Andrew Morton wrote:
Colin Fletcher <[EMAIL PROTECTED]> wrote:
Hello LKML,
I hope this is the right place for this sort of bug report: if there's a
better place, please do point me there.
[1.] Oops and panic on disconnecting Edirol UA-1000 usb2 audio interface
[2.] I have an Edirol UA-1000 USB 2.0 Audio Capture unit. When
disconnected (or powered down), it repeatably causes a kernel panic, in
(I think) linux/drivers/usb/host/ehci-q.c, start_unlink_async(), around
line 1015:
while (prev->qh_next.qh != qh)
prev = prev->qh_next.qh;
where somehow prev->qh_next.qh==NULL.
[3.] usb2 ehci edirol ua-1000 unplug oops panic
[4.] kernels 2.6.12, 2.6.12-rc4, 2.6.12-rc3, 2.6.12-rc2-mm3,
2.6.11.8, 2.6.11-ac7, and some older kernel.org kernels besides. The
SuSE 9.1-supplied 2.6.5 kernels don't oops or panic, but also don't
recognise the UA-1000 as an audio device at all.
[5.]
Oops: 0000 [#1]
PREEMPT SMP
Modules linked in: netconsole edd sg st sd_mod sr_mod scsi_mod nvram
usbserial parport_pc lp parport snd_seq_dummy snd_seq_oss
snd_seq_midi_event snd_seq snd_pcm_oss snd_mixer_oss snd_usb_audio
snd_usb_lib snd_rawmidi snd_seq_device thermal processor fan button
battery ac snd_intel8x0 snd_ac97_codec snd_pcm ipv6 snd_timer snd
soundcore snd_page_alloc ohci_hcd ehci_hcd i2c_sis96x i2c_core evdev
af_packet pcmcia yenta_socket rsrc_nonstatic pcmcia_core sis900 mii
usbcore binfmt_misc ide_cd cdrom dm_mod reiserfs
CPU: 0
EIP: 0060:[<ded39b72>] Not tainted VLI
EFLAGS: 00010207 (2.6.12-colinf)
EIP is at start_unlink_async+0x62/0xf0 [ehci_hcd]
eax: 00000000 ebx: dae8a100 ecx: 00000000 edx: dae8a100
esi: db5cc520 edi: 00010011 ebp: dae8a100 esp: c03f5dd0
ds: 007b es: 007b ss: 0068
Process swapper (pid: 0, threadinfo=c03f4000 task=c035bc00)
Stack: db903120 00000001 db903120 ded38f5d 02008148 d5b39e04 dae8a14c
01000000
00000000 00000001 00000001 dae8a14c db903060 db903120 c03f5fa0 db5cc520
00000000 00000001 dae8a100 db4b1900 ded3c60e c04325c0 00000001 00000000
Call Trace:
[<ded38f5d>] qh_completions+0x28d/0x310 [ehci_hcd]
[<ded3c60e>] scan_periodic+0x24e/0x300 [ehci_hcd]
[<c0118a30>] try_to_wake_up+0x2b0/0x300
[<ded3d5dd>] ehci_work+0x5d/0xc0 [ehci_hcd]
[<ded3d7fb>] ehci_irq+0x1bb/0x2e0 [ehci_hcd]
[<c0118452>] activate_task+0x92/0xb0
[<c0118a30>] try_to_wake_up+0x2b0/0x300
[<c0118353>] recalc_task_prio+0xd3/0x140
[<c0119885>] find_busiest_group+0x105/0x310
[<c0119c57>] load_balance+0x127/0x1a0
[<decf6bc4>] usb_hcd_irq+0x34/0x70 [usbcore]
[<c0142612>] handle_IRQ_event+0x32/0x70
[<c0142727>] __do_IRQ+0xd7/0x140
[<c0105846>] do_IRQ+0x36/0x70
[<c0103c92>] common_interrupt+0x1a/0x20
[<c0101030>] default_idle+0x0/0x30
[<c0101053>] default_idle+0x23/0x30
[<c0101109>] cpu_idle+0x69/0x80
[<c03f699a>] start_kernel+0x1aa/0x230
[<c03f6380>] unknown_bootoption+0x0/0x1e0
Code: fa e1 d3 de 3b 5e 18 74 75 c6 43 68 02 8d 43 60 e8 04 cd 49 e1 89
5e 1c 8b 4e 18 8b 41 48 39 d8 74 10 8d b4 26 00 00 00 00 89 c1 <8b> 40
48 39 d8 75 f7 8b 03 89 01 8b 43 48 89 41 48 8b 46 fc 85
<0>Kernel panic - not syncing: Fatal exception in interrupt
[6.] I don't know if there's any other USB hardware can cause this; it's
100% reproducible for me with the UA-1000.
