Hi,
I tried the mem2mem_testdev driver from Linux kernel 2.6.35-rc3 together
with the test environment from http://v4l-test.sourceforge.net . I found
that the VIDIOC_G_FMT ioctl may result in a NULL pointer dereference in
kernel. I derived a simple test case which I also attached.
Steps to reproduce:
$ su
# modprobe mem2mem-testdev
# exit
$ gcc -Wall -Wextra -O2 test_mem2mem.c -o test_mem2mem
$ ./test_mem2mem
I investigated the problem a little bit and found that the expression
q_data->fmt->fourcc in function vidioc_g_fmt() may cause this behaviour.
Regards,
Márton Németh
/*
* Simple test case for VIDIOC_G_FMT. Derived from
* v4l-test, http://v4l-test.sourceforge.net
*
* Writen by Márton Németh <nm...@freemail.hu>
* 20 Jun 2010
* Released under GPL.
*/
#include <stdio.h>
#include <sys/types.h>
#include <sys/stat.h>
#include <fcntl.h>
#include <unistd.h>
#include <sys/ioctl.h>
#include <errno.h>
#include <string.h>
#include <unistd.h>
#include <linux/videodev2.h>
#include <linux/errno.h>
int main()
{
int f;
int ret;
int ret_get, errno_get;
struct v4l2_format format;
f = open("/dev/video0", O_RDWR);
if (f < 0) {
perror("Cannot open /dev/video0");
return 1;
}
memset(&format, 0xff, sizeof(format));
format.type = V4L2_BUF_TYPE_VIDEO_CAPTURE;
printf("Calling VIDIOC_G_FMT ioctl...\n");
fflush(stdout);
ret_get = ioctl(f, VIDIOC_G_FMT, &format);
errno_get = errno;
printf("VIDIOC_G_FMT: ret=%i, errno=%i\n", ret_get, errno_get);
ret = close(f);
f = 0;
if (ret < 0) {
perror("Cannot close");
return 1;
}
return 0;
}
[ 0.000000] Linux version 2.6.35-rc3 (nma...@europa) (gcc version 4.4.4
(Debian 4.4.4-5) ) #2 PREEMPT Sat Jun 19 14:34:39 CEST 2010
[ 0.000000] BIOS-provided physical RAM map:
[ 0.000000] BIOS-e820: 0000000000000000 - 000000000009f800 (usable)
[ 0.000000] BIOS-e820: 000000000009f800 - 00000000000a0000 (reserved)
[ 0.000000] BIOS-e820: 00000000000d8000 - 0000000000100000 (reserved)
[ 0.000000] BIOS-e820: 0000000000100000 - 000000003bf70000 (usable)
[ 0.000000] BIOS-e820: 000000003bf70000 - 000000003bf7a000 (ACPI data)
[ 0.000000] BIOS-e820: 000000003bf7a000 - 000000003bf80000 (ACPI NVS)
[ 0.000000] BIOS-e820: 000000003bf80000 - 0000000040000000 (reserved)
[ 0.000000] BIOS-e820: 00000000fffe0000 - 0000000100000000 (reserved)
[ 0.000000] Notice: NX (Execute Disable) protection cannot be enabled:
non-PAE kernel!
[ 0.000000] DMI present.
[ 0.000000] e820 update range: 0000000000000000 - 0000000000001000 (usable)
==> (reserved)
[ 0.000000] e820 remove range: 00000000000a0000 - 0000000000100000 (usable)
[ 0.000000] last_pfn = 0x3bf70 max_arch_pfn = 0x100000
[ 0.000000] MTRR default type: uncachable
[ 0.000000] MTRR fixed ranges enabled:
[ 0.000000] 00000-9FFFF write-back
[ 0.000000] A0000-BFFFF uncachable
[ 0.000000] C0000-D3FFF write-protect
[ 0.000000] D4000-D7FFF uncachable
[ 0.000000] D8000-DBFFF write-protect
[ 0.000000] DC000-DFFFF write-back
[ 0.000000] E0000-E3FFF uncachable
[ 0.000000] E4000-FFFFF write-protect
[ 0.000000] MTRR variable ranges enabled:
[ 0.000000] 0 base 0000000000 mask FFC0000000 write-back
[ 0.000000] 1 base 003C000000 mask FFFC000000 uncachable
[ 0.000000] 2 base 00E0000000 mask FFF0000000 write-combining
[ 0.000000] 3 disabled
[ 0.000000] 4 disabled
[ 0.000000] 5 disabled
[ 0.000000] 6 disabled
[ 0.000000] 7 disabled
[ 0.000000] initial memory mapped : 0 - 01000000
[ 0.000000] found SMP MP-table at [c00f6870] f6870
[ 0.000000] init_memory_mapping: 0000000000000000-00000000377fe000
[ 0.000000] 0000000000 - 0000400000 page 4k
[ 0.000000] 0000400000 - 0037400000 page 2M
[ 0.000000] 0037400000 - 00377fe000 page 4k
[ 0.000000] kernel direct mapping tables up to 377fe000 @ 7000-c000
[ 0.000000] ACPI: RSDP 000f68d0 00014 (v00 PTLTD )
[ 0.000000] ACPI: RSDT 3bf7600b 00030 (v01 PTLTD RSDT 06040000 LTP
00000000)
[ 0.000000] ACPI: FACP 3bf79e87 00074 (v01 AMDK8 PTLTW 06040000 PTL_
000F4240)
[ 0.000000] ACPI: DSDT 3bf7603b 03E4C (v01 VIA PTL_ACPI 06040000 MSFT
0100000E)
[ 0.000000] ACPI: FACS 3bf7afc0 00040
[ 0.000000] ACPI: SSDT 3bf79efb 000B5 (v01 PTLTD POWERNOW 06040000 LTP
00000001)
[ 0.000000] ACPI: APIC 3bf79fb0 00050 (v01 PTLTD ? APIC 06040000 LTP
00000000)
[ 0.000000] ACPI: Local APIC address 0xfee00000
[ 0.000000] 71MB HIGHMEM available.
[ 0.000000] 887MB LOWMEM available.
