BUG: physmap modprobe & rmmod

From: Randy Dunlap
Date: Fri Apr 02 2010 - 16:42:28 EST


2.6.34-rc2 kernel:

Boot up on a common PC, then: modprobe physmap ; rmmod physmap
and bang.

[ 127.836202] calling init_mtd+0x0/0x88 [mtd] @ 3566
[ 127.841742] initcall init_mtd+0x0/0x88 [mtd] returned 0 after 514 usecs
[ 127.863465] calling physmap_init+0x0/0x49 [physmap] @ 3566
[ 127.869454] physmap-flash.0: failed to claim resource 0
[ 127.874760] initcall physmap_init+0x0/0x49 [physmap] returned 0 after 5450 usecs
[ 150.353495] BUG: unable to handle kernel NULL pointer dereference at 0000000000000008
[ 150.354142] IP: [<ffffffff8137c655>] device_pm_remove+0xcb/0xff
[ 150.354142] PGD 6d931067 PUD 6da98067 PMD 0
[ 150.354142] Oops: 0002 [#1] SMP
[ 150.354142] last sysfs file: /sys/devices/pci0000:00/0000:00:1d.1/usb3/3-1/3-1.3/devnum
[ 150.354142] CPU 1
[ 150.354142] Modules linked in: physmap(-) mtd chipreg map_funcs ipt_MASQUERADE iptable_nat nf_nat nfsd sco bridge lockd nfs_acl stp auth_rpcgss llc exportfs bnep l2cap crc16 bluetooth rfkill sunrpc ipt_REJECT nf_conntrack_ipv4 nf_defrag_ipv4 iptable_filter ip_tables ip6t_REJECT xt_tcpudp nf_conntrack_ipv6 xt_state nf_conntrack ip6table_filter ip6_tables x_tables ipv6 p4_clockmod freq_table speedstep_lib dm_mirror dm_region_hash dm_log dm_multipath scsi_dh dm_mod kvm uinput snd_intel8x0 joydev snd_ac97_codec ac97_bus snd_seq snd_seq_device usbhid snd_pcm snd_timer led_class snd psmouse iTCO_wdt i2c_i801 rtc_cmos iTCO_vendor_support evdev ppdev parport_pc serio_raw parport sg rtc_core i2c_core rtc_lib pcspkr soundcore snd_page_alloc rng_core button thermal intel_agp thermal_sys agpgart hwmon sr_mod cdrom dcdbas ata_generic pata_acpi ata_piix libata ide_pci_generic ide_core sd_mod scsi_mod crc_t10dif ext3 jbd mbcache uhci_hcd ohci_hcd ssb mmc_core pcmcia pcmcia_core ehci_hcd!
usbcore nls_base [last unloaded: processor]
[ 150.354142]
[ 150.354142] Pid: 3575, comm: rmmod Not tainted 2.6.34-rc2 #2 0HH807/OptiPlex GX620
[ 150.354142] RIP: 0010:[<ffffffff8137c655>] [<ffffffff8137c655>] device_pm_remove+0xcb/0xff
[ 150.354142] RSP: 0018:ffff88006d96de48 EFLAGS: 00010202
[ 150.354142] RAX: ffffffffa02f8960 RBX: ffffffffa02f8880 RCX: 0000000000000000
[ 150.354142] RDX: 0000000000000000 RSI: ffffffff81ab6940 RDI: ffffffff81ab6940
[ 150.354142] RBP: ffff88006d96de58 R08: 0000000000000001 R09: 0000000000000000
[ 150.354142] R10: ffffffff81ab69b0 R11: 0000000000000000 R12: ffffffff81ab5b00
[ 150.354142] R13: 00007ffff41a5f60 R14: 0000000000000000 R15: 0000000000000001
[ 150.354142] FS: 00007f05a3e8c6f0(0000) GS:ffff880005600000(0000) knlGS:0000000000000000
[ 150.354142] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b
[ 150.354142] CR2: 0000000000000008 CR3: 000000007b21d000 CR4: 00000000000006e0
[ 150.354142] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 150.354142] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 150.354142] Process rmmod (pid: 3575, threadinfo ffff88006d96c000, task ffff88006daa8000)
[ 150.354142] Stack:
[ 150.354142] ffff88006d96de58 ffffffffa02f8880 ffff88006d96de88 ffffffff8136f54f
[ 150.354142] <0> 0000000000000000 0000000000000000 ffffffffa02f8870 00007ffff41a5f60
[ 150.354142] <0> ffff88006d96dea8 ffffffff813765b5 ffffffffa02f8870 0000000000000000
[ 150.354142] Call Trace:
[ 150.354142] [<ffffffff8136f54f>] device_del+0x59/0x24e
[ 150.354142] [<ffffffff813765b5>] platform_device_del+0x2d/0x89
[ 150.354142] [<ffffffff81376dbf>] platform_device_unregister+0x1d/0x37
[ 150.354142] [<ffffffffa02f8604>] physmap_exit+0x1c/0x38 [physmap]
[ 150.354142] [<ffffffff810b38f2>] sys_delete_module+0x2cd/0x391
[ 150.354142] [<ffffffff814d24a7>] ? lockdep_sys_exit_thunk+0x35/0x67
[ 150.354142] [<ffffffff810dd36a>] ? audit_syscall_entry+0x172/0x1a5
[ 150.354142] [<ffffffff8100c6f2>] system_call_fastpath+0x16/0x1b
[ 150.354142] Code: 33 59 01 e8 c4 49 15 00 48 ff 05 9f 33 59 01 48 8d 83 e0 00 00 00 48 c7 c7 40 69 ab 81 48 8b 8b e0 00 00 00 48 8b 93 e8 00 00 00 <48> 89 51 08 48 89 0a 48 89 83 e8 00 00 00 48 89 83 e0 00 00 00
[ 150.354142] RIP [<ffffffff8137c655>] device_pm_remove+0xcb/0xff
[ 150.354142] RSP <ffff88006d96de48>
[ 150.354142] CR2: 0000000000000008
[ 150.800000] ---[ end trace 9a6eaeb4fd0889df ]---


Full kernel log attached.

---
~Randy

Attachment: physmap.log
Description: Binary data