[Kernel-packages] [Bug 1037115] Re: BUG: unable to handle kernel NULL pointer dereference at 00000000000000e0; RIP: 0010:[ffffffffa032b270] [ffffffffa032b270] srp_process_rsp+0x50/0x170 [ib_srp]

2013-08-27 Thread Bart Van Assche
I think you are looking for this patch (kernel 3.7;
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=220329916c72ee3d54ae7262b215a050f04a18fc):

commit 220329916c72ee3d54ae7262b215a050f04a18fc
Author: Bart Van Assche bvanass...@acm.org
Date:   Tue Aug 14 13:18:53 2012 +

IB/srp: Fix a race condition

Avoid a crash caused by the scmnd-scsi_done(scmnd) call in
srp_process_rsp() being invoked with scsi_done == NULL.  This can
happen if a reply is received during or after a command abort.

Reported-by: Joseph Glanville joseph.glanvi...@orionvm.com.au
Reference: http://marc.info/?l=linux-rdmam=134314367801595
Cc: sta...@vger.kernel.org
Acked-by: David Dillow dillo...@ornl.gov
Signed-off-by: Bart Van Assche bvanass...@acm.org
Signed-off-by: Roland Dreier rol...@purestorage.com


** Tags removed: needs-upstream-testing
** Tags added: kernel-fixed-upstream-v3.7

** Tags added: kernel-fixed-upstream

** Changed in: linux (Ubuntu)
   Status: Incomplete = Confirmed

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1037115

Title:
  BUG: unable to handle kernel NULL pointer dereference at
  00e0; RIP: 0010:[a032b270] [a032b270]
  srp_process_rsp+0x50/0x170 [ib_srp]

Status in “linux” package in Ubuntu:
  Confirmed

Bug description:
  How to reproduce:
  1. Install ib_srpt r4468 from the SCST trunk on a target system.
  2. On an initiator system connected via InfiniBand to the target system, 
install Ubuntu 12.04.
  3. Run the following commands on the initiator system (where the login string 
must be modified according to the target login details):

  modprobe ib_srp
  for ((i=0;i100;i++)); do echo -n $i ; echo 
'id_ext=0002c9030005f34e,ioc_guid=0002c9030005f34e,dgid=fe82c9030005f350,pkey=,service_id=0002c9030005f34e'
 /sys/class/infiniband_srp/srp-mlx4_0-1/add_target; done

  Initiator details:
  # lsb_release -rd
  Description:Ubuntu 12.04.1 LTS
  Release:12.04
  # cat /proc/version_signature
  Ubuntu 3.2.0-29.46-generic 3.2.24

  Resulting kernel messages:

  [ 2428.880007] scsi host51: ib_srp: connection closed
  [ 2428.880015] scsi host64: ib_srp: connection closed
  [ 2428.881570] scsi host107: Null scmnd for RSP w/tag 0019
  [ 2428.882380] BUG: unable to handle kernel NULL pointer dereference at 
00e0
  [ 2428.883210] IP: [a032b270] srp_process_rsp+0x50/0x170 [ib_srp]
  [ 2428.884001] PGD 1b116d067 PUD 1b45a3067 PMD 0 
  [ 2428.884001] Oops: 0002 [#1] SMP 
  [ 2428.884001] CPU 1 
  [ 2428.884001] Modules linked in: netconsole configfs ib_srp 
scsi_transport_srp scsi_tgt ib_uverbs ib_umad ib_ipoib ib_cm ib_sa mlx4_ib 
ib_mad ib_core snd_hda_codec_hdmi radeon snd_hda_codec_analog ttm snd_hda_intel 
snd_hda_codec lp drm_kms_helper psmouse drm snd_hwdep snd_pcm i2c_algo_bit 
serio_raw snd_timer snd mac_hid asus_atk0110 parport soundcore snd_page_alloc 
firewire_ohci usbhid sky2 floppy hid firewire_core crc_itu_t skge pata_marvell 
mlx4_core
  [ 2428.884001] 
  [ 2428.884001] Pid: 3488, comm: kworker/1:6 Not tainted 3.2.0-29-generic 
#46-Ubuntu System manufacturer P5Q DELUXE/P5Q DELUXE
  [ 2428.884001] RIP: 0010:[a032b270]  [a032b270] 
srp_process_rsp+0x50/0x170 [ib_srp]
  [ 2428.884001] RSP: 0018:8801bfc83d28  EFLAGS: 00010096
  [ 2428.884001] RAX: 0002 RBX: 88017cf48000 RCX: 
81e1fbb6
  [ 2428.884001] RDX:  RSI: 0086 RDI: 
0046
  [ 2428.884001] RBP: 8801bfc83d48 R08:  R09: 

