Bug 1220118 - Kernel 3.19.5 segfaults when connecting Hauppage Nova-TD usb stick
Summary: Kernel 3.19.5 segfaults when connecting Hauppage Nova-TD usb stick
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: kernel
Version: 21
Hardware: x86_64
OS: Linux
unspecified
unspecified
Target Milestone: ---
Assignee: Kernel Maintainer List
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
: 1185116 (view as bug list)
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2015-05-10 09:22 UTC by Pekka Harjamäki
Modified: 2015-05-28 20:42 UTC (History)
8 users (show)

Fixed In Version: kernel-4.0.4-201.fc21
Clone Of:
Environment:
Last Closed: 2015-05-26 03:38:24 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)
Possible fix for dvb oops (1.08 KB, patch)
2015-05-11 21:33 UTC, Laura Abbott
no flags Details | Diff

Description Pekka Harjamäki 2015-05-10 09:22:48 UTC
Description of problem:
Kernel crashes when I connect dvb-t stick to usb port. Also booting with stick attached causes kernel to crash

Version-Release number of selected component (if applicable):
Kernel-3.19.5 , Fedora 21

How reproducible:
Every time

Steps to Reproduce:
1. Connect stick to usb port
2. Kernel crashes

Additional info:

[448938.083085] usb 1-1: new high-speed USB device number 2 using ehci-pci
[448938.197916] usb 1-1: New USB device found, idVendor=2040, idProduct=9580
[448938.197928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[448938.197931] usb 1-1: Product: NovaT 500Stick
[448938.197934] usb 1-1: Manufacturer: Hauppauge
[448938.197936] usb 1-1: SerialNumber: 4028638203
[448939.515775] dvb-usb: found a 'Hauppauge Nova-TD Stick/Elgato Eye-TV Diversity' in cold state, will try to load a firmware
[448939.525463] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[448939.762118] dib0700: firmware started successfully.
[448940.263252] dvb-usb: found a 'Hauppauge Nova-TD Stick/Elgato Eye-TV Diversity' in warm state.
[448940.264070] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[448940.265054] DVB: registering new adapter (Hauppauge Nova-TD Stick/Elgato Eye-TV Diversity)
[448940.311758] BUG: unable to handle kernel NULL pointer dereference at 0000000000000080
[448940.311820] IP: [<ffffffffa0669141>] dib7000p_attach+0x11/0xa0 [dib7000p]
[448940.311871] PGD 0 
[448940.311884] Oops: 0002 [#1] SMP 
[448940.311903] Modules linked in: dib7000p dvb_usb_dib0700(+) dib7000m dib0090 dib0070 dib3000mc dibx000_common dvb_usb dvb_core rc_core bnep bluetooth rfkill ip6t_rpfilter ip6t_REJECT nf_reject_ipv6 xt_conntrack ebtable_nat ebtable_broute bridge stp llc ebtable_filter ebtables ip6table_nat nf_conntrack_ipv6 nf_defrag_ipv6 nf_nat_ipv6 ip6table_mangle ip6table_security ip6table_raw ip6table_filter ip6_tables iptable_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_nat_ipv4 nf_nat nf_conntrack iptable_mangle iptable_security iptable_raw snd_hda_codec_analog snd_hda_codec_generic joydev coretemp kvm snd_hda_intel iTCO_wdt gpio_ich iTCO_vendor_support ppdev snd_hda_controller dell_wmi sparse_keymap snd_hda_codec snd_hwdep snd_seq snd_seq_device dcdbas hid_logitech_hidpp snd_pcm serio_raw lpc_ich mfd_core i2c_i801
[448940.312005]  snd_timer snd parport_pc soundcore mei_me tpm_tis parport tpm wmi mei shpchp acpi_cpufreq nfsd auth_rpcgss nfs_acl lockd grace sunrpc hid_logitech_dj i915 e1000e i2c_algo_bit video drm_kms_helper drm ptp pps_core ata_generic pata_acpi