[ 0.000000] mapped low ram: 0 - 377fe000
[ 0.000000] low ram: 0 - 377fe000
[ 0.000000] Zone PFN ranges:
[ 0.000000] DMA 0x00000001 -> 0x00001000
[ 0.000000] Normal 0x00001000 -> 0x000377fe
[ 0.000000] HighMem 0x000377fe -> 0x0003bf70
[ 0.000000] Movable zone start PFN for each node
[ 0.000000] early_node_map[2] active PFN ranges
[ 0.000000] 0: 0x00000001 -> 0x0000009f
[ 0.000000] 0: 0x00000100 -> 0x0003bf70
[ 0.000000] On node 0 totalpages: 245518
[ 0.000000] free_area_init_node: node 0, pgdat c04afb00, node_mem_map
c1001020
[ 0.000000] DMA zone: 32 pages used for memmap
[ 0.000000] DMA zone: 0 pages reserved
[ 0.000000] DMA zone: 3966 pages, LIFO batch:0
[ 0.000000] Normal zone: 1744 pages used for memmap
[ 0.000000] Normal zone: 221486 pages, LIFO batch:31
[ 0.000000] HighMem zone: 143 pages used for memmap
[ 0.000000] HighMem zone: 18147 pages, LIFO batch:3
[ 0.000000] Using APIC driver default
[ 0.000000] ACPI: PM-Timer IO Port: 0x4008
[ 0.000000] ACPI: Local APIC address 0xfee00000
[ 0.000000] ACPI: LAPIC (acpi_id[0x00] lapic_id[0x00] enabled)
[ 0.000000] ACPI: LAPIC_NMI (acpi_id[0x00] high edge lint[0x1])
[ 0.000000] ACPI: IOAPIC (id[0x01] address[0xfec00000] gsi_base[0])
[ 0.000000] IOAPIC[0]: apic_id 1, version 3, address 0xfec00000, GSI 0-23
[ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 high edge)
[ 0.000000] ACPI: IRQ0 used by override.
[ 0.000000] ACPI: IRQ2 used by override.
[ 0.000000] ACPI: IRQ10 used by override.
[ 0.000000] Using ACPI (MADT) for SMP configuration information
[ 0.000000] nr_irqs_gsi: 40
[ 0.000000] PM: Registered nosave memory: 000000000009f000 - 00000000000a0000
[ 0.000000] PM: Registered nosave memory: 00000000000a0000 - 00000000000d8000
[ 0.000000] PM: Registered nosave memory: 00000000000d8000 - 0000000000100000
[ 0.000000] Allocating PCI resources starting at 40000000 (gap:
40000000:bffe0000)
[ 0.000000] early_res array is doubled to 64 at [5000 - 57ff]
[ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total
pages: 243599
[ 0.000000] Kernel command line: BOOT_IMAGE=/boot/2.6.35-rc3/bzImage
root=/dev/hda1 ro log_buf_len=1M hpet=force
[ 0.000000] log_buf_len: 1048576
[ 0.000000] PID hash table entries: 4096 (order: 2, 16384 bytes)
[ 0.000000] Dentry cache hash table entries: 131072 (order: 7, 524288 bytes)
[ 0.000000] Inode-cache hash table entries: 65536 (order: 6, 262144 bytes)
[ 0.000000] Enabling fast FPU save and restore... done.
[ 0.000000] Enabling unmasked SIMD FPU exception support... done.
[ 0.000000] Initializing CPU#0
[ 0.000000] Subtract (35 early reservations)
[ 0.000000] #1 [0000100000 - 0000a9d4e8] TEXT DATA BSS
[ 0.000000] #2 [0000a9e000 - 0000aa2118] BRK
[ 0.000000] #3 [00000f6880 - 0000100000] BIOS reserved
[ 0.000000] #4 [00000f6870 - 00000f6880] MP-table mpf
[ 0.000000] #5 [000009f800 - 000009fd70] BIOS reserved
[ 0.000000] #6 [000009fe90 - 00000f6870] BIOS reserved
[ 0.000000] #7 [000009fd70 - 000009fe90] MP-table mpc
[ 0.000000] #8 [0000001000 - 0000005000] ACPI WAKEUP
[ 0.000000] #9 [0000007000 - 0000008000] PGTABLE
[ 0.000000] #10 [0001000000 - 0001001000] BOOTMEM
[ 0.000000] #11 [0001001000 - 0001781000] BOOTMEM
[ 0.000000] #12 [0001781000 - 0001781004] BOOTMEM
[ 0.000000] #13 [0001781040 - 0001781280] BOOTMEM
[ 0.000000] #14 [0001781280 - 00017812d4] BOOTMEM
[ 0.000000] #15 [0001781300 - 000178a300] BOOTMEM
[ 0.000000] #16 [000178a300 - 000178a308] BOOTMEM
[ 0.000000] #17 [000178a340 - 000178b540] BOOTMEM
[ 0.000000] #18 [000178b540 - 000178b567] BOOTMEM
[ 0.000000] #19 [000178b580 - 000178b67c] BOOTMEM
[ 0.000000] #20 [000178b680 - 000178b6c0] BOOTMEM
[ 0.000000] #21 [000178b6c0 - 000178b700] BOOTMEM
[ 0.000000] #22 [000178b700 - 000178b740] BOOTMEM
[ 0.000000] #23 [000178b740 - 000178b780] BOOTMEM
[ 0.000000] #24 [000178b780 - 000178b7c0] BOOTMEM
[ 0.000000] #25 [000178b7c0 - 000178b800] BOOTMEM
[ 0.000000] #26 [000178b800 - 000178b840] BOOTMEM
[ 0.000000] #27 [000178b840 - 000178b880] BOOTMEM
[ 0.000000] #28 [000178b880 - 000178b890] BOOTMEM
[ 0.000000] #29 [000178b8c0 - 000178b910] BOOTMEM
[ 0.000000] #30 [000178b940 - 000178b990] BOOTMEM
[ 0.000000] #31 [000178b9c0 - 000188b9c0] BOOTMEM
[ 0.000000] #32 [000188b9c0 - 000188f9c0] BOOTMEM
[ 0.000000] #33 [000188f9c0 - 000190f9c0] BOOTMEM
[ 0.000000] #34 [000190f9c0 - 000194f9c0] BOOTMEM
[ 0.000000] Initializing HighMem for node 0 (000377fe:0003bf70)
[ 0.000000] Memory: 962648k/982464k available (2537k kernel code, 19424k
reserved, 1249k data, 400k init, 73160k highmem)
[ 0.000000] virtual kernel memory layout:
[ 0.000000] fixmap : 0xfffa3000 - 0xfffff000 ( 368 kB)
[ 0.000000] pkmap : 0xff800000 - 0xffc00000 (4096 kB)
[ 0.000000] vmalloc : 0xf7ffe000 - 0xff7fe000 ( 120 MB)
[ 0.000000] lowmem : 0xc0000000 - 0xf77fe000 ( 887 MB)
[ 0.000000] .init : 0xc04b3000 - 0xc0517000 ( 400 kB)
[ 0.000000] .data : 0xc037a476 - 0xc04b28f8 (1249 kB)
[ 0.000000] .text : 0xc0100000 - 0xc037a476 (2537 kB)
[ 0.000000] Checking if this processor honours the WP bit even in supervisor
mode...Ok.
