Ubuntu
linux package

BUG: unable to handle kernel NULL pointer dereference at 00000000000000f0

Bug #738876 reported by Antoine Billiau on 2011-03-20

This bug report is a duplicate of: Bug #922906: Kernel Oops - BUG: unable to handle kernel NULL pointer dereference at 0000009c; EIP is at __ticket_spin_lock+0x8/0x30. Edit Remove

This bug affects 1 person

Affects		Status	Importance	Assigned to	Milestone
	Linux	In Progress	Medium	linux-kernel-bugs #22602
	linux (Ubuntu)	Confirmed	Medium	Unassigned

Bug Description

Ubuntu crashes when viewing a video file (SD resolution).

System: Ubuntu Natty (development branch)

Happened after several hours using the new updated kernel from repos.

uname -a: Linux ubuntu 2.6.38-7-generic #36-Ubuntu SMP Fri Mar 18 23:18:58 UTC 2011 x86_64 x86_64 x86_64 GNU/Linux
kernel version: Ubuntu 2.6.38-7.36-generic 2.6.38

ProblemType: KernelOops
DistroRelease: Ubuntu 11.04
Package: linux-image-2.6.38-7-generic 2.6.38-7.36
Regression: Yes
Reproducible: No
ProcVersionSignature: Ubuntu 2.6.38-7.36-generic 2.6.38
Uname: Linux 2.6.38-7-generic x86_64
AlsaVersion: Advanced Linux Sound Architecture Driver Version 1.0.23.
Annotation: Your system might become unstable now and might need to be restarted.
Architecture: amd64
ArecordDevices:
**** List of CAPTURE Hardware Devices ****
card 0: Intel [HDA Intel], device 0: CONEXANT Analog [CONEXANT Analog]
   Subdevices: 1/1
   Subdevice #0: subdevice #0
AudioDevicesInUse:
USER PID ACCESS COMMAND
/dev/snd/controlC0: antoine 2091 F.... pulseaudio
/dev/snd/seq: timidity 1569 F.... timidity
CRDA: Error: [Errno 2] Aucun fichier ou dossier de ce type
Card0.Amixer.info:
Card hw:0 'Intel'/'HDA Intel at 0xf8400000 irq 48'
   Mixer name : 'Conexant CX20561 (Hermosa)'
   Components : 'HDA:14f15051,1179ff57,00100000'
   Controls : 14
   Simple ctrls : 7
Card1.Amixer.info:
Card hw:1 'HDMI'/'HDA ATI HDMI at 0xcfeec000 irq 49'
   Mixer name : 'ATI R6xx HDMI'
   Components : 'HDA:1002aa01,00aa0100,00100100'
   Controls : 4
   Simple ctrls : 1
Card1.Amixer.values:
Simple mixer control 'IEC958',0
   Capabilities: pswitch pswitch-joined penum
   Playback channels: Mono
   Mono: Playback [on]
Date: Sun Mar 20 20:09:47 2011
Failure: oops
Frequency: This has only happened once.
InstallationMedia: Ubuntu 10.04.1 LTS "Lucid Lynx" - Release amd64 (20100816.1)
MachineType: TOSHIBA Satellite P300
ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-2.6.38-7-generic root=UUID=0A3EB8EA3EB8D045 loop=/hostname/disks/root.disk ro quiet splash
RelatedPackageVersions:
linux-restricted-modules-2.6.38-7-generic N/A
linux-backports-modules-2.6.38-7-generic N/A
linux-firmware 1.49
RfKill:
0: phy0: Wireless LAN
  Soft blocked: no
  Hard blocked: yes
SourcePackage: linux
Title: BUG: unable to handle kernel NULL pointer dereference at 00000000000000f0
UpgradeStatus: Upgraded to natty on 2011-02-23 (24 days ago)
dmi.bios.date: 04/07/2009
dmi.bios.vendor: TOSHIBA
dmi.bios.version: V3.40
dmi.board.name: Satellite P300
dmi.board.vendor: TOSHIBA
dmi.board.version: Not Applicable
dmi.chassis.asset.tag: No Asset Tag
dmi.chassis.type: 10
dmi.chassis.vendor: TOSHIBA
dmi.chassis.version: N/A
dmi.modalias: dmi:bvnTOSHIBA:bvrV3.40:bd04/07/2009:svnTOSHIBA:pnSatelliteP300:pvrPSPCCE-067006FR:rvnTOSHIBA:rnSatelliteP300:rvrNotApplicable:cvnTOSHIBA:ct10:cvrN/A:
dmi.product.name: Satellite P300
dmi.product.version: PSPCCE-067006FR
dmi.sys.vendor: TOSHIBA

