System panics due to "kernel BUG at drivers/usb/host/xhci-ring.c:568!" with RIP xhci_find_new_dequeue_state ()
Issue
- System panics with following call traces in kernel ring buffer:
xhci_hcd 0000:00:14.0: xHCI xhci_drop_endpoint called with disabled ep ffff88127b72a440
xhci_hcd 0000:00:14.0: xHCI xhci_drop_endpoint called with disabled ep ffff88127b72a488
------------[ cut here ]------------
kernel BUG at drivers/usb/host/xhci-ring.c:568!
invalid opcode: 0000 [#1] SMP
last sysfs file: /sys/devices/system/cpu/online
CPU 6
Modules linked in: nfnetlink_queue nfnetlink_log nfnetlink bluetooth rfkill mlx4_en ipmi_devintf mlx4_core iptable_filter ip_tables bridge
Pid: 9444, comm: usb-storage Tainted: P -- ------------ 2.6.32-642.1.1.el6.x86_64 #1 HP ProLiant DL380 Gen9/ProLiant DL380 Gen9
RIP: 0010:[<ffffffffa0157ca9>] [<ffffffffa0157ca9>] xhci_find_new_dequeue_state+0xb9/0x2e0 [xhci_hcd]
RSP: 0018:ffff8823cfb73b10 EFLAGS: 00010046
RAX: ffff881b73e26a80 RBX: ffff88204baec000 RCX: ffff881b73e26a80
RDX: ffff882cd0c1e3f0 RSI: ffff88204f99c400 RDI: ffff8823cfb73ab0
RBP: ffff8823cfb73b50 R08: 0000000000000009 R09: ffff8823cfb73b60
R10: 0000000000000002 R11: 0000000000000000 R12: ffff880c3b2d92c0
R13: ffff8823cfb73b60 R14: ffff8805eebd0000 R15: 0000000000000003
FS: 0000000000000000(0000) GS:ffff8800282c0000(0000) knlGS:0000000000000000
CS: 0010 DS: 0018 ES: 0018 CR0: 000000008005003b
CR2: 00007fa40a3e4000 CR3: 0000000001a8d000 CR4: 00000000001407e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Process usb-storage (pid: 9444, threadinfo ffff8823cfb70000, task ffff88017ec42040)
Stack:
0000000300000000 ffff8802b1010c40 ffff88204baec000 ffff88204baec000
<d> ffff881b6cf59000 0000000000000003 ffff8805eebd0318 ffff8823cfb73b60
<d> ffff8823cfb73bb0 ffffffffa014ed3a 0000000000000000 00000000cfb73b40
Call Trace:
[<ffffffffa014ed3a>] xhci_cleanup_stalled_ring+0x7a/0x1e0 [xhci_hcd]
[<ffffffffa014f00e>] xhci_endpoint_reset+0x16e/0x1e0 [xhci_hcd]
[<ffffffff813da572>] usb_hcd_reset_endpoint+0x22/0x70
[<ffffffff813de7c5>] usb_enable_endpoint+0xa5/0xb0
[<ffffffff813de816>] usb_enable_interface+0x46/0x60
[<ffffffff813d6350>] usb_reset_and_verify_device+0x380/0x720
[<ffffffff81548203>] ? wait_for_completion_interruptible_timeout+0x13/0x20
[<ffffffff813e1b14>] ? usb_autopm_do_device+0x84/0x130
[<ffffffff813d67a8>] usb_reset_device+0xb8/0x1a0
[<ffffffffa047cfc9>] usb_stor_port_reset+0x59/0x60 [usb_storage]
[<ffffffffa047d4ae>] usb_stor_invoke_transport+0x8e/0x490 [usb_storage]
[<ffffffff8154816d>] ? wait_for_common+0x14d/0x180
[<ffffffff8106c720>] ? default_wake_function+0x0/0x20
[<ffffffffa047ce7e>] usb_stor_transparent_scsi_command+0xe/0x10 [usb_storage]
[<ffffffffa047f4a2>] usb_stor_control_thread+0x182/0x270 [usb_storage]
[<ffffffffa047f320>] ? usb_stor_control_thread+0x0/0x270 [usb_storage]
[<ffffffff810a662e>] kthread+0x9e/0xc0
[<ffffffff8100c28a>] child_rip+0xa/0x20
[<ffffffff810a6590>] ? kthread+0x0/0xc0
[<ffffffff8100c280>] ? child_rip+0x0/0x20
Code: 0c 02 74 05 41 83 75 10 01 48 8b 40 08 48 39 c1 74 11 48 8b 10 48 39 d6 73 d8 48 81 c2 f0 03 00 00 eb db 49 c7 45 00 00 00 00 00 <0f> 0b eb fe 48 8b 03 8b 55 c0 48 c7 c6 f8 7a 16 a0 48 8b 38 31
RIP [<ffffffffa0157ca9>] xhci_find_new_dequeue_state+0xb9/0x2e0 [xhci_hcd]
RSP <ffff8823cfb73b10>
Environment
- Red Hat Enterprise Linux 6.7
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.