Bug 263

Summary: neofb: unable to handle kernel paging request
Product: Drivers Reporter: Jochen Hein (jochen)
Component: Console/FramebuffersAssignee: James Simmons (jsimmons)
Status: REJECTED INSUFFICIENT_DATA    
Severity: normal CC: jeffpc, nacc
Priority: P2    
Hardware: i386   
OS: Linux   
Kernel Version: 2.6.0-test8 Subsystem:
Regression: --- Bisected commit-id:

Description Jochen Hein 2003-01-11 00:56:40 UTC
Exact Kernel version: 2.5.55
Distribution: Debian/woody
Hardware Environment: Thinkpad 600
Problem Description:
The boot messages are (I use vga=0x317 as command line)
Video mode to be used for restore is 317
BIOS-provided physical RAM map:
 BIOS-e820: 0000000000000000 - 000000000009fc00 (usable)
 BIOS-e820: 000000000009fc00 - 00000000000a0000 (reserved)
 BIOS-e820: 00000000000f0000 - 0000000000100000 (reserved)
 BIOS-e820: 0000000000100000 - 0000000005fd0000 (usable)
 BIOS-e820: 0000000005fd0000 - 0000000005fdf000 (ACPI data)
 BIOS-e820: 0000000005fdf000 - 0000000005fe0000 (ACPI NVS)
 BIOS-e820: 0000000005fe0000 - 0000000006000000 (reserved)
 BIOS-e820: 00000000fffe0000 - 0000000100000000 (reserved)
95MB LOWMEM available.
[...]
neofb: mapped io at c680d000
Autodetected internal display
Panel is a 1024x768 color TFT display
neofb: mapped framebuffer at c6a0e000
neofb v0.4.1: 2048kB VRAM, using 1024x768, 48.361kHz, 60Hz
fb0: MagicGraph 128XD frame buffer device
Unable to handle kernel NULL pointer dereference at virtual address 00000000
 printing eip:
c0261cfb
*pde = 00000000
Oops: 0000
CPU:    0
EIP:    0060:[<c0261cfb>]    Not tainted
EFLAGS: 00010202
EIP is at neofb_check_var+0x7d3/0x844
eax: c5ecdd7c   ebx: 00000325   ecx: 00000000   edx: 000003d5
esi: c5ecdd7c   edi: c5ecdc00   ebp: c5f79f48   esp: c5f79ef0
ds: 007b   es: 007b   ss: 0068
Process swapper (pid: 1, threadinfo=c5f78000 task=c5f76040)
Stack: c5ec9800 00000010 c5ecdc00 c5f79f28 000000a5 0000007b c5ecdc0c 0000005e
       c01354f4 00000000 0000fde6 00000400 00000418 000004a0 00000540 00000300
       00000303 00000309 00000326 00000003 00000000 00000000 c5f79f68 c025bda8
Call Trace:
 [<c01354f4>] poison_obj+0x30/0x58
 [<c025bda8>] accel_cursor+0x1e8/0x22c
 [<c022b517>] clear_buffer_attributes+0x17/0x180
 [<c0105096>] do_pre_smp_initcalls+0x2e/0x178
 [<c0105068>] do_pre_smp_initcalls+0x0/0x178
 [<c0107211>] show_regs+0x5/0xc

Code: 8b 01 a8 01 74 08 89 ca 8b 02 a8 01 75 fa 8b 55 c0 8b 42 18
 <0>Kernel panic: Attempted to kill init!


