lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <68e02165-e5a3-4751-bdf1-5b6671d42790@molgen.mpg.de>
Date: Tue, 17 Dec 2024 22:57:21 +0100
From: Paul Menzel <pmenzel@...gen.mpg.de>
To: Mathias Nyman <mathias.nyman@...el.com>
Cc: linux-usb@...r.kernel.org, LKML <linux-kernel@...r.kernel.org>
Subject: RIP: 0010:xhci_ring_expansion+0xbd/0x380 [xhci_hcd]

Dear Linux folks,


Attaching a 2 TB external disk to the right port of the Dell XPS 13 9360 
and running `sudo mkfs.ext4 -L "Verbatim HD" /dev/sda1` the command does 
not complete and the system finally locks up and has to be hard reset:

```
[    0.000000] Linux version 6.13.0-rc3-00017-gf44d154d6e3d 
(build@...emianrhapsody.molgen.mpg.de) (gcc (Debian 14.2.0-8) 14.2.0, 
GNU ld (GNU Binutils for Debian) 2.43.50.20241210) #42 SMP 
PREEMPT_DYNAMIC Tue Dec 17 11:17:55 CET 2024
[…]
[    0.000000] DMI: Dell Inc. XPS 13 9360/0596KF, BIOS 2.21.0 06/02/2022
[…]
[  124.234690] RIP: 0010:xhci_ring_expansion+0xbd/0x380 [xhci_hcd]
[  124.234806] Code: ff ff 83 7d 54 04 0f 84 fa 01 00 00 48 85 ed 0f 84 
2e 01 00 00 8b 44 24 40 85 c0 0f 84 82 01 00 00 48 8b 54 24 18 48 8b 45 
08 <48> 8b 52 08 48 89 50 08 48 8b 55 00 48 8b 44 24 18 48 89 50 08 8b
[  124.234819] RSP: 0018:ffffbc1a4093ba08 EFLAGS: 00010046
[  124.234833] RAX: ffff9421ee1b1880 RBX: ffff9421c1aae240 RCX: 
ffff9421ee1b1d80
[  124.234842] RDX: 0000000000000000 RSI: ffffbc1a4093ba08 RDI: 
0000000000001800
[  124.234852] RBP: ffff942213a41880 R08: 0000000000000000 R09: 
0000000000000000
[  124.234861] R10: 0000000000000000 R11: 0000000000000400 R12: 
0000000000000820
[  124.234869] R13: 0000000000000820 R14: 0000000000000000 R15: 
ffff9421ff86c000
[  124.234879] FS:  0000000000000000(0000) GS:ffff94252f080000(0000) 
knlGS:0000000000000000
[  124.234889] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  124.234899] CR2: 0000000000000008 CR3: 00000001bb621002 CR4: 
00000000003726f0
[  124.234909] Call Trace:
[  124.234920]  <TASK>
[  124.234930]  ? __die_body.cold+0x19/0x2b
[  124.234950]  ? page_fault_oops+0x156/0x2d0
[  124.234971]  ? dma_direct_alloc+0xc0/0x270
[  124.234992]  ? exc_page_fault+0x81/0x190
[  124.235009]  ? asm_exc_page_fault+0x26/0x30
[  124.235028]  ? xhci_ring_expansion+0xbd/0x380 [xhci_hcd]
[  124.235111]  ? xhci_ring_expansion+0x95/0x380 [xhci_hcd]
[  124.235184]  prepare_ring+0x22e/0x2b0 [xhci_hcd]
[  124.235272]  prepare_transfer+0x83/0x190 [xhci_hcd]
[  124.235351]  xhci_queue_bulk_tx+0x12e/0xa30 [xhci_hcd]
[  124.235440]  ? __kmalloc_noprof+0x26a/0x500
[  124.235457]  ? xhci_urb_enqueue+0x82/0x390 [xhci_hcd]
[  124.235547]  xhci_urb_enqueue+0x36b/0x390 [xhci_hcd]
[  124.235623]  usb_hcd_submit_urb+0x98/0xc20 [usbcore]
[  124.235754]  ? usb_alloc_urb+0x41/0x70 [usbcore]
[  124.235861]  ? usb_alloc_urb+0x41/0x70 [usbcore]
