X freezes, kernel oops, on logout - Shuttle SN41G2, RH8 (kernel 2.4.28); 6629 driver

[ASpreadbury]

I have a persistent problem with my system: every time I log out of X it freezes. This seems similar to other problems posted in this forum, but not quite the same. I'd be delighted if someone can point out how I've messed up my config, but I'm at a loss.

Thanks!

Diagnostics follow...

Looking at /var/log/messages shows a kernel oops:

Dec 28 20:22:56 pvr kernel: CPU: 0
Dec 28 20:22:56 pvr kernel: EIP: 0010:[<de9f56c1>] Tainted: P
Dec 28 20:22:56 pvr kernel: EFLAGS: 00013246
Dec 28 20:22:56 pvr kernel: eax: 0019957e ebx: db28b8f0 ecx: 00000000 edx: 00000000
Dec 28 20:22:56 pvr kernel: esi: 00000800 edi: 0019957e ebp: db28b740 esp: db28b718
Dec 28 20:22:56 pvr kernel: ds: 0018 es: 0018 ss: 0018
Dec 28 20:22:56 pvr kernel: Process X (pid: 972, stackpage=db28b000)
Dec 28 20:22:56 pvr kernel: Stack: 00000000 db28b940 db28b8f0 00000000 00000198 00000000 db28b7a0 de9f5d31
Dec 28 20:22:56 pvr kernel: 00000198 db28b9d4 db28b7a0 de9f5ec2 d92f0000 db28b974 00000000 003d0900
Dec 28 20:22:56 pvr kernel: 00000800 0000001e 00000000 00000152 00000000 db28b8f0 db28b990 000004b0
Dec 28 20:22:56 pvr kernel: Call Trace: [<de9f5d31>] [<de9f5ec2>] [<de9f60f6>] [<de9f6b8a>] [<de9f854e>]
Dec 28 20:22:56 pvr kernel: [<deb1796e>] [<de9aadea>] [<de9afa7a>] [<de9a3973>] [<de94c19d>] [<dea637e1>]
Dec 28 20:22:56 pvr kernel: [<de9b0de5>] [<de94c013>] [<de9a3cca>] [<de9f8991>] [<de94b77a>] [<de94bfcf>]
Dec 28 20:22:56 pvr kernel: [<de937e6b>] [<de94c1a6>] [<dea63548>] [<de94c19d>] [<de94c1a6>] [<deb35c96>]
Dec 28 20:22:56 pvr kernel: [<dea63548>] [<de937e6b>] [<deb32eea>] [<deb32f6e>] [<de94b77a>] [<de937e6b>]
Dec 28 20:22:56 pvr kernel: [<deac00b2>] [<dea45881>] [<de968ea3>] [<de968f0c>] [<de968ef7>] [<de939177>]
Dec 28 20:22:56 pvr kernel: [<de941b84>] [<de940d0b>] [<de9581be>] [<de93c62f>] [<de93c666>] [<deb96ce0>]
Dec 28 20:22:56 pvr kernel: [<de95eead>] [<de95f093>] [<deb965c0>] [<de95e217>] [<deb96ce0>] [<deb96ce0>]
Dec 28 20:22:56 pvr kernel: [<de934a8f>] [<deb96ce0>] [<c0147e86>] [<c0108ac3>]
Dec 28 20:22:56 pvr kernel: Code: f7 75 20 8b 7d 14 0f af f8 81 c7 e7 03 00 00 b8 d3 4d 62 10

I've decoded this using ksymoops, and this is the output:

>>EIP; de9f56c1 <[nvidia]_nv003937rm+51/90> <=====

>>eax; 0019957e Before first symbol
>>ebx; db28b8f0 <_end+1af5f838/1e4e0fc8>
>>esi; 00000800 Before first symbol
>>edi; 0019957e Before first symbol
>>ebp; db28b740 <_end+1af5f688/1e4e0fc8>
>>esp; db28b718 <_end+1af5f660/1e4e0fc8>

Trace; de9f5d31 <[nvidia]_nv003923rm+369/40c>
Trace; de9f5ec2 <[nvidia]_nv003921rm+ee/214>
Trace; de9f60f6 <[nvidia]_nv003924rm+ca/188>
Trace; de9f6b8a <[nvidia]_nv003935rm+9d6/b30>
Trace; de9f854e <[nvidia]_nv003685rm+67e/86c>
Trace; deb1796e <[nvidia]_nv002611rm+1a/20>
Trace; de9aadea <[nvidia]_nv006309rm+3e/48>
Trace; de9afa7a <[nvidia]_nv006343rm+3a/44>
Trace; de9a3973 <[nvidia]_nv006353rm+83/a4>
Trace; de94c19d <[nvidia]_nv001847rm+1d/2c>
Trace; dea637e1 <[nvidia]_nv002175rm+d1/fc>
Trace; de9b0de5 <[nvidia]_nv006354rm+19/20>
Trace; de94c013 <[nvidia]_nv001853rm+6f/84>
Trace; de9a3cca <[nvidia]_nv006474rm+122/15c>
Trace; de9f8991 <[nvidia]_nv003689rm+255/1528>
Trace; de94b77a <[nvidia]_nv001955rm+36/e0>
Trace; de94bfcf <[nvidia]_nv001853rm+2b/84>
Trace; de937e6b <[nvidia]_nv007274rm+13/34>
Trace; de94c1a6 <[nvidia]_nv001847rm+26/2c>
Trace; dea63548 <[nvidia]_nv002152rm+98/a4>
Trace; de94c19d <[nvidia]_nv001847rm+1d/2c>
Trace; de94c1a6 <[nvidia]_nv001847rm+26/2c>
Trace; deb35c96 <[nvidia]_nv000084rm+a2/b4>
Trace; dea63548 <[nvidia]_nv002152rm+98/a4>
Trace; de937e6b <[nvidia]_nv007274rm+13/34>
Trace; deb32eea <[nvidia]_nv000239rm+8a/1bc>
Trace; deb32f6e <[nvidia]_nv000239rm+10e/1bc>
Trace; de94b77a <[nvidia]_nv001955rm+36/e0>
Trace; de937e6b <[nvidia]_nv007274rm+13/34>
Trace; deac00b2 <[nvidia]_nv000238rm+46/54>
Trace; dea45881 <[nvidia]_nv004998rm+2d/70>
Trace; de968ea3 <[nvidia]_nv007323rm+6f/e8>
Trace; de968f0c <[nvidia]_nv007323rm+d8/e8>
Trace; de968ef7 <[nvidia]_nv007323rm+c3/e8>
Trace; de939177 <[nvidia]_nv007270rm+23/70>
Trace; de941b84 <[nvidia]_nv001337rm+94/b4>
Trace; de940d0b <[nvidia]_nv001350rm+1e7/1f4>
Trace; de9581be <[nvidia]_nv001820rm+12/18>
Trace; de93c62f <[nvidia]_nv004022rm+33/a0>
Trace; de93c666 <[nvidia]_nv004022rm+6a/a0>
Trace; deb96ce0 <[nvidia]nv_ctl_device+0/e0>
Trace; de95eead <[nvidia]_nv001308rm+3d/53c>
Trace; de95f093 <[nvidia]_nv001308rm+223/53c>
Trace; deb965c0 <[nvidia]nv_linux_devices+0/700>
Trace; de95e217 <[nvidia]rm_ioctl+23/38>
Trace; deb96ce0 <[nvidia]nv_ctl_device+0/e0>
Trace; deb96ce0 <[nvidia]nv_ctl_device+0/e0>
Trace; de934a8f <[nvidia]nv_kern_ioctl+2e5/334>
Trace; deb96ce0 <[nvidia]nv_ctl_device+0/e0>
Trace; c0147e86 <sys_ioctl+b6/270>
Trace; c0108ac3 <system_call+33/38>

Code; de9f56c1 <[nvidia]_nv003937rm+51/90>
00000000 <_EIP>:
Code; de9f56c1 <[nvidia]_nv003937rm+51/90> <=====
0: f7 75 20 divl 0x20(%ebp) <=====
Code; de9f56c4 <[nvidia]_nv003937rm+54/90>
3: 8b 7d 14 mov 0x14(%ebp),%edi
Code; de9f56c7 <[nvidia]_nv003937rm+57/90>
6: 0f af f8 imul %eax,%edi
Code; de9f56ca <[nvidia]_nv003937rm+5a/90>
9: 81 c7 e7 03 00 00 add $0x3e7,%edi
Code; de9f56d0 <[nvidia]_nv003937rm+60/90>
f: b8 d3 4d 62 10 mov $0x10624dd3,%eax

I.e., deep inside my nvidia.o, prompted by an ioctl() call inside my X process, it does a divide-by-zero.

