Bug 192881 - NULL pointer dereference with pctv452e and possibly others since 4.9
Summary: NULL pointer dereference with pctv452e and possibly others since 4.9
Status: NEW
Alias: None
Product: v4l-dvb
Classification: Unclassified
Component: dvb-usb (show other bugs)
Hardware: All Linux
: P1 normal
Assignee: dvb-usb
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2017-01-18 09:42 UTC by Ognian Tschakalov
Modified: 2017-01-25 12:52 UTC (History)
0 users

See Also:
Kernel Version: 4.9 and above
Subsystem:
Regression: Yes
Bisected commit-id:


Attachments

Description Ognian Tschakalov 2017-01-18 09:42:01 UTC
Hello,
since kernel 4.9 (last tested with 4.9.4) I'm getting the following error:

[  216.171033] pctv452e: pctv452e_power_ctrl: 1
[  216.171033] 
[  216.171728] Unable to handle kernel NULL pointer dereference at virtual address 00000000
[  216.171745] pgd = a973c000
[  216.171751] [00000000] *pgd=00000000
[  216.171764] Internal error: Oops: 805 [#1] SMP ARM
[  216.171793] Modules linked in: dvb_usb_pctv452e(+) ttpci_eeprom dvb_usb dvb_core rc_core hci_uart btbcm bluetooth brcmfmac brcmutil cfg80211 bcm2835_gpiomem
[  216.171871] CPU: 3 PID: 698 Comm: systemd-udevd Not tainted 4.9.0 #1
[  216.171888] Hardware name: BCM2835
[  216.171902] task: a96faf80 task.stack: a97c2000
[  216.171928] PC is at __mutex_lock_slowpath+0x78/0x15c
[  216.171945] LR is at __mutex_lock_slowpath+0x4c/0x15c
[  216.171966] pc : [<806ae54c>]    lr : [<806ae520>]    psr: a00b0013
[  216.171966] sp : a97c3b70  ip : a97c3b70  fp : a97c3ba4
[  216.171992] r10: 00000002  r9 : ad0249f4  r8 : 00000002
[  216.172009] r7 : ad0249f0  r6 : a96faf80  r5 : ffffffff  r4 : ad0249ec
[  216.172027] r3 : 00000000  r2 : a97c3b74  r1 : 00000000  r0 : ad0249f0
[  216.172046] Flags: NzCv  IRQs on  FIQs on  Mode SVC_32  ISA ARM  Segment user
[  216.172066] Control: 10c5383d  Table: 2973c06a  DAC: 00000055
[  216.172083] Process systemd-udevd (pid: 698, stack limit = 0xa97c2210)
[  216.172102] Stack: (0xa97c3b70 to 0xa97c4000)
[  216.172125] 3b60:                                     a97c3b94 ad0249f4 00000000 024000c0

I think that the problem was introduced with this commit:
https://github.com/torvalds/linux/commit/73d5c5c864f4094e86708760fd4612fbf1e6e76c

maybe this is the solution, but it was only introduced for another driver:
https://github.com/torvalds/linux/commit/7724325a19fb0a51d2a69bd2915b33f0ff197f5a

Thanks
Ognian
Comment 1 Ognian Tschakalov 2017-01-25 12:52:04 UTC
same with 4.9.5
[    0.000000] Booting Linux on physical CPU 0x0
[    0.000000] Linux version 4.9.5 (libreelec.tv@nmacleod.com) (gcc version 6.2.0 (GCC) ) #1 SMP Tue Jan 24 21:16:33 GMT 2017
[    0.000000] CPU: ARMv7 Processor [410fd034] revision 4 (ARMv7), cr=10c5383d
[    0.000000] CPU: div instructions available: patching division code
[    0.000000] CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasing instruction cache
[    0.000000] OF: fdt:Machine model: Raspberry Pi 3 Model B Rev 1.2
[    0.000000] cma: Reserved 8 MiB at 0x2f400000
[    0.000000] Memory policy: Data cache writealloc
[    0.000000] On node 0 totalpages: 196352
[    0.000000] free_area_init_node: node 0, pgdat 80c35540, node_mem_map ae93c100
[    0.000000]   Normal zone: 1726 pages used for memmap
[    0.000000]   Normal zone: 0 pages reserved
[    0.000000]   Normal zone: 196352 pages, LIFO batch:31
[    0.000000] percpu: Embedded 14 pages/cpu @afeb1000 s25292 r8192 d23860 u57344
[    0.000000] pcpu-alloc: s25292 r8192 d23860 u57344 alloc=14*4096
[    0.000000] pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3 
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 194626
[    0.000000] Kernel command line: 8250.nr_uarts=0 dma.dmachans=0x7f35 bcm2708_fb.fbwidth=1824 bcm2708_fb.fbheight=984 bcm2709.boardrev=0xa02082 bcm2709.serial=0xfb8f7ddb smsc95xx.macaddr=B8:27:EB:8F:7D:DB bcm2708_fb.fbswap=1 bcm2709.uart_clock=48000000 vc_mem.mem_base=0x3eb00000 vc_mem.mem_size=0x3ff00000  boot=/dev/mmcblk0p1 disk=/dev/mmcblk0p2 quiet root=/dev/ram0 rdinit=/init BOOT_IMAGE=/kernel.img usbcore.autosuspend=-1
