Modify

Opened 4 years ago

Last modified 3 years ago

#17378 new defect

USB crash when USB WiFi dongle is used (RTL8192CU) - WDR4300

Reported by: l.baj@… Owned by: developers
Priority: high Milestone:
Component: kernel Version: Trunk
Keywords: Cc:

Description

Hi,

I'm trying to use Edimax USB WiFi dongle (based on RTL8192CU) with TP-Link WDR4300 router. I have tried also two different kernels 3.10.49 and 3.14.12. When I connect this dongle to USB and then disconnect it I see following crash and USB stops working. Any ideas how to fix this problem?

[ 129.650000] usb 1-1.1.1: new high-speed USB device number 5 using ehci-platform
[ 129.780000] rtl8192cu: Chip version 0x10
[ 129.920000] rtl8192cu: MAC address: 80:1f:02:e6:91:36
[ 129.920000] rtl8192cu: Board Type 0
[ 129.920000] rtl_usb: rx_max_size 15360, rx_urb_num 8, in_ep 1
[ 129.930000] rtl8192cu: Loading firmware rtlwifi/rtl8192cufw_TMSC.bin
[ 130.130000] ieee80211 phy2: Selected rate control algorithm 'rtl_rc'
[ 130.140000] rtlwifi: wireless switch is on
[ 143.750000] usb 1-1.1.1: USB disconnect, device number 5
[ 143.780000] CPU 0 Unable to handle kernel paging request at virtual address 00100104, epc == 86e93008, ra == 86e93000
[ 143.790000] Oops#1:
[ 143.790000] CPU: 0 PID: 292 Comm: khubd Not tainted 3.14.12 #1
[ 143.790000] task: 878ad770 ti: 87b0e000 task.ti: 87b0e000
[ 143.790000] $ 0 : 00000000 00000000 00200200 00100100
[ 143.790000] $ 4 : 87b0fce0 87b0fee0 80360000 00000009
[ 143.790000] $ 8 : 000a0040 8622b480 00000020 000a0040
[ 143.790000] $12 : 00000013 0000000e 00000007 00000001
[ 143.790000] $16 : 863311a0 87b0fcd8 00100100 863311a8
[ 143.790000] $20 : 863311a0 00200200 8634f000 87b00438
[ 143.790000] $24 : 8031ee50 800a27c4
[ 143.790000] $28 : 87b0e000 87b0fcc8 00000000 86e93000
[ 143.790000] Hi : 000001d4
[ 143.790000] Lo : 00000006
[ 143.790000] epc : 86e93008 ieee80211_remove_interfaces+
0x128/0x1b4 [mac80211]
[ 143.790000] Not tainted
[ 143.790000] ra : 86e93000 ieee80211_remove_interfaces+0x120/0x1b4 [mac80211]
[ 143.790000] Status: 1100dc03 KERNEL EXL IE
[ 143.790000] Cause : 0080000c
[ 143.790000] BadVA : 00100104
[ 143.790000] PrId : 0001974c (MIPS 74Kc)