Steps to reproduce:

I use framebuffer console, vesafb works fine.  When neofb is compiled in,
I get the message above when booting (need a serial console...)
Comment 1 Jochen Hein 2003-01-17 08:40:10 UTC
With 2.5.59 the panic has changed.  The screen switches to graphics mode
but is garbled.  The decoded panic is:

neofb: mapped io at c680d000
Autodetected internal display
Panel is a 1024x768 color TFT display
neofb: mapped framebuffer at c6a0e000
neofb v0.4.1: 2048kB VRAM, using 1024x768, 48.361kHz, 60Hz
fb0: MagicGraph 128XD frame buffer device
Unable to handle kernel NULL pointer dereference at virtual address 00000000
 printing eip:
c025bf7b
*pde = 00000000
Oops: 0000
CPU:    0
EIP:    0060:[<c025bf7b>]    Not tainted
EFLAGS: 00010202
EIP is at neofb_set_par+0x7d3/0x844
eax: c5eccd84   ebx: 00000325   ecx: 00000000   edx: 000003d5
esi: c5eccd84   edi: c5eccc00   ebp: c5f79f48   esp: c5f79ef0
ds: 007b   es: 007b   ss: 0068
Process swapper (pid: 1, threadinfo=c5f78000 task=c5f76040)
Stack: c5ec8800 00000010 c5eccc00 c012ef3a c5fcd0a0 030001d0 c5eccc0c 0000005e
       c5fcd0ac 00000000 0000fde6 00000400 00000418 000004a0 00000540 00000300
       00000303 00000309 00000326 00000003 00000000 00000000 c5f79f68 c0255698
Call Trace:
 [<c012ef3a>] cache_alloc_refill+0x1fa/0x260
 [<c0255698>] fbcon_startup+0x1e8/0x22c
 [<c0223a77>] take_over_console+0x17/0x180
 [<c0105096>] init+0x2e/0x178
 [<c0105068>] init+0x0/0x178
 [<c01070a1>] kernel_thread_helper+0x5/0xc

Code: 8b 01 a8 01 74 08 89 ca 8b 02 a8 01 75 fa 8b 55 c0 8b 42 18
 <0>Kernel panic: Attempted to kill init!

This is now without a vga parameter.
Comment 2 Jochen Hein 2003-05-04 07:36:30 UTC
With 2.5.68 I get:

Code: 89 18 8b 45 c8 85 c0 75 0a ff 45 c0 c7 45 c8 08 00 00 00 4e
 <1>Unable to handle kernel paging request at virtual address c6c12000
 printing eip:
c0260c34
*pde = 05eaf067
*pte = 00000000
Oops: 0000 [#2]
CPU:    0
EIP:    0060:[<c0260c34>]    Not tainted
EFLAGS: 00010212
EIP is at bitfill32+0x204/0x260
eax: c6c12000   ebx: c6c12000   ecx: ffffffff   edx: ffffffff
esi: c6c12004   edi: 00000000   ebp: c5f83c20   esp: c5f83bfc
ds: 007b   es: 007b   ss: 0068
Process events/0 (pid: 3, threadinfo=c5f82000 task=c5f92c40)
Stack: c6c12000 c03437af 00000092 00002000 00000000 ffffffff 00000000 00000000
       00002000 c5f83c90 c02616c3 c6c12000 00000000 00000000 00002000 00000000
       00000000 00000000 00000000 00000000 00000008 00000000 00000000 00000000
Call Trace:
 [<c02616c3>] cfb_fillrect+0x163/0x2e0
 [<c0260a30>] bitfill32+0x0/0x260
 [<c025fffe>] neofb_fillrect+0x2e/0x40
 [<c0256093>] accel_clear+0x73/0x90
 [<c0256edf>] fbcon_clear+0xaf/0x150
 [<c0257bc6>] fbcon_scroll+0x226/0xc10
 [<c021152d>] scrup+0x12d/0x140
 [<c0212d3f>] lf+0x6f/0x80
 [<c0214c4e>] do_con_trol+0xc7e/0xe40
 [<c0212113>] hide_cursor+0x63/0xa0
 [<c0215274>] do_con_write+0x464/0x6e0
 [<c0215af2>] con_put_char+0x42/0x50
 [<c0205c6e>] opost+0x9e/0x1a0
 [<c0206dfb>] n_tty_receive_buf+0x93b/0xf30
 [<c024e4e0>] dma_timer_expiry+0x0/0xe0
 [<c026007e>] neofb_imageblit+0x2e/0x40
 [<c025e66b>] soft_cursor+0x19b/0x240
 [<c0205383>] flush_to_ldisc+0xa3/0x110
 [<c01299a0>] worker_thread+0x1f0/0x2d0
 [<c02052e0>] flush_to_ldisc+0x0/0x110
 [<c0117af0>] default_wake_function+0x0/0x20
 [<c0109322>] ret_from_fork+0x6/0x14
 [<c0117af0>] default_wake_function+0x0/0x20
 [<c01297b0>] worker_thread+0x0/0x2d0
 [<c010741d>] kernel_thread_helper+0x5/0x18

