4.18 regression: dvb-usb-v2: General Protection Fault shortly after boot

4.18 regression: dvb-usb-v2: General Protection Fault shortly after boot

[Dan Ziemba]

I reported this on bugzilla also a few days ago, but I'm not sure if
that is actually the right place to report, so copying to the mailing
list...


Starting with the first 4.18 RC kernel, my system experiences general
protection faults leading to kernel panic shortly after the login
prompt appears on most boots.  Occasionally that doesn't happen and
instead numerous other seemingly random stack traces are printed (bad
page map, scheduling while atomic, null pointer deref, etc), but either
way the system is unusable.  This bug remains up through the latest
mainline kernel 4.19-rc2.

Booting with my USB ATSC tv tuner disconnected prevents the bug from
happening.


Kernel bisection between v4.17 and 4.18-rc1 shows problem is caused by:

1a0c10ed7bb1 media: dvb-usb-v2: stop using coherent memory for URBs


Building both 4.18.6 and 4.19-rc2 with that commit reverted resolves
the bug for me.  


My DVB hardware uses driver mxl111sf:

Bus 002 Device 003: ID 2040:c61b Hauppauge 
Device Descriptor:
  bLength                18
  bDescriptorType         1
  bcdUSB               2.00
  bDeviceClass            0 
  bDeviceSubClass         0 
  bDeviceProtocol         0 
  bMaxPacketSize0        64
  idVendor           0x2040 Hauppauge
  idProduct          0xc61b 
  bcdDevice            0.00
  iManufacturer           1 Hauppauge
  iProduct                2 WinTV Aero-M

Other system info:

Arch Linux x86_64
Intel i7-3770
16 GB ram

Bugzilla:
https://bugzilla.kernel.org/show_bug.cgi?id=201055

Arch bug:
https://bugs.archlinux.org/task/59990


Thanks,
Dan Ziemba

Re: 4.18 regression: dvb-usb-v2: General Protection Fault shortly after boot

[Mauro Carvalho Chehab]

Em Thu, 20 Sep 2018 00:07:09 -0400
Dan Ziemba <zman0900@gmail.com> escreveu:

> I reported this on bugzilla also a few days ago, but I'm not sure if
> that is actually the right place to report, so copying to the mailing
> list...

I saw a report on BZ, but haven't time yet to dig into it. Those
days, it is usually better to report via the ML.
 
> 
> Starting with the first 4.18 RC kernel, my system experiences general
> protection faults leading to kernel panic shortly after the login
> prompt appears on most boots.  Occasionally that doesn't happen and
> instead numerous other seemingly random stack traces are printed (bad
> page map, scheduling while atomic, null pointer deref, etc), but either
> way the system is unusable.  This bug remains up through the latest
> mainline kernel 4.19-rc2.
> 
> Booting with my USB ATSC tv tuner disconnected prevents the bug from
> happening.
> 
> 
> Kernel bisection between v4.17 and 4.18-rc1 shows problem is caused by:
> 
> 1a0c10ed7bb1 media: dvb-usb-v2: stop using coherent memory for URBs
> 
> 
> Building both 4.18.6 and 4.19-rc2 with that commit reverted resolves
> the bug for me.  

There's something really weird on it: that patch changes a code that
it is only called when the device is streaming. It shouldn't be
causing GFP/kernel panic, depending if the machine was booted with
or without it.

Perhaps it would be a side effect due to some changes at the USB
subsystem? There are some changes happening there changing some
locks.

I see one minor issue there: it is using GFP_ATOMIC instead
of GFP_KERNEL.

Could you please try to change this line:

	stream->buf_list[stream->buf_num] = kzalloc(size, GFP_ATOMIC);

to

	stream->buf_list[stream->buf_num] = kzalloc(size, GFP_KERNEL);

Also, it would be great if you could post the GPF logs.

> 
> 
> My DVB hardware uses driver mxl111sf:
> 
> Bus 002 Device 003: ID 2040:c61b Hauppauge 
> Device Descriptor:
>   bLength                18
>   bDescriptorType         1
>   bcdUSB               2.00
>   bDeviceClass            0 
>   bDeviceSubClass         0 
>   bDeviceProtocol         0 
>   bMaxPacketSize0        64
>   idVendor           0x2040 Hauppauge
>   idProduct          0xc61b 
>   bcdDevice            0.00
>   iManufacturer           1 Hauppauge
>   iProduct                2 WinTV Aero-M
> 
> Other system info:
> 
> Arch Linux x86_64
> Intel i7-3770
> 16 GB ram
> 
> Bugzilla:
> https://bugzilla.kernel.org/show_bug.cgi?id=201055
> 
> Arch bug:
> https://bugs.archlinux.org/task/59990
> 
> 
> Thanks,
> Dan Ziemba
> 
> 



Thanks,
Mauro

Re: 4.18 regression: dvb-usb-v2: General Protection Fault shortly after boot

[Dan Ziemba]

[-- Attachment #1: Type: text/plain, Size: 3585 bytes --]

On Sat, 2018-09-22 at 07:21 -0300, Mauro Carvalho Chehab wrote:
> Em Thu, 20 Sep 2018 00:07:09 -0400
> Dan Ziemba <zman0900@gmail.com> escreveu:
> 
> > I reported this on bugzilla also a few days ago, but I'm not sure
> > if
> > that is actually the right place to report, so copying to the
> > mailing
> > list...
> 
> I saw a report on BZ, but haven't time yet to dig into it. Those
> days, it is usually better to report via the ML.
>  
> > 
> > Starting with the first 4.18 RC kernel, my system experiences
> > general
> > protection faults leading to kernel panic shortly after the login
> > prompt appears on most boots.  Occasionally that doesn't happen and
> > instead numerous other seemingly random stack traces are printed
> > (bad
> > page map, scheduling while atomic, null pointer deref, etc), but
> > either
> > way the system is unusable.  This bug remains up through the latest
> > mainline kernel 4.19-rc2.
> > 
> > Booting with my USB ATSC tv tuner disconnected prevents the bug
> > from
> > happening.
> > 
> > 
> > Kernel bisection between v4.17 and 4.18-rc1 shows problem is caused
> > by:
> > 
> > 1a0c10ed7bb1 media: dvb-usb-v2: stop using coherent memory for URBs
> > 
> > 
> > Building both 4.18.6 and 4.19-rc2 with that commit reverted
> > resolves
> > the bug for me.  
> 
> There's something really weird on it: that patch changes a code that
> it is only called when the device is streaming. It shouldn't be
> causing GFP/kernel panic, depending if the machine was booted with
> or without it.

It hadn't occurred to me to try disabled my tv software.  When I
disable tvheadend so it doesn't start at boot, crash does not happen
until I later start it manually.  I believe it does some scanning
through the channels at start up to update EPG data.

> 
> Perhaps it would be a side effect due to some changes at the USB
> subsystem? There are some changes happening there changing some
> locks.
> 
> I see one minor issue there: it is using GFP_ATOMIC instead
> of GFP_KERNEL.
> 
> Could you please try to change this line:
> 
> 	stream->buf_list[stream->buf_num] = kzalloc(size, GFP_ATOMIC);
> 
> to
> 
> 	stream->buf_list[stream->buf_num] = kzalloc(size, GFP_KERNEL);

I'll give this a try now.

> 
> Also, it would be great if you could post the GPF logs.