[ 0.000000] Hierarchical RCU implementation.
[ 0.000000] RCU-based detection of stalled CPUs is disabled.
[ 0.000000] Verbose stalled-CPUs detection is disabled.
[ 0.000000] NR_IRQS:288
[ 0.000000] spurious 8259A interrupt: IRQ7.
[ 0.000000] Console: colour VGA+ 80x25
[ 0.000000] console [tty0] enabled
[ 0.000000] Lock dependency validator: Copyright (c) 2006 Red Hat, Inc.,
Ingo Molnar
[ 0.000000] ... MAX_LOCKDEP_SUBCLASSES: 8
[ 0.000000] ... MAX_LOCK_DEPTH: 48
[ 0.000000] ... MAX_LOCKDEP_KEYS: 8191
[ 0.000000] ... CLASSHASH_SIZE: 4096
[ 0.000000] ... MAX_LOCKDEP_ENTRIES: 16384
[ 0.000000] ... MAX_LOCKDEP_CHAINS: 32768
[ 0.000000] ... CHAINHASH_SIZE: 16384
[ 0.000000] memory used by lock dependency info: 3567 kB
[ 0.000000] per task-struct memory footprint: 1152 bytes
[ 0.000000] ODEBUG: 4 of 4 active objects replaced
[ 0.000000] Fast TSC calibration using PIT
[ 0.000000] Detected 1603.578 MHz processor.
[ 0.002035] Calibrating delay loop (skipped), value calculated using timer
frequency.. 3207.15 BogoMIPS (lpj=1603578)
[ 0.002150] pid_max: default: 32768 minimum: 301
[ 0.003723] Mount-cache hash table entries: 512
[ 0.006925] mce: CPU supports 5 MCE banks
[ 0.007034] Performance Events: AMD PMU driver.
[ 0.007152] ... version: 0
[ 0.007207] ... bit width: 48
[ 0.007263] ... generic registers: 4
[ 0.007318] ... value mask: 0000ffffffffffff
[ 0.007374] ... max period: 00007fffffffffff
[ 0.007430] ... fixed-purpose events: 0
[ 0.007485] ... event mask: 000000000000000f
[ 0.007542] CPU: Mobile AMD Sempron(tm) Processor 2600+ stepping 00
[ 0.008253] ACPI: Core revision 20100428
[ 0.068826] Enabling APIC mode: Flat. Using 1 I/O APICs
[ 0.068999] ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=0 pin2=0
[ 0.087829] NET: Registered protocol family 16
[ 0.092171] EISA bus registered
[ 0.092238] node 0 link 0: io port [1000, fffff]
[ 0.092244] TOM: 0000000040000000 aka 1024M
[ 0.092301] node 0 link 0: mmio [40000000, d100ffff]
[ 0.092306] node 0 link 0: mmio [d1000000, d200ffff]
[ 0.092311] node 0 link 0: mmio [d2000000, f000ffff]
[ 0.092316] node 0 link 0: mmio [f0000000, f400ffff]
[ 0.092320] node 0 link 0: mmio [f4000000, fe0bffff]
[ 0.092325] node 0 link 0: mmio [a0000, bffff]
[ 0.092330] bus: [00, ff] on node 0 link 0
[ 0.092335] bus: 00 index 0 [io 0x0000-0xffff]
[ 0.092339] bus: 00 index 1 [mem 0x40000000-0xffffffff]
[ 0.092343] bus: 00 index 2 [mem 0x000a0000-0x000bffff]
[ 0.092434] ACPI: bus type pci registered
[ 0.101778] PCI: PCI BIOS revision 2.10 entry at 0xfd88c, last bus=1
[ 0.101843] PCI: Using configuration type 1 for base access
[ 0.126510] bio: create slab <bio-0> at 0
[ 0.131568] ACPI: EC: Look up EC in DSDT
[ 0.197507] ACPI: Interpreter enabled
[ 0.197572] ACPI: (supports S0 S3 S4 S5)
[ 0.198240] ACPI: Using IOAPIC for interrupt routing
[ 0.327234] ACPI: EC: GPE = 0xb, I/O: command/status = 0x66, data = 0x62
[ 0.328920] PCI: Ignoring host bridge windows from ACPI; if necessary, use
"pci=use_crs" and report a bug
[ 0.350296] ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff])
[ 0.395808] pci_root PNP0A03:00: host bridge window [io 0x0000-0x0cf7]
(ignored)
[ 0.395815] pci_root PNP0A03:00: host bridge window [io 0x0d00-0xffff]
(ignored)
[ 0.395820] pci_root PNP0A03:00: host bridge window [mem
0x000a0000-0x000bffff] (ignored)
[ 0.395825] pci_root PNP0A03:00: host bridge window [mem
0x000d4000-0x000d7fff] (ignored)
[ 0.395830] pci_root PNP0A03:00: host bridge window [mem
0x40000000-0xffe7ffff] (ignored)
[ 0.395962] pci 0000:00:00.0: reg 10: [mem 0xe0000000-0xefffffff pref]
[ 0.396666] pci 0000:00:01.0: supports D1
[ 0.396741] pci 0000:00:08.0: reg 10: [io 0x1000-0x10ff]
[ 0.396751] pci 0000:00:08.0: reg 14: [mem 0xd0004000-0xd00040ff]
[ 0.396807] pci 0000:00:08.0: supports D1 D2
[ 0.396811] pci 0000:00:08.0: PME# supported from D1 D2 D3hot D3cold
[ 0.396818] pci 0000:00:08.0: PME# disabled
[ 0.396893] pci 0000:00:0c.0: reg 10: [mem 0x00000000-0x00000fff]
[ 0.396920] pci 0000:00:0c.0: supports D1 D2
[ 0.396924] pci 0000:00:0c.0: PME# supported from D0 D1 D2 D3hot D3cold
[ 0.396930] pci 0000:00:0c.0: PME# disabled
[ 0.397008] pci 0000:00:0e.0: reg 10: [mem 0xd0001000-0xd0001fff]
[ 0.397018] pci 0000:00:0e.0: reg 14: [mem 0xd0000000-0xd0000fff]
[ 0.397073] pci 0000:00:0e.0: supports D1 D2
[ 0.397077] pci 0000:00:0e.0: PME# supported from D1 D2 D3hot D3cold
[ 0.397083] pci 0000:00:0e.0: PME# disabled
[ 0.397151] pci 0000:00:0e.1: reg 10: [mem 0xd0003000-0xd0003fff]
