On Sat, 2009-01-31 at 15:01 +0000, Chris Mayo wrote: > > I've been seeing general protection fault's with 2.6.27 and 2.6.28 > > (gentoo-sources, amd64) used with vdr. Unfortunately I can't reproduce > > them on demand. > > > > Two more of these with 2.6.28 so I switched back to 2.6.25 and now four > weeks with no more > > > > > > > vdr: [5577] switching device 2 to channel 2 > > DVB: frontend 1 frequency limits undefined - fix the driver > > general protection fault: 0000 [1] SMP > > CPU 0 > > Modules linked in: snd_pcm_oss snd_mixer_oss it87 hwmon_vid r8169 > > dvb_ttpci saa7146_vv videobuf_dma_sg videobuf_core sp8870 budget l64781 > > ves1x93 budget_ci lnbp21 budget_core saa7146 ttpci_eeprom tda1004x > > ir_common tda10023 stv0299 k8temp snd_hda_intel snd_pcm snd_timer snd > > snd_page_alloc forcedeth i2c_nforce2 > > Pid: 5721, comm: kdvb-fe-1 Not tainted 2.6.27-gentoo-r5 #1 > > RIP: 0010:[<ffffffffa00e8a79>] [<ffffffffa00e8a79>] > > grundig_29504_401_tuner_set_params+0x39/0x100 [budget] > > RSP: 0018:ffff88003d3edda0 EFLAGS: 00010202 > > RAX: ffff88003d3eddb0 RBX: ffff88003e0de000 RCX: 00000000ffffffff > > RDX: 2802000000000004 RSI: ffff88003efe5808 RDI: ffff88003efe4010 > > RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 > > R10: 0000000000000000 R11: 0000000000000000 R12: ffff88003efe5808 > > vdr: [5720] changing pids of channel 30 from 203+203:407=eng,408=und:0:0 > > to 203+203:407=eng,408=und:603=eng:0 > > R13: ffff88003efe4000 R14: 000000001d324372 R15: ffff88003efe59d8 > > FS: 0000000045a17950(0000) GS:ffffffff80710600(0000) knlGS:0000000000000000 > > CS: 0010 DS: 0018 ES: 0018 CR0: 000000008005003b > > CR2: 0000000000f86000 CR3: 0000000000201000 CR4: 00000000000006e0 > > DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 > > DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 > > Process kdvb-fe-1 (pid: 5721, threadinfo ffff88003d3ec000, task > > ffff88003f2cd890) > > Stack: 0000000400000000 ffff88003d3eddb0 ffff88003f2cd890 7fffffffffffffff > > ffff88003efe4010 ffffffffa00e5660 ffff88003d3edec0 ffff88003efe59d8 > > ffff88003efe59b0 ffffffff8059815d 00000000ffffffff ffff88003efe5800 > > Call Trace: > > [<ffffffffa00e5660>] apply_frontend_param+0x40/0x3e0 [l64781] > > [<ffffffff8059815d>] schedule_timeout+0xad/0xf0 > > [<ffffffff8041c45d>] dvb_frontend_swzigzag_autotune+0xcd/0x220 > > [<ffffffff80598a2c>] __down_interruptible+0x9c/0xd0 > > [<ffffffff8041ceba>] dvb_frontend_swzigzag+0x19a/0x290 > > [<ffffffff802549b6>] down_interruptible+0x36/0x60 > > [<ffffffff8041d3b8>] dvb_frontend_thread+0x408/0x4c0 > > [<ffffffff80250570>] autoremove_wake_function+0x0/0x30 > > [<ffffffff8041cfb0>] dvb_frontend_thread+0x0/0x4c0 > > [<ffffffff802501b7>] kthread+0x47/0x80 > > [<ffffffff80232887>] schedule_tail+0x27/0x70 > > [<ffffffff8020ca49>] child_rip+0xa/0x11 > > [<ffffffff80250170>] kthread+0x0/0x80 > > [<ffffffff8020ca3f>] child_rip+0x0/0x11 > > > > > > Code: 97 d0 02 00 00 48 8b 58 38 48 8d 44 24 10 48 85 d2 48 c7 04 24 00 > > 00 00 00 66 c7 44 24 04 04 00 48 89 44 24 08 0f 84 af 00 00 00 <0f> b6 > > 02 66 89 04 24 8b 0e b8 05 3d 95 0c 44 8d 81 48 39 27 02 > > RIP [<ffffffffa00e8a79>] grundig_29504_401_tuner_set_params+0x39/0x100 > > [budget] > > RSP <ffff88003d3edda0> > > ---[ end trace 33ec88b18fe8a71a ]--- This one and the two other are all suffering from the same error a derefernce of the %rdx register that points to garbage. The source code in question is in linux/drivers/media/dvb/ttpci/budget.c:grundig_29504_401_tuner_set_params(): static int grundig_29504_401_tuner_set_params(struct dvb_frontend* fe, struct dvb_frontend_parameters* params) { struct budget *budget = fe->dvb->priv; u8 *tuner_addr = fe->tuner_priv; u32 div; u8 cfg, cpump, band_select; u8 data[4]; struct i2c_msg msg = { .flags = 0, .buf = data, .len = sizeof(data) }; if (tuner_addr) msg.addr = *tuner_addr; else msg.addr = 0x61; div = (36125000 + params->frequency) / 166666; [...] The oops code disassembles to this 13: 48 8b 58 38 mov 0x38(%rax),%rbx 17: 48 8d 44 24 10 lea 0x10(%rsp),%rax 1c: 48 85 d2 test %rdx,%rdx if (tuner_addr) ... 1f: 48 c7 04 24 00 00 00 movq $0x0,(%rsp) msg.flags = 0 26: 00 27: 66 c7 44 24 04 04 00 movw $0x4,0x4(%rsp) msg.len = sizeof(data) 2e: 48 89 44 24 08 mov %rax,0x8(%rsp) msg.buf = data 33: 0f 84 af 00 00 00 je 0xe8 if (tuner_addr) ... 39: 0f b6 02 movzbl (%rdx),%eax *tuner_addr <--- Ooops is here 3c: 66 89 04 24 mov %ax,(%rsp) 40: 8b 0e mov (%rsi),%ecx 42: b8 05 3d 95 0c mov $0xc953d05,%eax 1/166666 (times 0x200000000000) 47: 44 8d 81 48 39 27 02 lea 0x2273948(%rcx),%r8d 36125000 + params->frequency So tuner_addr is non-NULL and is not a valid pointer either. It looks like linux/drivers/media/dvb/ttpci/budget.c:frontend_init() is setting the pointer up properly. So something else is trashing the struct dvb_frontend structure pointed to by the variable fe. Finding what's doing that will be difficult. Without a device nor steps to reliably reproduce, that's about all I can help with. Regards, Andy > > > > > > vdr: [2391] setting watchdog timer to 60 seconds > > DVB: frontend 0 frequency limits undefined - fix the driver > > general protection fault: 0000 [1] SMP > > CPU 0 > > Modules linked in: snd_pcm_oss snd_mixer_oss dvb_ttpci snd_hda_intel > > saa7146_vv budget_ci snd_pcm budget lnbp21 videobuf_dma_sg l64781 > > videobuf_core snd_timer budget_core sp8870 saa7146 snd tda1004x > > ttpci_eeprom forcedeth ir_common k8temp ves1x93 tda10023 stv0299 > > i2c_nforce2 r8169 snd_page_alloc > > Pid: 2398, comm: kdvb-fe-0 Not tainted 2.6.27-gentoo-r7 #1 > > RIP: 0010:[<ffffffffa0076a79>] [<ffffffffa0076a79>] > > grundig_29504_401_tuner_set_params+0x39/0x100 [budget] > > RSP: 0018:ffff88003c00bda0 EFLAGS: 00010286 > > RAX: ffff88003c00bdb0 RBX: ffff88003e6ba000 RCX: 00000000ffffffff > > RDX: 8008080800000000 RSI: ffff88003e433008 RDI: ffff88003e74cc10 > > RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 > > R10: 0000000000000000 R11: 0000000000000000 R12: ffff88003e433008 > > vdr: [2410] CAM 1: no module present > > vdr: [2410] CAM 2: no module present > > R13: ffff88003e74cc00 R14: 000000002181fb8e R15: ffff88003e4331d8 > > FS: 00007f98d92a46f0(0000) GS:ffffffff80711600(0000) knlGS:0000000000000000 > > CS: 0010 DS: 0018 ES: 0018 CR0: 000000008005003b > > CR2: 00000000004c7a80 CR3: 000000003d493000 CR4: 00000000000006e0 > > DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 > > DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 > > Process kdvb-fe-0 (pid: 2398, threadinfo ffff88003c00a000, task > > ffff88003f29f200) > > Stack: 0000000400000000 ffff88003c00bdb0 ffff88003f29f200 7fffffffffffffff > > ffff88003e74cc10 ffffffffa006c660 ffff88003c00bec0 ffff88003e4331d8 > > ffff88003e4331b0 ffffffff8059831d 00000000ffffffff ffff88003e433000 > > Call Trace: > > [<ffffffffa006c660>] apply_frontend_param+0x40/0x3e0 [l64781] > > [<ffffffff8059831d>] schedule_timeout+0xad/0xf0 > > [<ffffffff8041c57d>] dvb_frontend_swzigzag_autotune+0xcd/0x220 > > [<ffffffff80598bec>] __down_interruptible+0x9c/0xd0 > > [<ffffffff8041cfda>] dvb_frontend_swzigzag+0x19a/0x290 > > [<ffffffff802549c6>] down_interruptible+0x36/0x60 > > [<ffffffff8041d4d8>] dvb_frontend_thread+0x408/0x4c0 > > [<ffffffff80250580>] autoremove_wake_function+0x0/0x30 > > [<ffffffff8041d0d0>] dvb_frontend_thread+0x0/0x4c0 > > [<ffffffff802501c7>] kthread+0x47/0x80 > > [<ffffffff80232897>] schedule_tail+0x27/0x70 > > [<ffffffff8020ca49>] child_rip+0xa/0x11 > > [<ffffffff80250180>] kthread+0x0/0x80 > > [<ffffffff8020ca3f>] child_rip+0x0/0x11 > > > > > > Code: 97 d0 02 00 00 48 8b 58 38 48 8d 44 24 10 48 85 d2 48 c7 04 24 00 > > 00 00 00 66 c7 44 24 04 04 00 48 89 44 24 08 0f 84 af 00 00 00 <0f> b6 > > 02 66 89 04 24 8b 0e b8 05 3d 95 0c 44 8d 81 48 39 27 02 > > RIP [<ffffffffa0076a79>] grundig_29504_401_tuner_set_params+0x39/0x100 > > [budget] > > RSP <ffff88003c00bda0> > > ---[ end trace 69aa4ae250698950 ]--- > > > > > > > > > > > > vdr: [2403] switching device 2 to channel 14 > > DVB: adapter 1 frontend 4294670335 frequency limits undefined - fix the > > driver > > general protection fault: 0000 [#1] SMP > > last sysfs file: /sys/class/firmware/0000:01:06.0/loading > > CPU 1 > > Modules linked in: snd_pcm_oss snd_mixer_oss dvb_ttpci snd_hda_intel > > saa7146_vv budget videobuf_dma_sg l64781 budget_ci lnbp21 budget_core > > videobuf_core saa7146 sp8870 snd_pcm ir_common ves1x93 ttpci_eeprom > > tda1004x tda10023 stv0299 snd_timer dvb_core snd k8temp