It's difficult to capture much, since the system often locks up without
syncing to disk.  The stack traces appear pretty random to me, but I
have attached two examples I captured by tailing dmesg over ssh while
starting tvheadend. In the first, there was actually not a complete
lock up, so it is complete.  For the second one, there was a complete
lockup and quite a bit more printed on the local console that didn't
make it though the network. 

> 
> > 
> > 
> > My DVB hardware uses driver mxl111sf:
> > 
> > Bus 002 Device 003: ID 2040:c61b Hauppauge 
> > Device Descriptor:
> >   bLength                18
> >   bDescriptorType         1
> >   bcdUSB               2.00
> >   bDeviceClass            0 
> >   bDeviceSubClass         0 
> >   bDeviceProtocol         0 
> >   bMaxPacketSize0        64
> >   idVendor           0x2040 Hauppauge
> >   idProduct          0xc61b 
> >   bcdDevice            0.00
> >   iManufacturer           1 Hauppauge
> >   iProduct                2 WinTV Aero-M
> > 
> > Other system info:
> > 
> > Arch Linux x86_64
> > Intel i7-3770
> > 16 GB ram
> > 
> > Bugzilla:
> > https://bugzilla.kernel.org/show_bug.cgi?id=201055
> > 
> > Arch bug:
> > https://bugs.archlinux.org/task/59990
> > 
> > 
> > Thanks,
> > Dan Ziemba
> > 
> > 
> 
> 
> 
> Thanks,
> Mauro

[-- Attachment #2: gpf-dmesg-1.txt --]
[-- Type: text/plain, Size: 6607 bytes --]

kern  :notice: [  410.089420] audit: type=1130 audit(1537653893.759:73): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=tvheadend comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
kern  :err   : [  412.638173] usb 4-1.5: dvb_usb_v2: 2nd usb_bulk_msg() failed=-110
kern  :err   : [  412.638229] error writing addr: 0x8d, mask: 0x01, data: 0x01, retrying...
kern  :warn  : [  412.985663] usb 4-1.5: DVB: adapter 0 frontend 0 frequency 0 out of range (54000000..858000000)
kern  :err   : [  415.198280] usb 4-1.5: dvb_usb_v2: 2nd usb_bulk_msg() failed=-110
kern  :err   : [  415.198342] error writing addr: 0x8d, mask: 0x01, data: 0x01, retrying...
kern  :warn  : [  429.186180] general protection fault: 0000 [#1] PREEMPT SMP PTI
kern  :warn  : [  429.186280] CPU: 2 PID: 288 Comm: md1_raid6 Not tainted 4.18.9-arch1-1-ARCH #1
kern  :warn  : [  429.186328] Hardware name: To Be Filled By O.E.M. To Be Filled By O.E.M./Z77 Extreme6, BIOS P2.80 07/01/2013
kern  :warn  : [  429.186398] RIP: 0010:memcpy_erms+0x6/0x10
kern  :warn  : [  429.186427] Code: 90 90 90 90 eb 1e 0f 1f 00 48 89 f8 48 89 d1 48 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 c3 66 0f 1f 44 00 00 48 89 f8 48 89 d1 <f3> a4 c3 0f 1f 80 00 00 00 00 48 89 f8 48 83 fa 20 72 7e 40 38 fe 
kern  :warn  : [  429.186588] RSP: 0018:ffffa38c03be7a70 EFLAGS: 00010206
kern  :warn  : [  429.186625] RAX: ffff900d75115000 RBX: ffff900d75115000 RCX: 0000000000001000
kern  :warn  : [  429.186676] RDX: 0000000000001000 RSI: 62db1d4c87f61263 RDI: ffff900d75115000
kern  :warn  : [  429.186726] RBP: 0000000000000000 R08: 0000000000001000 R09: ffffa38c03be7b00
kern  :warn  : [  429.186774] R10: 0000000000001000 R11: 0000000000001000 R12: ffffa38c03be7b00
kern  :warn  : [  429.186824] R13: 0000000000001000 R14: ffff900d767bbc80 R15: 0000000000000000
kern  :warn  : [  429.186876] FS:  0000000000000000(0000) GS:ffff900d9f280000(0000) knlGS:0000000000000000
kern  :warn  : [  429.186929] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
kern  :warn  : [  429.186969] CR2: 00007f447c0b3938 CR3: 00000005eb80a001 CR4: 00000000001606e0
kern  :warn  : [  429.187016] Call Trace:
kern  :warn  : [  429.187043]  async_memcpy+0x22f/0x1000 [async_memcpy]
kern  :warn  : [  429.187085]  async_copy_data.isra.14+0x21e/0x2c0 [raid456]
kern  :warn  : [  429.187129]  raid_run_ops+0x8fb/0x15e0 [raid456]
kern  :warn  : [  429.187167]  ? handle_stripe_dirtying+0x701/0x7f0 [raid456]
kern  :warn  : [  429.187209]  ? swiotlb_map_sg_attrs+0x4c/0x140
kern  :warn  : [  429.187246]  handle_stripe+0xb21/0x1ed0 [raid456]
kern  :warn  : [  429.187282]  ? ktime_get+0x36/0xa0
kern  :warn  : [  429.187311]  ? cfq_dispatch_requests+0x30/0xbd0
kern  :warn  : [  429.187349]  handle_active_stripes.isra.30+0x393/0x590 [raid456]
kern  :warn  : [  429.187395]  raid5d+0x348/0x530 [raid456]
kern  :warn  : [  429.187428]  ? schedule_timeout+0x1d9/0x4a0
kern  :warn  : [  429.187461]  ? preempt_count_add+0x68/0xa0
kern  :warn  : [  429.187492]  ? _raw_spin_lock_irqsave+0x25/0x50
kern  :warn  : [  429.187531]  ? md_register_thread+0xd0/0xd0 [md_mod]
kern  :warn  : [  429.187570]  md_thread+0xf9/0x160 [md_mod]
kern  :warn  : [  429.187602]  ? wait_woken+0x80/0x80
kern  :warn  : [  429.187631]  kthread+0x112/0x130
kern  :warn  : [  429.187658]  ? kthread_flush_work_fn+0x10/0x10
kern  :warn  : [  429.187691]  ret_from_fork+0x35/0x40
kern  :warn  : [  429.187720] Modules linked in: bridge stp llc nf_log_ipv6 nf_conntrack_ipv6 nf_defrag_ipv6 ip6t_REJECT nf_reject_ipv6 ip6t_rt ip6table_filter ip6_tables nf_log_ipv4 nf_log_common nf_conntrack_ipv4 nf_defrag_ipv4 xt_LOG xt_recent ipt_REJECT nf_reject_ipv4 xt_addrtype xt_tcpudp xt_pkttype xt_conntrack iptable_filter nct6775 hwmon_vid nls_iso8859_1 nls_cp437 vfat fat mxl111sf_tuner lg2160 intel_rapl mxl111sf_demod x86_pkg_temp_thermal intel_powerclamp lgdt3305 coretemp kvm_intel kvm irqbypass crct10dif_pclmul crc32_pclmul ghash_clmulni_intel pcbc dvb_usb_mxl111sf aesni_intel dvb_usb_v2 aes_x86_64 crypto_simd cryptd tveeprom glue_helper dvb_core videobuf2_vmalloc i915 mxm_wmi gpio_ich iTCO_wdt iTCO_vendor_support videobuf2_memops videobuf2_common videodev media intel_cstate intel_uncore rc_core drm_kms_helper
kern  :warn  : [  429.191594]  intel_rapl_perf drm igb pcspkr i2c_algo_bit input_leds intel_gtt agpgart dca pcc_cpufreq led_class mei_me syscopyarea sysfillrect evdev sysimgblt wmi mac_hid fb_sys_fops mei lpc_ich ie31200_edac i2c_i801 nfsd auth_rpcgss nfs_acl lockd grace sunrpc nf_conntrack_sane nf_conntrack ip_tables x_tables ext4 crc16 mbcache jbd2 fscrypto dm_mod hid_generic usbhid hid sd_mod uas usb_storage ahci libahci xhci_pci libata ehci_pci xhci_hcd ehci_hcd scsi_mod usbcore usb_common raid456 libcrc32c crc32c_generic crc32c_intel async_raid6_recov async_memcpy async_pq async_xor xor async_tx raid6_pq raid1 md_mod
kern  :warn  : [  429.201023] ---[ end trace 9e2d7c875488f557 ]---
kern  :warn  : [  429.202416] RIP: 0010:memcpy_erms+0x6/0x10
kern  :warn  : [  429.203408] Code: 90 90 90 90 eb 1e 0f 1f 00 48 89 f8 48 89 d1 48 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 c3 66 0f 1f 44 00 00 48 89 f8 48 89 d1 <f3> a4 c3 0f 1f 80 00 00 00 00 48 89 f8 48 83 fa 20 72 7e 40 38 fe 
kern  :warn  : [  429.205506] RSP: 0018:ffffa38c03be7a70 EFLAGS: 00010206
kern  :warn  : [  429.206546] RAX: ffff900d75115000 RBX: ffff900d75115000 RCX: 0000000000001000
kern  :warn  : [  429.207539] RDX: 0000000000001000 RSI: 62db1d4c87f61263 RDI: ffff900d75115000
kern  :warn  : [  429.208534] RBP: 0000000000000000 R08: 0000000000001000 R09: ffffa38c03be7b00
kern  :warn  : [  429.209545] R10: 0000000000001000 R11: 0000000000001000 R12: ffffa38c03be7b00
kern  :warn  : [  429.210514] R13: 0000000000001000 R14: ffff900d767bbc80 R15: 0000000000000000
kern  :warn  : [  429.211485] FS:  0000000000000000(0000) GS:ffff900d9f280000(0000) knlGS:0000000000000000
kern  :warn  : [  429.212485] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
kern  :warn  : [  429.213344] CR2: 00007f447c0b3938 CR3: 00000005eb80a001 CR4: 00000000001606e0
kern  :info  : [  429.214141] note: md1_raid6[288] exited with preempt_count 3
daemon:warn  : [  664.473663] systemd[1]: systemd-journald.service: State 'stop-sigabrt' timed out. Terminating.
daemon:warn  : [  754.723181] systemd[1]: systemd-journald.service: State 'stop-sigterm' timed out. Killing.
daemon:notice: [  754.725127] systemd[1]: systemd-journald.service: Killing process 368 (systemd-journal) with signal SIGKILL.
daemon:warn  : [  844.727776] systemd[1]: systemd-journald.service: Processes still around after SIGKILL. Ignoring.

