On Tue, 29 Dec 2009, Sean wrote:
> > I changed the debug statements to ohci_dbg and I was able to capture
> > the full output with klogd. It is attached.
You did not get the full output. That's why I tell people to use dmesg
instead of klogd or the kernel log files. If necessary you can always
increase the size of the dmesg log buffer by changing
CONFIG_LOG_BUF_SHIFT. I tend to set it to 18; you might want to go
even higher.
> In looking at the log file it seems that there is a mismatch of td_alloc
> calls and td_free calls.
That's because you didn't get the full output. Here's an enhanced
version of the patch. It will provide more information and perhaps a
smoking gun.
Alan Stern
Index: usb-2.6/drivers/usb/host/ohci-hcd.c
===================================================================
--- usb-2.6.orig/drivers/usb/host/ohci-hcd.c
+++ usb-2.6/drivers/usb/host/ohci-hcd.c
@@ -201,7 +201,7 @@ static int ohci_urb_enqueue (
/* allocate the TDs (deferring hash chain updates) */
for (i = 0; i < size; i++) {
- urb_priv->td [i] = td_alloc (ohci, mem_flags);
+ urb_priv->td [i] = td_alloc (ohci, mem_flags, urb->dev, urb->ep);
if (!urb_priv->td [i]) {
urb_priv->length = i;
urb_free_priv (ohci, urb_priv);
Index: usb-2.6/drivers/usb/host/ohci-mem.c
===================================================================
--- usb-2.6.orig/drivers/usb/host/ohci-mem.c
+++ usb-2.6/drivers/usb/host/ohci-mem.c
@@ -82,7 +82,8 @@ dma_to_td (struct ohci_hcd *hc, dma_addr
/* TDs ... */
static struct td *
-td_alloc (struct ohci_hcd *hc, gfp_t mem_flags)
+td_alloc (struct ohci_hcd *hc, gfp_t mem_flags, struct usb_device *udev,
+ struct usb_host_endpoint *ep)
{
dma_addr_t dma;
struct td *td;
@@ -94,6 +95,8 @@ td_alloc (struct ohci_hcd *hc, gfp_t mem
td->hwNextTD = cpu_to_hc32 (hc, dma);
td->td_dma = dma;
/* hashed in td_fill */
+ ohci_dbg(hc, "td alloc for %s ep%x: %p\n",
+ udev->devpath, ep->desc.bEndpointAddress, td);
}
return td;
}
@@ -101,14 +104,27 @@ td_alloc (struct ohci_hcd *hc, gfp_t mem
static void
td_free (struct ohci_hcd *hc, struct td *td)
{
- struct td **prev = &hc->td_hash [TD_HASH_FUNC (td->td_dma)];
-
- while (*prev && *prev != td)
+ int hash = TD_HASH_FUNC(td->td_dma);
+ struct td **prev = &hc->td_hash[hash];
+ int n = 0;
+
+ ohci_dbg(hc, "td free %p\n", td);
+ while (*prev && *prev != td) {
+ if ((unsigned long) *prev == 0xa7a7a7a7) {
+ ohci_dbg(hc, "poisoned hash at %p (%d %d) %p\n", prev,
+ hash, n, hc->td_hash[hash]);
+ return;
+ }
prev = &(*prev)->td_hash;
- if (*prev)
+ ++n;
+ }
+ if (*prev) {
*prev = td->td_hash;
- else if ((td->hwINFO & cpu_to_hc32(hc, TD_DONE)) != 0)
- ohci_dbg (hc, "no hash for td %p\n", td);
+ ohci_dbg(hc, "(%d %d) %p -> %p\n", hash, n, prev, *prev);
+ } else {
+ ohci_dbg(hc, "no hash for td %p: %d %p\n", td,
+ hash, hc->td_hash[hash]);
+ }
dma_pool_free (hc->td_cache, td, td->td_dma);
}
Index: usb-2.6/drivers/usb/host/ohci-q.c
===================================================================
--- usb-2.6.orig/drivers/usb/host/ohci-q.c
+++ usb-2.6/drivers/usb/host/ohci-q.c
@@ -406,7 +406,7 @@ static struct ed *ed_get (
}
/* dummy td; end of td list for ed */
- td = td_alloc (ohci, GFP_ATOMIC);
+ td = td_alloc (ohci, GFP_ATOMIC, udev, ep);
if (!td) {
/* out of memory */
ed_free (ohci, ed);
@@ -560,6 +560,7 @@ td_fill (struct ohci_hcd *ohci, u32 info
hash = TD_HASH_FUNC (td->td_dma);
td->td_hash = ohci->td_hash [hash];
ohci->td_hash [hash] = td;
+ ohci_dbg(ohci, "hash %p to %d -> %p\n", td, hash, td->td_hash);
/* HC might read the TD (or cachelines) right away ... */
wmb ();
--
To unsubscribe from this list: send the line "unsubscribe linux-usb" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
