* Re: Re: Re: A reliable kernel panic (3.6.2) and system crash when visiting a particular website
2012-10-20 23:15 ` Artem S. Tashkinov
@ 2012-10-21 0:24 ` Borislav Petkov
2012-10-21 1:57 ` Artem S. Tashkinov
2012-10-21 2:19 ` Alan Stern
` (2 subsequent siblings)
3 siblings, 1 reply; 34+ messages in thread
From: Borislav Petkov @ 2012-10-21 0:24 UTC (permalink / raw)
To: Artem S. Tashkinov
Cc: pavel-+ZI9xUNit7I, linux-kernel-u79uwXL29TY76Z2rM5mHXA,
netdev-u79uwXL29TY76Z2rM5mHXA, security-DgEjT+Ai2ygdnm+yROfE0A,
linux-media-u79uwXL29TY76Z2rM5mHXA,
linux-usb-u79uwXL29TY76Z2rM5mHXA
On Sat, Oct 20, 2012 at 11:15:17PM +0000, Artem S. Tashkinov wrote:
> You don't get me - I have *no* VirtualBox (or any proprietary) modules
> running
Ok, good. We got that out of the way - I wanted to make sure after you
replied with two other possibilities of the system freezing.
> - but I can reproduce this problem using *the same system running
> under* VirtualBox in Windows 7 64.
That's windoze as host and linux as a guest, correct?
If so, that's virtualbox's problem, I'd say.
> It's almost definitely either a USB driver bug or video4linux driver
> bug:
And you're assuming that because the freeze happens when using your usb
webcam, correct? And not otherwise?
Maybe you can describe in more detail what exactly you're doing so that
people could try to reproduce your issue.
> I'm CC'ing linux-media and linux-usb mailing lists, the problem is described here:
> https://lkml.org/lkml/2012/10/20/35
> https://lkml.org/lkml/2012/10/20/148
Yes, good idea. Maybe the folks there have some more ideas how to debug
this.
I'm leaving in the rest for reference.
What should be pointed out, though, is that you don't have any more
random corruptions causing oopses now that virtualbox is gone. The
freeze below is a whole another issue.
Thanks.
> Here are the last lines from my dmesg (with usbmon loaded):
>
> [ 292.164833] hub 1-0:1.0: state 7 ports 8 chg 0000 evt 0002
> [ 292.168091] ehci_hcd 0000:00:1f.5: GetStatus port:1 status 00100a 0 ACK POWER sig=se0 PEC CSC
> [ 292.172063] hub 1-0:1.0: port 1, status 0100, change 0003, 12 Mb/s
> [ 292.174883] usb 1-1: USB disconnect, device number 2
> [ 292.178045] usb 1-1: unregistering device
> [ 292.183539] usb 1-1: unregistering interface 1-1:1.0
> [ 292.197034] usb 1-1: unregistering interface 1-1:1.1
> [ 292.204317] usb 1-1: unregistering interface 1-1:1.2
> [ 292.234519] usb 1-1: unregistering interface 1-1:1.3
> [ 292.236175] usb 1-1: usb_disable_device nuking all URBs
> [ 292.364429] hub 1-0:1.0: debounce: port 1: total 100ms stable 100ms status 0x100
> [ 294.364279] hub 1-0:1.0: hub_suspend
> [ 294.366045] usb usb1: bus auto-suspend, wakeup 1
> [ 294.367375] ehci_hcd 0000:00:1f.5: suspend root hub
> [ 296.501084] usb usb1: usb wakeup-resume
> [ 296.508311] usb usb1: usb auto-resume
> [ 296.509833] ehci_hcd 0000:00:1f.5: resume root hub
> [ 296.560149] hub 1-0:1.0: hub_resume
> [ 296.562240] ehci_hcd 0000:00:1f.5: GetStatus port:1 status 001003 0 ACK POWER sig=se0 CSC CONNECT
> [ 296.566141] hub 1-0:1.0: port 1: status 0501 change 0001
> [ 296.670413] hub 1-0:1.0: state 7 ports 8 chg 0002 evt 0000
> [ 296.673222] hub 1-0:1.0: port 1, status 0501, change 0000, 480 Mb/s
> [ 297.311720] usb 1-1: new high-speed USB device number 3 using ehci_hcd
> [ 300.547237] usb 1-1: skipped 1 descriptor after configuration
> [ 300.549443] usb 1-1: skipped 4 descriptors after interface
> [ 300.552273] usb 1-1: skipped 2 descriptors after interface
> [ 300.556499] usb 1-1: skipped 1 descriptor after endpoint
> [ 300.559392] usb 1-1: skipped 2 descriptors after interface
> [ 300.560960] usb 1-1: skipped 1 descriptor after endpoint
> [ 300.562169] usb 1-1: skipped 2 descriptors after interface
> [ 300.563440] usb 1-1: skipped 1 descriptor after endpoint
> [ 300.564639] usb 1-1: skipped 2 descriptors after interface
> [ 300.565828] usb 1-1: skipped 2 descriptors after endpoint
> [ 300.567084] usb 1-1: skipped 9 descriptors after interface
> [ 300.569205] usb 1-1: skipped 1 descriptor after endpoint
> [ 300.570484] usb 1-1: skipped 53 descriptors after interface
> [ 300.595843] usb 1-1: default language 0x0409
> [ 300.602503] usb 1-1: USB interface quirks for this device: 2
> [ 300.605700] usb 1-1: udev 3, busnum 1, minor = 2
> [ 300.606959] usb 1-1: New USB device found, idVendor=046d, idProduct=081d
> [ 300.610298] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
> [ 300.613742] usb 1-1: SerialNumber: 48C5D2B0
> [ 300.617703] usb 1-1: usb_probe_device
> [ 300.620594] usb 1-1: configuration #1 chosen from 1 choice
> [ 300.639218] usb 1-1: adding 1-1:1.0 (config #1, interface 0)
> [ 300.640736] snd-usb-audio 1-1:1.0: usb_probe_interface
> [ 300.642307] snd-usb-audio 1-1:1.0: usb_probe_interface - got id
> [ 301.050296] usb 1-1: adding 1-1:1.1 (config #1, interface 1)
> [ 301.054897] usb 1-1: adding 1-1:1.2 (config #1, interface 2)
> [ 301.056934] uvcvideo 1-1:1.2: usb_probe_interface
> [ 301.058072] uvcvideo 1-1:1.2: usb_probe_interface - got id
> [ 301.059395] uvcvideo: Found UVC 1.00 device <unnamed> (046d:081d)
> [ 301.090173] input: UVC Camera (046d:081d) as /devices/pci0000:00/0000:00:1f.5/usb1/1-1/1-1:1.2/input/input7
> [ 301.111289] usb 1-1: adding 1-1:1.3 (config #1, interface 3)
> [ 301.131207] usb 1-1: link qh16-0001/f48d64c0 start 2 [1/0 us]
> [ 301.137066] usb 1-1: unlink qh16-0001/f48d64c0 start 2 [1/0 us]
> [ 301.156451] ehci_hcd 0000:00:1f.5: reused qh f48d64c0 schedule
> [ 301.158310] usb 1-1: link qh16-0001/f48d64c0 start 2 [1/0 us]
> [ 301.160238] usb 1-1: unlink qh16-0001/f48d64c0 start 2 [1/0 us]
> [ 301.196606] set resolution quirk: cval->res = 384
> [ 371.309569] e1000: eth1 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
> [ 390.729568] ehci_hcd 0000:00:1f.5: reused qh f48d64c0 schedule
> f5ade900 2296555[ 390.730023] usb 1-1: link qh16-0001/f48d64c0 start 2 [1/0 us]
> 437 S Ii:1:003:7[ 390.736394] usb 1-1: unlink qh16-0001/f48d64c0 start 2 [1/0 us]
> -115:128 16 <
> f5ade900 2296566256 C Ii:1:003:7 -2:128 0
> [ 391.100896] ehci_hcd 0000:00:1f.5: reused qh f48d64c0 schedule
> [ 391.103188] usb 1-1: link qh16-0001/f48d64c0 start 2 [1/0 us]
> f5ade900 2296926929 S Ii:1:003:7[ 391.104889] usb 1-1: unlink qh16-0001/f48d64c0 start 2 [1/0 us]
> -115:128 16 <
> f5ade900 2296937889 C Ii:1:003:7 -2:128 0
> f5272300 2310382508 S Co:1:003:0 s 01 0b 0004 0001 0000 0
> f5272300 2310407888 C Co:1:003:0 0 0
> f5272300 2310408051 S Co:1:003:0 s 22 01 0100 0086 0003 3 = 80bb00
> f5272300 2310412456 C Co:1:003:0 0 3 >
> f5272300 2310412521 S Ci:1:003:0 s a2 81 0100 0086 0003 3 <
> f5272300 2310415909 C Ci:1:003:0 0 0
> f5272300 2310418133 S Zi:1:003:6 -115:8:0 1 -18:0:100 100 <
> f5272600 2310418219 S Zi:1:003:6 -115:8:0 1 -18:0:100 100 <
> f52720c0 2310418239 S Zi:1:003:6 -115:8:0 1 -18:0:100 100 <
> f5272a80 2310418247 S Zi:1:003:6 -115:8:0 1 -18:0:100 100 <
> f5272480 2310418256 S Zi:1:003:6 -115:8:0 1 -18:0:100 100 <
> f52723c0 2310418264 S Zi:1:003:6 -115:8:0 1 -18:0:100 100 <
> f5272d80 2310418272 S Zi:1:003:6 -115:8:0 1 -18:0:100 100 <
> f5272b40 2310418280 S Zi:1:003:6 -115:8:0 1 -18:0:100 100 <
>
> Hard freeze with 100% CPU usage at this point as if some driver got into an
> infinite loop or something.
>
> All debug options from https://lkml.org/lkml/2012/10/20/116 are enabled, but
> serial console is empty.
>
> Best wishes,
>
> Artem
>
>
> On Oct 21, 2012, Borislav Petkov wrote:
>
> > I don't think that's the problem - I rather suspect the fact that he's
> > using virtualbox which is causing random corruptions by writing to
> > arbitrary locations.
> >
> >
> >
> > please remove virtualbox completely from your system, rebuild the kernel
> > and make sure the virtualbox kernel modules don't get loaded - simply
> > delete them so that they are completely gone; *and* *then* retest again.
>
>
--
Regards/Gruss,
Boris.
--
To unsubscribe from this list: send the line "unsubscribe linux-usb" in
the body of a message to majordomo-u79uwXL29TY76Z2rM5mHXA@public.gmane.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
^ permalink raw reply [flat|nested] 34+ messages in thread* Re: Re: Re: Re: A reliable kernel panic (3.6.2) and system crash when visiting a particular website
2012-10-21 0:24 ` Borislav Petkov
@ 2012-10-21 1:57 ` Artem S. Tashkinov
2012-10-21 11:08 ` Borislav Petkov
0 siblings, 1 reply; 34+ messages in thread
From: Artem S. Tashkinov @ 2012-10-21 1:57 UTC (permalink / raw)
To: bp; +Cc: pavel, linux-kernel, netdev, security, linux-media, linux-usb
> On Oct 21, 2012, Borislav Petkov wrote:
>
> On Sat, Oct 20, 2012 at 11:15:17PM +0000, Artem S. Tashkinov wrote:
> > You don't get me - I have *no* VirtualBox (or any proprietary) modules
> > running
>
> Ok, good. We got that out of the way - I wanted to make sure after you
> replied with two other possibilities of the system freezing.