  [ 2428.884001] R10: 8801b1d29000 R11:  R12: 

  [ 2428.884001] R13: 88017ce52690 R14: 88017ce532f0 R15: 

  [ 2428.884001] FS:  () GS:8801bfc8() 
knlGS:
  [ 2428.884001] CS:  0010 DS:  ES:  CR0: 8005003b
  [ 2428.884001] CR2: 00e0 CR3: 0001b26db000 CR4: 
000406e0
  [ 2428.884001] DR0:  DR1:  DR2: 

  [ 2428.884001] DR3:  DR6: 0ff0 DR7: 
0400
  [ 2428.904005] scsi host55: ib_srp: connection closed
  [ 2428.884001] Process kworker/1:6 (pid: 3488, threadinfo 88017defe000, 
task 88017de39700)
  [ 2428.884001] Stack:
  [ 2428.884001]  88017ce52690 88017d1db480 8801b1a9e000 
8801b0d4f600
  [ 2428.884001]  8801bfc83dc8 a032cd2a 0082 
0001
  [ 2428.884001]  8801bfc83dc8 a01f07c1 8801 
0082
  [ 2428.912006] scsi host74: ib_srp: connection closed
  [ 2428.884001] Call Trace:
  [ 2428.884001]  IRQ 
  [ 2428.884001]  [a032cd2a] srp_handle_recv.isra.22+0x17a/0x2c0 
[ib_srp]
  [ 2428.884001]  [a01f07c1

[Kernel-packages] [Bug 1037648] Re: Hanging I/O causes multipath not to work properly

2013-08-12 Thread Bart Van Assche
This issue was fixed via multiple patches. Most of them can be found as
follows: git log --author=Bart Van Assche
drivers/scsi/{scsi,hosts,scsi_lib}.c block

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1037648

Title:
  Hanging I/O causes multipath not to work properly

Status in “linux” package in Ubuntu:
  Incomplete

Bug description:
  After switching a few times between paths I noticed that device-mapper
  started logging the following messages:

  [ 2478.345027] device-mapper: table: 251:0: multipath: error getting device
  [ 2478.346588] device-mapper: ioctl: error adding target to table

  And in the output of echo w /proc/sysrq-trigger I noticed that
  several I/O threads were hanging:

  [ 4474.630041] Call Trace:
  [ 4474.631257]  [811712e0] ? sync_buffer+0x0/0x50
  [ 4474.631257]  [8155ed83] io_schedule+0x73/0xc0
  [ 4474.631257]  [81171325] sync_buffer+0x45/0x50
  [ 4474.631257]  [8155f3cf] __wait_on_bit+0x5f/0x90
  [ 4474.631257]  [811712e0] ? sync_buffer+0x0/0x50
  [ 4474.631257]  [8155f478] out_of_line_wait_on_bit+0x78/0x90
  [ 4474.631257]  [810864b0] ? wake_bit_function+0x0/0x40
  [ 4474.631257]  [811712d6] __wait_on_buffer+0x26/0x30
  [ 4474.631257]  [812180a8] journal_commit_transaction+0x498/0xe40
  [ 4474.631257]  [81077d4c] ? lock_timer_base+0x3c/0x70
  [ 4474.631257]  [81078819] ? try_to_del_timer_sync+0x79/0xd0
  [ 4474.631257]  [8121b95d] kjournald+0xed/0x250
  [ 4474.631257]  [81086470] ? autoremove_wake_function+0x0/0x40
  [ 4474.631257]  [8121b870] ? kjournald+0x0/0x250
  [ 4474.631257]  [810860f6] kthread+0x96/0xa0
  [ 4474.631257]  [810141aa] child_rip+0xa/0x20
  [ 4474.631257]  [81086060] ? kthread+0x0/0xa0
  [ 4474.631257]  [810141a0] ? child_rip+0x0/0x20

  The above call stack was triggered by running a fio data integrity
  test on a filesystem on top of a dm device while switching over paths.

