* [GIT PATCH] USB patches for 2.6.26
@ 2008-07-21 22:30 Greg KH
2008-07-22 8:54 ` Benny Halevy
2008-07-22 13:40 ` [USB boot crash, -git] ecm_do_notify(), list_add corruption. prev->next should be next (ffff88003b8f82f8) Ingo Molnar
0 siblings, 2 replies; 13+ messages in thread
From: Greg KH @ 2008-07-21 22:30 UTC (permalink / raw)
To: Linus Torvalds, Andrew Morton; +Cc: linux-kernel, linux-usb
Here are some USB patches for your 2.6.26-git tree.
They include a big gadget rework that has been pending for a while, some
core suspend/resume fixes, some host controller fixes, the removal of a
driver that is no longer needed (airprime), and lots of other good
things.
Please pull from:
master.kernel.org:/pub/scm/linux/kernel/git/gregkh/usb-2.6.git/
All of these patches have been in the -mm tree for a while, as well as
the -next releases
The full patches will be sent to the linux-usb mailing list, if anyone
wants to see them.
thanks,
greg k-h
------------
Documentation/DocBook/gadget.tmpl | 38 +
Documentation/usb/gadget_serial.txt | 35 +-
Documentation/usb/persist.txt | 7 +-
Documentation/usb/uhci.txt | 165 ---
drivers/hid/usbhid/hid-core.c | 2 +-
drivers/usb/atm/cxacru.c | 1 -
drivers/usb/atm/speedtch.c | 1 -
drivers/usb/class/cdc-acm.c | 177 ++-
drivers/usb/class/cdc-acm.h | 5 +
drivers/usb/class/cdc-wdm.c | 127 ++-
drivers/usb/core/devices.c | 4 -
drivers/usb/core/devio.c | 94 +-
drivers/usb/core/driver.c | 168 ++-
drivers/usb/core/endpoint.c | 4 +-
drivers/usb/core/file.c | 10 +-
drivers/usb/core/hcd.c | 6 +-
drivers/usb/core/hcd.h | 4 +-
drivers/usb/core/hub.c | 536 ++++---
drivers/usb/core/inode.c | 16 +-
drivers/usb/core/message.c | 22 +-
drivers/usb/core/usb.c | 7 +-
drivers/usb/core/usb.h | 19 +-
drivers/usb/gadget/Kconfig | 14 +
drivers/usb/gadget/Makefile | 13 +-
drivers/usb/gadget/amd5536udc.c | 2 +-
drivers/usb/gadget/at91_udc.c | 13 +
drivers/usb/gadget/cdc2.c | 246 ++++
drivers/usb/gadget/composite.c | 1041 ++++++++++++++
drivers/usb/gadget/config.c | 76 +-
drivers/usb/gadget/dummy_hcd.c | 4 +-
drivers/usb/gadget/epautoconf.c | 1 +
drivers/usb/gadget/ether.c | 2631 +++-------------------------------
drivers/usb/gadget/f_acm.c | 589 ++++++++
drivers/usb/gadget/f_ecm.c | 833 +++++++++++
drivers/usb/gadget/f_loopback.c | 381 +++++
drivers/usb/gadget/f_rndis.c | 827 +++++++++++
drivers/usb/gadget/f_serial.c | 296 ++++
drivers/usb/gadget/f_sourcesink.c | 587 ++++++++
drivers/usb/gadget/f_subset.c | 423 ++++++
drivers/usb/gadget/file_storage.c | 4 +-
drivers/usb/gadget/fsl_usb2_udc.c | 2 +-
drivers/usb/gadget/g_zero.h | 25 +
drivers/usb/gadget/gadget_chips.h | 23 +
drivers/usb/gadget/goku_udc.c | 2 +-
drivers/usb/gadget/inode.c | 23 +-
drivers/usb/gadget/lh7a40x_udc.c | 2 +-
drivers/usb/gadget/m66592-udc.c | 2 +-
drivers/usb/gadget/ndis.h | 10 +-
drivers/usb/gadget/net2280.c | 2 +-
drivers/usb/gadget/omap_udc.c | 2 +-
drivers/usb/gadget/printer.c | 7 +-
drivers/usb/gadget/pxa25x_udc.c | 2 +-
drivers/usb/gadget/pxa27x_udc.c | 1 -
drivers/usb/gadget/rndis.c | 421 ++-----
drivers/usb/gadget/rndis.h | 9 +-
drivers/usb/gadget/serial.c | 2315 ++----------------------------
drivers/usb/gadget/u_ether.c | 967 +++++++++++++
drivers/usb/gadget/u_ether.h | 127 ++
drivers/usb/gadget/u_serial.c | 1246 ++++++++++++++++
drivers/usb/gadget/u_serial.h | 58 +
drivers/usb/gadget/zero.c | 1162 ++--------------
drivers/usb/host/ehci-au1xxx.c | 369 +++---
drivers/usb/host/ehci-dbg.c | 4 +-
drivers/usb/host/ehci-fsl.c | 17 +-
drivers/usb/host/ehci-hcd.c | 2 +-
drivers/usb/host/ehci-ixp4xx.c | 8 +-
drivers/usb/host/ehci-orion.c | 8 +-
drivers/usb/host/ehci-ps3.c | 2 +-
drivers/usb/host/ehci-q.c | 17 +-
drivers/usb/host/ehci.h | 5 +-
drivers/usb/host/isp116x-hcd.c | 25 +-
drivers/usb/host/isp1760-hcd.c | 81 +-
drivers/usb/host/isp1760-hcd.h | 20 +-
drivers/usb/host/isp1760-if.c | 37 +-
drivers/usb/host/ohci-at91.c | 9 +-
drivers/usb/host/ohci-au1xxx.c | 327 ++---
drivers/usb/host/ohci-dbg.c | 2 +-
drivers/usb/host/ohci-hcd.c | 2 +-
drivers/usb/host/ohci-omap.c | 2 +-
drivers/usb/host/ohci-pnx4008.c | 28 +-
drivers/usb/host/ohci-ppc-of.c | 2 +-
drivers/usb/host/ohci-ps3.c | 2 +-
drivers/usb/host/ohci-q.c | 3 -
drivers/usb/host/ohci-sm501.c | 2 +-
drivers/usb/host/ohci-ssb.c | 2 +-
drivers/usb/host/r8a66597-hcd.c | 44 +-
drivers/usb/host/sl811-hcd.c | 2 +-
drivers/usb/host/u132-hcd.c | 2 +-
drivers/usb/host/uhci-hub.c | 2 +-
drivers/usb/misc/auerswald.c | 10 +-
drivers/usb/misc/emi62.c | 2 -
drivers/usb/misc/ftdi-elan.c | 24 -
drivers/usb/misc/iowarrior.c | 8 +-
drivers/usb/misc/rio500.c | 8 +-
drivers/usb/misc/sisusbvga/sisusb.c | 13 +-
drivers/usb/misc/usblcd.c | 6 +-
drivers/usb/mon/mon_stat.c | 14 +-
drivers/usb/serial/Kconfig | 8 -
drivers/usb/serial/Makefile | 1 -
drivers/usb/serial/airprime.c | 353 -----
drivers/usb/serial/cp2101.c | 13 +-
drivers/usb/serial/digi_acceleport.c | 3 +-
drivers/usb/serial/io_ti.c | 1860 +++++++++++-------------
drivers/usb/serial/ipaq.c | 3 +-
drivers/usb/serial/ir-usb.c | 490 ++++---
drivers/usb/serial/keyspan.h | 5 +-
drivers/usb/serial/keyspan_pda.c | 2 +-
drivers/usb/serial/kl5kusb105.c | 2 +-
drivers/usb/serial/option.c | 2 +
drivers/usb/serial/usb-serial.c | 13 +-
drivers/usb/serial/usb_debug.c | 9 +
drivers/usb/storage/datafab.c | 2 -
drivers/usb/storage/debug.c | 2 -
drivers/usb/storage/debug.h | 2 -
drivers/usb/storage/dpcm.c | 2 -
drivers/usb/storage/dpcm.h | 2 -
drivers/usb/storage/freecom.c | 2 -
drivers/usb/storage/freecom.h | 2 -
drivers/usb/storage/initializers.c | 2 -
drivers/usb/storage/initializers.h | 2 -
drivers/usb/storage/isd200.c | 8 +-
drivers/usb/storage/jumpshot.c | 2 -
drivers/usb/storage/protocol.c | 2 -
drivers/usb/storage/protocol.h | 2 -
drivers/usb/storage/scsiglue.c | 53 +-
drivers/usb/storage/scsiglue.h | 2 -
drivers/usb/storage/sddr09.c | 1 -
drivers/usb/storage/sddr09.h | 2 -
drivers/usb/storage/sddr55.c | 2 -
drivers/usb/storage/sddr55.h | 2 -
drivers/usb/storage/shuttle_usbat.c | 2 -
drivers/usb/storage/shuttle_usbat.h | 2 -
drivers/usb/storage/transport.c | 83 +-
drivers/usb/storage/transport.h | 2 -
drivers/usb/storage/unusual_devs.h | 13 +-
drivers/usb/storage/usb.c | 111 +-
drivers/usb/storage/usb.h | 25 +-
include/linux/usb.h | 12 +-
include/linux/usb/composite.h | 338 +++++
include/linux/usb/gadget.h | 27 +-
include/linux/usb/irda.h | 151 ++
include/linux/usbdevice_fs.h | 2 -
142 files changed, 11623 insertions(+), 8951 deletions(-)
delete mode 100644 Documentation/usb/uhci.txt
create mode 100644 drivers/usb/gadget/cdc2.c
create mode 100644 drivers/usb/gadget/composite.c
create mode 100644 drivers/usb/gadget/f_acm.c
create mode 100644 drivers/usb/gadget/f_ecm.c
create mode 100644 drivers/usb/gadget/f_loopback.c
create mode 100644 drivers/usb/gadget/f_rndis.c
create mode 100644 drivers/usb/gadget/f_serial.c
create mode 100644 drivers/usb/gadget/f_sourcesink.c
create mode 100644 drivers/usb/gadget/f_subset.c
create mode 100644 drivers/usb/gadget/g_zero.h
create mode 100644 drivers/usb/gadget/u_ether.c
create mode 100644 drivers/usb/gadget/u_ether.h
create mode 100644 drivers/usb/gadget/u_serial.c
create mode 100644 drivers/usb/gadget/u_serial.h
delete mode 100644 drivers/usb/serial/airprime.c
create mode 100644 include/linux/usb/composite.h
create mode 100644 include/linux/usb/irda.h
---------------
Adrian Bunk (3):
USB: isp1760-hcd.c: make 2 functions static
USB: remove CVS keywords
USB: remove Documentation/usb/uhci.txt
Akinobu Mita (1):
USB: usbmon: use simple_read_from_buffer()
Alan Cox (8):
USB: io_ti: FIrst cut at a big clean up
USB: gadget: Push BKL down into drivers
USB: ftdi_usb: Eliminate ioctl and BKL ioctl use
USB: usblcd: Push down BKL into driver
USB: iowarrior: Push down BKL
USB: auerwald: Push down the BKL into the driver
USB: rio100: Push down the BKL
USB: sisusb: Push down the BKL
Alan Stern (20):
USB: add new routine for checking port-resume type
USB: debounce before unregistering
USB: simplify hub_restart() logic
USB: try to salvage lost power sessions
USB: optimize port debouncing during hub activation
USB: combine hub_activate and hub_restart
USB: combine hub_quiesce and hub_stop
usb-storage: separate dynamic flags from fixed flags
usb-storage: change remaining semaphore to completion
USB: implement "soft" unbinding
usb-storage: implement "soft" unbinding
USB Gadget: documentation update
USB: use standard SG iterator in the scatter-gather library
USB: Force unbinding of drivers lacking reset_resume or other methods
usbfs: send disconnect signals when device is unregistered
usbfs: simplify the lookup-by-minor routines
usbfs: fix race between open and unregister
usbfs: don't store bad pointers in registration
USB: use reset_resume when normal resume fails
usb-storage: revert DMA-alignment change for Wireless USB
Aleksey Gorelov (1):
USB: debug port converter does not accept more than 8 byte packets
Alexey Dobriyan (1):
USB: rndis: switch to seq_files
Andre Haupt (1):
USB: usb-serial: fix a sparse warning about different signedness
Andrew Lunn (1):
USB: storage: UNUSUAL_DEVS() for PanDigital Picture frame.