[448940.312005] CPU: 0 PID: 23460 Comm: systemd-udevd Not tainted 3.19.5-200.fc21.x86_64 #1
[448940.312005] Hardware name: Dell Inc. OptiPlex 760                 /0R230R, BIOS A05 08/17/2009
[448940.312005] task: ffff880026e29360 ti: ffff880030b64000 task.ti: ffff880030b64000
[448940.312005] RIP: 0010:[<ffffffffa0669141>]  [<ffffffffa0669141>] dib7000p_attach+0x11/0xa0 [dib7000p]
[448940.312005] RSP: 0018:ffff880030b679f8  EFLAGS: 00010202
[448940.312005] RAX: 0000000000000010 RBX: ffff880047b71278 RCX: 0000000000000001
[448940.312005] RDX: 0000000000000000 RSI: ffffffffa06707d8 RDI: 0000000000000010
[448940.312005] RBP: ffff880030b679f8 R08: ffffffff81119fe0 R09: 0000000000017840
[448940.312005] R10: ffffffff810b07e4 R11: 0000000000000246 R12: 0000000000000000
[448940.312005] R13: 0000000000000010 R14: ffff880047b71308 R15: ffff880047b71398
[448940.312005] FS:  00007f005f380880(0000) GS:ffff88007c800000(0000) knlGS:0000000000000000
[448940.312005] CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
[448940.312005] CR2: 0000000000000080 CR3: 000000004e38d000 CR4: 00000000000407f0
[448940.312005] Stack:
[448940.312005]  ffff880030b67a28 ffffffffa06430fb ffff880047b71278 ffff880047b71880
[448940.312005]  ffff880047b71278 0000000000000000 ffff880030b67a68 ffffffffa0626872
[448940.312005]  ffff880047b70000 0000000000000000 ffff880047b71280 ffff880047b70000
[448940.312005] Call Trace:
[448940.312005]  [<ffffffffa06430fb>] stk7700d_frontend_attach+0x3b/0x200 [dvb_usb_dib0700]
[448940.312005]  [<ffffffffa0626872>] dvb_usb_adapter_frontend_init+0xe2/0x1a0 [dvb_usb]
[448940.312005]  [<ffffffffa0625ab7>] dvb_usb_device_init+0x517/0x6f0 [dvb_usb]
[448940.312005]  [<ffffffffa063f40e>] dib0700_probe+0x6e/0x100 [dvb_usb_dib0700]
[448940.312005]  [<ffffffff817731e6>] ? mutex_lock+0x16/0x40
[448940.312005]  [<ffffffff815598fb>] usb_probe_interface+0x1bb/0x300
[448940.312005]  [<ffffffff814c9e13>] driver_probe_device+0xa3/0x400
[448940.312005]  [<ffffffff814ca24b>] __driver_attach+0x9b/0xa0
[448940.312005]  [<ffffffff814ca1b0>] ? __device_attach+0x40/0x40
[448940.312005]  [<ffffffff814c7ad3>] bus_for_each_dev+0x73/0xc0
[448940.312005]  [<ffffffff814c987e>] driver_attach+0x1e/0x20
[448940.312005]  [<ffffffff814c9430>] bus_add_driver+0x180/0x250
[448940.312005]  [<ffffffff814caa44>] driver_register+0x64/0xf0
[448940.312005]  [<ffffffff81557ff2>] usb_register_driver+0x82/0x160
[448940.312005]  [<ffffffffa0663000>] ? 0xffffffffa0663000
[448940.312005]  [<ffffffffa066301e>] dib0700_driver_init+0x1e/0x1000 [dvb_usb_dib0700]
[448940.312005]  [<ffffffff81002148>] do_one_initcall+0xd8/0x210
[448940.312005]  [<ffffffff811fbb59>] ? kmem_cache_alloc_trace+0x1a9/0x230
[448940.312005]  [<ffffffff8111f053>] ? load_module+0x2203/0x2800
[448940.312005]  [<ffffffff8111f08b>] load_module+0x223b/0x2800
[448940.312005]  [<ffffffff8111a810>] ? store_uevent+0x70/0x70
[448940.312005]  [<ffffffff8111f71d>] SyS_init_module+0xcd/0x120
[448940.312005]  [<ffffffff817752c9>] system_call_fastpath+0x12/0x17
[448940.312005] Code: 8b 87 18 03 00 00 55 48 89 e5 48 05 68 16 00 00 5d c3 0f 1f 84 00 00 00 00 00 66 66 66 66 90 55 48 85 ff 48 89 f8 48 89 e5 74 7f <48> c7 47 70 b0 a9 66 a0 48 c7 47 68 40 9a 66 a0 48 c7 47 30 90 
[448940.312005] RIP  [<ffffffffa0669141>] dib7000p_attach+0x11/0xa0 [dib7000p]
[448940.312005]  RSP <ffff880030b679f8>
[448940.312005] CR2: 0000000000000080
[448940.324579] ---[ end trace 288814f44b010d3e ]---