  ProblemType: Bug
  DistroRelease: Ubuntu 10.04
  Package: linux-image-2.6.32-42-server 2.6.32-42.95
  Regression: No
  Reproducible: Yes
  ProcVersionSignature: Ubuntu 2.6.32-42.95-server 2.6.32.59+drm33.24
  Uname: Linux 2.6.32-42-server x86_64
  AlsaVersion: Advanced Linux Sound Architecture Driver Version 1.0.21.
  AplayDevices: Error: [Errno 2] No such file or directory
  Architecture: amd64
  ArecordDevices: Error: [Errno 2] No such file or directory
  AudioDevicesInUse: Error: command ['fuser', '-v', '/dev/snd/by-path', 
'/dev/snd/controlC1', '/dev/snd/hwC1D0', '/dev/snd/pcmC1D3p', 
'/dev/snd/controlC0', '/dev/snd/hwC0D0', '/dev/snd/pcmC0D0c', 
'/dev/snd/pcmC0D0p', '/dev/snd/pcmC0D1c', '/dev/snd/pcmC0D1p', 
'/dev/snd/timer'] failed with exit code 1:
  CRDA: Error: [Errno 2] No such file or directory
  Card0.Amixer.info: Error: [Errno 2] No such file or directory
  Card0.Amixer.values: Error: [Errno 2] No such file or directory
  Card1.Amixer.info: Error: [Errno 2] No such file or directory
  Card1.Amixer.values: Error: [Errno 2] No such file or directory
  Date: Thu Aug 16 17:43:43 2012
  HibernationDevice: RESUME=UUID=ed6b25d1-0e71-46ec-aae4-502e9ce1cc58
  InstallationMedia: Ubuntu-Server 10.04.4 LTS Lucid Lynx - Release amd64 
(20120214.2)
  MachineType: System manufacturer P5Q DELUXE
  ProcCmdLine: root=UUID=4c2434f2-aec2-4664-8df2-f2d2ad65b039 ro quiet
  ProcEnviron:
   SHELL=/bin/bash
   LANG=en_US.UTF-8
  RelatedPackageVersions: linux-firmware 1.34.14
  RfKill:
   
  SourcePackage: linux
  dmi.bios.date: 07/10/2009
  dmi.bios.vendor: American Megatrends Inc.
  dmi.bios.version: 2301
  dmi.board.asset.tag: To Be Filled By O.E.M.
  dmi.board.name: P5Q DELUXE
  dmi.board.vendor: ASUSTeK Computer INC.
  dmi.board.version: Rev 1.xx
  dmi.chassis.asset.tag: Asset-1234567890
  dmi.chassis.type: 3
  dmi.chassis.vendor: Chassis Manufacture
  dmi.chassis.version: Chassis Version
  dmi.modalias: 
dmi:bvnAmericanMegatrendsInc.:bvr2301:bd07/10/2009:svnSystemmanufacturer:pnP5QDELUXE:pvrSystemVersion:rvnASUSTeKComputerINC.:rnP5QDELUXE:rvrRev1.xx:cvnChassisManufacture:ct3:cvrChassisVersion:
  dmi.product.name: P5Q DELUXE
  dmi.product.version: System Version
  dmi.sys.vendor: System manufacturer

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1037648/+subscriptions

-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp


[Kernel-packages] [Bug 1037546] Re: Using asynchronous I/O can cause data corruption or a kernel oops

2013-08-12 Thread Bart Van Assche
Sorry, no idea.

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1037546

Title:
  Using asynchronous I/O can cause data corruption or a kernel oops

Status in “linux” package in Ubuntu:
  Incomplete

Bug description:
  How to reproduce:

  umount /mnt
  rm /dev/vdisk
  dd if=/dev/zero of=/dev/vdisk bs=1M count=1K
  mkfs.ext4 -F -O ^has_journal /dev/vdisk
  mount -o loop /dev/vdisk /mnt
  rm -f /mnt/test.*
  fio --verify=md5 -rw=randwrite --size=10m --bs=4k --loops=1 --iodepth=64 
--group_reporting --sync=1 --direct=1 --ioengine=libaio --directory=/mnt 
--name=test --thread --numjobs=16

  Result:
  - Sometimes fio complains about data corruption, e.g.
  verify: bad magic header 0, wanted acca at file /mnt/test.7.0 offset 
10481664, length 0
  - Sometimes a kernel oops is triggered

  [ 2022.642479] BUG: unable to handle kernel NULL pointer dereference at 
0291
  [ 2022.644043] IP: [811de96b] ext4_end_io_dio+0x6b/0xc0
  [ 2022.645596] PGD 19e790067 PUD 19e0b6067 PMD 0
  [ 2022.647131] Oops:  [#1] SMP
  [ 2022.648631] last sysfs file: 
/sys/devices/system/cpu/cpu0/cache/index0/coherency_line_size
  [ 2022.650156] CPU 0
  [ 2022.650156] Modules linked in: ib_srp scsi_tgt netconsole configfs 
rdma_ucm rdma_cm iw_cm ib_addr ib_ipoib ib_cm ib_sa ib_uverbs ib_umad mlx4_ib 
ib_mad ib_core mlx4_en snd_hda_codec_atihdmi snd_hda_codec_analog fbcon 
tileblit font bitblit softcursor
   vga16fb vgastate radeon ttm drm_kms_helper snd_hda_intel snd_hda_codec 
asus_atk0110 snd_hwdep psmouse lp snd_pcm snd_timer snd soundcore serio_raw 
mlx4_core drm i2c_algo_bit snd_page_alloc intel_agp parport ohci1394 usbhid hid 
floppy sky2 skge ieee139
  4 pata_marvell ahci
  [ 2022.650156] Pid: 4241, comm: loop0 Not tainted 2.6.32-42-server #95-Ubuntu 
P5Q DELUXE
  [ 2022.650156] RIP: 0010:[811de96b]  [811de96b] 
ext4_end_io_dio+0x6b/0xc0
  [ 2022.650156] RSP: :88019e7f3db0  EFLAGS: 00010246
  [ 2022.650156] RAX: 0001 RBX: 88019e00a000 RCX: 

  [ 2022.650156] RDX: 1000 RSI: 8801959fd7d8 RDI: 
88019e00a000
  [ 2022.650156] RBP: 88019e7f3dc0 R08:  R09: 
5600
  [ 2022.650156] R10:  R11: 6db6db6db6db6db7 R12: 
8801959fd7a8
  [ 2022.650156] R13: 1000 R14: 8801b72c0114 R15: 
88019e7f3e80
  [ 2022.650156] FS:  () GS:88000720() 
knlGS:
  [ 2022.650156] CS:  0010 DS: 0018 ES: 0018 CR0: 8005003b
  [ 2022.650156] CR2: 0291 CR3: 0001b757f000 CR4: 
000406f0
  [ 2022.650156] DR0:  DR1:  DR2: 

  [ 2022.650156] DR3:  DR6: 0ff0 DR7: 
0400
  [ 2022.650156] Process loop0 (pid: 4241, threadinfo 88019e7f2000, task 
8801b561dc00)
  [ 2022.650156] Stack:
  [ 2022.650156]   8801b5fe6800 88019e7f3df0 
8117939d
  [ 2022.650156] 0 88019e7f3df0 8801b5fe6800 8801b5fe6b24 

  [ 2022.650156] 0 88019e7f3e30 811797a7 0286 
8801b72c0158
  [ 2022.650156] Call Trace:
  [ 2022.650156]  [8117939d] dio_complete+0xbd/0xe0
  [ 2022.650156]  [811797a7] dio_bio_end_aio+0x77/0xd0
  [ 2022.650156]  [8117429d] bio_endio+0x1d/0x40
  [ 2022.650156]  [8137f5e0] loop_thread+0xe0/0x270
  [ 2022.650156]  [81086470] ? autoremove_wake_function+0x0/0x40
  [ 2022.650156]  [8137f500] ? loop_thread+0x0/0x270
  [ 2022.650156]  [810860f6] kthread+0x96/0xa0
  [ 2022.650156]  [810141aa] child_rip+0xa/0x20
  [ 2022.650156]  [81086060] ? kthread+0x0/0xa0
  [ 2022.650156]  [810141a0] ? child_rip+0x0/0x20
  [ 2022.650156] Code: 00 00 00 00 00 48 8b 1c 24 4c 8b 64 24 08 c9 c3 49 8b 44 
24 10 49 89 74 24 20 49 8d 74 24 30 49 89 54 24 28 48 8b 80 08 01 00 00 48 8b 
80 90 02 00 00 48 8b b8 50 03 00 00 e8 32 3a ea ff 49 8b
  [ 2022.650156] RIP  [811de96b] ext4_end_io_dio+0x6b/0xc0
  [ 2022.650156]  RSP 88019e7f3db0
  [ 2022.650156] CR2: 0291
  [ 2022.651252] BUG: unable to handle kernel
  [ 2022.719317] ---[ end trace b9996e8ae6b732db ]---
  --- 
  AlsaVersion: Advanced Linux Sound Architecture Driver Version 1.0.21.
  AplayDevices: Error: [Errno 2] No such file or directory
  Architecture: amd64
  ArecordDevices: Error: [Errno 2] No such file or directory
  AudioDevicesInUse: Error: command ['fuser', '-v', '/dev/snd/by-path', 
'/dev/snd/controlC1', '/dev/snd/hwC1D0', '/dev/snd/pcmC1D3p', 
'/dev/snd/controlC0', '/dev/snd/hwC0D0', '/dev/snd/pcmC0D0c', 
'/dev/snd/pcmC0D0p', '/dev/snd/pcmC0D1c', '/dev/snd/pcmC0D1p', 
'/dev/snd/timer'] failed with exit code 1:
  CRDA: Error: [Errno 2] No such file or directory
  Card0.Amixer.info: Error: [Errno 2] No such file or 