[    0.000000] PID hash table entries: 4096 (order: 2, 16384 bytes)
[    0.000000] Dentry cache hash table entries: 131072 (order: 7, 524288 bytes)
[    0.000000] Inode-cache hash table entries: 65536 (order: 6, 262144 bytes)
[    0.000000] Memory: 757288K/785408K available (6144K kernel code, 217K rwdata, 1280K rodata, 3072K init, 402K bss, 19928K reserved, 8192K cma-reserved)
[    0.000000] Virtual kernel memory layout:
[    0.000000]     vector  : 0xffff0000 - 0xffff1000   (   4 kB)
[    0.000000]     fixmap  : 0xffc00000 - 0xfff00000   (3072 kB)
[    0.000000]     vmalloc : 0xb0000000 - 0xff800000   (1272 MB)
[    0.000000]     lowmem  : 0x80000000 - 0xaff00000   ( 767 MB)
[    0.000000]     modules : 0x7f000000 - 0x80000000   (  16 MB)
[    0.000000]       .text : 0x80008000 - 0x80700000   (7136 kB)
[    0.000000]       .init : 0x80900000 - 0x80c00000   (3072 kB)
[    0.000000]       .data : 0x80c00000 - 0x80c367b8   ( 218 kB)
[    0.000000]        .bss : 0x80c38000 - 0x80c9ca6c   ( 403 kB)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[    0.000000] Hierarchical RCU implementation.
[    0.000000] 	Build-time adjustment of leaf fanout to 32.
[    0.000000] NR_IRQS:16 nr_irqs:16 16
[    0.000000] arm_arch_timer: WARNING: Invalid trigger for IRQ16, assuming level low
[    0.000000] arm_arch_timer: WARNING: Please fix your firmware
[    0.000000] arm_arch_timer: WARNING: Invalid trigger for IRQ17, assuming level low
[    0.000000] arm_arch_timer: WARNING: Please fix your firmware
[    0.000000] arm_arch_timer: Architected cp15 timer(s) running at 19.20MHz (phys).
[    0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x46d987e47, max_idle_ns: 440795202767 ns
[    0.000007] sched_clock: 56 bits at 19MHz, resolution 52ns, wraps every 4398046511078ns
[    0.000018] Switching to timer-based delay loop, resolution 52ns
[    0.000218] Console: colour dummy device 80x30
[    0.000234] console [tty0] enabled
[    0.000253] Calibrating delay loop (skipped), value calculated using timer frequency.. 38.00 BogoMIPS (lpj=64000)
[    0.000268] pid_max: default: 32768 minimum: 301
[    0.000414] Mount-cache hash table entries: 2048 (order: 1, 8192 bytes)
[    0.000422] Mountpoint-cache hash table entries: 2048 (order: 1, 8192 bytes)
[    0.001219] Disabling cpuset control group subsystem
[    0.001320] CPU: Testing write buffer coherency: ok
[    0.001731] CPU0: update cpu_capacity 1024
[    0.001738] CPU0: thread -1, cpu 0, socket 0, mpidr 80000000
[    0.001794] Setting up static identity map for 0x100000 - 0x100034
[    0.003687] arm_arch_timer: WARNING: Invalid trigger for IRQ16, assuming level low
[    0.003690] arm_arch_timer: WARNING: Please fix your firmware
[    0.003698] arm_arch_timer: WARNING: Invalid trigger for IRQ17, assuming level low
[    0.003700] arm_arch_timer: WARNING: Please fix your firmware
[    0.003712] CPU1: update cpu_capacity 1024
[    0.003718] CPU1: thread -1, cpu 1, socket 0, mpidr 80000001
[    0.004317] arm_arch_timer: WARNING: Invalid trigger for IRQ16, assuming level low
[    0.004320] arm_arch_timer: WARNING: Please fix your firmware
[    0.004325] arm_arch_timer: WARNING: Invalid trigger for IRQ17, assuming level low
[    0.004327] arm_arch_timer: WARNING: Please fix your firmware
[    0.004336] CPU2: update cpu_capacity 1024
[    0.004342] CPU2: thread -1, cpu 2, socket 0, mpidr 80000002
[    0.004903] arm_arch_timer: WARNING: Invalid trigger for IRQ16, assuming level low
[    0.004906] arm_arch_timer: WARNING: Please fix your firmware
[    0.004910] arm_arch_timer: WARNING: Invalid trigger for IRQ17, assuming level low
[    0.004913] arm_arch_timer: WARNING: Please fix your firmware
[    0.004921] CPU3: update cpu_capacity 1024
[    0.004927] CPU3: thread -1, cpu 3, socket 0, mpidr 80000003
[    0.004998] Brought up 4 CPUs
[    0.005009] SMP: Total of 4 processors activated (153.00 BogoMIPS).
