Bug 11855 - pl2303: kernel BUG when bringing down ppp connection
Summary: pl2303: kernel BUG when bringing down ppp connection
Status: CLOSED CODE_FIX
Alias: None
Product: Networking
Classification: Unclassified
Component: Other (show other bugs)
Hardware: All Linux
: P1 high
Assignee: Arnaldo Carvalho de Melo
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2008-10-25 17:34 UTC by Jason Cassell
Modified: 2010-01-25 14:01 UTC (History)
1 user (show)

See Also:
Kernel Version: 2.6.27.3
Subsystem:
Regression: Yes
Bisected commit-id:


Attachments
tarball of photos of the screen (810.00 KB, application/x-tar)
2008-10-25 17:51 UTC, Jason Cassell
Details
lspci -vvv (20.68 KB, text/plain)
2008-10-25 17:54 UTC, Jason Cassell
Details
lsusb -v (39.24 KB, text/plain)
2008-10-25 17:56 UTC, Jason Cassell
Details
2.6.27.3 config (56.76 KB, text/plain)
2008-10-25 17:59 UTC, Jason Cassell
Details
2.6.27 config (57.39 KB, text/plain)
2008-10-25 18:01 UTC, Jason Cassell
Details

Description Jason Cassell 2008-10-25 17:34:15 UTC
Latest working kernel version: 2.6.26.6
Earliest failing kernel version: 2.6.27
Distribution: Debian sid
Hardware Environment: Dell Inspiron 1721, AMD x86-64 SMP
Software Environment:
Gnu C                  4.3.2
Gnu make               3.81
binutils               2.18.0.20080103
util-linux             2.13.1.1
mount                  2.13.1.1
module-init-tools      found
Linux C Library        2.7
Dynamic linker (ldd)   2.7
Procps                 3.2.7
Console-tools          0.2.3
Sh-utils               6.10
udev                   125

Problem Description: I connect to my dialup service with a Zoom model 3048 modem connected via a Radio Shack 26-183 USB/serial converter cable.  When I log off (using poff), sometimes it works perfectly, but usually after the modem disconnects I get:

kernel BUG at drivers/char/tty_ldisc.c:199!
invalid opcode: 0000 [1] PREEMPT SMP
CPU 1

and then 12 screenfuls of stack traces and stuff, with a bunch of "scheduling while atomic" BUGs.. none of it ever managed to get in any logs, so I'll be attaching photos of the screen.

At this point, sometimes the magic SysRq key combinations work, but usually they don't, and I have to just turn the computer off.

I reproduced this with 2.6.27.2 and 2.6.27.3, and then with 2.6.27 using a configuration closer to the one I use for 2.6.26.6.

I set the severity to high because this makes 2.6.27 unusable for me.

Steps to reproduce: hmm, guess I already said that.
Comment 1 Jason Cassell 2008-10-25 17:51:55 UTC
Created attachment 18439 [details]
tarball of photos of the screen
Comment 2 Jason Cassell 2008-10-25 17:54:16 UTC
Created attachment 18440 [details]
lspci -vvv

run under 2.6.26.6, which isn't the kernel that crashed.  I don't know if that matters
Comment 3 Jason Cassell 2008-10-25 17:56:29 UTC
Created attachment 18441 [details]
lsusb -v

also run under 2.6.26.6
Comment 4 Jason Cassell 2008-10-25 17:59:08 UTC
Created attachment 18442 [details]
2.6.27.3 config

this is the config of the kernel that crashed in the screenshots
Comment 5 Jason Cassell 2008-10-25 18:01:45 UTC
Created attachment 18443 [details]
2.6.27 config

2.6.27, using this config, also crashed the same way
Comment 6 Anonymous Emailer 2008-10-27 20:24:45 UTC
Reply-To: akpm@linux-foundation.org


(switched to email.  Please respond via emailed reply-to-all, not via the
bugzilla web interface).