Comment 1 Pekka Harjamäki 2015-05-10 09:26:45 UTC
Here's outputs from lspci and lsusb without stick attached, if it's any help:

lspci:

00:00.0 Host bridge: Intel Corporation 4 Series Chipset DRAM Controller (rev 03)
00:01.0 PCI bridge: Intel Corporation 4 Series Chipset PCI Express Root Port (rev 03)
00:02.0 VGA compatible controller: Intel Corporation 4 Series Chipset Integrated Graphics Controller (rev 03)
00:02.1 Display controller: Intel Corporation 4 Series Chipset Integrated Graphics Controller (rev 03)
00:03.0 Communication controller: Intel Corporation 4 Series Chipset HECI Controller (rev 03)
00:03.2 IDE interface: Intel Corporation 4 Series Chipset PT IDER Controller (rev 03)
00:03.3 Serial controller: Intel Corporation 4 Series Chipset Serial KT Controller (rev 03)
00:19.0 Ethernet controller: Intel Corporation 82567LM-3 Gigabit Network Connection (rev 02)
00:1a.0 USB controller: Intel Corporation 82801JD/DO (ICH10 Family) USB UHCI Controller #4 (rev 02)
00:1a.1 USB controller: Intel Corporation 82801JD/DO (ICH10 Family) USB UHCI Controller #5 (rev 02)
00:1a.2 USB controller: Intel Corporation 82801JD/DO (ICH10 Family) USB UHCI Controller #6 (rev 02)
00:1a.7 USB controller: Intel Corporation 82801JD/DO (ICH10 Family) USB2 EHCI Controller #2 (rev 02)
00:1b.0 Audio device: Intel Corporation 82801JD/DO (ICH10 Family) HD Audio Controller (rev 02)
00:1c.0 PCI bridge: Intel Corporation 82801JD/DO (ICH10 Family) PCI Express Port 1 (rev 02)
00:1c.1 PCI bridge: Intel Corporation 82801JD/DO (ICH10 Family) PCI Express Port 2 (rev 02)
00:1d.0 USB controller: Intel Corporation 82801JD/DO (ICH10 Family) USB UHCI Controller #1 (rev 02)
00:1d.1 USB controller: Intel Corporation 82801JD/DO (ICH10 Family) USB UHCI Controller #2 (rev 02)
00:1d.2 USB controller: Intel Corporation 82801JD/DO (ICH10 Family) USB UHCI Controller #3 (rev 02)
00:1d.7 USB controller: Intel Corporation 82801JD/DO (ICH10 Family) USB2 EHCI Controller #1 (rev 02)
00:1e.0 PCI bridge: Intel Corporation 82801 PCI Bridge (rev a2)
00:1f.0 ISA bridge: Intel Corporation 82801JD (ICH10D) LPC Interface Controller (rev 02)
00:1f.2 SATA controller: Intel Corporation 82801JD/DO (ICH10 Family) SATA AHCI Controller (rev 02)
00:1f.3 SMBus: Intel Corporation 82801JD/DO (ICH10 Family) SMBus Controller (rev 02)

lsusb:

Bus 002 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 008 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
Bus 007 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
Bus 006 Device 002: ID 046d:c52b Logitech, Inc. Unifying Receiver
Bus 006 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 005 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
Bus 004 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
Bus 003 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub

Comment 2 Laura Abbott 2015-05-11 21:33:32 UTC
Created attachment 1024353 [details]
Possible fix for dvb oops

Can you try the following patch?