Details of my set-up:
- Shuttle SN41G2 (v1) SFF PC, with nForce2 and GeForce 4 built-in
- AMD Sempron 2500 CPU
- Red Hat Linux v8, upgraded to kernel 2.4.28
- nVidia Linux x86 driver version 1.0.6629 (latest).

Here is my XF86Config, in case it is relevant:

# XFree86 4 configuration created by pyxf86config

Section "ServerLayout"
Identifier "Default Layout"
Screen 0 "Screen0" 0 0
InputDevice "Mouse0" "CorePointer"
InputDevice "Keyboard0" "CoreKeyboard"
InputDevice "DevInputMice" "AlwaysCore"
EndSection

Section "Files"
# RgbPath is the location of the RGB database. Note, this is the name of the
# file minus the extension (like ".txt" or ".db"). There is normally
# no need to change the default.
# Multiple FontPath entries are allowed (they are concatenated together)
# By default, Red Hat 6.0 and later now use a font server independent of
# the X server to render fonts.
RgbPath "/usr/X11R6/lib/X11/rgb"
FontPath "unix/:7100"
EndSection

Section "Module"
Load "dbe"
Load "extmod"
Load "fbdevhw"
Load "glx"
Load "record"
Load "freetype"
Load "type1"
EndSection

Section "InputDevice"
# Specify which keyboard LEDs can be user-controlled (eg, with xset(1))
# Option "Xleds" "1 2 3"
# To disable the XKEYBOARD extension, uncomment XkbDisable.
# Option "XkbDisable"
# To customise the XKB settings to suit your keyboard, modify the
# lines below (which are the defaults). For example, for a non-U.S.
# keyboard, you will probably want to use:
# Option "XkbModel" "pc102"
# If you have a US Microsoft Natural keyboard, you can use:
# Option "XkbModel" "microsoft"
#
# Then to change the language, change the Layout setting.
# For example, a german layout can be obtained with:
# Option "XkbLayout" "de"
# or:
# Option "XkbLayout" "de"
# Option "XkbVariant" "nodeadkeys"
#
# If you'd like to switch the positions of your capslock and
# control keys, use:
# Option "XkbOptions" "ctrl:swapcaps"
# Or if you just want both to be control, use:
# Option "XkbOptions" "ctrl:nocaps"
#
Identifier "Keyboard0"
Driver "keyboard"
Option "XkbRules" "xfree86"
Option "XkbModel" "pc101"
Option "XkbLayout" "gb"
EndSection

Section "InputDevice"
Identifier "Mouse0"
Driver "mouse"
Option "Protocol" "PS/2"
Option "Device" "/dev/psaux"
Option "ZAxisMapping" "4 5"
Option "Emulate3Buttons" "no"
EndSection

Section "InputDevice"
# If the normal CorePointer mouse is not a USB mouse then
# this input device can be used in AlwaysCore mode to let you
# also use USB mice at the same time.
Identifier "DevInputMice"
Driver "mouse"
Option "Protocol" "IMPS/2"
Option "Device" "/dev/input/mice"
Option "ZAxisMapping" "4 5"
Option "Emulate3Buttons" "no"
EndSection

Section "Monitor"
Identifier "Monitor0"
VendorName "Monitor Vendor"
ModelName "Dell 1900FP (Analog)"
HorizSync 30.0 - 80.0
VertRefresh 56.0 - 76.0
ModeLine "1400x1050" 129.0 1400 1464 1656 1960 1050 1051 1054 1100 +hsync +vsync
ModeLine "1400x1050" 151.0 1400 1464 1656 1960 1050 1051 1054 1100 +hsync +vsync
ModeLine "1400x1050" 162.0 1400 1464 1656 1960 1050 1051 1054 1100 +hsync +vsync
ModeLine "1400x1050" 184.0 1400 1464 1656 1960 1050 1051 1054 1100 +hsync +vsync
Option "dpms"
EndSection

Section "Device"
# update this with the PCI id of your card. Consult the output
# of the 'lspci' command. The BusID is usually optional when
# only using one graphics card.
Identifier "NV PCI"
Driver "nvidia"
VendorName "nvidia"
BoardName "NVIDIA GeForce"
BusID "PCI:2:0:0"
EndSection

Section "Screen"
Identifier "Screen0"
Device "NV PCI"
Monitor "Monitor0"
DefaultDepth 16
SubSection "Display"
Modes "800x600"
EndSubSection
SubSection "Display"
Depth 16
Modes "1600x1200" "1400x1050" "1280x1024" "1280x960" "1152x864" "1024x768" "800x600" "640x480"
EndSubSection
EndSection