>
> > - but I can reproduce this problem using *the same system running
> > under* VirtualBox in Windows 7 64.
>
> That's windoze as host and linux as a guest, correct?
Exactly.
> If so, that's virtualbox's problem, I'd say.
I can reproduce it on my host *alone* as I said in the very first message - never
before I tried to run my Linux in a virtual machine. Please, just forget about
VirtualBox - it has nothing to do with this problem.
> > It's almost definitely either a USB driver bug or video4linux driver
> > bug:
>
> And you're assuming that because the freeze happens when using your usb
> webcam, correct? And not otherwise?
Yes, like I said earlier - only when I try to access its settings using Adobe Flash the
system crashes/freezes.
> Maybe you can describe in more detail what exactly you're doing so that
> people could try to reproduce your issue.
I don't think many people have the same webcam so it's going to be a problem. It
can be reproduced easily - just open Flash "Settings" in Google Chrome 22. The
crash will occur immediately.
> > I'm CC'ing linux-media and linux-usb mailing lists, the problem is described here:
> > https://lkml.org/lkml/2012/10/20/35
> > https://lkml.org/lkml/2012/10/20/148
>
> Yes, good idea. Maybe the folks there have some more ideas how to debug
> this.
>
> I'm leaving in the rest for reference.
>
> What should be pointed out, though, is that you don't have any more
> random corruptions causing oopses now that virtualbox is gone. The
> freeze below is a whole another issue.
The freeze happens on my *host* Linux PC. For an experiment I decided to
check if I could reproduce the freeze under a virtual machine - it turns out the
Linux kernel running under it also freezes.
Artem
^ permalink raw reply [flat|nested] 34+ messages in thread
* Re: Re: Re: Re: A reliable kernel panic (3.6.2) and system crash when visiting a particular website
2012-10-21 1:57 ` Artem S. Tashkinov
@ 2012-10-21 11:08 ` Borislav Petkov
2012-10-21 11:59 ` Artem S. Tashkinov
0 siblings, 1 reply; 34+ messages in thread
From: Borislav Petkov @ 2012-10-21 11:08 UTC (permalink / raw)
To: Artem S. Tashkinov
Cc: pavel, linux-kernel, netdev, security, linux-media, linux-usb
On Sun, Oct 21, 2012 at 01:57:21AM +0000, Artem S. Tashkinov wrote:
> The freeze happens on my *host* Linux PC. For an experiment I decided
> to check if I could reproduce the freeze under a virtual machine - it
> turns out the Linux kernel running under it also freezes.
I know that - but a freeze != oops - at least not necessarily. Which
means it could very well be a different issue now that vbox is gone.
Or, it could be the same issue with different incarnations: with vbox
you get the corruptions and without it, you get the freezes. I'm
assuming you do the same flash player thing in both cases?
Here's a crazy idea: can you try to reproduce it in KVM?
Thanks.
--
Regards/Gruss,
Boris.
^ permalink raw reply [flat|nested] 34+ messages in thread* Re: Re: Re: Re: Re: A reliable kernel panic (3.6.2) and system crash when visiting a particular website
2012-10-21 11:08 ` Borislav Petkov
@ 2012-10-21 11:59 ` Artem S. Tashkinov
2012-10-21 12:03 ` Daniel Mack
` (3 more replies)
0 siblings, 4 replies; 34+ messages in thread
From: Artem S. Tashkinov @ 2012-10-21 11:59 UTC (permalink / raw)
To: bp; +Cc: pavel, linux-kernel, netdev, security, linux-media, linux-usb
On Oct 21, 2012, Borislav Petkov wrote:
>
> On Sun, Oct 21, 2012 at 01:57:21AM +0000, Artem S. Tashkinov wrote:
> > The freeze happens on my *host* Linux PC. For an experiment I decided
> > to check if I could reproduce the freeze under a virtual machine - it
> > turns out the Linux kernel running under it also freezes.
>
> I know that - but a freeze != oops - at least not necessarily. Which
> means it could very well be a different issue now that vbox is gone.
>
> Or, it could be the same issue with different incarnations: with vbox
> you get the corruptions and without it, you get the freezes. I'm
> assuming you do the same flash player thing in both cases?
>
> Here's a crazy idea: can you try to reproduce it in KVM?
OK, dismiss VBox altogether - it has a very buggy USB implementation, thus
it just hangs when trying to access my webcam.
What I've found out is that my system crashes *only* when I try to enable
usb-audio (from the same webcam) - I still have no idea how to capture a
panic message, but I ran
"while :; do dmesg -c; done" in xterm, then I got like thousands of messages
and I photographed my monitor:
http://imageshack.us/a/img685/9452/panicz.jpg
list_del corruption. prev->next should be ... but was ...
I cannot show you more as I have no serial console to use :( and the kernel
doesn't have enough time to push error messages to rsyslog and fsync
/var/log/messages
^ permalink raw reply [flat|nested] 34+ messages in thread* Re: A reliable kernel panic (3.6.2) and system crash when visiting a particular website
2012-10-21 11:59 ` Artem S. Tashkinov
@ 2012-10-21 12:03 ` Daniel Mack
2012-10-21 12:30 ` Artem S. Tashkinov
2012-10-21 12:12 ` Daniel Mack
` (2 subsequent siblings)
3 siblings, 1 reply; 34+ messages in thread
From: Daniel Mack @ 2012-10-21 12:03 UTC (permalink / raw)
To: Artem S. Tashkinov
Cc: bp-Gina5bIWoIWzQB+pC5nmwQ, pavel-+ZI9xUNit7I,
linux-kernel-u79uwXL29TY76Z2rM5mHXA,
netdev-u79uwXL29TY76Z2rM5mHXA, security-DgEjT+Ai2ygdnm+yROfE0A,
linux-media-u79uwXL29TY76Z2rM5mHXA,
linux-usb-u79uwXL29TY76Z2rM5mHXA
On 21.10.2012 13:59, Artem S. Tashkinov wrote:
> On Oct 21, 2012, Borislav Petkov wrote:
>>
>> On Sun, Oct 21, 2012 at 01:57:21AM +0000, Artem S. Tashkinov wrote:
>>> The freeze happens on my *host* Linux PC. For an experiment I decided
>>> to check if I could reproduce the freeze under a virtual machine - it
>>> turns out the Linux kernel running under it also freezes.
>>
>> I know that - but a freeze != oops - at least not necessarily. Which
>> means it could very well be a different issue now that vbox is gone.
>>
>> Or, it could be the same issue with different incarnations: with vbox
>> you get the corruptions and without it, you get the freezes. I'm
>> assuming you do the same flash player thing in both cases?
>>
>> Here's a crazy idea: can you try to reproduce it in KVM?
>
> OK, dismiss VBox altogether - it has a very buggy USB implementation, thus
> it just hangs when trying to access my webcam.
Ok.
> What I've found out is that my system crashes *only* when I try to enable
> usb-audio (from the same webcam) - I still have no idea how to capture a
> panic message, but I ran
>
> "while :; do dmesg -c; done" in xterm, then I got like thousands of messages
> and I photographed my monitor:
>
> http://imageshack.us/a/img685/9452/panicz.jpg
A hint at least. How did you enable the audio record exactly? Can you
reproduce this with arecord?
What chipset are you on? Please provide both "lspci -v" and "lsusb -v"
dumps. As I said, I fail to reproduce that issue on any of my machines.
Daniel
--
To unsubscribe from this list: send the line "unsubscribe linux-usb" in
the body of a message to majordomo-u79uwXL29TY76Z2rM5mHXA@public.gmane.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
^ permalink raw reply [flat|nested] 34+ messages in thread* Re: Re: A reliable kernel panic (3.6.2) and system crash when visiting a particular website
2012-10-21 12:03 ` Daniel Mack
@ 2012-10-21 12:30 ` Artem S. Tashkinov
2012-10-21 14:21 ` was: " Daniel Mack
0 siblings, 1 reply; 34+ messages in thread
From: Artem S. Tashkinov @ 2012-10-21 12:30 UTC (permalink / raw)
To: zonque-Re5JQEeQqe8AvxtiuMwx3w
Cc: bp-Gina5bIWoIWzQB+pC5nmwQ, pavel-+ZI9xUNit7I,
linux-kernel-u79uwXL29TY76Z2rM5mHXA,
netdev-u79uwXL29TY76Z2rM5mHXA, security-DgEjT+Ai2ygdnm+yROfE0A,
linux-media-u79uwXL29TY76Z2rM5mHXA,
linux-usb-u79uwXL29TY76Z2rM5mHXA
On Oct 21, 2012, Daniel Mack wrote:
> A hint at least. How did you enable the audio record exactly? Can you
> reproduce this with arecord?
>
> What chipset are you on? Please provide both "lspci -v" and "lsusb -v"
> dumps. As I said, I fail to reproduce that issue on any of my machines.
All other applications can read from the USB audio without problems, it's
just something in the way Adobe Flash polls my audio input which causes
a crash.
Just video capture (without audio) works just fine in Adobe Flash.
Only and only when I choose to use
USB Device 0x46d:0x81d my system crashes in Adobe Flash.
See the screenshot:
https://bugzilla.kernel.org/attachment.cgi?id=84151
My hardware information can be fetched from here:
https://bugzilla.kernel.org/show_bug.cgi?id=49181
On a second thought that can be even an ALSA crash or pretty much
anything else.
--
To unsubscribe from this list: send the line "unsubscribe linux-usb" in
the body of a message to majordomo-u79uwXL29TY76Z2rM5mHXA@public.gmane.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
^ permalink raw reply [flat|nested] 34+ messages in thread
* Re: was: Re: A reliable kernel panic (3.6.2) and system crash when visiting a particular website
2012-10-21 12:30 ` Artem S. Tashkinov
@ 2012-10-21 14:21 ` Daniel Mack
2012-10-21 14:57 ` Artem S. Tashkinov
0 siblings, 1 reply; 34+ messages in thread
From: Daniel Mack @ 2012-10-21 14:21 UTC (permalink / raw)
To: Artem S. Tashkinov
Cc: bp, pavel, linux-kernel, netdev@vger.kernel.org, security,
linux-media, linux-usb, alsa-devel
[-- Attachment #1: Type: text/plain, Size: 1906 bytes --]
[Cc: alsa-devel]
On 21.10.2012 14:30, Artem S. Tashkinov wrote:
> On Oct 21, 2012, Daniel Mack wrote:
>
>> A hint at least. How did you enable the audio record exactly? Can you
>> reproduce this with arecord?
>>
>> What chipset are you on? Please provide both "lspci -v" and "lsusb -v"
>> dumps. As I said, I fail to reproduce that issue on any of my machines.
>
> All other applications can read from the USB audio without problems, it's
> just something in the way Adobe Flash polls my audio input which causes
> a crash.