[    0.005013] CPU: All CPU(s) started in HYP mode.
[    0.005016] CPU: Virtualization extensions available.
[    0.005560] devtmpfs: initialized
[    0.015078] VFP support v0.3: implementor 41 architecture 3 part 40 variant 3 rev 4
[    0.015313] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 6370867519511994 ns
[    0.015731] pinctrl core: initialized pinctrl subsystem
[    0.016209] NET: Registered protocol family 16
[    0.018454] DMA: preallocated 1024 KiB pool for atomic coherent allocations
[    0.033355] cpuidle: using governor ladder
[    0.046720] cpuidle: using governor menu
[    0.047382] Serial: AMBA PL011 UART driver
[    0.050229] bcm2835-mbox 3f00b880.mailbox: mailbox enabled
[    0.050696] uart-pl011 3f201000.serial: could not find pctldev for node /soc/gpio@7e200000/uart0_pins, deferring probe
[    0.101035] bcm2835-dma 3f007000.dma: DMA legacy API manager at b000f000, dmachans=0x1
[    0.102782] SCSI subsystem initialized
[    0.103050] usbcore: registered new interface driver usbfs
[    0.103124] usbcore: registered new interface driver hub
[    0.103201] usbcore: registered new device driver usb
[    0.103641] raspberrypi-firmware soc:firmware: Attached to firmware from 2017-01-23 15:15
[    0.105027] clocksource: Switched to clocksource arch_sys_counter
[    0.116144] NET: Registered protocol family 2
[    0.116830] TCP established hash table entries: 8192 (order: 3, 32768 bytes)
[    0.116937] TCP bind hash table entries: 8192 (order: 4, 65536 bytes)
[    0.117121] TCP: Hash tables configured (established 8192 bind 8192)
[    0.117207] UDP hash table entries: 512 (order: 2, 16384 bytes)
[    0.117249] UDP-Lite hash table entries: 512 (order: 2, 16384 bytes)
[    0.117438] NET: Registered protocol family 1
[    0.117756] RPC: Registered named UNIX socket transport module.
[    0.117760] RPC: Registered udp transport module.
[    0.117764] RPC: Registered tcp transport module.
[    0.117768] RPC: Registered tcp NFSv4.1 backchannel transport module.
[    0.267258] futex hash table entries: 1024 (order: 4, 65536 bytes)
[    0.267578] workingset: timestamp_bits=14 max_order=18 bucket_order=4
[    0.281111] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.283448] NFS: Registering the id_resolver key type
[    0.283473] Key type id_resolver registered
[    0.283477] Key type id_legacy registered
[    0.283490] nfs4filelayout_init: NFSv4 File Layout Driver Registering...
[    0.286982] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 251)
[    0.286990] io scheduler noop registered (default)
[    0.286995] io scheduler deadline registered
[    0.287254] io scheduler cfq registered
[    0.291941] BCM2708FB: allocated DMA memory ef510000
[    0.291962] BCM2708FB: allocated DMA channel 0 @ b000f000
[    0.336558] Console: switching to colour frame buffer device 228x61
[    0.363543] bcm2835-rng 3f104000.rng: hwrng registered
[    0.363631] vc-cma: Videocore CMA driver
[    0.363638] vc-cma: vc_cma_base      = 0x00000000
[    0.363642] vc-cma: vc_cma_size      = 0x00000000 (0 MiB)
[    0.363647] vc-cma: vc_cma_initial   = 0x00000000 (0 MiB)
[    0.363827] vc-mem: phys_addr:0x00000000 mem_base=0x3eb00000 mem_size:0x3ff00000(1023 MiB)
[    0.377297] brd: module loaded
[    0.377453] loop: module loaded
[    0.381105] nbd: registered device at major 43
[    0.392855] usbcore: registered new interface driver rtsx_usb
[    0.392865] Loading iSCSI transport class v2.0-870.
