https://bugzilla.novell.com/show_bug.cgi?id=783858 https://bugzilla.novell.com/show_bug.cgi?id=783858#c0 Summary: Connecting two USB bluetooth dobgles causing crash Classification: openSUSE Product: openSUSE 12.2 Version: Final Platform: i686 OS/Version: openSUSE 12.2 Status: NEW Severity: Normal Priority: P5 - None Component: Kernel AssignedTo: kernel-maintainers@forge.provo.novell.com ReportedBy: tosiara@gmail.com QAContact: qa-bugs@suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux i686; rv:15.0) Gecko/20100101 Firefox/15.0.1 When connecting two usb bluetooth dongles kernel reportes crash and switches to console tty [ 1728.853138] usb 3-2: new full-speed USB device number 4 using xhci_hcd [ 1728.865927] usb 3-2: New USB device found, idVendor=1310, idProduct=0001 [ 1728.865936] usb 3-2: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1728.865943] usb 3-2: Product: SiW [ 1728.865947] usb 3-2: Manufacturer: SiW [ 1728.865951] usb 3-2: SerialNumber: 1379080D0B00 [ 1733.551908] usb 3-1: new full-speed USB device number 5 using xhci_hcd [ 1733.565135] usb 3-1: New USB device found, idVendor=0c10, idProduct=0000 [ 1733.565145] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1733.565151] usb 3-1: Product: Bluetooth Device [ 1733.565156] usb 3-1: Manufacturer: Bluetooth Device [ 1733.565161] usb 3-1: SerialNumber: 4A5313940A00 [ 1733.565965] ------------[ cut here ]------------ [ 1733.565985] WARNING: at /home/abuild/rpmbuild/BUILD/kernel-desktop-3.4.6/linux-3.4/fs/sysfs/dir.c:508 sysfs_add_one+0x9e/0xc0() [ 1733.565993] Hardware name: SATELLITE L850-15X [ 1733.565999] sysfs: cannot create duplicate filename '/class/bluetooth/hci0' [ 1733.566004] Modules linked in: nls_iso8859_1 nls_cp437 vfat fat fuse rfcomm bnep af_packet cpufreq_conservative cpufreq_userspace cpufreq_powersave arc4 ath9k mac80211 snd_hda_codec_hdmi ath9k_common ath9k_hw snd_hda_codec_realtek snd_hda_intel ath cfg80211 acpi_cpufreq btusb mperf snd_hda_codec i2c_i801 sparse_keymap uvcvideo iTCO_wdt sr_mod coretemp mei(C) videobuf2_core videodev videobuf2_vmalloc videobuf2_memops snd_hwdep snd_pcm snd_seq snd_timer snd_seq_device r8169 wmi sg snd bluetooth usb_storage rfkill video button battery ac cdrom iTCO_vendor_support toshiba_bluetooth soundcore snd_page_alloc serio_raw joydev pcspkr crc32c_intel aesni_intel cryptd aes_i586 microcode autofs4 radeon ttm drm_kms_helper drm i2c_algo_bit xhci_hcd thermal processor thermal_sys scsi_dh_hp_sw scsi_dh_emc scsi_dh_rdac scsi_dh_alua scsi_dh [ 1733.566201] Pid: 41, comm: khubd Tainted: G C 3.4.6-2.10-desktop #1 [ 1733.566208] Call Trace: [ 1733.566235] [<c02054b9>] try_stack_unwind+0x199/0x1b0 [ 1733.566257] [<c02041d7>] dump_trace+0x47/0xf0 [ 1733.566274] [<c020551b>] show_trace_log_lvl+0x4b/0x60 [ 1733.566288] [<c0205548>] show_trace+0x18/0x20 [ 1733.566304] [<c06efe8f>] dump_stack+0x6d/0x72 [ 1733.566322] [<c02330c8>] warn_slowpath_common+0x78/0xb0 [ 1733.566338] [<c0233193>] warn_slowpath_fmt+0x33/0x40 [ 1733.566352] [<c0390d1e>] sysfs_add_one+0x9e/0xc0 [ 1733.566371] [<c039186d>] sysfs_do_create_link+0xfd/0x1e0 [ 1733.566388] [<c039195f>] sysfs_create_link+0xf/0x20 [ 1733.566405] [<c053b150>] device_add+0x2f0/0x670 [ 1733.566456] [<f8686a1b>] hci_add_sysfs+0x4b/0x130 [bluetooth] [ 1733.566614] [<f866f408>] hci_register_dev+0x508/0x680 [bluetooth] [ 1733.566639] [<f7f0855f>] btusb_probe+0x39f/0x5b0 [btusb] [ 1733.566659] [<c05925e9>] usb_probe_interface+0xd9/0x220 [ 1733.566674] [<c053d7cb>] driver_probe_device+0x7b/0x350 [ 1733.566686] [<c053bd44>] bus_for_each_drv+0x34/0x70 [ 1733.566697] [<c053d6d2>] device_attach+0x82/0xa0 [ 1733.566709] [<c053cc2f>] bus_probe_device+0x5f/0x80 [ 1733.566720] [<c053b40a>] device_add+0x5aa/0x670 [ 1733.566731] [<c0590d27>] usb_set_configuration+0x477/0x6d0 [ 1733.566741] [<c0599215>] generic_probe+0x35/0x90 [ 1733.566752] [<c059275c>] usb_probe_device+0x2c/0x70 [ 1733.566762] [<c053d7cb>] driver_probe_device+0x7b/0x350 [ 1733.566772] [<c053bd44>] bus_for_each_drv+0x34/0x70 [ 1733.566803] [<c053d6d2>] device_attach+0x82/0xa0 [ 1733.566820] [<c053cc2f>] bus_probe_device+0x5f/0x80 [ 1733.566835] [<c053b40a>] device_add+0x5aa/0x670 [ 1733.566853] [<c0589107>] usb_new_device+0x187/0x270 [ 1733.566867] [<c058a040>] hub_port_connect_change+0x390/0xa40 [ 1733.566882] [<c058ab98>] hub_events+0x4a8/0x900 [ 1733.566896] [<c058b015>] hub_thread+0x25/0x1a0 [ 1733.566911] [<c025043f>] kthread+0x6f/0x80 [ 1733.566929] [<c0701c66>] kernel_thread_helper+0x6/0xd [ 1733.566941] ---[ end trace 925cb9091008961f ]--- [ 1733.567475] btusb: probe of 3-1:1.0 failed with error -17 When you disconnect one of them you will get crash Reproducible: Always Steps to Reproduce: 1. Connect USB dongle 1310:0001 2. Connect USB dongle 0c10:0000 3. Note kernel stack dump in dmesg 4. Disconnect USB dongle 0c10:0000 5. crash happens and you are switched to tty Actual Results: Crash: [ 1977.904186] usb 3-1: USB disconnect, device number 5 [ 1977.904453] BUG: unable to handle kernel NULL pointer dereference at 00000172 [ 1977.904564] IP: [<c053d1c6>] dev_set_drvdata+0x6/0x30 [ 1977.904642] *pdpt = 0000000000000000 *pde = f000ff53f000ff53 [ 1977.904724] Oops: 0000 [#1] PREEMPT SMP [ 1977.904788] Modules linked in: nls_iso8859_1 nls_cp437 vfat fat fuse rfcomm bnep af_packet cpufreq_conservative cpufreq_userspace cpufreq_powersave arc4 ath9k mac80211 snd_hda_codec_hdmi ath9k_common ath9k_hw snd_hda_codec_realtek snd_hda_intel ath cfg80211 acpi_cpufreq btusb mperf snd_hda_codec i2c_i801 sparse_keymap