From patchwork Tue Dec 29 21:23:45 2009 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Alan Stern X-Patchwork-Id: 70143 Received: from vger.kernel.org (vger.kernel.org [209.132.180.67]) by demeter.kernel.org (8.14.3/8.14.2) with ESMTP id nBTLNqMp020965 for ; Tue, 29 Dec 2009 21:23:52 GMT Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1751235AbZL2VXu (ORCPT ); Tue, 29 Dec 2009 16:23:50 -0500 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S1751753AbZL2VXs (ORCPT ); Tue, 29 Dec 2009 16:23:48 -0500 Received: from netrider.rowland.org ([192.131.102.5]:32906 "HELO netrider.rowland.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with SMTP id S1751072AbZL2VXr (ORCPT ); Tue, 29 Dec 2009 16:23:47 -0500 Received: (qmail 7778 invoked by uid 500); 29 Dec 2009 16:23:45 -0500 Received: from localhost (sendmail-bs@127.0.0.1) by localhost with SMTP; 29 Dec 2009 16:23:45 -0500 Date: Tue, 29 Dec 2009 16:23:45 -0500 (EST) From: Alan Stern X-X-Sender: stern@netrider.rowland.org To: Sean cc: Andrew Morton , , , USB list , Ingo Molnar , Thomas Gleixner , "H. Peter Anvin" Subject: Re: [Bugme-new] [Bug 14564] New: capture-example sleeping function called from invalid context at arch/x86/mm/fault.c In-Reply-To: <4B3A5D23.8050300@toaster.net> Message-ID: MIME-Version: 1.0 Sender: linux-media-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-media@vger.kernel.org Index: usb-2.6/drivers/usb/host/ohci-hcd.c =================================================================== --- usb-2.6.orig/drivers/usb/host/ohci-hcd.c +++ usb-2.6/drivers/usb/host/ohci-hcd.c @@ -201,7 +201,7 @@ static int ohci_urb_enqueue ( /* allocate the TDs (deferring hash chain updates) */ for (i = 0; i < size; i++) { - urb_priv->td [i] = td_alloc (ohci, mem_flags); + urb_priv->td [i] = td_alloc (ohci, mem_flags, urb->dev, urb->ep); if (!urb_priv->td [i]) { urb_priv->length = i; urb_free_priv (ohci, urb_priv); Index: usb-2.6/drivers/usb/host/ohci-mem.c =================================================================== --- usb-2.6.orig/drivers/usb/host/ohci-mem.c +++ usb-2.6/drivers/usb/host/ohci-mem.c @@ -82,7 +82,8 @@ dma_to_td (struct ohci_hcd *hc, dma_addr /* TDs ... */ static struct td * -td_alloc (struct ohci_hcd *hc, gfp_t mem_flags) +td_alloc (struct ohci_hcd *hc, gfp_t mem_flags, struct usb_device *udev, + struct usb_host_endpoint *ep) { dma_addr_t dma; struct td *td; @@ -94,6 +95,8 @@ td_alloc (struct ohci_hcd *hc, gfp_t mem td->hwNextTD = cpu_to_hc32 (hc, dma); td->td_dma = dma; /* hashed in td_fill */ + ohci_dbg(hc, "td alloc for %s ep%x: %p\n", + udev->devpath, ep->desc.bEndpointAddress, td); } return td; } @@ -101,14 +104,27 @@ td_alloc (struct ohci_hcd *hc, gfp_t mem static void td_free (struct ohci_hcd *hc, struct td *td) { - struct td **prev = &hc->td_hash [TD_HASH_FUNC (td->td_dma)]; - - while (*prev && *prev != td) + int hash = TD_HASH_FUNC(td->td_dma); + struct td **prev = &hc->td_hash[hash]; + int n = 0; + + ohci_dbg(hc, "td free %p\n", td); + while (*prev && *prev != td) { + if ((unsigned long) *prev == 0xa7a7a7a7) { + ohci_dbg(hc, "poisoned hash at %p (%d %d) %p\n", prev, + hash, n, hc->td_hash[hash]); + return; + } prev = &(*prev)->td_hash; - if (*prev) + ++n; + } + if (*prev) { *prev = td->td_hash; - else if ((td->hwINFO & cpu_to_hc32(hc, TD_DONE)) != 0) - ohci_dbg (hc, "no hash for td %p\n", td); + ohci_dbg(hc, "(%d %d) %p -> %p\n", hash, n, prev, *prev); + } else { + ohci_dbg(hc, "no hash for td %p: %d %p\n", td, + hash, hc->td_hash[hash]); + } dma_pool_free (hc->td_cache, td, td->td_dma); } Index: usb-2.6/drivers/usb/host/ohci-q.c =================================================================== --- usb-2.6.orig/drivers/usb/host/ohci-q.c +++ usb-2.6/drivers/usb/host/ohci-q.c @@ -406,7 +406,7 @@ static struct ed *ed_get ( } /* dummy td; end of td list for ed */ - td = td_alloc (ohci, GFP_ATOMIC); + td = td_alloc (ohci, GFP_ATOMIC, udev, ep); if (!td) { /* out of memory */ ed_free (ohci, ed); @@ -560,6 +560,7 @@ td_fill (struct ohci_hcd *ohci, u32 info hash = TD_HASH_FUNC (td->td_dma); td->td_hash = ohci->td_hash [hash]; ohci->td_hash [hash] = td; + ohci_dbg(ohci, "hash %p to %d -> %p\n", td, hash, td->td_hash); /* HC might read the TD (or cachelines) right away ... */ wmb ();