[ 143.790000] Modules linked in: ath9k rtl8192cu ath9k_common rtl_usb qcserial pppoe ppp_async option iptable_nat ath9k_hw ath usb_wwan rtlwifi rndis_host qmi_wwan pppox ppp_generic nf_nat_ipv4 nf_conntrack_ipv4 mac80211 ipt_MASQUERADE huawei_cdc_ncm cfg80211 cdc_ncm cdc_ether ax88179_178a asix xt_time xt_tcpmss xt_string xt_statistic xt_state xt_recent xt_quota xt_pkttype xt_owner xt_nfacct xt_nat xt_multiport xt_mark xt_mac xt_limit xt_length xt_hl xt_helper xt_ecn xt_dscp xt_conntrack xt_connmark xt_connlimit xt_connbytes xt_comment xt_addrtype xt_TCPMSS xt_REDIRECT xt_LOG xt_HL xt_DSCP xt_CT xt_CLASSIFY usbserial usbnet ts_kmp ts_fsm ts_bm slhc rtl8192c_common nfnetlink_acct nf_nat_irc nf_nat_ftp nf_nat nf_defrag_ipv4 nf_conntrack_irc nf_conntrack_ftp iptable_raw iptable_mangle iptable_filter ipt_REJECT ipt_ECN ipheth ip_tables crc_ccitt compat cdc_wdm cdc_acm act_connmark act_skbedit act_mirred em_u32 cls_u32 cls_tcindex cls_flow cls_route cls_fw sch_hfsc sch_ingress ledtrig_usbdev ip6t_REJECT ip6table_raw ip6table_mangle ip6table_filter ip6_tables nf_conntrack_ipv6 nf_defrag_ipv6 ifb ipv6 arc4 crypto_blkcipher usb_storage uhci_hcd ohci_hcd ehci_platform ehci_hcd sd_mod scsi_mod gpio_button_hotplug usbcore nls_base usb_common mii crypto_hash
[ 143.790000] Process khubd (pid: 292, threadinfo=87b0e000, task=878ad770, tls=00000000)
[ 143.790000] Stack : 863313a0 86f6efa0 00000000 00000000 87b0fcd8 87b0fcd8 00100100 00200200
[ 143.790000] 8634f000 86330ae0 86331460 86bce220 86f6efa0 00000000 00000000 86e80fac
[ 143.790000] 00000004 86330ae0 86331460 86bce220 86330ae0 86e010a0 87b0fd1c 86123798
[ 143.790000] 86bce220 8634f000 86bce220 8634f000 86bce200 87b2c580 879ffc00 8009c92c
[ 143.790000] 87b39180 801cf05c 86bce220 86f6efa0 87b39180 879ffc00 86bce200 801cf1ec
[ 143.790000] ...
[ 143.790000] Call Trace:
[ 143.790000] [<86e93008>] ieee80211_remove_interfaces+0x128/0x1b4 [mac80211]
[ 143.790000] [<86e80fac>] ieee80211_unregister_hw+0x3c/0xe4 [mac80211]
[ 143.790000] [<86e010a0>] rtl_usb_disconnect+0x4c/0xf4 [rtl_usb]
[ 143.790000] [<87b2c580>] usb_deregister+0x228/0x2ec [usbcore]
[ 143.790000] [<801cf1ec>] device_release_driver+0x6c/0xd0
[ 143.790000] [<801cf278>] device_release_driver+0x28/0x40
[ 143.790000] [<801cec00>] bus_remove_device+0xec/0x120
[ 143.790000] [<801cc334>] device_del+0x110/0x170
[ 143.790000] [<87b2ad58>] usb_disable_device+0xb0/0x1d8 [usbcore]
[ 143.790000] [<87b22920>] usb_disconnect+0xac/0x408 [usbcore]
[ 143.790000] [<87b24a68>] usb_reset_device+0xd28/0x15c8 [usbcore]
[ 143.790000] [<80080cb4>] do_exit+0x72c/0x744
[ 143.790000]
[ 143.790000]
[ 143.790000] Code: 27a40018 8fa2001c 8fa30018 <ac620004> ac430000 8fb00010 3c030010 3c020020 24630100
[ 144.120000] ---[ end trace 5ac30dedb278f0ff ]---

