Modify

Opened 3 years ago

Closed 2 years ago

#20177 closed defect (fixed)

Lantiq XRX200 (TD-W8970) DWC2 Oops

Reported by: anonymous Owned by: developers
Priority: normal Milestone:
Component: kernel Version: Trunk
Keywords: Cc:

Description

OpenWrt Chaos Calmer 15.05-rc3
Model: TP-LINK TD-W8970 Lantiq XRX200

This happens with oscam using a card reader as FTDI USB serial device:

[ 1938.796000] CPU 0 Unable to handle kernel paging request at virtual address 0000002c, epc == 82db5298, ra == 82db523c
[ 1938.804000] Oops#1:
[ 1938.804000] CPU: 0 PID: 2857 Comm: wr10-CrdRd Not tainted 3.18.17 #1
[ 1938.804000] task: 82c6e0a8 ti: 82da4000 task.ti: 82da4000
[ 1938.804000] $ 0 : 00000000 76cb9fcd 00000000 00000002
[ 1938.804000] $ 4 : 826ec19c 824ce680 824ce6b0 83342a7c
[ 1938.804000] $ 8 : 00000000 8000ab50 00000001 74f1bfff
[ 1938.804000] $12 : 76cb9f90 771c63a0 00000000 76cb9fac
[ 1938.804000] $16 : 82eaae80 82e38d80 8323f400 00000000
[ 1938.804000] $20 : 826ec180 8331bb30 00000020 83342a10
[ 1938.804000] $24 : 00000001 80028800
[ 1938.804000] $28 : 82da4000 82da5cc8 00008020 82db523c
[ 1938.804000] Hi : 0000015c
[ 1938.804000] Lo : 00000127
[ 1938.804000] epc : 82db5298 dwc2_hcd_queue_transactions+0x75c/0x8d0 [dwc2]
[ 1938.804000] Not tainted
[ 1938.804000] ra : 82db523c dwc2_hcd_queue_transactions+0x700/0x8d0 [dwc2]
[ 1938.804000] Status: 1100fc03 KERNEL EXL IE
[ 1938.804000] Cause : 00800008
[ 1938.804000] BadVA : 0000002c
[ 1938.804000] PrId : 00019556 (MIPS 34Kc)
[ 1938.804000] Modules linked in: dwc2_platform dwc2 ltq_atm_vr9 ath9k ath9k_common iptable_nat ath9k_hw ath pppoe nf_nat_ipv4 nf_conntrack_ipv6 nf_conntrack_ipv4 mac80211 ipt_REJECT ipt_MASQUERADE ftdi_sio cfg80211 xt_time xt_tcpudp xt_state xt_nat xt_multiport xt_mark xt_mac xt_limit xt_id xt_conntrack xt_comment xt_TCPMSS xt_REDIRECT xt_LOG xt_CT usbserial pppox ppp_async nf_reject_ipv4 nf_nat_masquerade_ipv4 nf_nat_ftp nf_nat nf_log_ipv4 nf_defrag_ipv6 nf_defrag_ipv4 nf_conntrack_rtcache nf_conntrack_ftp nf_conntrack ltq_deu_vr9 iptable_raw iptable_mangle iptable_filter ip_tables crc_ccitt compat drv_dsl_cpe_api uhci_hcd ohci_platform ohci_hcd drv_mei_cpe ledtrig_usbdev ip6t_REJECT nf_reject_ipv6 nf_log_ipv6 nf_log_common ip6table_raw ip6table_mangle ip6table_filter ip6_tables x_tables pppoatm ppp_generic slhc tun br2684 atm ipv6 drv_ifxos arc4 crypto_blkcipher gpio_button_hotplug
[ 1938.804000] Process wr10-CrdRd (pid: 2857, threadinfo=82da4000, task=82c6e0a8, tls=76cc2970)
[ 1938.804000] Stack : 0008adde 0008adde 00000000 00000000 00000000 00000000 82eaae80 8323f400
[ 1938.804000] 80474c60 82eaae88 00000000 00000020 00000000 80474c60 00000020 802724d0
[ 1938.804000] 00000000 800c6300 82da5e60 834d6f68 82da5e08 00000001 82da5d90 8399c330
[ 1938.804000] 00000001 839a6f40 82c67ef0 800c8558 82da5da0 8007de28 839a6f40 800ba808
[ 1938.804000] 00000000 00000000 82da5e08 83b51104 00000005 82eaae80 82c02900 801b3ccc
[ 1938.804000] ...
[ 1938.804000] Call Trace:
[ 1938.804000] [<82db5298>] dwc2_hcd_queue_transactions+0x75c/0x8d0 [dwc2]
[ 1938.804000]
[ 1938.804000]
[ 1938.804000] Code: 14620006 00000000 8e820014 <8c42002c> 30420001 1040004c 8fa20010 41716000 32310001
[ 1939.040000] ---[ end trace a727169d2d6d4bf5 ]---

Attachments (2)

dmesg.txt (16.9 KB) - added by anonymous 3 years ago.
lantiq-tweak-DWC2-default-parameters.patch (1.8 KB) - added by anonymous 2 years ago.
Tweak DWC2 fifo parameters on lantiq

Download all attachments as: .zip

Change History (13)

Changed 3 years ago by anonymous

comment:1 Changed 3 years ago by anonymous

The same happens in other Lantiq based router ZyXELu P-2812HNU-F3 - while using Pheonix FTDI card reader:

[ 2490.572000] CPU 0 Unable to handle kernel paging request at virtual address 0000002c, epc == 87bc5298, ra == 87bc523c
[ 2490.580000] Oops[#1]:
[ 2490.580000] CPU: 0 PID: 7993 Comm: wr05-phoenix Not tainted 3.18.17 #1
[ 2490.580000] task: 873ed9b8 ti: 86bd4000 task.ti: 86bd4000
[ 2490.580000] $ 0   : 00000000 7666ec8d 00000000 00000002
[ 2490.580000] $ 4   : 86a82f9c 86891180 868911b0 87ba667c
[ 2490.580000] $ 8   : 00000000 8000ab50 00000001 dda20000
[ 2490.580000] $12   : 7666ec50 779713a0 00000000 00000001
[ 2490.580000] $16   : 8725d100 87303d80 87ba6400 00000000
[ 2490.580000] $20   : 86a82f80 87bb5eb0 00000020 87ba6610
[ 2490.580000] $24   : 00000001 80028800                  
[ 2490.580000] $28   : 86bd4000 86bd5cc8 00008020 87bc523c
[ 2490.580000] Hi    : 00002313
[ 2490.580000] Lo    : d70a5c22
[ 2490.580000] epc   : 87bc5298 dwc2_hcd_queue_transactions+0x75c/0x8d0 [dwc2]
[ 2490.580000]     Not tainted
[ 2490.580000] ra    : 87bc523c dwc2_hcd_queue_transactions+0x700/0x8d0 [dwc2]
[ 2490.580000] Status: 1100fc03	KERNEL EXL IE 
[ 2490.580000] Cause : 00800008
[ 2490.580000] BadVA : 0000002c
[ 2490.580000] PrId  : 00019555 (MIPS 34Kc)
[ 2490.580000] Modules linked in: ltq_ptm_vr9 rt2800pci rt2800mmio rt2800lib iptable_nat rt2x00pci rt2x00mmio rt2x00lib pppoe nf_nat_ipv4 nf_conntrack_ipv6 nf_conntrack_ipv4 mac80211 ipt_REJECT ipt_MASQUERADE ftdi_sio cfg80211 xt_time xt_tcpudp xt_state xt_nat xt_multiport xt_mark xt_mac xt_limit xt_id xt_conntrack xt_comment xt_TCPMSS xt_REDIRECT xt_LOG xt_CT usbserial pppox ppp_async nf_reject_ipv4 nf_nat_masquerade_ipv4 nf_nat_ftp nf_nat nf_log_ipv4 nf_defrag_ipv6 nf_defrag_ipv4 nf_conntrack_rtcache nf_conntrack_ftp nf_conntrack ltq_deu_vr9 iptable_raw iptable_mangle iptable_filter ip_tables crc_itu_t crc_ccitt compat drv_dsl_cpe_api drv_mei_cpe ip6t_REJECT nf_reject_ipv6 nf_log_ipv6 nf_log_common ip6table_raw ip6table_mangle ip6table_filter ip6_tables x_tables pppoatm ppp_generic slhc br2684 atm ipv6 eeprom_93cx6 drv_ifxos arc4 crypto_blkcipher dwc2_platform dwc2 gpio_button_hotplug
[ 2490.580000] Process wr05-phoenix (pid: 7993, threadinfo=86bd4000, task=873ed9b8, tls=76677970)
[ 2490.580000] Stack : 8005e27c 873ed9b8 ffffffff 00000001 00000000 86bd5d48 8725d100 87ba6400
[ 2490.580000] 	  80474c60 8725d108 00000000 00000020 00000000 80474c60 00000020 802724d0
[ 2490.580000] 	  00000001 873ed9b8 8004b2b4 00100100 00200200 86bd5d80 00001388 86830280
[ 2490.580000] 	  86830280 00000000 86bd5d48 80273f50 00000000 00000000 810d5860 8006e0e0
[ 2490.580000] 	  00000000 86bd5d4c 86bd5d4c 872c5d04 00000005 8725d100 87157900 801b3ccc
[ 2490.580000] 	  ...
[ 2490.580000] Call Trace:
[ 2490.580000] [<87bc5298>] dwc2_hcd_queue_transactions+0x75c/0x8d0 [dwc2]
[ 2490.580000] 
[ 2490.580000] 
[ 2490.580000] Code: 14620006  00000000  8e820014 <8c42002c> 30420001  1040004c  8fa20010  41716000  32310001 
[ 2490.816000] ---[ end trace e6281fca92d963fc ]---

comment:2 Changed 3 years ago by anonymous

I compared two TP-LINK TD-W8970 with Phoenix FTDI card readers connected.
One with BARRIER BREAKER (14.07, r44550) - works OK.
Second one with CHAOS CALMER (15.05-rc3, r46163)

It seems that in CHAOS CALMER some information is missing:
CHAOS CALMER (15.05-rc3, r46163) Kernel Log:

[   44.032000] usbcore: registered new interface driver ftdi_sio
[   44.040000] usbserial: USB Serial support registered for FTDI USB Serial Device
[   44.044000] ftdi_sio 2-1:1.0: FTDI USB Serial Device converter detected
[   44.052000] usb 2-1: Detected FT232RL
[   44.056000] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0

BARRIER BREAKER (14.07, r44550) Kernel Log:

[   49.444000] usbcore: registered new interface driver ftdi_sio
[   49.460000] usbserial: USB Serial support registered for FTDI USB Serial Device
[   49.464000] ftdi_sio 2-1:1.0: FTDI USB Serial Device converter detected
[   49.476000] usb 2-1: Detected FT232RL
[   49.476000] usb 2-1: Number of endpoints 2
[   49.480000] usb 2-1: Endpoint 1 MaxPacketSize 16384
[   49.484000] usb 2-1: Endpoint 2 MaxPacketSize 16384
[   49.492000] usb 2-1: Setting MaxPacketSize 64
[   49.520000] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0

CHAOS CALMER (15.05-rc3, r46163)

root@OpenWrt:~# cat /sys/kernel/debug/usb/devices

T:  Bus=02 Lev=00 Prnt=00 Port=00 Cnt=00 Dev#=  1 Spd=480  MxCh= 1
B:  Alloc=  0/800 us ( 0%), #Int=  0, #Iso=  0
D:  Ver= 2.00 Cls=09(hub  ) Sub=00 Prot=01 MxPS=64 #Cfgs=  1
P:  Vendor=1d6b ProdID=0002 Rev= 3.18
S:  Manufacturer=Linux 3.18.17 dwc2_hsotg
S:  Product=DWC OTG Controller
S:  SerialNumber=1e106000.ifxhcd
C:* #Ifs= 1 Cfg#= 1 Atr=e0 MxPwr=  0mA
I:* If#= 0 Alt= 0 #EPs= 1 Cls=09(hub  ) Sub=00 Prot=00 Driver=hub
E:  Ad=81(I) Atr=03(Int.) MxPS=   4 Ivl=256ms

T:  Bus=02 Lev=01 Prnt=01 Port=00 Cnt=01 Dev#=  2 Spd=12   MxCh= 0
D:  Ver= 2.00 Cls=00(>ifc ) Sub=00 Prot=00 MxPS= 8 #Cfgs=  1
P:  Vendor=0403 ProdID=6001 Rev= 6.00
S:  Manufacturer=FTDI
S:  Product=FT232R USB UART
S:  SerialNumber=A602O3JK
C:* #Ifs= 1 Cfg#= 1 Atr=a0 MxPwr= 90mA
I:* If#= 0 Alt= 0 #EPs= 2 Cls=ff(vend.) Sub=ff Prot=ff Driver=ftdi_sio
E:  Ad=81(I) Atr=02(Bulk) MxPS=  64 Ivl=0ms
E:  Ad=02(O) Atr=02(Bulk) MxPS=  64 Ivl=0ms

T:  Bus=01 Lev=00 Prnt=00 Port=00 Cnt=00 Dev#=  1 Spd=480  MxCh= 1
B:  Alloc=  0/800 us ( 0%), #Int=  0, #Iso=  0
D:  Ver= 2.00 Cls=09(hub  ) Sub=00 Prot=01 MxPS=64 #Cfgs=  1
P:  Vendor=1d6b ProdID=0002 Rev= 3.18
S:  Manufacturer=Linux 3.18.17 dwc2_hsotg
S:  Product=DWC OTG Controller
S:  SerialNumber=1e101000.ifxhcd
C:* #Ifs= 1 Cfg#= 1 Atr=e0 MxPwr=  0mA
I:* If#= 0 Alt= 0 #EPs= 1 Cls=09(hub  ) Sub=00 Prot=00 Driver=hub
E:  Ad=81(I) Atr=03(Int.) MxPS=   4 Ivl=256ms
root@OpenWrt:~#

BARRIER BREAKER (14.07, r44550)

root@TD-W8970:~# cat /sys/kernel/debug/usb/devices

T:  Bus=02 Lev=00 Prnt=00 Port=00 Cnt=00 Dev#=  1 Spd=480  MxCh= 1
B:  Alloc=  0/800 us ( 0%), #Int=  0, #Iso=  0
D:  Ver= 2.00 Cls=09(hub  ) Sub=00 Prot=00 MxPS=64 #Cfgs=  1
P:  Vendor=1d6b ProdID=0002 Rev= 3.10
S:  Manufacturer=Linux 3.10.49 ifxusb_hcd_2
S:  Product=IFX USB Controller
S:  SerialNumber=ifxusb_hcd_2
C:* #Ifs= 1 Cfg#= 1 Atr=e0 MxPwr=  0mA
I:* If#= 0 Alt= 0 #EPs= 1 Cls=09(hub  ) Sub=00 Prot=00 Driver=hub
E:  Ad=81(I) Atr=03(Int.) MxPS=   4 Ivl=256ms

T:  Bus=02 Lev=01 Prnt=01 Port=00 Cnt=01 Dev#=  2 Spd=12   MxCh= 0
D:  Ver= 2.00 Cls=00(>ifc ) Sub=00 Prot=00 MxPS= 8 #Cfgs=  1
P:  Vendor=0403 ProdID=6001 Rev= 6.00
S:  Manufacturer=FTDI
S:  Product=FT232R USB UART
S:  SerialNumber=A8004W7I
C:* #Ifs= 1 Cfg#= 1 Atr=a0 MxPwr= 90mA
I:* If#= 0 Alt= 0 #EPs= 2 Cls=ff(vend.) Sub=ff Prot=ff Driver=ftdi_sio
E:  Ad=81(I) Atr=02(Bulk) MxPS=  64 Ivl=0ms
E:  Ad=02(O) Atr=02(Bulk) MxPS=  64 Ivl=0ms

T:  Bus=01 Lev=00 Prnt=00 Port=00 Cnt=00 Dev#=  1 Spd=480  MxCh= 1
B:  Alloc=  0/800 us ( 0%), #Int=  0, #Iso=  0
D:  Ver= 2.00 Cls=09(hub  ) Sub=00 Prot=00 MxPS=64 #Cfgs=  1
P:  Vendor=1d6b ProdID=0002 Rev= 3.10
S:  Manufacturer=Linux 3.10.49 ifxusb_hcd_1
S:  Product=IFX USB Controller
S:  SerialNumber=ifxusb_hcd_1
C:* #Ifs= 1 Cfg#= 1 Atr=e0 MxPwr=  0mA
I:* If#= 0 Alt= 0 #EPs= 1 Cls=09(hub  ) Sub=00 Prot=00 Driver=hub
E:  Ad=81(I) Atr=03(Int.) MxPS=   4 Ivl=256ms
root@TD-W8970:~#

Changed 2 years ago by anonymous

Tweak DWC2 fifo parameters on lantiq

comment:3 follow-up: Changed 2 years ago by anonymous

You could try the attached patch to tweak the DWC2 parameters to better handle USB traffic. Good luck!

comment:4 in reply to: ↑ 3 Changed 2 years ago by anonymous

Replying to anonymous:

You could try the attached patch to tweak the DWC2 parameters to better handle USB traffic. Good luck!

Thank you for the patch.
Was checked with to routers:TP-LINK TD-W8970 and ZyXEL P-2812HNU-F3
Unfortunately it doesn't work - the same happens as before.

Regards

comment:5 Changed 2 years ago by anonymous

I've just checked final release of OpenWrt Chaos Calmer for ZyXEL P-2812HNU-F3
Results below:

[ 1141.784000] CPU 0 Unable to handle kernel paging request at virtual address 0000002c, epc == 87bc5298, ra == 87bc523c
[ 1141.796000] Oops[#1]:
[ 1141.796000] CPU: 0 PID: 3438 Comm: wr05-phoenix Not tainted 3.18.20 #1
[ 1141.796000] task: 87934560 ti: 87370000 task.ti: 87370000
[ 1141.796000] $ 0   : 00000000 77958c8d 00000000 00000002
[ 1141.796000] $ 4   : 86d5891c 87277c80 87277cb0 87ba5a7c
[ 1141.796000] $ 8   : 00000000 8000ab50 00000001 00000000
[ 1141.796000] $12   : 77958c50 77b053a0 00000000 00000001
[ 1141.796000] $16   : 87238100 87207280 87ba5800 00000000
[ 1141.796000] $20   : 86d58900 87bb2bb0 00000020 87ba5a10
[ 1141.796000] $24   : 00000008 800283c4                  
[ 1141.796000] $28   : 87370000 87371cc8 00008020 87bc523c
[ 1141.796000] Hi    : 0000bb65
[ 1141.796000] Lo    : c2900022
[ 1141.796000] epc   : 87bc5298 0x87bc5298 [dwc2@87bc0000+0xbf30]
[ 1141.796000]     Not tainted
[ 1141.796000] ra    : 87bc523c 0x87bc523c [dwc2@87bc0000+0xbf30]
[ 1141.796000] Status: 1100fc03	KERNEL EXL IE 
[ 1141.796000] Cause : 00800008
[ 1141.796000] BadVA : 0000002c
[ 1141.796000] PrId  : 00019555 (MIPS 34Kc)
[ 1141.796000] Modules linked in: ltq_ptm_vr9 rt2800pci rt2800mmio rt2800lib iptable_nat rt2x00pci rt2x00mmio rt2x00lib pppoe nf_nat_ipv4 nf_conntrack_ipv6 nf_conntrack_ipv4 mac80211 ipt_REJECT ipt_MASQUERADE ftdi_sio cfg80211 xt_time xt_tcpudp xt_state xt_nat xt_multiport xt_mark xt_mac xt_limit xt_id xt_conntrack xt_comment xt_TCPMSS xt_REDIRECT xt_LOG xt_CT usbserial pppox ppp_async nf_reject_ipv4 nf_nat_masquerade_ipv4 nf_nat_ftp nf_nat nf_log_ipv4 nf_defrag_ipv6 nf_defrag_ipv4 nf_conntrack_rtcache nf_conntrack_ftp nf_conntrack ltq_deu_vr9 iptable_raw iptable_mangle iptable_filter ip_tables crc_itu_t crc_ccitt compat drv_dsl_cpe_api drv_mei_cpe ip6t_REJECT nf_reject_ipv6 nf_log_ipv6 nf_log_common ip6table_raw ip6table_mangle ip6table_filter ip6_tables x_tables pppoatm ppp_generic slhc br2684 atm ipv6 eeprom_93cx6 drv_ifxos arc4 crypto_blkcipher dwc2_platform dwc2 gpio_button_hotplug aead
[ 1141.796000] Process wr05-phoenix (pid: 3438, threadinfo=87370000, task=87934560, tls=77961970)
[ 1141.796000] Stack : 8005dd88 87934560 ffffffff 00000001 00000000 87371d48 87238100 87ba5800
[ 1141.796000] 	  8043cc60 87238108 00000000 00000020 00000000 8043cc60 00000020 80270300
[ 1141.796000] 	  00000001 87934560 8004ae80 00100100 00200200 87371d80 00001388 86da1d80
[ 1141.796000] 	  86da1d80 00000000 87371d48 80271d80 00000000 00000000 81017e60 8006db68
[ 1141.796000] 	  00000000 87371d4c 87371d4c 8710a504 00000005 87238100 87127000 801b1a84
[ 1141.796000] 	  ...
[ 1141.796000] Call Trace:[<8005dd88>] 0x8005dd88
[ 1141.796000] [<80270300>] 0x80270300
[ 1141.796000] [<8004ae80>] 0x8004ae80
[ 1141.796000] [<80271d80>] 0x80271d80
[ 1141.796000] [<8006db68>] 0x8006db68
[ 1141.796000] [<801b1a84>] 0x801b1a84
[ 1141.796000] [<80271eb0>] 0x80271eb0
[ 1141.796000] [<872204d4>] 0x872204d4 [ftdi_sio@87220000+0x7190]
[ 1141.796000] [<871624c8>] 0x871624c8 [usbserial@87160000+0x45b0]
[ 1141.796000] [<871631b8>] 0x871631b8 [usbserial@87160000+0x45b0]
[ 1141.796000] [<801ee2e0>] 0x801ee2e0
[ 1141.796000] [<8716005c>] 0x8716005c [usbserial@87160000+0x45b0]
[ 1141.796000] [<8004ae04>] 0x8004ae04
[ 1141.796000] [<801ef7bc>] 0x801ef7bc
[ 1141.796000] [<8004ae80>] 0x8004ae80
[ 1141.796000] [<801ef45c>] 0x801ef45c
[ 1141.796000] [<801eb858>] 0x801eb858
[ 1141.796000] [<800cc504>] 0x800cc504
[ 1141.796000] [<800bb054>] 0x800bb054
[ 1141.796000] [<80064bd8>] 0x80064bd8
[ 1141.796000] [<800d650c>] 0x800d650c
[ 1141.796000] [<800bb65c>] 0x800bb65c
[ 1141.796000] [<8005d2b8>] 0x8005d2b8
[ 1141.796000] [<8000875c>] 0x8000875c
[ 1141.796000] 
[ 1141.796000] 
[ 1141.796000] Code: 14620006  00000000  8e820014 <8c42002c> 30420001  1040004c  8fa20010  41716000  32310001 
[ 1142.112000] ---[ end trace 1898bb04b7943424 ]---

comment:6 Changed 2 years ago by anonymous

Same here with ARV7519RW22 and Chaos Calmer with seguridadwireless.net image as the official one doesn't work:

[  157.324000] CPU 0 Unable to handle kernel paging request at virtual address 0000002c, epc == 87b95298, ra == 87b9523c
[  157.332000] Oops[#1]:
[  157.332000] CPU: 0 PID: 1096 Comm: dnsmasq Not tainted 3.18.20 #1
[  157.332000] task: 87385a18 ti: 8732e000 task.ti: 8732e000
[  157.332000] $ 0   : 00000000 00000001 00000000 00000002
[  157.332000] $ 4   : 8719da9c 87363780 873637b0 87b8147c
[  157.332000] $ 8   : 00000000 8000ab50 007f0000 86c91c00
[  157.332000] $12   : 00800000 00400000 878ad43e 87198340
[  157.332000] $16   : 86c8d100 87322380 87b81200 00000000
[  157.332000] $20   : 8719da80 87a8a090 00000020 87b81410
[  157.332000] $24   : 00000002 800283c4                  
[  157.332000] $28   : 8732e000 8732f878 00008020 87b9523c
[  157.332000] Hi    : 00000007
[  157.332000] Lo    : 55555559
[  157.332000] epc   : 87b95298 0x87b95298 [dwc2@87b90000+0xbf30]
[  157.332000]     Not tainted
[  157.332000] ra    : 87b9523c 0x87b9523c [dwc2@87b90000+0xbf30]
[  157.332000] Status: 1100fc03 KERNEL EXL IE 
[  157.332000] Cause : 00800008
[  157.332000] BadVA : 0000002c
[  157.332000] PrId  : 00019556 (MIPS 34Kc)
[  157.332000] Modules linked in: ltq_ptm_vr9 rt2800usb rt2800lib iptable_nat rt2x00usb rt2x00lib pppoe nf_nat_ipv4 nf_conntrack_ipv6 nf_conntrack_ipd
[  157.332000] Process dnsmasq (pid: 1096, threadinfo=8732e000, task=87385a18, tls=775d5440)
[  157.332000] Stack : 8750e840 80006430 8044880c 80059b88 00000000 87381cfc 86c8d100 87b81200
          8043cc60 86c8d108 00000000 00000020 8700eb60 871a65d0 0000005d 80270300
          00000007 80016790 00000002 00000013 872e49b8 00000001 00000000 80010f48
          00080000 8728828c 87198aa0 872f9ec0 87be3720 00000000 872f2ac0 80006430
          804402f0 872a6ccc ffffffff 00000000 00000020 8732fa18 871d3180 8732f958
          ...
[  157.332000] Call Trace:[<80006430>] 0x80006430
[  157.332000] [<80059b88>] 0x80059b88
[  157.332000] [<80270300>] 0x80270300
[  157.332000] [<80016790>] 0x80016790
[  157.332000] [<80010f48>] 0x80010f48
[  157.332000] [<8728828c>] 0x8728828c [mac80211@87280000+0x5ff80]
[  157.332000] [<80006430>] 0x80006430
[  157.332000] [<872a6ccc>] 0x872a6ccc [mac80211@87280000+0x5ff80]
[  157.332000] [<870d14e8>] 0x870d14e8 [nf_conntrack@870d0000+0xbca0]
[  157.332000] [<870c8a6c>] 0x870c8a6c [nf_nat@870c8000+0x2620]
[  157.332000] [<87238d64>] 0x87238d64 [rt2x00usb@87238000+0x1d90]
[  157.332000] [<87238bd4>] 0x87238bd4 [rt2x00usb@87238000+0x1d90]
[  157.332000] [<871c3ac8>] 0x871c3ac8 [rt2x00lib@871c0000+0x83c0]
[  157.332000] [<870c92a4>] 0x870c92a4 [nf_nat@870c8000+0x2620]
[  157.332000] [<870d14e8>] 0x870d14e8 [nf_conntrack@870d0000+0xbca0]
[  157.332000] [<872397b4>] 0x872397b4 [rt2x00usb@87238000+0x1d90]
[  157.332000] [<87238bd4>] 0x87238bd4 [rt2x00usb@87238000+0x1d90]
[  157.332000] [<871c519c>] 0x871c519c [rt2x00lib@871c0000+0x83c0]
[  157.332000] [<872d0244>] 0x872d0244 [mac80211@87280000+0x5ff80]
[  157.332000] [<8728828c>] 0x8728828c [mac80211@87280000+0x5ff80]
[  157.332000] [<871c240c>] 0x871c240c [rt2x00lib@871c0000+0x83c0]
[  157.332000] [<872a6ccc>] 0x872a6ccc [mac80211@87280000+0x5ff80]
[  157.332000] [<872a7680>] 0x872a7680 [mac80211@87280000+0x5ff80]
[  157.332000] [<871a7068>] 0x871a7068 [ipt_MASQUERADE@871a7000+0x220]
[  157.332000] [<872a8270>] 0x872a8270 [mac80211@87280000+0x5ff80]
[  157.332000] [<872a9fc4>] 0x872a9fc4 [mac80211@87280000+0x5ff80]
[  157.332000] [<802b06a4>] 0x802b06a4
[  157.332000] [<872a9fe8>] 0x872a9fe8 [mac80211@87280000+0x5ff80]
[  157.332000] [<802b0758>] 0x802b0758
[  157.332000] [<802b0ce8>] 0x802b0ce8
[  157.332000] [<870cfa10>] 0x870cfa10 [nf_nat_ipv4@870cf000+0xfe0]
[  157.332000] [<802cc534>] 0x802cc534
[  157.332000] [<802a95f8>] 0x802a95f8
[  157.332000] [<802e7c5c>] 0x802e7c5c
[  157.332000] [<802b108c>] 0x802b108c
[  157.332000] [<802e6b3c>] 0x802e6b3c
[  157.332000] [<802e8624>] 0x802e8624
[  157.332000] [<802e9e3c>] 0x802e9e3c
[  157.332000] [<802e94cc>] 0x802e94cc
[  157.332000] [<802ea9f0>] 0x802ea9f0
[  157.332000] [<80460000>] 0x80460000
[  157.332000] [<8030ffa8>] 0x8030ffa8
[  157.332000] [<803127a0>] 0x803127a0
[  157.332000] [<8005f4d8>] 0x8005f4d8
[  157.332000] [<8004028c>] 0x8004028c
[  157.332000] [<802e88b0>] 0x802e88b0
[  157.332000] [<802944f8>] 0x802944f8
[  157.332000] [<8030f644>] 0x8030f644
[  157.332000] [<80311b90>] 0x80311b90
[  157.332000] [<8030f644>] 0x8030f644
[  157.332000] [<80296dac>] 0x80296dac
[  157.332000] [<8031db38>] 0x8031db38
[  157.332000] [<8029687c>] 0x8029687c
[  157.332000] [<800bc63c>] 0x800bc63c
[  157.332000] [<800bc7a0>] 0x800bc7a0
[  157.332000] [<800cf4c0>] 0x800cf4c0
[  157.332000] [<80294a40>] 0x80294a40
[  157.332000] [<8000875c>] 0x8000875c
[  157.332000] 
[  157.332000] 
Code: 14620006  00000000  8e820014 <8c42002c> 30420001  1040004c  8fa20010  41716000  32310001 
[  157.808000] ---[ end trace 1fae8cce81bc19bc ]---
[  157.816000] Kernel panic - not syncing: Fatal exception in interrupt
[  157.816000] Rebooting in 3 seconds..