uvcvideo iTCO_wdt sr_mod coretemp mei(C) videobuf2_core videodev videobuf2_vmalloc videobuf2_memops snd_hwdep snd_pcm snd_seq snd_timer snd_seq_device r8169 wmi sg snd bluetooth usb_storage rfkill video button battery ac cdrom iTCO_vendor_support toshiba_bluetooth soundcore snd_page_alloc serio_raw joydev pcspkr crc32c_intel aesni_intel cryptd aes_i586 microcode autofs4 radeon ttm drm_kms_helper drm i2c_algo_bit xhci_hcd thermal processor thermal_sys scsi_dh_hp_sw scsi_dh_emc scsi_dh_rdac scsi_dh_alua scsi_dh [ 1977.906298] [ 1977.906324] Pid: 41, comm: khubd Tainted: G WC 3.4.6-2.10-desktop #1 TOSHIBA SATELLITE L850-15X/Type2 - Board Product Name1 [ 1977.906478] EIP: 0060:[<c053d1c6>] EFLAGS: 00010282 CPU: 0 [ 1977.906550] EIP is at dev_set_drvdata+0x6/0x30 [ 1977.906605] EAX: 0000016e EBX: 0000016e ECX: c0c14446 EDX: 00000000 [ 1977.906680] ESI: f68dec00 EDI: b30e2103 EBP: f2727dd0 ESP: f2727da8 [ 1977.906755] DS: 007b ES: 007b FS: 00d8 GS: 0000 SS: 0068 [ 1977.906821] CR0: 8005003b CR2: 00000172 CR3: 00b23000 CR4: 000407f0 [ 1977.906895] DR0: 00000000 DR1: 00000000 DR2: 00000000 DR3: 00000000 [ 1977.906970] DR6: ffff0ff0 DR7: 00000400 [ 1977.907018] Process khubd (pid: 41, ti=f2726000 task=f2725260 task.ti=f2726000) [ 1977.907104] Stack: [ 1977.907132] 00000000 f63817c0 f7f0804d 00000002 f01b08c8 00000000 c059003e f7f0a214 [ 1977.907260] f68dec1c f68dec00 00000000 c0592104 f67e5800 f68dec1c f7f0a214 c0a80b80 [ 1977.907386] f2727e24 c053d447 f68dec50 f68dec1c c053d4bd f270dbb0 f68dec1c c053ccfe [ 1977.907513] Call Trace: [ 1977.907565] [<f7f0804d>] btusb_disconnect+0x3d/0xd0 [btusb] [ 1977.907657] [<c0592104>] usb_unbind_interface+0x34/0x130 [ 1977.907731] [<c053d447>] __device_release_driver+0x57/0xb0 [ 1977.907805] [<c053d4bd>] device_release_driver+0x1d/0x30 [ 1977.907878] [<c053ccfe>] bus_remove_device+0xae/0x110 [ 1977.907946] [<c053a92d>] device_del+0xdd/0x150 [ 1977.908008] [<c05900d6>] usb_disable_device+0x86/0x230 [ 1977.908079] [<c0588a11>] usb_disconnect+0x81/0x110 [ 1977.908143] [<c0589d49>] hub_port_connect_change+0x99/0xa40 [ 1977.908215] [<c058ab98>] hub_events+0x4a8/0x900 [ 1977.908278] [<c058b015>] hub_thread+0x25/0x1a0 [ 1977.908341] [<c025043f>] kthread+0x6f/0x80 [ 1977.908403] [<c0701c66>] kernel_thread_helper+0x6/0xd [ 1977.908467] Code: 04 c7 44 24 08 64 a4 89 c0 c7 04 24 e8 62 a9 c0 e8 e0 78 f5 ff eb b2 8d b4 26 00 00 00 00 8d bc 27 00 00 00 00 53 89 c3 83 ec 04 <8b> 48 04 85 c9 74 0b 89 51 4c 31 c0 83 c4 04 5b c3 90 89 14 24 [ 1977.908965] EIP: [<c053d1c6>] dev_set_drvdata+0x6/0x30 SS:ESP 0068:f2727da8 [ 1977.909064] CR2: 0000000000000172 [ 1977.924399] ---[ end trace 925cb90910089620 ]--- Expected Results: Should not crash -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.