Tags:

Revision history for this message

Antoine Billiau (ouglouck) wrote on 2011-03-20:

Lspci Edit (33.7 KiB, text/plain)
AcpiTables.txt Edit (215.8 KiB, text/plain; charset="utf-8")
AlsaDevices.txt Edit (645 bytes, text/plain; charset="utf-8")
AplayDevices.txt Edit (383 bytes, text/plain; charset="utf-8")
BootDmesg.txt Edit (65.8 KiB, text/plain; charset="utf-8")
Card0.Amixer.values.txt Edit (1.4 KiB, text/plain; charset="utf-8")
Card0.Codecs.codec.0.txt Edit (6.6 KiB, text/plain; charset="utf-8")
Card1.Codecs.codec.0.txt Edit (1.0 KiB, text/plain; charset="utf-8")
CurrentDmesg.txt Edit (532 bytes, text/plain; charset="utf-8")
Dependencies.txt Edit (1.9 KiB, text/plain; charset="utf-8")
IwConfig.txt Edit (311 bytes, text/plain; charset="utf-8")
Lspci.txt Edit (33.7 KiB, text/plain; charset="utf-8")
Lsusb.txt Edit (1020 bytes, text/plain; charset="utf-8")
OopsText.txt Edit (3.0 KiB, text/plain; charset="utf-8")
PciMultimedia.txt Edit (4.3 KiB, text/plain; charset="utf-8")
ProcCpuinfo.txt Edit (1.5 KiB, text/plain; charset="utf-8")
ProcCpuinfo_.txt Edit (1.5 KiB, text/plain; charset="utf-8")
ProcInterrupts.txt Edit (1.6 KiB, text/plain; charset="utf-8")
ProcModules.txt Edit (4.3 KiB, text/plain; charset="utf-8")
UdevDb.txt Edit (131.1 KiB, text/plain; charset="utf-8")
UdevLog.txt Edit (302.3 KiB, text/plain; charset="utf-8")
WifiSyslog.txt Edit (231.8 KiB, text/plain; charset="utf-8")

Philip Muškovac (yofel) on 2011-03-20

affects:

ubuntu → linux (Ubuntu)

Bug Watch Updater (bug-watch-updater) on 2011-03-22

Changed in linux:
importance:	Unknown → Medium
status:	Unknown → In Progress

Brad Figg (brad-figg) on 2011-05-04

Changed in linux (Ubuntu):
status:	New → Confirmed

Revision history for this message

Hunk (enrique-garciasimon) wrote on 2011-07-24:

Download full text (3.9 KiB)

Similar error after umount an external usb drive, having 3 of them and an SD card.
This is the first time I can see the log and copy it (the crash just affected the nautilus window); since Natty upgrade I have experienced several crashes but with just a text screen with no option but reboot.

Output from dmesg. I don't know exactly the information to submit, but I hope this log is related to this bug