>
> Just video capture (without audio) works just fine in Adobe Flash.
Ok, so that pretty much rules out the host controller. I just wonder why
I still don't see it here, and I haven't heard of any such problem from
anyone else.
Some more questions:
- Which version of Flash are you running?
- Does this also happen with Firefox?
- Does flash access the device directly or via PulseAudio?
- Could you please apply the attached patch and see what it spits out to
dmesg once Flash opens the device? It returns -EINVAL in the hw_params
callback to prevent the actual streaming. On my machine with Flash
11.4.31.110, I get values of 2/44800/1/32768/2048/0, which seems sane.
Or does your machine still crash before anything is written to the logs?
> Only and only when I choose to use
>
> USB Device 0x46d:0x81d my system crashes in Adobe Flash.
>
> See the screenshot:
>
> https://bugzilla.kernel.org/attachment.cgi?id=84151
When exactly does the crash happen? Right after you selected that entry
from the list? There's a little recording level meter in that dialog.
Does that show any input from the microphone?
> My hardware information can be fetched from here:
>
> https://bugzilla.kernel.org/show_bug.cgi?id=49181
>
> On a second thought that can be even an ALSA crash or pretty much
> anything else.
We'll see. Thanks for your help to sort this out!
Daniel
[-- Attachment #2: snd-usb-hwparams.diff --]
[-- Type: text/x-patch, Size: 778 bytes --]
diff --git a/sound/usb/pcm.c b/sound/usb/pcm.c
index f782ce1..5664b45 100644
--- a/sound/usb/pcm.c
+++ b/sound/usb/pcm.c
@@ -453,6 +453,18 @@ static int snd_usb_hw_params(struct snd_pcm_substream *substream,
unsigned int channels, rate, format;
int ret, changed;
+
+ printk(">>> %s()\n", __func__);
+
+ printk("format: %d\n", params_format(hw_params));
+ printk("rate: %d\n", params_rate(hw_params));
+ printk("channels: %d\n", params_channels(hw_params));
+ printk("buffer bytes: %d\n", params_buffer_bytes(hw_params));
+ printk("period bytes: %d\n", params_period_bytes(hw_params));
+ printk("access: %d\n", params_access(hw_params));
+
+ return -EINVAL;
+
ret = snd_pcm_lib_alloc_vmalloc_buffer(substream,
params_buffer_bytes(hw_params));
if (ret < 0)
^ permalink raw reply related [flat|nested] 34+ messages in thread* Re: Re: was: Re: A reliable kernel panic (3.6.2) and system crash when visiting a particular website
2012-10-21 14:21 ` was: " Daniel Mack
@ 2012-10-21 14:57 ` Artem S. Tashkinov
2012-10-21 15:22 ` Daniel Mack
0 siblings, 1 reply; 34+ messages in thread
From: Artem S. Tashkinov @ 2012-10-21 14:57 UTC (permalink / raw)
To: zonque
Cc: bp, pavel, linux-kernel, netdev, security, linux-media, linux-usb,
alsa-devel
> On Oct 21, 2012, Daniel Mack wrote:
>
> [Cc: alsa-devel]
>
> On 21.10.2012 14:30, Artem S. Tashkinov wrote:
> > On Oct 21, 2012, Daniel Mack wrote:
> >
> >> A hint at least. How did you enable the audio record exactly? Can you
> >> reproduce this with arecord?
> >>
> >> What chipset are you on? Please provide both "lspci -v" and "lsusb -v"
> >> dumps. As I said, I fail to reproduce that issue on any of my machines.
> >
> > All other applications can read from the USB audio without problems, it's
> > just something in the way Adobe Flash polls my audio input which causes
> > a crash.
> >
> > Just video capture (without audio) works just fine in Adobe Flash.
>
> Ok, so that pretty much rules out the host controller. I just wonder why
> I still don't see it here, and I haven't heard of any such problem from
> anyone else.
>
> Some more questions:
>
> - Which version of Flash are you running?
Google Chrome has its own version of Adobe Flash:
Name: Shockwave Flash
Description: Shockwave Flash 11.4 r31
Version: 11.4.31.110
> - Does this also happen with Firefox?
No, Adobe Flash in Firefox is an older version (Shockwave Flash 11.1 r102), it shows
just two input devices instead of three which the newer Flash players sees.
* HDA Intel PCH
* USB Device 0x46d:0x81d
> - Does flash access the device directly or via PulseAudio?
PA is not installed on my computer, so Flash accesses it directly via ALSA calls.
> - Could you please apply the attached patch and see what it spits out to
> dmesg once Flash opens the device? It returns -EINVAL in the hw_params
> callback to prevent the actual streaming. On my machine with Flash
> 11.4.31.110, I get values of 2/44800/1/32768/2048/0, which seems sane.
> Or does your machine still crash before anything is written to the logs?
I will try it a bit later.
> > Only and only when I choose to use
> >
> > USB Device 0x46d:0x81d my system crashes in Adobe Flash.
> >
> > See the screenshot:
> >
> > https://bugzilla.kernel.org/attachment.cgi?id=84151
>
> When exactly does the crash happen? Right after you selected that entry
> from the list? There's a little recording level meter in that dialog.
> Does that show any input from the microphone?
Yes, right after I select it and move the mouse cursor away from this combobox
so that this selection becomes active.
> > My hardware information can be fetched from here:
> >
> > https://bugzilla.kernel.org/show_bug.cgi?id=49181
> >
> > On a second thought that can be even an ALSA crash or pretty much
> > anything else.
>
> We'll see. Thanks for your help to sort this out!
Thank you for your assistance!
^ permalink raw reply [flat|nested] 34+ messages in thread
* Re: was: Re: A reliable kernel panic (3.6.2) and system crash when visiting a particular website
2012-10-21 14:57 ` Artem S. Tashkinov
@ 2012-10-21 15:22 ` Daniel Mack
2012-10-21 15:28 ` Alan Stern
0 siblings, 1 reply; 34+ messages in thread
From: Daniel Mack @ 2012-10-21 15:22 UTC (permalink / raw)
To: Artem S. Tashkinov
Cc: bp, pavel, linux-kernel, netdev, security, linux-media, linux-usb,
alsa-devel
On 21.10.2012 16:57, Artem S. Tashkinov wrote:
>> On Oct 21, 2012, Daniel Mack wrote:
>>
>> [Cc: alsa-devel]
>>
>> On 21.10.2012 14:30, Artem S. Tashkinov wrote:
>>> On Oct 21, 2012, Daniel Mack wrote:
>>>
>>>> A hint at least. How did you enable the audio record exactly? Can you
>>>> reproduce this with arecord?
>>>>
>>>> What chipset are you on? Please provide both "lspci -v" and "lsusb -v"
>>>> dumps. As I said, I fail to reproduce that issue on any of my machines.
>>>
>>> All other applications can read from the USB audio without problems, it's
>>> just something in the way Adobe Flash polls my audio input which causes
>>> a crash.
>>>
>>> Just video capture (without audio) works just fine in Adobe Flash.
>>
>> Ok, so that pretty much rules out the host controller. I just wonder why
>> I still don't see it here, and I haven't heard of any such problem from
>> anyone else.
>>
>> Some more questions:
>>
>> - Which version of Flash are you running?
>
> Google Chrome has its own version of Adobe Flash:
>
> Name: Shockwave Flash
> Description: Shockwave Flash 11.4 r31
> Version: 11.4.31.110
So that's the same that I'm using.
>> - Does this also happen with Firefox?
>
> No, Adobe Flash in Firefox is an older version (Shockwave Flash 11.1 r102), it shows
> just two input devices instead of three which the newer Flash players sees.
>
> * HDA Intel PCH
> * USB Device 0x46d:0x81d
And that works, I assume? Does the second choice in the newer Flash
version work maybe?
>> - Does flash access the device directly or via PulseAudio?
>
> PA is not installed on my computer, so Flash accesses it directly via ALSA calls.
Ok, Same here.
>> - Could you please apply the attached patch and see what it spits out to
>> dmesg once Flash opens the device? It returns -EINVAL in the hw_params
>> callback to prevent the actual streaming. On my machine with Flash
>> 11.4.31.110, I get values of 2/44800/1/32768/2048/0, which seems sane.
>> Or does your machine still crash before anything is written to the logs?
>
> I will try it a bit later.
Yes, we need to trace the call chain and see at which point the trouble
starts. What could help is tracing the google-chrome binary with strace
maybe. At least we would see the ioctl command sequence, if the log file
survives the crash.
As the usb list is still in Cc: - Artem's lcpci dump shows that his
machine features XHCI controllers. Can anyone think of a relation to
this problem?
And Artem, is there any way you boot your system on an older machine
that only has EHCI ports? Thinking about it, I wonder whether the freeze
in VBox and the crashes on native hardware have the same root cause. In
that case, would it be possible to share that VBox image?
Daniel
^ permalink raw reply [flat|nested] 34+ messages in thread
* Re: was: Re: A reliable kernel panic (3.6.2) and system crash when visiting a particular website
2012-10-21 15:22 ` Daniel Mack
@ 2012-10-21 15:28 ` Alan Stern
2012-10-21 15:36 ` Daniel Mack
0 siblings, 1 reply; 34+ messages in thread
From: Alan Stern @ 2012-10-21 15:28 UTC (permalink / raw)
To: Daniel Mack
Cc: Artem S. Tashkinov, bp, pavel, linux-kernel, netdev, security,
linux-media, linux-usb, alsa-devel
On Sun, 21 Oct 2012, Daniel Mack wrote:
> As the usb list is still in Cc: - Artem's lcpci dump shows that his
> machine features XHCI controllers. Can anyone think of a relation to
> this problem?
>
> And Artem, is there any way you boot your system on an older machine
> that only has EHCI ports? Thinking about it, I wonder whether the freeze
> in VBox and the crashes on native hardware have the same root cause. In
> that case, would it be possible to share that VBox image?
Don't grasp at straws. All of the kernel logs Artem has posted show
ehci-hcd; none of them show xhci-hcd. Therefore the xHCI controller is
highly unlikely to be involved.
Alan Stern
^ permalink raw reply [flat|nested] 34+ messages in thread
* Re: was: Re: A reliable kernel panic (3.6.2) and system crash when visiting a particular website
2012-10-21 15:28 ` Alan Stern
@ 2012-10-21 15:36 ` Daniel Mack
0 siblings, 0 replies; 34+ messages in thread
From: Daniel Mack @ 2012-10-21 15:36 UTC (permalink / raw)
To: Alan Stern
Cc: security, alsa-devel, netdev, linux-usb, linux-kernel, bp, pavel,
Artem S. Tashkinov, linux-media
On Oct 21, 2012 5:28 PM, "Alan Stern" <stern@rowland.harvard.edu> wrote:
>
> On Sun, 21 Oct 2012, Daniel Mack wrote:
>
> > As the usb list is still in Cc: - Artem's lcpci dump shows that his
> > machine features XHCI controllers. Can anyone think of a relation to
> > this problem?