[  124.235950]  ? usb_alloc_urb+0x55/0x70 [usbcore]
[  124.236039]  usb_sg_wait+0x7e/0x190 [usbcore]
[  124.236149]  usb_stor_bulk_transfer_sglist+0x74/0x120 [usb_storage]
[  124.236178]  usb_stor_Bulk_transport+0x1ab/0x4a0 [usb_storage]
[  124.236200]  ? __schedule+0x4e0/0xb80
[  124.236222]  ? release_everything+0xa0/0xa0 [usb_storage]
[  124.236243]  usb_stor_invoke_transport+0x3b/0x510 [usb_storage]
[  124.236265]  ? release_everything+0xa0/0xa0 [usb_storage]
[  124.236285]  ? __cond_resched+0x31/0x50
[  124.236303]  ? __wait_for_common+0x18f/0x1c0
[  124.236321]  ? hrtimer_nanosleep_restart+0xe0/0xe0
[  124.236337]  ? scsi_io_completion+0x43/0x5f0 [scsi_mod]
[  124.236416]  ? release_everything+0xa0/0xa0 [usb_storage]
[  124.236436]  usb_stor_control_thread+0x1d1/0x290 [usb_storage]
[  124.236461]  kthread+0xcf/0x100
[  124.236480]  ? kthread_park+0x80/0x80
[  124.236496]  ret_from_fork+0x31/0x50
[  124.236515]  ? kthread_park+0x80/0x80
[  124.236530]  ret_from_fork_asm+0x11/0x20
[  124.236552]  </TASK>
[  124.236557] Modules linked in: sd_mod usb_storage scsi_mod 
scsi_common snd_seq_dummy snd_hrtimer snd_seq snd_seq_device 
xfrm_interface xfrm6_tunnel tunnel6 l2tp_ppp l2tp_netlink l2tp_core 
ip6_udp_tunnel xfrm_user xfrm_algo udp_tunnel pppox ppp_generic slhc 
snd_hda_codec_hdmi snd_ctl_led snd_sof_pci_intel_skl 
snd_sof_intel_hda_generic snd_soc_acpi_intel_match snd_soc_acpi 
snd_soc_acpi_intel_sdca_quirks snd_sof_pci snd_sof_xtensa_dsp 
soundwire_intel soundwire_generic_allocation soundwire_cadence 
snd_hda_codec_realtek soundwire_bus snd_hda_codec_generic snd_soc_sdca 
snd_hda_scodec_component snd_sof_intel_hda_common snd_soc_hdac_hda 
snd_sof_intel_hda_mlink snd_sof_intel_hda snd_sof snd_sof_utils 
snd_soc_avs snd_soc_hda_codec binfmt_misc snd_hda_ext_core 
x86_pkg_temp_thermal intel_powerclamp r8153_ecm snd_soc_core cdc_ether 
coretemp usbnet snd_compress snd_hda_intel kvm_intel snd_intel_dspcfg 
snd_intel_sdw_acpi dell_pc kvm iTCO_wdt platform_profile snd_hda_codec 
intel_pmc_bxt iTCO_vendor_support snd_hwdep crct10dif_pclmul
[  124.236769]  crc32_pclmul ghash_clmulni_intel snd_hda_core 
sha512_ssse3 sha512_generic nls_ascii dell_laptop snd_pcm nls_cp437 
sha256_ssse3 btusb ath10k_pci sha1_ssse3 dell_wmi intel_rapl_msr 
wmi_bmof dell_smbios ath10k_core btrtl rapl i2c_i801 ucsi_acpi dcdbas 
btintel r8152 snd_timer mei_wdt intel_cstate vfat fat mei_pxp mei_hdcp 
watchdog dell_wmi_descriptor intel_wmi_thunderbolt dell_smm_hwmon mii 
intel_uncore snd typec_ucsi ath i2c_hid_acpi pcspkr i2c_smbus soundcore 
i915 typec i2c_hid uvcvideo joydev btbcm 
processor_thermal_device_pci_legacy mac80211 videobuf2_vmalloc 
i2c_algo_bit videobuf2_memops uvc bluetooth drm_buddy videobuf2_v4l2 