[ 0.397161] pci 0000:00:0e.1: reg 14: [mem 0xd0002000-0xd0002fff]
[ 0.397217] pci 0000:00:0e.1: supports D1 D2
[ 0.397220] pci 0000:00:0e.1: PME# supported from D1 D2 D3hot D3cold
[ 0.397227] pci 0000:00:0e.1: PME# disabled
[ 0.397330] pci 0000:00:10.0: reg 20: [io 0x1c00-0x1c1f]
[ 0.397368] pci 0000:00:10.0: supports D1 D2
[ 0.397371] pci 0000:00:10.0: PME# supported from D0 D1 D2 D3hot D3cold
[ 0.397378] pci 0000:00:10.0: PME# disabled
[ 0.397477] pci 0000:00:10.1: reg 20: [io 0x1c20-0x1c3f]
[ 0.397516] pci 0000:00:10.1: supports D1 D2
[ 0.397519] pci 0000:00:10.1: PME# supported from D0 D1 D2 D3hot D3cold
[ 0.397526] pci 0000:00:10.1: PME# disabled
[ 0.397616] pci 0000:00:10.2: reg 20: [io 0x1c40-0x1c5f]
[ 0.397654] pci 0000:00:10.2: supports D1 D2
[ 0.397657] pci 0000:00:10.2: PME# supported from D0 D1 D2 D3hot D3cold
[ 0.397664] pci 0000:00:10.2: PME# disabled
[ 0.397734] pci 0000:00:10.3: reg 10: [mem 0xd0004400-0xd00044ff]
[ 0.397795] pci 0000:00:10.3: supports D1 D2
[ 0.397799] pci 0000:00:10.3: PME# supported from D0 D1 D2 D3hot D3cold
[ 0.397805] pci 0000:00:10.3: PME# disabled
[ 0.397924] pci 0000:00:11.0: Force enabled HPET at 0xfed00000
[ 0.397948] pci 0000:00:11.0: quirk: [io 0x4000-0x407f] claimed by vt8235 PM
[ 0.398006] pci 0000:00:11.0: quirk: [io 0x8100-0x810f] claimed by vt8235
SMB
[ 0.398186] pci 0000:00:11.1: reg 20: [io 0x1c60-0x1c6f]
[ 0.398298] pci 0000:00:11.5: reg 10: [io 0x1400-0x14ff]
[ 0.398362] pci 0000:00:11.5: supports D1 D2
[ 0.398430] pci 0000:00:11.6: reg 10: [io 0x1800-0x18ff]
[ 0.398817] PCI: peer root bus 00 res updated from pci conf
[ 0.398978] pci 0000:01:00.0: reg 10: [mem 0xf0000000-0xf3ffffff pref]
[ 0.399009] pci 0000:01:00.0: reg 14: [mem 0xd1000000-0xd1ffffff]
[ 0.399035] pci 0000:01:00.0: reg 30: [mem 0x00000000-0x0000ffff pref]
[ 0.399061] pci 0000:01:00.0: supports D1 D2
[ 0.399118] pci 0000:00:01.0: PCI bridge to [bus 01-01]
[ 0.399178] pci 0000:00:01.0: bridge window [io 0xf000-0x0000] (disabled)
[ 0.399185] pci 0000:00:01.0: bridge window [mem 0xd1000000-0xd1ffffff]
[ 0.399192] pci 0000:00:01.0: bridge window [mem 0xf0000000-0xf3ffffff
pref]
[ 0.399286] pci_bus 0000:00: on NUMA node 0
[ 0.399325] ACPI: PCI Interrupt Routing Table [\_SB_.PCI0._PRT]
[ 0.681154] ACPI: PCI Interrupt Link [ALKA] (IRQs 16 17 18 19 20 21 22 23)
*9, disabled.
[ 0.683041] ACPI: PCI Interrupt Link [ALKB] (IRQs 16 17 18 19 20 21 22 23)
*11, disabled.
[ 0.685465] ACPI: PCI Interrupt Link [ALKC] (IRQs 22) *10, disabled.
[ 0.687080] ACPI: PCI Interrupt Link [ALKD] (IRQs 21) *5, disabled.
[ 0.689849] ACPI: PCI Interrupt Link [LNKA] (IRQs 3 4 5 7 *9 12 14 15)
[ 0.693013] ACPI: PCI Interrupt Link [LNKB] (IRQs 3 4 5 7 10 12 14 15) *11
[ 0.695875] ACPI: PCI Interrupt Link [LNKC] (IRQs 3 4 5 7 11 12 14 15) *10
[ 0.699006] ACPI: PCI Interrupt Link [LNKD] (IRQs 3 4 *5 7 9 10 11 12 14 15)
[ 0.702670] vgaarb: device added:
PCI:0000:01:00.0,decodes=io+mem,owns=io+mem,locks=none
[ 0.702758] vgaarb: loaded
[ 0.705167] PCI: Using ACPI for IRQ routing
[ 0.705236] PCI: pci_cache_line_size set to 64 bytes
[ 0.705904] reserve RAM buffer: 000000000009f800 - 000000000009ffff
[ 0.705946] reserve RAM buffer: 000000003bf70000 - 000000003bffffff
[ 0.708749] hpet clockevent registered
[ 0.708767] HPET: 3 timers in total, 0 timers will be used for per-cpu timer
[ 0.708846] hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0
[ 0.709095] hpet0: 3 comparators, 32-bit 14.318180 MHz counter
[ 0.712770] Switching to clocksource tsc
[ 0.712998] pnp: PnP ACPI init
[ 0.712998] ACPI: bus type pnp registered
[ 0.775751] pnp: PnP ACPI: found 11 devices
[ 0.775816] ACPI: ACPI bus type pnp unregistered
[ 0.776028] system 00:05: [mem 0x00000000-0x0009ffff] could not be reserved
[ 0.776114] system 00:05: [mem 0x000e0000-0x000fffff] could not be reserved
[ 0.776339] system 00:05: [mem 0xfff00000-0xffffffff] could not be reserved
[ 0.776420] system 00:05: [mem 0xffee0000-0xffefffff] has been reserved
[ 0.776505] system 00:05: [mem 0xfec00000-0xfec00fff] could not be reserved
[ 0.776584] system 00:05: [mem 0xfee00000-0xfee00fff] has been reserved
[ 0.776716] system 00:06: [io 0x04d0-0x04d1] has been reserved
[ 0.776796] system 00:06: [io 0xfe10-0xfe11] has been reserved
[ 0.776874] system 00:06: [io 0xfe00] has been reserved
[ 0.776951] system 00:06: [io 0x4000-0x407f] has been reserved
[ 0.777035] system 00:06: [io 0x8100-0x811f] could not be reserved
[ 0.818303] pci 0000:00:0c.0: BAR 9: assigned [mem 0x40000000-0x43ffffff
pref]