> >
> > And Artem, is there any way you boot your system on an older machine
> > that only has EHCI ports? Thinking about it, I wonder whether the freeze
> > in VBox and the crashes on native hardware have the same root cause. In
> > that case, would it be possible to share that VBox image?
>
> Don't grasp at straws. All of the kernel logs Artem has posted show
> ehci-hcd; none of them show xhci-hcd. Therefore the xHCI controller is
> highly unlikely to be involved.
You might be right - I'm just looking for differences between his setup and
mine that would explain why nobody else sees a severe bug that is 100%
reproducible for him.
^ permalink raw reply [flat|nested] 34+ messages in thread
* Re: A reliable kernel panic (3.6.2) and system crash when visiting a particular website
2012-10-21 11:59 ` Artem S. Tashkinov
2012-10-21 12:03 ` Daniel Mack
@ 2012-10-21 12:12 ` Daniel Mack
2012-10-21 15:23 ` Re: Re: Re: " Alan Stern
2012-10-21 17:03 ` Borislav Petkov
3 siblings, 0 replies; 34+ messages in thread
From: Daniel Mack @ 2012-10-21 12:12 UTC (permalink / raw)
To: Artem S. Tashkinov
Cc: bp, pavel, linux-kernel, netdev, security, linux-media, linux-usb
On 21.10.2012 13:59, Artem S. Tashkinov wrote:
> On Oct 21, 2012, Borislav Petkov wrote:
>>
>> On Sun, Oct 21, 2012 at 01:57:21AM +0000, Artem S. Tashkinov wrote:
>>> The freeze happens on my *host* Linux PC. For an experiment I decided
>>> to check if I could reproduce the freeze under a virtual machine - it
>>> turns out the Linux kernel running under it also freezes.
>>
>> I know that - but a freeze != oops - at least not necessarily. Which
>> means it could very well be a different issue now that vbox is gone.
>>
>> Or, it could be the same issue with different incarnations: with vbox
>> you get the corruptions and without it, you get the freezes. I'm
>> assuming you do the same flash player thing in both cases?
>>
>> Here's a crazy idea: can you try to reproduce it in KVM?
>
> OK, dismiss VBox altogether - it has a very buggy USB implementation, thus
> it just hangs when trying to access my webcam.
>
> What I've found out is that my system crashes *only* when I try to enable
> usb-audio (from the same webcam)
It would also be interesting to know whether you have problems with
*only* the video capture, with some tool like "cheese". It might be
you're hitting a host controller issue here, and then isochronous input
packets on the video interface would most likely also trigger such am
effect. Actually, knowing whether that's the case would be crucial for
further debugging.
Daniel
^ permalink raw reply [flat|nested] 34+ messages in thread
* Re: Re: Re: Re: Re: A reliable kernel panic (3.6.2) and system crash when visiting a particular website
2012-10-21 11:59 ` Artem S. Tashkinov
2012-10-21 12:03 ` Daniel Mack
2012-10-21 12:12 ` Daniel Mack
@ 2012-10-21 15:23 ` Alan Stern
2012-10-21 17:03 ` Borislav Petkov
3 siblings, 0 replies; 34+ messages in thread
From: Alan Stern @ 2012-10-21 15:23 UTC (permalink / raw)
To: Artem S. Tashkinov
Cc: bp, pavel, linux-kernel, netdev, security, linux-media, linux-usb
On Sun, 21 Oct 2012, Artem S. Tashkinov wrote:
> What I've found out is that my system crashes *only* when I try to enable
> usb-audio (from the same webcam) - I still have no idea how to capture a
> panic message, but I ran
>
> "while :; do dmesg -c; done" in xterm, then I got like thousands of messages
> and I photographed my monitor:
>
> http://imageshack.us/a/img685/9452/panicz.jpg
>
> list_del corruption. prev->next should be ... but was ...
>
> I cannot show you more as I have no serial console to use :( and the kernel
> doesn't have enough time to push error messages to rsyslog and fsync
> /var/log/messages
Is it possible to use netconsole? The screenshot above appears to be
the end of a long series of error messages, which isn't too useful.
The most important information is in the first error.
Alan Stern
^ permalink raw reply [flat|nested] 34+ messages in thread
* Re: Re: Re: Re: Re: A reliable kernel panic (3.6.2) and system crash when visiting a particular website
2012-10-21 11:59 ` Artem S. Tashkinov
` (2 preceding siblings ...)
2012-10-21 15:23 ` Re: Re: Re: " Alan Stern
@ 2012-10-21 17:03 ` Borislav Petkov
2012-10-21 19:49 ` Artem S. Tashkinov
3 siblings, 1 reply; 34+ messages in thread
From: Borislav Petkov @ 2012-10-21 17:03 UTC (permalink / raw)
To: Artem S. Tashkinov
Cc: pavel, linux-kernel, netdev, security, linux-media, linux-usb
On Sun, Oct 21, 2012 at 11:59:36AM +0000, Artem S. Tashkinov wrote:
> http://imageshack.us/a/img685/9452/panicz.jpg
>
> list_del corruption. prev->next should be ... but was ...
Btw, this is one of the debug options I told you to enable.
> I cannot show you more as I have no serial console to use :( and the kernel
> doesn't have enough time to push error messages to rsyslog and fsync
> /var/log/messages
I already told you how to catch that oops: boot with "pause_on_oops=600"
on the kernel command line and photograph the screen when the first oops
happens. This'll show us where the problem begins.
--
Regards/Gruss,
Boris.
^ permalink raw reply [flat|nested] 34+ messages in thread* Re: Re: Re: Re: Re: Re: A reliable kernel panic (3.6.2) and system crash when visiting a particular website
2012-10-21 17:03 ` Borislav Petkov
@ 2012-10-21 19:49 ` Artem S. Tashkinov
2012-10-21 19:54 ` Daniel Mack
` (2 more replies)
0 siblings, 3 replies; 34+ messages in thread
From: Artem S. Tashkinov @ 2012-10-21 19:49 UTC (permalink / raw)
To: bp
Cc: pavel, linux-kernel, netdev, security, linux-media, linux-usb,
zonque, alsa-devel, stern
>
> On Oct 21, 2012, Borislav Petkov <bp@alien8.de> wrote:
>
> On Sun, Oct 21, 2012 at 11:59:36AM +0000, Artem S. Tashkinov wrote:
> > http://imageshack.us/a/img685/9452/panicz.jpg
> >
> > list_del corruption. prev->next should be ... but was ...
>
> Btw, this is one of the debug options I told you to enable.
>
> > I cannot show you more as I have no serial console to use :( and the kernel
> > doesn't have enough time to push error messages to rsyslog and fsync
> > /var/log/messages
>
> I already told you how to catch that oops: boot with "pause_on_oops=600"
> on the kernel command line and photograph the screen when the first oops
> happens. This'll show us where the problem begins.
This option didn't have any effect, or maybe it's because it's such a serious crash
the kernel has no time to actually print an ooops/panic message.
dmesg messages up to a crash can be seen here: https://bugzilla.kernel.org/attachment.cgi?id=84221
I dumped them using this application:
$ cat scat.c
#include <stdio.h>
#include <stdlib.h>
#include <unistd.h>
#include <string.h>
#include <sys/types.h>
#include <sys/stat.h>
#include <fcntl.h>
#define O_LARGEFILE 0100000
#define BUFFER 4096
#define __USE_FILE_OFFSET64 1
#define __USE_LARGEFILE64 1
int main(int argc, char *argv[])
{
int fd_out;
int64_t bytes_read;
void *buffer;
if (argc!=2) {
printf("Usage is: scat destination\n");
return 1;
}
buffer = malloc(BUFFER * sizeof(char));
if (buffer == NULL) {
printf("Error: can't allocate buffers\n");
return 2;
}
memset(buffer, 0, BUFFER);
printf("Dumping to \"%s\" ... ", argv[1]);
fflush(NULL);
if ((fd_out = open64(argv[1], O_WRONLY | O_LARGEFILE | O_SYNC | O_NOFOLLOW, S_IRUSR | S_IWUSR | S_IRGRP | S_IROTH)) == -1) {
printf("Error: destination file can't be created\n");
perror("open() ");
return 2;
}
bytes_read = 1;
while (bytes_read) {
bytes_read = fread(buffer, sizeof(char), BUFFER, stdin);
if (write(fd_out, (void *) buffer, bytes_read) != bytes_read)
{
printf("Error: can't write data to the destination file! Possibly a target disk is full\n");
return 3;
}
}
close(fd_out);
printf(" OK\n");
return 0;
}
I ran it this way: while :; do dmesg -c; done | scat /dev/sda11 (yes, straight to a hdd partition to eliminate a FS cache)
Don't judge me harshly - I'm not a programmer.
^ permalink raw reply [flat|nested] 34+ messages in thread* Re: A reliable kernel panic (3.6.2) and system crash when visiting a particular website
2012-10-21 19:49 ` Artem S. Tashkinov
@ 2012-10-21 19:54 ` Daniel Mack
2012-10-21 20:43 ` Artem S. Tashkinov
2012-10-21 20:36 ` Re: Re: Re: Re: " Borislav Petkov
2012-10-22 15:17 ` Alan Stern
2 siblings, 1 reply; 34+ messages in thread
From: Daniel Mack @ 2012-10-21 19:54 UTC (permalink / raw)
To: Artem S. Tashkinov
Cc: bp, pavel, linux-kernel, netdev, security, linux-media, linux-usb,
alsa-devel, stern
On 21.10.2012 21:49, Artem S. Tashkinov wrote:
>>
>> On Oct 21, 2012, Borislav Petkov <bp@alien8.de> wrote:
>>
>> On Sun, Oct 21, 2012 at 11:59:36AM +0000, Artem S. Tashkinov wrote:
>>> http://imageshack.us/a/img685/9452/panicz.jpg
>>>
>>> list_del corruption. prev->next should be ... but was ...
>>
>> Btw, this is one of the debug options I told you to enable.
>>
>>> I cannot show you more as I have no serial console to use :( and the kernel
>>> doesn't have enough time to push error messages to rsyslog and fsync
>>> /var/log/messages
>>
>> I already told you how to catch that oops: boot with "pause_on_oops=600"
>> on the kernel command line and photograph the screen when the first oops
>> happens. This'll show us where the problem begins.
>
> This option didn't have any effect, or maybe it's because it's such a serious crash
> the kernel has no time to actually print an ooops/panic message.
>
> dmesg messages up to a crash can be seen here: https://bugzilla.kernel.org/attachment.cgi?id=84221
Nice. Could you do that again with the patch applied I sent yo some
hours ago?
Thanks,
Daniel
^ permalink raw reply [flat|nested] 34+ messages in thread
* Re: Re: A reliable kernel panic (3.6.2) and system crash when visiting a particular website
2012-10-21 19:54 ` Daniel Mack
@ 2012-10-21 20:43 ` Artem S. Tashkinov
2012-10-21 21:00 ` Daniel Mack
0 siblings, 1 reply; 34+ messages in thread
From: Artem S. Tashkinov @ 2012-10-21 20:43 UTC (permalink / raw)
To: zonque
Cc: bp, pavel, linux-kernel, netdev, security, linux-media, linux-usb,
alsa-devel, stern
> Nice. Could you do that again with the patch applied I sent yo some
> hours ago?