Andrew Morton (1):
USB: drivers/usb/host/isp1760-hcd.c: processor flags have type `unsigned long'
Ben Collins (1):
USB: keyspan: Remove duplicate device entries
Benny Halevy (1):
usb: fix uninitialized variable warning in keyspan_pda
Christophe Jaillet (1):
USB: AccessRunner: avoid unnecessary memset
Daniel Ribeiro (1):
USB: remove board-specific UP2OCR configuration from pxa27x-udc
David Brownell (20):
USB: at91_udc: updated fifo sizes
usb gadget: split out serial core
usb gadget: use new serial core
usb gadget: descriptor copying support
usb gadget: composite gadget core
usb gadget zero: split out source/sink config
usb gadget zero: split out loopback config
usb gadget zero: use composite gadget framework
usb gadget serial: split out CDC ACM function
usb gadget serial: split out generic serial function
usb gadget serial: use composite gadget framework
usb gadget: RNDIS cleanups
usb ethernet gadget: split out network core
usb ethernet gadget: split CDC Subset function
usb ethernet gadget: split CDC Ethernet function
usb ethernet gadget: split RNDIS function
usb gadget: new "CDC Composite" gadget driver
usb ethernet gadget: use composite gadget framework
USB: ehci-hcd unlink speedups
usb_gadget: composite cdc gadget fault handling
David Howells (1):
USB: Fix pointer/int cast in USB devio code
David Lopo (1):
usb gadget: minor USBCV fix for composite framework
Eric Miao (1):
USB: make SA1111 OHCI driver SA11x0 specific
Felipe Balbi (2):
usb: hub: add check for unsupported bus topology
usb: irda: cleanup on ir-usb module
Greg Kroah-Hartman (4):
USB: handle pci_name() being const
USB: revert "don't lose disconnections during suspend"
USB: revert "don't use reset-resume if drivers don't support it"
USB: delete airprime driver
Harvey Harrison (4):
USB: use get_unaligned_* helpers for kl5kusb105 driver
USB: digi_accelport.c trivial sparse lock annotation
USB: cp2101.c fix sparse signedness mismatch warnings
USB: speedtch.c fix sparse shadowed variable warning
Jean Delvare (1):
USB: ohci-pnx4008: I2C cleanups and fixes
Julien May (1):
USB: Fix bug with byte order in isp116x-hcd.c fio write/read
Kay Sievers (2):
USB: usb dev_name() instead of dev->bus_id
USB: usb dev_set_name() instead of dev->bus_id
Manuel Lauss (2):
USB: Au1xxx-usb: clean up ohci/ehci bus glue sources.
USB: Au1xxx-usb: suspend/resume support.
Ming Lei (5):
USB: host: mark const variable tables as "const"
USB: uhci: mark root_hub_hub_des[] as const
USB: remove interface parameter of usb_reset_composite_device
USB: fix comment of usb_set_configuration
USB: fix usb_reset_device and usb_reset_composite_device(take 3)
Nate Case (1):
USB: isp1760: Support board-specific hardware configurations
Oliver Neukum (7):
USB: cdc-wdm cleanup
USB: additional power savings for cdc-acm devices that support remote wakeup
USB: autosuspend for cdc-wdm
USB: fix usb serial pm counter decrement for disconnected interfaces
USB: fix disconnect bug in cdc-acm
USB: fix build error in cdc-acm for CONFIG_PM=n
USB: fix double kfree in ipaq in error case
Pete Zaitcev (2):
USB: missing usb_put_hcd to ohci-at91
USB: ohci_hcd hang: submit vs. rmmod race
Randy Dunlap (1):
usb gadget: g_cdc dependso on NET
Srikanth Srinivasan (1):
USB: EHCI: Reconciling USB register differences on MPC85xx vs MPC83xx
Stephen Rothwell (1):
USB: ohci-ppc-of: use linux/of_platform.h instead of asm
Yoshihiro Shimoda (2):
usb: r8a66597-hcd: fix interrupt trigger
usb: r8a66597-hcd: fix iinterval for Full/Low speed device
^ permalink raw reply [flat|nested] 13+ messages in thread
* Re: [GIT PATCH] USB patches for 2.6.26
2008-07-21 22:30 [GIT PATCH] USB patches for 2.6.26 Greg KH
@ 2008-07-22 8:54 ` Benny Halevy
2008-07-22 15:27 ` Greg KH
2008-07-22 13:40 ` [USB boot crash, -git] ecm_do_notify(), list_add corruption. prev->next should be next (ffff88003b8f82f8) Ingo Molnar
1 sibling, 1 reply; 13+ messages in thread
From: Benny Halevy @ 2008-07-22 8:54 UTC (permalink / raw)
To: Greg KH; +Cc: Linus Torvalds, Andrew Morton, linux-kernel, linux-usb
You mean for 2.6.27, right?
Benny
On Jul. 22, 2008, 1:30 +0300, Greg KH <gregkh@suse.de> wrote:
> Here are some USB patches for your 2.6.26-git tree.
>
> They include a big gadget rework that has been pending for a while, some
> core suspend/resume fixes, some host controller fixes, the removal of a
> driver that is no longer needed (airprime), and lots of other good
> things.
>
> Please pull from:
> master.kernel.org:/pub/scm/linux/kernel/git/gregkh/usb-2.6.git/
>
> All of these patches have been in the -mm tree for a while, as well as
> the -next releases
>
> The full patches will be sent to the linux-usb mailing list, if anyone
> wants to see them.
>
> thanks,
>
> greg k-h
>
> ------------
>
> Documentation/DocBook/gadget.tmpl | 38 +
> Documentation/usb/gadget_serial.txt | 35 +-
> Documentation/usb/persist.txt | 7 +-
> Documentation/usb/uhci.txt | 165 ---
> drivers/hid/usbhid/hid-core.c | 2 +-
> drivers/usb/atm/cxacru.c | 1 -
> drivers/usb/atm/speedtch.c | 1 -
> drivers/usb/class/cdc-acm.c | 177 ++-
> drivers/usb/class/cdc-acm.h | 5 +
> drivers/usb/class/cdc-wdm.c | 127 ++-
> drivers/usb/core/devices.c | 4 -
> drivers/usb/core/devio.c | 94 +-
> drivers/usb/core/driver.c | 168 ++-
> drivers/usb/core/endpoint.c | 4 +-
> drivers/usb/core/file.c | 10 +-
> drivers/usb/core/hcd.c | 6 +-
> drivers/usb/core/hcd.h | 4 +-
> drivers/usb/core/hub.c | 536 ++++---
> drivers/usb/core/inode.c | 16 +-
> drivers/usb/core/message.c | 22 +-
> drivers/usb/core/usb.c | 7 +-
> drivers/usb/core/usb.h | 19 +-
> drivers/usb/gadget/Kconfig | 14 +
> drivers/usb/gadget/Makefile | 13 +-
> drivers/usb/gadget/amd5536udc.c | 2 +-
> drivers/usb/gadget/at91_udc.c | 13 +
> drivers/usb/gadget/cdc2.c | 246 ++++
> drivers/usb/gadget/composite.c | 1041 ++++++++++++++
> drivers/usb/gadget/config.c | 76 +-
> drivers/usb/gadget/dummy_hcd.c | 4 +-
> drivers/usb/gadget/epautoconf.c | 1 +
> drivers/usb/gadget/ether.c | 2631 +++-------------------------------
> drivers/usb/gadget/f_acm.c | 589 ++++++++
> drivers/usb/gadget/f_ecm.c | 833 +++++++++++
> drivers/usb/gadget/f_loopback.c | 381 +++++
> drivers/usb/gadget/f_rndis.c | 827 +++++++++++
> drivers/usb/gadget/f_serial.c | 296 ++++
> drivers/usb/gadget/f_sourcesink.c | 587 ++++++++
> drivers/usb/gadget/f_subset.c | 423 ++++++
> drivers/usb/gadget/file_storage.c | 4 +-
> drivers/usb/gadget/fsl_usb2_udc.c | 2 +-
> drivers/usb/gadget/g_zero.h | 25 +
> drivers/usb/gadget/gadget_chips.h | 23 +
> drivers/usb/gadget/goku_udc.c | 2 +-
> drivers/usb/gadget/inode.c | 23 +-
> drivers/usb/gadget/lh7a40x_udc.c | 2 +-
> drivers/usb/gadget/m66592-udc.c | 2 +-
> drivers/usb/gadget/ndis.h | 10 +-
> drivers/usb/gadget/net2280.c | 2 +-
> drivers/usb/gadget/omap_udc.c | 2 +-
> drivers/usb/gadget/printer.c | 7 +-
> drivers/usb/gadget/pxa25x_udc.c | 2 +-
> drivers/usb/gadget/pxa27x_udc.c | 1 -
> drivers/usb/gadget/rndis.c | 421 ++-----
> drivers/usb/gadget/rndis.h | 9 +-
> drivers/usb/gadget/serial.c | 2315 ++----------------------------
> drivers/usb/gadget/u_ether.c | 967 +++++++++++++
> drivers/usb/gadget/u_ether.h | 127 ++
> drivers/usb/gadget/u_serial.c | 1246 ++++++++++++++++
> drivers/usb/gadget/u_serial.h | 58 +
> drivers/usb/gadget/zero.c | 1162 ++--------------
> drivers/usb/host/ehci-au1xxx.c | 369 +++---
> drivers/usb/host/ehci-dbg.c | 4 +-
> drivers/usb/host/ehci-fsl.c | 17 +-
> drivers/usb/host/ehci-hcd.c | 2 +-
> drivers/usb/host/ehci-ixp4xx.c | 8 +-
> drivers/usb/host/ehci-orion.c | 8 +-
> drivers/usb/host/ehci-ps3.c | 2 +-
> drivers/usb/host/ehci-q.c | 17 +-
> drivers/usb/host/ehci.h | 5 +-
> drivers/usb/host/isp116x-hcd.c | 25 +-
> drivers/usb/host/isp1760-hcd.c | 81 +-
> drivers/usb/host/isp1760-hcd.h | 20 +-
> drivers/usb/host/isp1760-if.c | 37 +-
> drivers/usb/host/ohci-at91.c | 9 +-
> drivers/usb/host/ohci-au1xxx.c | 327 ++---
> drivers/usb/host/ohci-dbg.c | 2 +-
