kernel oops in ipaq module on accessing ttyUSB0

[Chris Cureau]

To reproduce:

1. Plug a T-Mobile MDA (HTC Wizard) into the USB port. dmesg output:

[ 566.316000] usbcore: registered new interface driver usbserial
[ 566.316000] drivers/usb/serial/usb-serial.c: USB Serial support registered for generic
[ 566.404000] usbcore: registered new interface driver usbserial_generic
[ 566.404000] drivers/usb/serial/usb-serial.c: USB Serial Driver core
[ 566.408000] drivers/usb/serial/usb-serial.c: USB Serial support registered for PocketPC PDA
[ 566.408000] drivers/usb/serial/ipaq.c: USB PocketPC PDA driver v0.5
[ 566.408000] ipaq 3-1:1.0: PocketPC PDA converter detected
[ 566.412000] usb 3-1: PocketPC PDA converter now attached to ttyUSB0
[ 566.412000] ipaq 3-1:1.1: PocketPC PDA converter detected
[ 566.412000] usb 3-1: PocketPC PDA converter now attached to ttyUSB1
[ 566.412000] usbcore: registered new interface driver ipaq

2. Attempt to access /dev/ttyUSB0. dmesg output:

[ 1753.524000] BUG: unable to handle kernel NULL pointer dereference at virtual address 00000030
[ 1753.524000] printing eip:
[ 1753.524000] f8f13ba4
[ 1753.524000] *pde = 00000000
[ 1753.524000] Oops: 0002 [#1]
[ 1753.524000] SMP
[ 1753.524000] Modules linked in: ppp_generic slhc ipaq usbserial vmnet(P) vmmon(P) binfmt_misc rfcomm l2cap bluetooth ppdev tun i915 drm sit speedstep_centrino cpufreq_userspace cpufreq_stats cpufreq_powersave cpufreq_ondemand freq_table cpufreq_conservative tc1100_wmi pcc_acpi dev_acpi sony_acpi video sbs i2c_ec i2c_core dock button battery container ac asus_acpi backlight ipv6 lp snd_intel8x0 snd_ac97_codec ac97_bus snd_pcm_oss snd_mixer_oss snd_pcm pcmcia snd_seq_dummy snd_seq_oss snd_seq_midi snd_rawmidi snd_seq_midi_event snd_seq snd_timer snd_seq_device pcspkr bcm43xx iTCO_wdt iTCO_vendor_support parport_pc parport psmouse serio_raw ieee80211softmac ieee80211 ieee80211_crypt yenta_socket rsrc_nonstatic snd soundcore snd_page_alloc pcmcia_core intel_agp shpchp pci_hotplug af_packet agpgart tsdev evdev ext3 jbd mbcache sg sr_mod cdrom sd_mod ata_piix ahci ata_generic libata scsi_mod tg3 generic ehci_hcd uhci_hcd usbcore thermal processor fan fbcon tileblit font bitblit softcursor vesafb capability commoncap
[ 1753.524000] CPU: 0
[ 1753.524000] EIP: 0060:[<f8f13ba4>] Tainted: P VLI
[ 1753.524000] EFLAGS: 00210286 (2.6.20-13-generic #2)
[ 1753.524000] EIP is at ipaq_open+0x1e4/0x340 [ipaq]
[ 1753.524000] eax: f7edf000 ebx: 00000100 ecx: dfe5ca00 edx: 00000000
[ 1753.524000] esi: f32816c0 edi: f366c314 ebp: f366c300 esp: f3127e60
[ 1753.524000] ds: 007b es: 007b ss: 0068
[ 1753.524000] Process pppd (pid: 6700, ti=f3126000 task=f3179030 task.ti=f3126000)
[ 1753.524000] Stack: f369ac00 f326abc0 00200292 c0234187 00000000 c0234ddb dfe5ca00 f363dc00
[ 1753.524000] 00000064 dfe5ca00 f363dc00 f369ac00 dfe5ca0c f8e251dc c0234044 f326ab80
[ 1753.524000] f36a57f8 f3222a80 ffffffed 00000000 0bc00000 f3222a80 00000000 c0237bb7
[ 1753.524000] Call Trace:
[ 1753.524000] [<c0234187>] tty_ldisc_enable+0x27/0x30
[ 1753.524000] [<c0234ddb>] init_dev+0x24b/0x5e0
[ 1753.524000] [<f8e251dc>] serial_open+0x10c/0x160 [usbserial]
[ 1753.524000] [<c0234044>] check_tty_count+0x14/0xb0
[ 1753.524000] [<c0237bb7>] tty_open+0x147/0x2f0
[ 1753.524000] [<c0237a70>] tty_open+0x0/0x2f0
[ 1753.524000] [<c01792d8>] chrdev_open+0xa8/0x170
[ 1753.524000] [<c0179230>] chrdev_open+0x0/0x170
[ 1753.524000] [<c0174b2a>] __dentry_open+0xba/0x1c0
[ 1753.524000] [<c0174ce5>] nameidata_to_filp+0x35/0x40
[ 1753.524000] [<c0174d40>] do_filp_open+0x50/0x60
[ 1753.524000] [<c0174d9e>] do_sys_open+0x4e/0xf0
[ 1753.524000] [<c0174e7c>] sys_open+0x1c/0x20
[ 1753.524000] [<c01031f0>] sysenter_past_esp+0x69/0xa9
[ 1753.524000] =======================
[ 1753.524000] Code: ff a1 98 84 3a c0 ba d0 00 00 00 e8 87 ee 25 c7 8b 4c 24 18 85 c0 89 41 4c 0f 84 26 01 00 00 8b 44 24 18 89 c1 8b 50 44 8b 40 3c <89> 42 30 8b 41 4c 8b 51 54 89 42 30 8b 41 44 c7 40 38 00 10 00
[ 1753.524000] EIP: [<f8f13ba4>] ipaq_open+0x1e4/0x340 [ipaq] SS:ESP 0068:f3127e60
[ 1753.524000] ttyS2: LSR safety check engaged!

ProblemType: Bug
Architecture: i386
Date: Thu Mar 29 13:07:49 2007
DistroRelease: Ubuntu 7.04
Uname: Linux chris-laptop 2.6.20-13-generic #2 SMP Sun Mar 25 00:21:25 UTC 2007 i686 GNU/Linux

[Brian Murray (brian-murray)]

Thanks for taking the time to report this bug and helping to make Ubuntu better. Could you please also add the output of 'lsusb' with the card inserted? Thanks in advance.

[Chris Cureau (ccureau-bellsouth)]

Thanks for the quick response, Brian. :-) I am happy to provide whatever is necessary...

[gianluca (antonelli)]

I'm not sure my kernel oops belong to this bug, in any case I'm attaching my info and subscribed to this bug...

I have a 8GB digital player Oregon Scientific model MP680.

From winxp it is seen as a simple usb hard-drive.

I thought it was the same under kubuntu 7.04 but it is not.

I'm attaching the files as output of dmesg and lsusb -v.

btw, I have also tried to plug the device on the laptop of a friend with kubuntu 7.10 installed and it failed but in this case I do not have the corresponding output.

best,
g.

[gianluca (antonelli)]

and this is the other file...

[Jean-Christophe Dubois (jcd)]

This bug is similar to bug 138583 except for the ubuntu version involved. Bug 138583 is happening on ubuntu 7.10 [Gibon] running kernel 2.6.22.

Is somebody making any progress on this?

[Leann Ogasawara (leannogasawara)]

Hi Chris,

The Hardy Heron Alpha series is currently under development and contains an updated version of the kernel. It would be helpful if you could test the latest Hardy Alpha release: http://www.ubuntu.com/testing . You should be able to then test the new kernel via the LiveCD. If you can, please verify if this bug still exists or not and report back your results. We'll keep this report open against the actively developed kernel but against 2.6.20 this will be closed. Thanks.

[Leann Ogasawara (leannogasawara)]

The Ubuntu Kernel Team is planning to move to the 2.6.27 kernel for the upcoming Intrepid Ibex 8.10 release. As a result, the kernel team would appreciate it if you could please test this newer 2.6.27 Ubuntu kernel. There are one of two ways you should be able to test:

1) If you are comfortable installing packages on your own, the linux-image-2.6.27-* package is currently available for you to install and test.

--or--

2) The upcoming Alpha5 for Intrepid Ibex 8.10 will contain this newer 2.6.27 Ubuntu kernel. Alpha5 is set to be released Thursday Sept 4. Please watch http://www.ubuntu.com/testing for Alpha5 to be announced. You should then be able to test via a LiveCD.

Please let us know immediately if this newer 2.6.27 kernel resolves the bug reported here or if the issue remains. More importantly, please open a new bug report for each new bug/regression introduced by the 2.6.27 kernel and tag the bug report with 'linux-2.6.27'. Also, please specifically note if the issue does or does not appear in the 2.6.26 kernel. Thanks again, we really appreicate your help and feedback.

[Launchpad Janitor (janitor)]

Per a decision made by the Ubuntu Kernel Team, bugs will longer be assigned to the ubuntu-kernel-team in Launchpad as part of the bug triage process. The ubuntu-kernel-team is being unassigned from this bug report. Refer to https://wiki.ubuntu.com/KernelTeamBugPolicies for more information. Thanks.

[Brad Figg (brad-figg)]

This bug report is being closed because we received no response to the previous inquiry for information. Please reopen if this is still an issue in the current Ubuntu release, Jaunty Jackalope 9.04. To reopen the bug, click on the current status, under the Status column, and change the status back to "New". Thanks.