snd_page_alloc > > tda827x forcedeth r8169 i2c_nforce2 > > Pid: 2421, comm: kdvb-ad-1-fe--2 Not tainted 2.6.28-gentoo #2 > > RIP: 0010:[<ffffffffa00ddbc9>] [<ffffffffa00ddbc9>] > > grundig_29504_401_tuner_set_params+0x39/0x100 [budget] > > RSP: 0018:ffff88003c94fda0 EFLAGS: 00010282 > > RAX: ffff88003c94fdb0 RBX: ffff88003e2f9000 RCX: 0000000000000001 > > RDX: ffdfff7ff5bffff7 RSI: ffff88003ee0ac08 RDI: ffff88003ee0a810 > > RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 > > R10: 0000000000000000 R11: 0000000000000000 R12: ffff88003ee0ac08 > > R13: ffff88003ee0a800 R14: 000000002088c172 R15: ffff88003ee0add8 > > FS: 00000000434d1950(0000) GS:ffff88003f86a9c0(0000) knlGS:0000000000000000 > > CS: 0010 DS: 0018 ES: 0018 CR0: 000000008005003b > > CR2: 00007fe3e2555000 CR3: 000000003c840000 CR4: 00000000000006e0 > > DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 > > DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 > > Process kdvb-ad-1-fe--2 (pid: 2421, threadinfo ffff88003c94e000, task > > ffff88003f956890) > > Stack: > > 0000000400000000 ffff88003c94fdb0 ffff88003f956890 7fffffffffffffff > > ffff88003ee0a810 ffffffffa0004660 ffff88003c94fec0 ffff88003ee0add8 > > ffff88003ee0adb0 ffffffff805bed1d 00000000ffffffff ffff88003ee0ac00 > > Call Trace: > > [<ffffffffa0004660>] apply_frontend_param+0x40/0x3e0 [l64781] > > [<ffffffff805bed1d>] schedule_timeout+0xad/0xf0 > > [<ffffffffa005623d>] dvb_frontend_swzigzag_autotune+0xcd/0x220 [dvb_core] > > [<ffffffff805bf75c>] __down_interruptible+0x9c/0xd0 > > [<ffffffffa005748a>] dvb_frontend_swzigzag+0x19a/0x290 [dvb_core] > > [<ffffffff802578c6>] down_interruptible+0x36/0x60 > > [<ffffffffa00579a0>] dvb_frontend_thread+0x420/0x4d0 [dvb_core] > > [<ffffffff80253490>] autoremove_wake_function+0x0/0x30 > > [<ffffffffa0057580>] dvb_frontend_thread+0x0/0x4d0 [dvb_core] > > [<ffffffff802530e7>] kthread+0x47/0x80 > > [<ffffffff802354f7>] schedule_tail+0x27/0x70 > > [<ffffffff8020c9a9>] child_rip+0xa/0x11 > > [<ffffffff802530a0>] kthread+0x0/0x80 > > [<ffffffff8020c99f>] child_rip+0x0/0x11 > > Code: 97 e0 02 00 00 48 8b 58 38 48 8d 44 24 10 48 85 d2 48 c7 04 24 00 > > 00 00 00 66 c7 44 24 04 04 00 48 89 44 24 08 0f 84 af 00 00 00 <0f> b6 > > 02 66 89 04 24 8b 0e b8 05 3d 95 0c 44 8d 81 48 39 27 02 > > RIP [<ffffffffa00ddbc9>] grundig_29504_401_tuner_set_params+0x39/0x100 > > [budget] > > RSP <ffff88003c94fda0> > > ---[ end trace 03be0cf97d6717a0 ]--- > > > > _______________________________________________ > linux-dvb users mailing list > For V4L/DVB development, please use instead linux-media@xxxxxxxxxxxxxxx > linux-dvb@xxxxxxxxxxx > http://www.linuxtv.org/cgi-bin/mailman/listinfo/linux-dvb > -- To unsubscribe from this list: send the line "unsubscribe linux-media" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html