[-- Attachment #3: gpf-dmesg-2.txt --]
[-- Type: text/plain, Size: 6500 bytes --]

kern  :notice: [   76.235033] audit: type=1130 audit(1537654618.909:66): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=tvheadend comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
syslog:warn  : [   76.560142] systemd-journald[366]: File /var/log/journal/9ebf93d137434ec68b05472bb8d498ab/user-1337.journal corrupted or uncleanly shut down, renaming and replacing.
kern  :err   : [   78.776697] usb 4-1.5: dvb_usb_v2: 2nd usb_bulk_msg() failed=-110
kern  :err   : [   78.776752] error writing addr: 0x8d, mask: 0x01, data: 0x01, retrying...
kern  :warn  : [   79.124062] usb 4-1.5: DVB: adapter 0 frontend 0 frequency 0 out of range (54000000..858000000)
kern  :err   : [   81.336677] usb 4-1.5: dvb_usb_v2: 2nd usb_bulk_msg() failed=-110
kern  :err   : [   81.336740] error writing addr: 0x8d, mask: 0x01, data: 0x01, retrying...
kern  :warn  : [  162.339652] general protection fault: 0000 [#1] PREEMPT SMP PTI
kern  :warn  : [  162.339752] CPU: 3 PID: 1003 Comm: tvheadend Not tainted 4.18.9-arch1-1-ARCH #1
kern  :warn  : [  162.339801] Hardware name: To Be Filled By O.E.M. To Be Filled By O.E.M./Z77 Extreme6, BIOS P2.80 07/01/2013
kern  :warn  : [  162.339868] RIP: 0010:wait_consider_task+0x26/0x920
kern  :warn  : [  162.339902] Code: 00 00 66 90 0f 1f 44 00 00 41 57 41 56 41 55 41 54 55 53 48 89 d3 48 83 ec 30 65 48 8b 04 25 28 00 00 00 48 89 44 24 28 31 c0 <8b> 92 8c 04 00 00 83 fa 10 74 2d 8b 07 48 89 fd 41 89 f5 83 f8 03 
kern  :warn  : [  162.340063] RSP: 0018:ffffac3f03ecfd50 EFLAGS: 00010246
kern  :warn  : [  162.340100] RAX: 0000000000000000 RBX: 7c778145a68f22c3 RCX: 0000000000000001
kern  :warn  : [  162.340147] RDX: 7c778145a68f22c3 RSI: 0000000000000000 RDI: ffffac3f03ecfdf8
kern  :warn  : [  162.340195] RBP: ffffac3f03ecfdf8 R08: 0000000000000000 R09: 0000000000000001
kern  :warn  : [  162.340243] R10: 0000000000000001 R11: 0000000000000000 R12: ffffac3f03ecfe20
kern  :warn  : [  162.340290] R13: 00000000fffffff6 R14: 7c778145a68f22c3 R15: ffff9a10b8860510
kern  :warn  : [  162.340339] FS:  00007f4da9706700(0000) GS:ffff9a10df2c0000(0000) knlGS:0000000000000000
kern  :warn  : [  162.340392] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
kern  :warn  : [  162.340431] CR2: 00007f4da406c000 CR3: 00000007b51e6002 CR4: 00000000001606e0
kern  :warn  : [  162.340479] Call Trace:
kern  :warn  : [  162.340506]  ? preempt_count_add+0x68/0xa0
kern  :warn  : [  162.340537]  do_wait+0x11c/0x240
kern  :warn  : [  162.340563]  kernel_wait4+0x9e/0x140
kern  :warn  : [  162.340592]  ? task_stopped_code+0x50/0x50
kern  :warn  : [  162.340623]  __se_sys_wait4+0x88/0xa0
kern  :warn  : [  162.340653]  ? syscall_slow_exit_work+0x19b/0x1b0
kern  :warn  : [  162.340688]  ? syscall_trace_enter+0x1d3/0x2d0
kern  :warn  : [  162.340724]  ? do_epoll_wait+0x8b/0xd0
kern  :warn  : [  162.340754]  do_syscall_64+0x5b/0x170
kern  :warn  : [  162.340784]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
kern  :warn  : [  162.340821] RIP: 0033:0x7f4db4bd9d42
kern  :warn  : [  162.340847] Code: 41 54 41 89 d4 55 48 89 f5 53 89 fb 48 83 ec 10 e8 a3 f0 ff ff 45 31 d2 44 89 e2 48 89 ee 41 89 c0 89 df b8 3d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 30 44 89 c7 89 44 24 0c e8 da f0 ff ff 8b 44 
kern  :warn  : [  162.341006] RSP: 002b:00007f4da97056b0 EFLAGS: 00000246 ORIG_RAX: 000000000000003d
kern  :warn  : [  162.341062] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00007f4db4bd9d42
kern  :warn  : [  162.341109] RDX: 0000000000000001 RSI: 00007f4da97056e4 RDI: 00000000ffffffff
kern  :warn  : [  162.341156] RBP: 00007f4da97056e4 R08: 0000000000000000 R09: 0000000000000000
kern  :warn  : [  162.341204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
kern  :warn  : [  162.341251] R13: 0000000000000000 R14: 00007f4da9706700 R15: 0000000000000000
kern  :warn  : [  162.341300] Modules linked in: bridge stp llc nf_log_ipv6 nf_conntrack_ipv6 nf_defrag_ipv6 ip6t_REJECT nf_reject_ipv6 ip6t_rt ip6table_filter ip6_tables nf_log_ipv4 nf_log_common nf_conntrack_ipv4 nf_defrag_ipv4 xt_LOG xt_recent ipt_REJECT nf_reject_ipv4 xt_addrtype xt_tcpudp xt_pkttype xt_conntrack iptable_filter nct6775 hwmon_vid nls_iso8859_1 nls_cp437 vfat fat mxl111sf_tuner lg2160 intel_rapl x86_pkg_temp_thermal intel_powerclamp coretemp mxl111sf_demod kvm_intel kvm irqbypass lgdt3305 crct10dif_pclmul crc32_pclmul ghash_clmulni_intel pcbc aesni_intel aes_x86_64 crypto_simd cryptd glue_helper dvb_usb_mxl111sf dvb_usb_v2 tveeprom dvb_core videobuf2_vmalloc intel_cstate i915 mxm_wmi videobuf2_memops videobuf2_common iTCO_wdt iTCO_vendor_support videodev gpio_ich media rc_core intel_uncore intel_rapl_perf