Code: 8b 10 89 f8 31 d0 21 c8 31 d0 89 03 8b 5d e8 83 eb 20 e9 30
Comment 3 Jochen Hein 2003-05-04 07:46:23 UTC
Uh, the first messages in dmesg are:
<1>Unable to handle kernel paging request at virtual address c6c0e000
 printing eip:
c0263290
*pde = 05eaf067
*pte = 00000000
Oops: 0002 [#1]
CPU:    0
EIP:    0060:[<c0263290>]    Not tainted
EFLAGS: 00010246
EIP is at cfb_imageblit+0x480/0x710
eax: c6c0e000   ebx: 00000000   ecx: 07070707   edx: 00000000
esi: 0000004b   edi: c6c0e004   ebp: c49379b0   esp: c49378f8
ds: 007b   es: 007b   ss: 0068
Process noflushd (pid: 768, threadinfo=c4936000 task=c55a8ce0)
Stack: c6c0e000 c03437e7 0000011d 00007530 00000000 00000000 c5f70ef8 00000000
       0000000a 0000000c c5e2c800 c4ac6c84 c4937964 c493796c c49379b8 c0183467
       c4ac6d00 00000001 c493799c c493796c c4937964 c49379bc c4ac6c84 00000001
Call Trace:
 [<c0183467>] ext3_get_block_handle+0xa7/0x380
 [<c026007e>] neofb_imageblit+0x2e/0x40
 [<c0255f56>] putcs_aligned+0x156/0x1a0
 [<c025627a>] accel_putcs+0x8a/0xc0
 [<c0134dfc>] buffered_rmqueue+0xbc/0x160
 [<c02570ba>] fbcon_putcs+0x9a/0xa0
 [<c021581e>] vt_console_print+0x24e/0x300
 [<c011b630>] __call_console_drivers+0x60/0x70
 [<c011b715>] call_console_drivers+0x65/0x120
 [<c011ba7f>] release_console_sem+0x5f/0xe0
 [<c011b958>] printk+0x118/0x180
 [<c0260c34>] bitfill32+0x204/0x260
 [<c011604c>] do_page_fault+0xac/0x4e4
 [<c011ef06>] tasklet_action+0x46/0x70
 [<c010afba>] do_IRQ+0x11a/0x160
 [<c01095b8>] common_interrupt+0x18/0x20
 [<c01f3272>] __io_virt_debug+0x12/0x50
 [<c0115fa0>] do_page_fault+0x0/0x4e4
 [<c01095f5>] error_code+0x2d/0x38
 [<c0260c34>] bitfill32+0x204/0x260
 [<c02616c3>] cfb_fillrect+0x163/0x2e0
 [<c0260a30>] bitfill32+0x0/0x260
 [<c025fffe>] neofb_fillrect+0x2e/0x40
 [<c0256093>] accel_clear+0x73/0x90
 [<c0256edf>] fbcon_clear+0xaf/0x150
 [<c0257bc6>] fbcon_scroll+0x226/0xc10
 [<c021152d>] scrup+0x12d/0x140
 [<c0212d3f>] lf+0x6f/0x80
 [<c0214c4e>] do_con_trol+0xc7e/0xe40
 [<c0212113>] hide_cursor+0x63/0xa0
 [<c0215274>] do_con_write+0x464/0x6e0
 [<c0205e65>] opost_block+0xf5/0x1c0
 [<c0215af2>] con_put_char+0x42/0x50
 [<c0205c6e>] opost+0x9e/0x1a0
 [<c02081a8>] write_chan+0x1c8/0x230
 [<c0117af0>] default_wake_function+0x0/0x20
 [<c0117af0>] default_wake_function+0x0/0x20
 [<c0203018>] tty_write+0x228/0x2f0
 [<c0207fe0>] write_chan+0x0/0x230
 [<c014cc03>] vfs_write+0xd3/0x140
 [<c014cd0c>] sys_write+0x3c/0x60
 [<c010944b>] syscall_call+0x7/0xb

