Bug#980140: usbip: kernel bug when removing usbip_host (started very recently)
Package: usbip
Version: 2.0+4.19.160-2
Severity: important
Dear Maintainer,
usbip stops working (this has been a long standing issue) and not the
bug I'm reporting.
Previously, when this happens I would do rmmod usbip_host, modprobe
usbip_host and then it would start working again.
Now, when I do rmmod usbip_host after this happens I get a kernel gpf,
the reference count in lsmod goes negative, and the only thing that will
unstick things is a reboot (which is a problem as this is running on a
xen dom-0).
I'd never seen this issue prior to 11th Jan this year (and I've been
running with this setup since March 2020 (COVID WFH)
There was a xen hypervisor upgrade:
-rw-r--r-- 1 root root 616 Dec 16 06:25 /var/lib/dpkg/info/xen-hypervisor-4.11-amd64.list
which I rebooted to pick up on 18th December.
Due to the break I was not using usbip much until January.
First failure was January 11th:
Jan 11 09:08:20 xen17 vmunix: [2030320.071228] usbcore: deregistering device driver usbip-host
Jan 11 09:08:20 xen17 vmunix: [2030320.071373] usbip-host 1-1.2: recv a header, 0
Jan 11 09:08:20 xen17 vmunix: [2030320.072303] general protection fault: 0000 [#1] SMP NOPTI
Jan 11 09:08:20 xen17 vmunix: [2030320.073007] CPU: 3 PID: 4302 Comm: rmmod Not tainted 4.19.0-13-amd64 #1 Debian 4.19.160-2
Jan 11 09:08:20 xen17 vmunix: [2030320.073791] Hardware name: To Be Filled By O.E.M. To Be Filled By O.E.M./J1900D2Y, BIOS P1.10 01/23/2015
Jan 11 09:08:20 xen17 vmunix: [2030320.074710] RIP: e030:__mutex_lock.isra.8+0x168/0x4a0
Jan 11 09:08:20 xen17 vmunix: [2030320.075575] Code: 39 9a ff 66 90 31 c0 48 8b 5c 24 48 65 48 33 1c 25 28 00 00 00 0f 8 5 3d 03 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 <8b> 50 38 85 d2 0f 85 45 02 00 00 65 48 8b 04 25 40 5c 01 00 48 8b
Jan 11 09:08:20 xen17 vmunix: [2030320.077619] RSP: e02b:ffffc90042287de0 EFLAGS: 00010202
Jan 11 09:08:20 xen17 vmunix: [2030320.078720] RAX: 0001cdbfb0080120 RBX: ffff8882f38a58a0 RCX: 0000000000000000
Jan 11 09:08:20 xen17 vmunix: [2030320.079874] RDX: 0001cdbfb0080120 RSI: ffff88811eebde80 RDI: ffff8882f38a5900
Jan 11 09:08:20 xen17 vmunix: [2030320.081022] RBP: ffffc90042287e58 R08: 0000000000000000 R09: ffffffff81534000
Jan 11 09:08:20 xen17 vmunix: [2030320.082195] R10: ffff8882b3f63b50 R11: 0000000000000001 R12: 0000000000000000
Jan 11 09:08:20 xen17 vmunix: [2030320.083407] R13: 0000000000000002 R14: 0000000000000000 R15: ffff8882f38a5900
Jan 11 09:08:20 xen17 vmunix: [2030320.084650] FS: 00007f3dfb5b6480(0000) GS:ffff88846c980000(0000) knlGS:0000000000000000
Jan 11 09:08:20 xen17 vmunix: [2030320.085939] CS: e033 DS: 0000 ES: 0000 CR0: 0000000080050033
Jan 11 09:08:20 xen17 vmunix: [2030320.087255] CR2: 0000555c9f56c8d8 CR3: 00000003fabf0000 CR4: 0000000000000660
