADDRCONF(NETDEV_UP): eth1: link is not ready
> ADDRCONF(NETDEV_UP): eth0: link is not ready
> audit(1194276481.266:2): audit_pid=6656 old=0 by auid=4294967295
> [drm] Initialized drm 1.1.0 20060810
> [drm] Initialized radeon 1.28.0 20060524 on minor 0
> agpgart: Found an AGP 2.0 compliant device at 0000:00:00.0.
> agpgart: Putting AGP V2 device at 0000:00:00.0 into 1x mode
> agpgart: Putting AGP V2 device at 0000:01:00.0 into 1x mode
> [drm] Setting GART location based on new memory map
> [drm] Loading R300 Microcode
> [drm] writeback test succeeded in 2 usecs
> vmmon: module license 'unspecified' taints kernel.
> /dev/vmmon[7085]: VMCI: Driver initialized.
> /dev/vmmon[7085]: Module vmmon: registered with major=10 minor=165
> /dev/vmmon[7085]: Module vmmon: initialized
> /dev/vmnet: open called by PID 7137 (vmnet-netifup)
> /dev/vmnet: hub 1 does not exist, allocating memory.
> /dev/vmnet: port on hub 1 successfully opened
> /dev/vmnet: open called by PID 7150 (vmnet-dhcpd)
> /dev/vmnet: port on hub 1 successfully opened
> fbcondecor: console 0 using theme 'livecd-2007.0'
> fbcondecor: switched decor state to 'on' on console 0
> vmnet1: no IPv6 routers present
> PPP BSD Compression module registered
> PPP Deflate Compression module registered
> swsusp: Marking nosave pages: 000000000009f000 - 0000000000100000
> swsusp: Basic memory bitmaps created
> fbcondecor: console 0 using theme 'livecd-2007.0'
> fbcondecor: switched decor state to 'on' on console 0
> Stopping tasks ... done.
> Shrinking memory... - done (0 pages freed)
> Freed 0 kbytes in 0.04 seconds (0.00 MB/s)
> Suspending console(s)
> usbfs 2-1:1.0: no suspend for driver usbfs?
> pnp: Device 00:0c disabled.
> eth0: Going into suspend...
> ACPI: PCI interrupt for device 0000:02:02.0 disabled
> ACPI handle has no context!
> ACPI: PCI interrupt for device 0000:02:01.0 disabled
> ACPI handle has no context!
> radeonfb (0000:01:00.0): suspending for event: 1...
> ACPI: PCI interrupt for device 0000:00:1f.5 disabled
> ACPI: PCI interrupt for device 0000:00:1d.7 disabled
> ACPI: PCI interrupt for device 0000:00:1d.2 disabled
> ACPI: PCI interrupt for device 0000:00:1d.1 disabled
> ACPI: PCI interrupt for device 0000:00:1d.0 disabled
> swsusp: critical section:
> swsusp: Need to copy 75254 pages
> Intel machine check architecture supported.
> Intel machine check reporting enabled on CPU#0.
> ACPI: PCI Interrupt 0000:00:1d.0[A] -> Link [LNKA] -> GSI 11 (level,
> low) -> IRQ 11
> PCI: Setting latency timer of device 0000:00:1d.0 to 64
> usb usb1: root hub lost power or was reset
> ACPI: PCI Interrupt 0000:00:1d.1[B] -> Link [LNKD] -> GSI 11 (level,
> low) -> IRQ 11
> PCI: Setting latency timer of device 0000:00:1d.1 to 64
> usb usb2: root hub lost power or was reset
> ACPI: PCI Interrupt 0000:00:1d.2[C] -> Link [LNKC] -> GSI 11 (level,
> low) -> IRQ 11
> PCI: Setting latency timer of device 0000:00:1d.2 to 64
> usb usb3: root hub lost power or was reset
> ACPI: PCI Interrupt 0000:00:1d.7[D] -> Link [LNKH] -> GSI 11 (level,
> low) -> IRQ 11
> PCI: Setting latency timer of device 0000:00:1d.7 to 64
> usb usb4: root hub lost power or was reset
> ehci_hcd 0000:00:1d.7: debug port 1
> PCI: cache line size of 32 is not supported by device 0000:00:1d.7
> PCI: Setting latency timer of device 0000:00:1e.0 to 64
> ACPI: PCI Interrupt 0000:00:1f.1[A] -> Link [LNKC] -> GSI 11 (level,
> low) -> IRQ 11
> PM: Writing back config space on device 0000:00:1f.5 at offset 1 (was
> 2900007, writing 2900003)
> ACPI: PCI Interrupt 0000:00:1f.5[B] -> Link [LNKB] -> GSI 11 (level,
> low) -> IRQ 11
> PCI: Setting latency timer of device 0000:00:1f.5 to 64
> Clocksource tsc unstable (delta = -451320663 ns)
> radeonfb (0000:01:00.0): resuming from state: 1...
> PM: Writing back config space on device 0000:02:00.0 at offset f (was
> 3c0010b, writing 5c0010b)
> PM: Writing back config space on device 0000:02:00.0 at offset 3 (was
> 824008, writing 82a810)
> PM: Writing back config space on device 0000:02:00.0 at offset 1 (was
> 2100107, writing 2100007)
> PM: Writing back config space on device 0000:02:00.1 at offset f (was
> 3c0020b, writing 5c0020b)
> PM: Writing back config space on device 0000:02:00.1 at offset 3 (was
> 824008, writing 82a810)
> PM: Writing back config space on device 0000:02:00.1 at offset 1 (was
> 2100107, writing 2100007)
> ACPI: PCI Interrupt 0000:02:01.0[A] -> Link [LNKA] -> GSI 11 (level,
> low) -> IRQ 11
> eth0: Coming out of suspend...
> ACPI: PCI Interrupt 0000:02:02.0[A] -> Link [LNKC] -> GSI 11 (level,
> low) -> IRQ 11
> pnp: Device 00:0c activated.
> hda: selected mode 0x45
> hdc: selected mode 0x42
> hdaps: initial latch check good (0x02).
> Restarting tasks ... <6>usb 2-1: USB disconnect, address 3
> __tx_submit: hci0 tx submit failed urb f72a11d4 type 2 err -19
> done.
> usb 3-1: USB disconnect, address 2
> BUG: unable to handle kernel NULL pointer dereference at virtual
> address 00000000
> printing eip:
> c01555c0
> *pde = 00000000
> Oops: 0000 [#1]
> PREEMPT
> Modules linked in: ppp_deflate zlib_deflate zlib_inflate bsd_comp
> ppp_async vmnet(P) vmmon(P) radeon drm ipv6 autofs4 snd_pcm_oss
> snd_mixer_oss snd_seq_dummy snd_seq_oss snd_seq_midi_event snd_seq
> snd_seq_device nf_nat_irc nf_nat_ftp nf_conntrack_irc nf_conntrack_ftp
> ipt_MASQUERADE iptable_nat nf_nat ipt_REJECT xt_tcpudp ipt_LOG
> xt_limit xt_state nf_conntrack_ipv4 nf_conntrack iptable_filter
> ip_tables x_tables rfcomm l2cap sd_mod scsi_mod ppp_generic slhc
> ioatdma cfq_iosched cpufreq_powersave cpufreq_ondemand
> cpufreq_conservative acpi_cpufreq freq_table ecryptfs dazuko commoncap
> uinput apm thermal processor fan button battery ac hdaps thinkpad_acpi
> hwmon nvram af_packet nls_cp1255 nls_iso8859_1 nls_utf8 nls_base
> hci_usb bluetooth pcmcia snd_intel8x0 snd_ac97_codec ac97_bus snd_pcm
> snd_timer snd soundcore snd_page_alloc ipw2200 ieee80211
> ieee80211_crypt firmware_class ide_cd cdrom nsc_ircc irda crc_ccitt
> e1000 yenta_socket rsrc_nonstatic pcmcia_core psmouse ehci_hcd
> intel_agp agpgart uhci_hcd usbcore i2c_i801 rtc pcspkr unix evdev ext3
> jbd ext2 mbcache loop ide_disk piix ide_core
> CPU: 0
> EIP: 0060:[<c01555c0>] Tainted: P VLI
> EFLAGS: 00010296 (2.6.23-gentoo-r1 #1)
> EIP is at put_page+0x10/0xf0
> eax: 00000000 ebx: 00000000 ecx: f7075b58 edx: c1fe2c40
> esi: 00000001 edi: c1fc4480 ebp: c1fc4480 esp: f7f7bdb8
> ds: 007b es: 007b fs: 0000 gs: 0033 ss: 0068
> Process syslog-ng (pid: 6451, ti=f7f7a000 task=f7d1bab0 task.ti=f7f7a000)
> Stack: 0000000c 00000001 c1fc4480 c025893d c1fc4480 0000002f c1fc44a0 c02586d8
> df9e60c0 f886ab59 00100100 00200200 f7f7be24 c1fc44a0 df9e6200 df9e6120
> f7f7be9c f67970c0 00000000 0000002f 00000001 00000001 ffffffa1 00000000
> Call Trace:
> [<c025893d>] skb_release_data+0x7d/0xa0
> [<c02586d8>] kfree_skbmem+0x8/0x80
> [<f886ab59>] unix_stream_recvmsg+0x1d9/0x610 [unix]
> [<c0119670>] default_wake_function+0x0/0x10
> [<c0251d68>] sock_aio_read+0x118/0x140
> [<c014fd6f>] generic_file_aio_write+0x5f/0xd0
> [<c016d906>] do_sync_read+0xc6/0x110
> [<c012fb50>] autoremove_wake_function+0x0/0x50
> [<c016e28b>] vfs_read+0x14b/0x160
> [<c016e641>] sys_read+0x41/0x70
> [<c01040ae>] sysenter_past_esp+0x5f/0x85
> =======================
> Code: 90 90 90 90 90 90 90 90 90 90 90 e8 8b ff ff ff 31 c0 c3 90 8d
> b4 26 00 00 00 00 83 ec 0c 89 1c 24 89 c3 89 74 24 04 89 7c 24 08 <8b>
> 00 f6 c4 40 0f 85 b8 00 00 00 ff 4b 04 0f 94 c0 84 c0 0f 84
> EIP: [<c01555c0>] put_page+0x10/0xf0 SS:ESP 0068:f7f7bdb8
> general protection fault: 0000 [#2]
> PREEMPT
> Modules linked in: ppp_deflate zlib_deflate zlib_inflate bsd_comp
> ppp_async vmnet(P) vmmon(P) radeon drm ipv6 autofs4 snd_pcm_oss
> snd_mixer_oss snd_seq_dummy snd_seq_oss snd_seq_midi_event snd_seq
> snd_seq_device nf_nat_irc nf_nat_ftp nf_conntrack_irc nf_conntrack_ftp
> ipt_MASQUERADE iptable_nat nf_nat ipt_REJECT xt_tcpudp ipt_LOG
> xt_limit xt_state nf_conntrack_ipv4 nf_conntrack iptable_filter
> ip_tables x_tables rfcomm l2cap sd_mod scsi_mod ppp_generic slhc
> ioatdma cfq_iosched cpufreq_powersave cpufreq_ondemand
> cpufreq_conservative acpi_cpufreq freq_table ecryptfs dazuko commoncap
> uinput apm thermal processor fan button battery ac hdaps thinkpad_acpi
> hwmon nvram af_packet nls_cp1255 nls_iso8859_1 nls_utf8 nls_base
> hci_usb bluetooth pcmcia snd_intel8x0 snd_ac97_codec ac97_bus snd_pcm
> snd_timer snd soundcore snd_page_alloc ipw2200 ieee80211
> ieee80211_crypt firmware_class ide_cd cdrom nsc_ircc irda crc_ccitt
> e1000 yenta_socket rsrc_nonstatic pcmcia_core psmouse ehci_hcd
> intel_agp agpgart uhci_hcd usbcore i2c_i801 rtc pcspkr unix evdev ext3
> jbd ext2 mbcache loop ide_disk piix ide_core
> CPU: 0
> EIP: 0060:[<c01c575b>] Tainted: P D VLI
> EFLAGS: 00010202 (2.6.23-gentoo-r1 #1)
> EIP is at _atomic_dec_and_lock+0xb/0x40
> eax: fffffffe ebx: fffffffe ecx: 00000000 edx: f65da000
> esi: fffffffe edi: dff803c0 ebp: dffefac8 esp: f65dbe50
> ds: 007b es: 007b fs: 0000 gs: 0033 ss: 0068
> Process pppd (pid: 7271, ti=f65da000 task=f7c61ab0 task.ti=f65da000)
> Stack: c017f8bc f7bf6868 c01ab7cd 00000000 ffffffff ffffffff fffffffe f7859824
> 00000000 fffffffe 00000000 c1d16c80 f7bf6868 dff803c0 c02fb514 c01c6c7b
> f7009440 c02fb514 dff803c0 f7009440 f7009440 00000000 f7bf6800 00000000
> Call Trace:
> [<c017f8bc>] dput+0x1c/0x160
> [<c01ab7cd>] sysfs_move_dir+0x15d/0x1d0
> [<c01c6c7b>] kobject_move+0x9b/0x120
> [<c0238191>] device_move+0x51/0x110
> [<f9b18981>] rfcomm_tty_close+0x51/0xa0 [rfcomm]
> [<c01dd646>] release_dev+0x146/0x6a0
> [<c0125c5a>] recalc_sigpending+0xa/0x20
> [<c013313d>] ktime_get_ts+0x1d/0x50
> [<c01ddbaf>] tty_release+0xf/0x20
> [<c016eac1>] __fput+0x91/0x190
> [<c016bdf7>] filp_close+0x47/0x80
> [<c016d298>] sys_close+0x78/0xe0
> [<c0104116>] syscall_call+0x7/0xb
> [<c0193180>] bio_fs_destructor+0x0/0x10
> =======================
> Code: 39 f5 7f b6 8d 46 ff 8b 14 24 89 02 8b 44 24 04 83 c4 08 5b 5e
> 5f 5d c3 90 90 90 90 90 90 90 90 89 e2 81 e2 00 e0 ff ff ff 42 14 <ff>
> 08 0f 94 c2 84 d2 b9 01 00 00 00 74 07 89 c8 c3 8d 74 26 00
> EIP: [<c01c575b>] _atomic_dec_and_lock+0xb/0x40 SS:ESP 0068:f65dbe50
> note: pppd[7271] exited with preempt_count 1
> usb 3-2: USB disconnect, address 3
> usb 3-1: new full speed USB device using uhci_hcd and address 4
> usb 3-1: configuration #1 chosen from 1 choice
> usb 3-2: new full speed USB device using uhci_hcd and address 5
> usb 3-2: configuration #1 chosen from 1 choice
> usb 2-1: new full speed USB device using uhci_hcd and address 4
> swsusp: Basic memory bitmaps freed
> usb 2-1: configuration #1 chosen from 1 choice
> fbcondecor: console 1 using theme 'livecd-2007.0'
> fbcondecor: switched decor state to 'on' on console 1
>

