#20177: Lantiq XRX200 (TD-W8970) DWC2 Oops
------------------------+------------------------
  Reporter:  anonymous  |      Owner:  developers
      Type:  defect     |     Status:  new
  Priority:  normal     |  Milestone:
 Component:  kernel     |    Version:  Trunk
Resolution:             |   Keywords:
------------------------+------------------------

Comment (by anonymous):

 Same here with ARV7519RW22 and Chaos Calmer with seguridadwireless.net
 image as the official one doesn't work:

 {{{
 [  157.324000] CPU 0 Unable to handle kernel paging request at virtual
 address 0000002c, epc == 87b95298, ra == 87b9523c
 [  157.332000] Oops[#1]:
 [  157.332000] CPU: 0 PID: 1096 Comm: dnsmasq Not tainted 3.18.20 #1
 [  157.332000] task: 87385a18 ti: 8732e000 task.ti: 8732e000
 [  157.332000] $ 0   : 00000000 00000001 00000000 00000002
 [  157.332000] $ 4   : 8719da9c 87363780 873637b0 87b8147c
 [  157.332000] $ 8   : 00000000 8000ab50 007f0000 86c91c00
 [  157.332000] $12   : 00800000 00400000 878ad43e 87198340
 [  157.332000] $16   : 86c8d100 87322380 87b81200 00000000
 [  157.332000] $20   : 8719da80 87a8a090 00000020 87b81410
 [  157.332000] $24   : 00000002 800283c4
 [  157.332000] $28   : 8732e000 8732f878 00008020 87b9523c
 [  157.332000] Hi    : 00000007
 [  157.332000] Lo    : 55555559
 [  157.332000] epc   : 87b95298 0x87b95298 [dwc2@87b90000+0xbf30]
 [  157.332000]     Not tainted
 [  157.332000] ra    : 87b9523c 0x87b9523c [dwc2@87b90000+0xbf30]
 [  157.332000] Status: 1100fc03 KERNEL EXL IE
 [  157.332000] Cause : 00800008
 [  157.332000] BadVA : 0000002c
 [  157.332000] PrId  : 00019556 (MIPS 34Kc)
 [  157.332000] Modules linked in: ltq_ptm_vr9 rt2800usb rt2800lib
 iptable_nat rt2x00usb rt2x00lib pppoe nf_nat_ipv4 nf_conntrack_ipv6
 nf_conntrack_ipd
 [  157.332000] Process dnsmasq (pid: 1096, threadinfo=8732e000,
 task=87385a18, tls=775d5440)
 [  157.332000] Stack : 8750e840 80006430 8044880c 80059b88 00000000
 87381cfc 86c8d100 87b81200
           8043cc60 86c8d108 00000000 00000020 8700eb60 871a65d0 0000005d
 80270300
           00000007 80016790 00000002 00000013 872e49b8 00000001 00000000
 80010f48
           00080000 8728828c 87198aa0 872f9ec0 87be3720 00000000 872f2ac0
 80006430
           804402f0 872a6ccc ffffffff 00000000 00000020 8732fa18 871d3180
 8732f958
           ...
 [  157.332000] Call Trace:[<80006430>] 0x80006430
 [  157.332000] [<80059b88>] 0x80059b88
 [  157.332000] [<80270300>] 0x80270300
 [  157.332000] [<80016790>] 0x80016790
 [  157.332000] [<80010f48>] 0x80010f48
 [  157.332000] [<8728828c>] 0x8728828c [mac80211@87280000+0x5ff80]
 [  157.332000] [<80006430>] 0x80006430
 [  157.332000] [<872a6ccc>] 0x872a6ccc [mac80211@87280000+0x5ff80]
 [  157.332000] [<870d14e8>] 0x870d14e8 [nf_conntrack@870d0000+0xbca0]
 [  157.332000] [<870c8a6c>] 0x870c8a6c [nf_nat@870c8000+0x2620]
 [  157.332000] [<87238d64>] 0x87238d64 [rt2x00usb@87238000+0x1d90]
 [  157.332000] [<87238bd4>] 0x87238bd4 [rt2x00usb@87238000+0x1d90]
 [  157.332000] [<871c3ac8>] 0x871c3ac8 [rt2x00lib@871c0000+0x83c0]
 [  157.332000] [<870c92a4>] 0x870c92a4 [nf_nat@870c8000+0x2620]
 [  157.332000] [<870d14e8>] 0x870d14e8 [nf_conntrack@870d0000+0xbca0]
 [  157.332000] [<872397b4>] 0x872397b4 [rt2x00usb@87238000+0x1d90]
 [  157.332000] [<87238bd4>] 0x87238bd4 [rt2x00usb@87238000+0x1d90]
 [  157.332000] [<871c519c>] 0x871c519c [rt2x00lib@871c0000+0x83c0]
 [  157.332000] [<872d0244>] 0x872d0244 [mac80211@87280000+0x5ff80]
 [  157.332000] [<8728828c>] 0x8728828c [mac80211@87280000+0x5ff80]
 [  157.332000] [<871c240c>] 0x871c240c [rt2x00lib@871c0000+0x83c0]
 [  157.332000] [<872a6ccc>] 0x872a6ccc [mac80211@87280000+0x5ff80]
 [  157.332000] [<872a7680>] 0x872a7680 [mac80211@87280000+0x5ff80]
 [  157.332000] [<871a7068>] 0x871a7068 [ipt_MASQUERADE@871a7000+0x220]
 [  157.332000] [<872a8270>] 0x872a8270 [mac80211@87280000+0x5ff80]
 [  157.332000] [<872a9fc4>] 0x872a9fc4 [mac80211@87280000+0x5ff80]
 [  157.332000] [<802b06a4>] 0x802b06a4
 [  157.332000] [<872a9fe8>] 0x872a9fe8 [mac80211@87280000+0x5ff80]
 [  157.332000] [<802b0758>] 0x802b0758
 [  157.332000] [<802b0ce8>] 0x802b0ce8
 [  157.332000] [<870cfa10>] 0x870cfa10 [nf_nat_ipv4@870cf000+0xfe0]
 [  157.332000] [<802cc534>] 0x802cc534
 [  157.332000] [<802a95f8>] 0x802a95f8
 [  157.332000] [<802e7c5c>] 0x802e7c5c
 [  157.332000] [<802b108c>] 0x802b108c
 [  157.332000] [<802e6b3c>] 0x802e6b3c
 [  157.332000] [<802e8624>] 0x802e8624
 [  157.332000] [<802e9e3c>] 0x802e9e3c
 [  157.332000] [<802e94cc>] 0x802e94cc
 [  157.332000] [<802ea9f0>] 0x802ea9f0
 [  157.332000] [<80460000>] 0x80460000
 [  157.332000] [<8030ffa8>] 0x8030ffa8
 [  157.332000] [<803127a0>] 0x803127a0
 [  157.332000] [<8005f4d8>] 0x8005f4d8
 [  157.332000] [<8004028c>] 0x8004028c
 [  157.332000] [<802e88b0>] 0x802e88b0
 [  157.332000] [<802944f8>] 0x802944f8
 [  157.332000] [<8030f644>] 0x8030f644
 [  157.332000] [<80311b90>] 0x80311b90
 [  157.332000] [<8030f644>] 0x8030f644
 [  157.332000] [<80296dac>] 0x80296dac
 [  157.332000] [<8031db38>] 0x8031db38
 [  157.332000] [<8029687c>] 0x8029687c
 [  157.332000] [<800bc63c>] 0x800bc63c
 [  157.332000] [<800bc7a0>] 0x800bc7a0
 [  157.332000] [<800cf4c0>] 0x800cf4c0
 [  157.332000] [<80294a40>] 0x80294a40
 [  157.332000] [<8000875c>] 0x8000875c
 [  157.332000]
 [  157.332000]
 Code: 14620006  00000000  8e820014 <8c42002c> 30420001  1040004c  8fa20010
 41716000  32310001
 [  157.808000] ---[ end trace 1fae8cce81bc19bc ]---
 [  157.816000] Kernel panic - not syncing: Fatal exception in interrupt
 [  157.816000] Rebooting in 3 seconds..
 }}}