Jan 11 09:08:20 xen17 vmunix: [2030320.088634] Call Trace:
Jan 11 09:08:20 xen17 vmunix: [2030320.090070] ? __kernfs_remove.part.15+0x100/0x1e0
Jan 11 09:08:20 xen17 vmunix: [2030320.091553] ? kobject_uevent_env+0x120/0x650
Jan 11 09:08:20 xen17 vmunix: [2030320.092997] __device_attach+0x34/0x160
Jan 11 09:08:20 xen17 vmunix: [2030320.094483] do_rebind.isra.1+0x32/0x80 [usbip_host]
Jan 11 09:08:20 xen17 vmunix: [2030320.096012] usbip_host_exit+0x8b/0xf9f [usbip_host]
Jan 11 09:08:20 xen17 vmunix: [2030320.097517] __x64_sys_delete_module+0x190/0x2e0
Jan 11 09:08:20 xen17 vmunix: [2030320.099035] do_syscall_64+0x53/0x110
Jan 11 09:08:20 xen17 vmunix: [2030320.100561] entry_SYSCALL_64_after_hwframe+0x44/0xa9
Jan 11 09:08:20 xen17 vmunix: [2030320.102154] RIP: 0033:0x7f3dfb6d6dd7
Jan 11 09:08:20 xen17 vmunix: [2030320.103742] Code: 73 01 c3 48 8b 0d b9 10 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 b0 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 89 10 0c 00 f7 d8 64 89 01 48
Jan 11 09:08:20 xen17 vmunix: [2030320.107223] RSP: 002b:00007ffc17301928 EFLAGS: 00000206 ORIG_RAX: 00000000000000b0
Jan 11 09:08:20 xen17 vmunix: [2030320.109046] RAX: ffffffffffffffda RBX: 0000555c9f5645b0 RCX: 00007f3dfb6d6dd7
Jan 11 09:08:20 xen17 vmunix: [2030320.110904] RDX: 000000000000000a RSI: 0000000000000800 RDI: 0000555c9f564618
Jan 11 09:08:20 xen17 vmunix: [2030320.112789] RBP: 0000000000000000 R08: 00007ffc173008a1 R09: 0000000000000000
Jan 11 09:08:20 xen17 vmunix: [2030320.114716] R10: 00007f3dfb748ae0 R11: 0000000000000206 R12: 00007ffc17301b50
Jan 11 09:08:20 xen17 vmunix: [2030320.116649] R13: 00007ffc17302e49 R14: 0000555c9f562260 R15: 0000555c9f5645b0
Jan 11 09:08:20 xen17 vmunix: [2030320.118613] Modules linked in: usbip_host(-) usbip_core usblp dm_snapshot dm_bufio xen_netback xen_blkback xen_gntdev xen_evtchn xenfs xen_privcmd bridge stp llc nls_ascii nls_cp437 vfat fat ib_iser rdma_cm iw_cm ib_cm ib_core configfs iscsi_tcp libiscsi_tcp libiscsi scsi_transport_iscsi hci_uart btqca btrtl btbcm btintel snd_hda_codec_hdmi uvcvideo ast joydev videobuf2_vmalloc bluetooth intel_soc_dts_thermal intel_soc_dts_iosf ipmi_ssif videobuf2_memops ttm snd_hda_intel intel_powerclamp videobuf2_v4l2 snd_usb_audio hid_generic crct10dif_pclmul snd_hda_codec evdev asix crc32_pclmul snd_usbmidi_lib videobuf2_common drm_kms_helper snd_rawmidi snd_hda_core usbnet ghash_clmulni_intel snd_hwdep snd_seq_device mii videodev drbg snd_pcm libphy media usbhid snd_timer drm snd soundcore ansi_cprng iTCO_wdt
