Bug 16614

Summary:	[2.6.35] usb 2.0 em28xx kernel panic general protection fault: 0000 [#1] SMP RIP: 0010:[<ffffffffa004fbc5>] [<ffffffffa004fbc5>] em28xx_isoc_copy_vbi+0x62e/0x812 [em28xx]
Product:	Drivers	Reporter:	Maciej Rutecki (maciej.rutecki)
Component:	Video(Other)	Assignee:	drivers_video-other
Status:	CLOSED CODE_FIX
Severity:	normal	CC:	florian, greg, maciej.rutecki, rjw
Priority:	P1
Hardware:	All
OS:	Linux
Kernel Version:	2.6.35	Subsystem:
Regression:	Yes	Bisected commit-id:
Bug Depends on:
Bug Blocks:	16055

Description Maciej Rutecki 2010-08-17 18:10:29 UTC

Subject    : [2.6.35] usb 2.0 em28xx  kernel panic general protection fault: 0000 [#1] SMP          RIP: 0010:[<ffffffffa004fbc5>]  [<ffffffffa004fbc5>] em28xx_isoc_copy_vbi+0x62e/0x812 [em28xx]
Submitter  : Sander Eikelenboom <linux@eikelenboom.it>
Date       : 2010-08-10 22:12
Message-ID : 61936849.20100811001257@eikelenboom.it
References : http://marc.info/?l=linux-kernel&m=128152075830927&w=2

This entry is being used for tracking a regression from 2.6.34. Please don't
close it until the problem is fixed in the mainline.

Comment 1 Florian Mickler 2010-09-30 07:16:03 UTC

From the referenced Bugreport:

[  279.680018] general protection fault: 0000 [#1] SMP
[  279.683901] last sysfs file: \
/sys/devices/pci0000:00/0000:00:12.2/usb1/1-5/i2c-0/name [  279.683901] CPU 5 
[  279.683901] Modules linked in: xt_multiport ipt_REJECT xt_recent xt_limit \
xt_tcpudp powernow_k8 mperf xt_state ipt_MA SQUERADE ipt_LOG iptable_mangle \
iptable_filter iptable_nat ip_tables nf_nat x_tables nf_conntrack_ipv4 nf_conntrack \
nf_d efrag_ipv4 fuse hwmon_vid loop saa7115 snd_cmipci gameport snd_opl3_lib \
snd_hwdep snd_mpu401_uart snd_rawmidi em28xx v4l 2_common snd_hda_codec_atihdmi \
snd_hda_intel snd_hda_codec snd_pcm snd_seq_device videodev snd_timer snd v4l1_compat \
v4l 2_compat_ioctl32 videobuf_vmalloc videobuf_core psmouse tpm_tis joydev evdev \
tveeprom serio_raw shpchp edac_core i2c_pii x4 soundcore pcspkr i2c_core pci_hotplug \
                wmi snd_page_alloc processor button sd_mod r8169 thermal fan \
                thermal_sys [last 
unloaded: scsi_wait_scan]
[  279.683901] 
[  279.683901] Pid: 0, comm: swapper Not tainted 2.6.352.6.35-vanilla-xhci-isoc+ #6 \
890FXA-GD70 (MS-7640)  /MS-7640 [  279.683901] RIP: 0010:[<ffffffffa004fbc5>]  \
[<ffffffffa004fbc5>] em28xx_isoc_copy_vbi+0x62e/0x812 [em28xx] [  279.683901] RSP: \
0018:ffff880001b43c68  EFLAGS: 00010082 [  279.683901] RAX: dead000000200200 RBX: \
0000000000000804 RCX: ffff880229625818 [  279.683901] RDX: dead000000100100 RSI: \
0000000000000003 RDI: ffff880229625868 [  279.683901] RBP: ffff880001b43d08 R08: \
0000000000000000 R09: 0000000000000804 [  279.683901] R10: ffff880229597000 R11: \
0000000000000000 R12: 0000000000000000 [  279.683901] R13: ffff88022f158820 R14: \
ffff880229597000 R15: 0000000000000344 [  279.683901] FS:  00007fa4bd3706e0(0000) \
GS:ffff880001b40000(0000) knlGS:0000000000000000 [  279.683901] CS:  0010 DS: 0000 \
ES: 0000 CR0: 000000008005003b [  279.683901] CR2: 00007fa4bd35f000 CR3: \
000000022a9ad000 CR4: 00000000000006e0 [  279.683901] DR0: 0000000000000000 DR1: \
0000000000000000 DR2: 0000000000000000 [  279.683901] DR3: 0000000000000000 DR6: \
00000000ffff0ff0 DR7: 0000000000000400 [  279.683901] Process swapper (pid: 0, \
threadinfo ffff880237d4a000, task ffff880237d2f7a0) [  279.683901] Stack:
[  279.683901]  ffffffff8103d7a3 ffff880001b43cb0 0000000000000082 ffff8802375e2188
[  279.683901] <0> 0000000000000804 ffff880229625818 ffff880229597a40 \
ffff880229597a90 [  279.683901] <0> ffffc90010b72000 0000000000000000 \
0000002237d20000 ffff880229597000 [  279.683901] Call Trace:
[  279.683901]  <IRQ> 
[  279.683901]  [<ffffffff8103d7a3>] ? enqueue_task+0x77/0x87
[  279.683901]  [<ffffffffa0053398>] em28xx_irq_callback+0x7e/0xfe [em28xx]
[  279.683901]  [<ffffffff81359415>] usb_hcd_giveback_urb+0x84/0xb8
[  279.683901]  [<ffffffff8136b51b>] ehci_urb_done+0xcf/0xe4
[  279.683901]  [<ffffffff8136cd15>] ehci_work+0x504/0x8da
[  279.683901]  [<ffffffff81370fda>] ehci_irq+0x19c/0x1ce
[  279.683901]  [<ffffffff81358bd1>] usb_hcd_irq+0x3e/0x83
[  279.683901]  [<ffffffff8108782c>] handle_IRQ_event+0x58/0x136
[  279.683901]  [<ffffffff81089414>] handle_fasteoi_irq+0x92/0xd2
[  279.683901]  [<ffffffff8100b241>] handle_irq+0x1f/0x2a
[  279.683901]  [<ffffffff8100a884>] do_IRQ+0x5a/0xc1
[  279.683901]  [<ffffffff8146c953>] ret_from_intr+0x0/0x11
[  279.683901]  <EOI> 
[  279.683901]  [<ffffffffa0044740>] ? acpi_idle_enter_simple+0x130/0x168 [processor]
[  279.683901]  [<ffffffffa004473c>] ? acpi_idle_enter_simple+0x12c/0x168 [processor]
[  279.683901]  [<ffffffff813ad822>] cpuidle_idle_call+0x9b/0xfd
[  279.683901]  [<ffffffff81007868>] cpu_idle+0x51/0x84
[  279.683901]  [<ffffffff81466d1b>] start_secondary+0x1c0/0x1c5
[  279.683901] Code: 83 ef 80 e8 69 39 01 e1 48 8b 4d 88 49 c7 86 18 0b 00 00 00 00 \
00 00 be 03 00 00 00 48 8b 51 40 48  8b 41 48 48 89 cf 48 83 c7 50 <48> 89 42 08 48 \
89 10 48 b8 00 01 10 00 00 00 ad de 48 89 41 40  [  279.683901] RIP  \
[<ffffffffa004fbc5>] em28xx_isoc_copy_vbi+0x62e/0x812 [em28xx] [  279.683901]  RSP \
<ffff880001b43c68> [  279.683901] ---[ end trace 0f55a03076b067cf ]---
[  279.683901] Kernel panic - not syncing: Fatal exception in interrupt
[  279.683901] Pid: 0, comm: swapper Tainted: G      D     \
2.6.352.6.35-vanilla-xhci-isoc+ #6 [  279.683901] Call Trace:
[  279.683901]  <IRQ>  [<ffffffff81469cf9>] panic+0xb1/0x12a
[  279.683901]  [<ffffffff81043b90>] ? kmsg_dump+0x126/0x140
[  279.683901]  [<ffffffff8100c354>] oops_end+0x89/0x96
[  279.683901]  [<ffffffff8100c534>] die+0x55/0x5e
[  279.683901]  [<ffffffff8100a26f>] do_general_protection+0x130/0x138
[  279.683901]  [<ffffffff8146cc05>] general_protection+0x25/0x30
[  279.683901]  [<ffffffffa004fbc5>] ? em28xx_isoc_copy_vbi+0x62e/0x812 [em28xx]
[  279.683901]  [<ffffffffa004fba2>] ? em28xx_isoc_copy_vbi+0x60b/0x812 [em28xx]
[  279.683901]  [<ffffffff8103d7a3>] ? enqueue_task+0x77/0x87
[  279.683901]  [<ffffffffa0053398>] em28xx_irq_callback+0x7e/0xfe [em28xx]
[  279.683901]  [<ffffffff81359415>] usb_hcd_giveback_urb+0x84/0xb8
[  279.683901]  [<ffffffff8136b51b>] ehci_urb_done+0xcf/0xe4
[  279.683901]  [<ffffffff8136cd15>] ehci_work+0x504/0x8da
[  279.683901]  [<ffffffff81370fda>] ehci_irq+0x19c/0x1ce
[  279.683901]  [<ffffffff81358bd1>] usb_hcd_irq+0x3e/0x83
[  279.683901]  [<ffffffff8108782c>] handle_IRQ_event+0x58/0x136
[  279.683901]  [<ffffffff81089414>] handle_fasteoi_irq+0x92/0xd2
[  279.683901]  [<ffffffff8100b241>] handle_irq+0x1f/0x2a
[  279.683901]  [<ffffffff8100a884>] do_IRQ+0x5a/0xc1
[  279.683901]  [<ffffffff8146c953>] ret_from_intr+0x0/0x11
[  279.683901]  <EOI>  [<ffffffffa0044740>] ? acpi_idle_enter_simple+0x130/0x168 \
[processor] [  279.683901]  [<ffffffffa004473c>] ? acpi_idle_enter_simple+0x12c/0x168 \
[processor] [  279.683901]  [<ffffffff813ad822>] cpuidle_idle_call+0x9b/0xfd
[  279.683901]  [<ffffffff81007868>] cpu_idle+0x51/0x84
[  279.683901]  [<ffffffff81466d1b>] start_secondary+0x1c0/0x1c5