That patch was of no help - the system has crashed and I couldn't spot relevant
messages.
I've no idea what it means.
Artem
^ permalink raw reply [flat|nested] 34+ messages in thread
* Re: A reliable kernel panic (3.6.2) and system crash when visiting a particular website
2012-10-21 20:43 ` Artem S. Tashkinov
@ 2012-10-21 21:00 ` Daniel Mack
0 siblings, 0 replies; 34+ messages in thread
From: Daniel Mack @ 2012-10-21 21:00 UTC (permalink / raw)
To: Artem S. Tashkinov
Cc: bp-Gina5bIWoIWzQB+pC5nmwQ, pavel-+ZI9xUNit7I,
linux-kernel-u79uwXL29TY76Z2rM5mHXA,
netdev-u79uwXL29TY76Z2rM5mHXA, security-DgEjT+Ai2ygdnm+yROfE0A,
linux-media-u79uwXL29TY76Z2rM5mHXA,
linux-usb-u79uwXL29TY76Z2rM5mHXA,
alsa-devel-K7yf7f+aM1XWsZ/bQMPhNw,
stern-nwvwT67g6+6dFdvTe/nMLpVzexx5G7lz
On 21.10.2012 22:43, Artem S. Tashkinov wrote:
>> Nice. Could you do that again with the patch applied I sent yo some
>> hours ago?
>
> That patch was of no help - the system has crashed and I couldn't spot relevant
> messages.
>
> I've no idea what it means.
The sequence of driver callbacks issued on a stream start is
.open()
.hw_params()
.prepare()
.trigger()
If the ALSA part really causes this issue, the bad things happen either
in any of the driver callback functions or in the core underneath.
The patch I sent returns an error from the hw_params callback, and as
you still see the problem, that means that the crash happens before any
of the USB audio streaming really starts.
Could you try and return -EINVAL from snd_usb_capture_open() please?
If anyone has a better idea on how to debug this, please chime in.
Daniel
--
To unsubscribe from this list: send the line "unsubscribe linux-usb" in
the body of a message to majordomo-u79uwXL29TY76Z2rM5mHXA@public.gmane.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
^ permalink raw reply [flat|nested] 34+ messages in thread
* Re: Re: Re: Re: Re: Re: A reliable kernel panic (3.6.2) and system crash when visiting a particular website
2012-10-21 19:49 ` Artem S. Tashkinov
2012-10-21 19:54 ` Daniel Mack
@ 2012-10-21 20:36 ` Borislav Petkov
2012-10-22 15:17 ` Alan Stern
2 siblings, 0 replies; 34+ messages in thread
From: Borislav Petkov @ 2012-10-21 20:36 UTC (permalink / raw)
To: Artem S. Tashkinov
Cc: pavel, linux-kernel, netdev, security, linux-media, linux-usb,
zonque, alsa-devel, stern
On Sun, Oct 21, 2012 at 07:49:01PM +0000, Artem S. Tashkinov wrote:
> I ran it this way: while :; do dmesg -c; done | scat /dev/sda11 (yes,
> straight to a hdd partition to eliminate a FS cache)
Well, I'm no fs guy but this should still go through the buffer cache. I
think the O_SYNC flag makes sure it all lands on the partition in time.
Oh well, it doesn't matter.
> Don't judge me harshly - I'm not a programmer.
If you wrote that and you're not a programmer, it certainly looks cool,
good job!.
[ Btw, don't forget to free(buffer) at the end. ]
Also, there was a patchset recently which added a blockconsole method to
the kernel with which you can do something like that in a generic way.
Back to the issue at hand: it looks like ehci_hcd is causing some list
corruptions, maybe coming from the uvcvideo or whatever. I think the usb
people will have a better idea.
Btw, is there any particular reason you're running a 32-bit kernel?
Thanks.
--
Regards/Gruss,
Boris.
^ permalink raw reply [flat|nested] 34+ messages in thread* Re: Re: Re: Re: Re: Re: A reliable kernel panic (3.6.2) and system crash when visiting a particular website
2012-10-21 19:49 ` Artem S. Tashkinov
2012-10-21 19:54 ` Daniel Mack
2012-10-21 20:36 ` Re: Re: Re: Re: " Borislav Petkov
@ 2012-10-22 15:17 ` Alan Stern
2012-10-22 15:30 ` Daniel Mack
2 siblings, 1 reply; 34+ messages in thread
From: Alan Stern @ 2012-10-22 15:17 UTC (permalink / raw)
To: Artem S. Tashkinov
Cc: bp, pavel, linux-kernel, netdev, security, linux-media, linux-usb,
zonque, alsa-devel
On Sun, 21 Oct 2012, Artem S. Tashkinov wrote:
> dmesg messages up to a crash can be seen here: https://bugzilla.kernel.org/attachment.cgi?id=84221
The first problem in the log is endpoint list corruption. Here's a
debugging patch which should provide a little more information.
Alan Stern
drivers/usb/core/hcd.c | 36 ++++++++++++++++++++++++++++++++++++
1 file changed, 36 insertions(+)
Index: usb-3.6/drivers/usb/core/hcd.c
===================================================================
--- usb-3.6.orig/drivers/usb/core/hcd.c
+++ usb-3.6/drivers/usb/core/hcd.c
@@ -1083,6 +1083,8 @@ EXPORT_SYMBOL_GPL(usb_calc_bus_time);
/*-------------------------------------------------------------------------*/
+static bool list_error;
+
/**
* usb_hcd_link_urb_to_ep - add an URB to its endpoint queue
* @hcd: host controller to which @urb was submitted
@@ -1126,6 +1128,20 @@ int usb_hcd_link_urb_to_ep(struct usb_hc
*/
if (HCD_RH_RUNNING(hcd)) {
urb->unlinked = 0;
+
+ {
+ struct list_head *cur = &urb->ep->urb_list;
+ struct list_head *prev = cur->prev;
+
+ if (prev->next != cur && !list_error) {
+ list_error = true;
+ dev_err(&urb->dev->dev,
+ "ep %x list add corruption: %p %p %p\n",
+ urb->ep->desc.bEndpointAddress,
+ cur, prev, prev->next);
+ }
+ }
+
list_add_tail(&urb->urb_list, &urb->ep->urb_list);
} else {
rc = -ESHUTDOWN;
@@ -1193,6 +1209,26 @@ void usb_hcd_unlink_urb_from_ep(struct u
{
/* clear all state linking urb to this dev (and hcd) */
spin_lock(&hcd_urb_list_lock);
+ {
+ struct list_head *cur = &urb->urb_list;
+ struct list_head *prev = cur->prev;
+ struct list_head *next = cur->next;
+
+ if (prev->next != cur && !list_error) {
+ list_error = true;
+ dev_err(&urb->dev->dev,
+ "ep %x list del corruption prev: %p %p %p\n",
+ urb->ep->desc.bEndpointAddress,
+ cur, prev, prev->next);
+ }
+ if (next->prev != cur && !list_error) {
+ list_error = true;
+ dev_err(&urb->dev->dev,
+ "ep %x list del corruption next: %p %p %p\n",
+ urb->ep->desc.bEndpointAddress,
+ cur, next, next->prev);
+ }
+ }
list_del_init(&urb->urb_list);
spin_unlock(&hcd_urb_list_lock);
}
^ permalink raw reply [flat|nested] 34+ messages in thread* Re: A reliable kernel panic (3.6.2) and system crash when visiting a particular website
2012-10-22 15:17 ` Alan Stern
@ 2012-10-22 15:30 ` Daniel Mack
2012-10-22 15:54 ` Alan Stern
0 siblings, 1 reply; 34+ messages in thread
From: Daniel Mack @ 2012-10-22 15:30 UTC (permalink / raw)
To: Alan Stern
Cc: Artem S. Tashkinov, bp, pavel, linux-kernel, netdev, security,
linux-media, linux-usb, alsa-devel
On 22.10.2012 17:17, Alan Stern wrote:
> On Sun, 21 Oct 2012, Artem S. Tashkinov wrote:
>
>> dmesg messages up to a crash can be seen here: https://bugzilla.kernel.org/attachment.cgi?id=84221
>
> The first problem in the log is endpoint list corruption. Here's a
> debugging patch which should provide a little more information.
Maybe add a BUG() after each of these dev_err() so we stop at the first
occurance and also see where we're coming from?
> drivers/usb/core/hcd.c | 36 ++++++++++++++++++++++++++++++++++++
> 1 file changed, 36 insertions(+)
>
> Index: usb-3.6/drivers/usb/core/hcd.c
> ===================================================================
> --- usb-3.6.orig/drivers/usb/core/hcd.c
> +++ usb-3.6/drivers/usb/core/hcd.c
> @@ -1083,6 +1083,8 @@ EXPORT_SYMBOL_GPL(usb_calc_bus_time);
>
> /*-------------------------------------------------------------------------*/
>
> +static bool list_error;
> +
> /**
> * usb_hcd_link_urb_to_ep - add an URB to its endpoint queue
> * @hcd: host controller to which @urb was submitted
> @@ -1126,6 +1128,20 @@ int usb_hcd_link_urb_to_ep(struct usb_hc
> */
> if (HCD_RH_RUNNING(hcd)) {
> urb->unlinked = 0;
> +
> + {
> + struct list_head *cur = &urb->ep->urb_list;
> + struct list_head *prev = cur->prev;
> +
> + if (prev->next != cur && !list_error) {
> + list_error = true;
> + dev_err(&urb->dev->dev,
> + "ep %x list add corruption: %p %p %p\n",
> + urb->ep->desc.bEndpointAddress,
> + cur, prev, prev->next);
> + }
> + }
> +
> list_add_tail(&urb->urb_list, &urb->ep->urb_list);
> } else {
> rc = -ESHUTDOWN;
> @@ -1193,6 +1209,26 @@ void usb_hcd_unlink_urb_from_ep(struct u
> {
> /* clear all state linking urb to this dev (and hcd) */
> spin_lock(&hcd_urb_list_lock);
> + {
> + struct list_head *cur = &urb->urb_list;
> + struct list_head *prev = cur->prev;
> + struct list_head *next = cur->next;
> +
> + if (prev->next != cur && !list_error) {
> + list_error = true;
> + dev_err(&urb->dev->dev,
> + "ep %x list del corruption prev: %p %p %p\n",
> + urb->ep->desc.bEndpointAddress,
> + cur, prev, prev->next);
> + }
> + if (next->prev != cur && !list_error) {
> + list_error = true;
> + dev_err(&urb->dev->dev,
> + "ep %x list del corruption next: %p %p %p\n",
> + urb->ep->desc.bEndpointAddress,
> + cur, next, next->prev);
> + }
> + }
> list_del_init(&urb->urb_list);
> spin_unlock(&hcd_urb_list_lock);
> }
>
^ permalink raw reply [flat|nested] 34+ messages in thread* Re: A reliable kernel panic (3.6.2) and system crash when visiting a particular website
2012-10-22 15:30 ` Daniel Mack
@ 2012-10-22 15:54 ` Alan Stern
2012-10-22 17:30 ` Artem S. Tashkinov
0 siblings, 1 reply; 34+ messages in thread
From: Alan Stern @ 2012-10-22 15:54 UTC (permalink / raw)
To: Daniel Mack
Cc: Artem S. Tashkinov, bp, pavel, linux-kernel, netdev, security,
linux-media, linux-usb, alsa-devel
On Mon, 22 Oct 2012, Daniel Mack wrote:
> On 22.10.2012 17:17, Alan Stern wrote:
> > On Sun, 21 Oct 2012, Artem S. Tashkinov wrote:
> >
> >> dmesg messages up to a crash can be seen here: https://bugzilla.kernel.org/attachment.cgi?id=84221
> >
> > The first problem in the log is endpoint list corruption. Here's a
> > debugging patch which should provide a little more information.
