#560 "rmmod dv1394" gives a segmentation fault

[Anonymous]

"rmmod dv1394" gives a segmentation fault after loading
the module and unloading it right after that.
No firewire peripherals are attached, so we're talking
about just the bare host controller, although the error also
occurs when a firewire device is attached and after using
the firewire system.

Sequence of events:
==> modprobe dv1394
==> lsmod (partially)
Module Size Used by
dv1394 23876 0
ohci1394 40068 1 dv1394
ieee1394 72752 2 dv1394,ohci1394
...
==> dmesg (partially)
...
ohci1394: $Rev: 1097 $ Ben Collins
<bcollins@debian.org>
ohci1394: fw-host0: Unexpected PCI resource length of
1000!
ohci1394: fw-host0: OHCI-1394 1.1 (PCI): IRQ=[17]
MMIO=[d6100000-d61007ff] Max Packet=[2048]
ieee1394: Host added: ID:BUS[0-00:1023]
GUID[00004c0107002bd1]
==> rmmod dv1394
Segmentation fault
==> dmesg (partially)
...
Unable to handle kernel paging request at virtual address
dcf3fdfc
printing eip:
f8bc7a31
*pde = 5a5a5a5a
Oops: 0000 [#1]
CPU: 1
EIP: 0060:[<f8bc7a31>] Tainted: P
EFLAGS: 00210246
EIP is at dv1394_remove_host+0xcd/0x157 [dv1394]
eax: dcf3fdf8 ebx: f8bc95a0 ecx: dcf3f000 edx:
f7f9c21c
esi: e0a721ac edi: 00200246 ebp: dcc97ea0 esp:
dcc97e80
ds: 007b es: 007b ss: 0068
Process rmmod (pid: 3220, threadinfo=dcc96000
task=daf0f9b0)
Stack: dcf3fdf8 ded11e88 dcf3fdf8 c01864cd ded11000
e0a720f8 e0a72100 f8bb7420
dcc97ec8 f8ba94d9 e0a70000 c01864cd f7fc6adc
e0a70000 f8bc96e0 e0a720f8
e0a72100 f8bb7420 dcc97ed8 f8ba94f6 f8bc96e0
e0a70000 dcc97ee8 f8bae09e
Call Trace:
[<c01864cd>] destroy_inode+0x5c/0x5e
[<f8ba94d9>] __unregister_host+0x10c/0x111 [ieee1394]
[<c01864cd>] destroy_inode+0x5c/0x5e
[<f8ba94f6>] highlevel_for_each_host_unreg+0x18/0x1e
[ieee1394]
[<f8bae09e>] nodemgr_for_each_host_cb+0x2d/0x2f
[ieee1394]
[<c0222e2f>] bus_for_each_dev+0x92/0xd6
[<f8bae0d5>] nodemgr_for_each_host+0x35/0x39
[ieee1394]
[<f8bae071>] nodemgr_for_each_host_cb+0x0/0x2f
[ieee1394]
[<f8ba94de>] highlevel_for_each_host_unreg+0x0/0x1e
[ieee1394]
[<f8ba95e0>] hpsb_unregister_highlevel+0xe4/0x103
[ieee1394]
[<f8ba94de>] highlevel_for_each_host_unreg+0x0/0x1e
[ieee1394]
[<f8bc81d8>] dv1394_exit_module+0x1e/0x4e [dv1394]
[<c013f052>] sys_delete_module+0x159/0x1ac
[<c015b984>] sys_munmap+0x58/0x77
[<c01097e3>] syscall_call+0x7/0xb

Code: 8b 58 04 c7 04 24 5e 86 bc f8 c1 fb 02 89 5c 24
04 e8 32 9d

From then on lsmod, modprobe, rmmod will hang and
cannot be ended.
A KDE session is running and cannot be shutdown
properly.
The machine itself cannot be shutdown or rebooted
properly either, the reset button must be used.

Support data:

Kernel version: Linux 2.6.2
ieee1394 version: ???
libraw version: 0.10.0
driver: ohci1394
output of /proc/bus/ieee1394/devices: n/a
output of /sys/bus/ieee1394/devices:
ls /sys/bus/ieee1394/devices
00004c0107002bd1 fw-host0
(there's more in /sys but I'm not sure what's needed)
OHCI chipset: NEC D72873GC
output of lspci:
00:00.0 Class 0600: 1106:0691 (rev c4)
00:01.0 Class 0604: 1106:8598
00:07.0 Class 0601: 1106:0686 (rev 40)
00:07.1 Class 0101: 1106:0571 (rev 06)
00:07.2 Class 0c03: 1106:3038 (rev 16)
00:07.3 Class 0c03: 1106:3038 (rev 16)
00:07.4 Class 0680: 1106:3057 (rev 40)
00:09.0 Class 0200: 10ec:8029
00:0a.0 Class 0c00: 1033:00e7 (rev 01)
00:0b.0 Class 0401: 1013:6003 (rev 01)
00:0c.0 Class 0200: 10ec:8029
00:0d.0 Class 0c03: 1033:0035 (rev 43)
00:0d.1 Class 0c03: 1033:0035 (rev 43)
00:0d.2 Class 0c03: 1033:00e0 (rev 04)
00:0e.0 Class 0180: 1103:0004 (rev 03)
01:00.0 Class 0300: 102b:2527 (rev 01)
version of application / utility: none used

remco@d-compu.dyndns.org