Linux-USB Archive on lore.kernel.org
 help / color / Atom feed
From: Felipe Balbi <balbi@kernel.org>
To: Ferry Toth <fntoth@gmail.com>, linux-usb@vger.kernel.org
Cc: felipe.balbi-VuQAYsv1563Yd54FQh9/CA-XMD5yJDbdMReXY1tMh2IBg@public.gmane.org
Subject: Re: BUG with linux 5.9.0 with dwc3 in gadget mode
Date: Tue, 20 Oct 2020 15:35:08 +0300
Message-ID: <871rhtf537.fsf@kernel.org> (raw)
In-Reply-To: <a45db8d2-6902-7ec7-cab2-1436209a15a6@gmail.com>


[-- Attachment #1: Type: text/plain, Size: 6493 bytes --]

Ferry Toth <fntoth@gmail.com> writes:

Hi,

> Op 19-10-2020 om 09:14 schreef Ferry Toth:
>> Op 19-10-2020 om 07:45 schreef Felipe Balbi:
>>>
>>> Hi Andy,
>>>
>>> Ferry Toth <fntoth@gmail.com> writes:
>>>> This occurs with edison-arduino board, that has a nifty switch allowing
>>>> to switch between gadget/host mode. In host mode it boot fine, then
>>>> crashes when I flip the switch to gadget.
>>>>
>>>> The below trace if what I get from the console when booting with gadget
>>>> mode selected.
>>>>
>>>> The last kernel is used where everything is obviously working fine is 
>>>> 5.6.0.
>>>>
>>>> The kernel is built specifically for the platform, nothing suspcious
>>>> going on the the dwc3 area, see
>>>> https://github.com/edison-fw/linux/commits/eds-acpi-5.9.0
>>>>
>>>> Magic signature found
>>>>
>>>> Starting kernel ...
>>>>
>>>> [    2.395631] Initramfs unpacking failed: invalid magic at start of
>>>> compressed archive
>>>> Scanning for Btrfs filesystems
>>>> Starting version 243.2+
>>>> Kernel with acpi enabled detected
>>>> Loading acpi tables
>>>> Waiting for root device /dev/mmcblk0p8
>>>>     10Found device '/run/media/mmcblk0p8'
>>>>     9Init found, booting...
>>>> [   10.834272] brcmfmac: brcmf_fw_alloc_request: using
>>>> brcm/brcmfmac43340-sdio for chip BCM43340/2
>>>> [   11.179662] brcmfmac: brcmf_fw_alloc_request: using
>>>> brcm/brcmfmac43340-sdio for chip BCM43340/2
>>>> [   11.194223] brcmfmac: brcmf_c_process_clm_blob: no clm_blob available
>>>> (err=-2), device may have limited channels available
>>>> [   11.234779] brcmfmac: brcmf_c_preinit_dcmds: Firmware: BCM43340/2
>>>> wl0: Oct 23 2017 08:41:23 version 6.10.190.70 (r674464) FWID 01-98d71006
>>>> [   12.401620] BUG: unable to handle page fault for address:
>>>> 0000000100000000
>>>> [   12.408496] #PF: supervisor instruction fetch in kernel mode
>>>> [   12.414145] #PF: error_code(0x0010) - not-present page
>>>> [   12.419276] PGD 0 P4D 0
>>>> [   12.421817] Oops: 0010 [#1] SMP PTI
>>>> [   12.425307] CPU: 0 PID: 488 Comm: irq/15-dwc3 Not tainted
>>>> 5.9.0-edison-acpi-standard #1
>>>> [   12.433297] Hardware name: Intel Corporation Merrifield/BODEGA BAY,
>>>> BIOS 542 2015.01.21:18.19.48
>>>> [   12.442075] RIP: 0010:0x100000000
>>>> [   12.445382] Code: Bad RIP value.
>>>> [   12.448605] RSP: 0000:ffff9a95403fbbf8 EFLAGS: 00010046
>>>> [   12.453827] RAX: 0000000100000000 RBX: ffff8ee8bd32f828 RCX:
>>>> ffff8ee8bacc4000
>>>> [   12.460950] RDX: 00000000ffffff94 RSI: ffff8ee8bc01a5a0 RDI:
>>>> ffff8ee887228700
>>>> [   12.468075] RBP: ffff8ee8bc01a5a0 R08: 0000000000000046 R09:
>>>> 0000000000000238
>>>> [   12.475199] R10: 0000000000000004 R11: ffff8ee8ba8ba248 R12:
>>>> ffff8ee887228700
>>>> [   12.482322] R13: ffff8ee8bd32f828 R14: 0000000000000002 R15:
>>>> ffff8ee8bae93200
>>>> [   12.489449] FS:  0000000000000000(0000) GS:ffff8ee8be200000(0000)
>>>> knlGS:0000000000000000
>>>> [   12.497524] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
>>>> [   12.503262] CR2: 0000000100000000 CR3: 000000003c5ae000 CR4:
>>>> 00000000001006f0
>>>> [   12.510382] Call Trace:
>>>> [   12.512841]  ? dwc3_gadget_giveback+0xbf/0x120
>>>> [   12.517286]  ? __dwc3_gadget_ep_disable+0xc5/0x250
>>>> [   12.522077]  ? dwc3_gadget_ep_disable+0x3d/0xd0
>>>> [   12.526608]  ? usb_ep_disable+0x1d/0x80
>>>> [   12.530451]  ? u_audio_stop_capture+0x87/0x9a [u_audio]
>>>> [   12.535680]  ? afunc_set_alt+0x73/0x80 [usb_f_uac2]
>>>> [   12.540562]  ? composite_setup+0x20f/0x1b20 [libcomposite]
>>>> [   12.546053]  ? configfs_composite_setup+0x6b/0x90 [libcomposite]
>>>> [   12.552060]  ? configfs_composite_setup+0x6b/0x90 [libcomposite]
>>>> [   12.558062]  ? dwc3_ep0_delegate_req+0x24/0x40
>>>> [   12.562502]  ? dwc3_ep0_interrupt+0x40a/0x9d8
>>>> [   12.566858]  ? dwc3_thread_interrupt+0x880/0xf70
>>>> [   12.571475]  ? __schedule+0x3ee/0x640
>>>> [   12.575143]  ? irq_forced_thread_fn+0x70/0x70
>>>> [   12.579497]  ? irq_thread_fn+0x1b/0x60
>>>> [   12.583245]  ? irq_thread+0xd3/0x150
>>>> [   12.586821]  ? wake_threads_waitq+0x30/0x30
>>>> [   12.591001]  ? irq_thread_dtor+0x80/0x80
>>>> [   12.594925]  ? kthread+0xf9/0x130
>>>> [   12.598238]  ? kthread_park+0x80/0x80
>>>> [   12.601901]  ? ret_from_fork+0x22/0x30
>>>> [   12.605644] Modules linked in: spi_pxa2xx_platform dw_dmac usb_f_uac2
>>>> u_audio usb_f_mass_storage usb_f_eem u_ether usb_f_serial u_serial
>>>> libcomposite pwm_lpss_pci snd_sof_pci snd_sof_intel_byt pwm_lpss
>>>> snd_sof_intel_ipc snd_sof_xtensa_dsp intel_mrfld_pwrbtn intel_mrfld_adc
>>>> snd_sof snd_sof_nocodec snd_soc_acpi spi_pxa2xx_pci brcmfmac brcmutil
>>>> leds_gpio hci_uart btbcm ti_ads7950 industrialio_triggered_buffer
>>>> kfifo_buf spidev ledtrig_heartbeat mmc_block extcon_intel_mrfld
>>>> sdhci_pci cqhci sdhci led_class mmc_core intel_soc_pmic_mrfld btrfs
>>>> libcrc32c xor zstd_compress zlib_deflate raid6_pq
>>>> [   12.657416] CR2: 0000000100000000
>>>> [   12.660729] ---[ end trace 9b92dea6da33c71e ]---
>>>
>>> It this something you can reproduce on your end? Ferry, can you get dwc3
>>> trace logs when this happens? ftrace_dump_on_oops may help here.
>>>
>> I will do that tonight. Is flipping on ftrace_dump_on_oops sufficient or 
>> do I need to do more?
>> 
>> BTW after posting this I found in host mode dwc3 is not working properly 
>> either. No oops, but no driver get loaded on device plug in.
>> 
> Not sure if this is what you are looking for (otherwise let me know):
>
> root@edison:/proc/sys/kernel# echo 1 > ftrace_dump_on_oops
> ## flip the switch from host to gadget
> root@edison:/proc/sys/kernel# [  515.866590] BUG: kernel NULL pointer 
> dereference, address: 0000000000000000
> [  515.873553] #PF: supervisor read access in kernel mode
> [  515.878682] #PF: error_code(0x0000) - not-present page
> [  515.883814] PGD 0 P4D 0
> [  515.886352] Oops: 0000 [#1] SMP PTI
> [  515.889844] CPU: 0 PID: 490 Comm: irq/15-dwc3 Not tainted 
> 5.9.0-edison-acpi-standard #1
> [  515.897836] Hardware name: Intel Corporation Merrifield/BODEGA BAY, 
> BIOS 542 2015.01.21:18.19.48
> [  515.906621] RIP: 0010:dwc3_gadget_ep_dequeue+0x41/0x1c0

what do you get with:

$ gdb vmlinux
(gdb) l *(dwc3_gadget_ep_dequeue+0x41)

??

-- 
balbi

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 857 bytes --]

  reply index

Thread overview: 38+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2020-10-16 20:21 Ferry Toth
2020-10-19  5:45 ` Felipe Balbi
2020-10-19  7:14   ` Ferry Toth
2020-10-19 18:49     ` Ferry Toth
2020-10-20 12:35       ` Felipe Balbi [this message]
2020-10-20 21:01         ` Ferry Toth
2020-10-19  7:18   ` Ferry Toth
2020-10-20 12:32     ` Felipe Balbi
2020-10-20 19:46       ` Ferry Toth
2020-10-20 20:37       ` Ferry Toth
2020-10-20 22:10         ` Thinh Nguyen
2020-10-20 22:58           ` Thinh Nguyen
2020-10-21  1:47             ` Jack Pham
2020-10-21  1:56               ` Thinh Nguyen
2020-10-21 20:01                 ` Ferry Toth
2020-10-22  9:23               ` Andy Shevchenko
2020-10-21 19:45             ` Ferry Toth
2020-10-21 19:50               ` Thinh Nguyen
2020-10-21 20:42                 ` Ferry Toth
2020-10-21 23:32                   ` Thinh Nguyen
2020-10-22 13:43                     ` Andy Shevchenko
2020-10-27 20:13                       ` Ferry Toth
2020-10-27 21:06                         ` Jack Pham
2020-10-27 22:07                           ` Ferry Toth
2020-10-27 21:16                         ` Andy Shevchenko
2020-10-27 21:54                           ` Ferry Toth
2020-10-28  9:18                             ` Felipe Balbi
2020-11-05 21:29                               ` Ferry Toth
2020-11-06  6:38                                 ` Felipe Balbi
2020-11-06  8:14                                   ` Ferry Toth
     [not found]                                   ` <326aa23e-fabd-f3d6-4778-d036858413a2@gmail.com>
2020-11-06 14:15                                     ` Felipe Balbi
     [not found]                                       ` <e21a5a77-9017-4cbe-a228-85357d660da5@gmail.com>
2020-11-07  8:01                                         ` Felipe Balbi
2020-11-07 13:37                                           ` Ferry Toth
2020-11-09  7:00                                             ` Felipe Balbi
2020-10-27 21:19                         ` Andy Shevchenko
2020-10-19 19:46   ` Andy Shevchenko
2020-10-19 20:46     ` Ferry Toth
2020-10-20 13:27     ` Andy Shevchenko

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=871rhtf537.fsf@kernel.org \
    --to=balbi@kernel.org \
    --cc=felipe.balbi-VuQAYsv1563Yd54FQh9/CA-XMD5yJDbdMReXY1tMh2IBg@public.gmane.org \
    --cc=fntoth@gmail.com \
    --cc=linux-usb@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link

Linux-USB Archive on lore.kernel.org

Archives are clonable:
	git clone --mirror https://lore.kernel.org/linux-usb/0 linux-usb/git/0.git

	# If you have public-inbox 1.1+ installed, you may
	# initialize and index your mirror using the following commands:
	public-inbox-init -V2 linux-usb linux-usb/ https://lore.kernel.org/linux-usb \
		linux-usb@vger.kernel.org
	public-inbox-index linux-usb

Example config snippet for mirrors

Newsgroup available over NNTP:
	nntp://nntp.lore.kernel.org/org.kernel.vger.linux-usb


AGPL code for this site: git clone https://public-inbox.org/public-inbox.git