intel_soc_dts_iosf intel_gtt processor_thermal_device intel_pmc_core 
processor_thermal_wt_hint libarc4 videodev processor_thermal_rfim 
processor_thermal_rapl intel_vsec video intel_rapl_common pmt_telemetry 
int3400_thermal soc_button_array intel_vbtn wmi cfg80211 int3403_thermal 
acpi_thermal_rel battery ecdh_generic ecc rtsx_pci hid_multitouch 
intel_lpss_pci drm_display_helper
[  124.237031]  mei_me intel_hid processor_thermal_wt_req pmt_class 
acpi_pad videobuf2_common sparse_keymap mei 
processor_thermal_power_floor ac intel_lpss mc ttm 
processor_thermal_mbox intel_xhci_usb_role_switch rfkill idma64 
intel_pch_thermal int340x_thermal_zone drm_kms_helper button roles msr 
parport_pc ppdev lp parport drm efi_pstore configfs nfnetlink efivarfs 
autofs4 ext4 crc16 mbcache jbd2 hid_generic usbhid hid dm_crypt dm_mod 
evdev xhci_pci crc32c_intel nvme xhci_hcd serio_raw nvme_core usbcore 
usb_common aesni_intel gf128mul crypto_simd cryptd
[  124.237203] CR2: 0000000000000008
[  124.237213] ---[ end trace 0000000000000000 ]---
[  125.140033] RIP: 0010:xhci_ring_expansion+0xbd/0x380 [xhci_hcd]
[  125.140061] Code: ff ff 83 7d 54 04 0f 84 fa 01 00 00 48 85 ed 0f 84 
2e 01 00 00 8b 44 24 40 85 c0 0f 84 82 01 00 00 48 8b 54 24 18 48 8b 45 
08 <48> 8b 52 08 48 89 50 08 48 8b 55 00 48 8b 44 24 18 48 89 50 08 8b
[  125.140063] RSP: 0018:ffffbc1a4093ba08 EFLAGS: 00010046
[  125.140066] RAX: ffff9421ee1b1880 RBX: ffff9421c1aae240 RCX: 
ffff9421ee1b1d80
[  125.140067] RDX: 0000000000000000 RSI: ffffbc1a4093ba08 RDI: 
0000000000001800
[  125.140069] RBP: ffff942213a41880 R08: 0000000000000000 R09: 
0000000000000000
[  125.140070] R10: 0000000000000000 R11: 0000000000000400 R12: 
0000000000000820
[  125.140071] R13: 0000000000000820 R14: 0000000000000000 R15: 
ffff9421ff86c000
[  125.140073] FS:  0000000000000000(0000) GS:ffff94252f080000(0000) 
knlGS:0000000000000000
[  125.140074] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  125.140076] CR2: 0000000000000008 CR3: 0000000152189001 CR4: 
00000000003726f0
[  125.140077] note: usb-storage[2566] exited with irqs disabled
[  125.142655] note: usb-storage[2566] exited with preempt_count 1
[  164.321031] watchdog: Watchdog detected hard LOCKUP on cpu 3
[  164.321035] Modules linked in: sd_mod usb_storage scsi_mod 
scsi_common snd_seq_dummy snd_hrtimer snd_seq snd_seq_device 
xfrm_interface xfrm6_tunnel tunnel6 l2tp_ppp l2tp_netlink l2tp_core 
ip6_udp_tunnel xfrm_user xfrm_algo udp_tunnel pppox ppp_generic slhc 
snd_hda_codec_hdmi snd_ctl_led snd_sof_pci_intel_skl 
snd_sof_intel_hda_generic snd_soc_acpi_intel_match snd_soc_acpi 
snd_soc_acpi_intel_sdca_quirks snd_sof_pci snd_sof_xtensa_dsp 
soundwire_intel soundwire_generic_allocation soundwire_cadence 
snd_hda_codec_realtek soundwire_bus snd_hda_codec_generic snd_soc_sdca 