[ 0.819273] pci 0000:00:0c.0: BAR 10: assigned [mem 0x44000000-0x47ffffff]
[ 0.819338] pci 0000:00:0c.0: BAR 0: assigned [mem 0x48000000-0x48000fff]
[ 0.819403] pci 0000:00:0c.0: BAR 0: set to [mem 0x48000000-0x48000fff] (PCI
address [0x48000000-0x48000fff]
[ 0.819482] pci 0000:00:0c.0: BAR 7: assigned [io 0x2000-0x20ff]
[ 0.819545] pci 0000:00:0c.0: BAR 8: assigned [io 0x2400-0x24ff]
[ 0.819620] pci 0000:01:00.0: BAR 6: can't assign mem pref (size 0x10000)
[ 0.819684] pci 0000:00:01.0: PCI bridge to [bus 01-01]
[ 0.819741] pci 0000:00:01.0: bridge window [io disabled]
[ 0.819803] pci 0000:00:01.0: bridge window [mem 0xd1000000-0xd1ffffff]
[ 0.819865] pci 0000:00:01.0: bridge window [mem 0xf0000000-0xf3ffffff
pref]
[ 0.819939] pci 0000:00:0c.0: CardBus bridge to [bus 02-05]
[ 0.819997] pci 0000:00:0c.0: bridge window [io 0x2000-0x20ff]
[ 0.820058] pci 0000:00:0c.0: bridge window [io 0x2400-0x24ff]
[ 0.820120] pci 0000:00:0c.0: bridge window [mem 0x40000000-0x43ffffff
pref]
[ 0.820197] pci 0000:00:0c.0: bridge window [mem 0x44000000-0x47ffffff]
[ 0.820280] pci 0000:00:01.0: setting latency timer to 64
[ 0.820292] pci 0000:00:0c.0: enabling device (0000 -> 0003)
[ 0.820376] pci 0000:00:0c.0: PCI INT A -> GSI 16 (level, low) -> IRQ 16
[ 0.820442] pci 0000:00:0c.0: setting latency timer to 64
[ 0.820449] pci_bus 0000:00: resource 4 [io 0x0000-0xffff]
[ 0.820453] pci_bus 0000:00: resource 5 [mem 0x40000000-0xffffffff]
[ 0.820457] pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff]
[ 0.820462] pci_bus 0000:01: resource 1 [mem 0xd1000000-0xd1ffffff]
[ 0.820465] pci_bus 0000:01: resource 2 [mem 0xf0000000-0xf3ffffff pref]
[ 0.820470] pci_bus 0000:02: resource 0 [io 0x2000-0x20ff]
[ 0.820473] pci_bus 0000:02: resource 1 [io 0x2400-0x24ff]
[ 0.820477] pci_bus 0000:02: resource 2 [mem 0x40000000-0x43ffffff pref]
[ 0.820481] pci_bus 0000:02: resource 3 [mem 0x44000000-0x47ffffff]
[ 0.820854] NET: Registered protocol family 2
[ 0.821331] IP route cache hash table entries: 32768 (order: 5, 131072 bytes)
[ 0.822605] TCP established hash table entries: 131072 (order: 8, 1048576
bytes)
[ 0.823927] TCP bind hash table entries: 65536 (order: 9, 2097152 bytes)
[ 0.830782] TCP: Hash tables configured (established 131072 bind 65536)
[ 0.830898] TCP reno registered
[ 0.830981] UDP hash table entries: 512 (order: 3, 40960 bytes)
[ 0.831171] UDP-Lite hash table entries: 512 (order: 3, 40960 bytes)
[ 0.831881] NET: Registered protocol family 1
[ 0.832084] pci 0000:00:01.0: disabling DAC on VIA PCI bridge
[ 0.832491] pci 0000:01:00.0: Boot video device
[ 0.832506] PCI: CLS 64 bytes, default 64
[ 0.842878] audit: initializing netlink socket (disabled)
[ 0.843100] type=2000 audit(1277042535.841:1): initialized
[ 0.858621] highmem bounce pool size: 64 pages
[ 0.860456] msgmni has been set to 1737
[ 0.861825] alg: No test for stdrng (krng)
[ 0.861975] io scheduler noop registered
[ 0.862134] io scheduler cfq registered (default)
[ 1.307685] Uniform Multi-Platform E-IDE driver
[ 1.309378] via82cxxx 0000:00:11.1: VIA vt8235 (rev 00) IDE UDMA133
[ 1.309454] via82cxxx 0000:00:11.1: IDE controller (0x1106:0x0571 rev 0x06)
[ 1.310055] pci 0000:00:11.1: power state changed by ACPI to D0
[ 1.310603] pci 0000:00:11.1: power state changed by ACPI to D0
[ 1.311781] ACPI: PCI Interrupt Link [ALKA] disabled and referenced, BIOS bug
[ 1.312964] ACPI: PCI Interrupt Link [ALKA] BIOS reported IRQ 0, using IRQ 23
[ 1.313030] ACPI: PCI Interrupt Link [ALKA] enabled at IRQ 23
[ 1.313249] pci 0000:00:11.1: PCI INT A -> Link[ALKA] -> GSI 23 (level, low)
-> IRQ 23
[ 1.313651] via82cxxx 0000:00:11.1: not 100% native mode: will probe irqs
later
[ 1.313726] ide0: BM-DMA at 0x1c60-0x1c67
[ 1.313796] ide1: BM-DMA at 0x1c68-0x1c6f
[ 1.313857] Probing IDE interface ide0...
[ 1.577141] hda: SAMSUNG HM160HC, ATA DISK drive
[ 2.190961] hda: host max PIO5 wanted PIO255(auto-tune) selected PIO4
[ 2.191049] hda: UDMA/100 mode selected
[ 2.191183] Probing IDE interface ide1...
[ 2.863111] hdc: Optiarc DVD RW AD-7543A, ATAPI CD/DVD-ROM drive
[ 3.475848] hdc: host max PIO5 wanted PIO255(auto-tune) selected PIO4
[ 3.476029] hdc: UDMA/33 mode selected
[ 3.476433] ide0 at 0x1f0-0x1f7,0x3f6 on irq 14
[ 3.538113] ide1 at 0x170-0x177,0x376 on irq 15
[ 3.546883] ide_generic: please use "probe_mask=0x3f" module parameter for
probing all legacy ISA IDE ports
[ 3.547501] ide-gd driver 1.18
[ 3.548138] hda: max request size: 512KiB
[ 3.550154] hda: Host Protected Area detected.