[Kernel-packages] [Bug 1037000] Re: Mellanox ConnectX-3 HCA's are not supported (MT27500 Family)

2013-08-12 Thread Bart Van Assche
I think it's this one:

commit 31dd272e8cbb32ef31a411492cc642c363bb54b9
Author: Yevgeny Petrilin yevge...@mellanox.co.il
Date:   Tue Dec 7 14:23:45 2010 +

mlx4_core: Add ConnectX-3 device IDs

...as already added to pci.ids.

Signed-off-by: Yevgeny Petrilin yevge...@mellanox.co.il
Signed-off-by: Roland Dreier rol...@purestorage.com

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1037000

Title:
  Mellanox ConnectX-3 HCA's are not supported (MT27500 Family)

Status in “linux” package in Ubuntu:
  Incomplete

Bug description:
  # lsb_release -rd
  Description:Ubuntu 10.04.4 LTS
  Release:10.04
  # apt-cache policy linux-image
  linux-image:
Installed: (none)
Candidate: 2.6.32.42.49
Version table:
   2.6.32.42.49 0
  500 http://be.archive.ubuntu.com/ubuntu/ lucid-updates/main Packages
  500 http://security.ubuntu.com/ubuntu/ lucid-security/main Packages
   2.6.32.21.22 0
  500 http://be.archive.ubuntu.com/ubuntu/ lucid/main Packages
  # lspci | grep Mellanox
  01:00.0 Network controller: Mellanox Technologies Device 1003
  # modprobe mlx4_ib
  # ls /sys/class/infiniband
  # modprobe ib_ipoib
  # ip addr show dev ib0
  Device ib0 does not exist.

  See also 
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux.git;a=commitdiff;h=31dd272e8cbb32ef31a411492cc642c363bb54b9.
  --- 
  AlsaVersion: Advanced Linux Sound Architecture Driver Version 1.0.21.
  AplayDevices: Error: [Errno 2] No such file or directory
  Architecture: amd64
  ArecordDevices: Error: [Errno 2] No such file or directory
  AudioDevicesInUse: Error: command ['fuser', '-v', '/dev/snd/by-path', 
'/dev/snd/controlC1', '/dev/snd/hwC1D0', '/dev/snd/pcmC1D3p', 
'/dev/snd/controlC0', '/dev/snd/hwC0D0', '/dev/snd/pcmC0D0c', 
'/dev/snd/pcmC0D0p', '/dev/snd/pcmC0D1c', '/dev/snd/pcmC0D1p', 
'/dev/snd/timer'] failed with exit code 1:
  CRDA: Error: [Errno 2] No such file or directory
  Card0.Amixer.info: Error: [Errno 2] No such file or directory
  Card0.Amixer.values: Error: [Errno 2] No such file or directory
  Card1.Amixer.info: Error: [Errno 2] No such file or directory
  Card1.Amixer.values: Error: [Errno 2] No such file or directory
  DistroRelease: Ubuntu 10.04
  HibernationDevice: RESUME=UUID=ed6b25d1-0e71-46ec-aae4-502e9ce1cc58
  InstallationMedia: Ubuntu-Server 10.04.4 LTS Lucid Lynx - Release amd64 
(20120214.2)
  MachineType: System manufacturer P5Q DELUXE
  Package: linux (not installed)
  ProcCmdLine: root=UUID=4c2434f2-aec2-4664-8df2-f2d2ad65b039 ro quiet
  ProcEnviron:
   LANG=en_US.UTF-8
   SHELL=/bin/bash
  ProcVersionSignature: Ubuntu 2.6.32-42.95-server 2.6.32.59+drm33.24
  Regression: No
  RelatedPackageVersions: linux-firmware 1.34.14
  Reproducible: Yes
  RfKill:
   