snd_hda_scodec_component snd_sof_intel_hda_common snd_soc_hdac_hda 
snd_sof_intel_hda_mlink snd_sof_intel_hda snd_sof snd_sof_utils 
snd_soc_avs snd_soc_hda_codec binfmt_misc snd_hda_ext_core 
x86_pkg_temp_thermal intel_powerclamp r8153_ecm snd_soc_core cdc_ether 
coretemp usbnet snd_compress snd_hda_intel kvm_intel snd_intel_dspcfg 
snd_intel_sdw_acpi dell_pc kvm iTCO_wdt platform_profile snd_hda_codec 
intel_pmc_bxt iTCO_vendor_support snd_hwdep crct10dif_pclmul
[  164.321068]  crc32_pclmul ghash_clmulni_intel snd_hda_core 
sha512_ssse3 sha512_generic nls_ascii dell_laptop snd_pcm nls_cp437 
sha256_ssse3 btusb ath10k_pci sha1_ssse3 dell_wmi intel_rapl_msr 
wmi_bmof dell_smbios ath10k_core btrtl rapl i2c_i801 ucsi_acpi dcdbas 
btintel r8152 snd_timer mei_wdt intel_cstate vfat fat mei_pxp mei_hdcp 
watchdog dell_wmi_descriptor intel_wmi_thunderbolt dell_smm_hwmon mii 
intel_uncore snd typec_ucsi ath i2c_hid_acpi pcspkr i2c_smbus soundcore 
i915 typec i2c_hid uvcvideo joydev btbcm 
processor_thermal_device_pci_legacy mac80211 videobuf2_vmalloc 
i2c_algo_bit videobuf2_memops uvc bluetooth drm_buddy videobuf2_v4l2 
intel_soc_dts_iosf intel_gtt processor_thermal_device intel_pmc_core 
processor_thermal_wt_hint libarc4 videodev processor_thermal_rfim 
processor_thermal_rapl intel_vsec video intel_rapl_common pmt_telemetry 
int3400_thermal soc_button_array intel_vbtn wmi cfg80211 int3403_thermal 
acpi_thermal_rel battery ecdh_generic ecc rtsx_pci hid_multitouch 
intel_lpss_pci drm_display_helper
[  164.321107]  mei_me intel_hid processor_thermal_wt_req pmt_class 
acpi_pad videobuf2_common sparse_keymap mei 
processor_thermal_power_floor ac intel_lpss mc ttm 
processor_thermal_mbox intel_xhci_usb_role_switch rfkill idma64 
intel_pch_thermal int340x_thermal_zone drm_kms_helper button roles msr 
parport_pc ppdev lp parport drm efi_pstore configfs nfnetlink efivarfs 
autofs4 ext4 crc16 mbcache jbd2 hid_generic usbhid hid dm_crypt dm_mod 
evdev xhci_pci crc32c_intel nvme xhci_hcd serio_raw nvme_core usbcore 
usb_common aesni_intel gf128mul crypto_simd cryptd
[  164.321131] CPU: 3 UID: 0 PID: 11 Comm: kworker/u16:0 Tainted: G 
UD            6.13.0-rc3-00017-gf44d154d6e3d #42
[  164.321135] Tainted: [U]=USER, [D]=DIE
[  164.321135] Hardware name: Dell Inc. XPS 13 9360/0596KF, BIOS 2.21.0 
06/02/2022
[  164.321137] Workqueue: scsi_tmf_0 scmd_eh_abort_handler [scsi_mod]
[  164.321154] RIP: 0010:native_queued_spin_lock_slowpath+0x6c/0x2a0
[  164.321158] Code: 77 73 f0 0f ba 2b 08 0f 92 c2 8b 03 0f b6 d2 c1 e2 
08 30 e4 09 d0 3d ff 00 00 00 77 4f 85 c0 74 10 0f b6 03 84 c0 74 09 f3 
90 <0f> b6 03 84 c0 75 f7 b8 01 00 00 00 66 89 03 5b 5d 41 5c 41 5d c3
[  164.321160] RSP: 0018:ffffbc1a400b3ce8 EFLAGS: 00000002
