On Tue, 2017-01-03 at 15:49 +0100, Vincent Pelletier wrote:
> Hello,
>
> I am hitting the following oops with 4.10-rc2 (on an intel edison, so
> this is with Andy's patchset[1] which is currently based on 4.10-rc2
> and does not seem to touch usb code) with Felipe's fixes-for-v4.10-rc3
> merged on top of it.
>
Let me check, I might missed some patches to cherry-pick.
> The oops + kdb traceback:
>
> [ 42.537029] file system registered
> [ 45.048685] systemd-hostnam (1666) used greatest stack depth: 5680
> bytes left
> [ 51.643687] read descriptors
> [ 51.648273] read strings
> [ 53.921220] configfs-gadget gadget: high-speed config #1: c
> [ 53.927231] BUG: unable to handle kernel paging request at 00040905
> [ 53.933683] IP: usb_ep_enable+0x23/0xb0 [udc_core]
> [ 53.938585] *pde = 00000000
> [ 53.938591]
> [ 53.943060] Oops: 0000 [#1] SMP
>
> Entering kdb (current=0xf40a8f00, pid 1866) on processor 0 Oops:
> (null)
> due to oops @ 0xf812a023
> CPU: 0 PID: 1866 Comm: irq/34-dwc3 Not tainted
> 4.10.0-rc2-edison-00061-g1a2e83d30e6d #18
> Hardware name: Intel Corporation Merrifield/BODEGA BAY, BIOS 542
> 2015.01.21:18.19.48
> task: f40a8f00 task.stack: f4d3a000
> EIP: usb_ep_enable+0x23/0xb0 [udc_core]
> EFLAGS: 00010046 CPU: 0
> EAX: f4d996d4 EBX: f4d996c0 ECX: 00040905 EDX: f4d996dd
> ESI: f4fa4200 EDI: f4d996d4 EBP: f4d3bdec ESP: f4d3bddc
> DS: 007b ES: 007b FS: 00d8 GS: 0000 SS: 0068
> CR0: 80050033 CR2: 00040905 CR3: 01d62000 CR4: 001006d0
> Call Trace:
> ffs_func_set_alt+0x243/0x290 [usb_f_fs]
> composite_setup+0xcf1/0x1ba0 [libcomposite]
> ? dwc3_gadget_exit+0x140/0x1c0 [dwc3]
> dwc3_ep0_delegate_req+0x2d/0x40 [dwc3]
> dwc3_ep0_interrupt+0x409/0xad0 [dwc3]
> ? dwc3_thread_interrupt+0x22/0xe80 [dwc3]
> ? _raw_spin_lock_irqsave+0x43/0x50
> dwc3_thread_interrupt+0x120/0xe80 [dwc3]
> ? __schedule+0x65e/0x850
> irq_thread_fn+0x18/0x30
> irq_thread+0xef/0x180
> ? irq_finalize_oneshot+0xd0/0xd0
> ? wake_threads_waitq+0x40/0x40
> ? free_percpu_irq+0x60/0x60
> kthread+0xfb/0x100
> ? free_percpu_irq+0x60/0x60
> ? kthread_stop+0x150/0x150
> ret_from_fork+0x19/0x24
> Code: <ff> 11 85 c0 89 45 f0 75 04 c6 47 19 01 3e 8d 74 26 00 eb 41 89
> f6
>
> same traceback, in (k)gdb:
> (gdb) bt
> #0 0xf812a023 in usb_ep_enable (ep=0xf4d996d4) at
> drivers/usb/gadget/udc/core.c:109
> #1 0xf967b533 in ffs_func_eps_enable (func=<optimized out>) at
> drivers/usb/gadget/function/f_fs.c:1857
> #2 ffs_func_set_alt (f=<optimized out>, interface=<optimized out>,
> alt=<optimized out>) at drivers/usb/gadget/function/f_fs.c:3146
> #3 0xf8179791 in set_config (ctrl=<optimized out>, number=<optimized
> out>, cdev=<optimized out>) at drivers/usb/gadget/composite.c:814
> #4 0xf8b4030d in dwc3_ep0_delegate_req (dwc=0xf557b814,
> ctrl=0xf4f2c000) at drivers/usb/dwc3/ep0.c:603
> #5 0xf8b412a9 in dwc3_ep0_set_config (ctrl=<optimized out>,
> dwc=<optimized out>) at drivers/usb/dwc3/ep0.c:622
> #6 dwc3_ep0_std_request (ctrl=<optimized out>, dwc=<optimized out>)
> at drivers/usb/dwc3/ep0.c:778