kern  :warn  : [  162.345453]  drm_kms_helper drm igb intel_gtt pcspkr input_leds mei_me agpgart i2c_algo_bit lpc_ich i2c_i801 syscopyarea sysfillrect sysimgblt mei fb_sys_fops dca pcc_cpufreq evdev led_class wmi ie31200_edac mac_hid nfsd auth_rpcgss nfs_acl lockd grace sunrpc nf_conntrack_sane nf_conntrack ip_tables x_tables ext4 crc16 mbcache jbd2 fscrypto dm_mod hid_generic usbhid hid sd_mod uas usb_storage ahci libahci xhci_pci xhci_hcd ehci_pci ehci_hcd libata usbcore scsi_mod usb_common raid456 libcrc32c crc32c_generic crc32c_intel async_raid6_recov async_memcpy async_pq async_xor xor async_tx raid6_pq raid1 md_mod
kern  :warn  : [  162.355599] ---[ end trace 0d08aea59c61bbec ]---
kern  :warn  : [  162.356694] RIP: 0010:wait_consider_task+0x26/0x920
kern  :warn  : [  162.357577] Code: 00 00 66 90 0f 1f 44 00 00 41 57 41 56 41 55 41 54 55 53 48 89 d3 48 83 ec 30 65 48 8b 04 25 28 00 00 00 48 89 44 24 28 31 c0 <8b> 92 8c 04 00 00 83 fa 10 74 2d 8b 07 48 89 fd 41 89 f5 83 f8 03 
kern  :warn  : [  162.359419] RSP: 0018:ffffac3f03ecfd50 EFLAGS: 00010246
kern  :warn  : [  162.360321] RAX: 0000000000000000 RBX: 7c778145a68f22c3 RCX: 0000000000000001
kern  :warn  : [  162.361216] RDX: 7c778145a68f22c3 RSI: 0000000000000000 RDI: ffffac3f03ecfdf8
kern  :warn  : [  162.362074] RBP: ffffac3f03ecfdf8 R08: 0000000000000000 R09: 0000000000000001
kern  :warn  : [  162.362923] R10: 0000000000000001 R11: 0000000000000000 R12: ffffac3f03ecfe20
kern  :warn  : [  162.363790] R13: 00000000fffffff6 R14: 7c778145a68f22c3 R15: ffff9a10b8860510
kern  :warn  : [  162.364692] FS:  00007f4da9706700(0000) GS:ffff9a10df2c0000(0000) knlGS:0000000000000000
kern  :warn  : [  162.365550] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
kern  :warn  : [  162.366409] CR2: 00007f4da406c000 CR3: 00000007b51e6002 CR4: 00000000001606e0

Re: 4.18 regression: dvb-usb-v2: General Protection Fault shortly after boot

[Dan Ziemba]

[-- Attachment #1: Type: text/plain, Size: 4613 bytes --]

On Sat, 2018-09-22 at 18:31 -0400, Dan Ziemba wrote:
> On Sat, 2018-09-22 at 07:21 -0300, Mauro Carvalho Chehab wrote:
> > Em Thu, 20 Sep 2018 00:07:09 -0400
> > Dan Ziemba <zman0900@gmail.com> escreveu:
> > 
> > > I reported this on bugzilla also a few days ago, but I'm not sure
> > > if
> > > that is actually the right place to report, so copying to the
> > > mailing
> > > list...
> > 
> > I saw a report on BZ, but haven't time yet to dig into it. Those
> > days, it is usually better to report via the ML.
> >  
> > > 
> > > Starting with the first 4.18 RC kernel, my system experiences
> > > general
> > > protection faults leading to kernel panic shortly after the login
> > > prompt appears on most boots.  Occasionally that doesn't happen
> > > and
> > > instead numerous other seemingly random stack traces are printed
> > > (bad
> > > page map, scheduling while atomic, null pointer deref, etc), but
> > > either
> > > way the system is unusable.  This bug remains up through the
> > > latest
> > > mainline kernel 4.19-rc2.
> > > 
> > > Booting with my USB ATSC tv tuner disconnected prevents the bug
> > > from
> > > happening.
> > > 
> > > 
> > > Kernel bisection between v4.17 and 4.18-rc1 shows problem is
> > > caused
> > > by:
> > > 
> > > 1a0c10ed7bb1 media: dvb-usb-v2: stop using coherent memory for
> > > URBs
> > > 
> > > 
> > > Building both 4.18.6 and 4.19-rc2 with that commit reverted
> > > resolves
> > > the bug for me.  
> > 
> > There's something really weird on it: that patch changes a code
> > that
> > it is only called when the device is streaming. It shouldn't be
> > causing GFP/kernel panic, depending if the machine was booted with
> > or without it.
> 
> It hadn't occurred to me to try disabled my tv software.  When I
> disable tvheadend so it doesn't start at boot, crash does not happen
> until I later start it manually.  I believe it does some scanning
> through the channels at start up to update EPG data.
> 
> > 
> > Perhaps it would be a side effect due to some changes at the USB
> > subsystem? There are some changes happening there changing some
> > locks.
> > 
> > I see one minor issue there: it is using GFP_ATOMIC instead
> > of GFP_KERNEL.
> > 
> > Could you please try to change this line:
> > 
> > 	stream->buf_list[stream->buf_num] = kzalloc(size, GFP_ATOMIC);
> > 
> > to
> > 
> > 	stream->buf_list[stream->buf_num] = kzalloc(size, GFP_KERNEL);
> 
> I'll give this a try now.

