Bug 195029 - Kernel Oops with DVBSky S960/S860 DVB-S2 device
Summary: Kernel Oops with DVBSky S960/S860 DVB-S2 device
Status: NEW
Alias: None
Product: Drivers
Classification: Unclassified
Component: Other (show other bugs)
Hardware: ARM Linux
: P1 normal
Assignee: drivers_other
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2017-03-24 18:11 UTC by Alexander Schier
Modified: 2018-08-09 19:22 UTC (History)
0 users

See Also:
Kernel Version: 4.18.0-rc4-odroidxu
Subsystem:
Regression: No
Bisected commit-id:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Description Alexander Schier 2017-03-24 18:11:25 UTC 
I sometimes get a kernel oops with the DVB-S2 device. In general, it does not work after unplugging and plugging it in again, just giving error messages:

[Fri Mar 24 19:05:16 2017] usb 1-1.4: USB disconnect, device number 6
[Fri Mar 24 19:05:16 2017] usb 1-1.4: dvb_usb_v2: usb_bulk_msg() failed=-19
[Fri Mar 24 19:05:16 2017] usb 1-1.4: failed=-19
[Fri Mar 24 19:05:18 2017] usb 1-1.4: dvb_usb_v2: usb_bulk_msg() failed=-19
[Fri Mar 24 19:05:18 2017] usb 1-1.4: failed=-19

But after this messages there is sometimes even a kernel oops:

[Fri Mar 24 19:05:45 2017] usb 1-1.4: dvb_usb_v2: usb_bulk_msg() failed=-19
[Fri Mar 24 19:05:45 2017] usb 1-1.4: failed=-19
[Fri Mar 24 19:06:26 2017] ------------[ cut here ]------------
[Fri Mar 24 19:06:26 2017] kernel BUG at mm/slub.c:3627!
[Fri Mar 24 19:06:26 2017] Internal error: Oops - BUG: 0 [#1] SMP ARM
[Fri Mar 24 19:06:26 2017] Modules linked in: algif_skcipher af_alg ipip tunnel4 ip_tunnel tun ccm ip6t_REJECT nf_reject_ipv6 ip6table_filter ip6_tables xt_tcpudp ipt_REJECT nf_reject_ipv4 xt_conntrack iptable_filter ipt_MASQUERADE nf_nat_masquerade_ipv4 iptable_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_nat_ipv4 nf_nat nf_conntrack ip_tables x_tables dm_crypt dm_mod ts2020 rt2800usb rt2800lib rt2x00usb rt2x00lib mac80211 cfg80211 rfkill dvb_usb_dvbsky m88ds3103 snd_usb_audio snd_hwdep snd_usbmidi_lib snd_rawmidi input_leds sun4i_codec evdev snd_soc_core snd_pcm_dmaengine snd_pcm snd_timer snd soundcore nvmem_sunxi_sid sun4i_ts nvmem_core sun4i_ss cpufreq_dt uio_pdrv_genirq thermal_sys uio
[Fri Mar 24 19:06:26 2017] CPU: 0 PID: 7283 Comm: bash Not tainted 4.4.34-bananian #2
[Fri Mar 24 19:06:26 2017] Hardware name: Allwinner sun7i (A20) Family
[Fri Mar 24 19:06:26 2017] task: eaee8b00 ti: e8574000 task.ti: e8574000
[Fri Mar 24 19:06:26 2017] PC is at kfree+0x190/0x1d4
[Fri Mar 24 19:06:26 2017] LR is at free_rb_tree_fname+0x3c/0x5c
[Fri Mar 24 19:06:26 2017] pc : [<c0125774>]    lr : [<c01a2034>]    psr: 400f0013
sp : e8575f18  ip : 001a2410  fp : 00000000
[Fri Mar 24 19:06:26 2017] r10: e8538848  r9 : 40000010  r8 : eefb9440