[    0.393262] iscsi: registered transport (tcp)
[    0.393741] libphy: Fixed MDIO Bus: probed
[    0.393746] tun: Universal TUN/TAP device driver, 1.6
[    0.393752] tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
[    0.394016] usbcore: registered new interface driver dm9601
[    0.394096] usbcore: registered new interface driver smsc95xx
[    0.394133] dwc_otg: version 3.00a 10-AUG-2012 (platform bus)
[    0.620147] Core Release: 2.80a
[    0.620154] Setting default values for core params
[    0.620182] Finished setting default values for core params
[    0.820526] Using Buffer DMA mode
[    0.820531] Periodic Transfer Interrupt Enhancement - disabled
[    0.820535] Multiprocessor Interrupt Enhancement - disabled
[    0.820540] OTG VER PARAM: 0, OTG VER FLAG: 0
[    0.820551] Dedicated Tx FIFOs mode
[    0.820875] WARN::dwc_otg_hcd_init:1053: FIQ DMA bounce buffers: virt = 0xaf504000 dma = 0xef504000 len=9024
[    0.820901] FIQ FSM acceleration enabled for :
[    0.820901] Non-periodic Split Transactions
[    0.820901] Periodic Split Transactions
[    0.820901] High-Speed Isochronous Endpoints
[    0.820901] Interrupt/Control Split Transaction hack enabled
[    0.820906] dwc_otg: Microframe scheduler enabled
[    0.820952] WARN::hcd_init_fiq:457: FIQ on core 1 at 0x8051481c
[    0.820961] WARN::hcd_init_fiq:458: FIQ ASM at 0x80514b7c length 36
[    0.820971] WARN::hcd_init_fiq:484: MPHI regs_base at 0xb077a000
[    0.821025] dwc_otg 3f980000.usb: DWC OTG Controller
[    0.821058] dwc_otg 3f980000.usb: new USB bus registered, assigned bus number 1
[    0.821085] dwc_otg 3f980000.usb: irq 62, io mem 0x00000000
[    0.821133] Init: Port Power? op_state=1
[    0.821137] Init: Power Port (0)
[    0.821304] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002
[    0.821313] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[    0.821320] usb usb1: Product: DWC OTG Controller
[    0.821327] usb usb1: Manufacturer: Linux 4.9.5 dwc_otg_hcd
[    0.821334] usb usb1: SerialNumber: 3f980000.usb
[    0.822062] hub 1-0:1.0: USB hub found
[    0.822096] hub 1-0:1.0: 1 port detected
[    0.822669] dwc_otg: FIQ enabled
[    0.822673] dwc_otg: NAK holdoff enabled
[    0.822677] dwc_otg: FIQ split-transaction FSM enabled
[    0.822688] Module dwc_common_port init
[    0.822890] usbcore: registered new interface driver usb-storage
[    0.823087] mousedev: PS/2 mouse device common for all mice
[    0.823229] i2c /dev entries driver
[    0.824489] bcm2835-wdt 3f100000.watchdog: Broadcom BCM2835 watchdog timer
[    0.824741] bcm2835-cpufreq: min=600000 max=1200000
[    0.825211] sdhci: Secure Digital Host Controller Interface driver
[    0.825216] sdhci: Copyright(c) Pierre Ossman
[    0.825572] sdhost: log_buf @ af507000 (ef507000)
[    0.878366] mmc0: sdhost-bcm2835 loaded - DMA enabled (>1)
[    0.900445] mmc-bcm2835 3f300000.mmc: mmc_debug:0 mmc_debug2:0
[    0.900450] mmc-bcm2835 3f300000.mmc: DMA channel allocated
[    0.931771] sdhci-pltfm: SDHCI platform and OF driver helper
[    0.932008] ledtrig-cpu: registered to indicate activity on CPUs
[    0.932064] hidraw: raw HID events driver (C) Jiri Kosina
[    0.933105] usbcore: registered new interface driver usbhid
[    0.933107] usbhid: USB HID core driver
[    0.933585] vchiq: vchiq_init_state: slot_zero = 0xaf580000, is_master = 0
[    0.935338] mmc0: host does not support reading read-only switch, assuming write-enable
[    0.937106] NET: Registered protocol family 10
[    0.937267] mmc0: new high speed SDHC card at address 0007
[    0.937591] mmcblk0: mmc0:0007 SL32G 29.0 GiB
[    0.938828]  mmcblk0: p1 p2
[    0.939398] NET: Registered protocol family 17
[    0.939454] Key type dns_resolver registered
[    0.940778] Registering SWP/SWPB emulation handler
[    0.942787] vc-sm: Videocore shared memory driver
[    0.942793] [vc_sm_connected_init]: start
[    0.943092] [vc_sm_connected_init]: end - returning 0
[    0.944209] 3f201000.serial: ttyAMA0 at MMIO 0x3f201000 (irq = 87, base_baud = 0) is a PL011 rev2
[    0.944411] console [netcon0] enabled
[    0.944413] netconsole: network logging started
[    0.944415] of_cfs_init
[    0.944483] of_cfs_init: OK
[    0.947417] Freeing unused kernel memory: 3072K (80900000 - 80c00000)