Code: 89 18 8b 45 c8 85 c0 75 0a ff 45 c0 c7 45 c8 08 00 00 00 4e
Comment 4 Jochen Hein 2003-05-12 23:06:22 UTC
*** Bug 518 has been marked as a duplicate of this bug. ***
Comment 5 Jeff Sipek 2003-10-17 20:41:16 UTC
Does this still happen in 2.6.0-test8?

Jeff.
Comment 6 Jochen Hein 2003-10-20 11:58:39 UTC
I'm just recompiling, but AFAICS there were no changes in neofb since a long
time.  I'll also try the latest fbdev where James Simmons made some changes.
Comment 7 Jochen Hein 2003-10-20 12:20:40 UTC
I recompiled with -test8 and run that kernel right now.  Fixed for me.
Comment 8 Jochen Hein 2003-10-20 12:35:50 UTC
Hm, not quite fixed.  -test8 booted and seemed to work, then I used lftp to
connect to ftp.kernel.org and did a "ls -rtl" in .../kernel/v2.6 and the
console froze.  After a reboot I found in the kernel log:

Oct 20 21:24:14 gswi1164 kernel:  printing eip:
Oct 20 21:24:14 gswi1164 kernel: c0231a6a
Oct 20 21:24:14 gswi1164 kernel: Oops: 0002 [#1]
Oct 20 21:24:14 gswi1164 kernel: CPU:    0
Oct 20 21:24:14 gswi1164 kernel: EIP:    0060:[cfb_imageblit+1178/1840]    Not tainted
Oct 20 21:24:14 gswi1164 kernel: EFLAGS: 00010246
Oct 20 21:24:14 gswi1164 kernel: EIP is at cfb_imageblit+0x49a/0x730
Oct 20 21:24:14 gswi1164 kernel: eax: c6c01000   ebx: 00000000   ecx: 07070707   edx: 00000000
Oct 20 21:24:14 gswi1164 kernel: esi: 0000004b   edi: c6c01004   ebp: c35839a8   esp: c35838f0
Oct 20 21:24:15 gswi1164 kernel: ds: 007b   es: 007b   ss: 0068
Oct 20 21:24:15 gswi1164 kernel: Process lftp (pid: 1547, threadinfo=c3582000 task=c40ca0a0)
Oct 20 21:24:15 gswi1164 kernel: Stack: c6c01000 c02ff1a5 00000108 00007530 0000004b 00000001 c03b6328 0000000a
Oct 20 21:24:15 gswi1164 kernel:        c358392c 00000046 c03b6328 00000046 c3582000 00000000 c0389a00 c3583954
Oct 20 21:24:15 gswi1164 kernel:        c010b1b5 00000000 c0389a00 00000001 c0321ae0 00000000 0000000e c2840210
Oct 20 21:24:15 gswi1164 kernel: Call Trace:
Oct 20 21:24:15 gswi1164 kernel:  [do_IRQ+277/368] do_IRQ+0x115/0x170
Oct 20 21:24:15 gswi1164 kernel:  [common_interrupt+24/32] common_interrupt+0x18/0x20
Oct 20 21:24:15 gswi1164 kernel:  [neofb_imageblit+46/64] neofb_imageblit+0x2e/0x40
Oct 20 21:24:15 gswi1164 kernel:  [putcs_aligned+342/416] putcs_aligned+0x156/0x1a0
Oct 20 21:24:15 gswi1164 kernel:  [accel_putcs+138/192] accel_putcs+0x8a/0xc0
Oct 20 21:24:15 gswi1164 kernel:  [fbcon_putcs+139/160] fbcon_putcs+0x8b/0xa0
Oct 20 21:24:15 gswi1164 kernel:  [vt_console_print+584/752] vt_console_print+0x248/0x2f0
Oct 20 21:24:15 gswi1164 kernel:  [__call_console_drivers+94/96] __call_console_drivers+0x5e/0x60
Oct 20 21:24:15 gswi1164 kernel:  [call_console_drivers+114/320] call_console_drivers+0x72/0x140
Oct 20 21:24:15 gswi1164 kernel:  [release_console_sem+94/224] release_console_sem+0x5e/0xe0
Oct 20 21:24:15 gswi1164 kernel:  [printk+294/384] printk+0x126/0x180
Oct 20 21:24:15 gswi1164 kernel:  [bitfill32+612/640] bitfill32+0x264/0x280
Oct 20 21:24:15 gswi1164 kernel:  [do_page_fault+0/1439] do_page_fault+0x0/0x59f
Oct 20 21:24:15 gswi1164 kernel:  [do_page_fault+386/1439] do_page_fault+0x182/0x59f