Attachments (0)

Change History (3)

comment:1 Changed 3 years ago by Polydeukes

Hello,

Same problem here. I have tried usb wifi dongles with chipset RTL8187 and RT3070L. I am running OpenWRT Barrier Breaker 14 r41831 on a ASL-26555.

Here is a log when I dettach the dongle:

[58850.480000] CPU 0 Unable to handle kernel paging request at virtual address 00100104, epc == 80812e0c, ra == 80812e04
[58850.500000] Oops#1:
[58850.500000] CPU: 0 PID: 245 Comm: khubd Not tainted 3.10.49 #1
[58850.500000] task: 818610c0 ti: 81b9e000 task.ti: 81b9e000
[58850.500000] $ 0 : 00000000 00000000 00200200 00100100
[58850.500000] $ 4 : 81b9fcb0 81b9fe68 80f1cb80 0000001a
[58850.500000] $ 8 : 0020001b 0020001b 00000000 80f1c680
[58850.500000] $12 : 00000014 00000001 0020001a 00000001
[58850.500000] $16 : 81895180 81b9fca8 00100100 81895188
[58850.500000] $20 : 81895180 00200200 81b78400 81b74338
[58850.500000] $24 : 8028e57c 8003fa70
[58850.500000] $28 : 81b9e000 81b9fc98 00000000 80812e04
[58850.500000] Hi : 00003586
[58850.500000] Lo : 31f48c00
[58850.500000] epc : 80812e0c ieee80211_remove_interfaces+0x128/0x1b4 [mac80211]
[58850.500000] Not tainted
[58850.500000] ra : 80812e04 ieee80211_remove_interfaces+0x120/0x1b4 [mac80211]
[58850.500000] Status: 1100a403 KERNEL EXL IE
[58850.500000] Cause : 0080000c
[58850.500000] BadVA : 00100104
[58850.500000] PrId : 0001964c (MIPS 24KEc)
[58850.500000] Modules linked in: rt2800usb rt2800soc rt2800mmio rt2800lib pppoe ppp_async iptable_nat rtl8187 rt2x00usb rt2x00soc rt2x00mmio rt2x00lib pptp pppox ppp_mppe ppp_generic nf_nat_pptp nf_nat_ipv4 nf_nat_amanda nf_conntrack_pptp nf_conntrack_ipv4 nf_conntrack_amanda mac80211 ipt_MASQUERADE cfg80211 xt_time xt_tcpudp xt_tcpmss xt_string xt_statistic xt_state xt_recent xt_quota xt_pkttype xt_physdev xt_owner xt_nat xt_multiport xt_mark xt_mac xt_limit xt_length xt_hl xt_helper xt_ecn xt_dscp xt_conntrack xt_connmark xt_connlimit xt_connbytes xt_comment xt_addrtype xt_TCPMSS xt_REDIRECT xt_NETMAP xt_LOG xt_HL xt_DSCP xt_CT xt_CLASSIFY vhci_hcd usbip_host usbip_core ums_usbat ums_sddr55 ums_sddr09 ums_karma ums_jumpshot ums_isd200 ums_freecom ums_datafab ums_cypress ums_alauda ts_kmp ts_fsm ts_bm slhc nf_nat_tftp nf_nat_snmp_basic nf_nat_sip nf_nat_proto_gre nf_nat_irc nf_nat_h323 nf_nat_ftp nf_nat nf_defrag_ipv4 nf_conntrack_tftp nf_conntrack_snmp nf_conntrack_sip nf_conntrack_proto_gre nf_conntrack_irc nf_conntrack_h323 nf_conntrack_ftp nf_conntrack_broadcast iptable_raw iptable_mangle iptable_filter ipt_REJECT ipt_ECN ip_tables crc_itu_t crc_ccitt compat act_connmark act_skbedit act_mirred em_u32 cls_u32 cls_tcindex cls_flow cls_route cls_fw sch_hfsc sch_ingress ledtrig_usbdev ip6t_REJECT ip6table_raw ip6table_mangle ip6table_filter ip6_tables x_tables nf_conntrack_ipv6 nf_conntrack nf_defrag_ipv6 nfsv3 nfs ip_gre gre ifb ip_tunnel tun lockd sunrpc dns_resolver ipv6 eeprom_93cx6 sha1_generic ecb arc4 crypto_blkcipher usb_storage leds_gpio dwc_otg ehci_platform ehci_hcd sd_mod scsi_mod gpio_button_hotplug usbcore nls_base usb_common crypto_hash
[58850.500000] Process khubd (pid: 245, threadinfo=81b9e000, task=818610c0, tls=00000000)
[58850.500000] Stack : 81895380 80f1b180 00000000 00000000 81b9fca8 81b9fca8 00100100 00200200
[58850.500000] 00000001 81894ac0 81b78800 81bfcd00 80f1b180 00000000 00000000 80800fac
[58850.500000] 00000003 81894ac0 81b78800 81bfcd00 81894ac0 80f107b4 81b9fcec 800daa5c
[58850.500000] 81bfcd20 81b78800 81bfcd20 81b78800 81bfcd00 81babe68 81b77200 8003a8f8
[58850.500000] 81bb7dd0 8015f5bc 81bfcd20 80f1b180 81bb7dd0 81b77200 81bfcd00 8015f760
[58850.500000] ...
[58850.500000] Call Trace:
[58850.500000] [<80812e0c>] ieee80211_remove_interfaces+0x128/0x1b4 [mac80211]
[58850.500000] [<80800fac>] ieee80211_unregister_hw+0x3c/0xe4 [mac80211]
[58850.500000] [<80f107b4>] 0x80f107b4
[58850.500000]
[58850.500000]
[58850.500000] Code: 27a40018 8fa2001c 8fa30018 <ac620004> ac430000 8fb00010 3c030010 3c020020 24630100
[58851.130000] ---[ end trace d630128d74c2ead9 ]---