> drivers/usb/host/ohci-hcd.c | 2 +-
> drivers/usb/host/ohci-omap.c | 2 +-
> drivers/usb/host/ohci-pnx4008.c | 28 +-
> drivers/usb/host/ohci-ppc-of.c | 2 +-
> drivers/usb/host/ohci-ps3.c | 2 +-
> drivers/usb/host/ohci-q.c | 3 -
> drivers/usb/host/ohci-sm501.c | 2 +-
> drivers/usb/host/ohci-ssb.c | 2 +-
> drivers/usb/host/r8a66597-hcd.c | 44 +-
> drivers/usb/host/sl811-hcd.c | 2 +-
> drivers/usb/host/u132-hcd.c | 2 +-
> drivers/usb/host/uhci-hub.c | 2 +-
> drivers/usb/misc/auerswald.c | 10 +-
> drivers/usb/misc/emi62.c | 2 -
> drivers/usb/misc/ftdi-elan.c | 24 -
> drivers/usb/misc/iowarrior.c | 8 +-
> drivers/usb/misc/rio500.c | 8 +-
> drivers/usb/misc/sisusbvga/sisusb.c | 13 +-
> drivers/usb/misc/usblcd.c | 6 +-
> drivers/usb/mon/mon_stat.c | 14 +-
> drivers/usb/serial/Kconfig | 8 -
> drivers/usb/serial/Makefile | 1 -
> drivers/usb/serial/airprime.c | 353 -----
> drivers/usb/serial/cp2101.c | 13 +-
> drivers/usb/serial/digi_acceleport.c | 3 +-
> drivers/usb/serial/io_ti.c | 1860 +++++++++++-------------
> drivers/usb/serial/ipaq.c | 3 +-
> drivers/usb/serial/ir-usb.c | 490 ++++---
> drivers/usb/serial/keyspan.h | 5 +-
> drivers/usb/serial/keyspan_pda.c | 2 +-
> drivers/usb/serial/kl5kusb105.c | 2 +-
> drivers/usb/serial/option.c | 2 +
> drivers/usb/serial/usb-serial.c | 13 +-
> drivers/usb/serial/usb_debug.c | 9 +
> drivers/usb/storage/datafab.c | 2 -
> drivers/usb/storage/debug.c | 2 -
> drivers/usb/storage/debug.h | 2 -
> drivers/usb/storage/dpcm.c | 2 -
> drivers/usb/storage/dpcm.h | 2 -
> drivers/usb/storage/freecom.c | 2 -
> drivers/usb/storage/freecom.h | 2 -
> drivers/usb/storage/initializers.c | 2 -
> drivers/usb/storage/initializers.h | 2 -
> drivers/usb/storage/isd200.c | 8 +-
> drivers/usb/storage/jumpshot.c | 2 -
> drivers/usb/storage/protocol.c | 2 -
> drivers/usb/storage/protocol.h | 2 -
> drivers/usb/storage/scsiglue.c | 53 +-
> drivers/usb/storage/scsiglue.h | 2 -
> drivers/usb/storage/sddr09.c | 1 -
> drivers/usb/storage/sddr09.h | 2 -
> drivers/usb/storage/sddr55.c | 2 -
> drivers/usb/storage/sddr55.h | 2 -
> drivers/usb/storage/shuttle_usbat.c | 2 -
> drivers/usb/storage/shuttle_usbat.h | 2 -
> drivers/usb/storage/transport.c | 83 +-
> drivers/usb/storage/transport.h | 2 -
> drivers/usb/storage/unusual_devs.h | 13 +-
> drivers/usb/storage/usb.c | 111 +-
> drivers/usb/storage/usb.h | 25 +-
> include/linux/usb.h | 12 +-
> include/linux/usb/composite.h | 338 +++++
> include/linux/usb/gadget.h | 27 +-
> include/linux/usb/irda.h | 151 ++
> include/linux/usbdevice_fs.h | 2 -
> 142 files changed, 11623 insertions(+), 8951 deletions(-)
> delete mode 100644 Documentation/usb/uhci.txt
> create mode 100644 drivers/usb/gadget/cdc2.c
> create mode 100644 drivers/usb/gadget/composite.c
> create mode 100644 drivers/usb/gadget/f_acm.c
> create mode 100644 drivers/usb/gadget/f_ecm.c
> create mode 100644 drivers/usb/gadget/f_loopback.c
> create mode 100644 drivers/usb/gadget/f_rndis.c
> create mode 100644 drivers/usb/gadget/f_serial.c
> create mode 100644 drivers/usb/gadget/f_sourcesink.c
> create mode 100644 drivers/usb/gadget/f_subset.c
> create mode 100644 drivers/usb/gadget/g_zero.h
> create mode 100644 drivers/usb/gadget/u_ether.c
> create mode 100644 drivers/usb/gadget/u_ether.h
> create mode 100644 drivers/usb/gadget/u_serial.c
> create mode 100644 drivers/usb/gadget/u_serial.h
> delete mode 100644 drivers/usb/serial/airprime.c
> create mode 100644 include/linux/usb/composite.h
> create mode 100644 include/linux/usb/irda.h
>
> ---------------
>
> Adrian Bunk (3):
> USB: isp1760-hcd.c: make 2 functions static
> USB: remove CVS keywords
> USB: remove Documentation/usb/uhci.txt
>
> Akinobu Mita (1):
> USB: usbmon: use simple_read_from_buffer()
>
> Alan Cox (8):
> USB: io_ti: FIrst cut at a big clean up
> USB: gadget: Push BKL down into drivers
> USB: ftdi_usb: Eliminate ioctl and BKL ioctl use
> USB: usblcd: Push down BKL into driver
> USB: iowarrior: Push down BKL
> USB: auerwald: Push down the BKL into the driver
> USB: rio100: Push down the BKL
> USB: sisusb: Push down the BKL
>
> Alan Stern (20):
> USB: add new routine for checking port-resume type
> USB: debounce before unregistering
> USB: simplify hub_restart() logic
> USB: try to salvage lost power sessions
> USB: optimize port debouncing during hub activation
> USB: combine hub_activate and hub_restart
> USB: combine hub_quiesce and hub_stop
> usb-storage: separate dynamic flags from fixed flags
> usb-storage: change remaining semaphore to completion
> USB: implement "soft" unbinding
> usb-storage: implement "soft" unbinding
> USB Gadget: documentation update
> USB: use standard SG iterator in the scatter-gather library
> USB: Force unbinding of drivers lacking reset_resume or other methods
> usbfs: send disconnect signals when device is unregistered
> usbfs: simplify the lookup-by-minor routines
> usbfs: fix race between open and unregister
> usbfs: don't store bad pointers in registration
> USB: use reset_resume when normal resume fails
> usb-storage: revert DMA-alignment change for Wireless USB
>
> Aleksey Gorelov (1):
> USB: debug port converter does not accept more than 8 byte packets
>
> Alexey Dobriyan (1):
> USB: rndis: switch to seq_files
>
> Andre Haupt (1):
> USB: usb-serial: fix a sparse warning about different signedness
>
> Andrew Lunn (1):
> USB: storage: UNUSUAL_DEVS() for PanDigital Picture frame.
>
> Andrew Morton (1):
> USB: drivers/usb/host/isp1760-hcd.c: processor flags have type `unsigned long'
>
> Ben Collins (1):
> USB: keyspan: Remove duplicate device entries
>
> Benny Halevy (1):
> usb: fix uninitialized variable warning in keyspan_pda
>
> Christophe Jaillet (1):
> USB: AccessRunner: avoid unnecessary memset
>
> Daniel Ribeiro (1):
> USB: remove board-specific UP2OCR configuration from pxa27x-udc
>
> David Brownell (20):
> USB: at91_udc: updated fifo sizes
> usb gadget: split out serial core
> usb gadget: use new serial core
> usb gadget: descriptor copying support
> usb gadget: composite gadget core
> usb gadget zero: split out source/sink config
> usb gadget zero: split out loopback config
> usb gadget zero: use composite gadget framework
> usb gadget serial: split out CDC ACM function
> usb gadget serial: split out generic serial function
> usb gadget serial: use composite gadget framework
> usb gadget: RNDIS cleanups
> usb ethernet gadget: split out network core
> usb ethernet gadget: split CDC Subset function
> usb ethernet gadget: split CDC Ethernet function
> usb ethernet gadget: split RNDIS function
> usb gadget: new "CDC Composite" gadget driver
> usb ethernet gadget: use composite gadget framework
> USB: ehci-hcd unlink speedups
> usb_gadget: composite cdc gadget fault handling
>
> David Howells (1):
> USB: Fix pointer/int cast in USB devio code
>
> David Lopo (1):
> usb gadget: minor USBCV fix for composite framework
>
> Eric Miao (1):
> USB: make SA1111 OHCI driver SA11x0 specific
>
> Felipe Balbi (2):
> usb: hub: add check for unsupported bus topology
> usb: irda: cleanup on ir-usb module
>
> Greg Kroah-Hartman (4):
> USB: handle pci_name() being const
> USB: revert "don't lose disconnections during suspend"
> USB: revert "don't use reset-resume if drivers don't support it"
> USB: delete airprime driver
>
> Harvey Harrison (4):
> USB: use get_unaligned_* helpers for kl5kusb105 driver
> USB: digi_accelport.c trivial sparse lock annotation
> USB: cp2101.c fix sparse signedness mismatch warnings
> USB: speedtch.c fix sparse shadowed variable warning
>
> Jean Delvare (1):
> USB: ohci-pnx4008: I2C cleanups and fixes
>
> Julien May (1):
> USB: Fix bug with byte order in isp116x-hcd.c fio write/read
>
> Kay Sievers (2):
> USB: usb dev_name() instead of dev->bus_id
> USB: usb dev_set_name() instead of dev->bus_id
>
> Manuel Lauss (2):
> USB: Au1xxx-usb: clean up ohci/ehci bus glue sources.
> USB: Au1xxx-usb: suspend/resume support.
>
> Ming Lei (5):
> USB: host: mark const variable tables as "const"
> USB: uhci: mark root_hub_hub_des[] as const
> USB: remove interface parameter of usb_reset_composite_device
> USB: fix comment of usb_set_configuration
> USB: fix usb_reset_device and usb_reset_composite_device(take 3)
>
> Nate Case (1):
> USB: isp1760: Support board-specific hardware configurations
>
> Oliver Neukum (7):
> USB: cdc-wdm cleanup
> USB: additional power savings for cdc-acm devices that support remote wakeup
> USB: autosuspend for cdc-wdm
> USB: fix usb serial pm counter decrement for disconnected interfaces
> USB: fix disconnect bug in cdc-acm
> USB: fix build error in cdc-acm for CONFIG_PM=n
> USB: fix double kfree in ipaq in error case
>
> Pete Zaitcev (2):
> USB: missing usb_put_hcd to ohci-at91
> USB: ohci_hcd hang: submit vs. rmmod race
>
> Randy Dunlap (1):
> usb gadget: g_cdc dependso on NET
>
> Srikanth Srinivasan (1):
> USB: EHCI: Reconciling USB register differences on MPC85xx vs MPC83xx
>
> Stephen Rothwell (1):
> USB: ohci-ppc-of: use linux/of_platform.h instead of asm
>
> Yoshihiro Shimoda (2):
> usb: r8a66597-hcd: fix interrupt trigger
> usb: r8a66597-hcd: fix iinterval for Full/Low speed device
>
> --
> To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at http://vger.kernel.org/majordomo-info.html
> Please read the FAQ at http://www.tux.org/lkml/
^ permalink raw reply [flat|nested] 13+ messages in thread
* [USB boot crash, -git] ecm_do_notify(), list_add corruption. prev->next should be next (ffff88003b8f82f8)
2008-07-21 22:30 [GIT PATCH] USB patches for 2.6.26 Greg KH
2008-07-22 8:54 ` Benny Halevy
@ 2008-07-22 13:40 ` Ingo Molnar
2008-07-23 0:10 ` Greg KH
2008-07-23 23:37 ` David Brownell
1 sibling, 2 replies; 13+ messages in thread
From: Ingo Molnar @ 2008-07-22 13:40 UTC (permalink / raw)
To: Greg KH, David Brownell; +Cc: linux-kernel, linux-usb, Rafael J. Wysocki
hi Greg, David,
-tip randconfig boot testing just found this USB boot crash regression:
dummy_udc dummy_udc: enabled ep-a (ep1in-bulk) maxpacket 512
dummy_udc dummy_udc: enabled ep-b (ep2out-bulk) maxpacket 512
usb0: qlen 10
g_cdc gadget: notify connect false
list_add corruption. prev->next should be next (ffff88003b8f82f8), but was ffff88003b8f8e80. (prev=ffff88003b8f8e80).
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:33!
invalid opcode: 0000 [1] PREEMPT SMP DEBUG_PAGEALLOC
CPU 0
Pid: 0, comm: swapper Not tainted 2.6.26-tip-06162-g2ef4b1e-dirty #13411
RIP: 0010:[<ffffffff8045ed64>] [<ffffffff8045ed64>] __list_add+0x54/0x60
RSP: 0018:ffffffff80ef8c40 EFLAGS: 00010086
RAX: 0000000000000079 RBX: ffff88003b96a1f0 RCX: 0000000000000000
RDX: 0000000000004831 RSI: 0000000000000001 RDI: ffffffff80bc4240
RBP: ffffffff80ef8c40 R08: 0000000000000001 R09: ffffffff80259b1e
R10: ffffffff80259b1e R11: 0000000000000020 R12: ffff88003b8f8320
R13: ffff88003b96a1e0 R14: ffff88003b8f81a0 R15: ffff88003b8f82f8
FS: 0000000000000000(0000) GS:ffffffff80cfcb00(0000) knlGS:0000000000000000
CS: 0010 DS: 0018 ES: 0018 CR0: 000000008005003b
CR2: 0000000000000000 CR3: 0000000000201000 CR4: 00000000000006e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Process swapper (pid: 0, threadinfo ffffffff80d3c000, task ffffffff80bbb6c0)
Stack: ffffffff80ef8c90 ffffffff8073de15 ffffffff80ef8cd0 ffff88003b8f8e80
0000000000000082 ffffffff80aefa57 ffff88003b904688 ffff88003b96a240
ffff88003b96a1f0 ffff88003b8f8ae0 ffffffff80ef8cd0 ffffffff8073f3b6
Call Trace:
<IRQ> [<ffffffff8073de15>] dummy_queue+0xd5/0x1d0
[<ffffffff8073f3b6>] ecm_do_notify+0x116/0x1f0
[<ffffffff8073f4a5>] ecm_notify+0x15/0x20
[<ffffffff8073f851>] ecm_set_alt+0x111/0x1d0
[<ffffffff807418d7>] composite_setup+0x127/0x900
[<ffffffff80261136>] ? lock_release_holdtime+0x66/0x80
[<ffffffff8073d31b>] ? dummy_timer+0x65b/0xac0
[<ffffffff8073ccc0>] ? dummy_timer+0x0/0xac0
[<ffffffff8073d334>] dummy_timer+0x674/0xac0
[<ffffffff8073ccc0>] ? dummy_timer+0x0/0xac0
[<ffffffff80248c7b>] run_timer_softirq+0x1db/0x250
[<ffffffff80244936>] __do_softirq+0x66/0xd0
[<ffffffff8020ce8c>] call_softirq+0x1c/0x30
[<ffffffff8020f7a5>] do_softirq+0x45/0x80
[<ffffffff802447d5>] irq_exit+0xa5/0xb0
[<ffffffff8021ce0d>] smp_apic_timer_interrupt+0x8d/0xd0
[<ffffffff8020c8d6>] apic_timer_interrupt+0x66/0x70
<EOI> [<ffffffff80214395>] ? mwait_idle+0x45/0x50
[<ffffffff80209f97>] ? enter_idle+0x27/0x30
[<ffffffff8020a4f6>] ? cpu_idle+0x46/0xd0
[<ffffffff808fbe36>] ? rest_init+0x86/0x90
[<ffffffff80d4af5f>] ? start_kernel+0x31f/0x360
[<ffffffff80d4a284>] ? x86_64_start_reservations+0x84/0x90
[<ffffffff80d4a39f>] ? x86_64_start_kernel+0xdf/0xf0
Code: 89 d1 48 c7 c7 88 1c b1 80 48 89 c2 31 c0 e8 54 0b de ff 0f 0b eb fe 48 89 c1 4c 89 c6 48 c7 c7 d8 1c b1 80 31 c0 e8 3c 0b de ff <0f> 0b eb fe 66 66 66 90 66 66 66 90 55 48 8b 16 48 89 e5 e8 94
RIP [<ffffffff8045ed64>] __list_add+0x54/0x60
RSP <ffffffff80ef8c40>
Kernel panic - not syncing: Fatal exception in interrupt
Pid: 0, comm: swapper Tainted: G D 2.6.26-tip-06162-g2ef4b1e-dirty #13411
With this config:
http://redhat.com/~mingo/misc/config-Tue_Jul_22_13_44_45_CEST_2008.bad
i tried to do a blind revert of da741b8c5 ("usb ethernet gadget: split
CDC Ethernet function") where this crash originates from - but the
resulting kernel would not build. (it has followup dependencies)
upstream base is v2.6.26-5752-g93ded9b.
The crash is reproducible, can try any patch or suggestion. More info on
request.
I can try a bisection if really necessary although given the crash site
i suspect it will arrive to this bloc of commits:
0391c82: usb ethernet gadget: use composite gadget framework
19e2068: usb gadget: new "CDC Composite" gadget driver
45fe3b8: usb ethernet gadget: split RNDIS function
da741b8: usb ethernet gadget: split CDC Ethernet function
8a40819: usb ethernet gadget: split CDC Subset function
2b3d942: usb ethernet gadget: split out network core
Ingo
^ permalink raw reply [flat|nested] 13+ messages in thread
* Re: [GIT PATCH] USB patches for 2.6.26
2008-07-22 8:54 ` Benny Halevy
@ 2008-07-22 15:27 ` Greg KH
0 siblings, 0 replies; 13+ messages in thread
From: Greg KH @ 2008-07-22 15:27 UTC (permalink / raw)
To: Benny Halevy; +Cc: Linus Torvalds, Andrew Morton, linux-kernel, linux-usb
On Tue, Jul 22, 2008 at 11:54:51AM +0300, Benny Halevy wrote:
> You mean for 2.6.27, right?
No, they are to be applied to Linus's current tree, which right now is
still 2.6.26 (2.6.26-git8 or so to be exact).
They will show up in 2.6.27 though :)
thanks,
greg k-h
^ permalink raw reply [flat|nested] 13+ messages in thread
* Re: [USB boot crash, -git] ecm_do_notify(), list_add corruption. prev->next should be next (ffff88003b8f82f8)
2008-07-22 13:40 ` [USB boot crash, -git] ecm_do_notify(), list_add corruption. prev->next should be next (ffff88003b8f82f8) Ingo Molnar
@ 2008-07-23 0:10 ` Greg KH
2008-07-23 0:22 ` David Brownell
2008-07-23 23:37 ` David Brownell
1 sibling, 1 reply; 13+ messages in thread
From: Greg KH @ 2008-07-23 0:10 UTC (permalink / raw)
To: Ingo Molnar; +Cc: David Brownell, linux-kernel, linux-usb, Rafael J. Wysocki
On Tue, Jul 22, 2008 at 03:40:42PM +0200, Ingo Molnar wrote:
>
> hi Greg, David,
>
> -tip randconfig boot testing just found this USB boot crash regression:
>
> dummy_udc dummy_udc: enabled ep-a (ep1in-bulk) maxpacket 512
> dummy_udc dummy_udc: enabled ep-b (ep2out-bulk) maxpacket 512
Wierd, if we don't have the hardware, this shouldn't be a problem, right
David?
thanks,
greg k-h
^ permalink raw reply [flat|nested] 13+ messages in thread
* Re: [USB boot crash, -git] ecm_do_notify(), list_add corruption. prev->next should be next (ffff88003b8f82f8)
2008-07-23 0:10 ` Greg KH
@ 2008-07-23 0:22 ` David Brownell
0 siblings, 0 replies; 13+ messages in thread
From: David Brownell @ 2008-07-23 0:22 UTC (permalink / raw)
To: Greg KH
Cc: Ingo Molnar, David Brownell, linux-kernel, linux-usb, Rafael J. Wysocki
On Tuesday 22 July 2008, Greg KH wrote:
> On Tue, Jul 22, 2008 at 03:40:42PM +0200, Ingo Molnar wrote:
> >
> > hi Greg, David,
> >
> > -tip randconfig boot testing just found this USB boot crash regression:
> >
> > dummy_udc dummy_udc: enabled ep-a (ep1in-bulk) maxpacket 512
> > dummy_udc dummy_udc: enabled ep-b (ep2out-bulk) maxpacket 512
>
> Wierd, if we don't have the hardware, this shouldn't be a problem, right
> David?
Getting ready to reproduce it ... it takes a while to resync my
patch queue with git-current. :)
- Dave
^ permalink raw reply [flat|nested] 13+ messages in thread
* Re: [USB boot crash, -git] ecm_do_notify(), list_add corruption. prev->next should be next (ffff88003b8f82f8)
2008-07-22 13:40 ` [USB boot crash, -git] ecm_do_notify(), list_add corruption. prev->next should be next (ffff88003b8f82f8) Ingo Molnar
2008-07-23 0:10 ` Greg KH
@ 2008-07-23 23:37 ` David Brownell
2008-07-24 3:46 ` Alan Stern
1 sibling, 1 reply; 13+ messages in thread
From: David Brownell @ 2008-07-23 23:37 UTC (permalink / raw)
To: Ingo Molnar, Alan Stern
Cc: Greg KH, linux-kernel, linux-usb, Rafael J. Wysocki
On Tuesday 22 July 2008, Ingo Molnar wrote:
>
> hi Greg, David,
>
> -tip randconfig boot testing just found this USB boot crash regression:
Which I can reproduce with "dummy_hcd" (an emulator) but not
using a real peripheral controller driver ... using i386,
not x86_64 as you did, fwiw.
So far, the fingers point at dummy_hcd... the merge doesn't
seem to have had problems, and the gadget driver had been
tested with four different peripheral controller drivers
(pre-merge).
I'll give it a look on something with a serial console ... doing
it on a PC is useless, since the list debug stuff does a BUG()
which renders the machine unusable even if I could read more than
20 lines of data on the screen. :(
> dummy_udc dummy_udc: enabled ep-a (ep1in-bulk) maxpacket 512
> dummy_udc dummy_udc: enabled ep-b (ep2out-bulk) maxpacket 512
Was that all that it told you about? If it was telling you it
enabled those two, it *should* have previously told you it was
enabling ep-c and ep-d (also maxpacket 512) also ep-e and ep-f
(maxpacket 16 and 8, respectively, I'd think).
What it was doing here: The host side enumerated this (emulated)
device, activated altsetting with data (and hence ep-a and ep-b),
and the peripheral side then issued a link state notification.
But the link state notification (probably using ep-e) message
couldn't be queued (list_add_tail) because of this oopsing:
> usb0: qlen 10
> g_cdc gadget: notify connect false
> list_add corruption. prev->next should be next (ffff88003b8f82f8), but was ffff88003b8f8e80. (prev=ffff88003b8f8e80).
Now, prev->next == prev is expected here: that list of messages
should be empty.
What's wrong is that head->prev != head, meaning something
trashed a dummy_hcd data structure.
> ------------[ cut here ]------------
> kernel BUG at lib/list_debug.c:33!
> invalid opcode: 0000 [1] PREEMPT SMP DEBUG_PAGEALLOC
> ...
> Call Trace:
> <IRQ> [<ffffffff8073de15>] dummy_queue+0xd5/0x1d0
> [<ffffffff8073f3b6>] ecm_do_notify+0x116/0x1f0
I tried this on the "real hardware" (net2280) being emulated
in this case by this "dummy" driver, and it works just fine
with list debugging enabled. And I've used it with three
other flavors of "real hardware" (though not yet with the
latest kernel GIT), so I suspect it'll continue to work there.
My first reaction is to think this must be an issue with the
"dummy_hcd" code, since that's actually the proximate location
of the oops. I sanity checked the relevant ECM logic, and
it looks OK at first glance. (As I'd expect, since it already
worked with four different controller drivers!)
> [<ffffffff8073f4a5>] ecm_notify+0x15/0x20
> [<ffffffff8073f851>] ecm_set_alt+0x111/0x1d0
> [<ffffffff807418d7>] composite_setup+0x127/0x900
> [<ffffffff80261136>] ? lock_release_holdtime+0x66/0x80
> [<ffffffff8073d31b>] ? dummy_timer+0x65b/0xac0
> [<ffffffff8073ccc0>] ? dummy_timer+0x0/0xac0
> [<ffffffff8073d334>] dummy_timer+0x674/0xac0
> [<ffffffff8073ccc0>] ? dummy_timer+0x0/0xac0
> [<ffffffff80248c7b>] run_timer_softirq+0x1db/0x250
> [<ffffffff80244936>] __do_softirq+0x66/0xd0
> [<ffffffff8020ce8c>] call_softirq+0x1c/0x30
> [<ffffffff8020f7a5>] do_softirq+0x45/0x80
> [<ffffffff802447d5>] irq_exit+0xa5/0xb0
> [<ffffffff8021ce0d>] smp_apic_timer_interrupt+0x8d/0xd0
> [<ffffffff8020c8d6>] apic_timer_interrupt+0x66/0x70
> ...
> Kernel panic - not syncing: Fatal exception in interrupt
> Pid: 0, comm: swapper Tainted: G D 2.6.26-tip-06162-g2ef4b1e-dirty #13411
>
> With this config:
>
> http://redhat.com/~mingo/misc/config-Tue_Jul_22_13_44_45_CEST_2008.bad
>
> i tried to do a blind revert of da741b8c5 ("usb ethernet gadget: split
> CDC Ethernet function") where this crash originates from - but the
> resulting kernel would not build. (it has followup dependencies)
Right. These updates are arguably overdue: factoring the
individual functions out from each other. The Ethernet gadget
code had three (!) separate protocol stacks, each of which now
lives in its own file as does the core they shared.
So reverting them would be the wrong solution in any case.
- Dave
^ permalink raw reply [flat|nested] 13+ messages in thread
* Re: [USB boot crash, -git] ecm_do_notify(), list_add corruption. prev->next should be next (ffff88003b8f82f8)
2008-07-23 23:37 ` David Brownell
@ 2008-07-24 3:46 ` Alan Stern
2008-07-24 7:40 ` David Brownell
0 siblings, 1 reply; 13+ messages in thread
From: Alan Stern @ 2008-07-24 3:46 UTC (permalink / raw)
To: David Brownell
Cc: Ingo Molnar, Greg KH, linux-kernel, linux-usb, Rafael J. Wysocki
On Wed, 23 Jul 2008, David Brownell wrote:
> So far, the fingers point at dummy_hcd... the merge doesn't
> seem to have had problems, and the gadget driver had been
> tested with four different peripheral controller drivers
> (pre-merge).
> But the link state notification (probably using ep-e) message
> couldn't be queued (list_add_tail) because of this oopsing:
>
>
> > usb0: qlen 10
> > g_cdc gadget: notify connect false
> > list_add corruption. prev->next should be next (ffff88003b8f82f8), but was ffff88003b8f8e80. (prev=ffff88003b8f8e80).
>
> Now, prev->next == prev is expected here: that list of messages
> should be empty.
>
> What's wrong is that head->prev != head, meaning something
> trashed a dummy_hcd data structure.
The problem could easily be that dummy-hcd simply isn't
list-debugging-safe. I wouldn't be at all surprised if, for example,
it adds a node to a list without initializing the node first.
Alan Stern
^ permalink raw reply [flat|nested] 13+ messages in thread
* Re: [USB boot crash, -git] ecm_do_notify(), list_add corruption. prev->next should be next (ffff88003b8f82f8)
2008-07-24 3:46 ` Alan Stern
@ 2008-07-24 7:40 ` David Brownell
2008-07-25 3:57 ` Alan Stern
0 siblings, 1 reply; 13+ messages in thread
From: David Brownell @ 2008-07-24 7:40 UTC (permalink / raw)
To: Alan Stern
Cc: Ingo Molnar, Greg KH, linux-kernel, linux-usb, Rafael J. Wysocki
On Wednesday 23 July 2008, Alan Stern wrote:
> On Wed, 23 Jul 2008, David Brownell wrote:
>
> > So far, the fingers point at dummy_hcd... the merge doesn't
> > seem to have had problems, and the gadget driver had been
> > tested with four different peripheral controller drivers
> > (pre-merge).
>
> > > list_add corruption. prev->next should be next (ffff88003b8f82f8),
> > > but was ffff88003b8f8e80. (prev=ffff88003b8f8e80).
> >
> > Now, prev->next == prev is expected here: that list of messages
> > should be empty.
> >
> > What's wrong is that head->prev != head, meaning something
> > trashed a dummy_hcd data structure.
>
> The problem could easily be that dummy-hcd simply isn't
> list-debugging-safe. I wouldn't be at all surprised if, for example,
> it adds a node to a list without initializing the node first.
I would be surprised if it did something that foolish. ;)
Trying this with a serial console and some extra debug printfs suggests
to me that the culprit is the code near line 548 of dummy_hcd.c near
the end of dummy_queue. That "emulated single-request fifo" code is
kicking in, and doing very strange stuff. See annotated console log
below.
Note that the "ECM" rework did change how these notifications were
issued a bit ... less of a gross hack, now it's just a little bit
ugly and has a little state machine. It's actually less demanding
on the underlying driver, but I could believe dummy_hcd hasn't had
to cope with this (valid) I/O pattern before.
- Dave
dummy_udc dummy_udc: binding gadget driver 'g_cdc'
g_cdc gadget: using random self ethernet address
g_cdc gadget: using random host ethernet address
usb0: MAC a2:85:65:50:b6:19
usb0: HOST MAC d6:ce:e9:16:bf:b3
gserial_setup: registered 1 ttyGS* device
g_cdc gadget: adding config #1 'CDC Composite (ECM + ACM)'/bf00da0c
g_cdc gadget: adding 'cdc_ethernet'/c174ea24 to config 'CDC Composite (ECM + ACM)'/bf00da0c
g_cdc gadget: CDC Ethernet: dual speed IN/ep-a OUT/ep-b NOTIFY/ep-c
g_cdc gadget: adding 'acm'/c174eb10 to config 'CDC Composite (ECM + ACM)'/bf00da0c
g_cdc gadget: acm ttyGS0: dual speed IN/ep-d OUT/ep-e NOTIFY/ep-f
g_cdc gadget: cfg 1/bf00da0c speeds: high full
g_cdc gadget: interface 0 = cdc_ethernet/c174ea24
g_cdc gadget: interface 1 = cdc_ethernet/c174ea24
g_cdc gadget: interface 2 = acm/c174eb10
g_cdc gadget: interface 3 = acm/c174eb10
g_cdc gadget: CDC Composite Gadget, version: King Kamehameha Day 2008
g_cdc gadget: g_cdc ready
dummy_hcd dummy_hcd: port status 0x00010101 has changes
hub 1-0:1.0: state 7 ports 1 chg 0000 evt 0002
dummy_hcd dummy_hcd: port status 0x00010101 has changes
hub 1-0:1.0: port 1, status 0101, change 0001, 12 Mb/s
hub 1-0:1.0: debounce: port 1: total 100ms stable 100ms status 0x101
g_cdc gadget: resume
dummy_hcd dummy_hcd: port status 0x00100503 has changes
usb 1-1: new high speed USB device using dummy_hcd and address 2
I modified dummy_hcd to print messages whenever a request
was queued to an endpoint, or acompletion was issued.