2007-11-06 02:50:13

by Dave Young

[permalink] [raw]
Subject: Re: [Bluez-devel] [BUG] rfcomm]

On 11/6/07, Dave Young <[email protected]> wrote:
> On 11/5/07, Alon Bar-Lev <[email protected]> wrote:
> > On 11/5/07, Dave Young <[email protected]> wrote:
> > > Hi,
> > > I managed to produce this bug last weekend. I debugged it and found a
> > > rfcomm_dev refcnt BUG.
> > > please try the patch of attachment, sorry for attachement because of
> > > my gmail/mutt configuration problem.
> > >
> > > I post it in below thread:
> > > http://lkml.org/lkml/2007/11/4/207
> >
> > It actually worse... :(
>
Hi,
sorry for reply again, this seems a diffrent issue ...

Regards
dave

2007-11-06 05:49:21

by Alon Bar-Lev

[permalink] [raw]
Subject: Re: [Bluez-devel] [BUG] rfcomm]

On 11/6/07, Dave Young <[email protected]> wrote:
> Hi,
> sorry for reply again, this seems a diffrent issue ...

All that I do is running pppd over the rfcomm, suspending the system and resume.
I don't load any binary module.

Alon.

2008-02-11 15:58:35

by Alon Bar-Lev

[permalink] [raw]
Subject: [BUG] rfcomm

On Tuesday 06 November 2007, Alon Bar-Lev wrote:
> On 11/6/07, Dave Young <[email protected]> wrote:
> > Hi,
> > sorry for reply again, this seems a diffrent issue ...
>
> All that I do is running pppd over the rfcomm, suspending the system and resume.
> I don't load any binary module.
>
> Alon.
>

Tried 2.6.24.1...
PLEASE fix this.
Thanks!