  Tags: lucid networking needs-upstream-testing
  Uname: Linux 2.6.32-42-server x86_64
  UserGroups:
   
  dmi.bios.date: 07/10/2009
  dmi.bios.vendor: American Megatrends Inc.
  dmi.bios.version: 2301
  dmi.board.asset.tag: To Be Filled By O.E.M.
  dmi.board.name: P5Q DELUXE
  dmi.board.vendor: ASUSTeK Computer INC.
  dmi.board.version: Rev 1.xx
  dmi.chassis.asset.tag: Asset-1234567890
  dmi.chassis.type: 3
  dmi.chassis.vendor: Chassis Manufacture
  dmi.chassis.version: Chassis Version
  dmi.modalias: 
dmi:bvnAmericanMegatrendsInc.:bvr2301:bd07/10/2009:svnSystemmanufacturer:pnP5QDELUXE:pvrSystemVersion:rvnASUSTeKComputerINC.:rnP5QDELUXE:rvrRev1.xx:cvnChassisManufacture:ct3:cvrChassisVersion:
  dmi.product.name: P5Q DELUXE
  dmi.product.version: System Version
  dmi.sys.vendor: System manufacturer

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1037000/+subscriptions

-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp


[Kernel-packages] [Bug 1094838] Re: 1002:68e0 [Acer Aspire 7551] BUG: unable to handle kernel NULL pointer dereference at 00000000000001d0; RIP: 0010:[ffffffffa02a054f] [ffffffffa02a054f] _ZN17Seg

2013-08-07 Thread Bart Van Assche
Since I reported this bug I have switched from the fglrx driver to the
in-tree Radeon driver because the fglrx driver was causing too much
trouble. I have also switched from GNOME 3 to xfce to get rid of Compiz.
After these two changes Ubuntu is running reliably on my laptop.

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1094838

Title:
  1002:68e0 [Acer Aspire 7551] BUG: unable to handle kernel NULL pointer
  dereference at 01d0; RIP: 0010:[a02a054f]
  [a02a054f]
  _ZN17SegmentMapManager13deleteMappingEP9CMMClient+0x3f/0x170 [fglrx]

Status in “linux” package in Ubuntu:
  Incomplete

Bug description:
  From /var/log/syslog:

  [ 1099.597490] [fglrx] IRQ 46 Disabled
  [ 1100.610392] BUG: unable to handle kernel NULL pointer dereference at 
01d0
  [ 1100.610545] IP: [a02a054f] 
_ZN17SegmentMapManager13deleteMappingEP9CMMClient+0x3f/0x170 [fglrx]
  [ 1100.610850] PGD 0
  [ 1100.610894] Oops:  [#1] SMP
  [ 1100.610961] CPU 0
  [ 1100.610996] Modules linked in: ip6table_filter ip6_tables ebtable_nat 
ebtables ipt_MASQUERADE iptable_nat nf_nat nf_conntrack_ipv4 nf_defrag_ipv4 
xt_state nf_conntrack ipt_REJECT xt_CHECKSUM iptable_mangle xt_tcpudp 
iptable_filter ip_tables x_tables bridge stp joydev kvm_amd kvm rfcomm 
parport_pc bnep ppdev bluetooth dm_crypt binfmt_misc snd_hda_codec_hdmi 
snd_hda_codec_realtek snd_hda_intel snd_seq_midi snd_hda_codec snd_hwdep 
snd_pcm snd_rawmidi snd_seq_midi_event fglrx(P) snd_seq arc4 sp5100_tco 
snd_timer snd_seq_device uvcvideo videodev snd psmouse v4l2_compat_ioctl32 
soundcore edac_core serio_raw snd_page_alloc i2c_piix4 edac_mce_amd k10temp 
ath9k mac80211 ath9k_common ath9k_hw ath mac_hid cfg80211 lp parport vesafb 
usbhid hid pata_atiixp tg3 video wmi
  [ 1100.612011]
  [ 1100.612011] Pid: 4740, comm: Xorg Tainted: P   O 3.2.0-35-generic 
#55-Ubuntu AcerAspire 7551/Aspire 7551
  [ 1100.612011] RIP: 0010:[a02a054f]  [a02a054f] 
_ZN17SegmentMapManager13deleteMappingEP9CMMClient+0x3f/0x170 [fglrx]
  [ 1100.612011] RSP: 0018:8800a270fb78  EFLAGS: 00010296
  [ 1100.612011] RAX:  RBX: c90002116e20 RCX: 