If the endpoint queue was empty at that time, it's shown.
So for example this must be a device descriptor fetch:
ep0: queue req c10989bc (q empty)
ep0: complete c10989bc (q empty)
g_cdc gadget: resume
dummy_hcd dummy_hcd: port status 0x00100503 has changes
dummy_udc dummy_udc: set_address = 2
ep0: queue req c10989bc (q empty)
ep0: complete c10989bc (q empty)
ep0: queue req c10989bc (q empty)
ep0: complete c10989bc (q empty)
ep0: queue req c10989bc (q empty)
ep0: complete c10989bc (q empty)
usb 1-1: skipped 3 descriptors after interface
usb 1-1: skipped 4 descriptors after interface
ep0: queue req c10989bc (q empty)
ep0: complete c10989bc (q empty)
usb 1-1: default language 0x0409
ep0: queue req c10989bc (q empty)
ep0: complete c10989bc (q empty)
ep0: queue req c10989bc (q empty)
ep0: complete c10989bc (q empty)
usb 1-1: uevent
usb 1-1: usb_probe_device
usb 1-1: configuration #1 chosen from 1 choice
g_cdc gadget: high speed config #1: CDC Composite (ECM + ACM)
Control interface activated: one notification endpoint.
dummy_udc dummy_udc: enabled ep-c (ep3in-intr) maxpacket 16
This "init ecm" message means the data interface
has been set to altsetting 0 (no data).
g_cdc gadget: init ecm
Last step of entering altsetting 0: issue a connect status
notification. (Where "connected" means that the peripheral
ethernet link is "up".) Later when that is completed, reuse
that request to issue a speed notification.
g_cdc gadget: notify connect false
ep-c: queue req c10980e0 (q empty)
Here's where it starts to go squirrely...
You would EXPECT to see a completion callback here since
that's what dummy_queue() says to do: write this small
packet into a FIFO (just like Real Hardware would) and
wait for the host to collect it.
Note that the emulated FIFO is represented by a request
object ... one that *never* seems to get a completion
issued for it. That seems very wrong...
g_cdc gadget: notify speed 425984000
ep-c: queue req c10980e0 (q empty)
So in fact we next saw the "notify speed" diagnostic (above)
which is only triggered through that ecm_notify_complete()
callback. How could that be?
Plus, the endpoint's queue is somehow empty here; lacking
any completion from the previously queued request, how?
ep-c: FIFO complete IN req c10980e0 (q empty)
OK, there was a completion message, like I would have expected
earlier (before "notify speed...") ...
ep-c: FIFO complete IN req c10980e0
... followed immediately by a second completion message,
reporting that the (reused) request was reported as
complete.
Note that it does not say the endpoint request queue was
empty here ... that's fishy. How?
dummy_udc dummy_udc: enabled ep-f (ep6in-intr) maxpacket 8
g_cdc gadget: activate acm ttyGS0
dummy_udc dummy_udc: enabled ep-d (ep4in-bulk) maxpacket 512
dummy_udc dummy_udc: enabled ep-e (ep5out-bulk) maxpacket 512
ep0: queue req c10989bc (q empty)
ep0: complete c10989bc (q empty)
usb 1-1: adding 1-1:1.0 (config #1, interface 0)
usb 1-1:1.0: uevent
ep0: queue req c10989bc (q empty)
ep0: complete c10989bc (q empty)
usb 1-1: adding 1-1:1.1 (config #1, interface 1)
usb 1-1:1.1: uevent
usb 1-1: adding 1-1:1.2 (config #1, interface 2)
usb 1-1:1.2: uevent
ep0: queue req c10989bc (q empty)
ep0: complete c10989bc (q empty)
usb 1-1: adding 1-1:1.3 (config #1, interface 3)
usb 1-1:1.3: uevent
ep0: queue req c10989bc (q empty)
ep0: complete c10989bc (q empty)
... all those ep0 requests worked just fine ...
drivers/usb/core/inode.c: creating file '002'
usb 1-1: New USB device found, idVendor=0525, idProduct=a4aa
usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
usb 1-1: Product: CDC Composite Gadget
usb 1-1: Manufacturer: Linux 2.6.26 with dummy_udc
hub 1-0:1.0: state 7 ports 1 chg 0000 evt 0002
cdc_ether 1-1:1.0: usb_probe_interface
cdc_ether 1-1:1.0: usb_probe_interface - got id
g_cdc gadget: activate ecm
dummy_udc dummy_udc: enabled ep-a (ep1in-bulk) maxpacket 512
dummy_udc dummy_udc: enabled ep-b (ep2out-bulk) maxpacket 512
usb0: qlen 10
And right here it goes really bad...
This is the third time this request object was used to
send a short notification packet through this endpoint.
Completions were issued for both previous packets.
Notice that the queue should have been empty here (but
isn't), but that the "fifo_req" never had a completion
issued.
g_cdc gadget: notify connect false
ep-c: queue req c10980e0
list_add corruption. prev->next should be next (c1c0b220), but was c1c0b7f0. (prev=c1c0b7f0).
kernel BUG at lib/list_debug.c:33!
Unable to handle kernel NULL pointer dereference at virtual address 00000000
pgd = c17f8000
[00000000] *pgd=2178b031, *pte=00000000, *ppte=00000000
Internal error: Oops: 817 [#1]
Modules linked in: cdc_ether(+) g_cdc dummy_hcd [last unloaded: ohci_hcd]
CPU: 0 Not tainted (2.6.26 #98)
PC is at __bug+0x20/0x2c
LR is at vprintk+0x32c/0x374
pc : [<c00224d0>] lr : [<c00343cc>] psr: 60000093
sp : c17b7598 ip : c17b74c0 fp : c17b75a4
r10: c10980d8 r9 : c1c0b7f0 r8 : c1c0b220
r7 : c1c0b614 r6 : c1c0b234 r5 : c1c0b174 r4 : c10980e0
r3 : 00000000 r2 : 60000093 r1 : c01c4690 r0 : 00000026
Flags: nZCv IRQs off FIQs on Mode SVC_32 ISA ARM Segment kernel
Control: c000317f Table: 217f8000 DAC: 00000017
Process klogd (pid: 711, stack limit = 0xc17b6260)
Stack: (0xc17b7598 to 0xc17b8000)
7580: c17b75b4 c17b75a8
75a0: c00fcdfc c00224c0 c17b75e4 c17b75b8 bf002394 c00fcdb0 60000093 c174ea24
75c0: c170c94c 00000001 c1066690 c174ea24 c170c94c c10980e0 c17b7610 c17b75e8
75e0: bf007150 bf0021f8 c174ea24 c170c94c 00000001 00000001 c109960c 0000d000
7600: c170c94c c17b7620 c17b7614 bf0071b8 bf006fec c17b763c c17b7624 bf007570
7620: bf0071b0 00000001 00000001 c17b76b4 c17b7688 c17b7640 bf0097e8 bf0073e8
7640: 00000002 c1c0b174 bf001420 c1c0b614 bf0013b4 c10989bc 00000000 c1c0b174
7660: 00000001 c1c0b190 c1c0b174 bf0013b4 c109960c 0000d000 c1c0b190 c17b76e4
7680: c17b768c bf001c68 bf009120 c17bc2c0 c1066e88 c1c0b8a8 60000013 c17b76a8
76a0: c005510c c0054ed4 c0281ec0 c1c0b868 c0281ec0 00010b01 00000001 00000101
76c0: c1c0b868 c0281ec0 bf0013b4 c17b6000 00000000 00000040 c17b7718 c17b76e8
76e0: c003cdbc bf0013c4 c1c0b884 00000000 c17b76f0 c17b76f0 c0281ca4 00000087
7700: 0000000a c171f5f8 00000001 c17b7734 c17b771c c0038898 c003cc5c 60000093
7720: c015eda4 c1c4ba80 c17b7748 c17b7738 c0038968 c003883c c17b6000 c17b7760
7740: c17b774c c003908c c003892c c171f5c0 00000000 c17b778c c17b7764 c015eda4
7760: c0038fe8 00000001 c015ea74 c1c4ba80 c170c604 0000000e 00000000 c1735360
7780: c17b77ac c17b7790 c01785c4 c015e980 c1c4ba80 c1c4ba80 c172c000 00000040