On Sat, 25 Oct 2008 17:34:16 -0700 (PDT) bugme-daemon@bugzilla.kernel.org wrote:

> http://bugzilla.kernel.org/show_bug.cgi?id=11855
> 
>            Summary: kernel BUG when bringing down ppp connection
>            Product: Networking
>            Version: 2.5
>      KernelVersion: 2.6.27.3
>           Platform: All
>         OS/Version: Linux
>               Tree: Mainline
>             Status: NEW
>           Severity: high
>           Priority: P1
>          Component: Other
>         AssignedTo: acme@ghostprotocols.net
>         ReportedBy: bluesloth600@gmail.com
> 
> 
> Latest working kernel version: 2.6.26.6
> Earliest failing kernel version: 2.6.27

A regression.

> Distribution: Debian sid
> Hardware Environment: Dell Inspiron 1721, AMD x86-64 SMP
> Software Environment:
> Gnu C                  4.3.2
> Gnu make               3.81
> binutils               2.18.0.20080103
> util-linux             2.13.1.1
> mount                  2.13.1.1
> module-init-tools      found
> Linux C Library        2.7
> Dynamic linker (ldd)   2.7
> Procps                 3.2.7
> Console-tools          0.2.3
> Sh-utils               6.10
> udev                   125
> 
> Problem Description: I connect to my dialup service with a Zoom model 3048
> modem connected via a Radio Shack 26-183 USB/serial converter cable.  When I
> log off (using poff), sometimes it works perfectly, but usually after the
> modem
> disconnects I get:
> 
> kernel BUG at drivers/char/tty_ldisc.c:199!
> invalid opcode: 0000 [1] PREEMPT SMP
> CPU 1

This has an Alany feel to it?

> and then 12 screenfuls of stack traces and stuff, with a bunch of "scheduling
> while atomic" BUGs.. none of it ever managed to get in any logs, so I'll be
> attaching photos of the screen.
> 
> At this point, sometimes the magic SysRq key combinations work, but usually
> they don't, and I have to just turn the computer off.
> 
> I reproduced this with 2.6.27.2 and 2.6.27.3, and then with 2.6.27 using a
> configuration closer to the one I use for 2.6.26.6.
> 
> I set the severity to high because this makes 2.6.27 unusable for me.
> 
> Steps to reproduce: hmm, guess I already said that.

Additional details are attached to the bugzilla report.
Comment 7 Alan 2008-10-28 02:45:16 UTC
> > kernel BUG at drivers/char/tty_ldisc.c:199!
> > invalid opcode: 0000 [1] PREEMPT SMP
> > CPU 1
> 
> This has an Alany feel to it?

Ldisc refcount went negative. Will take a look at the bug report when I
have time. First guess would be a bug in the specific USB serial driver -
so need to know which driver is handlign the 26-183 and what is loaded
(an lsmod would be handy)

Alan
Comment 8 Jason Cassell 2008-10-29 04:16:21 UTC
On Tue, 2008-10-28 at 09:44 +0000, Alan Cox wrote:
> 
> Ldisc refcount went negative. Will take a look at the bug report when I
> have time. First guess would be a bug in the specific USB serial driver -
> so need to know which driver is handlign the 26-183 

pl2303

> and what is loaded
> (an lsmod would be handy)

the "Modules linked in" list is in the screen photos.  I'll go get some
real lsmod output if that's not enough.

Jason Cassell
Comment 9 Alan 2008-11-11 08:04:17 UTC
Ok so there are now 3 different pl2303 reports. Thats helpful - all different symptoms but pointing fairly clearly at one driver
Comment 10 Jason Cassell 2008-12-14 23:44:43 UTC
I tried to reproduce this 6 times with 2.6.28-rc8 and it didn't crash.

2.6.27.7 crashes.  I havn't tried .8 or .9.

Note You need to log in before you can comment on or make changes to this bug.