>
> Maybe add a BUG() after each of these dev_err() so we stop at the first
> occurance and also see where we're coming from?
A BUG() at these points would crash the machine hard. And where we
came from doesn't matter; what matters is the values in the pointers.
Alan Stern
^ permalink raw reply [flat|nested] 34+ messages in thread
* Re: Re: A reliable kernel panic (3.6.2) and system crash when visiting a particular website
2012-10-22 15:54 ` Alan Stern
@ 2012-10-22 17:30 ` Artem S. Tashkinov
2012-10-22 18:01 ` Alan Stern
0 siblings, 1 reply; 34+ messages in thread
From: Artem S. Tashkinov @ 2012-10-22 17:30 UTC (permalink / raw)
To: stern
Cc: zonque, bp, pavel, linux-kernel, netdev, security, linux-media,
linux-usb, alsa-devel
On Oct 22, 2012, Alan Stern <stern@rowland.harvard.edu> wrote:
> A BUG() at these points would crash the machine hard. And where we
> came from doesn't matter; what matters is the values in the pointers.
OK, here's what the kernel prints with your patch:
usb 6.1.4: ep 86 list del corruption prev: e5103b54 e5103a94 e51039d4
A small delay before I got thousands of list_del corruption messages would
have been nice, but I managed to catch the message anyway.
Artem
^ permalink raw reply [flat|nested] 34+ messages in thread
* Re: Re: A reliable kernel panic (3.6.2) and system crash when visiting a particular website
2012-10-22 17:30 ` Artem S. Tashkinov
@ 2012-10-22 18:01 ` Alan Stern
0 siblings, 0 replies; 34+ messages in thread
From: Alan Stern @ 2012-10-22 18:01 UTC (permalink / raw)
To: Artem S. Tashkinov
Cc: zonque, bp, pavel, linux-kernel, netdev, security, linux-media,
linux-usb, alsa-devel
On Mon, 22 Oct 2012, Artem S. Tashkinov wrote:
> OK, here's what the kernel prints with your patch:
>
> usb 6.1.4: ep 86 list del corruption prev: e5103b54 e5103a94 e51039d4
>
> A small delay before I got thousands of list_del corruption messages would
> have been nice, but I managed to catch the message anyway.
All right. Here's a new patch, which will print more information and
will provide a 10-second delay.
For this to be useful, you should capture a usbmon trace at the same
time. The relevant entries will show up in the trace shortly before
_and_ shortly after the error message appears.
Alan Stern
P.S.: It will help if you unplug as many of the other USB devices as
possible before running this test.
Index: usb-3.6/drivers/usb/core/hcd.c
===================================================================
--- usb-3.6.orig/drivers/usb/core/hcd.c
+++ usb-3.6/drivers/usb/core/hcd.c
@@ -1083,6 +1083,8 @@ EXPORT_SYMBOL_GPL(usb_calc_bus_time);
/*-------------------------------------------------------------------------*/
+static bool list_error;
+
/**
* usb_hcd_link_urb_to_ep - add an URB to its endpoint queue
* @hcd: host controller to which @urb was submitted
@@ -1193,6 +1195,25 @@ void usb_hcd_unlink_urb_from_ep(struct u
{
/* clear all state linking urb to this dev (and hcd) */
spin_lock(&hcd_urb_list_lock);
+ {
+ struct list_head *cur = &urb->urb_list;
+ struct list_head *prev = cur->prev;
+ struct list_head *next = cur->next;
+
+ if (prev->next != cur && !list_error) {
+ list_error = true;
+ dev_err(&urb->dev->dev,
+ "ep %x list del corruption prev: %p %p %p %p %p\n",
+ urb->ep->desc.bEndpointAddress,
+ cur, prev, prev->next, next, next->prev);
+ dev_err(&urb->dev->dev,
+ "head %p urb %p urbprev %p urbnext %p\n",
+ &urb->ep->urb_list, urb,
+ list_entry(prev, struct urb, urb_list),
+ list_entry(next, struct urb, urb_list));
+ mdelay(10000);
+ }
+ }
list_del_init(&urb->urb_list);
spin_unlock(&hcd_urb_list_lock);
}
^ permalink raw reply [flat|nested] 34+ messages in thread
* Re: Re: Re: A reliable kernel panic (3.6.2) and system crash when visiting a particular website
2012-10-20 23:15 ` Artem S. Tashkinov
2012-10-21 0:24 ` Borislav Petkov
@ 2012-10-21 2:19 ` Alan Stern
2012-10-21 10:34 ` Daniel Mack
2012-11-03 14:10 ` Christof Meerwald
3 siblings, 0 replies; 34+ messages in thread
From: Alan Stern @ 2012-10-21 2:19 UTC (permalink / raw)
To: Artem S. Tashkinov
Cc: bp, pavel, linux-kernel, netdev, security, linux-media, linux-usb
On Sat, 20 Oct 2012, Artem S. Tashkinov wrote:
> You don't get me - I have *no* VirtualBox (or any proprietary) modules running
> - but I can reproduce this problem using *the same system running under* VirtualBox
> in Windows 7 64.
>
> It's almost definitely either a USB driver bug or video4linux driver bug:
Does the same thing happen with earlier kernel versions?
What about if you unload snd-usb-audio or ehci-hcd?
Alan Stern
^ permalink raw reply [flat|nested] 34+ messages in thread
* Re: A reliable kernel panic (3.6.2) and system crash when visiting a particular website
2012-10-20 23:15 ` Artem S. Tashkinov
2012-10-21 0:24 ` Borislav Petkov
2012-10-21 2:19 ` Alan Stern
@ 2012-10-21 10:34 ` Daniel Mack
2012-10-21 11:59 ` Daniel Mack
2012-11-03 14:10 ` Christof Meerwald
3 siblings, 1 reply; 34+ messages in thread
From: Daniel Mack @ 2012-10-21 10:34 UTC (permalink / raw)
To: Artem S. Tashkinov
Cc: bp, pavel, linux-kernel, netdev, security, linux-media, linux-usb
On 21.10.2012 01:15, Artem S. Tashkinov wrote:
> You don't get me - I have *no* VirtualBox (or any proprietary) modules running
> - but I can reproduce this problem using *the same system running under* VirtualBox
> in Windows 7 64.
>
> It's almost definitely either a USB driver bug or video4linux driver bug:
>
> I'm CC'ing linux-media and linux-usb mailing lists, the problem is described here:
> https://lkml.org/lkml/2012/10/20/35
> https://lkml.org/lkml/2012/10/20/148
>
> Here are the last lines from my dmesg (with usbmon loaded):
>
> [ 292.164833] hub 1-0:1.0: state 7 ports 8 chg 0000 evt 0002
> [ 292.168091] ehci_hcd 0000:00:1f.5: GetStatus port:1 status 00100a 0 ACK POWER sig=se0 PEC CSC
> [ 292.172063] hub 1-0:1.0: port 1, status 0100, change 0003, 12 Mb/s
> [ 292.174883] usb 1-1: USB disconnect, device number 2
> [ 292.178045] usb 1-1: unregistering device
> [ 292.183539] usb 1-1: unregistering interface 1-1:1.0
> [ 292.197034] usb 1-1: unregistering interface 1-1:1.1
> [ 292.204317] usb 1-1: unregistering interface 1-1:1.2
> [ 292.234519] usb 1-1: unregistering interface 1-1:1.3
> [ 292.236175] usb 1-1: usb_disable_device nuking all URBs
> [ 292.364429] hub 1-0:1.0: debounce: port 1: total 100ms stable 100ms status 0x100
> [ 294.364279] hub 1-0:1.0: hub_suspend
> [ 294.366045] usb usb1: bus auto-suspend, wakeup 1
> [ 294.367375] ehci_hcd 0000:00:1f.5: suspend root hub
> [ 296.501084] usb usb1: usb wakeup-resume
> [ 296.508311] usb usb1: usb auto-resume
> [ 296.509833] ehci_hcd 0000:00:1f.5: resume root hub
> [ 296.560149] hub 1-0:1.0: hub_resume
> [ 296.562240] ehci_hcd 0000:00:1f.5: GetStatus port:1 status 001003 0 ACK POWER sig=se0 CSC CONNECT
> [ 296.566141] hub 1-0:1.0: port 1: status 0501 change 0001
> [ 296.670413] hub 1-0:1.0: state 7 ports 8 chg 0002 evt 0000
> [ 296.673222] hub 1-0:1.0: port 1, status 0501, change 0000, 480 Mb/s
> [ 297.311720] usb 1-1: new high-speed USB device number 3 using ehci_hcd
> [ 300.547237] usb 1-1: skipped 1 descriptor after configuration
> [ 300.549443] usb 1-1: skipped 4 descriptors after interface
> [ 300.552273] usb 1-1: skipped 2 descriptors after interface
> [ 300.556499] usb 1-1: skipped 1 descriptor after endpoint
> [ 300.559392] usb 1-1: skipped 2 descriptors after interface
> [ 300.560960] usb 1-1: skipped 1 descriptor after endpoint
> [ 300.562169] usb 1-1: skipped 2 descriptors after interface
> [ 300.563440] usb 1-1: skipped 1 descriptor after endpoint
> [ 300.564639] usb 1-1: skipped 2 descriptors after interface
> [ 300.565828] usb 1-1: skipped 2 descriptors after endpoint
> [ 300.567084] usb 1-1: skipped 9 descriptors after interface
> [ 300.569205] usb 1-1: skipped 1 descriptor after endpoint
> [ 300.570484] usb 1-1: skipped 53 descriptors after interface
> [ 300.595843] usb 1-1: default language 0x0409
> [ 300.602503] usb 1-1: USB interface quirks for this device: 2
> [ 300.605700] usb 1-1: udev 3, busnum 1, minor = 2
> [ 300.606959] usb 1-1: New USB device found, idVendor=046d, idProduct=081d
> [ 300.610298] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
> [ 300.613742] usb 1-1: SerialNumber: 48C5D2B0
> [ 300.617703] usb 1-1: usb_probe_device
> [ 300.620594] usb 1-1: configuration #1 chosen from 1 choice
> [ 300.639218] usb 1-1: adding 1-1:1.0 (config #1, interface 0)
> [ 300.640736] snd-usb-audio 1-1:1.0: usb_probe_interface
> [ 300.642307] snd-usb-audio 1-1:1.0: usb_probe_interface - got id
> [ 301.050296] usb 1-1: adding 1-1:1.1 (config #1, interface 1)
> [ 301.054897] usb 1-1: adding 1-1:1.2 (config #1, interface 2)
> [ 301.056934] uvcvideo 1-1:1.2: usb_probe_interface
> [ 301.058072] uvcvideo 1-1:1.2: usb_probe_interface - got id
> [ 301.059395] uvcvideo: Found UVC 1.00 device <unnamed> (046d:081d)
> [ 301.090173] input: UVC Camera (046d:081d) as /devices/pci0000:00/0000:00:1f.5/usb1/1-1/1-1:1.2/input/input7
That seems to be a Logitech model.
