Bug 233434
Summary: | rt73usb wireless driver causes general protection fault when unplugging USB wireless device | ||||||||
---|---|---|---|---|---|---|---|---|---|
Product: | [Fedora] Fedora | Reporter: | Daniel Berrangé <berrange> | ||||||
Component: | kernel | Assignee: | John W. Linville <linville> | ||||||
Status: | CLOSED CURRENTRELEASE | QA Contact: | Brian Brock <bbrock> | ||||||
Severity: | medium | Docs Contact: | |||||||
Priority: | medium | ||||||||
Version: | rawhide | CC: | davej, ivdoorn, mwallis | ||||||
Target Milestone: | --- | ||||||||
Target Release: | --- | ||||||||
Hardware: | x86_64 | ||||||||
OS: | Linux | ||||||||
Whiteboard: | |||||||||
Fixed In Version: | 2.6.21-1.3228.fc7 | Doc Type: | Bug Fix | ||||||
Doc Text: | Story Points: | --- | |||||||
Clone Of: | Environment: | ||||||||
Last Closed: | 2007-07-23 18:29:39 UTC | Type: | --- | ||||||
Regression: | --- | Mount Type: | --- | ||||||
Documentation: | --- | CRM: | |||||||
Verified Versions: | Category: | --- | |||||||
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||||
Cloudforms Team: | --- | Target Upstream Version: | |||||||
Embargoed: | |||||||||
Attachments: |
|
Description
Daniel Berrangé
2007-03-22 14:00:54 UTC
Created attachment 150661 [details]
/var/log/messages from initial boot -> time of crash
Created attachment 150662 [details]
lsusb output showing WLAN adapter details
NB, the device in question is:
Bus 002 Device 004: ID 0b05:1723 ASUSTek Computer, Inc.
Possibly related to bug 233345... The problem seems to revolve around the lines: Mar 22 10:11:01 celery kernel: DebugFS rmdir on wiphy0 failed : directory not empty. Mar 22 10:11:05 celery kernel: general protection fault: 0000 [1] SMP For bug 233345 a similar thing is noted: Mar 20 21:18:33 localhost kernel: DebugFS rmdir on wiphy0 failed : directory not empty. Mar 20 21:18:33 localhost kernel: BUG: unable to handle kernel NULL pointer dereference at virtual address 0000007f rt2x00 only creates a single debugfs directory, which is being closed at the last moment during deregister. The files that are being created inside that folder are all being removed before the folder is being removed. Bug 233345 comment 3 says he didn't have debugfs mounted. Is that significant? Don't think so, the same problem occurs while debugfs is mounted as well. Possible solution to this bug has been found, rt2x00debug_deregister was called with the reference to debugfs data which was never initialized, but to make matters worse instead of the reference, the reference to the reference was passed. That would be a very valid reason for the kernel to start panicking. ;) The patch has gone into the rt2x00 git tree, I'll send an git-pull request so that the fix will go into wireless-dev and ould move further upstream. FWIW, this is still not in FC6.netdev.10 or rawhide -- I will remedy that "soon"... Does this problem persist w/ current rawhide kernels (e.g. kernel-2.6.23-0.29.rc0.git6.fc8 or later)? I don't have access to a rawhide box just at the minute, but testing on an up2date Fedora 7 box I no longer get any kernel panic upon unplugging the device. Verified both with debugfs mounted, and not mounted. In addition I can actually see wifi networks & connect successfully with NetworkManager. Kernel i'm running on this box is: Linux macminilan 2.6.21-1.3228.fc7 #1 SMP Tue Jun 12 15:37:31 EDT 2007 i686 i686 i386 GNU/Linux |