---

Feb 11 17:46:05 alon1 Restarting tasks ... <6>usb 2-1: USB disconnect, address 10
Feb 11 17:46:05 alon1 done.
Feb 11 17:46:05 alon1 usb 3-1: USB disconnect, address 7
Feb 11 17:46:05 alon1 usb 3-2: USB disconnect, address 6
Feb 11 17:46:05 alon1 usb 3-1: new full speed USB device using uhci_hcd and address 8
Feb 11 17:46:05 alon1 usb 3-1: configuration #1 chosen from 1 choice
Feb 11 17:46:05 alon1 BUG: unable to handle kernel NULL pointer dereference at virtual address 00000008
Feb 11 17:46:05 alon1 printing eip: c01b2da6 *pde = 00000000
Feb 11 17:46:05 alon1 Oops: 0000 [#1] PREEMPT
Feb 11 17:46:05 alon1 Modules linked in: aes_generic crypto_algapi ieee80211_crypt_ccmp ppp_deflate zlib_deflate zlib_inflate bsd_comp ppp_async thinkpad_acpi hwmon nvram vmnet(P) vmmon(P) tun radeon drm autofs4 ipv6 nf_nat_irc nf_nat_ftp nf_conntrack_irc nf_conntrack_ftp ipt_MASQUERADE iptable_nat nf_nat ipt_REJECT xt_tcpudp ipt_LOG xt_limit xt_state nf_conntrack_ipv4 nf_conntrack iptable_filter ip_tables x_tables rfcomm l2cap snd_pcm_oss snd_mixer_oss snd_seq_dummy snd_seq_oss snd_seq_midi_event snd_seq snd_seq_device ppp_generic slhc ioatdma dca cfq_iosched cpufreq_powersave cpufreq_ondemand cpufreq_conservative acpi_cpufreq freq_table uinput fan af_packet nls_cp1255 nls_iso8859_1 nls_utf8 nls_base hci_usb bluetooth pcmcia snd_intel8x0 snd_ac97_codec ac97_bus snd_pcm ipw2200 nsc_ircc snd_timer irda ieee80211 snd psmouse yenta_socket ehci_hcd pcspkr ieee80211_crypt e1000 rsrc_nonstatic uhci_hcd soundcore i2c_i801 intel_agp crc_ccitt thermal sr_mod pcmcia_core snd_page_alloc battery rtc firmware_class agpgart ac processor cdrom sg button unix usbcore evdev ext3 jbd ext2 mbcache loop ata_piix libata sd_mod scsi_mod
Feb 11 17:46:05 alon1
Feb 11 17:46:05 alon1 Pid: 4, comm: events/0 Tainted: P (2.6.24-gentoo-r1 #1)
Feb 11 17:46:05 alon1 EIP: 0060:[<c01b2da6>] EFLAGS: 00010286 CPU: 0
Feb 11 17:46:05 alon1 EIP is at sysfs_get_dentry+0x26/0x80
Feb 11 17:46:05 alon1 EAX: 00000000 EBX: 00000000 ECX: 00000000 EDX: ebf21000
Feb 11 17:46:05 alon1 ESI: eab4e880 EDI: f713bb40 EBP: f713bb40 ESP: f7c49f00
Feb 11 17:46:05 alon1 DS: 007b ES: 007b FS: 0000 GS: 0000 SS: 0068
Feb 11 17:46:05 alon1 Process events/0 (pid: 4, ti=f7c48000 task=f7c3efc0 task.ti=f7c48000)
Feb 11 17:46:05 alon1 Stack: f7c97120 f7135a68 f7e71e10 c01b303d ffffffff ffffffff fffffffe c030ba9c
Feb 11 17:46:05 alon1 f7c97120 f7135a68 f2fefb40 f7c97120 f7135a68 f2fefb40 c030ba8e c01ce1fb
Feb 11 17:46:05 alon1 f75f1b00 c030ba8e f2fefb40 f75f1b00 f75f1b00 00000000 f7135a00 00000000
Feb 11 17:46:05 alon1 Call Trace:
Feb 11 17:46:05 alon1 [<c01b303d>] sysfs_move_dir+0x3d/0x1f0
Feb 11 17:46:05 alon1 [<c01ce1fb>] kobject_move+0x9b/0x120
Feb 11 17:46:05 alon1 [<c0241701>] device_move+0x51/0x110
Feb 11 17:46:05 alon1 [<f9a8adb0>] del_conn+0x0/0x40 [bluetooth]
Feb 11 17:46:05 alon1 [<f9a8adc0>] del_conn+0x10/0x40 [bluetooth]
Feb 11 17:46:05 alon1 [<c012c1a1>] run_workqueue+0x81/0x140
Feb 11 17:46:05 alon1 [<c02c0c78>] schedule+0x168/0x2e0
Feb 11 17:46:05 alon1 [<c012fc70>] autoremove_wake_function+0x0/0x50
Feb 11 17:46:05 alon1 [<c012c9cb>] worker_thread+0x9b/0xf0
Feb 11 17:46:05 alon1 [<c012fc70>] autoremove_wake_function+0x0/0x50
Feb 11 17:46:05 alon1 [<c012c930>] worker_thread+0x0/0xf0
Feb 11 17:46:05 alon1 [<c012f962>] kthread+0x42/0x70
Feb 11 17:46:05 alon1 [<c012f920>] kthread+0x0/0x70
Feb 11 17:46:05 alon1 [<c0104c2f>] kernel_thread_helper+0x7/0x18
Feb 11 17:46:05 alon1 =======================
Feb 11 17:46:05 alon1 Code: 26 00 00 00 00 57 89 c7 a1 50 1b 3a c0 56 53 8b 70 38 85 f6 74 08 8b 0e 85 c9 74 58 ff 06 8b 56 50 39 fa 74 47 89 fb eb 02 89 c3 <8b> 43 08 39 c2 75 f7 8b 46 08 83 c0 68 e8 98 e7 10 00 8b 43 10
Feb 11 17:46:05 alon1 EIP: [<c01b2da6>] sysfs_get_dentry+0x26/0x80 SS:ESP 0068:f7c49f00
Feb 11 17:46:05 alon1 ---[ end trace a8cb8bc51a9b0e12 ]---

2008-02-11 22:49:46

by Frederik Deweerdt

[permalink] [raw]
Subject: Re: [BUG] rfcomm

Hello Alon,

On Mon, Feb 11, 2008 at 05:57:54PM +0200, Alon Bar-Lev wrote:
[...]
> Feb 11 17:46:05 alon1 BUG: unable to handle kernel NULL pointer dereference at virtual address 00000008
> Feb 11 17:46:05 alon1 printing eip: c01b2da6 *pde = 00000000
> Feb 11 17:46:05 alon1 Oops: 0000 [#1] PREEMPT
> Feb 11 17:46:05 alon1 Modules linked in: aes_generic crypto_algapi ieee80211_crypt_ccmp ppp_deflate zlib_deflate zlib_inflate bsd_comp ppp_async thinkpad_acpi hwmon nvram vmnet(P) vmmon(P) tun radeon drm autofs4 ipv6 nf_nat_irc nf_nat_ftp nf_conntrack_irc nf_conntrack_ftp ipt_MASQUERADE iptable_nat nf_nat ipt_REJECT xt_tcpudp ipt_LOG xt_limit xt_state nf_conntrack_ipv4 nf_conntrack iptable_filter ip_tables x_tables rfcomm l2cap snd_pcm_oss snd_mixer_oss snd_seq_dummy snd_seq_oss snd_seq_midi_event snd_seq snd_seq_device ppp_generic slhc ioatdma dca cfq_iosched cpufreq_powersave cpufreq_ondemand cpufreq_conservative acpi_cpufreq freq_table uinput fan af_packet nls_cp1255 nls_iso8859_1 nls_utf8 nls_base hci_usb bluetooth pcmcia snd_intel8x0 snd_ac97_codec ac97_bus snd_pcm ipw2200 nsc_ircc snd_timer irda ieee80211 snd psmouse yenta_socket ehci_hcd pcspkr ieee80211_crypt e1000 rsrc_nonstatic uhci_hcd soundcore i2c_i801 intel_agp crc_ccitt thermal sr_mod pcmcia_core snd_page_alloc battery rtc firmware_class agpgart ac processor cdrom sg button unix usbcore evdev ext3 jbd ext2 mbcache loop ata_piix libata sd_mod scsi_mod
> Feb 11 17:46:05 alon1
> Feb 11 17:46:05 alon1 Pid: 4, comm: events/0 Tainted: P (2.6.24-gentoo-r1 #1)
> Feb 11 17:46:05 alon1 EIP: 0060:[<c01b2da6>] EFLAGS: 00010286 CPU: 0
> Feb 11 17:46:05 alon1 EIP is at sysfs_get_dentry+0x26/0x80
> Feb 11 17:46:05 alon1 EAX: 00000000 EBX: 00000000 ECX: 00000000 EDX: ebf21000
> Feb 11 17:46:05 alon1 ESI: eab4e880 EDI: f713bb40 EBP: f713bb40 ESP: f7c49f00
> Feb 11 17:46:05 alon1 DS: 007b ES: 007b FS: 0000 GS: 0000 SS: 0068
> Feb 11 17:46:05 alon1 Process events/0 (pid: 4, ti=f7c48000 task=f7c3efc0 task.ti=f7c48000)
> Feb 11 17:46:05 alon1 Stack: f7c97120 f7135a68 f7e71e10 c01b303d ffffffff ffffffff fffffffe c030ba9c
> Feb 11 17:46:05 alon1 f7c97120 f7135a68 f2fefb40 f7c97120 f7135a68 f2fefb40 c030ba8e c01ce1fb
> Feb 11 17:46:05 alon1 f75f1b00 c030ba8e f2fefb40 f75f1b00 f75f1b00 00000000 f7135a00 00000000
> Feb 11 17:46:05 alon1 Call Trace:
> Feb 11 17:46:05 alon1 [<c01b303d>] sysfs_move_dir+0x3d/0x1f0
> Feb 11 17:46:05 alon1 [<c01ce1fb>] kobject_move+0x9b/0x120
> Feb 11 17:46:05 alon1 [<c0241701>] device_move+0x51/0x110
> Feb 11 17:46:05 alon1 [<f9a8adb0>] del_conn+0x0/0x40 [bluetooth]
> Feb 11 17:46:05 alon1 [<f9a8adc0>] del_conn+0x10/0x40 [bluetooth]
> Feb 11 17:46:05 alon1 [<c012c1a1>] run_workqueue+0x81/0x140
> Feb 11 17:46:05 alon1 [<c02c0c78>] schedule+0x168/0x2e0
> Feb 11 17:46:05 alon1 [<c012fc70>] autoremove_wake_function+0x0/0x50
> Feb 11 17:46:05 alon1 [<c012c9cb>] worker_thread+0x9b/0xf0
> Feb 11 17:46:05 alon1 [<c012fc70>] autoremove_wake_function+0x0/0x50
> Feb 11 17:46:05 alon1 [<c012c930>] worker_thread+0x0/0xf0
> Feb 11 17:46:05 alon1 [<c012f962>] kthread+0x42/0x70
> Feb 11 17:46:05 alon1 [<c012f920>] kthread+0x0/0x70
> Feb 11 17:46:05 alon1 [<c0104c2f>] kernel_thread_helper+0x7/0x18
> Feb 11 17:46:05 alon1 =======================
> Feb 11 17:46:05 alon1 Code: 26 00 00 00 00 57 89 c7 a1 50 1b 3a c0 56 53 8b 70 38 85 f6 74 08 8b 0e 85 c9 74 58 ff 06 8b 56 50 39 fa 74 47 89 fb eb 02 89 c3 <8b> 43 08 39 c2 75 f7 8b 46 08 83 c0 68 e8 98 e7 10 00 8b 43 10
> Feb 11 17:46:05 alon1 EIP: [<c01b2da6>] sysfs_get_dentry+0x26/0x80 SS:ESP 0068:f7c49f00

If your compiler doesn't produce a code too different from mine, it
looks like cur in sysfs_get_dentry()...

while (cur->s_parent != dentry->d_fsdata)
cur = cur->s_parent;

... got NULL and dereferenced. Could you try the following (merely
tested by booting) patch? While not a fix, it could help pointing to
the right direction.