Oct 20 21:24:15 gswi1164 kernel:  [do_timer+224/240] do_timer+0xe0/0xf0
Oct 20 21:24:15 gswi1164 kernel:  [update_process_times+68/80] update_process_times+0x44/0x50
Oct 20 21:24:15 gswi1164 kernel:  [update_wall_time+22/64] update_wall_time+0x16/0x40
Oct 20 21:24:15 gswi1164 kernel:  [do_timer+224/240] do_timer+0xe0/0xf0
Oct 20 21:24:15 gswi1164 kernel:  [cfb_imageblit+1168/1840] cfb_imageblit+0x490/0x730
Oct 20 21:24:15 gswi1164 kernel:  [do_page_fault+0/1439] do_page_fault+0x0/0x59f
Oct 20 21:24:15 gswi1164 kernel:  [error_code+45/56] error_code+0x2d/0x38
Oct 20 21:24:15 gswi1164 kernel:  [bitfill32+612/640] bitfill32+0x264/0x280
Oct 20 21:24:15 gswi1164 kernel:  [cfb_fillrect+355/736] cfb_fillrect+0x163/0x2e0
Oct 20 21:24:15 gswi1164 kernel:  [bitfill32+0/640] bitfill32+0x0/0x280
Oct 20 21:24:15 gswi1164 kernel:  [neofb_fillrect+46/64] neofb_fillrect+0x2e/0x40
Oct 20 21:24:15 gswi1164 kernel:  [accel_clear+117/128] accel_clear+0x75/0x80
Oct 20 21:24:15 gswi1164 kernel:  [fbcon_clear+277/368] fbcon_clear+0x115/0x170
Oct 20 21:24:15 gswi1164 kernel:  [fbcon_scroll+383/3008] fbcon_scroll+0x17f/0xbc0
Oct 20 21:24:15 gswi1164 kernel:  [scrup+290/320] scrup+0x122/0x140
Oct 20 21:24:15 gswi1164 kernel:  [do_con_write+702/1872] do_con_write+0x2be/0x750
Oct 20 21:24:15 gswi1164 kernel:  [lf+112/128] lf+0x70/0x80
Oct 20 21:24:15 gswi1164 kernel:  [do_con_trol+3007/3456] do_con_trol+0xbbf/0xd80
Oct 20 21:24:15 gswi1164 kernel:  [hide_cursor+99/176] hide_cursor+0x63/0xb0
Oct 20 21:24:15 gswi1164 kernel:  [do_con_write+1169/1872] do_con_write+0x491/0x750
Oct 20 21:24:15 gswi1164 kernel:  [con_put_char+65/80] con_put_char+0x41/0x50
Oct 20 21:24:15 gswi1164 kernel:  [opost+148/432] opost+0x94/0x1b0
Oct 20 21:24:15 gswi1164 kernel:  [write_chan+458/576] write_chan+0x1ca/0x240
Oct 20 21:24:15 gswi1164 kernel:  [default_wake_function+0/48] default_wake_function+0x0/0x30
Oct 20 21:24:15 gswi1164 kernel:  [sock_destroy_inode+29/48] sock_destroy_inode+0x1d/0x30
Oct 20 21:24:15 gswi1164 kernel:  [default_wake_function+0/48] default_wake_function+0x0/0x30
Oct 20 21:24:15 gswi1164 kernel:  [tty_write+478/640] tty_write+0x1de/0x280
Oct 20 21:24:15 gswi1164 kernel:  [write_chan+0/576] write_chan+0x0/0x240
Oct 20 21:24:15 gswi1164 kernel:  [vfs_write+207/320] vfs_write+0xcf/0x140
Oct 20 21:24:15 gswi1164 kernel:  [do_gettimeofday+26/144] do_gettimeofday+0x1a/0x90
Oct 20 21:24:15 gswi1164 kernel:  [sys_write+63/96] sys_write+0x3f/0x60
Oct 20 21:24:15 gswi1164 kernel:  [syscall_call+7/11] syscall_call+0x7/0xb
Oct 20 21:24:15 gswi1164 kernel:
Oct 20 21:24:15 gswi1164 kernel: Code: 89 18 8b 45 c8 85 c0 75 0a ff 45 c0 c7 45 c8 08 00 00 00 4e
Oct 20 21:24:21 gswi1164 kernel:  <1>Unable to handle kernel paging request at virtual address c6c01000
Oct 20 21:24:21 gswi1164 kernel:  printing eip:
Oct 20 21:24:21 gswi1164 kernel: c0231a6a
Oct 20 21:24:21 gswi1164 kernel: Oops: 0002 [#2]
Oct 20 21:24:21 gswi1164 kernel: CPU:    0
Oct 20 21:24:21 gswi1164 kernel: EIP:    0060:[cfb_imageblit+1178/1840]    Not tainted
Oct 20 21:24:21 gswi1164 kernel: EFLAGS: 00010246