[    0.950013] mmc1: queuing unknown CIS tuple 0x80 (2 bytes)
[    0.951554] mmc1: queuing unknown CIS tuple 0x80 (3 bytes)
[    0.953094] mmc1: queuing unknown CIS tuple 0x80 (3 bytes)
[    0.955858] mmc1: queuing unknown CIS tuple 0x80 (7 bytes)
[    1.016456] random: fast init done
[    1.028432] Indeed it is in host mode hprt0 = 00021501
[    1.054845] mmc1: new high speed SDIO card at address 0001
[    1.201716] usb 1-1: new high-speed USB device number 2 using dwc_otg
[    1.201803] Indeed it is in host mode hprt0 = 00001101
[    1.392022] usb 1-1: New USB device found, idVendor=0424, idProduct=9514
[    1.392032] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[    1.392597] hub 1-1:1.0: USB hub found
[    1.392656] hub 1-1:1.0: 5 ports detected
[    1.476757] EXT4-fs (mmcblk0p2): couldn't mount as ext3 due to feature incompatibilities
[    1.477533] EXT4-fs (mmcblk0p2): couldn't mount as ext2 due to feature incompatibilities
[    1.587995] EXT4-fs (mmcblk0p2): mounted filesystem with ordered data mode. Opts: (null)
[    1.671706] usb 1-1.1: new high-speed USB device number 3 using dwc_otg
[    1.762014] usb 1-1.1: New USB device found, idVendor=0424, idProduct=ec00
[    1.762027] usb 1-1.1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[    1.765221] smsc95xx v1.0.5
[    1.817523] smsc95xx 1-1.1:1.0 eth0: register 'smsc95xx' at usb-3f980000.usb-1.1, smsc95xx USB 2.0 Ethernet, b8:27:eb:8f:7d:db
[    1.905148] usb 1-1.3: new low-speed USB device number 4 using dwc_otg
[    2.017568] usb 1-1.3: New USB device found, idVendor=046d, idProduct=c517
[    2.017580] usb 1-1.3: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[    2.017584] usb 1-1.3: Product: USB Receiver
[    2.017587] usb 1-1.3: Manufacturer: Logitech
[    2.026580] input: Logitech USB Receiver as /devices/platform/soc/3f980000.usb/usb1/1-1/1-1.3/1-1.3:1.0/0003:046D:C517.0001/input/input0
[    2.082343] logitech 0003:046D:C517.0001: input,hidraw0: USB HID v1.10 Keyboard [Logitech USB Receiver] on usb-3f980000.usb-1.3/input0
[    2.104767] logitech 0003:046D:C517.0002: fixing up Logitech keyboard report descriptor
[    2.107667] input: Logitech USB Receiver as /devices/platform/soc/3f980000.usb/usb1/1-1/1-1.3/1-1.3:1.1/0003:046D:C517.0002/input/input1
[    2.118282] systemd[1]: System time before build time, advancing clock.
[    2.132551] systemd[1]: systemd 232 running in system mode. (-PAM -AUDIT -SELINUX -IMA -APPARMOR -SMACK -SYSVINIT -UTMP -LIBCRYPTSETUP -GCRYPT -GNUTLS -ACL -XZ -LZ4 -SECCOMP +BLKID -ELFUTILS +KMOD -IDN)
[    2.132932] systemd[1]: Detected architecture arm.
[    2.133097] systemd[1]: Set hostname to <LibreELEC>.
[    2.162225] logitech 0003:046D:C517.0002: input,hiddev0,hidraw1: USB HID v1.10 Mouse [Logitech USB Receiver] on usb-3f980000.usb-1.3/input1
[    2.223008] systemd[1]: Listening on Journal Socket.
[    2.224048] systemd[1]: Created slice User and Session Slice.
[    2.224184] systemd[1]: Listening on udev Control Socket.
[    2.224340] systemd[1]: Started Forward Password Requests to Wall Directory Watch.
[    2.235048] usb 1-1.4: new high-speed USB device number 5 using dwc_otg
[    2.288025] systemd[1]: Listening on RPCbind Server Activation Socket.
[    2.288094] systemd[1]: Reached target RPC Port Mapper.
[    2.288206] systemd[1]: Listening on Journal Socket (/dev/log).
[    2.325746] usb 1-1.4: New USB device found, idVendor=0b48, idProduct=300a
[    2.325755] usb 1-1.4: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[    2.325758] usb 1-1.4: Product: TT-USB2.0
[    2.325762] usb 1-1.4: Manufacturer: TechnoTrend
[    2.325767] usb 1-1.4: SerialNumber: LHJMHM
[    2.511916] systemd-journald[215]: Received request to flush runtime journal from PID 1
[    2.963759] random: crng init done
[    3.440841] dvb_core: loading out-of-tree module taints kernel.
[    3.442538] WARNING: You are using an experimental version of the media stack.
[    3.442538] 	As the driver is backported to an older kernel, it doesn't offer
[    3.442538] 	enough quality for its usage in production.
[    3.442538] 	Use it with care.
[    3.442538] Latest git patches (needed if you report a bug to linux-media@vger.kernel.org):
[    3.442538] 	a02ff2e02bee64e9955dbfd8811874c3f3880f58 cx231xx: Fix TBS MAC reading.