Regards,
Frederik


diff --git a/fs/sysfs/dir.c b/fs/sysfs/dir.c
index 4948d9b..90cdf0d 100644
--- a/fs/sysfs/dir.c
+++ b/fs/sysfs/dir.c
@@ -106,8 +106,11 @@ struct dentry *sysfs_get_dentry(struct sysfs_dirent *sd)

/* find the first ancestor which hasn't been looked up */
cur = sd;
- while (cur->s_parent != dentry->d_fsdata)
+ while (cur->s_parent != dentry->d_fsdata) {
cur = cur->s_parent;
+ if (!cur)
+ return ERR_PTR(-ENOENT);
+ }

/* look it up */
parent = dentry;

2008-02-13 08:00:05

by Andrew Morton

[permalink] [raw]
Subject: Re: [BUG] rfcomm

On Mon, 11 Feb 2008 17:57:54 +0200 Alon Bar-Lev <[email protected]> wrote:

> On Tuesday 06 November 2007, Alon Bar-Lev wrote:
> > On 11/6/07, Dave Young <[email protected]> wrote:
> > > Hi,
> > > sorry for reply again, this seems a diffrent issue ...
> >
> > All that I do is running pppd over the rfcomm, suspending the system and resume.
> > I don't load any binary module.
> >
> > Alon.
> >
>
> Tried 2.6.24.1...
> PLEASE fix this.
> Thanks!
>
> ---
>
> Feb 11 17:46:05 alon1 Restarting tasks ... <6>usb 2-1: USB disconnect, address 10
> Feb 11 17:46:05 alon1 done.
> Feb 11 17:46:05 alon1 usb 3-1: USB disconnect, address 7
> Feb 11 17:46:05 alon1 usb 3-2: USB disconnect, address 6
> Feb 11 17:46:05 alon1 usb 3-1: new full speed USB device using uhci_hcd and address 8
> Feb 11 17:46:05 alon1 usb 3-1: configuration #1 chosen from 1 choice
> Feb 11 17:46:05 alon1 BUG: unable to handle kernel NULL pointer dereference at virtual address 00000008
> Feb 11 17:46:05 alon1 printing eip: c01b2da6 *pde = 00000000
> Feb 11 17:46:05 alon1 Oops: 0000 [#1] PREEMPT
> Feb 11 17:46:05 alon1 Modules linked in: aes_generic crypto_algapi ieee80211_crypt_ccmp ppp_deflate zlib_deflate zlib_inflate bsd_comp ppp_async thinkpad_acpi hwmon nvram vmnet(P) vmmon(P) tun radeon drm autofs4 ipv6 nf_nat_irc nf_nat_ftp nf_conntrack_irc nf_conntrack_ftp ipt_MASQUERADE iptable_nat nf_nat ipt_REJECT xt_tcpudp ipt_LOG xt_limit xt_state nf_conntrack_ipv4 nf_conntrack iptable_filter ip_tables x_tables rfcomm l2cap snd_pcm_oss snd_mixer_oss snd_seq_dummy snd_seq_oss snd_seq_midi_event snd_seq snd_seq_device ppp_generic slhc ioatdma dca cfq_iosched cpufreq_powersave cpufreq_ondemand cpufreq_conservative acpi_cpufreq freq_table uinput fan af_packet nls_cp1255 nls_iso8859_1 nls_utf8 nls_base hci_usb bluetooth pcmcia snd_intel8x0 snd_ac97_codec ac97_bus snd_pcm ipw2200 nsc_ircc snd_timer irda ieee80211 snd psmouse yenta_socket ehci_hcd pcspkr ieee80211_crypt e1000 rsrc_nonstatic uhci_hcd soundcore i2c_i801 intel_agp crc_ccitt thermal sr_mod pcmcia_core snd_page_al!
lo!
> c battery rtc firmware_class agpgart ac processor cdrom sg button unix usbcore evdev ext3 jbd ext2 mbcache loop ata_piix libata sd_mod scsi_mod
> Feb 11 17:46:05 alon1
> Feb 11 17:46:05 alon1 Pid: 4, comm: events/0 Tainted: P (2.6.24-gentoo-r1 #1)
> Feb 11 17:46:05 alon1 EIP: 0060:[<c01b2da6>] EFLAGS: 00010286 CPU: 0
> Feb 11 17:46:05 alon1 EIP is at sysfs_get_dentry+0x26/0x80
> Feb 11 17:46:05 alon1 EAX: 00000000 EBX: 00000000 ECX: 00000000 EDX: ebf21000
> Feb 11 17:46:05 alon1 ESI: eab4e880 EDI: f713bb40 EBP: f713bb40 ESP: f7c49f00
> Feb 11 17:46:05 alon1 DS: 007b ES: 007b FS: 0000 GS: 0000 SS: 0068
> Feb 11 17:46:05 alon1 Process events/0 (pid: 4, ti=f7c48000 task=f7c3efc0 task.ti=f7c48000)
> Feb 11 17:46:05 alon1 Stack: f7c97120 f7135a68 f7e71e10 c01b303d ffffffff ffffffff fffffffe c030ba9c
> Feb 11 17:46:05 alon1 f7c97120 f7135a68 f2fefb40 f7c97120 f7135a68 f2fefb40 c030ba8e c01ce1fb
> Feb 11 17:46:05 alon1 f75f1b00 c030ba8e f2fefb40 f75f1b00 f75f1b00 00000000 f7135a00 00000000
> Feb 11 17:46:05 alon1 Call Trace:
> Feb 11 17:46:05 alon1 [<c01b303d>] sysfs_move_dir+0x3d/0x1f0
> Feb 11 17:46:05 alon1 [<c01ce1fb>] kobject_move+0x9b/0x120
> Feb 11 17:46:05 alon1 [<c0241701>] device_move+0x51/0x110
> Feb 11 17:46:05 alon1 [<f9a8adb0>] del_conn+0x0/0x40 [bluetooth]
> Feb 11 17:46:05 alon1 [<f9a8adc0>] del_conn+0x10/0x40 [bluetooth]
> Feb 11 17:46:05 alon1 [<c012c1a1>] run_workqueue+0x81/0x140
> Feb 11 17:46:05 alon1 [<c02c0c78>] schedule+0x168/0x2e0
> Feb 11 17:46:05 alon1 [<c012fc70>] autoremove_wake_function+0x0/0x50
> Feb 11 17:46:05 alon1 [<c012c9cb>] worker_thread+0x9b/0xf0
> Feb 11 17:46:05 alon1 [<c012fc70>] autoremove_wake_function+0x0/0x50
> Feb 11 17:46:05 alon1 [<c012c930>] worker_thread+0x0/0xf0
> Feb 11 17:46:05 alon1 [<c012f962>] kthread+0x42/0x70
> Feb 11 17:46:05 alon1 [<c012f920>] kthread+0x0/0x70
> Feb 11 17:46:05 alon1 [<c0104c2f>] kernel_thread_helper+0x7/0x18
> Feb 11 17:46:05 alon1 =======================
> Feb 11 17:46:05 alon1 Code: 26 00 00 00 00 57 89 c7 a1 50 1b 3a c0 56 53 8b 70 38 85 f6 74 08 8b 0e 85 c9 74 58 ff 06 8b 56 50 39 fa 74 47 89 fb eb 02 89 c3 <8b> 43 08 39 c2 75 f7 8b 46 08 83 c0 68 e8 98 e7 10 00 8b 43 10
> Feb 11 17:46:05 alon1 EIP: [<c01b2da6>] sysfs_get_dentry+0x26/0x80 SS:ESP 0068:f7c49f00

A number of bluetooth fixes went into 2.6.25-rc1. It would be interestig
to see if we fixed this.