[7.1.] ver_linux.txt
[7.2.] cpuinfo.txt
[7.3.] modules.txt
[7.4.] lspci.txt
[X.] The same thing seems to happen without CONFIG_PREEMPT and without
CONFIG_SMP, too. Also it happens both with the laptop's built-in USB 2
ports and with a Belkin PCMCIA USB 2 card.
Colin, is this still happening on 2.6.13-rc4?
If so, can you please cc linux-usb-devel@lists.sourceforge.net on the reply
and keep all the text?
I still see the same oops & panic in 2.6.13-rc4, yes.
I've attached a new log: this one includes the lines preceding the oops
from the time I turned the UA-1000 on onwards. In particular, there are
two lines which I don't think I managed to see before, after I turned it
off but before the oops. I don't know if they tell us anything new, but
they say:
ehci_hcd 0000:00:03.3: devpath 5 ep3in 3strikes
ALSA sound/usb/usbmidi.c:176: urb status -71
Colin Fletcher.
--
[Turned on UA-1000 here]
hub 3-0:1.0: state 5 ports 6 chg 0000 evt 0020
ehci_hcd 0000:00:03.3: GetStatus port 5 status 001803 POWER sig=j CSC CONNECT
hub 3-0:1.0: port 5, status 0501, change 0001, 480 Mb/s
hub 3-0:1.0: debounce: port 5: total 100ms stable 100ms status 0x501
ehci_hcd 0000:00:03.3: port 5 high speed
ehci_hcd 0000:00:03.3: GetStatus port 5 status 001005 POWER sig=se0 PE CONNECT
usb 3-5: new high speed USB device using ehci_hcd and address 2
ehci_hcd 0000:00:03.3: port 5 high speed
ehci_hcd 0000:00:03.3: GetStatus port 5 status 001005 POWER sig=se0 PE CONNECT
usb 3-5: skipped 5 descriptors after interface
usb 3-5: skipped 1 descriptor after interface
usb 3-5: skipped 1 descriptor after interface
usb 3-5: default language 0x0409
usb 3-5: new device strings: Mfr=1, Product=2, SerialNumber=3
usb 3-5: Product: UA-1000
usb 3-5: Manufacturer: EDIROL
usb 3-5: SerialNumber: ZS11854
usb 3-5: hotplug
usb 3-5: adding 3-5:1.0 (config #1, interface 0)
usb 3-5:1.0: hotplug
snd-usb-audio 3-5:1.0: usb_probe_interface
snd-usb-audio 3-5:1.0: usb_probe_interface - got id
ALSA sound/usb/usbmidi.c:1206: switching to altsetting 1 with int ep
ALSA sound/usb/usbmidi.c:1106: created 2 output and 2 input ports
usb 3-5: link qh0-00ff/db7e6100 start 0 [17/0 us]
usb 3-5: adding 3-5:1.1 (config #1, interface 1)
usb 3-5:1.1: hotplug
usb 3-5: adding 3-5:1.2 (config #1, interface 2)
usb 3-5:1.2: hotplug
usb 3-5: adding 3-5:1.3 (config #1, interface 3)