[ 3.550155] current capacity is 268435456 sectors (137438 MB)
[ 3.550157] native capacity is 312581808 sectors (160041 MB)
[ 3.550325] hda: 268435456 sectors (137438 MB) w/8192KiB Cache,
CHS=16709/255/63
[ 3.552092] hda: cache flushes supported
[ 3.553047] hda: hda1 hda2 hda3
[ 3.570601] PNP: PS/2 Controller [PNP0303:PS2K,PNP0f13:PS2M] at 0x60,0x64
irq 1,12
[ 3.574617] i8042.c: Detected active multiplexing controller, rev 1.1.
[ 3.575986] serio: i8042 KBD port at 0x60,0x64 irq 1
[ 3.576127] serio: i8042 AUX0 port at 0x60,0x64 irq 12
[ 3.576211] serio: i8042 AUX1 port at 0x60,0x64 irq 12
[ 3.576293] serio: i8042 AUX2 port at 0x60,0x64 irq 12
[ 3.576376] serio: i8042 AUX3 port at 0x60,0x64 irq 12
[ 3.580460] cpuidle: using governor ladder
[ 3.580522] cpuidle: using governor menu
[ 3.581397] TCP cubic registered
[ 3.581461] NET: Registered protocol family 17
[ 3.581663] Using IPI Shortcut mode
[ 3.583993] PM: Resume from disk failed.
[ 3.584445] kmemleak: Kernel memory leak detector initialized
[ 3.587278] kmemleak: Automatic memory scanning thread started
[ 3.635373] EXT3-fs: barriers not enabled
[ 3.649641] EXT3-fs (hda1): mounted filesystem with writeback data mode
[ 3.649928] VFS: Mounted root (ext3 filesystem) readonly on device 3:1.
[ 3.650223] Freeing unused kernel memory: 400k freed
[ 3.650973] Write protecting the kernel text: 2540k
[ 3.651166] Write protecting the kernel read-only data: 1004k
[ 3.651868] kjournald starting. Commit interval 5 seconds
[ 3.764237] input: AT Translated Set 2 keyboard as /class/input/input0
[ 9.433388] ACPI: Invalid active0 threshold
[ 9.438154] input: Power Button as /class/input/input1
[ 9.438991] ACPI: Power Button [PWB]
[ 9.489976] input: Sleep Button as /class/input/input2
[ 9.490866] ACPI: Sleep Button [SLPB]
[ 9.536749] thermal LNXTHERM:01: registered as thermal_zone0
[ 9.537244] ACPI: Thermal Zone [THRM] (59 C)
[ 9.577539] input: Lid Switch as /class/input/input3
[ 9.588437] ACPI: acpi_idle registered with cpuidle
[ 9.616305] ACPI: Lid Switch [LID]
[ 9.618505] ACPI: AC Adapter [AC] (on-line)
[ 9.630982] Marking TSC unstable due to TSC halts in idle
[ 9.675618] Switching to clocksource hpet
[ 9.680625] input: Power Button as /class/input/input4
[ 9.681453] ACPI: Power Button [PWRF]
[ 9.843832] 8139too: 8139too Fast Ethernet driver 0.9.28
[ 9.883842] 8139too 0000:00:08.0: PCI INT A -> GSI 19 (level, low) -> IRQ 19
[ 9.915554] 8139too 0000:00:08.0: eth0: RealTek RTL8139 at 0xf8330000,
00:90:f5:3e:5a:ca, IRQ 19
[ 10.587410] input: PC Speaker as /class/input/input5
[ 10.633889] usbcore: registered new interface driver usbfs
[ 10.635825] ACPI: Battery Slot [BAT0] (battery present)
[ 10.649761] usbcore: registered new interface driver hub
[ 10.665124] parport_pc 00:0a: reported by Plug and Play ACPI
[ 10.665455] parport0: PC-style at 0x378 (0x778), irq 7, dma 1
[PCSPP,TRISTATE,COMPAT,ECP,DMA]
[ 10.693796] usbcore: registered new device driver usb
[ 10.750404] Serial: 8250/16550 driver, 4 ports, IRQ sharing disabled
[ 10.754930] serial8250: ttyS0 at I/O 0x3f8 (irq = 4) is a 16550A
[ 10.819412] 00:09: ttyS0 at I/O 0x3f8 (irq = 4) is a 16550A
[ 10.848596] ide-cd driver 5.00
[ 10.862993] ide-cd: hdc: ATAPI 24X DVD-ROM DVD-R/RAM CD-R/RW drive, 2048kB
Cache
[ 10.863539] Uniform CD-ROM driver Revision: 3.20
[ 11.022838] yenta_cardbus 0000:00:0c.0: CardBus bridge found [1558:4702]
[ 11.022926] yenta_cardbus 0000:00:0c.0: Using CSCINT to route CSC interrupts
to PCI
[ 11.022996] yenta_cardbus 0000:00:0c.0: Routing CardBus interrupts to PCI
[ 11.023076] yenta_cardbus 0000:00:0c.0: TI: mfunc 0x00001002, devctl 0x44
[ 11.233754] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[ 11.247490] yenta_cardbus 0000:00:0c.0: ISA IRQ mask 0x0828, PCI irq 16
[ 11.247558] yenta_cardbus 0000:00:0c.0: Socket status: 30000006
[ 11.271879] ACPI: PCI Interrupt Link [ALKD] disabled and referenced, BIOS bug
[ 11.278811] ACPI: PCI Interrupt Link [ALKD] BIOS reported IRQ 0, using IRQ 21
[ 11.278885] ACPI: PCI Interrupt Link [ALKD] enabled at IRQ 21
[ 11.278980] ehci_hcd 0000:00:10.3: PCI INT D -> Link[ALKD] -> GSI 21 (level,