Jan 11 09:08:20 xen17 vmunix: [2030320.134693] sg iTCO_vendor_support ipmi_si ipmi_devintf ecdh_generic ipmi_msghandler rfkill video pwm_lpss_platform pwm_lpss button ext4 uas usb_storage crc16 mbcache jbd2 fscrypto ecb crypto_simd cryptd glue_helper aes_x86_64 dm_mod raid10 raid456 async_raid6_recov async_memcpy async_pq async_xor async_tx xor raid6_pq libcrc32c crc32c_generic raid0 multipath linear raid1 md_mod sd_mod ahci xhci_pci libahci xhci_hcd libata scsi_mod igb usbcore crc32c_intel i2c_i801 fan lpc_ich i2c_algo_bit mfd_core dca usb_common thermal i2c_hid hid [last unloaded: usbip_host]
Jan 11 09:08:20 xen17 vmunix: [2030320.148587] ---[ end trace ecfc3b14340c4247 ]---
Jan 11 09:08:20 xen17 vmunix: [2030320.151527] RIP: e030:__mutex_lock.isra.8+0x168/0x4a0
Jan 11 09:08:20 xen17 vmunix: [2030320.154457] Code: 39 9a ff 66 90 31 c0 48 8b 5c 24 48 65 48 33 1c 25 28 00 00 00 0f 85 3d 03 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 <8b> 50 38 85 d2 0f 85 45 02 00 00 65 48 8b 04 25 40 5c 01 00 48 8b
Jan 11 09:08:20 xen17 vmunix: [2030320.160396] RSP: e02b:ffffc90042287de0 EFLAGS: 00010202
Jan 11 09:08:20 xen17 vmunix: [2030320.163400] RAX: 0001cdbfb0080120 RBX: ffff8882f38a58a0 RCX: 0000000000000000
Jan 11 09:08:20 xen17 vmunix: [2030320.166386] RDX: 0001cdbfb0080120 RSI: ffff88811eebde80 RDI: ffff8882f38a5900
Jan 11 09:08:20 xen17 vmunix: [2030320.169241] RBP: ffffc90042287e58 R08: 0000000000000000 R09: ffffffff81534000
Jan 11 09:08:20 xen17 vmunix: [2030320.172095] R10: ffff8882b3f63b50 R11: 0000000000000001 R12: 0000000000000000
Jan 11 09:08:20 xen17 vmunix: [2030320.174953] R13: 0000000000000002 R14: 0000000000000000 R15: ffff8882f38a5900
Jan 11 09:08:20 xen17 vmunix: [2030320.177786] FS: 00007f3dfb5b6480(0000) GS:ffff88846c980000(0000) knlGS:0000000000000000
Jan 11 09:08:20 xen17 vmunix: [2030320.180573] CS: e033 DS: 0000 ES: 0000 CR0: 0000000080050033
Jan 11 09:08:20 xen17 vmunix: [2030320.183447] CR2: 0000555c9f56c8d8 CR3: 00000003fabf0000 CR4: 0000000000000660
Second failure as Jan 13th (for which I've only just rebooted for)
Jan 13 10:31:49 xen17 vmunix: [177522.889066] BUG: unable to handle kernel NULL pointer dereference at 00000000000000a0
Jan 13 10:31:49 xen17 vmunix: [177522.890162] PGD 0 P4D 0
Jan 13 10:31:49 xen17 vmunix: [177522.891259] Oops: 0000 [#1] SMP NOPTI
Jan 13 10:31:49 xen17 vmunix: [177522.892301] CPU: 3 PID: 20190 Comm: rmmod Not tainted 4.19.0-13-amd64 #1 Debian 4.19.160-2
Jan 13 10:31:49 xen17 vmunix: [177522.893373] Hardware name: To Be Filled By O.E.M. To Be Filled By O.E.M./J1900D2Y, BIOS P1.10 01/23/2015
Jan 13 10:31:49 xen17 vmunix: [177522.894551] RIP: e030:__device_attach+0x38/0x160
Jan 13 10:31:49 xen17 vmunix: [177522.895697] Code: e4 55 48 8d 6f 60 53 48 89 fb 48 89 ef 48 83 ec 18 65 48 8b 04 25 28 00 00 00 48 89 44 24 10 31 c0 e8 1c bb 1f 00 48 8b 7b 08 <f6> 87 a0 00 00 00 01 75 22 48 83 bb 88 00 00 00 00 74 5e 48 85 ff
Jan 13 10:31:49 xen17 vmunix: [177522.898293] RSP: e02b:ffffc900421ffe68 EFLAGS: 00010246