And here is a log when I do a "rmmod rtl8187" while the module is still in use (dongle attached):

[ 520.030000] usbcore: deregistering interface driver rtl8187
[ 520.060000] CPU 0 Unable to handle kernel paging request at virtual address 00100104, epc == 80812e0c, ra == 80812e04
[ 520.080000] Oops#1:
[ 520.080000] CPU: 0 PID: 1669 Comm: rmmod Not tainted 3.10.49 #1
[ 520.080000] task: 815c25b0 ti: 818a4000 task.ti: 818a4000
[ 520.080000] $ 0 : 00000000 00000000 00200200 00100100
[ 520.080000] $ 4 : 818a5da0 818a5f58 00000001 00000011
[ 520.080000] $ 8 : 80200012 80200012 00000001 80862600
[ 520.080000] $12 : 00000014 00000001 80200011 00000001
[ 520.080000] $16 : 81895180 818a5d98 00100100 81895188
[ 520.080000] $20 : 81895180 00200200 00000002 0045dc1c
[ 520.080000] $24 : 8028e57c 8003fa70
[ 520.080000] $28 : 818a4000 818a5d88 007f01d5 80812e04
[ 520.080000] Hi : 000003ba
[ 520.080000] Lo : 00000006
[ 520.080000] epc : 80812e0c ieee80211_remove_interfaces+0x128/0x1b4 [mac80211]
[ 520.080000] Not tainted
[ 520.080000] ra : 80812e04 ieee80211_remove_interfaces+0x120/0x1b4 [mac80211]
[ 520.080000] Status: 1100a403 KERNEL EXL IE
[ 520.080000] Cause : 0080000c
[ 520.080000] BadVA : 00100104
[ 520.080000] PrId : 0001964c (MIPS 24KEc)
[ 520.080000] Modules linked in: rt2800usb rt2800soc rt2800mmio rt2800lib pppoe ppp_async iptable_nat rtl8187(-) rt2x00usb rt2x00soc rt2x0h
[ 520.080000] Process rmmod (pid: 1669, threadinfo=818a4000, task=815c25b0, tls=776c6440)
[ 520.080000] Stack : 81895380 8087b180 00000000 0045cefc 818a5d98 818a5d98 00100100 00200200

00000001 81894ac0 81b76400 81b7e100 8087b180 00000000 0045cefc 80800fac
00000003 81894ac0 81b76400 81b7e100 81894ac0 808707b4 818a5ddc 800daa5c
81b7e120 81b76400 81b7e120 81b76400 81b7e100 81babe68 00000000 8003a8f8
81b7e154 8015f5bc 81b7e120 8087b180 81b7e154 00000000 00400000 8015f760
...

[ 520.080000] Call Trace:
[ 520.080000] [<80812e0c>] ieee80211_remove_interfaces+0x128/0x1b4 [mac80211]
[ 520.080000] [<80800fac>] ieee80211_unregister_hw+0x3c/0xe4 [mac80211]
[ 520.080000] [<808707b4>] 0x808707b4
[ 520.080000]
[ 520.080000]
Code: 27a40018 8fa2001c 8fa30018 <ac620004> ac430000 8fb00010 3c030010 3c020020 24630100
[ 520.710000] ---[ end trace 6c96a640941abd01 ]---
Segmentation fault

comment:2 Changed 3 years ago by Polydeukes

I have compiled and tested some releases. The bug appears on release r41776, when the kernel 3.10.49 is added. I have tried the release r41775 with kernel 3.10.44 and works fine. If I use a kernel 3.10.45 or above, the kernel oops occurs again.

Which is the change from the kernel 3.10.44 to 3.10.45 could cause this problem?

comment:3 Changed 3 years ago by Polydeukes

I found this commit in the 3.10.45 kernel:

https://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/commit/?h=linux-3.10.y&id=6a827d8a67f750f3096e668657e16d479363d4b5

Maybe this change breaks the mac80211 module patched with OpenWRT?

Add Comment

Modify Ticket

Action
as new .
Author


E-mail address and user name can be saved in the Preferences.

 
Note: See TracTickets for help on using tickets.