[    3.457781] WARNING: You are using an experimental version of the media stack.
[    3.457781] 	As the driver is backported to an older kernel, it doesn't offer
[    3.457781] 	enough quality for its usage in production.
[    3.457781] 	Use it with care.
[    3.457781] Latest git patches (needed if you report a bug to linux-media@vger.kernel.org):
[    3.457781] 	a02ff2e02bee64e9955dbfd8811874c3f3880f58 cx231xx: Fix TBS MAC reading.
[    3.463661] Console: switching to colour dummy device 80x30
[    3.586384] dvb-usb: found a 'Technotrend TT Connect S2-3650-CI' in warm state.
[    3.586409] pctv452e: pctv452e_power_ctrl: 1
[    3.586409] 
[    3.593911] Unable to handle kernel NULL pointer dereference at virtual address 00000000
[    3.593919] pgd = ae150000
[    3.593922] [00000000] *pgd=00000000
[    3.593934] Internal error: Oops: 805 [#1] SMP ARM
[    3.593948] Modules linked in: dvb_usb_pctv452e(O+) ttpci_eeprom(O) dvb_usb(O) rc_core(O) dvb_core(O) sch_fq_codel
[    3.593977] CPU: 3 PID: 253 Comm: systemd-udevd Tainted: G           O    4.9.5 #1
[    3.593986] Hardware name: BCM2835
[    3.593993] task: adf99300 task.stack: ae10a000
[    3.594010] PC is at __mutex_lock_slowpath+0x78/0x15c
[    3.594019] LR is at __mutex_lock_slowpath+0x4c/0x15c
[    3.594029] pc : [<806b4ebc>]    lr : [<806b4e90>]    psr: a0050113
[    3.594029] sp : ae10bb70  ip : ae10bb70  fp : ae10bba4
[    3.594043] r10: 00000002  r9 : adfcc934  r8 : 00000002
[    3.594051] r7 : adfcc930  r6 : adf99300  r5 : ffffffff  r4 : adfcc92c
[    3.594060] r3 : 00000000  r2 : ae10bb74  r1 : 00000000  r0 : adfcc930
[    3.594075] Flags: NzCv  IRQs on  FIQs on  Mode SVC_32  ISA ARM  Segment user
[    3.594084] Control: 10c5383d  Table: 2e15006a  DAC: 00000055
[    3.594093] Process systemd-udevd (pid: 253, stack limit = 0xae10a210)
[    3.594102] Stack: (0xae10bb70 to 0xae10c000)
[    3.594111] bb60:                                     ae10bb94 adfcc934 00000000 024000c0
[    3.594124] bb80: adfcc92c adfcc900 af330000 ae123c40 adfcc92c 00000002 ae10bbbc ae10bba8
[    3.594137] bba0: 806b4ff8 806b4e50 00000000 adfcc900 ae10bbfc ae10bbc0 7f038a24 806b4fac
[    3.594150] bbc0: ae10bbe4 ae10bbd0 af001cc0 024080c0 ae10bc0c af332000 ad851400 af330000
[    3.594162] bbe0: ad8515da 7f03adc8 00000002 00000002 ae10bc0c ae10bc00 7f02c470 7f0389ac
[    3.594175] bc00: ae10bc6c ae10bc10 7f02c6cc 7f02c42c 7f03ad4c 80259d48 ffffffed 80809708
[    3.594202] bc20: af2e2d20 ae16c370 ae10bc4c 00000000 7f03b3c0 ade6f600 00000000 7f03ad4c
[    3.594226] bc40: ade6f600 7f03aaa8 ade6f600 ad851400 00000000 7f03b2dc ade6f600 7f03b354
[    3.594251] bc60: ae10bc8c ae10bc70 7f038f9c 7f02c480 7f03aaa8 7f03b2dc ade6f620 ad851470
[    3.594276] bc80: ae10bcc4 ae10bc90 804e6be8 7f038f48 8025c5e8 ffffffed ae10bcc4 80c6c404
[    3.594301] bca0: ade6f620 00000000 7f03b2dc 0000000c ae123aa4 7f03b3c0 ae10bcec ae10bcc8
[    3.594326] bcc0: 80470894 804e6ae8 ade6f620 7f03b2dc ade6f654 00000000 7f03b3c0 ae123aa4
[    3.594351] bce0: ae10bd0c ae10bcf0 80470a00 80470694 00000000 7f03b2dc 80470940 00000000
[    3.594376] bd00: ae10bd34 ae10bd10 8046ea50 8047094c af18095c ade3b7b4 af180970 7f03b2dc
[    3.594400] bd20: adf77e00 80c25cf4 ae10bd44 ae10bd38 8047010c 8046e9ec ae10bd6c ae10bd48
[    3.594427] bd40: 8046fc50 804700f4 7f03a1c8 ae10bd58 7f03b2dc 80c25cf4 7f03b2dc 7f03a1b4