low) -> IRQ 21
[ 11.279227] ehci_hcd 0000:00:10.3: EHCI Host Controller
[ 11.280773] ehci_hcd 0000:00:10.3: new USB bus registered, assigned bus
number 1
[ 11.297359] ehci_hcd 0000:00:10.3: irq 21, io mem 0xd0004400
[ 11.303080] ehci_hcd 0000:00:10.3: USB 2.0 started, EHCI 1.00
[ 11.312411] hub 1-0:1.0: USB hub found
[ 11.312892] hub 1-0:1.0: 6 ports detected
[ 11.377404] uhci_hcd: USB Universal Host Controller Interface driver
[ 11.377956] uhci_hcd 0000:00:10.0: PCI INT A -> Link[ALKD] -> GSI 21 (level,
low) -> IRQ 21
[ 11.378137] uhci_hcd 0000:00:10.0: UHCI Host Controller
[ 11.378429] uhci_hcd 0000:00:10.0: new USB bus registered, assigned bus
number 2
[ 11.378634] uhci_hcd 0000:00:10.0: irq 21, io base 0x00001c00
[ 11.392152] hub 2-0:1.0: USB hub found
[ 11.392579] hub 2-0:1.0: 2 ports detected
[ 11.403136] uhci_hcd 0000:00:10.1: PCI INT B -> Link[ALKD] -> GSI 21 (level,
low) -> IRQ 21
[ 11.403267] uhci_hcd 0000:00:10.1: UHCI Host Controller
[ 11.403566] uhci_hcd 0000:00:10.1: new USB bus registered, assigned bus
number 3
[ 11.403771] uhci_hcd 0000:00:10.1: irq 21, io base 0x00001c20
[ 11.424401] hub 3-0:1.0: USB hub found
[ 11.424710] hub 3-0:1.0: 2 ports detected
[ 11.439609] uhci_hcd 0000:00:10.2: PCI INT C -> Link[ALKD] -> GSI 21 (level,
low) -> IRQ 21
[ 11.439740] uhci_hcd 0000:00:10.2: UHCI Host Controller
[ 11.439982] uhci_hcd 0000:00:10.2: new USB bus registered, assigned bus
number 4
[ 11.440131] input: Video Bus as /class/input/input6
[ 11.442180] ACPI: Video Device [VGA] (multi-head: yes rom: no post: no)
[ 11.447278] uhci_hcd 0000:00:10.2: irq 21, io base 0x00001c40
[ 11.469309] hub 4-0:1.0: USB hub found
[ 11.469607] hub 4-0:1.0: 2 ports detected
[ 11.592261] rtc_cmos 00:02: rtc core: registered rtc_cmos as rtc0
[ 11.592463] rtc0: alarms up to one year, y3k, 242 bytes nvram, hpet irqs
[ 11.986817] pcmcia_socket pcmcia_socket0: cs: IO port probe 0x100-0x3af:
excluding 0x170-0x177 0x1f0-0x1f7 0x370-0x37f
[ 11.995507] pcmcia_socket pcmcia_socket0: cs: IO port probe 0x3e0-0x4ff:
excluding 0x3f0-0x3ff 0x4d0-0x4d7
[ 11.999053] pcmcia_socket pcmcia_socket0: cs: IO port probe 0x820-0x8ff:
clean.
[ 12.001836] pcmcia_socket pcmcia_socket0: cs: IO port probe 0xc00-0xcf7:
clean.
[ 12.004737] pcmcia_socket pcmcia_socket0: cs: memory probe
0x0c0000-0x0fffff: excluding 0xc0000-0xfffff
[ 12.006407] pcmcia_socket pcmcia_socket0: cs: memory probe
0xa0000000-0xa0ffffff: clean.
[ 12.008681] pcmcia_socket pcmcia_socket0: cs: memory probe
0x60000000-0x60ffffff: clean.
[ 12.010118] pcmcia_socket pcmcia_socket0: cs: IO port probe 0xa00-0xaff:
clean.
[ 12.584945] input: PS/2 Mouse as /class/input/input7
[ 12.610477] input: AlpsPS/2 ALPS GlidePoint as /class/input/input8
[ 12.695646] mice: PS/2 mouse device common for all mice
[ 12.731181] VIA 82xx Modem 0000:00:11.6: power state changed by ACPI to D0
[ 12.736595] VIA 82xx Modem 0000:00:11.6: power state changed by ACPI to D0
[ 12.738217] ACPI: PCI Interrupt Link [ALKC] disabled and referenced, BIOS bug
[ 12.739670] ACPI: PCI Interrupt Link [ALKC] BIOS reported IRQ 0, using IRQ 22
[ 12.739737] ACPI: PCI Interrupt Link [ALKC] enabled at IRQ 22
[ 12.739830] VIA 82xx Modem 0000:00:11.6: PCI INT C -> Link[ALKC] -> GSI 22
(level, low) -> IRQ 22
[ 12.741216] VIA 82xx Modem 0000:00:11.6: setting latency timer to 64
[ 13.279374] VIA 82xx Audio 0000:00:11.5: power state changed by ACPI to D0
[ 13.280373] VIA 82xx Audio 0000:00:11.5: power state changed by ACPI to D0
[ 13.280449] VIA 82xx Audio 0000:00:11.5: PCI INT C -> Link[ALKC] -> GSI 22
(level, low) -> IRQ 22
[ 13.280823] VIA 82xx Audio 0000:00:11.5: setting latency timer to 64
[ 18.496153] EXT3-fs (hda1): using internal journal
[ 18.863857] leds_clevo_mail: 'Clevo D410J' found
[ 18.870825] Registered led device: clevo::mail
[ 24.578221] eth0: link down
[ 24.926138] PPP generic driver version 2.4.2
[ 25.256876] NET: Registered protocol family 10
[ 25.260677] ADDRCONF(NETDEV_UP): eth0: link is not ready
[ 25.777936] ip_tables: (C) 2000-2006 Netfilter Core Team
[ 29.757578] fuse init (API version 7.14)
[ 42.706460] lp0: using parport0 (interrupt-driven).