[  164.321161] RAX: 0000000000000001 RBX: ffff9421c1aae284 RCX: 
ffff9421c0051c28
[  164.321163] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 
ffff9421c1aae284
[  164.321163] RBP: ffff9421c2c65480 R08: ffff9422017a14c0 R09: 
8080808080808080
[  164.321164] R10: ffff9421c0b28ec0 R11: fefefefefefefeff R12: 
00000000ffffff98
[  164.321165] R13: 00000000ffffff98 R14: ffff9421c1aae000 R15: 
ffff9421c1aae284
[  164.321167] FS:  0000000000000000(0000) GS:ffff94252f180000(0000) 
knlGS:0000000000000000
[  164.321168] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  164.321169] CR2: 000055d2b70166ac CR3: 00000001bb621001 CR4: 
00000000003726f0
[  164.321170] Call Trace:
[  164.321172]  <NMI>
[  164.321174]  ? watchdog_hardlockup_check.cold+0x100/0x105
[  164.321178]  ? __perf_event_overflow+0x119/0x340
[  164.321181]  ? handle_pmi_common+0x186/0x3b0
[  164.321187]  ? intel_pmu_handle_irq+0x10b/0x500
[  164.321189]  ? perf_event_nmi_handler+0x2a/0x50
[  164.321192]  ? nmi_handle+0x5b/0x110
[  164.321194]  ? default_do_nmi+0x40/0x120
[  164.321196]  ? exc_nmi+0x11e/0x190
[  164.321197]  ? end_repeat_nmi+0xf/0x18
[  164.321201]  ? native_queued_spin_lock_slowpath+0x6c/0x2a0
[  164.321203]  ? native_queued_spin_lock_slowpath+0x6c/0x2a0
[  164.321205]  ? native_queued_spin_lock_slowpath+0x6c/0x2a0
[  164.321207]  </NMI>
[  164.321207]  <TASK>
[  164.321208]  _raw_spin_lock_irqsave+0x39/0x40
[  164.321210]  xhci_urb_dequeue+0x42/0x5a0 [xhci_hcd]
[  164.321229]  ? hrtimer_try_to_cancel.part.0+0x50/0xe0
[  164.321231]  ? dl_server_stop+0x2b/0x40
[  164.321234]  ? dequeue_entities+0x3fb/0x660
[  164.321237]  ? sched_balance_newidle+0x2c4/0x460
[  164.321239]  usb_hcd_unlink_urb+0x76/0xd0 [usbcore]
[  164.321262]  usb_sg_cancel+0xab/0xf0 [usbcore]
[  164.321280]  command_abort_matching+0x7d/0x90 [usb_storage]
[  164.321284]  scmd_eh_abort_handler+0xc0/0x200 [scsi_mod]
[  164.321297]  process_one_work+0x171/0x320
[  164.321299]  worker_thread+0x24e/0x380
[  164.321301]  ? rescuer_thread+0x480/0x480
[  164.321302]  kthread+0xcf/0x100
[  164.321304]  ? kthread_park+0x80/0x80
[  164.321306]  ret_from_fork+0x31/0x50
[  164.321309]  ? kthread_park+0x80/0x80
[  164.321311]  ret_from_fork_asm+0x11/0x20
[  164.321314]  </TASK>
[  175.710566] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  175.710572] rcu: 	3-...0: (5 ticks this GP) 
idle=28ac/1/0x4000000000000000 softirq=11653/11655 fqs=964
[  175.710576] rcu: 	(detected by 1, t=5252 jiffies, g=12145, q=3523 
ncpus=4)
[  175.710578] Sending NMI from CPU 1 to CPUs 3:
[  175.710583] NMI backtrace for cpu 3
[  175.710585] CPU: 3 UID: 0 PID: 11 Comm: kworker/u16:0 Tainted: G 
UD            6.13.0-rc3-00017-gf44d154d6e3d #42
[  175.710588] Tainted: [U]=USER, [D]=DIE
[  175.710589] Hardware name: Dell Inc. XPS 13 9360/0596KF, BIOS 2.21.0 