I built from mainline HEAD, currently 4.19rc4.r209.g10dc890d4228, and
was able to reproduce the bug before any code changes. Stack trace from
the one test is attached.

I then rebuilt with the above line changed, but the problem continues. 
Stack traces from two tests are attached.  First one was a null pointer
deref instead of general protection fault, but I have seen that beforeas well.  

I have noticed that with this newer kernel version (with and without
code change), the crash does not always happen immediately after
starting tvheadend.  A few times, I have been able to tune in a channel
and watch for a few seconds.  Then the crash would happen after
flipping through 3 or 4 channels.  

> 
> > 
> > Also, it would be great if you could post the GPF logs.
> 
> It's difficult to capture much, since the system often locks up
> without
> syncing to disk.  The stack traces appear pretty random to me, but I
> have attached two examples I captured by tailing dmesg over ssh while
> starting tvheadend. In the first, there was actually not a complete
> lock up, so it is complete.  For the second one, there was a complete
> lockup and quite a bit more printed on the local console that didn't
> make it though the network. 
> 
> > 
> > > 
> > > 
> > > My DVB hardware uses driver mxl111sf:
> > > 
> > > Bus 002 Device 003: ID 2040:c61b Hauppauge 
> > > Device Descriptor:
> > >   bLength                18
> > >   bDescriptorType         1
> > >   bcdUSB               2.00
> > >   bDeviceClass            0 
> > >   bDeviceSubClass         0 
> > >   bDeviceProtocol         0 
> > >   bMaxPacketSize0        64
> > >   idVendor           0x2040 Hauppauge
> > >   idProduct          0xc61b 
> > >   bcdDevice            0.00
> > >   iManufacturer           1 Hauppauge
> > >   iProduct                2 WinTV Aero-M
> > > 
> > > Other system info:
> > > 
> > > Arch Linux x86_64
> > > Intel i7-3770
> > > 16 GB ram
> > > 
> > > Bugzilla:
> > > https://bugzilla.kernel.org/show_bug.cgi?id=201055
> > > 
> > > Arch bug:
> > > https://bugs.archlinux.org/task/59990
> > > 
> > > 
> > > Thanks,
> > > Dan Ziemba
> > > 
> > > 
> > 
> > 
> > 
> > Thanks,
> > Mauro

[-- Attachment #2: gpf-dmesg-after-1.txt --]
[-- Type: text/plain, Size: 6385 bytes --]