[Fri Mar 24 19:06:26 2017] r7 : ecacbe40  r6 : ee790040  r5 : c01a2034  r4 : ee790040
[Fri Mar 24 19:06:26 2017] r3 : efd81040  r2 : efd54d8c  r1 : efd54d8c  r0 : ee790040
[Fri Mar 24 19:06:26 2017] Flags: nZcv  IRQs on  FIQs on  Mode SVC_32  ISA ARM  Segment none
[Fri Mar 24 19:06:26 2017] Control: 10c5387d  Table: 6d29006a  DAC: 00000051
[Fri Mar 24 19:06:26 2017] Process bash (pid: 7283, stack limit = 0xe8574210)
[Fri Mar 24 19:06:26 2017] Stack: (0xe8575f18 to 0xe8576000)
[Fri Mar 24 19:06:26 2017] 5f00:                                                       00000001 c01a2034
[Fri Mar 24 19:06:26 2017] 5f20: c0b29518 ee790040 00000000 ecacba40 ecacbe40 eefb9440 40000010 c01a2034
[Fri Mar 24 19:06:26 2017] 5f40: c01a2054 ecacbe40 ee028600 00000000 ee51d010 c01a206c e8538840 c0137798
[Fri Mar 24 19:06:26 2017] 5f60: 00000000 00000000 eaee8e8c 00000000 c0b29f30 eaee8b00 c000f7c4 e8574000
[Fri Mar 24 19:06:26 2017] 5f80: 00000000 c0040d24 e8538840 e8574000 c000f7c4 e8575fb0 00000006 c00131ec
[Fri Mar 24 19:06:26 2017] 5fa0: 00000003 00000000 000c5758 c000f654 00000000 000000dc d357ca00 d357ca00
[Fri Mar 24 19:06:26 2017] 5fc0: 00000003 00000000 000c5758 00000006 00145a14 000c8184 00000000 00000000
[Fri Mar 24 19:06:26 2017] 5fe0: 00000006 beb60dd8 b6ea85f9 b6e4f8e6 600f0030 00000003 00000000 00000000
[Fri Mar 24 19:06:26 2017] [<c0125774>] (kfree) from [<c01a2034>] (free_rb_tree_fname+0x3c/0x5c)
[Fri Mar 24 19:06:26 2017] [<c01a2034>] (free_rb_tree_fname) from [<c01a206c>] (ext4_release_dir+0x18/0x28)
[Fri Mar 24 19:06:26 2017] [<c01a206c>] (ext4_release_dir) from [<c0137798>] (__fput+0x80/0x1c8)
[Fri Mar 24 19:06:26 2017] [<c0137798>] (__fput) from [<c0040d24>] (task_work_run+0x90/0xc4)
[Fri Mar 24 19:06:26 2017] [<c0040d24>] (task_work_run) from [<c00131ec>] (do_work_pending+0xb4/0xb8)
[Fri Mar 24 19:06:26 2017] [<c00131ec>] (do_work_pending) from [<c000f654>] (slow_work_pending+0xc/0x20)
[Fri Mar 24 19:06:26 2017] Code: 1a000003 e5932014 e3120001 1a000000 (e7f001f2) 
[Fri Mar 24 19:06:26 2017] ---[ end trace 7b9f4a5ab209958c ]---


The device is a Banana Pi 1 with the official baninian image and Kernel linux-image-4.4.34-bananian
Comment 1 Alexander Schier 2018-08-09 19:22:23 UTC 
Same Problem with kernel 4.18.0 on an ODROID XU4:

[  769.284796] Unable to handle kernel NULL pointer dereference at virtual address 00000174
[  769.291432] pgd = f7c000f0
[  769.294099] [00000174] *pgd=00000000
[  769.297650] Internal error: Oops: 5 [#2] PREEMPT SMP ARM
[  769.302932] Modules linked in: ts2020 dvb_usb_dvbsky m88ds3103 dvb_usb_v2 aes_arm_bs crypto_simd cryptd algif_skcipher af_alg tun ipv6 cpufreq_userspace cpufreq_conservative cpufreq_powersave dm_crypt joydev ads7846 spidev snd_usb_audio snd_hwdep snd_usbmidi_lib snd_rawmidi snd_seq_device spi_s3c64xx uio_pdrv_genirq uio exynos_gpiomem btrfs xor xor_neon zstd_decompress zstd_compress xxhash lzo_compress zlib_deflate raid6_pq uas