2008-02-13 16:59:00

by Mark Lord

[permalink] [raw]
Subject: Re: [BUG] rfcomm

Andrew Morton wrote:
> On Mon, 11 Feb 2008 17:57:54 +0200 Alon Bar-Lev <[email protected]> wrote:
>
>> On Tuesday 06 November 2007, Alon Bar-Lev wrote:
>>> On 11/6/07, Dave Young <[email protected]> wrote:
>>>> Hi,
>>>> sorry for reply again, this seems a diffrent issue ...
>>> All that I do is running pppd over the rfcomm, suspending the system and resume.
>>> I don't load any binary module.
..
>> Tried 2.6.24.1...
..
>> Feb 11 17:46:05 alon1 usb 3-1: new full speed USB device using uhci_hcd and address 8
>> Feb 11 17:46:05 alon1 usb 3-1: configuration #1 chosen from 1 choice
>> Feb 11 17:46:05 alon1 BUG: unable to handle kernel NULL pointer dereference at virtual address 00000008
>> Feb 11 17:46:05 alon1 printing eip: c01b2da6 *pde = 00000000
>> Feb 11 17:46:05 alon1 Oops: 0000 [#1] PREEMPT
>> Feb 11 17:46:05 alon1 Modules linked in: aes_generic crypto_algapi ieee80211_crypt_ccmp ppp_deflate zlib_deflate zlib_inflate bsd_comp ppp_async thinkpad_acpi hwmon nvram vmnet(P) vmmon(P) tun radeon drm autofs4 ipv6 nf_nat_irc nf_nat_ftp nf_conntrack_irc nf_conntrack_ftp ipt_MASQUERADE iptable_nat nf_nat ipt_REJECT xt_tcpudp ipt_LOG xt_limit xt_state nf_conntrack_ipv4 nf_conntrack iptable_filter ip_tables x_tables rfcomm l2cap snd_pcm_oss snd_mixer_oss snd_seq_dummy snd_seq_oss snd_seq_midi_event snd_seq snd_seq_device ppp_generic slhc ioatdma dca cfq_iosched cpufreq_powersave cpufreq_ondemand cpufreq_conservative acpi_cpufreq freq_table uinput fan af_packet nls_cp1255 nls_iso8859_1 nls_utf8 nls_base hci_usb bluetooth pcmcia snd_intel8x0 snd_ac97_codec ac97_bus snd_pcm ipw2200 nsc_ircc snd_timer irda ieee80211 snd psmouse yenta_socket ehci_hcd pcspkr ieee80211_crypt e1000 rsrc_nonstatic uhci_hcd soundcore i2c_i801 intel_agp crc_ccitt thermal sr_mod pcmcia_core snd_page_al
!
> lo!
>> c battery rtc firmware_class agpgart ac processor cdrom sg button unix usbcore evdev ext3 jbd ext2 mbcache loop ata_piix libata sd_mod scsi_mod
>> Feb 11 17:46:05 alon1
>> Feb 11 17:46:05 alon1 Pid: 4, comm: events/0 Tainted: P (2.6.24-gentoo-r1 #1)
>> Feb 11 17:46:05 alon1 EIP: 0060:[<c01b2da6>] EFLAGS: 00010286 CPU: 0
>> Feb 11 17:46:05 alon1 EIP is at sysfs_get_dentry+0x26/0x80
>> Feb 11 17:46:05 alon1 EAX: 00000000 EBX: 00000000 ECX: 00000000 EDX: ebf21000
>> Feb 11 17:46:05 alon1 ESI: eab4e880 EDI: f713bb40 EBP: f713bb40 ESP: f7c49f00
>> Feb 11 17:46:05 alon1 DS: 007b ES: 007b FS: 0000 GS: 0000 SS: 0068
>> Feb 11 17:46:05 alon1 Process events/0 (pid: 4, ti=f7c48000 task=f7c3efc0 task.ti=f7c48000)
>> Feb 11 17:46:05 alon1 Stack: f7c97120 f7135a68 f7e71e10 c01b303d ffffffff ffffffff fffffffe c030ba9c
>> Feb 11 17:46:05 alon1 f7c97120 f7135a68 f2fefb40 f7c97120 f7135a68 f2fefb40 c030ba8e c01ce1fb
>> Feb 11 17:46:05 alon1 f75f1b00 c030ba8e f2fefb40 f75f1b00 f75f1b00 00000000 f7135a00 00000000
>> Feb 11 17:46:05 alon1 Call Trace:
>> Feb 11 17:46:05 alon1 [<c01b303d>] sysfs_move_dir+0x3d/0x1f0
>> Feb 11 17:46:05 alon1 [<c01ce1fb>] kobject_move+0x9b/0x120
>> Feb 11 17:46:05 alon1 [<c0241701>] device_move+0x51/0x110
>> Feb 11 17:46:05 alon1 [<f9a8adb0>] del_conn+0x0/0x40 [bluetooth]
>> Feb 11 17:46:05 alon1 [<f9a8adc0>] del_conn+0x10/0x40 [bluetooth]
>> Feb 11 17:46:05 alon1 [<c012c1a1>] run_workqueue+0x81/0x140
>> Feb 11 17:46:05 alon1 [<c02c0c78>] schedule+0x168/0x2e0
>> Feb 11 17:46:05 alon1 [<c012fc70>] autoremove_wake_function+0x0/0x50
>> Feb 11 17:46:05 alon1 [<c012c9cb>] worker_thread+0x9b/0xf0
>> Feb 11 17:46:05 alon1 [<c012fc70>] autoremove_wake_function+0x0/0x50
>> Feb 11 17:46:05 alon1 [<c012c930>] worker_thread+0x0/0xf0
>> Feb 11 17:46:05 alon1 [<c012f962>] kthread+0x42/0x70
>> Feb 11 17:46:05 alon1 [<c012f920>] kthread+0x0/0x70
>> Feb 11 17:46:05 alon1 [<c0104c2f>] kernel_thread_helper+0x7/0x18
>> Feb 11 17:46:05 alon1 =======================
>> Feb 11 17:46:05 alon1 Code: 26 00 00 00 00 57 89 c7 a1 50 1b 3a c0 56 53 8b 70 38 85 f6 74 08 8b 0e 85 c9 74 58 ff 06 8b 56 50 39 fa 74 47 89 fb eb 02 89 c3 <8b> 43 08 39 c2 75 f7 8b 46 08 83 c0 68 e8 98 e7 10 00 8b 43 10
>> Feb 11 17:46:05 alon1 EIP: [<c01b2da6>] sysfs_get_dentry+0x26/0x80 SS:ESP 0068:f7c49f00
>
> A number of bluetooth fixes went into 2.6.25-rc1. It would be interestig
> to see if we fixed this.
..

I had a strange thing happen with 2.6.24[.0] the other day.
My bluetooth serial dongles stopped working.
Unloading/reloading modules and daemons had no effect.
A system reboot cured it (for now).

That's the first time I've had unfixable bluetooth trouble, well, ever I suppose.
Just another useless data tidbit on 2.6.24.

-ml

2008-02-15 03:28:30

by Dave Young

[permalink] [raw]
Subject: Re: [BUG] rfcomm

On Wed, Feb 13, 2008 at 3:58 PM, Andrew Morton
<[email protected]> wrote:
> On Mon, 11 Feb 2008 17:57:54 +0200 Alon Bar-Lev <[email protected]> wrote:
>
> > On Tuesday 06 November 2007, Alon Bar-Lev wrote:
> > > On 11/6/07, Dave Young <[email protected]> wrote:
> > > > Hi,
> > > > sorry for reply again, this seems a diffrent issue ...
> > >
> > > All that I do is running pppd over the rfcomm, suspending the system and resume.
> > > I don't load any binary module.
> > >
> > > Alon.
> > >
> >
> > Tried 2.6.24.1...
> > PLEASE fix this.
> > Thanks!
> >
> > ---
> >
> > Feb 11 17:46:05 alon1 Restarting tasks ... <6>usb 2-1: USB disconnect, address 10
> > Feb 11 17:46:05 alon1 done.
> > Feb 11 17:46:05 alon1 usb 3-1: USB disconnect, address 7
> > Feb 11 17:46:05 alon1 usb 3-2: USB disconnect, address 6
> > Feb 11 17:46:05 alon1 usb 3-1: new full speed USB device using uhci_hcd and address 8
> > Feb 11 17:46:05 alon1 usb 3-1: configuration #1 chosen from 1 choice
> > Feb 11 17:46:05 alon1 BUG: unable to handle kernel NULL pointer dereference at virtual address 00000008
> > Feb 11 17:46:05 alon1 printing eip: c01b2da6 *pde = 00000000
> > Feb 11 17:46:05 alon1 Oops: 0000 [#1] PREEMPT
> > Feb 11 17:46:05 alon1 Modules linked in: aes_generic crypto_algapi ieee80211_crypt_ccmp ppp_deflate zlib_deflate zlib_inflate bsd_comp ppp_async thinkpad_acpi hwmon nvram vmnet(P) vmmon(P) tun radeon drm autofs4 ipv6 nf_nat_irc nf_nat_ftp nf_conntrack_irc nf_conntrack_ftp ipt_MASQUERADE iptable_nat nf_nat ipt_REJECT xt_tcpudp ipt_LOG xt_limit xt_state nf_conntrack_ipv4 nf_conntrack iptable_filter ip_tables x_tables rfcomm l2cap snd_pcm_oss snd_mixer_oss snd_seq_dummy snd_seq_oss snd_seq_midi_event snd_seq snd_seq_device ppp_generic slhc ioatdma dca cfq_iosched cpufreq_powersave cpufreq_ondemand cpufreq_conservative acpi_cpufreq freq_table uinput fan af_packet nls_cp1255 nls_iso8859_1 nls_utf8 nls_base hci_usb bluetooth pcmcia snd_intel8x0 snd_ac97_codec ac97_bus snd_pcm ipw2200 nsc_ircc snd_timer irda ieee80211 snd psmouse yenta_socket ehci_hcd pcspkr ieee80211_crypt e1000 rsrc_nonstatic uhci_hcd soundcore i2c_i801 intel_agp crc_ccitt thermal sr_mod pcmcia_core snd_page_al!
> lo!
>
>
> > c battery rtc firmware_class agpgart ac processor cdrom sg button unix usbcore evdev ext3 jbd ext2 mbcache loop ata_piix libata sd_mod scsi_mod
> > Feb 11 17:46:05 alon1
> > Feb 11 17:46:05 alon1 Pid: 4, comm: events/0 Tainted: P (2.6.24-gentoo-r1 #1)
> > Feb 11 17:46:05 alon1 EIP: 0060:[<c01b2da6>] EFLAGS: 00010286 CPU: 0
> > Feb 11 17:46:05 alon1 EIP is at sysfs_get_dentry+0x26/0x80
> > Feb 11 17:46:05 alon1 EAX: 00000000 EBX: 00000000 ECX: 00000000 EDX: ebf21000
> > Feb 11 17:46:05 alon1 ESI: eab4e880 EDI: f713bb40 EBP: f713bb40 ESP: f7c49f00
> > Feb 11 17:46:05 alon1 DS: 007b ES: 007b FS: 0000 GS: 0000 SS: 0068
> > Feb 11 17:46:05 alon1 Process events/0 (pid: 4, ti=f7c48000 task=f7c3efc0 task.ti=f7c48000)
> > Feb 11 17:46:05 alon1 Stack: f7c97120 f7135a68 f7e71e10 c01b303d ffffffff ffffffff fffffffe c030ba9c
> > Feb 11 17:46:05 alon1 f7c97120 f7135a68 f2fefb40 f7c97120 f7135a68 f2fefb40 c030ba8e c01ce1fb
> > Feb 11 17:46:05 alon1 f75f1b00 c030ba8e f2fefb40 f75f1b00 f75f1b00 00000000 f7135a00 00000000
> > Feb 11 17:46:05 alon1 Call Trace:
> > Feb 11 17:46:05 alon1 [<c01b303d>] sysfs_move_dir+0x3d/0x1f0
> > Feb 11 17:46:05 alon1 [<c01ce1fb>] kobject_move+0x9b/0x120
> > Feb 11 17:46:05 alon1 [<c0241701>] device_move+0x51/0x110
> > Feb 11 17:46:05 alon1 [<f9a8adb0>] del_conn+0x0/0x40 [bluetooth]
> > Feb 11 17:46:05 alon1 [<f9a8adc0>] del_conn+0x10/0x40 [bluetooth]
> > Feb 11 17:46:05 alon1 [<c012c1a1>] run_workqueue+0x81/0x140
> > Feb 11 17:46:05 alon1 [<c02c0c78>] schedule+0x168/0x2e0
> > Feb 11 17:46:05 alon1 [<c012fc70>] autoremove_wake_function+0x0/0x50
> > Feb 11 17:46:05 alon1 [<c012c9cb>] worker_thread+0x9b/0xf0
> > Feb 11 17:46:05 alon1 [<c012fc70>] autoremove_wake_function+0x0/0x50
> > Feb 11 17:46:05 alon1 [<c012c930>] worker_thread+0x0/0xf0
> > Feb 11 17:46:05 alon1 [<c012f962>] kthread+0x42/0x70
> > Feb 11 17:46:05 alon1 [<c012f920>] kthread+0x0/0x70
> > Feb 11 17:46:05 alon1 [<c0104c2f>] kernel_thread_helper+0x7/0x18
> > Feb 11 17:46:05 alon1 =======================
> > Feb 11 17:46:05 alon1 Code: 26 00 00 00 00 57 89 c7 a1 50 1b 3a c0 56 53 8b 70 38 85 f6 74 08 8b 0e 85 c9 74 58 ff 06 8b 56 50 39 fa 74 47 89 fb eb 02 89 c3 <8b> 43 08 39 c2 75 f7 8b 46 08 83 c0 68 e8 98 e7 10 00 8b 43 10
> > Feb 11 17:46:05 alon1 EIP: [<c01b2da6>] sysfs_get_dentry+0x26/0x80 SS:ESP 0068:f7c49f00
>
> A number of bluetooth fixes went into 2.6.25-rc1. It would be interestig
> to see if we fixed this.
>
>