syslog:warn  : [   57.773807] systemd-journald[337]: File /var/log/journal/9ebf93d137434ec68b05472bb8d498ab/user-1337.journal corrupted or uncleanly shut down, renaming and replacing.
kern  :err   : [   59.912749] usb 4-1.5: dvb_usb_v2: 2nd usb_bulk_msg() failed=-110
kern  :err   : [   59.912816] error writing addr: 0x8d, mask: 0x01, data: 0x01, retrying...
kern  :warn  : [   60.260210] usb 4-1.5: DVB: adapter 0 frontend 0 frequency 0 out of range (54000000..858000000)
kern  :err   : [   62.472712] usb 4-1.5: dvb_usb_v2: 2nd usb_bulk_msg() failed=-110
kern  :err   : [   62.472751] error writing addr: 0x8d, mask: 0x01, data: 0x01, retrying...
kern  :alert : [   65.000014] BUG: unable to handle kernel NULL pointer dereference at 0000000000000007
kern  :info  : [   65.000139] PGD 80000007df1eb067 P4D 80000007df1eb067 PUD 0 
kern  :warn  : [   65.000184] Oops: 0000 [#1] PREEMPT SMP PTI
kern  :warn  : [   65.000216] CPU: 3 PID: 885 Comm: java Not tainted 4.19.0-rc4-gbf6826affb0e #1
kern  :warn  : [   65.000265] Hardware name: To Be Filled By O.E.M. To Be Filled By O.E.M./Z77 Extreme6, BIOS P2.80 07/01/2013
kern  :warn  : [   65.000336] RIP: 0010:skb_release_data+0x75/0x150
kern  :warn  : [   65.000386] Code: db 41 80 7c 24 02 00 48 89 fd 75 0f eb 47 41 0f b6 44 24 02 83 c3 01 39 d8 7e 3a 48 63 c3 48 83 c0 03 48 c1 e0 04 49 8b 3c 04 <48> 8b 47 08 48 8d 50 ff a8 01 48 0f 45 fa 0f 1f 44 00 00 f0 ff 4f
kern  :warn  : [   65.000522] RSP: 0018:ffffa8488809fe18 EFLAGS: 00010206
kern  :warn  : [   65.000568] RAX: 0000000000000030 RBX: 0000000000000000 RCX: ffffffff920f08e0
kern  :warn  : [   65.000617] RDX: 000000000009a300 RSI: ffff9c937b34ec00 RDI: ffffffffffffffff
kern  :warn  : [   65.000665] RBP: ffff9c937b34fc00 R08: 0000000000000001 R09: ffffffff91661fa0
kern  :warn  : [   65.000716] R10: ffffd8221eb6d580 R11: ffffd8221eb6d588 R12: ffff9c93770016c0
kern  :warn  : [   65.000767] R13: 0000000000000000 R14: ffff9c935e57ad80 R15: ffff9c935f27b410
kern  :warn  : [   65.000816] FS:  00007f37c4dcb700(0000) GS:ffff9c937f4c0000(0000) knlGS:0000000000000000
kern  :warn  : [   65.000889] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
kern  :warn  : [   65.000930] CR2: 0000000000000007 CR3: 00000007de812003 CR4: 00000000001606e0
kern  :warn  : [   65.000986] Call Trace:
kern  :warn  : [   65.001012]  __kfree_skb+0xe/0x20
kern  :warn  : [   65.001041]  tcp_close+0x80/0x460
kern  :warn  : [   65.001069]  inet_release+0x3c/0x60
kern  :warn  : [   65.001097]  __sock_release+0x3d/0x90
kern  :warn  : [   65.001128]  sock_close+0x11/0x20
kern  :warn  : [   65.001156]  __fput+0xa2/0x1d0
kern  :warn  : [   65.001184]  task_work_run+0x8f/0xb0
kern  :warn  : [   65.001232]  exit_to_usermode_loop+0xd3/0xe0
kern  :warn  : [   65.001272]  do_syscall_64+0x147/0x170
kern  :warn  : [   65.001307]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
kern  :warn  : [   65.001350] RIP: 0033:0x7f37ea583edb
kern  :warn  : [   65.001378] Code: 73 01 c3 48 8b 0d 85 0f 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa b8 21 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 55 0f 0d 00 f7 d8 64 89 01 48
kern  :warn  : [   65.001493] RSP: 002b:00007f37c4dca358 EFLAGS: 00000202 ORIG_RAX: 0000000000000021
kern  :warn  : [   65.001545] RAX: 00000000000000a0 RBX: 00007f37e4e249e0 RCX: 00007f37ea583edb
kern  :warn  : [   65.001603] RDX: 0000000000000032 RSI: 00000000000000a0 RDI: 0000000000000058
kern  :warn  : [   65.001663] RBP: 00007f37c4dca370 R08: 00007f37cc884540 R09: 0000000779c87600
kern  :warn  : [   65.001718] R10: 000000000000031a R11: 0000000000000202 R12: 0000000000000000
kern  :warn  : [   65.001766] R13: 00007f37c7c1d638 R14: 00007f37c4dca3e8 R15: 00007f37e4e24800
kern  :warn  : [   65.001815] Modules linked in: bridge stp llc nf_log_ipv6 ip6t_REJECT nf_reject_ipv6 ip6t_rt ip6table_filter ip6_tables nf_log_ipv4 nf_log_common xt_LOG xt_recent ipt_REJECT nf_reject_ipv4 xt_addrtype xt_tcpudp xt_pkttype xt_conntrack iptable_filter nct6775 hwmon_vid nls_iso8859_1 nls_cp437 vfat fat intel_rapl x86_pkg_temp_thermal intel_powerclamp coretemp kvm_intel kvm irqbypass crct10dif_pclmul crc32_pclmul ghash_clmulni_intel pcbc aesni_intel aes_x86_64 mxl111sf_tuner lg2160 i915 crypto_simd cryptd glue_helper mxl111sf_demod lgdt3305 intel_cstate intel_gtt iTCO_wdt iTCO_vendor_support dvb_usb_mxl111sf tveeprom intel_rapl_perf drm_kms_helper syscopyarea sysfillrect sysimgblt fb_sys_fops dvb_usb_v2 dvb_core mxm_wmi videobuf2_vmalloc videobuf2_memops drm igb videobuf2_common i2c_algo_bit evdev input_leds
kern  :warn  : [   65.009016]  pcspkr i2c_i801 videodev agpgart lpc_ich led_class media wmi mei_me rc_core dca mac_hid mei pcc_cpufreq ie31200_edac nfsd auth_rpcgss nfs_acl lockd nf_conntrack_sane grace nf_conntrack sunrpc nf_defrag_ipv6 nf_defrag_ipv4 ip_tables x_tables ext4 crc16 mbcache jbd2 fscrypto dm_mod hid_generic usbhid hid sd_mod uas usb_storage ahci libahci xhci_pci libata ehci_pci xhci_hcd ehci_hcd scsi_mod usbcore usb_common raid456 libcrc32c crc32c_generic crc32c_intel async_raid6_recov async_memcpy async_pq async_xor xor async_tx raid6_pq raid1 md_mod
kern  :warn  : [   65.019059] CR2: 0000000000000007
kern  :warn  : [   65.021110] ---[ end trace d18b8080c6f53a8c ]---
kern  :warn  : [   65.022043] RIP: 0010:skb_release_data+0x75/0x150
kern  :warn  : [   65.022916] Code: db 41 80 7c 24 02 00 48 89 fd 75 0f eb 47 41 0f b6 44 24 02 83 c3 01 39 d8 7e 3a 48 63 c3 48 83 c0 03 48 c1 e0 04 49 8b 3c 04 <48> 8b 47 08 48 8d 50 ff a8 01 48 0f 45 fa 0f 1f 44 00 00 f0 ff 4f
kern  :warn  : [   65.024685] RSP: 0018:ffffa8488809fe18 EFLAGS: 00010206
kern  :warn  : [   65.025548] RAX: 0000000000000030 RBX: 0000000000000000 RCX: ffffffff920f08e0
kern  :warn  : [   65.026418] RDX: 000000000009a300 RSI: ffff9c937b34ec00 RDI: ffffffffffffffff
kern  :warn  : [   65.027350] RBP: ffff9c937b34fc00 R08: 0000000000000001 R09: ffffffff91661fa0
kern  :warn  : [   65.028204] R10: ffffd8221eb6d580 R11: ffffd8221eb6d588 R12: ffff9c93770016c0
kern  :warn  : [   65.029059] R13: 0000000000000000 R14: ffff9c935e57ad80 R15: ffff9c935f27b410
kern  :warn  : [   65.029930] FS:  00007f37c4dcb700(0000) GS:ffff9c937f4c0000(0000) knlGS:0000000000000000
kern  :warn  : [   65.030804] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
kern  :warn  : [   65.031660] CR2: 0000000000000007 CR3: 00000007de812003 CR4: 00000000001606e0

[-- Attachment #3: gpf-dmesg-after-2.txt --]
[-- Type: text/plain, Size: 6218 bytes --]

