Bug 8521

Summary:	PocketPC happens to OOPS
Product:	Drivers	Reporter:	weizhen (weizhen.wz)
Component:	USB	Assignee:	Greg Kroah-Hartman (greg)
Status:	REJECTED INVALID
Severity:	high	CC:	protasnb, stern, weizhen.wz
Priority:	P2
Hardware:	i386
OS:	Linux
Kernel Version:	ubuntu 2.6.20-15	Subsystem:
Regression:	---	Bisected commit-id:

Description weizhen 2007-05-22 07:13:27 UTC

I have a PocketPC(dopda-p800) connectted with my pc by USB line, ubuntu-7.04 is
running on my pc. when I use gpilotd to sync ppc and pc, kernel happens to painc.
dmesg shows below:
[ 2630.388000] usb 2-5: new full speed USB device using ohci_hcd and address 3
[ 2630.612000] usb 2-5: configuration #1 chosen from 1 choice
[ 2630.748000] usbcore: registered new interface driver usbserial
[ 2630.752000] drivers/usb/serial/usb-serial.c: USB Serial support registered
for generic
[ 2630.752000] usbcore: registered new interface driver usbserial_generic
[ 2630.752000] drivers/usb/serial/usb-serial.c: USB Serial Driver core
[ 2630.760000] drivers/usb/serial/usb-serial.c: USB Serial support registered
for PocketPC PDA
[ 2630.760000] drivers/usb/serial/ipaq.c: USB PocketPC PDA driver v0.5
[ 2630.760000] ipaq 2-5:1.0: PocketPC PDA converter detected
[ 2630.764000] usb 2-5: PocketPC PDA converter now attached to ttyUSB0
[ 2630.764000] ipaq 2-5:1.1: PocketPC PDA converter detected
[ 2630.768000] usb 2-5: PocketPC PDA converter now attached to ttyUSB1
[ 2630.768000] usbcore: registered new interface driver ipaq
[ 2695.236000] BUG: unable to handle kernel NULL pointer dereference at virtual
address 00000030
[ 2695.236000]  printing eip:
[ 2695.236000] f8cb4ba4
[ 2695.236000] *pde = 00000000
[ 2695.236000] Oops: 0002 [#1]
[ 2695.236000] SMP 
[ 2695.236000] Modules linked in: ipaq usbserial binfmt_misc powernow_k8
cpufreq_powersave cpufreq_ondemand cpufreq_userspace cpufreq_conservative
cpufreq_stats freq_table sony_acpi pcc_acpi tc1100_wmi dev_acpi battery
asus_acpi container video backlight ac sbs i2c_ec button dock af_packet
nls_iso8859_1 nls_cp437 vfat fat ntfs lp fuse snd_hda_intel snd_hda_codec
snd_pcm_oss snd_mixer_oss snd_pcm snd_seq_dummy snd_seq_oss snd_seq_midi
snd_rawmidi snd_seq_midi_event snd_seq snd_timer snd_seq_device nvidia(P)