Seems there's some bugs about suspend/resume bluetooth devices.
I cannot produce the above bug, but my bluetooth dongle does'nt work
as normal when I tying s2ram

Another similar report:
http://lkml.org/lkml/2008/2/13/701

Regards
dave

2008-02-15 23:14:01

by Dave Young

[permalink] [raw]
Subject: Re: [BUG] rfcomm

On Fri, Feb 15, 2008 at 11:28 AM, Dave Young <[email protected]> wrote:
>
> On Wed, Feb 13, 2008 at 3:58 PM, Andrew Morton
> <[email protected]> wrote:
> > On Mon, 11 Feb 2008 17:57:54 +0200 Alon Bar-Lev <[email protected]> wrote:
> >
> > > On Tuesday 06 November 2007, Alon Bar-Lev wrote:
> > > > On 11/6/07, Dave Young <[email protected]> wrote:
> > > > > Hi,
> > > > > sorry for reply again, this seems a diffrent issue ...
> > > >
> > > > All that I do is running pppd over the rfcomm, suspending the system and resume.
> > > > I don't load any binary module.
> > > >
> > > > Alon.
> > > >
> > >
> > > Tried 2.6.24.1...
> > > PLEASE fix this.
> > > Thanks!
> > >
> > > ---
> > >
> > > Feb 11 17:46:05 alon1 Restarting tasks ... <6>usb 2-1: USB disconnect, address 10
> > > Feb 11 17:46:05 alon1 done.
> > > Feb 11 17:46:05 alon1 usb 3-1: USB disconnect, address 7
> > > Feb 11 17:46:05 alon1 usb 3-2: USB disconnect, address 6
> > > Feb 11 17:46:05 alon1 usb 3-1: new full speed USB device using uhci_hcd and address 8
> > > Feb 11 17:46:05 alon1 usb 3-1: configuration #1 chosen from 1 choice
> > > Feb 11 17:46:05 alon1 BUG: unable to handle kernel NULL pointer dereference at virtual address 00000008
> > > Feb 11 17:46:05 alon1 printing eip: c01b2da6 *pde = 00000000
> > > Feb 11 17:46:05 alon1 Oops: 0000 [#1] PREEMPT
> > > Feb 11 17:46:05 alon1 Modules linked in: aes_generic crypto_algapi ieee80211_crypt_ccmp ppp_deflate zlib_deflate zlib_inflate bsd_comp ppp_async thinkpad_acpi hwmon nvram vmnet(P) vmmon(P) tun radeon drm autofs4 ipv6 nf_nat_irc nf_nat_ftp nf_conntrack_irc nf_conntrack_ftp ipt_MASQUERADE iptable_nat nf_nat ipt_REJECT xt_tcpudp ipt_LOG xt_limit xt_state nf_conntrack_ipv4 nf_conntrack iptable_filter ip_tables x_tables rfcomm l2cap snd_pcm_oss snd_mixer_oss snd_seq_dummy snd_seq_oss snd_seq_midi_event snd_seq snd_seq_device ppp_generic slhc ioatdma dca cfq_iosched cpufreq_powersave cpufreq_ondemand cpufreq_conservative acpi_cpufreq freq_table uinput fan af_packet nls_cp1255 nls_iso8859_1 nls_utf8 nls_base hci_usb bluetooth pcmcia snd_intel8x0 snd_ac97_codec ac97_bus snd_pcm ipw2200 nsc_ircc snd_timer irda ieee80211 snd psmouse yenta_socket ehci_hcd pcspkr ieee80211_crypt e1000 rsrc_nonstatic uhci_hcd soundcore i2c_i801 intel_agp crc_ccitt thermal sr_mod pcmcia_core snd_page_al!
> > lo!
> >
> >
> > > c battery rtc firmware_class agpgart ac processor cdrom sg button unix usbcore evdev ext3 jbd ext2 mbcache loop ata_piix libata sd_mod scsi_mod
> > > Feb 11 17:46:05 alon1
> > > Feb 11 17:46:05 alon1 Pid: 4, comm: events/0 Tainted: P (2.6.24-gentoo-r1 #1)
> > > Feb 11 17:46:05 alon1 EIP: 0060:[<c01b2da6>] EFLAGS: 00010286 CPU: 0
> > > Feb 11 17:46:05 alon1 EIP is at sysfs_get_dentry+0x26/0x80
> > > Feb 11 17:46:05 alon1 EAX: 00000000 EBX: 00000000 ECX: 00000000 EDX: ebf21000
> > > Feb 11 17:46:05 alon1 ESI: eab4e880 EDI: f713bb40 EBP: f713bb40 ESP: f7c49f00
> > > Feb 11 17:46:05 alon1 DS: 007b ES: 007b FS: 0000 GS: 0000 SS: 0068
> > > Feb 11 17:46:05 alon1 Process events/0 (pid: 4, ti=f7c48000 task=f7c3efc0 task.ti=f7c48000)
> > > Feb 11 17:46:05 alon1 Stack: f7c97120 f7135a68 f7e71e10 c01b303d ffffffff ffffffff fffffffe c030ba9c
> > > Feb 11 17:46:05 alon1 f7c97120 f7135a68 f2fefb40 f7c97120 f7135a68 f2fefb40 c030ba8e c01ce1fb
> > > Feb 11 17:46:05 alon1 f75f1b00 c030ba8e f2fefb40 f75f1b00 f75f1b00 00000000 f7135a00 00000000
> > > Feb 11 17:46:05 alon1 Call Trace:
> > > Feb 11 17:46:05 alon1 [<c01b303d>] sysfs_move_dir+0x3d/0x1f0
> > > Feb 11 17:46:05 alon1 [<c01ce1fb>] kobject_move+0x9b/0x120
> > > Feb 11 17:46:05 alon1 [<c0241701>] device_move+0x51/0x110
> > > Feb 11 17:46:05 alon1 [<f9a8adb0>] del_conn+0x0/0x40 [bluetooth]
> > > Feb 11 17:46:05 alon1 [<f9a8adc0>] del_conn+0x10/0x40 [bluetooth]
> > > Feb 11 17:46:05 alon1 [<c012c1a1>] run_workqueue+0x81/0x140
> > > Feb 11 17:46:05 alon1 [<c02c0c78>] schedule+0x168/0x2e0
> > > Feb 11 17:46:05 alon1 [<c012fc70>] autoremove_wake_function+0x0/0x50
> > > Feb 11 17:46:05 alon1 [<c012c9cb>] worker_thread+0x9b/0xf0
> > > Feb 11 17:46:05 alon1 [<c012fc70>] autoremove_wake_function+0x0/0x50
> > > Feb 11 17:46:05 alon1 [<c012c930>] worker_thread+0x0/0xf0
> > > Feb 11 17:46:05 alon1 [<c012f962>] kthread+0x42/0x70
> > > Feb 11 17:46:05 alon1 [<c012f920>] kthread+0x0/0x70
> > > Feb 11 17:46:05 alon1 [<c0104c2f>] kernel_thread_helper+0x7/0x18
> > > Feb 11 17:46:05 alon1 =======================
> > > Feb 11 17:46:05 alon1 Code: 26 00 00 00 00 57 89 c7 a1 50 1b 3a c0 56 53 8b 70 38 85 f6 74 08 8b 0e 85 c9 74 58 ff 06 8b 56 50 39 fa 74 47 89 fb eb 02 89 c3 <8b> 43 08 39 c2 75 f7 8b 46 08 83 c0 68 e8 98 e7 10 00 8b 43 10
> > > Feb 11 17:46:05 alon1 EIP: [<c01b2da6>] sysfs_get_dentry+0x26/0x80 SS:ESP 0068:f7c49f00
> >
> > A number of bluetooth fixes went into 2.6.25-rc1. It would be interestig
> > to see if we fixed this.
> >
> >
>
> Seems there's some bugs about suspend/resume bluetooth devices.
> I cannot produce the above bug, but my bluetooth dongle does'nt work
> as normal when I tying s2ram
>
> Another similar report:
> http://lkml.org/lkml/2008/2/13/701

Hi, alon

Please try the attached patch, hope it fixes your problem.

Regards
dave
>
> Regards
> dave
>


Attachments:
(No filename) (5.24 kB)
diff (1.31 kB)
Download all attachments

2008-02-16 21:50:23

by Alon Bar-Lev

[permalink] [raw]
Subject: Re: [BUG] rfcomm

On Saturday 16 February 2008, Dave Young wrote:
> Hi, alon
>
> Please try the attached patch, hope it fixes your problem.
>
> Regards
> dave

Does not work... :(

Alon.

