Bug 196967 - kernel BUG at mm/slub.c:3627!
Summary: kernel BUG at mm/slub.c:3627!
Status: NEW
Alias: None
Product: Drivers
Classification: Unclassified
Component: I2C (show other bugs)
Hardware: ARM Linux
: P1 normal
Assignee: Drivers/I2C virtual user
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2017-09-17 20:13 UTC by Alexander Schier
Modified: 2017-09-17 20:13 UTC (History)
0 users

See Also:
Kernel Version: 4.4.66-bananian
Subsystem:
Regression: No
Bisected commit-id:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Description Alexander Schier 2017-09-17 20:13:00 UTC 
A kernel bug is triggered on a banana pi 1 (ARM) in combination with a USB-DVB-S-Receiver.

The corresponding kernel log:
[24284.752627] usb usb2-port1: disabled by hub (EMI?), re-enabling...
[24284.759042] usb 2-1: USB disconnect, device number 2
[24285.009710] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-19
[24285.015373] usb 2-1: failed=-19
[24285.204134] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-19
[24285.209873] usb 2-1: failed=-19
[24285.419672] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-19
[24285.425352] usb 2-1: failed=-19
[24286.213393] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-19
[24286.219233] usb 2-1: failed=-19
[24287.233936] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-19
[24287.239630] usb 2-1: failed=-19
[24288.253833] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-19
[24288.263582] usb 2-1: failed=-19
[24288.600004] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-19
[24288.609749] usb 2-1: failed=-19
[24289.281592] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-19
[24289.291343] usb 2-1: failed=-19
[24290.308975] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-19
[24290.318666] usb 2-1: failed=-19
[24290.469559] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-19
[24290.479112] usb 2-1: dvb_usb_v2: streaming_ctrl() failed=-19
[24290.491210] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-19
[24290.500852] usb 2-1: failed=-19
[24290.507598] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-19
[24290.516674] usb 2-1: failed=-19
[24290.523430] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-19
[24290.532666] usb 2-1: failed=-19
[24290.539207] m88ds3103 2-0068: i2c wr failed=-19
[24290.547496] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-19
[24290.556469] usb 2-1: failed=-19
[24291.712723] ------------[ cut here ]------------
[24291.720494] kernel BUG at mm/slub.c:3627!
[24291.727503] Internal error: Oops - BUG: 0 [#1] SMP ARM
[24291.735640] Modules linked in: algif_skcipher af_alg ipip tunnel4 ip_tunnel tun ccm ip6t_REJECT nf_reject_ipv6 ip6table_filter ip6_tables ipt_MASQUERADE nf_nat_masquerade_ipv4 iptable_nat nf_nat_ipv4 nf_nat xt_tcpudp ipt_REJECT nf_reject_ipv4 nf_conntrack_ipv4 nf_defrag_ipv4 xt_conntrack nf_conntrack iptable_filter ip_tables x_tables dm_crypt dm_mod ts2020 rt2800usb rt2800lib rt2x00usb rt2x00lib mac80211 snd_usb_audio dvb_usb_dvbsky sun4i_codec snd_hwdep cfg80211 snd_usbmidi_lib snd_soc_core snd_pcm_dmaengine snd_rawmidi m88ds3103 sun4i_ts rfkill snd_pcm nvmem_sunxi_sid snd_timer nvmem_core snd evdev soundcore input_leds sun4i_ss cpufreq_dt uio_pdrv_genirq thermal_sys uio
[24291.827008] CPU: 0 PID: 8361 Comm: temperature Not tainted 4.4.66-bananian #2
[24291.837951] Hardware name: Allwinner sun7i (A20) Family
[24291.846999] task: e8e0e300 ti: ed72e000 task.ti: ed72e000
[24291.856244] PC is at kfree+0x190/0x1d4
[24291.863810] LR is at free_rb_tree_fname+0x3c/0x5c
[24291.872339] pc : [<c0125bdc>]    lr : [<c01a28b0>]    psr: 40070013
               sp : ed72ff18  ip : 00198cc0  fp : 00000000
[24291.891565] r10: ee62e0c8  r9 : 40000010  r8 : ee26d110
[24291.900643] r7 : ed426480  r6 : ed6c0000  r5 : c01a28b0  r4 : ed6c0000
[24291.911060] r3 : efd5b300  r2 : 00000100  r1 : 00000100  r0 : ed6c0000
[24291.921455] Flags: nZcv  IRQs on  FIQs on  Mode SVC_32  ISA ARM  Segment none
[24291.932544] Control: 10c5387d  Table: 6d73006a  DAC: 00000051
[24291.942282] Process temperature (pid: 8361, stack limit = 0xed72e210)
[24291.952767] Stack: (0xed72ff18 to 0xed730000)
[24291.961162] ff00:                                                       00000001 c01a28b0
[24291.977375] ff20: 00000000 ed6c0000 00000000 ebda63c0 ed426480 ee26d110 40000010 c01a28b0
[24291.993792] ff40: c01a28d0 ed426480 ee195348 00000000 ee525cd0 c01a28e8 ee62e0c0 c0137c38
[24292.010478] ff60: 00000000 00000000 e8e0e690 00000000 c0b2bf30 e8e0e300 c000f7c4 ed72e000
[24292.027457] ff80: 00000000 c0040e80 ee62e0c0 ed72e000 c000f7c4 ed72ffb0 00000006 c0013208
[24292.044657] ffa0: 00000004 00000000 b6d2f350 c000f654 00000000 b6eb07d4 00000000 00000001
[24292.061860] ffc0: 00000004 00000000 b6d2f350 00000006 00000000 7f84c050 7f84c050 00000000
[24292.079040] ffe0: 00000006 be9f5fe0 b6e33d1d b6ddc6f6 60070030 00000004 00000000 00000000
[24292.096214] [<c0125bdc>] (kfree) from [<c01a28b0>] (free_rb_tree_fname+0x3c/0x5c)
[24292.112661] [<c01a28b0>] (free_rb_tree_fname) from [<c01a28e8>] (ext4_release_dir+0x18/0x28)
[24292.130120] [<c01a28e8>] (ext4_release_dir) from [<c0137c38>] (__fput+0x80/0x1c8)
[24292.146812] [<c0137c38>] (__fput) from [<c0040e80>] (task_work_run+0x90/0xc4)
[24292.158759] [<c0040e80>] (task_work_run) from [<c0013208>] (do_work_pending+0xb4/0xb8)
[24292.176229] [<c0013208>] (do_work_pending) from [<c000f654>] (slow_work_pending+0xc/0x20)
[24292.194280] Code: 1a000003 e5932014 e3120001 1a000000 (e7f001f2) 
[24292.205467] ---[ end trace 296deebe30353d47 ]---


The i2c failures do not always trigger a kernel oops, but I think when the oops happens it is triggered by the dvb-s device.
Note You need to log in before you can comment on or make changes to this bug.