Note: This is a public test instance of Red Hat Bugzilla. The data contained within is a snapshot of the live data so any changes you make will not be reflected in the production Bugzilla. Email is disabled so feel free to test any aspect of the site that you want. File any problems you find or give feedback at bugzilla.redhat.com.
Bug 1220118 - Kernel 3.19.5 segfaults when connecting Hauppage Nova-TD usb stick
Summary: Kernel 3.19.5 segfaults when connecting Hauppage Nova-TD usb stick
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: kernel
Version: 21
Hardware: x86_64
OS: Linux
unspecified
unspecified
Target Milestone: ---
Assignee: Kernel Maintainer List
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
: 1185116 (view as bug list)
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2015-05-10 09:22 UTC by Pekka Harjamäki
Modified: 2015-05-28 20:42 UTC (History)
8 users (show)

Fixed In Version: kernel-4.0.4-201.fc21
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2015-05-26 03:38:24 UTC
Type: Bug
Embargoed:

Attachments (Terms of Use)
Possible fix for dvb oops (1.08 KB, patch)
2015-05-11 21:33 UTC, Laura Abbott 		no flags Details | Diff
View All

Description Pekka Harjamäki 2015-05-10 09:22:48 UTC 
Description of problem:
Kernel crashes when I connect dvb-t stick to usb port. Also booting with stick attached causes kernel to crash

Version-Release number of selected component (if applicable):
Kernel-3.19.5 , Fedora 21

How reproducible:
Every time

Steps to Reproduce:
1. Connect stick to usb port
2. Kernel crashes

Additional info:

[448938.083085] usb 1-1: new high-speed USB device number 2 using ehci-pci
[448938.197916] usb 1-1: New USB device found, idVendor=2040, idProduct=9580
[448938.197928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[448938.197931] usb 1-1: Product: NovaT 500Stick
[448938.197934] usb 1-1: Manufacturer: Hauppauge
[448938.197936] usb 1-1: SerialNumber: 4028638203
[448939.515775] dvb-usb: found a 'Hauppauge Nova-TD Stick/Elgato Eye-TV Diversity' in cold state, will try to load a firmware
[448939.525463] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[448939.762118] dib0700: firmware started successfully.
[448940.263252] dvb-usb: found a 'Hauppauge Nova-TD Stick/Elgato Eye-TV Diversity' in warm state.
[448940.264070] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[448940.265054] DVB: registering new adapter (Hauppauge Nova-TD Stick/Elgato Eye-TV Diversity)
[448940.311758] BUG: unable to handle kernel NULL pointer dereference at 0000000000000080
[448940.311820] IP: [<ffffffffa0669141>] dib7000p_attach+0x11/0xa0 [dib7000p]
[448940.311871] PGD 0 
[448940.311884] Oops: 0002 [#1] SMP 
[448940.311903] Modules linked in: dib7000p dvb_usb_dib0700(+) dib7000m dib0090 dib0070 dib3000mc dibx000_common dvb_usb dvb_core rc_core bnep bluetooth rfkill ip6t_rpfilter ip6t_REJECT nf_reject_ipv6 xt_conntrack ebtable_nat ebtable_broute bridge stp llc ebtable_filter ebtables ip6table_nat nf_conntrack_ipv6 nf_defrag_ipv6 nf_nat_ipv6 ip6table_mangle ip6table_security ip6table_raw ip6table_filter ip6_tables iptable_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_nat_ipv4 nf_nat nf_conntrack iptable_mangle iptable_security iptable_raw snd_hda_codec_analog snd_hda_codec_generic joydev coretemp kvm snd_hda_intel iTCO_wdt gpio_ich iTCO_vendor_support ppdev snd_hda_controller dell_wmi sparse_keymap snd_hda_codec snd_hwdep snd_seq snd_seq_device dcdbas hid_logitech_hidpp snd_pcm serio_raw lpc_ich mfd_core i2c_i801
[448940.312005]  snd_timer snd parport_pc soundcore mei_me tpm_tis parport tpm wmi mei shpchp acpi_cpufreq nfsd auth_rpcgss nfs_acl lockd grace sunrpc hid_logitech_dj i915 e1000e i2c_algo_bit video drm_kms_helper drm ptp pps_core ata_generic pata_acpi
[448940.312005] CPU: 0 PID: 23460 Comm: systemd-udevd Not tainted 3.19.5-200.fc21.x86_64 #1
[448940.312005] Hardware name: Dell Inc. OptiPlex 760                 /0R230R, BIOS A05 08/17/2009
[448940.312005] task: ffff880026e29360 ti: ffff880030b64000 task.ti: ffff880030b64000
[448940.312005] RIP: 0010:[<ffffffffa0669141>]  [<ffffffffa0669141>] dib7000p_attach+0x11/0xa0 [dib7000p]
[448940.312005] RSP: 0018:ffff880030b679f8  EFLAGS: 00010202
[448940.312005] RAX: 0000000000000010 RBX: ffff880047b71278 RCX: 0000000000000001
[448940.312005] RDX: 0000000000000000 RSI: ffffffffa06707d8 RDI: 0000000000000010
[448940.312005] RBP: ffff880030b679f8 R08: ffffffff81119fe0 R09: 0000000000017840
[448940.312005] R10: ffffffff810b07e4 R11: 0000000000000246 R12: 0000000000000000
[448940.312005] R13: 0000000000000010 R14: ffff880047b71308 R15: ffff880047b71398
[448940.312005] FS:  00007f005f380880(0000) GS:ffff88007c800000(0000) knlGS:0000000000000000
[448940.312005] CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
[448940.312005] CR2: 0000000000000080 CR3: 000000004e38d000 CR4: 00000000000407f0
[448940.312005] Stack:
[448940.312005]  ffff880030b67a28 ffffffffa06430fb ffff880047b71278 ffff880047b71880
[448940.312005]  ffff880047b71278 0000000000000000 ffff880030b67a68 ffffffffa0626872
[448940.312005]  ffff880047b70000 0000000000000000 ffff880047b71280 ffff880047b70000
[448940.312005] Call Trace:
[448940.312005]  [<ffffffffa06430fb>] stk7700d_frontend_attach+0x3b/0x200 [dvb_usb_dib0700]
[448940.312005]  [<ffffffffa0626872>] dvb_usb_adapter_frontend_init+0xe2/0x1a0 [dvb_usb]
[448940.312005]  [<ffffffffa0625ab7>] dvb_usb_device_init+0x517/0x6f0 [dvb_usb]
[448940.312005]  [<ffffffffa063f40e>] dib0700_probe+0x6e/0x100 [dvb_usb_dib0700]
[448940.312005]  [<ffffffff817731e6>] ? mutex_lock+0x16/0x40
[448940.312005]  [<ffffffff815598fb>] usb_probe_interface+0x1bb/0x300
[448940.312005]  [<ffffffff814c9e13>] driver_probe_device+0xa3/0x400
[448940.312005]  [<ffffffff814ca24b>] __driver_attach+0x9b/0xa0
[448940.312005]  [<ffffffff814ca1b0>] ? __device_attach+0x40/0x40
[448940.312005]  [<ffffffff814c7ad3>] bus_for_each_dev+0x73/0xc0
[448940.312005]  [<ffffffff814c987e>] driver_attach+0x1e/0x20
[448940.312005]  [<ffffffff814c9430>] bus_add_driver+0x180/0x250
[448940.312005]  [<ffffffff814caa44>] driver_register+0x64/0xf0
[448940.312005]  [<ffffffff81557ff2>] usb_register_driver+0x82/0x160
[448940.312005]  [<ffffffffa0663000>] ? 0xffffffffa0663000
[448940.312005]  [<ffffffffa066301e>] dib0700_driver_init+0x1e/0x1000 [dvb_usb_dib0700]
[448940.312005]  [<ffffffff81002148>] do_one_initcall+0xd8/0x210
[448940.312005]  [<ffffffff811fbb59>] ? kmem_cache_alloc_trace+0x1a9/0x230
[448940.312005]  [<ffffffff8111f053>] ? load_module+0x2203/0x2800
[448940.312005]  [<ffffffff8111f08b>] load_module+0x223b/0x2800
[448940.312005]  [<ffffffff8111a810>] ? store_uevent+0x70/0x70
[448940.312005]  [<ffffffff8111f71d>] SyS_init_module+0xcd/0x120
[448940.312005]  [<ffffffff817752c9>] system_call_fastpath+0x12/0x17
[448940.312005] Code: 8b 87 18 03 00 00 55 48 89 e5 48 05 68 16 00 00 5d c3 0f 1f 84 00 00 00 00 00 66 66 66 66 90 55 48 85 ff 48 89 f8 48 89 e5 74 7f <48> c7 47 70 b0 a9 66 a0 48 c7 47 68 40 9a 66 a0 48 c7 47 30 90 
[448940.312005] RIP  [<ffffffffa0669141>] dib7000p_attach+0x11/0xa0 [dib7000p]
[448940.312005]  RSP <ffff880030b679f8>
[448940.312005] CR2: 0000000000000080
[448940.324579] ---[ end trace 288814f44b010d3e ]---
Comment 1 Pekka Harjamäki 2015-05-10 09:26:45 UTC 
Here's outputs from lspci and lsusb without stick attached, if it's any help:

lspci:

00:00.0 Host bridge: Intel Corporation 4 Series Chipset DRAM Controller (rev 03)
00:01.0 PCI bridge: Intel Corporation 4 Series Chipset PCI Express Root Port (rev 03)
00:02.0 VGA compatible controller: Intel Corporation 4 Series Chipset Integrated Graphics Controller (rev 03)
00:02.1 Display controller: Intel Corporation 4 Series Chipset Integrated Graphics Controller (rev 03)
00:03.0 Communication controller: Intel Corporation 4 Series Chipset HECI Controller (rev 03)
00:03.2 IDE interface: Intel Corporation 4 Series Chipset PT IDER Controller (rev 03)
00:03.3 Serial controller: Intel Corporation 4 Series Chipset Serial KT Controller (rev 03)
00:19.0 Ethernet controller: Intel Corporation 82567LM-3 Gigabit Network Connection (rev 02)
00:1a.0 USB controller: Intel Corporation 82801JD/DO (ICH10 Family) USB UHCI Controller #4 (rev 02)
00:1a.1 USB controller: Intel Corporation 82801JD/DO (ICH10 Family) USB UHCI Controller #5 (rev 02)
00:1a.2 USB controller: Intel Corporation 82801JD/DO (ICH10 Family) USB UHCI Controller #6 (rev 02)
00:1a.7 USB controller: Intel Corporation 82801JD/DO (ICH10 Family) USB2 EHCI Controller #2 (rev 02)
00:1b.0 Audio device: Intel Corporation 82801JD/DO (ICH10 Family) HD Audio Controller (rev 02)
00:1c.0 PCI bridge: Intel Corporation 82801JD/DO (ICH10 Family) PCI Express Port 1 (rev 02)
00:1c.1 PCI bridge: Intel Corporation 82801JD/DO (ICH10 Family) PCI Express Port 2 (rev 02)
00:1d.0 USB controller: Intel Corporation 82801JD/DO (ICH10 Family) USB UHCI Controller #1 (rev 02)
00:1d.1 USB controller: Intel Corporation 82801JD/DO (ICH10 Family) USB UHCI Controller #2 (rev 02)
00:1d.2 USB controller: Intel Corporation 82801JD/DO (ICH10 Family) USB UHCI Controller #3 (rev 02)
00:1d.7 USB controller: Intel Corporation 82801JD/DO (ICH10 Family) USB2 EHCI Controller #1 (rev 02)
00:1e.0 PCI bridge: Intel Corporation 82801 PCI Bridge (rev a2)
00:1f.0 ISA bridge: Intel Corporation 82801JD (ICH10D) LPC Interface Controller (rev 02)
00:1f.2 SATA controller: Intel Corporation 82801JD/DO (ICH10 Family) SATA AHCI Controller (rev 02)
00:1f.3 SMBus: Intel Corporation 82801JD/DO (ICH10 Family) SMBus Controller (rev 02)

lsusb:

Bus 002 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 008 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
Bus 007 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
Bus 006 Device 002: ID 046d:c52b Logitech, Inc. Unifying Receiver
Bus 006 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 005 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
Bus 004 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
Bus 003 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
Comment 2 Laura Abbott 2015-05-11 21:33:32 UTC 
Created attachment 1024353 [details]
Possible fix for dvb oops

Can you try the following patch?
Comment 3 Pekka Harjamäki 2015-05-15 09:23:43 UTC 
Patch seems to work. I compiled 3.19.7-200.fc21.x86_64 from source and connected usb stick -> crash   then applied patch and recompiled, and now it works:

[  114.114030] SELinux: initialized (dev tmpfs, type tmpfs), uses transition SIDs
[  134.237030] usb 1-1: new high-speed USB device number 2 using ehci-pci
[  134.351966] usb 1-1: New USB device found, idVendor=2040, idProduct=9580
[  134.351973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.351977] usb 1-1: Product: NovaT 500Stick
[  134.351980] usb 1-1: Manufacturer: Hauppauge
[  134.351982] usb 1-1: SerialNumber: 4028638203
[  135.429717] dvb-usb: found a 'Hauppauge Nova-TD Stick/Elgato Eye-TV Diversity' in cold state, will try to load a firmware
[  135.431295] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  135.632704] dib0700: firmware started successfully.
[  136.133212] dvb-usb: found a 'Hauppauge Nova-TD Stick/Elgato Eye-TV Diversity' in warm state.
[  136.133295] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  136.133336] DVB: registering new adapter (Hauppauge Nova-TD Stick/Elgato Eye-TV Diversity)
[  136.359834] usb 1-1: DVB: registering adapter 0 frontend 0 (DiBcom 7000PC)...
[  136.369208] MT2266: successfully identified
[  136.516077] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  136.516207] DVB: registering new adapter (Hauppauge Nova-TD Stick/Elgato Eye-TV Diversity)
[  136.653708] usb 1-1: DVB: registering adapter 1 frontend 0 (DiBcom 7000PC)...
[  136.657334] MT2266: successfully identified
[  136.831017] Registered IR keymap rc-dib0700-rc5
[  136.831227] input: IR-receiver inside an USB DVB receiver as /devices/pci0000:00/0000:00:1a.7/usb1/1-1/rc/rc0/input11
[  136.831480] rc0: IR-receiver inside an USB DVB receiver as /devices/pci0000:00/0000:00:1a.7/usb1/1-1/rc/rc0
[  136.831577] dvb-usb: schedule remote query interval to 50 msecs.
[  136.831581] dvb-usb: Hauppauge Nova-TD Stick/Elgato Eye-TV Diversity successfully initialized and connected.
[  136.831743] usbcore: registered new interface driver dvb_usb_dib0700



Btw.. this bug might be related to same problem:  
https://bugzilla.redhat.com/show_bug.cgi?id=1185116
Comment 4 Laura Abbott 2015-05-15 17:28:20 UTC 
Thanks for the confirmation. I'll work on submitting this upstream. Once it gets accepted we will bring it in.
Comment 5 Laura Abbott 2015-05-15 17:28:47 UTC 
*** Bug 1185116 has been marked as a duplicate of this bug. ***
Comment 6 Fedora Update System 2015-05-19 11:39:56 UTC 
kernel-4.0.4-300.fc22 has been submitted as an update for Fedora 22.
https://admin.fedoraproject.org/updates/kernel-4.0.4-300.fc22
Comment 7 Fedora Update System 2015-05-19 11:41:41 UTC 
kernel-4.0.4-200.fc21 has been submitted as an update for Fedora 21.
https://admin.fedoraproject.org/updates/kernel-4.0.4-200.fc21
Comment 8 Fedora Update System 2015-05-20 02:52:42 UTC 
Package kernel-4.0.4-300.fc22:
* should fix your issue,
* was pushed to the Fedora 22 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing kernel-4.0.4-300.fc22'
as soon as you are able to, then reboot.
Please go to the following url:
https://admin.fedoraproject.org/updates/FEDORA-2015-8534/kernel-4.0.4-300.fc22
then log in and leave karma (feedback).
Comment 9 Fedora Update System 2015-05-21 19:58:48 UTC 
kernel-4.0.4-201.fc21 has been submitted as an update for Fedora 21.
https://admin.fedoraproject.org/updates/kernel-4.0.4-201.fc21
Comment 10 Fedora Update System 2015-05-22 21:08:10 UTC 
kernel-4.0.4-100.fc20 has been submitted as an update for Fedora 20.
https://admin.fedoraproject.org/updates/kernel-4.0.4-100.fc20
Comment 11 Fedora Update System 2015-05-26 03:38:24 UTC 
kernel-4.0.4-300.fc22 has been pushed to the Fedora 22 stable repository.  If problems still persist, please make note of it in this bug report.
Comment 12 Fedora Update System 2015-05-27 16:05:21 UTC 
kernel-4.0.4-201.fc21 has been pushed to the Fedora 21 stable repository.  If problems still persist, please make note of it in this bug report.
Comment 13 Fedora Update System 2015-05-28 20:42:08 UTC 
kernel-4.0.4-101.fc20 has been submitted as an update for Fedora 20.
https://admin.fedoraproject.org/updates/kernel-4.0.4-101.fc20
Note You need to log in before you can comment on or make changes to this bug.