Jan 13 10:31:49 xen17 vmunix: [177522.899642] RAX: 0000000000000000 RBX: ffff88845f2c30a0 RCX: 0000000000000000
Jan 13 10:31:49 xen17 vmunix: [177522.901045] RDX: ffff88828a240000 RSI: 0000000000000000 RDI: 0000000000000000
Jan 13 10:31:49 xen17 vmunix: [177522.902470] RBP: ffff88845f2c3100 R08: 0000000000000000 R09: ffffffff81534000
Jan 13 10:31:49 xen17 vmunix: [177522.903905] R10: ffff8883f9581070 R11: 0000000000000001 R12: 0000000000000000
Jan 13 10:31:49 xen17 vmunix: [177522.905349] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
Jan 13 10:31:49 xen17 vmunix: [177522.906817] FS: 00007f1208b1b480(0000) GS:ffff88846c980000(0000) knlGS:0000000000000000
Jan 13 10:31:49 xen17 vmunix: [177522.908320] CS: e033 DS: 0000 ES: 0000 CR0: 0000000080050033
Jan 13 10:31:49 xen17 vmunix: [177522.909854] CR2: 00000000000000a0 CR3: 00000002f1fac000 CR4: 0000000000000660
Jan 13 10:31:49 xen17 vmunix: [177522.911433] Call Trace:
Jan 13 10:31:49 xen17 vmunix: [177522.913011] do_rebind.isra.1+0x32/0x80 [usbip_host]
Jan 13 10:31:49 xen17 vmunix: [177522.914604] usbip_host_exit+0x8b/0xf9f [usbip_host]
Jan 13 10:31:49 xen17 vmunix: [177522.916217] __x64_sys_delete_module+0x190/0x2e0
Jan 13 10:31:49 xen17 vmunix: [177522.917837] do_syscall_64+0x53/0x110
Jan 13 10:31:49 xen17 vmunix: [177522.919428] entry_SYSCALL_64_after_hwframe+0x44/0xa9
Jan 13 10:31:49 xen17 vmunix: [177522.921055] RIP: 0033:0x7f1208c3bdd7
Jan 13 10:31:49 xen17 vmunix: [177522.922695] Code: 73 01 c3 48 8b 0d b9 10 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 b0 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 89 10 0c 00 f7 d8 64 89 01 48
Jan 13 10:31:49 xen17 vmunix: [177522.926265] RSP: 002b:00007ffd96652ac8 EFLAGS: 00000206 ORIG_RAX: 00000000000000b0
Jan 13 10:31:49 xen17 vmunix: [177522.928147] RAX: ffffffffffffffda RBX: 00005628007385b0 RCX: 00007f1208c3bdd7
Jan 13 10:31:49 xen17 vmunix: [177522.930078] RDX: 000000000000000a RSI: 0000000000000800 RDI: 0000562800738618
Jan 13 10:31:49 xen17 vmunix: [177522.932056] RBP: 0000000000000000 R08: 00007ffd96651a41 R09: 0000000000000000
Jan 13 10:31:49 xen17 vmunix: [177522.933987] R10: 00007f1208cadae0 R11: 0000000000000206 R12: 00007ffd96652cf0
Jan 13 10:31:49 xen17 vmunix: [177522.935935] R13: 00007ffd96654e47 R14: 0000562800736260 R15: 00005628007385b0
Jan 13 10:31:49 xen17 vmunix: [177522.937902] Modules linked in: dm_snapshot dm_bufio usbip_host(-) usbip_core xen_netback xen_blkback xen_gntdev xen_evtchn xenfs xen_privcmd bridge stp llc nls_ascii nls_cp437 vfat fat ib_iser rdma_cm iw_cm ib_cm ib_core configfs iscsi_tcp libiscsi_tcp libiscsi scsi_transport_iscsi ipmi_ssif hci_uart btqca btrtl joydev intel_soc_dts_thermal intel_soc_dts_iosf intel_powerclamp btbcm snd_hda_codec_hdmi ast crct10dif_pclmul uvcvideo crc32_pclmul btintel videobuf2_vmalloc snd_hda_intel videobuf2_memops ttm videobuf2_v4l2 hid_generic snd_hda_codec bluetooth evdev snd_usb_audio videobuf2_common drm_kms_helper ghash_clmulni_intel snd_usbmidi_lib snd_hda_core snd_rawmidi asix snd_hwdep drm snd_seq_device videodev usbnet snd_pcm iTCO_wdt iTCO_vendor_support mii drbg libphy media snd_timer usbhid ansi_cprng