> #7 dwc3_ep0_inspect_setup (event=<optimized out>, dwc=<optimized
> out>) at drivers/usb/dwc3/ep0.c:818
> #8 dwc3_ep0_xfer_complete (event=<optimized out>, dwc=<optimized
> out>) at drivers/usb/dwc3/ep0.c:977
> #9 dwc3_ep0_interrupt (dwc=0xf557b814, event=<optimized out>) at
> drivers/usb/dwc3/ep0.c:1139
> #10 0xf8b3d930 in dwc3_endpoint_interrupt (event=<optimized out>,
> dwc=<optimized out>) at drivers/usb/dwc3/gadget.c:2245
> #11 0xc10b1818 in irq_thread_fn (desc=0xf4d26600, action=0xf4d99200)
> at kernel/irq/manage.c:896
> #12 0xc10b1caf in irq_thread (data=0xf4d99200) at
> kernel/irq/manage.c:973
> #13 0xc1074a6b in kthread (_create=0xf4c14f20) at kernel/kthread.c:227
> #14 0xc185de01 in ret_from_fork () at arch/x86/entry/entry_32.S:295
> (gdb) print *ep
> $1 = {driver_data = 0xf4d996c0, name = 0xff00 <error: Cannot access
> memory at address 0xff00>, ops = 0x40905, ep_list = {next = 0xff0000,
> prev = 0x500 <trace_event_define_fields_udc_log_req+175>}, caps =
> {type_control = 0, type_iso = 0, type_bulk = 0, type_int = 0, dir_in =
> 0, dir_out = 0}, claimed = false,
> enabled = false, maxpacket = 0, maxpacket_limit = 0, max_streams = 0,
> mult = 0, maxburst = 0, address = 0 '\000', desc = 0xf4d996dd,
> comp_desc = 0x0}
>
> Note "name" and "ep_list.prev" are also broken, as likely
> ep_list.next.
>
> Last command:
> # echo dwc3.1.auto > /sys/kernel/config/usb_gadget/g1/UDC
>
> Host's syslog:
> Jan 3 15:20:23 vincent-tkpad kernel: [876929.788285] usb 2-1: new
> high-speed USB device number 86 using xhci_hcd
> Jan 3 15:20:23 vincent-tkpad kernel: [876929.918767] usb 2-1: New USB
> device found, idVendor=1d6b, idProduct=0104
> Jan 3 15:20:23 vincent-tkpad kernel: [876929.918771] usb 2-1: New USB
> device strings: Mfr=1, Product=2, SerialNumber=3
> Jan 3 15:20:23 vincent-tkpad kernel: [876929.918774] usb 2-1:
> Product: tesla
> Jan 3 15:20:23 vincent-tkpad kernel: [876929.918776] usb 2-1:
> Manufacturer: vpelletier
> Jan 3 15:20:23 vincent-tkpad kernel: [876929.918777] usb 2-1:
> SerialNumber: FZED443D01T42501
> Jan 3 15:20:28 vincent-tkpad kernel: [876934.916146] usb 2-1: can't
> set config #1, error -110
> Jan 3 15:20:28 vincent-tkpad mtp-probe: checking bus 2, device 86:
> "/sys/devices/pci0000:00/0000:00:14.0/usb2/2-1"
> Jan 3 15:20:28 vincent-tkpad mtp-probe: bus: 2, device: 86 was not an
> MTP device
>
> Device is a single-configuration, single-function, single alt-setting,
> zero endpoints, once-string, functionfs-based device.
>
> The functionfs side of things is a bit complicated, as I'm writing a
> python module[2] for it, and I am still very new to functionfs. It
> does not crash on 4.9-rc7 though.
>
> Is something else needed to reproduce this issue ?
>
> [1] https://github.com/andy-shev/linux/commits/eds
> [2] https://github.com/vpelletier/python-functionfs
>
> Regards,
--
Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
Intel Finland Oy
--
To unsubscribe from this list: send the line "unsubscribe linux-usb" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