[  769.340727] CPU: 5 PID: 5912 Comm: vdr Tainted: G      D           4.18.0-rc4-odroidxu4 #11
[  769.349030] Hardware name: ODROID-XU4
[  769.352673] PC is at _raw_spin_lock_irqsave+0x28/0x64
[  769.357697] LR is at add_wait_queue+0x20/0x48
[  769.362026] pc : [<c086f45c>]    lr : [<c015d6b0>]    psr: 60050093
[  769.368266] sp : ec77bb98  ip : 00000019  fp : 00000000
[  769.373465] r10: 00000000  r9 : eb97a780  r8 : ec77bbf8
[  769.378664] r7 : 00000000  r6 : 00000174  r5 : ec77bd0c  r4 : ec77bd18
[  769.385163] r3 : ec77a000  r2 : 00000174  r1 : 00000001  r0 : 60050013
[  769.391664] Flags: nZCv  IRQs off  FIQs on  Mode SVC_32  ISA ARM  Segment none
[  769.398856] Control: 10c5387d  Table: 6c6f006a  DAC: 00000051
[  769.404574] Process vdr (pid: 5912, stack limit = 0xf282460d)
[  769.410296] Stack: (0xec77bb98 to 0xec77c000)
[  769.414625] bb80:                                                       00000000 ec77bbf0
[  769.422774] bba0: eb97a781 c065ddb4 00000019 c023fef8 ec77bbe8 00000000 00000000 00000001
[  769.430921] bbc0: ec77a000 0000c350 00000000 ec77bf78 c0d05ce0 3b9aca00 bef3d218 c0d04d08
[  769.439064] bbe0: 00000000 00000000 00000000 00000001 00000005 00000001 00000000 00000000
[  769.447211] bc00: 00000000 00000000 00000000 00000000 00000000 00000000 000003e9 00000003
[  769.455356] bc20: 00000000 00000000 00000000 eeddd4c0 00000048 00000000 c0d59a54 00000133
[  769.463501] bc40: 00000000 00000400 b9a65ea2 eeddd4c0 edc61e80 eeddd4c0 eeddd4c0 edc61e80
[  769.471647] bc60: eeddd4c0 edc61e80 030bd044 c014f9e8 00000000 c0d04e68 eedbb440 ee85fc00
[  769.479797] bc80: 00000009 c0d04d08 00000000 00000002 c0d04dfc ec77bd50 eedb32bc b9a65ea2
[  769.487938] bca0: ec63f300 eeddd4c0 00000009 00000001 c0d04e68 00000001 edc622b0 00000006
[  769.496083] bcc0: edc61e80 c015036c 00000000 eedb32bc 00000000 00000000 00000020 00000000
[  769.504229] bce0: 00000002 ec77bce4 c023f038 00000019 00000000 eb92bc00 00000000 00000000
[  769.512374] bd00: 00000001 eb97a780 00000019 00000000 ec77bce8 c023efac ec77bd3c c0142dd8
[  769.520520] bd20: 00000174 eeddd440 c0d04d08 c0d04e68 00000001 edc622b0 ec77bd74 c0144494
[  769.528668] bd40: edc62028 200f0093 c0745058 b9a65ea2 eb886000 c0d04d08 00000000 ecc1b544
[  769.536811] bd60: 00000000 c023efac ec77bdd0 00000001 00000001 c023f01c 00000000 edc61e00
[  769.544957] bd80: c01445f0 00000000 00000000 b9a65ea2 ecc1b538 c015d7ec 0077be18 00000001
[  769.553101] bda0: ec6aa53b ecc1b540 00000001 00000001 00000001 ec77bdd0 000000c3 c0d04d08
[  769.561247] bdc0: a00f0013 c015d93c 000000c3 ec77bdd0 00000000 00000000 00000000 ec77bddc