77a0: c17b77bc c17b77b0 c0178910 c01783c8 c17b77d0 c17b77c0 c0176e90 c01788cc
77c0: c1075c4c c17b77fc c17b77d4 c01771b4 c0176e74 c17b7a14 c1c4ba80 c1735360
77e0: c172c000 c1075c60 c172c000 7800000a c17b782c c17b7800 c01932a4 c0176ea4
7800: c172c0e4 00000000 c1735360 00000000 00000000 c172c000 c17b79f8 7800000a
7820: c17b78d8 c17b7830 c0194438 c0192ffc 00000000 c17b78a0 c1735360 00004040
7840: 00000070 00000000 00000011 0000c103 00000000 7800000a 00000000 00000108
7860: 00000000 00000000 00000000 00000000 7800000a 5f00000a 00000000 00000000
7880: 00000000 00000000 00000000 00000000 00000000 00000011 0108c103 00000000
78a0: 7800000a 00000000 00000000 c1735360 c172c000 00000070 c17b78fc c17b79f8
78c0: 00000010 c1807200 c17b79f8 c17b78f8 c17b78dc c019ab04 c0193fc4 c17bc2c0
78e0: c17b79f8 c17b78fc c1c528e8 c17b79d8 c17b78fc c014f7dc c019aab8 c1c520c0
7900: c1c4b1c0 00000000 00000001 ffffffff 00000000 00000000 00000000 00000000
7920: 00000000 c17bc2c0 00000000 00000000 c0174964 c17bc2c0 c0048654 c17b793c
7940: c17b793c c00569dc c00555ec c17b7980 00000000 c1c4b1c0 c17b6000 00000000
7960: c17bc2c0 c0055190 00000040 c17b7994 c17b797c c005510c c0054ed4 c17b6000
7980: 00000000 00000001 00000001 00000070 c1807200 00000000 00000000 c17b79f8
79a0: c02b7d50 c17bc2c0 c1c0a7a8 c17b7a20 c17b79bc c0055b40 c00549b8 c1759080
79c0: c17b6000 bf000000 c1c0a7ac c17b79f0 c17b79dc c0150a54 c014f738 00004040
79e0: 00000000 c17b7a44 c17b79f4 c01ae4c8 c0150a1c 00000070 c1c528e8 00000010
7a00: c17b7a14 00000001 00000000 00000000 00004040 c1759084 00000070 00000070
7a20: 00000000 00000000 00000010 c1c0a7ac c1736c00 c1c0a7a8 c17b7a84 c17b7a48
7a40: c01ae57c c01ae43c 00000000 00000000 c1807200 c1c0a81c c17b7a74 c1c0a834
7a60: c1c0a7a8 c1c528dc c1736c00 c1c528dc c1736c00 c1c0a7a8 c17b7aa8 c17b7a88
7a80: c01b05b4 c01ae4e8 00000000 c1c0a834 c1c52c80 c1c0a81c c1736c00 c17b7ad4
7aa0: c17b7aac c01ad070 c01b058c c1c0a7a8 c1c0a7a8 00000000 c1736c00 c04cdaec
7ac0: c17b7df4 c04cdaec c17b7af8 c17b7ad8 c01ab8ec c01acfa0 c1816628 c1736c00
7ae0: c1736c00 00000000 c1736c48 c17b7b18 c17b7afc c01b1ccc c01ab6dc c1736c00
7b00: c17b7b48 00000000 c17b7b48 c17b7b2c c17b7b1c c01b1f30 c01b1c54 c1736c00
7b20: c17b7b44 c17b7b30 c01aabc8 c01b1f08 c1740684 c17b7b84 c17b7b80 c17b7b48
7b40: c01aaca8 c01aab70 00000000 c1740684 c17b7b84 c01cfc00 00000000 00000000
7b60: 00000000 c1816628 c17b7bbc c1740000 c17b7b84 c17b7bb4 c17b7b84 c00d2fd8
7b80: c01aac5c c0256ccc c1816628 c17b7bbc 00000000 c1816734 c1740000 c1814114
7ba0: c17b7bbc c1816620 c17b7c70 c17b7bb8 c00cc6d4 c00d2f70 c17b7c2c c17b0000
7bc0: c0055b40 c00549b8 c17bc5c8 0000001f 00000000 00000000 00000000 00000000
7be0: 00000000 c1813ad0 00000000 00000001 c02ba924 c046347c c17bc5c8 00000046
7c00: 00000000 60000013 c17b6000 00000000 c17b7ee8 c17b7ee8 c17b7df4 c17b7e08
7c20: c17b7c54 c17b7c30 c00569dc c00555ec 00000002 c17b7c58 c17b7c44 c00cc850
7c40: c00cb984 c1814114 000005ec c1813ab8 c1816734 c1814114 c17b7ee8 c1813310
7c60: c17b7e08 c17b7da8 c17b7c74 c00ca2e0 c00cc5f4 c0254088 00000000 00000001
7c80: 00000000 00000000 c17bc5c8 00000029 00000000 60000013 c17b6000 00000000
7ca0: c024adac 00000001 00000002 c17bc5f0 c02ba924 c17bc2c0 0002bbb4 c17b7d30
7cc0: c17b7ccc c0055b40 c00549b8 c02b9208 c17bc2c0 00014800 00000000 00000000
7ce0: 00000000 00000000 c1813ad0 00000001 00000000 c02ba924 c046ac7c c17bc5f0
7d00: 00014846 00000000 60000013 c17b6000 00000000 c17b7df4 00000002 c11e4105
7d20: 0002bbb4 c17b7d58 c17b7d34 c00569dc c00555ec 00000002 c1813ac0 c1813ae0
7d40: c1813ac0 c1813ab8 c1813310 c17b7df4 c1813ac0 c1813ab8 c1813ab8 c1813310
7d60: c17b7df4 00000002 c17b7da8 c17b7d78 c00996b0 c00566ac 00000001 c0099550
7d80: 000041ed c17b7ee8 c1813ab8 c17b7ee8 00000000 c1814114 c17b7ee8 c17b7dd8
7da0: c17b7dac c008f8ac c00ca15c c1c03780 000041ed c17b7ee8 00000000 c1814114
7dc0: c11e4100 c17b6000 400ac1fc c17b7e38 c17b7ddc c0090ef4 c008f774 c11e4107
7de0: 00000000 00000101 c17bc5c8 00000044 c17b6000 0002bbb4 00000002 c11e4105
7e00: 00000001 c11e4100 c1c03780 c1813310 c1c3a584 c17b7ee8 c11e4100 c17b7e3c
7e20: c11e4100 c17b6000 400ac1fc c17b7e60 c17b7e3c c0091494 c009056c c1c03780
7e40: c180ab7c c1c3a584 c1c3a580 c17b7ee8 00000001 c17b7e88 c17b7e64 c00917b4
7e60: c0091450 c17b7e70 c17b7ee8 ffffff9c c11e4100 00000001 ffffff9c c17b7ea8
7e80: c17b7e8c c009238c c0091654 00000000 00000004 c11e4100 00000001 c17b7ec0
7ea0: c17b7eac c009245c c0092348 00000001 00000000 c17b7f70 c17b7ec4 c0092750
7ec0: c0092448 00000001 c02c23dc 0000ffff 00000000 00000004 00000000 00000000
7ee0: c17b6000 00000000 c1c03780 c1813310 c17b6000 00000000 c17b7f2c 00000101
7f00: 00000001 00000000 00000002 c1092e24 400b1a80 c1092e24 00000004 c17b6000
7f20: c1092e08 c1092e24 c17b7f48 00000001 00000000 c11eaa80 00000004 c17b7f70
7f40: c17b7f4c c00858d0 00000000 00000004 c11e4100 0000ffff ffffff9c c17b6000
7f60: 400ac1fc c17b7f94 c17b7f74 c0085930 c00926e4 00000000 400b1a80 400ad270
7f80: 00000005 c001ec24 c17b7fa4 c17b7f98 c00859ac c00858ec 00000000 c17b7fa8
7fa0: c001ea80 c0085998 00000000 400b1a80 400a1b88 00000000 0000ffff 00000000
7fc0: 00000000 400b1a80 400ad270 00000007 000affd4 00000002 400ac1fc 00000ad0
7fe0: 400ac9a4 beee27d0 40085908 40099930 60000010 400a1b88 00000000 00000000
Backtrace:
[<c00224b0>] (__bug+0x0/0x2c) from [<c00fcdfc>] (__list_add+0x5c/0x7c)
[<c00fcda0>] (__list_add+0x0/0x7c) from [<bf002394>] (dummy_queue+0x1ac/0x1e8 [dummy_hcd])
[<bf0021e8>] (dummy_queue+0x0/0x1e8 [dummy_hcd]) from [<bf007150>] (ecm_do_notify+0x174/0x1c4 [g_cdc])
[<bf006fdc>] (ecm_do_notify+0x0/0x1c4 [g_cdc]) from [<bf0071b8>] (ecm_notify+0x18/0x1c [g_cdc])
[<bf0071a0>] (ecm_notify+0x0/0x1c [g_cdc]) from [<bf007570>] (ecm_set_alt+0x198/0x1b4 [g_cdc])
[<bf0073d8>] (ecm_set_alt+0x0/0x1b4 [g_cdc]) from [<bf0097e8>] (composite_setup+0x6d8/0x8cc [g_cdc])
r6:c17b76b4 r5:00000001 r4:00000001
[<bf009110>] (composite_setup+0x0/0x8cc [g_cdc]) from [<bf001c68>] (dummy_timer+0x8b4/0x910 [dummy_hcd])
[<bf0013b4>] (dummy_timer+0x0/0x910 [dummy_hcd]) from [<c003cdbc>] (run_timer_softirq+0x170/0x200)
[<c003cc4c>] (run_timer_softirq+0x0/0x200) from [<c0038898>] (__do_softirq+0x6c/0xf0)
r8:00000001 r7:c171f5f8 r6:0000000a r5:00000087 r4:c0281ca4
[<c003882c>] (__do_softirq+0x0/0xf0) from [<c0038968>] (do_softirq+0x4c/0x70)
r6:c1c4ba80 r5:c015eda4 r4:60000093
[<c003891c>] (do_softirq+0x0/0x70) from [<c003908c>] (local_bh_enable+0xb4/0xe8)
r4:c17b6000
[<c0038fd8>] (local_bh_enable+0x0/0xe8) from [<c015eda4>] (dev_queue_xmit+0x434/0x494)
r5:00000000 r4:c171f5c0
The NFS traffic below seems like it should be irrelevant.