It's reported in the Linux kernel bug tracker with a hint of the 0000002c and a possible way to solve it https://bugzilla.kernel.org/show_bug.cgi?id=95241

In "root/drivers/usb/dwc2/hcd.c" line 399:
https://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/tree/drivers/usb/dwc2/hcd.c?id=refs/tags/v3.19.2

399:

if (qtd->qh->ep_type == USB_ENDPOINT_XFER_BULK &&

!(qtd->urb->flags & URB_GIVEBACK_ASAP))

/*

  • Do not schedule SG transactions until qtd has
  • URB_GIVEBACK_ASAP set */

return 0;

"qtd->urb" may be NULL i get a kernel paging request.

The right code is use:

!(urb->flags & URB_GIVEBACK_ASAP)

This is the kernel dump fom my mips RALINK RT3052 machine with openwrt.

The "virtual address 0000002c" is the offset to "urb->flags" (44 bytes)
I think this error may be in all kernel with this driver (raspberry pi ...)

comment:7 Changed 2 years ago by howl

This blogic changeset /changeset/47563.html seems to solve this bug.

comment:8 Changed 2 years ago by nbd

  • Resolution set to fixed
  • Status changed from new to closed

comment:9 Changed 2 years ago by howl

  • Resolution fixed deleted
  • Status changed from closed to reopened

Sorry forget to comment here and I only did in the linux kernel bug tracker.

The issue is not solved but now happens a little different. Some boots the bug happens but other boots the kernel panic doesn't happen but the usbs get stuck from time to time.

I think that is probably that in future kernel versions 4.3 or 4.4 this could be solved as the dwc2 has been patched and rewritten regarding interrupts, dma and other aspects that could be the cause of this. I will try to compile OpenWrt when 4.3 arrives for lantiq profile, as I tried to do it by myself but it fails because compiling the profile is not find, and will feedback this bug with results.

comment:10 Changed 2 years ago by howl

It's solved within the 4.4 dwc2 module kernel changes.

comment:11 Changed 2 years ago by nbd

  • Resolution set to fixed
  • Status changed from reopened to closed

Add Comment

Modify Ticket

Action
as closed .
The resolution will be deleted. Next status will be 'reopened'.
Author


E-mail address and user name can be saved in the Preferences.

 
Note: See TracTickets for help on using tickets.