usb 3-5:1.3: hotplug
[Turned off UA-1000 here]
ehci_hcd 0000:00:03.3: devpath 5 ep3in 3strikes
ALSA sound/usb/usbmidi.c:176: urb status -71
Unable to handle kernel NULL pointer dereference at virtual address 00000048
printing eip:
ded50d62
*pde = 00000000
Oops: 0000 [#1]
PREEMPT SMP
Modules linked in: netconsole edd sg st sd_mod sr_mod scsi_mod nvram usbserial
parport_pc lp parport snd_seq_dummy snd_seq_oss snd_seq_midi_event snd_seq
snd_pcm_oss snd_mixer_oss snd_usb_audio snd_usb_lib snd_rawmidi snd_seq_device
snd_hwdep thermal processor fan button battery ac snd_intel8x0 snd_ac97_codec
ipv6 snd_pcm snd_timer snd soundcore snd_page_alloc i2c_sis96x ehci_hcd
i2c_core ohci_hcd evdev af_packet pcmcia firmware_class yenta_socket
rsrc_nonstatic pcmcia_core usbcore sis900 mii binfmt_misc ide_cd cdrom dm_mod
reiserfs
CPU: 0
EIP: 0060:[<ded50d62>] Not tainted VLI
EFLAGS: 00010207 (2.6.13-rc4-colinf)
EIP is at start_unlink_async+0x62/0xf0 [ehci_hcd]
eax: 00000000 ebx: db7e6100 ecx: 00000000 edx: db7e6100
esi: da39fcc8 edi: 00010011 ebp: db7e6100 esp: c0409db4
ds: 007b es: 007b ss: 0068
Process swapper (pid: 0, threadinfo=c0408000 task=c036cc00)
Stack: db573060 00000001 db573060 ded5014d 82008148 d5a85f04 db7e614c 01000001
00000000 00000001 00000001 db7e614c db573180 db573060 c0409f88 da39fcc8
00000000 00000001 db7e6100 da8aa3d8 ded5383e 00000000 00000063 c02db426
Call Trace:
[<ded5014d>] qh_completions+0x28d/0x310 [ehci_hcd]
[<ded5383e>] scan_periodic+0x24e/0x300 [ehci_hcd]
[<c02db426>] udp_queue_rcv_skb+0x236/0x2f0
[<ded547ed>] ehci_work+0x5d/0xc0 [ehci_hcd]
[<ded54a0b>] ehci_irq+0x1bb/0x300 [ehci_hcd]
[<c031a0c9>] schedule+0x6b9/0xc70
[<c031a0fd>] schedule+0x6ed/0xc70
[<c01277e8>] __mod_timer+0xa8/0xd0
[<decf8e94>] usb_hcd_irq+0x34/0x70 [usbcore]
[<c0142c32>] handle_IRQ_event+0x32/0x70
[<c0142d49>] __do_IRQ+0xd9/0x140
[<c0105536>] do_IRQ+0x36/0x70
[<c0103992>] common_interrupt+0x1a/0x20
[<ded8ab57>] acpi_processor_idle+0x109/0x2a1 [processor]
[<c0100dc9>] cpu_idle+0x69/0x80
[<c040a9aa>] start_kernel+0x1aa/0x230
[<c040a380>] unknown_bootoption+0x0/0x1e0
Code: 8e 54 d5 de 3b 5e 18 74 75 c6 43 68 02 8d 43 60 e8 24 a5 48 e1 89 5e 1c
8b 4e 18 8b 41 48 39 d8 74 10 8d b4 26 00 00 00 00 89 c1 <8b> 40 48 39 d8 75 f7
8b 03 89 01 8b 43 48 89 41 48 8b 56 fc 85
<0>Kernel panic - not syncing: Fatal exception in interrupt