[ 42.769221] ppdev: user-space parallel port driver
[ 43.106758] Linux agpgart interface v0.103
[ 43.562418] [drm] Initialized drm 1.1.0 20060810
[ 43.702975] pci 0000:01:00.0: power state changed by ACPI to D0
[ 43.703625] pci 0000:01:00.0: power state changed by ACPI to D0
[ 43.703646] pci 0000:01:00.0: PCI INT A -> GSI 16 (level, low) -> IRQ 16
[ 43.713375] [drm] Initialized via 2.11.1 20070202 for 0000:01:00.0 on minor 0
[ 43.784193] [drm:via_initialize] *ERROR* called with no agp memory available
[ 46.794112] powernow-k8: Found 1 Mobile AMD Sempron(tm) Processor 2600+ (1
cpu cores) (version 2.20.00)
[ 46.796644] powernow-k8: 0 : fid 0x8 (1600 MHz), vid 0x6
[ 46.796651] powernow-k8: 1 : fid 0x0 (800 MHz), vid 0x18
[ 46.798284] powernow-k8: ph2 null fid transition 0x8
[ 220.909780] Linux video capture interface: v2.00
[ 220.983370] m2m-testdev m2m-testdev.0: mem2mem-testdevDevice registered as
/dev/video0
[ 221.018665] m2m-testdev m2m-testdev.0: m2mtest_open: Created instance
e08eae18, m2m_ctx: e08a52a0
[ 221.018827] m2m-testdev m2m-testdev.0: m2mtest_release: Releasing instance
e08eae18
[ 225.547219] m2m-testdev m2m-testdev.0: m2mtest_open: Created instance
f1c21f30, m2m_ctx: ed7fe558
[ 225.547427] BUG: unable to handle kernel NULL pointer dereference at 00000004
[ 225.547443] IP: [<f810a5a4>] vidioc_g_fmt+0x44/0x70 [mem2mem_testdev]
[ 225.547462] *pde = 00000000
[ 225.547471] Oops: 0000 [#1] PREEMPT
[ 225.547481] last sysfs file: /sys/class/video4linux/video0/uevent
[ 225.547490] Modules linked in: mem2mem_testdev v4l2_mem2mem videodev
v4l1_compat videobuf_vmalloc videobuf_core powernow_k8 mperf cpufreq_powersave
cpufreq_ondemand cpufreq_userspace cpufreq_conservative via drm agpgart ppdev
lp uinput fuse xt_tcpudp iptable_filter ip_tables x_tables ipv6 ppp_generic
slhc leds_clevo_mail led_class snd_via82xx snd_via82xx_modem mousedev
snd_ac97_codec ac97_bus snd_pcm_oss snd_mixer_oss snd_pcm snd_mpu401_uart
snd_seq_oss snd_seq_midi psmouse snd_rawmidi snd_seq_midi_event pcmcia snd_seq
rtc_cmos snd_timer video uhci_hcd firmware_class i2c_viapro ehci_hcd
yenta_socket snd_seq_device backlight snd ide_cd_mod 8250_pnp 8250 parport_pc
rtc_core serio_raw soundcore cdrom output pcspkr snd_page_alloc usbcore parport
serial_core rtc_lib 8139too nls_base i2c_core pcmcia_rsrc battery ac
pcmcia_core processor mii button thermal evdev
[ 225.547696]
[ 225.547706] Pid: 3413, comm: a.out Not tainted 2.6.35-rc3 #2 K8N800/K8N800
[ 225.547715] EIP: 0060:[<f810a5a4>] EFLAGS: 00010246 CPU: 0
[ 225.547725] EIP is at vidioc_g_fmt+0x44/0x70 [mem2mem_testdev]
[ 225.547733] EAX: 00000000 EBX: f5f85178 ECX: ed7fe55c EDX: f810bdf0
[ 225.547741] ESI: e4911738 EDI: f810b680 EBP: f5f23d70 ESP: f5f23d6c
[ 225.547749] DS: 007b ES: 007b FS: 0000 GS: 0033 SS: 0068
[ 225.547758] Process a.out (pid: 3413, ti=f5f22000 task=f5f208b0
task.ti=f5f22000)
[ 225.547764] Stack:
[ 225.547769] f810a5e0 f5f23d78 f810a5ec f5f23e3c f80de350 00000046 00000000
f5f23db4
[ 225.547791] <0> c067b5e0 f5f208b0 f5f20d48 00000000 f5f20d48 f5f208b0
f5f23df0 c0153179
[ 225.547814] <0> f5f23dbc c01506a4 c0495828 00000282 f5f23dc4 c0495828
f5f23dd4 00000000
[ 225.547840] Call Trace:
[ 225.547852] [<f810a5e0>] ? vidioc_g_fmt_vid_cap+0x0/0x10 [mem2mem_testdev]
[ 225.547865] [<f810a5ec>] ? vidioc_g_fmt_vid_cap+0xc/0x10 [mem2mem_testdev]
[ 225.547882] [<f80de350>] ? __video_do_ioctl+0x1260/0x47c0 [videodev]
[ 225.547897] [<c0153179>] ? lock_release_non_nested+0x59/0x2f0
[ 225.547909] [<c01506a4>] ? trace_hardirqs_on_caller+0x124/0x170
[ 225.547923] [<c0190bca>] ? might_fault+0x5a/0xb0
[ 225.547934] [<c0190c10>] ? might_fault+0xa0/0xb0
[ 225.547944] [<c0190bca>] ? might_fault+0x5a/0xb0
[ 225.547957] [<c026c8d8>] ? _copy_from_user+0x38/0x130
[ 225.547971] [<f80e19cf>] ? video_ioctl2+0x11f/0x530 [videodev]
[ 225.547984] [<c01910bc>] ? __do_fault+0xec/0x430
[ 225.547997] [<c0122eeb>] ? get_parent_ip+0xb/0x40
[ 225.548008] [<c017f220>] ? unlock_page+0x40/0x50
[ 225.548018] [<c01912d8>] ? __do_fault+0x308/0x430
[ 225.548018] [<c0122eeb>] ? get_parent_ip+0xb/0x40
[ 225.548018] [<f80e18b0>] ? video_ioctl2+0x0/0x530 [videodev]
[ 225.548018] [<f80dc19b>] ? v4l2_ioctl+0x3b/0x50 [videodev]
[ 225.548018] [<c01b682c>] ? vfs_ioctl+0x8c/0xb0
[ 225.548018] [<c01b699a>] ? do_vfs_ioctl+0x6a/0x5a0
[ 225.548018] [<c0377860>] ? do_page_fault+0x0/0x4b0
[ 225.548018] [<c0143646>] ? up_read+0x16/0x30
[ 225.548018] [<c0377a06>] ? do_page_fault+0x1a6/0x4b0
[ 225.548018] [<c02b4fa0>] ? n_tty_write+0x0/0x3c0
[ 225.548018] [<c01a9920>] ? vfs_write+0x120/0x160
[ 225.548018] [<c02b23e0>] ? tty_write+0x0/0x220
[ 225.548018] [<c01b6f09>] ? sys_ioctl+0x39/0x60
[ 225.548018] [<c0102c0c>] ? sysenter_do_call+0x12/0x32
[ 225.548018] Code: 74 46 8b 03 83 f8 01 74 42 83 f8 02 74 04 0f 0b eb fe ba
e0 bd 10 f8 8b 02 89 43 04 8b 42 04 89 43 08 8b 41 78 89 43 10 8b 42 0c <8b> 40
04 89 43 0c 8b 42 0c 8b 40 08 0f af 02 c1 e8 03 89 43 14
[ 225.548018] EIP: [<f810a5a4>] vidioc_g_fmt+0x44/0x70 [mem2mem_testdev]
SS:ESP 0068:f5f23d6c
[ 225.548018] CR2: 0000000000000004
[ 225.548395] ---[ end trace 2fdad2081a1d158f ]---
[ 225.554462] m2m-testdev m2m-testdev.0: m2mtest_release: Releasing instance
f1c21f30