syslog:warn  : [   60.360121] systemd-journald[343]: File /var/log/journal/9ebf93d137434ec68b05472bb8d498ab/user-1337.journal corrupted or uncleanly shut down, renaming and replacing.
kern  :err   : [   62.756644] usb 4-1.5: dvb_usb_v2: 2nd usb_bulk_msg() failed=-110
kern  :err   : [   62.756709] error writing addr: 0x8d, mask: 0x01, data: 0x01, retrying...
kern  :warn  : [   63.104044] usb 4-1.5: DVB: adapter 0 frontend 0 frequency 0 out of range (54000000..858000000)
kern  :err   : [   65.316648] usb 4-1.5: dvb_usb_v2: 2nd usb_bulk_msg() failed=-110
kern  :err   : [   65.316716] error writing addr: 0x8d, mask: 0x01, data: 0x01, retrying...
kern  :warn  : [  186.819147] general protection fault: 0000 [#1] PREEMPT SMP PTI
kern  :warn  : [  186.819231] CPU: 0 PID: 973 Comm: tvheadend Not tainted 4.19.0-rc4-gbf6826affb0e #1
kern  :warn  : [  186.819274] Hardware name: To Be Filled By O.E.M. To Be Filled By O.E.M./Z77 Extreme6, BIOS P2.80 07/01/2013
kern  :warn  : [  186.819334] RIP: 0010:wait_consider_task+0x26/0x920
kern  :warn  : [  186.819365] Code: 60 c7 ff ff 0f 1f 44 00 00 41 57 41 56 41 55 41 54 55 53 48 89 d3 48 83 ec 30 65 48 8b 04 25 28 00 00 00 48 89 44 24 28 31 c0 <8b> 92 8c 04 00 00 83 fa 10 74 26 8b 07 48 89 fd 41 89 f5 83 f8 04
kern  :warn  : [  186.819472] RSP: 0018:ffffb7ff8841fd50 EFLAGS: 00010246
kern  :warn  : [  186.819506] RAX: 0000000000000000 RBX: 177fadc1b20e7f61 RCX: 0000000000000001
kern  :warn  : [  186.819572] RDX: 177fadc1b20e7f61 RSI: 0000000000000000 RDI: ffffb7ff8841fdf8
kern  :warn  : [  186.819599] RBP: ffffb7ff8841fdf8 R08: 0000000000000000 R09: 0000000000000000
kern  :warn  : [  186.819627] R10: 0000000000000000 R11: 0000000000000000 R12: ffffb7ff8841fe20
kern  :warn  : [  186.819655] R13: 00000000fffffff6 R14: 177fadc1b20e7f61 R15: ffff915d79880510
kern  :warn  : [  186.819683] FS:  00007ff26a235700(0000) GS:ffff915d7f400000(0000) knlGS:0000000000000000
kern  :warn  : [  186.819715] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
kern  :warn  : [  186.819738] CR2: 00007fedb2477d80 CR3: 00000007aa0f6003 CR4: 00000000001606f0
kern  :warn  : [  186.819766] Call Trace:
kern  :warn  : [  186.819783]  ? preempt_count_add+0x68/0xa0
kern  :warn  : [  186.819802]  do_wait+0x11c/0x240
kern  :warn  : [  186.819818]  kernel_wait4+0x9e/0x140
kern  :warn  : [  186.819835]  ? task_stopped_code+0x50/0x50
kern  :warn  : [  186.819854]  __se_sys_wait4+0x88/0xa0
kern  :warn  : [  186.819872]  ? wake_up_q+0x70/0x70
kern  :warn  : [  186.819889]  ? do_epoll_wait+0x8b/0xd0
kern  :warn  : [  186.819908]  do_syscall_64+0x5b/0x170
kern  :warn  : [  186.819926]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
kern  :warn  : [  186.819947] RIP: 0033:0x7ff275708d42
kern  :warn  : [  186.819964] Code: 41 54 41 89 d4 55 48 89 f5 53 89 fb 48 83 ec 10 e8 a3 f0 ff ff 45 31 d2 44 89 e2 48 89 ee 41 89 c0 89 df b8 3d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 30 44 89 c7 89 44 24 0c e8 da f0 ff ff 8b 44
kern  :warn  : [  186.820030] RSP: 002b:00007ff26a2346b0 EFLAGS: 00000246 ORIG_RAX: 000000000000003d
kern  :warn  : [  186.820059] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00007ff275708d42
kern  :warn  : [  186.820086] RDX: 0000000000000001 RSI: 00007ff26a2346e4 RDI: 00000000ffffffff
kern  :warn  : [  186.820113] RBP: 00007ff26a2346e4 R08: 0000000000000000 R09: 0000000000000000
kern  :warn  : [  186.820140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
kern  :warn  : [  186.820167] R13: 0000000000000000 R14: 00007ff26a235700 R15: 0000000000000000
kern  :warn  : [  186.820195] Modules linked in: bridge stp llc nf_log_ipv6 ip6t_REJECT nf_reject_ipv6 ip6t_rt ip6table_filter ip6_tables nf_log_ipv4 nf_log_common xt_LOG xt_recent ipt_REJECT nf_reject_ipv4 xt_addrtype xt_tcpudp xt_pkttype xt_conntrack iptable_filter nct6775 hwmon_vid nls_iso8859_1 nls_cp437 vfat fat mxl111sf_tuner lg2160 intel_rapl x86_pkg_temp_thermal intel_powerclamp coretemp i915 kvm_intel kvm mxl111sf_demod irqbypass crct10dif_pclmul crc32_pclmul lgdt3305 ghash_clmulni_intel pcbc aesni_intel aes_x86_64 crypto_simd cryptd glue_helper intel_gtt dvb_usb_mxl111sf tveeprom dvb_usb_v2 dvb_core intel_cstate mxm_wmi videobuf2_vmalloc drm_kms_helper videobuf2_memops syscopyarea intel_rapl_perf sysfillrect sysimgblt fb_sys_fops drm videobuf2_common iTCO_wdt iTCO_vendor_support videodev media rc_core igb
kern  :warn  : [  186.821556]  agpgart i2c_algo_bit input_leds mei_me evdev pcspkr i2c_i801 wmi dca led_class mac_hid mei lpc_ich ie31200_edac pcc_cpufreq nfsd auth_rpcgss nfs_acl lockd grace sunrpc nf_conntrack_sane nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_tables x_tables ext4 crc16 mbcache jbd2 fscrypto dm_mod hid_generic usbhid sd_mod hid uas usb_storage ahci libahci xhci_pci ehci_pci xhci_hcd ehci_hcd libata scsi_mod usbcore usb_common raid456 libcrc32c crc32c_generic crc32c_intel async_raid6_recov async_memcpy async_pq async_xor xor async_tx raid6_pq raid1 md_mod
kern  :warn  : [  186.830341] ---[ end trace cf29c74db6a79cee ]---
kern  :warn  : [  186.831435] RIP: 0010:wait_consider_task+0x26/0x920
kern  :warn  : [  186.832347] Code: 60 c7 ff ff 0f 1f 44 00 00 41 57 41 56 41 55 41 54 55 53 48 89 d3 48 83 ec 30 65 48 8b 04 25 28 00 00 00 48 89 44 24 28 31 c0 <8b> 92 8c 04 00 00 83 fa 10 74 26 8b 07 48 89 fd 41 89 f5 83 f8 04
kern  :warn  : [  186.834242] RSP: 0018:ffffb7ff8841fd50 EFLAGS: 00010246
kern  :warn  : [  186.835183] RAX: 0000000000000000 RBX: 177fadc1b20e7f61 RCX: 0000000000000001
kern  :warn  : [  186.836108] RDX: 177fadc1b20e7f61 RSI: 0000000000000000 RDI: ffffb7ff8841fdf8
kern  :warn  : [  186.837015] RBP: ffffb7ff8841fdf8 R08: 0000000000000000 R09: 0000000000000000
kern  :warn  : [  186.837894] R10: 0000000000000000 R11: 0000000000000000 R12: ffffb7ff8841fe20
kern  :warn  : [  186.838759] R13: 00000000fffffff6 R14: 177fadc1b20e7f61 R15: ffff915d79880510
kern  :warn  : [  186.839629] FS:  00007ff26a235700(0000) GS:ffff915d7f400000(0000) knlGS:0000000000000000
kern  :warn  : [  186.840520] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
kern  :warn  : [  186.841398] CR2: 00007fedb2477d80 CR3: 00000007aa0f6003 CR4: 00000000001606f0
kern  :info  : [  186.842262] note: tvheadend[973] exited with preempt_count 1

[-- Attachment #4: gpf-dmesg-before.txt --]
[-- Type: text/plain, Size: 6197 bytes --]