serio_raw parport_pc parport agpgart snd soundcore snd_page_alloc pcspkr
i2c_nforce2 i2c_core psmouse k8temp shpchp pci_hotplug tsdev evdev ipv6 ext3 jbd
mbcache sg sd_mod ide_cd cdrom ata_generic usbhid hid sata_nv forcedeth ohci_hcd
ehci_hcd usbcore amd74xx libata scsi_mod generic thermal processor fan fbcon
tileblit font bitblit softcursor vesafb capability commoncap
[ 2695.236000] CPU:    1
[ 2695.236000] EIP:    0060:[<f8cb4ba4>]    Tainted: P      VLI
[ 2695.236000] EFLAGS: 00010286   (2.6.20-15-generic #2)
[ 2695.236000] EIP is at ipaq_open+0x1e4/0x340 [ipaq]
[ 2695.236000] eax: da9c9000   ebx: 00000100   ecx: dfc5ae00   edx: 00000000
[ 2695.236000] esi: dbab9b60   edi: f7fa94f4   ebp: f7fa94e0   esp: ddf53e60
[ 2695.236000] ds: 007b   es: 007b   ss: 0068
[ 2695.236000] Process gpilotd (pid: 5782, ti=ddf52000 task=e2678030
task.ti=ddf52000)
[ 2695.236000] Stack: f4f8f000 f7814800 00000292 c0234257 00000000 c0234eab
dfc5ae00 d3eb3a80 
[ 2695.236000]        00000064 dfc5ae00 d3eb3a80 f4f8f000 dfc5ae0c f8d5b1dc
c0234114 f78149c0 
[ 2695.236000]        d6a6b7f8 db77c740 ffffffed 00000000 0bc00000 db77c740
00000100 c0237c87 
[ 2695.236000] Call Trace:
[ 2695.236000]  [<c0234257>] tty_ldisc_enable+0x27/0x30
[ 2695.236000]  [<c0234eab>] init_dev+0x24b/0x5e0
[ 2695.236000]  [<f8d5b1dc>] serial_open+0x10c/0x160 [usbserial]
[ 2695.236000]  [<c0234114>] check_tty_count+0x14/0xb0
[ 2695.236000]  [<c0237c87>] tty_open+0x147/0x2f0
[ 2695.236000]  [<c0237b40>] tty_open+0x0/0x2f0
[ 2695.236000]  [<c0179448>] chrdev_open+0xa8/0x170
[ 2695.236000]  [<c01793a0>] chrdev_open+0x0/0x170
[ 2695.236000]  [<c0174c9a>] __dentry_open+0xba/0x1c0
[ 2695.236000]  [<c0174e55>] nameidata_to_filp+0x35/0x40
[ 2695.236000]  [<c0174eb0>] do_filp_open+0x50/0x60
[ 2695.236000]  [<c0174f0e>] do_sys_open+0x4e/0xf0
[ 2695.236000]  [<c0174fec>] sys_open+0x1c/0x20
[ 2695.236000]  [<c01031f0>] sysenter_past_esp+0x69/0xa9
[ 2695.236000]  =======================
[ 2695.236000] Code: ff a1 98 94 3a c0 ba d0 00 00 00 e8 f7 df 4b c7 8b 4c 24 18
85 c0 89 41 4c 0f 84 26 01 00 00 8b 44 24 18 89 c1 8b 50 44 8b 40 3c <89> 42 30
8b 41 4c 8b 51 54 89 42 30 8b 41 44 c7 40 38 00 10 00 
[ 2695.236000] EIP: [<f8cb4ba4>] ipaq_open+0x1e4/0x340 [ipaq] SS:ESP 0068:ddf53e60
[ 2695.236000]