[<c015e970>] (dev_queue_xmit+0x0/0x494) from [<c01785c4>] (ip_finish_output+0x20c/0x25c)
r8:c1735360 r7:00000000 r6:0000000e r5:c170c604 r4:c1c4ba80
[<c01783b8>] (ip_finish_output+0x0/0x25c) from [<c0178910>] (ip_output+0x54/0x5c)
r7:00000040 r6:c172c000 r5:c1c4ba80 r4:c1c4ba80
[<c01788bc>] (ip_output+0x0/0x5c) from [<c0176e90>] (ip_local_out+0x2c/0x30)
[<c0176e64>] (ip_local_out+0x0/0x30) from [<c01771b4>] (ip_push_pending_frames+0x320/0x39c)
r4:c1075c4c
[<c0176e94>] (ip_push_pending_frames+0x0/0x39c) from [<c01932a4>] (udp_push_pending_frames+0x2b8/0x310)
[<c0192fec>] (udp_push_pending_frames+0x0/0x310) from [<c0194438>] (udp_sendmsg+0x484/0x590)
[<c0193fb4>] (udp_sendmsg+0x0/0x590) from [<c019ab04>] (inet_sendmsg+0x5c/0x64)
[<c019aaa8>] (inet_sendmsg+0x0/0x64) from [<c014f7dc>] (sock_sendmsg+0xb4/0xd0)
r7:c1c528e8 r6:c17b78fc r5:c17b79f8 r4:c17bc2c0
[<c014f728>] (sock_sendmsg+0x0/0xd0) from [<c0150a54>] (kernel_sendmsg+0x48/0x7c)
r6:c1c0a7ac r5:bf000000 r4:c17b6000
[<c0150a0c>] (kernel_sendmsg+0x0/0x7c) from [<c01ae4c8>] (xs_send_kvec+0x9c/0xac)
r5:00000000 r4:00004040
[<c01ae42c>] (xs_send_kvec+0x0/0xac) from [<c01ae57c>] (xs_sendpages+0xa4/0x210)
[<c01ae4d8>] (xs_sendpages+0x0/0x210) from [<c01b05b4>] (xs_udp_send_request+0x38/0x134)
[<c01b057c>] (xs_udp_send_request+0x0/0x134) from [<c01ad070>] (xprt_transmit+0xe0/0x1dc)
r7:c1736c00 r6:c1c0a81c r5:c1c52c80 r4:c1c0a834
[<c01acf90>] (xprt_transmit+0x0/0x1dc) from [<c01ab8ec>] (call_transmit+0x220/0x28c)
[<c01ab6cc>] (call_transmit+0x0/0x28c) from [<c01b1ccc>] (__rpc_execute+0x88/0x29c)
r7:c1736c48 r6:00000000 r5:c1736c00 r4:c1736c00
[<c01b1c44>] (__rpc_execute+0x0/0x29c) from [<c01b1f30>] (rpc_execute+0x38/0x3c)
r7:c17b7b48 r6:00000000 r5:c17b7b48 r4:c1736c00
[<c01b1ef8>] (rpc_execute+0x0/0x3c) from [<c01aabc8>] (rpc_run_task+0x68/0x70)
r4:c1736c00
[<c01aab60>] (rpc_run_task+0x0/0x70) from [<c01aaca8>] (rpc_call_sync+0x5c/0x80)
r5:c17b7b84 r4:c1740684
[<c01aac4c>] (rpc_call_sync+0x0/0x80) from [<c00d2fd8>] (nfs_proc_getattr+0x78/0xb0)
r7:c17b7b84 r6:c1740000 r5:c17b7bbc r4:c1816628
[<c00d2f60>] (nfs_proc_getattr+0x0/0xb0) from [<c00cc6d4>] (__nfs_revalidate_inode+0xf0/0x244)
r8:c1816620 r7:c17b7bbc r6:c1814114 r5:c1740000 r4:c1816734
[<c00cc5e4>] (__nfs_revalidate_inode+0x0/0x244) from [<c00ca2e0>] (nfs_lookup_revalidate+0x194/0x390)
[<c00ca14c>] (nfs_lookup_revalidate+0x0/0x390) from [<c008f8ac>] (do_lookup+0x148/0x18c)
r8:c17b7ee8 r7:c1814114 r6:00000000 r5:c17b7ee8 r4:c1813ab8
[<c008f764>] (do_lookup+0x0/0x18c) from [<c0090ef4>] (__link_path_walk+0x998/0xee4)
[<c009055c>] (__link_path_walk+0x0/0xee4) from [<c0091494>] (path_walk+0x54/0xa4)
[<c0091440>] (path_walk+0x0/0xa4) from [<c00917b4>] (do_path_lookup+0x170/0x190)
r7:00000001 r6:c17b7ee8 r5:c1c3a580 r4:c1c3a584
[<c0091644>] (do_path_lookup+0x0/0x190) from [<c009238c>] (__path_lookup_intent_open+0x54/0x90)
r8:ffffff9c r7:00000001 r6:c11e4100 r5:ffffff9c r4:c17b7ee8
[<c0092338>] (__path_lookup_intent_open+0x0/0x90) from [<c009245c>] (path_lookup_open+0x24/0x2c)
r7:00000001 r6:c11e4100 r5:00000004 r4:00000000
[<c0092438>] (path_lookup_open+0x0/0x2c) from [<c0092750>] (do_filp_open+0x7c/0x744)
[<c00926d4>] (do_filp_open+0x0/0x744) from [<c0085930>] (do_sys_open+0x54/0x98)
[<c00858dc>] (do_sys_open+0x0/0x98) from [<c00859ac>] (sys_open+0x24/0x28)
r8:c001ec24 r7:00000005 r6:400ad270 r5:400b1a80 r4:00000000
[<c0085988>] (sys_open+0x0/0x28) from [<c001ea80>] (ret_fast_syscall+0x0/0x2c)
Code: e1a01000 e59f000c eb0047d1 e3a03000 (e5833000)
Kernel panic - not syncing: Fatal exception in interrupt
^ permalink raw reply [flat|nested] 13+ messages in thread
* Re: [USB boot crash, -git] ecm_do_notify(), list_add corruption. prev->next should be next (ffff88003b8f82f8)
2008-07-24 7:40 ` David Brownell
@ 2008-07-25 3:57 ` Alan Stern
2008-07-26 1:18 ` David Brownell
2008-07-26 15:06 ` David Brownell
0 siblings, 2 replies; 13+ messages in thread
From: Alan Stern @ 2008-07-25 3:57 UTC (permalink / raw)
To: David Brownell
Cc: Ingo Molnar, Greg KH, linux-kernel, linux-usb, Rafael J. Wysocki
On Thu, 24 Jul 2008, David Brownell wrote:
> I modified dummy_hcd to print messages whenever a request
> was queued to an endpoint, or acompletion was issued.
> If the endpoint queue was empty at that time, it's shown.
...
> ep-c: queue req c10980e0 (q empty)
>
> Here's where it starts to go squirrely...
>
> You would EXPECT to see a completion callback here since
> that's what dummy_queue() says to do: write this small
> packet into a FIFO (just like Real Hardware would) and
> wait for the host to collect it.
>
> Note that the emulated FIFO is represented by a request
> object ... one that *never* seems to get a completion
> issued for it. That seems very wrong...
I think I see the problem. Starting at line 533, we have:
/* implement an emulated single-request FIFO */
if (ep->desc && (ep->desc->bEndpointAddress & USB_DIR_IN) &&
list_empty (&dum->fifo_req.queue) &&
list_empty (&ep->queue) &&
_req->length <= FIFO_SIZE) {
req = &dum->fifo_req;
req->req = *_req;
req->req.buf = dum->fifo_buf;
memcpy (dum->fifo_buf, _req->buf, _req->length);
req->req.context = dum;
req->req.complete = fifo_complete;
spin_unlock (&dum->lock);
_req->actual = _req->length;
_req->status = 0;
_req->complete (_ep, _req);
spin_lock (&dum->lock);
}
list_add_tail (&req->queue, &ep->queue);
spin_unlock_irqrestore (&dum->lock, flags);
The list_add_tail() gets called at the wrong time if the completion
routine resubmits. It should look more like this:
list_add_tail (&req->queue, &ep->queue);
spin_unlock (&dum->lock);
_req->actual = _req->length;
_req->status = 0;
_req->complete (_ep, _req);
spin_lock (&dum->lock);
} else {
list_add_tail (&req->queue, &ep->queue);
}
spin_unlock_irqrestore (&dum->lock, flags);
Can you make the necessary change and try it out?
Alan Stern
^ permalink raw reply [flat|nested] 13+ messages in thread
* Re: [USB boot crash, -git] ecm_do_notify(), list_add corruption. prev->next should be next (ffff88003b8f82f8)
2008-07-25 3:57 ` Alan Stern
@ 2008-07-26 1:18 ` David Brownell
2008-07-26 15:06 ` David Brownell
1 sibling, 0 replies; 13+ messages in thread
From: David Brownell @ 2008-07-26 1:18 UTC (permalink / raw)
To: Alan Stern
Cc: Ingo Molnar, Greg KH, linux-kernel, linux-usb, Rafael J. Wysocki
On Thursday 24 July 2008, Alan Stern wrote:
> I think I see the problem. Starting at line 533, we have:
>
> ...
>
> The list_add_tail() gets called at the wrong time if the completion
> routine resubmits. It should look more like this:
>
> ...
>
> Can you make the necessary change and try it out?
It behaved for me, no BUG() ... I'll clean it up and send along a patch.
- Dave
^ permalink raw reply [flat|nested] 13+ messages in thread
* Re: [USB boot crash, -git] ecm_do_notify(), list_add corruption. prev->next should be next (ffff88003b8f82f8)
2008-07-25 3:57 ` Alan Stern
2008-07-26 1:18 ` David Brownell
@ 2008-07-26 15:06 ` David Brownell
2008-07-26 15:19 ` Ingo Molnar
1 sibling, 1 reply; 13+ messages in thread
From: David Brownell @ 2008-07-26 15:06 UTC (permalink / raw)
To: Alan Stern
Cc: Ingo Molnar, Greg KH, linux-kernel, linux-usb, Rafael J. Wysocki
On Thursday 24 July 2008, Alan Stern wrote:
> Can you make the necessary change and try it out?
This resolves the problem for me ... and, I'd expect, for Ingo.
======= CUT HERE
From: David Brownell <dbrownell@users.sourceforge.net>
This fixes a BUG() turned up by Ingo via randconfig testing, where
CONFIG_LIST_DEBUG turned up list corruption. The corruption was
caused by the dummy_hcd (single-machine test harness for gadget and
HCD code) trashing the request queue when driven by the new CDC
composite gadget an I/O pattern that was previously uncommon.
Fix suggested by Alan Stern.
Signed-off-by: David Brownell <dbrownell@users.sourceforge.net>
---
drivers/usb/gadget/dummy_hcd.c | 5 +++--
1 file changed, 3 insertions(+), 2 deletions(-)
--- a/drivers/usb/gadget/dummy_hcd.c 2008-07-24 18:27:52.000000000 -0700
+++ b/drivers/usb/gadget/dummy_hcd.c 2008-07-26 07:35:12.000000000 -0700
@@ -542,13 +542,14 @@ dummy_queue (struct usb_ep *_ep, struct
req->req.context = dum;
req->req.complete = fifo_complete;
+ list_add_tail(&req->queue, &ep->queue);
spin_unlock (&dum->lock);
_req->actual = _req->length;
_req->status = 0;
_req->complete (_ep, _req);
spin_lock (&dum->lock);
- }
- list_add_tail (&req->queue, &ep->queue);
+ } else
+ list_add_tail(&req->queue, &ep->queue);
spin_unlock_irqrestore (&dum->lock, flags);
/* real hardware would likely enable transfers here, in case
^ permalink raw reply [flat|nested] 13+ messages in thread
* Re: [USB boot crash, -git] ecm_do_notify(), list_add corruption. prev->next should be next (ffff88003b8f82f8)
2008-07-26 15:06 ` David Brownell
@ 2008-07-26 15:19 ` Ingo Molnar
0 siblings, 0 replies; 13+ messages in thread
From: Ingo Molnar @ 2008-07-26 15:19 UTC (permalink / raw)
To: David Brownell
Cc: Alan Stern, Greg KH, linux-kernel, linux-usb, Rafael J. Wysocki
* David Brownell <david-b@pacbell.net> wrote:
> On Thursday 24 July 2008, Alan Stern wrote:
> > Can you make the necessary change and try it out?
>
> This resolves the problem for me ... and, I'd expect, for Ingo.
yeah. Please assume:
Tested-by: Ingo Molnar <mingo@elte.hu>
and dont wait for me testing it thoroughly - i'll notify you if the
problem comes back.
Ingo
^ permalink raw reply [flat|nested] 13+ messages in thread
end of thread, other threads:[~2008-07-26 15:20 UTC | newest]
Thread overview: 13+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2008-07-21 22:30 [GIT PATCH] USB patches for 2.6.26 Greg KH
2008-07-22 8:54 ` Benny Halevy
2008-07-22 15:27 ` Greg KH
2008-07-22 13:40 ` [USB boot crash, -git] ecm_do_notify(), list_add corruption. prev->next should be next (ffff88003b8f82f8) Ingo Molnar
2008-07-23 0:10 ` Greg KH
2008-07-23 0:22 ` David Brownell
2008-07-23 23:37 ` David Brownell
2008-07-24 3:46 ` Alan Stern
2008-07-24 7:40 ` David Brownell
2008-07-25 3:57 ` Alan Stern
2008-07-26 1:18 ` David Brownell
2008-07-26 15:06 ` David Brownell
2008-07-26 15:19 ` Ingo Molnar
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.