Jan 13 10:31:49 xen17 vmunix: [177522.953614] snd ipmi_si sg soundcore ipmi_devintf ecdh_generic ipmi_msghandler rfkill video pwm_lpss_platform pwm_lpss button ext4 crc16 mbcache jbd2 fscrypto ecb crypto_simd cryptd glue_helper aes_x86_64 dm_mod uas usb_storage raid10 raid456 async_raid6_recov async_memcpy async_pq async_xor async_tx xor raid6_pq libcrc32c crc32c_generic raid0 multipath linear raid1 md_mod sd_mod xhci_pci xhci_hcd ahci libahci usbcore igb libata crc32c_intel usb_common scsi_mod lpc_ich i2c_i801 i2c_algo_bit mfd_core dca thermal fan i2c_hid hid
Jan 13 10:31:49 xen17 vmunix: [177522.967059] CR2: 00000000000000a0
Jan 13 10:31:49 xen17 vmunix: [177522.969979] ---[ end trace e9ff311defbd7c02 ]---
Jan 13 10:31:49 xen17 vmunix: [177522.972884] RIP: e030:__device_attach+0x38/0x160
Jan 13 10:31:49 xen17 vmunix: [177522.975778] Code: e4 55 48 8d 6f 60 53 48 89 fb 48 89 ef 48 83 ec 18 65 48 8b 04 25 28 00 00 00 48 89 44 24 10 31 c0 e8 1c bb 1f 00 48 8b 7b 08 <f6> 87 a0 00 00 00 01 75 22 48 83 bb 88 00 00 00 00 74 5e 48 85 ff
Jan 13 10:31:49 xen17 vmunix: [177522.981713] RSP: e02b:ffffc900421ffe68 EFLAGS: 00010246
Jan 13 10:31:49 xen17 vmunix: [177522.984738] RAX: 0000000000000000 RBX: ffff88845f2c30a0 RCX: 0000000000000000
Jan 13 10:31:50 xen17 vmunix: [177522.987785] RDX: ffff88828a240000 RSI: 0000000000000000 RDI: 0000000000000000
Jan 13 10:31:50 xen17 vmunix: [177522.990696] RBP: ffff88845f2c3100 R08: 0000000000000000 R09: ffffffff81534000
Jan 13 10:31:50 xen17 vmunix: [177522.993629] R10: ffff8883f9581070 R11: 0000000000000001 R12: 0000000000000000
Jan 13 10:31:50 xen17 vmunix: [177522.996512] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
Jan 13 10:31:50 xen17 vmunix: [177522.999345] FS: 00007f1208b1b480(0000) GS:ffff88846c980000(0000) knlGS:0000000000000000
Jan 13 10:31:50 xen17 vmunix: [177523.002089] CS: e033 DS: 0000 ES: 0000 CR0: 0000000080050033
Jan 13 10:31:50 xen17 vmunix: [177523.004879] CR2: 00000000000000a0 CR3: 00000002f1fac000 CR4: 0000000000000660
-- System Information:
Debian Release: 10.7
APT prefers stable-debug
APT policy: (500, 'stable-debug'), (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 4.19.0-13-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), LANGUAGE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)
Versions of packages usbip depends on:
ii libc6 2.28-10
ii libudev1 241-7~deb10u5
ii libwrap0 7.6.q-28
ii usbutils 1:010-3
usbip recommends no packages.
usbip suggests no packages.
-- no debconf information
Reply to: