[BUG] Kernel panic when try s3c-hsotg.c with kernel 3.5

[Peiyong Feng]

I got a kernel panic when try hsotg of ok6410 which is based on s3c6410:


cdc_acm: USB Abstract Control Model driver for USB modems and ISDN adapters
Unable to handle kernel NULL pointer dereference at virtual address 00000100
pgd = c0004000
[00000100] *pgd=00000000
Internal error: Oops: 5 [#1] ARM
Modules linked in:
CPU: 0    Not tainted  (3.5.0 #9)
PC is at s3c_hsotg_handle_outdone+0x44/0x158
LR is at s3c_hsotg_irq+0x75c/0x804
pc : [<c023e7fc>]    lr : [<c024061c>]    psr: 60000193
sp : c782fd20  ip : 00000029  fp : c13a1460
r10: 00000000  r9 : 00000008  r8 : 000000d0
r7 : c13a1400  r6 : 00000002  r5 : 00000000  r4 : 00060002
r3 : 000000d0  r2 : 00000000  r1 : 00080200  r0 : c13a1400
Flags: nZCv  IRQs off  FIQs on  Mode SVC_32  ISA ARM  Segment kernel
Control: 00c5387d  Table: 50004008  DAC: 00000017
Process swapper (pid: 1, stack limit = 0xc782e268)
Stack: (0xc782fd20 to 0xc7830000)
fd20: c13a1460 c0200f64 00000000 00060002 00000000 00000002 c13a1400 00000010
fd40: 00000000 c024061c 00060002 00000000 00000002 00000008 c782fda0 c139a5c0
fd60: c139a5c0 00000000 00000000 0000005a c04cc52c c04cc594 c04ea5fe c00565c0
fd80: 00000000 00000000 00000000 c04cc52c c139a5c0 c04cc57c 00000000 c04eb328
fda0: c04cc55c c04eb324 c04c44c0 c0056768 c04cc52c c04cc57c 00000000 c0058d64
fdc0: 0000005a c04d7dd8 00000000 c005617c 0000005a c000efbc c04eb350 00000001
fde0: c782fe08 c000853c c036c540 60000013 ffffffff c782fe3c c04cc57c c04cc55c
fe00: 60000013 c000dd80 c04cc57c c782c000 ffffffff 00000001 60000013 c04cc52c
fe20: c139a5c0 0000005a c04cc57c c04cc55c 60000013 c04c44c0 f6010000 c782fe50
fe40: c036c53c c036c540 60000013 ffffffff c023fec0 c00574c8 00000000 c008b2dc
fe60: c023fec0 00000000 00000000 c13a1400 0000005a c139a5c0 c04cc52c c0057960
fe80: 0000005a c13a1400 c04c44b8 00000000 c051d238 c049b0ec 00000000 c03688fc
fea0: c7853e60 c13a1400 c7804f80 00000000 c04c44f4 60000013 c7855a80 00000000
fec0: c04e1bb4 c04c44c0 c04c44c0 c04e1bb4 c04e1bb4 c051d238 c049b0ec 00000000
fee0: c04eb040 c020588c c04c44c0 c0204524 c04c44c0 c04c44f4 c04e1bb4 c02046ac
ff00: c13a01e0 c0204738 00000000 c782ff18 c04e1bb4 c0202e30 c7803878 c7823700
ff20: c04dd1d0 c040b8d4 c04e1bb4 c04e1bb4 c04dd1d0 c0203600 c040b8d4 c01b8568
ff40: 00000000 00000000 c04e1bb4 00000007 c04eb040 c782e000 c04a65e0 c0204ce8
ff60: 00000000 c04a65d4 00000007 c04eb040 c782e000 c0008628 c04c7ea0 00000000
ff80: 0000009c 00000000 c0625cf9 c0037178 00000006 00000006 c0461b84 c042cee8
ffa0: c04c7ea0 c04abdd4 c04a65d4 00000007 c04eb040 0000009c c04841b0 c04a65e0
ffc0: 00000000 c048430c 00000006 00000006 c04841b0 00000000 00000000 c048421c
ffe0: c000f08c 00000013 00000000 00000000 00000000 c000f08c 00000000 00000000
[<c023e7fc>] (s3c_hsotg_handle_outdone+0x44/0x158) from [<c024061c>]
(s3c_hsotg_irq+0x75c/0x804)
[<c024061c>] (s3c_hsotg_irq+0x75c/0x804) from [<c00565c0>]
(handle_irq_event_percpu+0x50/0x1bc)
[<c00565c0>] (handle_irq_event_percpu+0x50/0x1bc) from [<c0056768>]
(handle_irq_event+0x3c/0x5c)
[<c0056768>] (handle_irq_event+0x3c/0x5c) from [<c0058d64>]
(handle_level_irq+0x8c/0x118)
[<c0058d64>] (handle_level_irq+0x8c/0x118) from [<c005617c>]
(generic_handle_irq+0x38/0x44)
[<c005617c>] (generic_handle_irq+0x38/0x44) from [<c000efbc>]
(handle_IRQ+0x30/0x84)
[<c000efbc>] (handle_IRQ+0x30/0x84) from [<c000853c>] (vic_handle_irq+0x68/0xa8)
[<c000853c>] (vic_handle_irq+0x68/0xa8) from [<c000dd80>] (__irq_svc+0x40/0x60)
Exception stack(0xc782fe08 to 0xc782fe50)
fe00:                   c04cc57c c782c000 ffffffff 00000001 60000013 c04cc52c
fe20: c139a5c0 0000005a c04cc57c c04cc55c 60000013 c04c44c0 f6010000 c782fe50
fe40: c036c53c c036c540 60000013 ffffffff
[<c000dd80>] (__irq_svc+0x40/0x60) from [<c036c540>]
(_raw_spin_unlock_irqrestore+0x10/0x14)
[<c036c540>] (_raw_spin_unlock_irqrestore+0x10/0x14) from [<c00574c8>]
(__setup_irq+0x178/0x3f8)
[<c00574c8>] (__setup_irq+0x178/0x3f8) from [<c0057960>]
(request_threaded_irq+0xc4/0x12c)
[<c0057960>] (request_threaded_irq+0xc4/0x12c) from [<c03688fc>]
(s3c_hsotg_probe+0x14c/0x700)
[<c03688fc>] (s3c_hsotg_probe+0x14c/0x700) from [<c020588c>]
(platform_drv_probe+0x18/0x1c)
[<c020588c>] (platform_drv_probe+0x18/0x1c) from [<c0204524>]
(driver_probe_device+0x78/0x200)
[<c0204524>] (driver_probe_device+0x78/0x200) from [<c0204738>]
(__driver_attach+0x8c/0x90)
[<c0204738>] (__driver_attach+0x8c/0x90) from [<c0202e30>]
(bus_for_each_dev+0x60/0x8c)
[<c0202e30>] (bus_for_each_dev+0x60/0x8c) from [<c0203600>]
(bus_add_driver+0xac/0x250)
[<c0203600>] (bus_add_driver+0xac/0x250) from [<c0204ce8>]
(driver_register+0x58/0x130)
[<c0204ce8>] (driver_register+0x58/0x130) from [<c0008628>]
(do_one_initcall+0x34/0x17c)
[<c0008628>] (do_one_initcall+0x34/0x17c) from [<c048430c>]
(kernel_init+0xf0/0x1bc)
[<c048430c>] (kernel_init+0xf0/0x1bc) from [<c000f08c>]
(kernel_thread_exit+0x0/0x8)
Code: e0433106 e0833006 e1a03183 e0828003 (e5984030)
---[ end trace 2ea4e574318ecf99 ]---
Kernel panic - not syncing: Fatal exception in interrupt
-----------------------------------------------------------------------------------


When I try locate the source using arm-linux-gdb, I got this:
-------------------------------------------------------------
GNU gdb (Sourcery G++ Lite 2008q3-72) 6.8.50.20080821-cvs
Copyright (C) 2008 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "--host=i686-pc-linux-gnu
--target=arm-none-linux-gnueabi".
For bug reporting instructions, please see:
<https://support.codesourcery.com/GNUToolchain/>...
(gdb) l *(s3c_hsotg_handle_outdone+0x44)
0xc023e7fc is in s3c_hsotg_handle_outdone (drivers/usb/gadget/s3c-hsotg.c:1553).
1548	static void s3c_hsotg_handle_outdone(struct s3c_hsotg *hsotg,
1549					     int epnum, bool was_setup)
1550	{
1551		u32 epsize = readl(hsotg->regs + DOEPTSIZ(epnum));
1552		struct s3c_hsotg_ep *hs_ep = &hsotg->eps[epnum];
1553		struct s3c_hsotg_req *hs_req = hs_ep->req;
1554		struct usb_request *req = &hs_req->req;
1555		unsigned size_left = DxEPTSIZ_XferSize_GET(epsize);
1556		int result = 0;
1557	
(gdb)



I also try the old linux like 2.6.36, I works fine.
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/