Feb 16 23:41:33 alon1 usb 3-1: configuration #1 chosen from 1 choice
Feb 16 23:41:33 alon1 BUG: unable to handle kernel NULL pointer dereference at virtual address 00000008
Feb 16 23:41:33 alon1 printing eip: c01b2db6 *pde = 00000000
Feb 16 23:41:33 alon1 Oops: 0000 [#1] PREEMPT
Feb 16 23:41:33 alon1 Modules linked in: ppp_deflate zlib_deflate zlib_inflate bsd_comp ppp_async rfcomm l2cap hci_usb vmnet(P) vmmon(P) tun radeon drm autofs4 ipv6 aes_generic crypto_algapi ieee80211_crypt_ccmp nf_nat_irc nf_nat_ftp nf_conntrack_irc nf_conntrack_ftp ipt_MASQUERADE iptable_nat nf_nat ipt_REJECT xt_tcpudp ipt_LOG xt_limit xt_state nf_conntrack_ipv4 nf_conntrack iptable_filter ip_tables x_tables snd_pcm_oss snd_mixer_oss snd_seq_dummy snd_seq_oss snd_seq_midi_event snd_seq snd_seq_device bluetooth ppp_generic slhc ioatdma dca cfq_iosched cpufreq_powersave cpufreq_ondemand cpufreq_conservative acpi_cpufreq freq_table uinput fan af_packet nls_cp1255 nls_iso8859_1 nls_utf8 nls_base pcmcia snd_intel8x0 snd_ac97_codec ac97_bus snd_pcm nsc_ircc snd_timer ipw2200 thinkpad_acpi irda snd ehci_hcd yenta_socket uhci_hcd psmouse ieee80211 soundcore intel_agp hwmon rsrc_nonstatic pcspkr e1000 crc_ccitt snd_page_alloc i2c_i801 ieee80211_crypt pcmcia_core agpgart thermal battery nvram rtc sr_mod ac sg firmware_class button processor cdrom unix usbcore evdev ext3 jbd ext2 mbcache loop ata_piix libata sd_mod scsi_mod
Feb 16 23:41:33 alon1
Feb 16 23:41:33 alon1 Pid: 4, comm: events/0 Tainted: P (2.6.24-gentoo-r2 #1)
Feb 16 23:41:33 alon1 EIP: 0060:[<c01b2db6>] EFLAGS: 00010282 CPU: 0
Feb 16 23:41:33 alon1 EIP is at sysfs_get_dentry+0x26/0x80
Feb 16 23:41:33 alon1 EAX: 00000000 EBX: 00000000 ECX: 00000000 EDX: f48a2210
Feb 16 23:41:33 alon1 ESI: f72eb900 EDI: f4803ae0 EBP: f4803ae0 ESP: f7c49efc
Feb 16 23:41:33 alon1 hcid[7004]: HCI dev 0 registered
Feb 16 23:41:33 alon1 DS: 007b ES: 007b FS: 0000 GS: 0000 SS: 0068
Feb 16 23:41:33 alon1 Process events/0 (pid: 4, ti=f7c48000 task=f7c3efc0 task.ti=f7c48000)
Feb 16 23:41:33 alon1 Stack: f7cb6140 f4822668 f7e71e10 c01b304d ffffffff ffffffff fffffffe c030ba9c
Feb 16 23:41:33 alon1 f7cb6140 f4822668 f6da6720 f7cb6140 f4822668 f6da6720 c030ba8e c01ce20b
Feb 16 23:41:33 alon1 f6e9dd00 c030ba8e f6da6720 f6e9dd00 f6e9dd00 00000000 f4822600 00000000
Feb 16 23:41:33 alon1 Call Trace:
Feb 16 23:41:33 alon1 [<c01b304d>] sysfs_move_dir+0x3d/0x1f0
Feb 16 23:41:33 alon1 [<c01ce20b>] kobject_move+0x9b/0x120
Feb 16 23:41:33 alon1 [<c0241711>] device_move+0x51/0x110
Feb 16 23:41:33 alon1 [<f9aaed80>] del_conn+0x0/0x70 [bluetooth]
Feb 16 23:41:33 alon1 [<f9aaed99>] del_conn+0x19/0x70 [bluetooth]
Feb 16 23:41:33 alon1 [<c012c1a1>] run_workqueue+0x81/0x140
Feb 16 23:41:33 alon1 [<c02c0c88>] schedule+0x168/0x2e0
Feb 16 23:41:33 alon1 [<c012fc70>] autoremove_wake_function+0x0/0x50
Feb 16 23:41:33 alon1 [<c012c9cb>] worker_thread+0x9b/0xf0
Feb 16 23:41:33 alon1 [<c012fc70>] autoremove_wake_function+0x0/0x50
Feb 16 23:41:33 alon1 [<c012c930>] worker_thread+0x0/0xf0
Feb 16 23:41:33 alon1 [<c012f962>] kthread+0x42/0x70
Feb 16 23:41:33 alon1 [<c012f920>] kthread+0x0/0x70
Feb 16 23:41:33 alon1 [<c0104c2f>] kernel_thread_helper+0x7/0x18
Feb 16 23:41:33 alon1 =======================
Feb 16 23:41:33 alon1 Code: 26 00 00 00 00 57 89 c7 a1 50 1b 3a c0 56 53 8b 70 38 85 f6 74 08 8b 0e 85 c9 74 58 ff 06 8b 56 50 39 fa 74 47 89 fb eb 02 89 c3 <8b> 43 08 39 c2 75 f7 8b 46 08 83 c0 68 e8 98 e7 10 00 8b 43 10
Feb 16 23:41:33 alon1 EIP: [<c01b2db6>] sysfs_get_dentry+0x26/0x80 SS:ESP 0068:f7c49efc
Feb 16 23:41:33 alon1 ---[ end trace aae864e9592acc1d ]---
Feb 16 23:41:33 alon1 hcid[7004]: HCI dev 0 up
Feb 16 23:41:33 alon1 hcid[7004]: Device hci0 has been added
Feb 16 23:41:33 alon1 hcid[7004]: Starting security manager 0

2008-02-20 10:30:20

by Dave Young

[permalink] [raw]
Subject: Re: [BUG] rfcomm

On Sat, Feb 16, 2008 at 11:49:58PM +0200, Alon Bar-Lev wrote:
> On Saturday 16 February 2008, Dave Young wrote:
> > Hi, alon
> >
> > Please try the attached patch, hope it fixes your problem.
> >
> > Regards
> > dave
>
> Does not work... :(
>
> Alon.
>
> Feb 16 23:41:33 alon1 usb 3-1: configuration #1 chosen from 1 choice
> Feb 16 23:41:33 alon1 BUG: unable to handle kernel NULL pointer dereference at virtual address 00000008
> Feb 16 23:41:33 alon1 printing eip: c01b2db6 *pde = 00000000
> Feb 16 23:41:33 alon1 Oops: 0000 [#1] PREEMPT
> Feb 16 23:41:33 alon1 Modules linked in: ppp_deflate zlib_deflate zlib_inflate bsd_comp ppp_async rfcomm l2cap hci_usb vmnet(P) vmmon(P) tun radeon drm autofs4 ipv6 aes_generic crypto_algapi ieee80211_crypt_ccmp nf_nat_irc nf_nat_ftp nf_conntrack_irc nf_conntrack_ftp ipt_MASQUERADE iptable_nat nf_nat ipt_REJECT xt_tcpudp ipt_LOG xt_limit xt_state nf_conntrack_ipv4 nf_conntrack iptable_filter ip_tables x_tables snd_pcm_oss snd_mixer_oss snd_seq_dummy snd_seq_oss snd_seq_midi_event snd_seq snd_seq_device bluetooth ppp_generic slhc ioatdma dca cfq_iosched cpufreq_powersave cpufreq_ondemand cpufreq_conservative acpi_cpufreq freq_table uinput fan af_packet nls_cp1255 nls_iso8859_1 nls_utf8 nls_base pcmcia snd_intel8x0 snd_ac97_codec ac97_bus snd_pcm nsc_ircc snd_timer ipw2200 thinkpad_acpi irda snd ehci_hcd yenta_socket uhci_hcd psmouse ieee80211 soundcore intel_agp hwmon rsrc_nonstatic pcspkr e1000 crc_ccitt snd_page_alloc i2c_i801 ieee80211_crypt pcmcia_core agpgart thermal battery nvram rtc sr_mod ac sg firmware_class button processor cdrom unix usbcore evdev ext3 jbd ext2 mbcache loop ata_piix libata sd_mod scsi_mod
> Feb 16 23:41:33 alon1
> Feb 16 23:41:33 alon1 Pid: 4, comm: events/0 Tainted: P (2.6.24-gentoo-r2 #1)
> Feb 16 23:41:33 alon1 EIP: 0060:[<c01b2db6>] EFLAGS: 00010282 CPU: 0
> Feb 16 23:41:33 alon1 EIP is at sysfs_get_dentry+0x26/0x80
> Feb 16 23:41:33 alon1 EAX: 00000000 EBX: 00000000 ECX: 00000000 EDX: f48a2210
> Feb 16 23:41:33 alon1 ESI: f72eb900 EDI: f4803ae0 EBP: f4803ae0 ESP: f7c49efc
> Feb 16 23:41:33 alon1 hcid[7004]: HCI dev 0 registered
> Feb 16 23:41:33 alon1 DS: 007b ES: 007b FS: 0000 GS: 0000 SS: 0068
> Feb 16 23:41:33 alon1 Process events/0 (pid: 4, ti=f7c48000 task=f7c3efc0 task.ti=f7c48000)
> Feb 16 23:41:33 alon1 Stack: f7cb6140 f4822668 f7e71e10 c01b304d ffffffff ffffffff fffffffe c030ba9c
> Feb 16 23:41:33 alon1 f7cb6140 f4822668 f6da6720 f7cb6140 f4822668 f6da6720 c030ba8e c01ce20b
> Feb 16 23:41:33 alon1 f6e9dd00 c030ba8e f6da6720 f6e9dd00 f6e9dd00 00000000 f4822600 00000000
> Feb 16 23:41:33 alon1 Call Trace:
> Feb 16 23:41:33 alon1 [<c01b304d>] sysfs_move_dir+0x3d/0x1f0
> Feb 16 23:41:33 alon1 [<c01ce20b>] kobject_move+0x9b/0x120
> Feb 16 23:41:33 alon1 [<c0241711>] device_move+0x51/0x110
> Feb 16 23:41:33 alon1 [<f9aaed80>] del_conn+0x0/0x70 [bluetooth]
> Feb 16 23:41:33 alon1 [<f9aaed99>] del_conn+0x19/0x70 [bluetooth]
> Feb 16 23:41:33 alon1 [<c012c1a1>] run_workqueue+0x81/0x140
> Feb 16 23:41:33 alon1 [<c02c0c88>] schedule+0x168/0x2e0
> Feb 16 23:41:33 alon1 [<c012fc70>] autoremove_wake_function+0x0/0x50
> Feb 16 23:41:33 alon1 [<c012c9cb>] worker_thread+0x9b/0xf0
> Feb 16 23:41:33 alon1 [<c012fc70>] autoremove_wake_function+0x0/0x50
> Feb 16 23:41:33 alon1 [<c012c930>] worker_thread+0x0/0xf0
> Feb 16 23:41:33 alon1 [<c012f962>] kthread+0x42/0x70
> Feb 16 23:41:33 alon1 [<c012f920>] kthread+0x0/0x70
> Feb 16 23:41:33 alon1 [<c0104c2f>] kernel_thread_helper+0x7/0x18
> Feb 16 23:41:33 alon1 =======================
> Feb 16 23:41:33 alon1 Code: 26 00 00 00 00 57 89 c7 a1 50 1b 3a c0 56 53 8b 70 38 85 f6 74 08 8b 0e 85 c9 74 58 ff 06 8b 56 50 39 fa 74 47 89 fb eb 02 89 c3 <8b> 43 08 39 c2 75 f7 8b 46 08 83 c0 68 e8 98 e7 10 00 8b 43 10
> Feb 16 23:41:33 alon1 EIP: [<c01b2db6>] sysfs_get_dentry+0x26/0x80 SS:ESP 0068:f7c49efc
> Feb 16 23:41:33 alon1 ---[ end trace aae864e9592acc1d ]---
> Feb 16 23:41:33 alon1 hcid[7004]: HCI dev 0 up
> Feb 16 23:41:33 alon1 hcid[7004]: Device hci0 has been added
> Feb 16 23:41:33 alon1 hcid[7004]: Starting security manager 0