[    3.594451] bd60: ae10bd84 ae10bd70 80470f60 8046fb4c 7f03b2a8 80c25cf4 ae10bdac ae10bd88
[    3.594476] bd80: 804e5784 80470eec 7f03d000 ffffe000 ae123a80 ae123b40 00000000 ae123aa4
[    3.594501] bda0: ae10bdbc ae10bdb0 7f03d024 804e5718 ae10be34 ae10bdc0 8010179c 7f03d00c
[    3.594526] bdc0: 00000a21 b1e02000 2f396000 ae10bdf8 00000a21 b1e02000 2f396000 00000003
[    3.594551] bde0: ae123aa4 7f03b3c0 ae10be24 ae10bdf8 af001e40 024000c0 ae10be34 ae10be08
[    3.594575] be00: 801e3ec0 806b3930 80c60468 7f03b3c0 00000001 7f03b3c0 00000001 ae123a80
[    3.594601] be20: ae123b40 00000003 ae10be5c ae10be38 8019a22c 8010175c ae10be5c ae10be48
[    3.594626] be40: ae10bf44 00000001 ae123a80 00000001 ae10bf1c ae10be60 801855b8 8019a1d0
[    3.594651] be60: 7f03b3cc 00007fff 7f03b3c0 80182d8c 807b8e8c 807b8e64 807b8ebc 807b8e58
[    3.594676] be80: 80703ca8 7f03b3cc 00000000 b1e077b4 ae10bf44 801828d8 7f03b408 024000c0
[    3.594700] bea0: ae10beec ae10beb0 801fa3e8 801fa264 b1e02000 00000000 00000000 00000000
[    3.594724] bec0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[    3.594749] bee0: 00000000 00000000 00000000 00000000 7fffffff 00000000 00000011 76ebb77f
[    3.594774] bf00: 0000017b 80107b44 ae10a000 00000000 ae10bfa4 ae10bf20 80185cfc 80183a64
[    3.594798] bf20: 7fffffff 00000000 00000003 ae10bf38 801b8234 b1e02000 00005804 00000000
[    3.594823] bf40: 00000000 b1e02000 00005804 b1e0741c b1e07340 b1e06358 00003544 00003864
[    3.594848] bf60: 00000000 00000000 00000000 000013a4 00000017 00000018 00000010 00000000
[    3.594872] bf80: 0000000a 00000000 00000000 76db2388 00000000 00000000 00000000 ae10bfa8
[    3.594897] bfa0: 801079a0 80185c58 76db2388 00000000 00000011 76ebb77f 00000000 7e9ab9b4
[    3.594922] bfc0: 76db2388 00000000 00000000 0000017b 00000000 55f16688 00000000 00020000
[    3.594947] bfe0: 7e9ab950 7e9ab940 76eb44cc 76dd77f0 60010010 00000011 000228fc 0001cc38
[    3.594968] Backtrace: 
[    3.594990] [<806b4e44>] (__mutex_lock_slowpath) from [<806b4ff8>] (mutex_lock+0x58/0x5c)
[    3.595019]  r9:00000002 r8:adfcc92c r7:ae123c40 r6:af330000 r5:adfcc900 r4:adfcc92c
[    3.595056] [<806b4fa0>] (mutex_lock) from [<7f038a24>] (pctv452e_power_ctrl+0x84/0x17c [dvb_usb_pctv452e])
[    3.595082]  r5:adfcc900 r4:00000000
[    3.595109] [<7f0389a0>] (pctv452e_power_ctrl [dvb_usb_pctv452e]) from [<7f02c470>] (dvb_usb_device_power_ctrl+0x50/0x54 [dvb_usb])
[    3.595138]  r10:00000002 r9:00000002 r8:7f03adc8 r7:ad8515da r6:af330000 r5:ad851400
[    3.595159]  r4:af332000
[    3.595179] [<7f02c420>] (dvb_usb_device_power_ctrl [dvb_usb]) from [<7f02c6cc>] (dvb_usb_device_init+0x258/0x688 [dvb_usb])
[    3.595212] [<7f02c474>] (dvb_usb_device_init [dvb_usb]) from [<7f038f9c>] (pctv452e_usb_probe+0x60/0x78 [dvb_usb_pctv452e])
[    3.595240]  r10:7f03b354 r9:ade6f600 r8:7f03b2dc r7:00000000 r6:ad851400 r5:ade6f600
[    3.595261]  r4:7f03aaa8
[    3.595285] [<7f038f3c>] (pctv452e_usb_probe [dvb_usb_pctv452e]) from [<804e6be8>] (usb_probe_interface+0x10c/0x264)
[    3.595309]  r5:ad851470 r4:ade6f620
[    3.595328] [<804e6adc>] (usb_probe_interface) from [<80470894>] (driver_probe_device+0x20c/0x2b8)
[    3.595354]  r10:7f03b3c0 r9:ae123aa4 r8:0000000c r7:7f03b2dc r6:00000000 r5:ade6f620
[    3.595375]  r4:80c6c404
[    3.595392] [<80470688>] (driver_probe_device) from [<80470a00>] (__driver_attach+0xc0/0xc4)