 It's reported in the Linux kernel bug tracker with a hint of the 0000002c
 and a possible way to solve it
 https://bugzilla.kernel.org/show_bug.cgi?id=95241


 In "root/drivers/usb/dwc2/hcd.c" line 399:
 https://git.kernel.org/cgit/linux/kernel/git/stable/linux-
 stable.git/tree/drivers/usb/dwc2/hcd.c?id=refs/tags/v3.19.2

 399:
         if (qtd->qh->ep_type == USB_ENDPOINT_XFER_BULK &&
                     !(qtd->urb->flags & URB_GIVEBACK_ASAP))
                         /*
                          * Do not schedule SG transactions until qtd has
                          * URB_GIVEBACK_ASAP set
                          */
                         return 0;

 "qtd->urb" may be NULL i get a kernel paging request.

 The right code is use:

             !(urb->flags & URB_GIVEBACK_ASAP)

 This is the kernel dump fom my mips RALINK RT3052 machine with openwrt.

 The "virtual address 0000002c" is the offset to "urb->flags" (44 bytes)
 I think this error may be in all kernel with this driver (raspberry pi
 ...)

--
Ticket URL: <https://dev.openwrt.org/ticket/20177#comment:6>
OpenWrt <http://openwrt.org>
Opensource Wireless Router Technology
_______________________________________________
openwrt-tickets mailing list
[email protected]
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-tickets

Reply via email to