syslog:warn  : [   76.898800] systemd-journald[339]: File /var/log/journal/9ebf93d137434ec68b05472bb8d498ab/user-1337.journal corrupted or uncleanly shut down, renaming and replacing.
kern  :err   : [   79.286954] usb 4-1.5: dvb_usb_v2: 2nd usb_bulk_msg() failed=-110
kern  :err   : [   79.287010] error writing addr: 0x8d, mask: 0x01, data: 0x01, retrying...
kern  :warn  : [   79.634161] usb 4-1.5: DVB: adapter 0 frontend 0 frequency 0 out of range (54000000..858000000)
kern  :err   : [   81.845434] usb 4-1.5: dvb_usb_v2: 2nd usb_bulk_msg() failed=-110
kern  :err   : [   81.845507] error writing addr: 0x8d, mask: 0x01, data: 0x01, retrying...
kern  :warn  : [  192.660860] general protection fault: 0000 [#1] PREEMPT SMP PTI
kern  :warn  : [  192.660966] CPU: 2 PID: 1071 Comm: tvh:sharer Not tainted 4.19.0-rc4-gbf6826affb0e #1
kern  :warn  : [  192.661025] Hardware name: To Be Filled By O.E.M. To Be Filled By O.E.M./Z77 Extreme6, BIOS P2.80 07/01/2013
kern  :warn  : [  192.661086] RIP: 0010:find_vma+0x40/0x70
kern  :warn  : [  192.661114] Code: 48 85 c0 74 07 48 83 c4 08 5b 5d c3 48 8b 55 08 48 85 d2 75 15 eb ee 48 8d 42 e0 48 39 5a e0 76 15 48 8b 52 10 48 85 d2 74 0c <48> 39 5a e8 77 e7 48 8b 52 08 eb ef 48 85 c0 74 ca 48 89 c6 48 89
kern  :warn  : [  192.661217] RSP: 0018:ffffb62903da3e38 EFLAGS: 00010202
kern  :warn  : [  192.661251] RAX: ffff966db8021780 RBX: 00007f1645cae000 RCX: 000000000000001e
kern  :warn  : [  192.661294] RDX: 34b636b61acba58c RSI: 00007f1645cae000 RDI: ffff966d6809dc00
kern  :warn  : [  192.661336] RBP: ffff966d6809dc00 R08: 0000000000000000 R09: 0000000000000000
kern  :warn  : [  192.661378] R10: 00007f16464a9000 R11: 0000000000000000 R12: 00007f1645cae000
kern  :warn  : [  192.661420] R13: 0000000000000004 R14: 00007f1645cae000 R15: 00007f16464a9000
kern  :warn  : [  192.661463] FS:  00007f16464ae700(0000) GS:ffff966dbf480000(0000) knlGS:0000000000000000
kern  :warn  : [  192.661510] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
kern  :warn  : [  192.661545] CR2: 00007f164b1c7edf CR3: 00000007a8086006 CR4: 00000000001606e0
kern  :warn  : [  192.661587] Call Trace:
kern  :warn  : [  192.661611]  ? __switch_to_asm+0x34/0x70
kern  :warn  : [  192.661639]  find_vma_prev+0x12/0x50
kern  :warn  : [  192.661665]  __se_sys_madvise+0x125/0x810
kern  :warn  : [  192.661695]  ? __switch_to_asm+0x40/0x70
kern  :warn  : [  192.661721]  ? __switch_to_asm+0x40/0x70
kern  :warn  : [  192.661750]  ? __se_sys_futex+0x138/0x180
kern  :warn  : [  192.661782]  ? do_syscall_64+0x5b/0x170
kern  :warn  : [  192.661810]  ? __se_sys_madvise+0x810/0x810
kern  :warn  : [  192.661838]  do_syscall_64+0x5b/0x170
kern  :warn  : [  192.661866]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
kern  :warn  : [  192.661901] RIP: 0033:0x7f1671ebc78b
kern  :warn  : [  192.661926] Code: 64 89 02 b8 ff ff ff ff c3 48 8b 15 cf 76 0c 00 f7 d8 64 89 02 b8 ff ff ff ff eb bc 0f 1f 00 f3 0f 1e fa b8 1c 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d a5 76 0c 00 f7 d8 64 89 01 48
kern  :warn  : [  192.662029] RSP: 002b:00007f16464ad778 EFLAGS: 00000206 ORIG_RAX: 000000000000001c
kern  :warn  : [  192.662075] RAX: ffffffffffffffda RBX: 00007f1645cae000 RCX: 00007f1671ebc78b
kern  :warn  : [  192.662117] RDX: 0000000000000004 RSI: 00000000007fb000 RDI: 00007f1645cae000
kern  :warn  : [  192.662159] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f16607be170
kern  :warn  : [  192.662201] R10: 0000000000000000 R11: 0000000000000206 R12: 00007f164cbcaf5e
kern  :warn  : [  192.662243] R13: 00007f164cbcaf5f R14: 00007f16464ae700 R15: 0000000000000000
kern  :warn  : [  192.662287] Modules linked in: bridge stp llc nf_log_ipv6 ip6t_REJECT nf_reject_ipv6 ip6t_rt ip6table_filter ip6_tables nf_log_ipv4 nf_log_common xt_LOG xt_recent ipt_REJECT nf_reject_ipv4 xt_addrtype xt_tcpudp xt_pkttype xt_conntrack iptable_filter nct6775 hwmon_vid nls_iso8859_1 nls_cp437 vfat fat mxl111sf_tuner lg2160 mxl111sf_demod intel_rapl x86_pkg_temp_thermal intel_powerclamp coretemp kvm_intel lgdt3305 kvm irqbypass crct10dif_pclmul crc32_pclmul ghash_clmulni_intel pcbc aesni_intel aes_x86_64 i915 mxm_wmi dvb_usb_mxl111sf iTCO_wdt iTCO_vendor_support intel_gtt crypto_simd tveeprom cryptd glue_helper dvb_usb_v2 dvb_core videobuf2_vmalloc input_leds videobuf2_memops drm_kms_helper igb intel_cstate videobuf2_common syscopyarea sysfillrect sysimgblt fb_sys_fops drm led_class i2c_i801 intel_rapl_perf
kern  :warn  : [  192.665942]  i2c_algo_bit dca videodev media mei_me agpgart mei rc_core evdev mac_hid pcspkr lpc_ich ie31200_edac wmi pcc_cpufreq nfsd auth_rpcgss nfs_acl lockd grace nf_conntrack_sane sunrpc nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_tables x_tables ext4 crc16 mbcache jbd2 fscrypto dm_mod hid_generic usbhid hid sd_mod uas usb_storage ahci xhci_pci libahci ehci_pci xhci_hcd ehci_hcd libata scsi_mod usbcore usb_common raid456 libcrc32c crc32c_generic crc32c_intel async_raid6_recov async_memcpy async_pq async_xor xor async_tx raid6_pq raid1 md_mod
kern  :warn  : [  192.674816] ---[ end trace f0a3ad8f59038470 ]---
kern  :warn  : [  192.676987] RIP: 0010:find_vma+0x40/0x70
kern  :warn  : [  192.677876] Code: 48 85 c0 74 07 48 83 c4 08 5b 5d c3 48 8b 55 08 48 85 d2 75 15 eb ee 48 8d 42 e0 48 39 5a e0 76 15 48 8b 52 10 48 85 d2 74 0c <48> 39 5a e8 77 e7 48 8b 52 08 eb ef 48 85 c0 74 ca 48 89 c6 48 89
kern  :warn  : [  192.679656] RSP: 0018:ffffb62903da3e38 EFLAGS: 00010202
kern  :warn  : [  192.680503] RAX: ffff966db8021780 RBX: 00007f1645cae000 RCX: 000000000000001e
kern  :warn  : [  192.681341] RDX: 34b636b61acba58c RSI: 00007f1645cae000 RDI: ffff966d6809dc00
kern  :warn  : [  192.682224] RBP: ffff966d6809dc00 R08: 0000000000000000 R09: 0000000000000000
kern  :warn  : [  192.683042] R10: 00007f16464a9000 R11: 0000000000000000 R12: 00007f1645cae000
kern  :warn  : [  192.683859] R13: 0000000000000004 R14: 00007f1645cae000 R15: 00007f16464a9000
kern  :warn  : [  192.684708] FS:  00007f16464ae700(0000) GS:ffff966dbf480000(0000) knlGS:0000000000000000
kern  :warn  : [  192.685618] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
kern  :warn  : [  192.686446] CR2: 00007f164b1c7edf CR3: 00000007a8086006 CR4: 00000000001606e0