Oct 20 21:24:21 gswi1164 kernel: EIP is at cfb_imageblit+0x49a/0x730
Oct 20 21:24:21 gswi1164 kernel: eax: c6c01000   ebx: 00000000   ecx: 07070707   edx: 00000000
Oct 20 21:24:21 gswi1164 kernel: esi: 00000001   edi: c6c01004   ebp: c5f83cb0   esp: c5f83bf8
Oct 20 21:24:21 gswi1164 kernel: ds: 007b   es: 007b   ss: 0068
Oct 20 21:24:21 gswi1164 kernel: Process events/0 (pid: 3, threadinfo=c5f82000 task=c5f92c80)
Oct 20 21:24:21 gswi1164 kernel: Stack: c6c01000 c02ff1a5 00000108 00007530 00000001 00000000 00000246 c5f83c4c
Oct 20 21:24:21 gswi1164 kernel:        c5f82000 c6c81c10 c5f83c30 c6c81deb c5e6b338 0005a70f c5f83c64 c6c81d56
Oct 20 21:24:21 gswi1164 kernel:        ffffff9c 00000000 00000000 c56ef624 c5f83c6c 00000246 c03b65a0 ffffff9c
Oct 20 21:24:21 gswi1164 kernel: Call Trace:
Oct 20 21:24:21 gswi1164 kernel:  [acqseq_lock.5+109786552/1069742504] stall_callback+0x0/0x190 [uhci_hcd]
Oct 20 21:24:21 gswi1164 kernel:  [acqseq_lock.5+109787027/1069742504] init_stall_timer+0x4b/0x60 [uhci_hcd]
Oct 20 21:24:21 gswi1164 kernel:  [acqseq_lock.5+109786878/1069742504] stall_callback+0x146/0x190 [uhci_hcd]
Oct 20 21:24:21 gswi1164 kernel:  [neofb_imageblit+46/64] neofb_imageblit+0x2e/0x40
Oct 20 21:24:21 gswi1164 kernel:  [putcs_aligned+342/416] putcs_aligned+0x156/0x1a0
Oct 20 21:24:21 gswi1164 kernel:  [accel_putcs+138/192] accel_putcs+0x8a/0xc0
Oct 20 21:24:21 gswi1164 kernel:  [soft_cursor+321/560] soft_cursor+0x141/0x230
Oct 20 21:24:21 gswi1164 kernel:  [fbcon_putcs+139/160] fbcon_putcs+0x8b/0xa0
Oct 20 21:24:21 gswi1164 kernel:  [do_con_write+685/1872] do_con_write+0x2ad/0x750
Oct 20 21:24:21 gswi1164 kernel:  [con_put_char+65/80] con_put_char+0x41/0x50
Oct 20 21:24:21 gswi1164 kernel:  [opost+148/432] opost+0x94/0x1b0
Oct 20 21:24:21 gswi1164 kernel:  [n_tty_receive_char+411/1994] n_tty_receive_char+0x19b/0x7ca
Oct 20 21:24:21 gswi1164 kernel:  [n_tty_receive_buf+583/1600] n_tty_receive_buf+0x247/0x640
Oct 20 21:24:21 gswi1164 kernel:  [neofb_imageblit+46/64] neofb_imageblit+0x2e/0x40
Oct 20 21:24:21 gswi1164 kernel:  [soft_cursor+391/560] soft_cursor+0x187/0x230
Oct 20 21:24:21 gswi1164 kernel:  [recalc_task_prio+168/464] recalc_task_prio+0xa8/0x1d0
Oct 20 21:24:21 gswi1164 kernel:  [schedule+761/1456] schedule+0x2f9/0x5b0
Oct 20 21:24:21 gswi1164 kernel:  [flush_to_ldisc+157/256] flush_to_ldisc+0x9d/0x100
Oct 20 21:24:21 gswi1164 kernel:  [worker_thread+443/688] worker_thread+0x1bb/0x2b0
Oct 20 21:24:21 gswi1164 kernel:  [flush_to_ldisc+0/256] flush_to_ldisc+0x0/0x100
Oct 20 21:24:21 gswi1164 kernel:  [default_wake_function+0/48] default_wake_function+0x0/0x30
Oct 20 21:24:21 gswi1164 kernel:  [ret_from_fork+6/20] ret_from_fork+0x6/0x14
Oct 20 21:24:21 gswi1164 kernel:  [default_wake_function+0/48] default_wake_function+0x0/0x30
Oct 20 21:24:21 gswi1164 kernel:  [worker_thread+0/688] worker_thread+0x0/0x2b0
Oct 20 21:24:21 gswi1164 kernel:  [kernel_thread_helper+5/12] kernel_thread_helper+0x5/0xc
Oct 20 21:24:21 gswi1164 kernel:
Oct 20 21:24:21 gswi1164 kernel: Code: 89 18 8b 45 c8 85 c0 75 0a ff 45 c0 c7 45 c8 08 00 00 00 4e