Comment 3 Pekka Harjamäki 2015-05-15 09:23:43 UTC
Patch seems to work. I compiled 3.19.7-200.fc21.x86_64 from source and connected usb stick -> crash   then applied patch and recompiled, and now it works:

[  114.114030] SELinux: initialized (dev tmpfs, type tmpfs), uses transition SIDs
[  134.237030] usb 1-1: new high-speed USB device number 2 using ehci-pci
[  134.351966] usb 1-1: New USB device found, idVendor=2040, idProduct=9580
[  134.351973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.351977] usb 1-1: Product: NovaT 500Stick
[  134.351980] usb 1-1: Manufacturer: Hauppauge
[  134.351982] usb 1-1: SerialNumber: 4028638203
[  135.429717] dvb-usb: found a 'Hauppauge Nova-TD Stick/Elgato Eye-TV Diversity' in cold state, will try to load a firmware
[  135.431295] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  135.632704] dib0700: firmware started successfully.
[  136.133212] dvb-usb: found a 'Hauppauge Nova-TD Stick/Elgato Eye-TV Diversity' in warm state.
[  136.133295] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  136.133336] DVB: registering new adapter (Hauppauge Nova-TD Stick/Elgato Eye-TV Diversity)
[  136.359834] usb 1-1: DVB: registering adapter 0 frontend 0 (DiBcom 7000PC)...
[  136.369208] MT2266: successfully identified
[  136.516077] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  136.516207] DVB: registering new adapter (Hauppauge Nova-TD Stick/Elgato Eye-TV Diversity)
[  136.653708] usb 1-1: DVB: registering adapter 1 frontend 0 (DiBcom 7000PC)...
[  136.657334] MT2266: successfully identified
[  136.831017] Registered IR keymap rc-dib0700-rc5
[  136.831227] input: IR-receiver inside an USB DVB receiver as /devices/pci0000:00/0000:00:1a.7/usb1/1-1/rc/rc0/input11
[  136.831480] rc0: IR-receiver inside an USB DVB receiver as /devices/pci0000:00/0000:00:1a.7/usb1/1-1/rc/rc0
[  136.831577] dvb-usb: schedule remote query interval to 50 msecs.
[  136.831581] dvb-usb: Hauppauge Nova-TD Stick/Elgato Eye-TV Diversity successfully initialized and connected.
[  136.831743] usbcore: registered new interface driver dvb_usb_dib0700



Btw.. this bug might be related to same problem:  
https://bugzilla.redhat.com/show_bug.cgi?id=1185116

Comment 4 Laura Abbott 2015-05-15 17:28:20 UTC
Thanks for the confirmation. I'll work on submitting this upstream. Once it gets accepted we will bring it in.

Comment 5 Laura Abbott 2015-05-15 17:28:47 UTC
*** Bug 1185116 has been marked as a duplicate of this bug. ***

Comment 6 Fedora Update System 2015-05-19 11:39:56 UTC
kernel-4.0.4-300.fc22 has been submitted as an update for Fedora 22.
https://admin.fedoraproject.org/updates/kernel-4.0.4-300.fc22

Comment 7 Fedora Update System 2015-05-19 11:41:41 UTC
kernel-4.0.4-200.fc21 has been submitted as an update for Fedora 21.
https://admin.fedoraproject.org/updates/kernel-4.0.4-200.fc21

Comment 8 Fedora Update System 2015-05-20 02:52:42 UTC
Package kernel-4.0.4-300.fc22:
* should fix your issue,
* was pushed to the Fedora 22 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing kernel-4.0.4-300.fc22'
as soon as you are able to, then reboot.
Please go to the following url:
https://admin.fedoraproject.org/updates/FEDORA-2015-8534/kernel-4.0.4-300.fc22
then log in and leave karma (feedback).

Comment 9 Fedora Update System 2015-05-21 19:58:48 UTC
kernel-4.0.4-201.fc21 has been submitted as an update for Fedora 21.
https://admin.fedoraproject.org/updates/kernel-4.0.4-201.fc21

Comment 10 Fedora Update System 2015-05-22 21:08:10 UTC
kernel-4.0.4-100.fc20 has been submitted as an update for Fedora 20.
https://admin.fedoraproject.org/updates/kernel-4.0.4-100.fc20

Comment 11 Fedora Update System 2015-05-26 03:38:24 UTC
kernel-4.0.4-300.fc22 has been pushed to the Fedora 22 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 12 Fedora Update System 2015-05-27 16:05:21 UTC
kernel-4.0.4-201.fc21 has been pushed to the Fedora 21 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 13 Fedora Update System 2015-05-28 20:42:08 UTC
kernel-4.0.4-101.fc20 has been submitted as an update for Fedora 20.
https://admin.fedoraproject.org/updates/kernel-4.0.4-101.fc20


Note You need to log in before you can comment on or make changes to this bug.