06/02/2022
[  175.710591] Workqueue: scsi_tmf_0 scmd_eh_abort_handler [scsi_mod]
[  175.710608] RIP: 0010:native_queued_spin_lock_slowpath+0x6c/0x2a0
[  175.710612] Code: 77 73 f0 0f ba 2b 08 0f 92 c2 8b 03 0f b6 d2 c1 e2 
08 30 e4 09 d0 3d ff 00 00 00 77 4f 85 c0 74 10 0f b6 03 84 c0 74 09 f3 
90 <0f> b6 03 84 c0 75 f7 b8 01 00 00 00 66 89 03 5b 5d 41 5c 41 5d c3
[  175.710613] RSP: 0018:ffffbc1a400b3ce8 EFLAGS: 00000002
[  175.710615] RAX: 0000000000000001 RBX: ffff9421c1aae284 RCX: 
ffff9421c0051c28
[  175.710616] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 
ffff9421c1aae284
[  175.710617] RBP: ffff9421c2c65480 R08: ffff9422017a14c0 R09: 
8080808080808080
[  175.710618] R10: ffff9421c0b28ec0 R11: fefefefefefefeff R12: 
00000000ffffff98
[  175.710619] R13: 00000000ffffff98 R14: ffff9421c1aae000 R15: 
ffff9421c1aae284
[  175.710620] FS:  0000000000000000(0000) GS:ffff94252f180000(0000) 
knlGS:0000000000000000
[  175.710621] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  175.710622] CR2: 000055d2b70166ac CR3: 00000001bb621001 CR4: 
00000000003726f0
[  175.710624] Call Trace:
[  175.710625]  <NMI>
[  175.710627]  ? nmi_cpu_backtrace.cold+0x32/0x68
[  175.710629]  ? nmi_cpu_backtrace_handler+0x11/0x20
[  175.710633]  ? nmi_handle+0x5b/0x110
[  175.710634]  ? default_do_nmi+0x40/0x120
[  175.710636]  ? exc_nmi+0x11e/0x190
[  175.710638]  ? end_repeat_nmi+0xf/0x18
[  175.710641]  ? native_queued_spin_lock_slowpath+0x6c/0x2a0
[  175.710644]  ? native_queued_spin_lock_slowpath+0x6c/0x2a0
[  175.710646]  ? native_queued_spin_lock_slowpath+0x6c/0x2a0
[  175.710648]  </NMI>
[  175.710648]  <TASK>
[  175.710649]  _raw_spin_lock_irqsave+0x39/0x40
[  175.710652]  xhci_urb_dequeue+0x42/0x5a0 [xhci_hcd]
[  175.710671]  ? hrtimer_try_to_cancel.part.0+0x50/0xe0
[  175.710674]  ? dl_server_stop+0x2b/0x40
[  175.710676]  ? dequeue_entities+0x3fb/0x660
[  175.710679]  ? sched_balance_newidle+0x2c4/0x460
[  175.710682]  usb_hcd_unlink_urb+0x76/0xd0 [usbcore]
[  175.710704]  usb_sg_cancel+0xab/0xf0 [usbcore]
[  175.710724]  command_abort_matching+0x7d/0x90 [usb_storage]
[  175.710728]  scmd_eh_abort_handler+0xc0/0x200 [scsi_mod]
[  175.710740]  process_one_work+0x171/0x320
[  175.710743]  worker_thread+0x24e/0x380
[  175.710744]  ? rescuer_thread+0x480/0x480
[  175.710745]  kthread+0xcf/0x100
[  175.710748]  ? kthread_park+0x80/0x80
[  175.710750]  ret_from_fork+0x31/0x50
[  175.710753]  ? kthread_park+0x80/0x80
[  175.710755]  ret_from_fork_asm+0x11/0x20
[  175.710758]  </TASK>
```

Please find the full log attached.


Kind regards,

Paul
View attachment "20241217--dell-xps-13-9360--linux-6.13.0-rc3-00017-gf44d154d6e3d.txt" of type "text/plain" (99237 bytes)

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