Comment 1 Natalie Protasevich 2007-06-13 20:45:05 UTC

Please test with new kernel (2.6.22-rc4), it has some important fixes that might have addressed your problem.
Thanks,
--Natalie

Comment 2 Greg Kroah-Hartman 2007-06-14 09:19:47 UTC

Please reproduce this without the nvidia driver loaded.  If it happens then, please reopen with the new oops message.

Comment 3 Jean-Christophe Dubois 2008-01-19 09:05:03 UTC

Today I tried to connect a Qteck 9100 (Windows CE pocket PX) to my kubuntu 7.10 system (running 2.6.22) and I got the following. Obviously 2.6.22 doesn't fixt this problem.

[  392.468370] ipaq 1-2:1.0: PocketPC PDA converter detected
[  392.474207] usb 1-2: PocketPC PDA converter now attached to ttyUSB0
[  392.474877] ipaq 1-2:1.1: PocketPC PDA converter detected
[  392.477598] usb 1-2: PocketPC PDA converter now attached to ttyUSB1
[  392.478230] usbcore: registered new interface driver ipaq
[  392.544716] usbcore: registered new interface driver cdc_ether
[  392.557669] usbcore: registered new interface driver rndis_host
[  781.942697] PPP generic driver version 2.4.2
[  782.061664] ip_tables: (C) 2000-2006 Netfilter Core Team
[  782.206233] BUG: unable to handle kernel NULL pointer dereference at virtual address 0000002c
[  782.206246]  printing eip:
[  782.206248] f8e63ba4
[  782.206249] *pde = 00000000
[  782.206255] Oops: 0002 [#1]
[  782.206257] SMP
[  782.206262] Modules linked in: iptable_filter ip_tables x_tables ppp_async ppp_generic slhc crc_ccitt rndis_host cdc_ether usbnet ipaq usbserial nfs af_packet binfmt_misc rfcomm l2cap bluetooth nfsd exportfs lockd sunrpc autofs4 ppdev ipv6 capifs video container sbs button dock ac battery w83627hf hwmon_vid eeprom i2c_isa lp rsrc_nonstatic pcmcia_core snd_intel8x0 snd_ac97_codec snd_usb_audio ac97_bus snd_pcm_oss snd_mixer_oss snd_usb_lib snd_pcm snd_hwdep snd_seq_dummy pwc compat_ioctl32 snd_seq_oss snd_seq_midi snd_rawmidi videodev v4l2_common v4l1_compat xpad snd_seq_midi_event parport_pc parport pcspkr snd_seq snd_timer snd_seq_device snd soundcore psmouse serio_raw snd_page_alloc shpchp i2c_sis96x i2c_core pci_hotplug sis_agp agpgart evdev reiserfs usbhid hid sg sr_mod cdrom sd_mod sis900 mii ehci_hcd ohci_hcd usbcore pata_sis ata_generic libata scsi_mod raid10 raid456 xor raid1 raid0 multipath linear md_mod dm_mirror dm_snapshot dm_mod thermal processor fan fuse apparmor commoncap
[  782.206349] CPU:    0
[  782.206350] EIP:    0060:[<f8e63ba4>]    Not tainted VLI
[  782.206352] EFLAGS: 00210286   (2.6.22-14-generic #1)
[  782.206387] EIP is at ipaq_open+0x1e4/0x340 [ipaq]
[  782.206390] eax: eac75000   ebx: 00000100   ecx: e4555200   edx: 00000000
[  782.206394] esi: d44b53a0   edi: d44251b4   ebp: d44251a0   esp: dec61e60
[  782.206398] ds: 007b   es: 007b   fs: 00d8  gs: 0033  ss: 0068
[  782.206402] Process pppd (pid: 9369, ti=dec60000 task=d49aaf90 task.ti=dec60000)
[  782.206404] Stack: eecc5800 d5965a00 00200292 c0241c47 00000000 c024292d e4555200 e2bdd8c0
[  782.206412]        00000064 e4555200 e2bdd8c0 eecc5800 e455520c f8e7031a c0241b04 d59659c0
[  782.206419]        d70337f8 d70478c0 ffffffed 00000000 0bc00000 d70478c0 00000000 c02458b7
[  782.206426] Call Trace:
[  782.206435]  [<c0241c47>] tty_ldisc_enable+0x27/0x30
[  782.206455]  [<c024292d>] init_dev+0x24d/0x5f0
[  782.206469]  [<f8e7031a>] serial_open+0x10a/0x160 [usbserial]
[  782.206487]  [<c0241b04>] check_tty_count+0x14/0xb0
[  782.206503]  [<c02458b7>] tty_open+0x147/0x2f0
[  782.206512]  [<c0245770>] tty_open+0x0/0x2f0
[  782.206519]  [<c0183416>] chrdev_open+0xa6/0x190
[  782.206534]  [<c0183370>] chrdev_open+0x0/0x190
[  782.206538]  [<c017ebf8>] __dentry_open+0xb8/0x1c0
[  782.206558]  [<c017edb5>] nameidata_to_filp+0x35/0x40
[  782.206567]  [<c017ee10>] do_filp_open+0x50/0x60
[  782.206603]  [<c017ee6e>] do_sys_open+0x4e/0xf0
[  782.206617]  [<c017ef4c>] sys_open+0x1c/0x20
[  782.206622]  [<c01041d2>] sysenter_past_esp+0x6b/0xa9
[  782.206652]  =======================
[  782.206654] Code: ff ba d0 00 00 00 b8 40 9f 3d c0 e8 a7 90 31 c7 8b 4c 24 18 85 c0 89 41 4c 0f 84 26 01 00 00 8b 44 24 18 89 c1 8b 50 44 8b 40 3c <89> 42 2c 8b 41 4c 8b 51 54 89 42 2c 8b 41 44 c7 40 34 00 10 00
[  782.206680] EIP: [<f8e63ba4>] ipaq_open+0x1e4/0x340 [ipaq] SS:ESP 0068:dec61e60