[ 1300.540119] usb 2-8: USB disconnect, address 6
[ 3026.454520] VFS: Busy inodes after unmount of sde. Self-destruct in 5 seconds. Have a nice day...
[ 3026.475523] BUG: unable to handle kernel NULL pointer dereference at 00000000000000f0
[ 3026.479072] IP: [<ffffffff81038bd9>] __ticket_spin_lock+0x9/0x20
[ 3026.480008] PGD 11c80e067 PUD 11c80f067 PMD 0
[ 3026.480008] Oops: 0002 [#1] SMP
[ 3026.480008] last sysfs file: /sys/devices/pci0000:00/0000:00:1a.7/usb1/1-4/speed
[ 3026.480008] CPU 0
[ 3026.480008] Modules linked in: nls_iso8859_1 nls_cp437 vfat fat cryptd aes_x86_64 aes_generic binfmt_misc vboxnetadp vboxnetflt vboxdrv parport_pc ppdev snd_hda_codec_hdmi snd_hda_codec_realtek joydev arc4 snd_hda_intel iwlagn snd_hda_codec snd_hwdep snd_pcm i915 snd_seq_midi snd_rawmidi iwlcore snd_seq_midi_event mac80211 snd_seq uvcvideo videodev acer_wmi v4l2_compat_ioctl32 drm_kms_helper snd_timer acpi_igd_opregion(P) snd_seq_device sparse_keymap cfg80211 drm psmouse snd serio_raw i2c_algo_bit soundcore video snd_page_alloc lp parport usb_storage uas ahci atl1c libahci
[ 3026.480008]
[ 3026.480008] Pid: 1609, comm: nautilus Tainted: P I 2.6.38-10-generic #46+kamal~mjgbacklight4-Ubuntu Acer Aspire 5810T/Aspire 5810T
[ 3026.480008] RIP: 0010:[<ffffffff81038bd9>] [<ffffffff81038bd9>] __ticket_spin_lock+0x9/0x20
[ 3026.480008] RSP: 0018:ffff88011c8fde28 EFLAGS: 00010206
[ 3026.480008] RAX: 0000000000010000 RBX: 00000000000000f0 RCX: ffff88010fa410c0
[ 3026.480008] RDX: 0000000000000004 RSI: ffff8800aaa1a2f8 RDI: 00000000000000f0
[ 3026.480008] RBP: ffff88011c8fde28 R08: 1038000000000000 R09: 00aaa1a3881c0000
[ 3026.480008] R10: ff375e87204ce207 R11: 0000000000000001 R12: ffff8800aaa1a340
[ 3026.480008] R13: ffff880132a5f864 R14: ffff8800b464f9b0 R15: ffff8800aaa1a340
[ 3026.480008] FS: 00007f66310679c0(0000) GS:ffff8800bb600000(0000) knlGS:0000000000000000
[ 3026.480008] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 3026.480008] CR2: 00000000000000f0 CR3: 000000012522f000 CR4: 00000000000406f0
[ 3026.480008] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 3026.480008] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 3026.480008] Process nautilus (pid: 1609, threadinfo ffff88011c8fc000, task ffff88011c8dc4a0)
[ 3026.480008] Stack:
[ 3026.480008] ffff88011c8fde38 ffffffff815c31be ffff88011c8fde58 ffffffffa059fe63
[ 3026.480008] ffff8800aaa1a340 ffffffff81cdb040 ffff88011c8fde78 ffffffffa059ff0e
[ 3026.480008] 7fffffffffffffff ffff8800aaa1a340 ffff88011c8fde98 ffffffff8117dbd4
[ 3026.480008] Call Trace:
[ 3026.480008] [<ffffffff815c31be>] _raw_spin_lock+0xe/0x20
[ 3026.480008] [<ffffffffa059fe63>] fat_detach+0x33/0x80 [fat]
[ 3026.480008] [<ffffffffa059ff0e>] fat_evict_inode+0x5e/0x70 [fat]
...

Output from dmesg. I don't know exactly the information to submit, but I hope this log is related to this bug