> [ 301.111289] usb 1-1: adding 1-1:1.3 (config #1, interface 3)
> [ 301.131207] usb 1-1: link qh16-0001/f48d64c0 start 2 [1/0 us]
> [ 301.137066] usb 1-1: unlink qh16-0001/f48d64c0 start 2 [1/0 us]
> [ 301.156451] ehci_hcd 0000:00:1f.5: reused qh f48d64c0 schedule
> [ 301.158310] usb 1-1: link qh16-0001/f48d64c0 start 2 [1/0 us]
> [ 301.160238] usb 1-1: unlink qh16-0001/f48d64c0 start 2 [1/0 us]
> [ 301.196606] set resolution quirk: cval->res = 384
> [ 371.309569] e1000: eth1 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
> [ 390.729568] ehci_hcd 0000:00:1f.5: reused qh f48d64c0 schedule
> f5ade900 2296555[ 390.730023] usb 1-1: link qh16-0001/f48d64c0 start 2 [1/0 us]
> 437 S Ii:1:003:7[ 390.736394] usb 1-1: unlink qh16-0001/f48d64c0 start 2 [1/0 us]
> -115:128 16 <
> f5ade900 2296566256 C Ii:1:003:7 -2:128 0
> [ 391.100896] ehci_hcd 0000:00:1f.5: reused qh f48d64c0 schedule
> [ 391.103188] usb 1-1: link qh16-0001/f48d64c0 start 2 [1/0 us]
> f5ade900 2296926929 S Ii:1:003:7[ 391.104889] usb 1-1: unlink qh16-0001/f48d64c0 start 2 [1/0 us]
> -115:128 16 <
> f5ade900 2296937889 C Ii:1:003:7 -2:128 0
> f5272300 2310382508 S Co:1:003:0 s 01 0b 0004 0001 0000 0
> f5272300 2310407888 C Co:1:003:0 0 0
> f5272300 2310408051 S Co:1:003:0 s 22 01 0100 0086 0003 3 = 80bb00
> f5272300 2310412456 C Co:1:003:0 0 3 >
> f5272300 2310412521 S Ci:1:003:0 s a2 81 0100 0086 0003 3 <
> f5272300 2310415909 C Ci:1:003:0 0 0
> f5272300 2310418133 S Zi:1:003:6 -115:8:0 1 -18:0:100 100 <
> f5272600 2310418219 S Zi:1:003:6 -115:8:0 1 -18:0:100 100 <
> f52720c0 2310418239 S Zi:1:003:6 -115:8:0 1 -18:0:100 100 <
> f5272a80 2310418247 S Zi:1:003:6 -115:8:0 1 -18:0:100 100 <
> f5272480 2310418256 S Zi:1:003:6 -115:8:0 1 -18:0:100 100 <
> f52723c0 2310418264 S Zi:1:003:6 -115:8:0 1 -18:0:100 100 <
> f5272d80 2310418272 S Zi:1:003:6 -115:8:0 1 -18:0:100 100 <
> f5272b40 2310418280 S Zi:1:003:6 -115:8:0 1 -18:0:100 100 <
At least this last packet was an isochronous input on ep 6 which has
state -EINPROGRESS, but that isn't necessarily related.
> Hard freeze with 100% CPU usage at this point as if some driver got into an
> infinite loop or something.
>From your first mail in this thread, I suspect that to be some sort of
memory corruption, but now you're seeing a hard freeze. Hmm.
> All debug options from https://lkml.org/lkml/2012/10/20/116 are enabled, but
> serial console is empty.
Some thoughts:
- As Alan asked, it would be interesting to separate video and audio
functions in this test, either by unloading the kernel modules one by
one or by disallowing Flash access to the devices.
- Can you reproduce this with some other webcam tool like "cheese"?
- Can you reproduce this with some other audio capture tool like
"arecord" (use "-D" to point it to the correct device, and play with
various sample rates and buffer sizes here)
- Do you have any built-in webcam or microphone? Does it work when you
use them instead?
- Does http://trust.com/service/guides/webcam/ also crash your kernel?
- if you can narrow down the issue to USB devices, please post the
output of "lsusb -v"
I tried Chrome 22 on Ubuntu with a cheap Logitech USB webcam (different
product ID than yours, though) under 3.6.0 and 3.6.2, and I can't
reproduce the issue.
Daniel
^ permalink raw reply [flat|nested] 34+ messages in thread
* Re: A reliable kernel panic (3.6.2) and system crash when visiting a particular website
2012-10-21 10:34 ` Daniel Mack
@ 2012-10-21 11:59 ` Daniel Mack
0 siblings, 0 replies; 34+ messages in thread
From: Daniel Mack @ 2012-10-21 11:59 UTC (permalink / raw)
To: Artem S. Tashkinov
Cc: bp, pavel, linux-kernel, netdev, security, linux-media, linux-usb
On 21.10.2012 12:34, Daniel Mack wrote:
> On 21.10.2012 01:15, Artem S. Tashkinov wrote:
>> You don't get me - I have *no* VirtualBox (or any proprietary) modules running
>> - but I can reproduce this problem using *the same system running under* VirtualBox
>> in Windows 7 64.
>>
>> It's almost definitely either a USB driver bug or video4linux driver bug:
>>
>> I'm CC'ing linux-media and linux-usb mailing lists, the problem is described here:
>> https://lkml.org/lkml/2012/10/20/35
>> https://lkml.org/lkml/2012/10/20/148
>>
>> Here are the last lines from my dmesg (with usbmon loaded):
>>
>> [ 292.164833] hub 1-0:1.0: state 7 ports 8 chg 0000 evt 0002
>> [ 292.168091] ehci_hcd 0000:00:1f.5: GetStatus port:1 status 00100a 0 ACK POWER sig=se0 PEC CSC
>> [ 292.172063] hub 1-0:1.0: port 1, status 0100, change 0003, 12 Mb/s
>> [ 292.174883] usb 1-1: USB disconnect, device number 2
>> [ 292.178045] usb 1-1: unregistering device
>> [ 292.183539] usb 1-1: unregistering interface 1-1:1.0
>> [ 292.197034] usb 1-1: unregistering interface 1-1:1.1
>> [ 292.204317] usb 1-1: unregistering interface 1-1:1.2
>> [ 292.234519] usb 1-1: unregistering interface 1-1:1.3
>> [ 292.236175] usb 1-1: usb_disable_device nuking all URBs
>> [ 292.364429] hub 1-0:1.0: debounce: port 1: total 100ms stable 100ms status 0x100
>> [ 294.364279] hub 1-0:1.0: hub_suspend
>> [ 294.366045] usb usb1: bus auto-suspend, wakeup 1
>> [ 294.367375] ehci_hcd 0000:00:1f.5: suspend root hub
>> [ 296.501084] usb usb1: usb wakeup-resume
>> [ 296.508311] usb usb1: usb auto-resume
>> [ 296.509833] ehci_hcd 0000:00:1f.5: resume root hub
>> [ 296.560149] hub 1-0:1.0: hub_resume
>> [ 296.562240] ehci_hcd 0000:00:1f.5: GetStatus port:1 status 001003 0 ACK POWER sig=se0 CSC CONNECT
>> [ 296.566141] hub 1-0:1.0: port 1: status 0501 change 0001
>> [ 296.670413] hub 1-0:1.0: state 7 ports 8 chg 0002 evt 0000
>> [ 296.673222] hub 1-0:1.0: port 1, status 0501, change 0000, 480 Mb/s
>> [ 297.311720] usb 1-1: new high-speed USB device number 3 using ehci_hcd
>> [ 300.547237] usb 1-1: skipped 1 descriptor after configuration
>> [ 300.549443] usb 1-1: skipped 4 descriptors after interface
>> [ 300.552273] usb 1-1: skipped 2 descriptors after interface
>> [ 300.556499] usb 1-1: skipped 1 descriptor after endpoint
>> [ 300.559392] usb 1-1: skipped 2 descriptors after interface
>> [ 300.560960] usb 1-1: skipped 1 descriptor after endpoint
>> [ 300.562169] usb 1-1: skipped 2 descriptors after interface
>> [ 300.563440] usb 1-1: skipped 1 descriptor after endpoint
>> [ 300.564639] usb 1-1: skipped 2 descriptors after interface
>> [ 300.565828] usb 1-1: skipped 2 descriptors after endpoint
>> [ 300.567084] usb 1-1: skipped 9 descriptors after interface
>> [ 300.569205] usb 1-1: skipped 1 descriptor after endpoint
>> [ 300.570484] usb 1-1: skipped 53 descriptors after interface
>> [ 300.595843] usb 1-1: default language 0x0409
>> [ 300.602503] usb 1-1: USB interface quirks for this device: 2
>> [ 300.605700] usb 1-1: udev 3, busnum 1, minor = 2
>> [ 300.606959] usb 1-1: New USB device found, idVendor=046d, idProduct=081d
>> [ 300.610298] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
>> [ 300.613742] usb 1-1: SerialNumber: 48C5D2B0
>> [ 300.617703] usb 1-1: usb_probe_device
>> [ 300.620594] usb 1-1: configuration #1 chosen from 1 choice
>> [ 300.639218] usb 1-1: adding 1-1:1.0 (config #1, interface 0)
>> [ 300.640736] snd-usb-audio 1-1:1.0: usb_probe_interface
>> [ 300.642307] snd-usb-audio 1-1:1.0: usb_probe_interface - got id
>> [ 301.050296] usb 1-1: adding 1-1:1.1 (config #1, interface 1)
>> [ 301.054897] usb 1-1: adding 1-1:1.2 (config #1, interface 2)
>> [ 301.056934] uvcvideo 1-1:1.2: usb_probe_interface
>> [ 301.058072] uvcvideo 1-1:1.2: usb_probe_interface - got id
>> [ 301.059395] uvcvideo: Found UVC 1.00 device <unnamed> (046d:081d)
>> [ 301.090173] input: UVC Camera (046d:081d) as /devices/pci0000:00/0000:00:1f.5/usb1/1-1/1-1:1.2/input/input7
>
> That seems to be a Logitech model.