[  769.569393] bde0: ec77bddc b9a65ea2 c0d04d08 edc50600 eb954c00 ebe3c000 ec71c000 00000000
[  769.577542] be00: 00000000 0000003b edc50600 c015dc00 000000c3 ec71c000 c0d04d08 c073e068
[  769.585688] be20: c0d04d08 c081a330 ec77be54 00000003 00000000 c0d4afc0 eb954c00 edc50844
[  769.593829] be40: 7fffffff ec77a000 0000003b ffffffff c0d85ae0 00000000 ec77be78 00000000
[  769.601975] be60: 00000000 00000000 ffffffff ffffffff 00000000 b9a65ea2 eb97ac00 ec77becc
[  769.610120] be80: ebe3c000 ebe3c000 00000000 00004000 ec77a000 00000121 bef3d370 c073a5fc
[  769.618265] bea0: 00000000 c0d04d08 ebe3c000 c073bb5c ec77bed4 00000000 702664e3 0000003b
[  769.626417] bec0: 00000001 007a42a0 0000003b 00000000 3827497b 00000000 a4936f02 ffffffff
[  769.634562] bee0: f176a5a4 ec77bf28 c0d04d08 ec77bf78 00000000 00000000 00000000 000000a8
[  769.642702] bf00: 005ed000 c02402ac 00000301 00000000 1043c759 5b6c93fe 00000000 00000000
[  769.650847] bf20: 00989680 c0101204 00000301 00000000 10dc5dd9 c0d04d08 00000000 00000000
[  769.658993] bf40: 00989680 b9a65ea2 ec77a000 c0d04d08 00000001 bef3d218 000000a8 a3d70a3e
[  769.667139] bf60: 00000000 000000a8 005ed000 c0240c34 00989680 00000000 00000301 00000000
[  769.675285] bf80: 10dc5dd9 c0d04d08 000e600d b9a65ea2 006f4e68 bef3d218 000005d0 c0101204
[  769.683433] bfa0: ec77a000 c0101000 006f4e68 bef3d218 bef3d218 00000001 0000000a 00000080
[  769.691575] bfc0: 006f4e68 bef3d218 000005d0 000000a8 b6f51ce8 00721470 006469a8 005ed000
[  769.699720] bfe0: 00000000 bef3d1e0 00000000 b6b6b532 00050030 bef3d218 00000000 00000000
[  769.707873] [<c086f45c>] (_raw_spin_lock_irqsave) from [<c015d6b0>] (add_wait_queue+0x20/0x48)
[  769.716450] [<c015d6b0>] (add_wait_queue) from [<c065ddb4>] (dvb_frontend_poll+0x30/0x48)
[  769.724596] [<c065ddb4>] (dvb_frontend_poll) from [<c023fef8>] (do_sys_poll+0x2e0/0x548)
[  769.732654] [<c023fef8>] (do_sys_poll) from [<c0240c34>] (sys_poll+0x74/0x124)
[  769.739843] [<c0240c34>] (sys_poll) from [<c0101000>] (ret_fast_syscall+0x0/0x54)
[  769.747292] Exception stack(0xec77bfa8 to 0xec77bff0)
[  769.752318] bfa0:                   006f4e68 bef3d218 bef3d218 00000001 0000000a 00000080
[  769.760471] bfc0: 006f4e68 bef3d218 000005d0 000000a8 b6f51ce8 00721470 006469a8 005ed000
[  769.768609] bfe0: 00000000 bef3d1e0 00000000 b6b6b532
[  769.773638] Code: e5931004 e2811001 e5831004 f592f000 (e1923f9f) 
[  769.779703] ---[ end trace 6fde4b1b23dd12c6 ]---
[  769.784376] note: vdr[5912] exited with preempt_count 1
[  770.283996] Unable to handle kernel NULL pointer dereference at virtual address 000001c0
[  770.291245] pgd = be23b33d
[  770.293403] [000001c0] *pgd=00000000