Could you try patch below?


Defer hci_unregister_sysfs because hci device could be destructed
while hci conn devices still there.

Signed-off-by: Dave Young <[email protected]>

---
net/bluetooth/hci_core.c | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)

diff -upr linux/net/bluetooth/hci_core.c linux.new/net/bluetooth/hci_core.c
--- linux/net/bluetooth/hci_core.c 2008-02-20 18:27:28.000000000 +0800
+++ linux.new/net/bluetooth/hci_core.c 2008-02-20 18:28:34.000000000 +0800
@@ -901,8 +901,6 @@ int hci_unregister_dev(struct hci_dev *h

BT_DBG("%p name %s type %d", hdev, hdev->name, hdev->type);

- hci_unregister_sysfs(hdev);
-
write_lock_bh(&hci_dev_list_lock);
list_del(&hdev->list);
write_unlock_bh(&hci_dev_list_lock);
@@ -914,6 +912,8 @@ int hci_unregister_dev(struct hci_dev *h

hci_notify(hdev, HCI_DEV_UNREG);

+ hci_unregister_sysfs(hdev);
+
__hci_dev_put(hdev);

return 0;

2008-02-20 11:17:11

by Stefan Seyfried

[permalink] [raw]
Subject: Re: [Bluez-devel] [BUG] rfcomm

Dave Young schrieb:

>> Feb 16 23:41:33 alon1 BUG: unable to handle kernel NULL pointer dereference at virtual address 00000008
>> Feb 16 23:41:33 alon1 printing eip: c01b2db6 *pde = 00000000
>> Feb 16 23:41:33 alon1 Oops: 0000 [#1] PREEMPT
>> Feb 16 23:41:33 alon1 Modules linked in: ppp_deflate zlib_deflate zlib_inflate bsd_comp ppp_async rfcomm l2cap hci_usb vmnet(P) vmmon(P) tun radeon drm autofs4 ipv6 aes_generic crypto_algapi ieee80211_crypt_ccmp nf_nat_irc nf_nat_ftp nf_conntrack_irc nf_conntrack_ftp ipt_MASQUERADE iptable_nat nf_nat ipt_REJECT xt_tcpudp ipt_LOG xt_limit xt_state nf_conntrack_ipv4 nf_conntrack iptable_filter ip_tables x_tables snd_pcm_oss snd_mixer_oss snd_seq_dummy snd_seq_oss snd_seq_midi_event snd_seq snd_seq_device bluetooth ppp_generic slhc ioatdma dca cfq_iosched cpufreq_powersave cpufreq_ondemand cpufreq_conservative acpi_cpufreq freq_table uinput fan af_packet nls_cp1255 nls_iso8859_1 nls_utf8 nls_base pcmcia snd_intel8x0 snd_ac97_codec ac97_bus snd_pcm nsc_ircc snd_timer ipw2200 thinkpad_acpi irda snd ehci_hcd yenta_socket uhci_hcd psmouse ieee80211 soundcore intel_agp hwmon rsrc_nonstatic pcspkr e1000 crc_ccitt snd_page_alloc i2c_i801 ieee80211_crypt pcmcia_core agpgart thermal b
a
> ttery nvram rtc sr_mod ac sg firmware_class button processor cdrom unix usbcore evdev ext3 jbd ext2 mbcache loop ata_piix libata sd_mod scsi_mod
>> Feb 16 23:41:33 alon1
>> Feb 16 23:41:33 alon1 Pid: 4, comm: events/0 Tainted: P (2.6.24-gentoo-r2 #1)
>> Feb 16 23:41:33 alon1 EIP: 0060:[<c01b2db6>] EFLAGS: 00010282 CPU: 0
>> Feb 16 23:41:33 alon1 EIP is at sysfs_get_dentry+0x26/0x80
>> Feb 16 23:41:33 alon1 EAX: 00000000 EBX: 00000000 ECX: 00000000 EDX: f48a2210
>> Feb 16 23:41:33 alon1 ESI: f72eb900 EDI: f4803ae0 EBP: f4803ae0 ESP: f7c49efc
>> Feb 16 23:41:33 alon1 hcid[7004]: HCI dev 0 registered
>> Feb 16 23:41:33 alon1 DS: 007b ES: 007b FS: 0000 GS: 0000 SS: 0068
>> Feb 16 23:41:33 alon1 Process events/0 (pid: 4, ti=f7c48000 task=f7c3efc0 task.ti=f7c48000)
>> Feb 16 23:41:33 alon1 Stack: f7cb6140 f4822668 f7e71e10 c01b304d ffffffff ffffffff fffffffe c030ba9c
>> Feb 16 23:41:33 alon1 f7cb6140 f4822668 f6da6720 f7cb6140 f4822668 f6da6720 c030ba8e c01ce20b
>> Feb 16 23:41:33 alon1 f6e9dd00 c030ba8e f6da6720 f6e9dd00 f6e9dd00 00000000 f4822600 00000000
>> Feb 16 23:41:33 alon1 Call Trace:
>> Feb 16 23:41:33 alon1 [<c01b304d>] sysfs_move_dir+0x3d/0x1f0
>> Feb 16 23:41:33 alon1 [<c01ce20b>] kobject_move+0x9b/0x120
>> Feb 16 23:41:33 alon1 [<c0241711>] device_move+0x51/0x110
>> Feb 16 23:41:33 alon1 [<f9aaed80>] del_conn+0x0/0x70 [bluetooth]
>> Feb 16 23:41:33 alon1 [<f9aaed99>] del_conn+0x19/0x70 [bluetooth]
>> Feb 16 23:41:33 alon1 [<c012c1a1>] run_workqueue+0x81/0x140
>> Feb 16 23:41:33 alon1 [<c02c0c88>] schedule+0x168/0x2e0

> Could you try patch below?

Works fine for me. Thanks. Together with the other two patches already taken
by davem, this fixes all my current BT problems :-)

> Defer hci_unregister_sysfs because hci device could be destructed
> while hci conn devices still there.
>
> Signed-off-by: Dave Young <[email protected]>
>
> ---
> net/bluetooth/hci_core.c | 4 ++--
> 1 file changed, 2 insertions(+), 2 deletions(-)
>
> diff -upr linux/net/bluetooth/hci_core.c linux.new/net/bluetooth/hci_core.c
> --- linux/net/bluetooth/hci_core.c 2008-02-20 18:27:28.000000000 +0800
> +++ linux.new/net/bluetooth/hci_core.c 2008-02-20 18:28:34.000000000 +0800
> @@ -901,8 +901,6 @@ int hci_unregister_dev(struct hci_dev *h
>
> BT_DBG("%p name %s type %d", hdev, hdev->name, hdev->type);
>
> - hci_unregister_sysfs(hdev);
> -
> write_lock_bh(&hci_dev_list_lock);
> list_del(&hdev->list);
> write_unlock_bh(&hci_dev_list_lock);
> @@ -914,6 +912,8 @@ int hci_unregister_dev(struct hci_dev *h
>
> hci_notify(hdev, HCI_DEV_UNREG);
>
> + hci_unregister_sysfs(hdev);
> +
> __hci_dev_put(hdev);
>
> return 0;
--
Stefan Seyfried
R&D Team Mobile Devices | "Any ideas, John?"
SUSE LINUX Products GmbH, N?rnberg | "Well, surrounding them's out."

This footer brought to you by insane German lawmakers:
SUSE Linux Products GmbH, GF: Markus Rex, HRB 16746 (AG N?rnberg)