>
>> [ 301.111289] usb 1-1: adding 1-1:1.3 (config #1, interface 3)
>> [ 301.131207] usb 1-1: link qh16-0001/f48d64c0 start 2 [1/0 us]
>> [ 301.137066] usb 1-1: unlink qh16-0001/f48d64c0 start 2 [1/0 us]
>> [ 301.156451] ehci_hcd 0000:00:1f.5: reused qh f48d64c0 schedule
>> [ 301.158310] usb 1-1: link qh16-0001/f48d64c0 start 2 [1/0 us]
>> [ 301.160238] usb 1-1: unlink qh16-0001/f48d64c0 start 2 [1/0 us]
>> [ 301.196606] set resolution quirk: cval->res = 384
>> [ 371.309569] e1000: eth1 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
>> [ 390.729568] ehci_hcd 0000:00:1f.5: reused qh f48d64c0 schedule
>> f5ade900 2296555[ 390.730023] usb 1-1: link qh16-0001/f48d64c0 start 2 [1/0 us]
>> 437 S Ii:1:003:7[ 390.736394] usb 1-1: unlink qh16-0001/f48d64c0 start 2 [1/0 us]
>> -115:128 16 <
>> f5ade900 2296566256 C Ii:1:003:7 -2:128 0
>> [ 391.100896] ehci_hcd 0000:00:1f.5: reused qh f48d64c0 schedule
>> [ 391.103188] usb 1-1: link qh16-0001/f48d64c0 start 2 [1/0 us]
>> f5ade900 2296926929 S Ii:1:003:7[ 391.104889] usb 1-1: unlink qh16-0001/f48d64c0 start 2 [1/0 us]
>> -115:128 16 <
>> f5ade900 2296937889 C Ii:1:003:7 -2:128 0
>> f5272300 2310382508 S Co:1:003:0 s 01 0b 0004 0001 0000 0
>> f5272300 2310407888 C Co:1:003:0 0 0
>> f5272300 2310408051 S Co:1:003:0 s 22 01 0100 0086 0003 3 = 80bb00
>> f5272300 2310412456 C Co:1:003:0 0 3 >
>> f5272300 2310412521 S Ci:1:003:0 s a2 81 0100 0086 0003 3 <
>> f5272300 2310415909 C Ci:1:003:0 0 0
>> f5272300 2310418133 S Zi:1:003:6 -115:8:0 1 -18:0:100 100 <
>> f5272600 2310418219 S Zi:1:003:6 -115:8:0 1 -18:0:100 100 <
>> f52720c0 2310418239 S Zi:1:003:6 -115:8:0 1 -18:0:100 100 <
>> f5272a80 2310418247 S Zi:1:003:6 -115:8:0 1 -18:0:100 100 <
>> f5272480 2310418256 S Zi:1:003:6 -115:8:0 1 -18:0:100 100 <
>> f52723c0 2310418264 S Zi:1:003:6 -115:8:0 1 -18:0:100 100 <
>> f5272d80 2310418272 S Zi:1:003:6 -115:8:0 1 -18:0:100 100 <
>> f5272b40 2310418280 S Zi:1:003:6 -115:8:0 1 -18:0:100 100 <
[...]
> I tried Chrome 22 on Ubuntu with a cheap Logitech USB webcam (different
> product ID than yours, though) under 3.6.0 and 3.6.2, and I can't
> reproduce the issue.
FWIW, I also tried Chrome 22 and Firefox 16 with kernel version 3.5.4
and 3.6.2 on Fedora 17 and everything worked as expected (with both an
external and the built-in webcam of a T420). Cheese and arecord also
work on all kernel versions and distributions I have tested so far.
So whatever causes your trouble, I assume it's rather specific to your
machine configuration and setup. More information is needed here.
Daniel
^ permalink raw reply [flat|nested] 34+ messages in thread
* Re: A reliable kernel panic (3.6.2) and system crash when visiting a particular website
2012-10-20 23:15 ` Artem S. Tashkinov
` (2 preceding siblings ...)
2012-10-21 10:34 ` Daniel Mack
@ 2012-11-03 14:10 ` Christof Meerwald
2012-11-03 14:16 ` Daniel Mack
3 siblings, 1 reply; 34+ messages in thread
From: Christof Meerwald @ 2012-11-03 14:10 UTC (permalink / raw)
To: Artem S. Tashkinov
Cc: pavel, linux-kernel, netdev, security, linux-media, linux-usb
On Sat, 20 Oct 2012 23:15:17 +0000 (GMT), Artem S. Tashkinov wrote:
> It's almost definitely either a USB driver bug or video4linux driver bug:
>
> I'm CC'ing linux-media and linux-usb mailing lists, the problem is described here:
> https://lkml.org/lkml/2012/10/20/35
> https://lkml.org/lkml/2012/10/20/148
Not sure if it's related, but I am seeing a kernel freeze with a
usb-audio headset (connected via an external USB hub) on Linux 3.5.0
(Ubuntu 12.10) - see
http://comments.gmane.org/gmane.comp.voip.twinkle/3052 and
http://pastebin.com/aHGe1S1X for a self-contained C test.
Christof
--
http://cmeerw.org sip:cmeerw at cmeerw.org
mailto:cmeerw at cmeerw.org xmpp:cmeerw at cmeerw.org
^ permalink raw reply [flat|nested] 34+ messages in thread* Re: A reliable kernel panic (3.6.2) and system crash when visiting a particular website
2012-11-03 14:10 ` Christof Meerwald
@ 2012-11-03 14:16 ` Daniel Mack
2012-11-03 14:28 ` Sven-Haegar Koch
2012-11-05 19:13 ` Christof Meerwald
0 siblings, 2 replies; 34+ messages in thread
From: Daniel Mack @ 2012-11-03 14:16 UTC (permalink / raw)
To: Christof Meerwald
Cc: Artem S. Tashkinov, pavel, linux-kernel, netdev, security,
linux-media, linux-usb
On 03.11.2012 15:10, Christof Meerwald wrote:
> On Sat, 20 Oct 2012 23:15:17 +0000 (GMT), Artem S. Tashkinov wrote:
>> It's almost definitely either a USB driver bug or video4linux driver bug:
>>
>> I'm CC'ing linux-media and linux-usb mailing lists, the problem is described here:
>> https://lkml.org/lkml/2012/10/20/35
>> https://lkml.org/lkml/2012/10/20/148
>
> Not sure if it's related, but I am seeing a kernel freeze with a
> usb-audio headset (connected via an external USB hub) on Linux 3.5.0
> (Ubuntu 12.10) - see
Does Ubuntu 12.10 really ship with 3.5.0? Not any more recent
> http://comments.gmane.org/gmane.comp.voip.twinkle/3052 and
> http://pastebin.com/aHGe1S1X for a self-contained C test.
Some questions:
- Are you seeing the same issue with 3.6.x?
- If you can reproduce this issue, could you paste the messages in
dmesg when this happens? Do they resemble to the list corruption that
was reported?
- Do you see the same problem with 3.4?
- Are you able to apply the patch Alan Stern posted in this thread earlier?
We should really sort this out, but I unfortunately lack a system or
setup that shows the bug.
Thanks,
Daniel
^ permalink raw reply [flat|nested] 34+ messages in thread
* Re: A reliable kernel panic (3.6.2) and system crash when visiting a particular website
2012-11-03 14:16 ` Daniel Mack
@ 2012-11-03 14:28 ` Sven-Haegar Koch
2012-11-05 19:13 ` Christof Meerwald
1 sibling, 0 replies; 34+ messages in thread
From: Sven-Haegar Koch @ 2012-11-03 14:28 UTC (permalink / raw)
To: Daniel Mack
Cc: Christof Meerwald, Artem S. Tashkinov, pavel, linux-kernel,
netdev, security, linux-media, linux-usb
On Sat, 3 Nov 2012, Daniel Mack wrote:
> On 03.11.2012 15:10, Christof Meerwald wrote:
> > On Sat, 20 Oct 2012 23:15:17 +0000 (GMT), Artem S. Tashkinov wrote:
> >> It's almost definitely either a USB driver bug or video4linux driver bug:
> >>
> >> I'm CC'ing linux-media and linux-usb mailing lists, the problem is described here:
> >> https://lkml.org/lkml/2012/10/20/35
> >> https://lkml.org/lkml/2012/10/20/148
> >
> > Not sure if it's related, but I am seeing a kernel freeze with a
> > usb-audio headset (connected via an external USB hub) on Linux 3.5.0
> > (Ubuntu 12.10) - see
>
> Does Ubuntu 12.10 really ship with 3.5.0? Not any more recent
They ship 3.5.7 plus some more fixes, but call it 3.5.0-18.29
c'ya
sven-haegar
--
Three may keep a secret, if two of them are dead.
- Ben F.
^ permalink raw reply [flat|nested] 34+ messages in thread
* Re: A reliable kernel panic (3.6.2) and system crash when visiting a particular website
2012-11-03 14:16 ` Daniel Mack
2012-11-03 14:28 ` Sven-Haegar Koch
@ 2012-11-05 19:13 ` Christof Meerwald
1 sibling, 0 replies; 34+ messages in thread
From: Christof Meerwald @ 2012-11-05 19:13 UTC (permalink / raw)
To: Daniel Mack
Cc: Artem S. Tashkinov, pavel, linux-kernel, netdev, security,
linux-media, linux-usb
On Sat, Nov 03, 2012 at 03:16:36PM +0100, Daniel Mack wrote:
> On 03.11.2012 15:10, Christof Meerwald wrote:
> > http://comments.gmane.org/gmane.comp.voip.twinkle/3052 and
> > http://pastebin.com/aHGe1S1X for a self-contained C test.
> Some questions:
>
> - Are you seeing the same issue with 3.6.x?
I haven't tried it myself, but the other poster on
http://comments.gmane.org/gmane.comp.voip.twinkle/3052 mentions 3.6.2
(and 3.6.3)
> - If you can reproduce this issue, could you paste the messages in
> dmesg when this happens? Do they resemble to the list corruption that
> was reported?
I am not seeing any kernel messages at all - the system just freezes
and not even the SysRq stuff works after that.
> - Do you see the same problem with 3.4?
I upgraded from Ubuntu 12.04 (Linux 3.2) where I didn't see the
problem. However,
http://www.linuxquestions.org/questions/linux-desktop-74/twinkle-causes-linux-freeze-kernel-3-6-2-a-4175433799/
mentions 3.4.0
> - Are you able to apply the patch Alan Stern posted in this thread earlier?
Unfortunately, I am not really in a position to apply kernel patches
at the moment.
> We should really sort this out, but I unfortunately lack a system or
> setup that shows the bug.
BTW, I have been able to reproduce the problem on a completely
different machine (also running Ubuntu 12.10, but different hardware).
The important thing appears to be that the USB audio device is
connected via a USB 2.0 hub (and then using the test code posted in
http://pastebin.com/aHGe1S1X specifying the audio device as
"plughw:Set" (or whatever it's called) seems to trigger the freeze).
So I guess another question is: do you have a USB headset connected
via a USB 2.0 hub and not seeing the problem or is your USB headset
not connected via a USB 2.0 hub? (of course, it would also be useful
if others could comment if they are seeing the problem with that setup
or not)
Christof
--
http://cmeerw.org sip:cmeerw at cmeerw.org
mailto:cmeerw at cmeerw.org xmpp:cmeerw at cmeerw.org
^ permalink raw reply [flat|nested] 34+ messages in thread