[  770.296987] Internal error: Oops: 5 [#3] PREEMPT SMP ARM
[  770.302140] Modules linked in: ts2020 dvb_usb_dvbsky m88ds3103 dvb_usb_v2 aes_arm_bs crypto_simd cryptd algif_skcipher af_alg tun ipv6 cpufreq_userspace cpufreq_conservative cpufreq_powersave dm_crypt joydev ads7846 spidev snd_usb_audio snd_hwdep snd_usbmidi_lib snd_rawmidi snd_seq_device spi_s3c64xx uio_pdrv_genirq uio exynos_gpiomem btrfs xor xor_neon zstd_decompress zstd_compress xxhash lzo_compress zlib_deflate raid6_pq uas
[  770.339980] CPU: 5 PID: 5956 Comm: kdvb-ad-0-fe-0 Tainted: G      D           4.18.0-rc4-odroidxu4 #11
[  770.349200] Hardware name: ODROID-XU4
[  770.352841] PC is at dvb_frontend_should_wakeup+0x4/0x78
[  770.358121] LR is at dvb_frontend_thread+0x1d0/0x4e4
[  770.363059] pc : [<c065dd10>]    lr : [<c065ec18>]    psr: 60000013
[  770.369298] sp : eba97f30  ip : eba97f54  fp : eba96000
[  770.374498] r10: c0d7e9c0  r9 : ec68c194  r8 : ec68c000
[  770.379695] r7 : 00000000  r6 : ec68c1ac  r5 : ee8170b4  r4 : 00000000
[  770.386196] r3 : 00000000  r2 : b9a65ea2  r1 : 60000013  r0 : ee8170b4
[  770.392698] Flags: nZCv  IRQs on  FIQs on  Mode SVC_32  ISA ARM  Segment none
[  770.399802] Control: 10c5387d  Table: 6cddc06a  DAC: 00000051
[  770.405521] Process kdvb-ad-0-fe-0 (pid: 5956, stack limit = 0x77f27938)
[  770.412194] Stack: (0xeba97f30 to 0xeba98000)
[  770.416529] 7f20:                                     eedcc440 ecf8d400 c0d04d08 ee8172f0
[  770.424681] 7f40: eba97f74 00000000 00000000 ecf8d400 c015dfb4 ec68c1b0 ec68c1b0 b9a65ea2
[  770.432826] 7f60: ffffe000 eb950100 eb950140 00000000 eba96000 ee8170b4 c065ea48 ec77bd3c
[  770.440971] 7f80: eb95011c c013b77c 00000000 eb950140 c013b65c 00000000 00000000 00000000
[  770.449116] 7fa0: 00000000 00000000 00000000 c01010e8 00000000 00000000 00000000 00000000
[  770.457261] 7fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[  770.465407] 7fe0: 00000000 00000000 00000000 00000000 00000013 00000000 00000000 00000000
[  770.473560] [<c065dd10>] (dvb_frontend_should_wakeup) from [<c065ec18>] (dvb_frontend_thread+0x1d0/0x4e4)
[  770.483102] [<c065ec18>] (dvb_frontend_thread) from [<c013b77c>] (kthread+0x120/0x150)
[  770.490977] [<c013b77c>] (kthread) from [<c01010e8>] (ret_from_fork+0x14/0x2c)
[  770.498156] Exception stack(0xeba97fb0 to 0xeba97ff8)
[  770.503182] 7fa0:                                     00000000 00000000 00000000 00000000
[  770.511335] 7fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[  770.519478] 7fe0: 00000000 00000000 00000000 00000000 00000013 00000000
[  770.526064] Code: ebeb0209 e58431e4 eaffff98 e5903230 (e59321c0) 
[  770.532261] ---[ end trace 6fde4b1b23dd12c7 ]---
Note You need to log in before you can comment on or make changes to this bug.