Comment 2 Rafael J. Wysocki 2010-10-11 20:16:10 UTC

On Monday, October 11, 2010, Sander Eikelenboom wrote:
> Hello Rafael,
> 
> This one seems to be fixed, in the sense that i still get an error, but it
> doesn't crash the kernel.
> And since it was my mistake to use the deprecated video4linux interface
> instead of the video4linux2, i think it's fine to consider it fixed.
> 
> 
> security:~# ffmpeg -f video4linux -r 25 -s 720x576 -i /dev/video0 out.flv
> FFmpeg version SVN-r20654, Copyright (c) 2000-2009 Fabrice Bellard, et al.
>   built on Nov 29 2009 08:11:53 with gcc 4.3.4
>   configuration: --prefix=/usr --extra-cflags='-Wall -g ' --cc='ccache cc'
>   --enable-shared --enable-libmp3lame --enable-gpl --enable-libfaad
>   --enable-libvorbis --enable-pthreads --enable-libfaac --enable-libxvid
>   --enable-postproc --enable-x11grab --enable-libgsm
>   --enable-libopencore-amrnb --enable-libopencore-amrwb --enable-libx264
>   --enable-libtheora --enable-libdc1394 --enable-libspeex --enable-nonfree
>   --disable-stripping --enable-avfilter --enable-libdirac
>   --disable-decoder=libdirac --enable-libschroedinger
>   --disable-encoder=libschroedinger --enable-avfilter-lavf
>   --enable-libopenjpeg --enable-version3 --disable-altivec --disable-armv5te
>   --disable-armv6 --disable-vis
>   libavutil     50. 5. 1 / 50. 5. 1
>   libavcodec    52.42. 0 / 52.42. 0
>   libavformat   52.39. 2 / 52.39. 2
>   libavdevice   52. 2. 0 / 52. 2. 0
>   libavfilter    1.11. 0 /  1.11. 0
>   libswscale     0. 7. 2 /  0. 7. 2
>   libpostproc   51. 2. 0 / 51. 2. 0
> [video4linux @ 0xff45e0]VIDIOCMCAPTURE: Cannot allocate memory
> /dev/video0: I/O error occurred
> Usually that means that input file is truncated and/or corrupted.