[ 1300.540119] usb 2-8: USB disconnect, address 6
[ 3026.454520] VFS: Busy inodes after unmount of sde. Self-destruct in 5 seconds.  Have a nice day...
[ 3026.475523] BUG: unable to handle kernel NULL pointer dereference at 00000000000000f0
[ 3026.479072] IP: [<ffffffff81038bd9>] __ticket_spin_lock+0x9/0x20
[ 3026.480008] PGD 11c80e067 PUD 11c80f067 PMD 0 
[ 3026.480008] Oops: 0002 [#1] SMP 
[ 3026.480008] last sysfs file: /sys/devices/pci0000:00/0000:00:1a.7/usb1/1-4/speed
[ 3026.480008] CPU 0 
[ 3026.480008] Modules linked in: nls_iso8859_1 nls_cp437 vfat fat cryptd aes_x86_64 aes_generic binfmt_misc vboxnetadp vboxnetflt vboxdrv parport_pc ppdev snd_hda_codec_hdmi snd_hda_codec_realtek joydev arc4 snd_hda_intel iwlagn snd_hda_codec snd_hwdep snd_pcm i915 snd_seq_midi snd_rawmidi iwlcore snd_seq_midi_event mac80211 snd_seq uvcvideo videodev acer_wmi v4l2_compat_ioctl32 drm_kms_helper snd_timer acpi_igd_opregion(P) snd_seq_device sparse_keymap cfg80211 drm psmouse snd serio_raw i2c_algo_bit soundcore video snd_page_alloc lp parport usb_storage uas ahci atl1c libahci
[ 3026.480008] 
[ 3026.480008] Pid: 1609, comm: nautilus Tainted: P          I 2.6.38-10-generic #46+kamal~mjgbacklight4-Ubuntu Acer Aspire 5810T/Aspire 5810T
[ 3026.480008] RIP: 0010:[<ffffffff81038bd9>]  [<ffffffff81038bd9>] __ticket_spin_lock+0x9/0x20
[ 3026.480008] RSP: 0018:ffff88011c8fde28  EFLAGS: 00010206
[ 3026.480008] RAX: 0000000000010000 RBX: 00000000000000f0 RCX: ffff88010fa410c0
[ 3026.480008] RDX: 0000000000000004 RSI: ffff8800aaa1a2f8 RDI: 00000000000000f0
[ 3026.480008] RBP: ffff88011c8fde28 R08: 1038000000000000 R09: 00aaa1a3881c0000
[ 3026.480008] R10: ff375e87204ce207 R11: 0000000000000001 R12: ffff8800aaa1a340
[ 3026.480008] R13: ffff880132a5f864 R14: ffff8800b464f9b0 R15: ffff8800aaa1a340
[ 3026.480008] FS:  00007f66310679c0(0000) GS:ffff8800bb600000(0000) knlGS:0000000000000000
[ 3026.480008] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 3026.480008] CR2: 00000000000000f0 CR3: 000000012522f000 CR4: 00000000000406f0
[ 3026.480008] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 3026.480008] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 3026.480008] Process nautilus (pid: 1609, threadinfo ffff88011c8fc000, task ffff88011c8dc4a0)
[ 3026.480008] Stack:
[ 3026.480008]  ffff88011c8fde38 ffffffff815c31be ffff88011c8fde58 ffffffffa059fe63
[ 3026.480008]  ffff8800aaa1a340 ffffffff81cdb040 ffff88011c8fde78 ffffffffa059ff0e
[ 3026.480008]  7fffffffffffffff ffff8800aaa1a340 ffff88011c8fde98 ffffffff8117dbd4
[ 3026.480008] Call Trace:
[ 3026.480008]  [<ffffffff815c31be>] _raw_spin_lock+0xe/0x20
[ 3026.480008]  [<ffffffffa059fe63>] fat_detach+0x33/0x80 [fat]
[ 3026.480008]  [<ffffffffa059ff0e>] fat_evict_inode+0x5e/0x70 [fat]
[ 3026.480008]  [<ffffffff8117dbd4>] evict+0x24/0xc0
[ 3026.480008]  [<ffffffff8117e8c7>] iput_final+0x187/0x270
[ 3026.480008]  [<ffffffff8117e9eb>] iput+0x3b/0x50
[ 3026.480008]  [<ffffffff8119f818>] fsnotify_destroy_mark+0x178/0x190
[ 3026.480008]  [<ffffffff811a178a>] sys_inotify_rm_watch+0x7a/0xd0
[ 3026.480008]  [<ffffffff8100c002>] system_call_fastpath+0x16/0x1b
[ 3026.480008] Code: 00 00 48 c7 c2 de 89 03 81 48 c7 c1 e1 89 03 81 e9 dd fe ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 55 b8 00 00 01 00 48 89 e5 <3e> 0f c1 07 0f b7 d0 c1 e8 10 39 c2 74 07 f3 90 0f b7 17 eb f5 
[ 3026.480008] RIP  [<ffffffff81038bd9>] __ticket_spin_lock+0x9/0x20
[ 3026.480008]  RSP <ffff88011c8fde28>
[ 3026.480008] CR2: 00000000000000f0
[ 3026.588527] ---[ end trace a7919e7f17c0a727 ]---

Joseph Salisbury (jsalisbury) on 2012-03-06