  [ 1100.612011] RDX: c90002116e20 RSI: c9000219a6c0 RDI: 
0150
  [ 1100.612011] RBP: c9000219a6c0 R08: 0a6d R09: 
c9000210e860
  [ 1100.612011] R10: a0344030 R11:  R12: 
8800a270fb98
  [ 1100.612011] R13: 01d0 R14: c9000219a6c0 R15: 
0150
  [ 1100.612011] FS:  7f287368a880() GS:88013fc0() 
knlGS:
  [ 1100.612011] CS:  0010 DS:  ES:  CR0: 80050033
  [ 1100.612011] CR2: 01d0 CR3: 01c05000 CR4: 
06f0
  [ 1100.612011] DR0:  DR1:  DR2: 

  [ 1100.612011] DR3:  DR6: 0ff0 DR7: 
0400
  [ 1100.612011] Process Xorg (pid: 4740, threadinfo 8800a270e000, task 
8800a26e5c00)
  [ 1100.612011] Stack:
  [ 1100.612011]    c9000210e9f0 

  [ 1100.612011]    c9000210e820 
c90001930fa0
  [ 1100.612011]  01d0 c900019adea0 88011e278068 
c90002116e20
  [ 1100.612011] Call Trace:
  [ 1100.612011]  [a02a2db0] ? 
_ZN3MSF9free_surfEP9CMMDriverP10CMMSurface+0x50/0xe0 [fglrx]
  [ 1100.612011]  [a02c9fa8] ? 
_ZN9CMMClient17freeOwnedSurfacesEP9CMMDriver+0x88/0xe0 [fglrx]
  [ 1100.612011]  [a02a4cca] ? 
_ZN10QS_PRIVATE16unRegisterClientEj+0xea/0x120 [fglrx]
  [ 1100.612011]  [a02b5a2f] ? 
_ZN21CMMClientManager_CORE13destroyClientEP9CMMDriverP9CMMClient+0x2f/0x60 
[fglrx]
  [ 1100.612011]  [a02a1bdc] ? _ZN3CMM15releaseChildrenEv+0x14c/0x320 
[fglrx]
  [ 1100.612011]  [a029cdc9] ? CMMQS_Uninitialize+0x9/0x20 [fglrx]
  [ 1100.612011]  [a024e36e] ? firegl_cmmqs_deinit+0x4e/0x140 [fglrx]
  [ 1100.612011]  [a022ae03] ? firegl_takedown+0x853/0x8a0 [fglrx]
  [ 1100.612011]  [a03123b2] ? amdPcsEngine_InitDatabase+0x12/0x20 
[fglrx]
  [ 1100.612011]  [a0229ea4] ? firegl_release+0x134/0x1d0 [fglrx]
  [ 1100.612011]  [a021a9e1] ? ip_firegl_release+0x11/0x20 [fglrx]
  [ 1100.612011]  [8117a7fe] ? __fput+0xbe/0x210
  [ 1100.612011]  [8117a975] ? fput+0x25/0x30
  [ 1100.612011]  [81177516] ? filp_close+0x66/0x90
  [ 1100.612011]  [8106a7ea] ? put_files_struct.part.10+0x7a/0xe0
  [ 1100.612011]  [8106c208] ? put_files_struct+0x18/0x20
  [ 1100.612011]  [8106c2d4] ? exit_files+0x54/0x70
  [ 1100.612011]  [8106c7b5] ? do_exit+0x195/0x450
  [ 1100.612011]  [8106cc14] ? do_group_exit+0x44/0xa0
  [ 1100.612011]  [8106cc87] ?