[    3.595417]  r9:ae123aa4 r8:7f03b3c0 r7:00000000 r6:ade6f654 r5:7f03b2dc r4:ade6f620
[    3.595445] [<80470940>] (__driver_attach) from [<8046ea50>] (bus_for_each_dev+0x70/0xa4)
[    3.595468]  r7:00000000 r6:80470940 r5:7f03b2dc r4:00000000
[    3.595486] [<8046e9e0>] (bus_for_each_dev) from [<8047010c>] (driver_attach+0x24/0x28)
[    3.595509]  r6:80c25cf4 r5:adf77e00 r4:7f03b2dc
[    3.595527] [<804700e8>] (driver_attach) from [<8046fc50>] (bus_add_driver+0x110/0x21c)
[    3.595552] [<8046fb40>] (bus_add_driver) from [<80470f60>] (driver_register+0x80/0xfc)
[    3.595575]  r7:7f03a1b4 r6:7f03b2dc r5:80c25cf4 r4:7f03b2dc
[    3.595593] [<80470ee0>] (driver_register) from [<804e5784>] (usb_register_driver+0x78/0x13c)
[    3.595616]  r5:80c25cf4 r4:7f03b2a8
[    3.595640] [<804e570c>] (usb_register_driver) from [<7f03d024>] (pctv452e_usb_driver_init+0x24/0x2c [dvb_usb_pctv452e])
[    3.595669]  r9:ae123aa4 r8:00000000 r7:ae123b40 r6:ae123a80 r5:ffffe000 r4:7f03d000
[    3.595700] [<7f03d000>] (pctv452e_usb_driver_init [dvb_usb_pctv452e]) from [<8010179c>] (do_one_initcall+0x4c/0x174)
[    3.595732] [<80101750>] (do_one_initcall) from [<8019a22c>] (do_init_module+0x68/0x3ac)
[    3.595757]  r8:00000003 r7:ae123b40 r6:ae123a80 r5:00000001 r4:7f03b3c0
[    3.595781] [<8019a1c4>] (do_init_module) from [<801855b8>] (load_module+0x1b60/0x209c)
[    3.595805]  r7:00000001 r6:ae123a80 r5:00000001 r4:ae10bf44
[    3.595823] [<80183a58>] (load_module) from [<80185cfc>] (SyS_finit_module+0xb0/0xc0)
[    3.595849]  r10:00000000 r9:ae10a000 r8:80107b44 r7:0000017b r6:76ebb77f r5:00000011
[    3.595870]  r4:00000000
[    3.595890] [<80185c4c>] (SyS_finit_module) from [<801079a0>] (ret_fast_syscall+0x0/0x34)
[    3.595913]  r6:00000000 r5:00000000 r4:76db2388
[    3.595930] Code: e50b9030 e3e05000 e50b302c e3a08002 (e5832000) 
[    3.595975] ---[ end trace a1e621f5ce9d276d ]---
[    3.659842] gpiomem-bcm2835 3f200000.gpiomem: Initialised: Registers at 0x3f200000
[    3.903722] usbcore: registered new interface driver brcmfmac
[    4.202160] brcmfmac: brcmf_c_preinit_dcmds: Firmware version = wl0: May 27 2016 00:13:38 version 7.45.41.26 (r640327) FWID 01-df77e4a7
[    4.379763] uart-pl011 3f201000.serial: no DMA platform data
[    4.613010] smsc95xx 1-1.1:1.0 eth0: hardware isn't capable of remote wakeup
[    4.613282] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready
[    4.688694] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[    4.688730] brcmfmac: power management disabled
[    5.157620] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[    6.207924] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[    6.209334] smsc95xx 1-1.1:1.0 eth0: link up, 100Mbps, full-duplex, lpa 0xC1E1
[    6.231295] 8021q: 802.1Q VLAN Support v1.8
[    8.836428] Bluetooth: Core ver 2.22
[    8.836504] NET: Registered protocol family 31
[    8.836519] Bluetooth: HCI device and connection manager initialized
[    8.836544] Bluetooth: HCI socket layer initialized
[    8.836561] Bluetooth: L2CAP socket layer initialized
[    8.836588] Bluetooth: SCO socket layer initialized
[    8.845488] Bluetooth: HCI UART driver ver 2.3
[    8.845519] Bluetooth: HCI UART protocol H4 registered
[    8.845535] Bluetooth: HCI UART protocol Three-wire (H5) registered
[    8.845632] Bluetooth: HCI UART protocol Broadcom registered

Note You need to log in before you can comment on or make changes to this bug.