I'm now recompiling with James latest patch.
Comment 9 Jochen Hein 2003-10-20 12:49:38 UTC
fb-related boot messages for -test8/neofb:
Oct 20 21:15:45 gswi1164 kernel: neofb: mapped io at c6800000
Oct 20 21:15:45 gswi1164 kernel: Autodetected internal display
Oct 20 21:15:45 gswi1164 kernel: Panel is a 1024x768 color TFT display
Oct 20 21:15:45 gswi1164 kernel: neofb: mapped framebuffer at c6a01000
Oct 20 21:15:45 gswi1164 kernel: neofb v0.4.1: 2048kB VRAM, using 1024x768, 48.361kHz, 60Hz
Oct 20 21:15:45 gswi1164 kernel: fb0: MagicGraph 128XD frame buffer device
Comment 10 Jochen Hein 2003-10-22 02:28:15 UTC
The latest fbdev-patch from James panics.  I'll get a serial console and
post the panic.
Comment 11 Jochen Hein 2003-10-24 10:37:29 UTC
Boot messages with James latest patch from 2003-10-22:
neofb: mapped io at c6800000
Autodetected internal display
Panel is a 1024x768 color TFT display
neofb: mapped framebuffer at c6a01000
neofb v0.4.2: 2044kB VRAM, using 1024x768, 48.361kHz, 60Hz
fb0: MagicGraph 128XD frame buffer device

The panic is:
Initializing Cryptographic API
Limiting direct PCI/PCI transfers.
Console: switching to colour frame buffer device 128x48
Unable to handle kernel NULL pointer dereference at virtual address 00000068
 printing eip:
c0185d0f
*pde = 00000000
Oops: 0002 [#1]
CPU:    0
EIP:    0060:[<c0185d0f>]    Not tainted
EFLAGS: 00010286
EIP is at create_dir+0x2f/0xc0
eax: 00000000   ebx: 00000068   ecx: 00000068   edx: 00000001
esi: 00000000   edi: c5ecc3e0   ebp: c10fdef8   esp: c10fdee0
ds: 007b   es: 007b   ss: 0068
Process swapper (pid: 1, threadinfo=c10fc000 task=c5f938c0)
Stack: c02f1706 00000077 00000000 c5e9cae4 c5e9cae4 c5e9cae4 c10fdf18 c0185e0f
       c5e9cae4 c5ecc3e0 c5e9cae8 c10fdf10 00000000 00000000 c10fdf2c c01b1e8f
       c5e9cae4 c0328000 c0328048 c10fdf50 c01b2311 c5e9cae4 00000042 c015bfa5
Call Trace:
 [<c0185e0f>] sysfs_create_dir+0x3f/0x80
 [<c01b1e8f>] create_dir+0x1f/0x50
 [<c01b2311>] kobject_add+0x51/0x150
 [<c015bfa5>] __register_chrdev_region+0x105/0x150
 [<c015c6f7>] cdev_add+0x17/0x80
 [<c01b2200>] kobject_init+0x30/0x50
 [<c015c99b>] cdev_init+0x2b/0x40
 [<c01d0d61>] tty_register_driver+0x181/0x280
 [<c039dc65>] pty_init+0x265/0x550
 [<c03907db>] do_initcalls+0x2b/0xa0
 [<c012ca92>] init_workqueues+0x12/0x30
 [<c01050d0>] init+0x30/0x140
 [<c01050a0>] init+0x0/0x140
 [<c0107469>] kernel_thread_helper+0x5/0xc

Code: ff 4e 68 0f 88 c5 03 00 00 89 3c 24 8b 45 10 89 44 24 04 e8
 <0>Kernel panic: Attempted to kill init!

The framebuffer has pixel artifacts, looks like not all pixels are cleared
when scrolling.
Comment 12 Jochen Hein 2004-01-03 21:36:25 UTC
I gave my TP 600 back so I can't test anything anymore.
Comment 13 Risto Sandvik 2004-01-06 11:44:26 UTC
I have this bug on an Acer Extensa 503T and I'd be happy to test possible fixes!
Comment 14 Antonino Daplas 2004-11-06 17:02:26 UTC
Is the bug still present in recent 2.6 kernels?
Comment 15 Jochen Hein 2004-11-13 06:12:02 UTC
Sorry, I can't test any longer; I gave the laptop back.
Comment 16 Nishanth Aravamudan 2005-02-17 09:32:38 UTC
Since Jochen does not have access to this hardware anymore, Risto, could you
test the latest kernels and / or would you be willing to test patches? If
there's no response for a while, I'll close this bug (we can reopen if needed).