lkml.org 
[lkml]   [2013]   [Dec]   [11]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
Subjectuhci_hcd: Possible corruption of DMA pool uhci->td_pool
Hi,

On ROSA Linux with kernel 3.10.21 with DMA debug options enabled, the
kernel sometimes issues a warning about DMA pool corruption (see the log
below).

That happens sometimes, when the system boots or resumes from
hibernation with Samson C01U USB microphone attached.

The affected DMA pool is 'uhci->td_pool', uhci_alloc_td() from
drivers/usb/host/uhci-hcd.c makes the relevant dma_pool_alloc() calls.

Any ideas about how to find what causes this and how to fix it?

Here is the relevant part of the system log:
----------------------------
[ 22.264332] usb 2-1: new full-speed USB device number 2 using uhci_hcd
[ 22.450609] usb 2-1: New USB device found, idVendor=17a0, idProduct=0001
[ 22.450626] usb 2-1: New USB device strings: Mfr=1, Product=2,
SerialNumber=0
[ 22.450639] usb 2-1: Product: Samson C01U
[ 22.450649] usb 2-1: Manufacturer: Samson Technologies
<...>
[ 280.703483] retire_capture_urb: 4494 callbacks suppressed
[ 284.961087] uhci_hcd 0000:00:1d.1: dma_pool_alloc uhci_td, efb7b060
(corruped)
[ 284.961087] 00000000: 00 06 00 00 af 00 00 03 a7 a7 a7 a7 a7 a7 a7 a7
................
[ 284.961087] 00000010: a7 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7
................
[ 284.961087] 00000020: a7 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7
................
[ 284.961087] retire_capture_urb: 4343 callbacks suppressed
[ 284.961087] uhci_hcd 0000:00:1d.1: dma_pool_alloc uhci_td, efb7b5d0
(corruped)
[ 284.961087] 00000000: 00 06 00 00 af 00 00 03 a7 a7 a7 a7 a7 a7 a7 a7
................
[ 284.961087] 00000010: a7 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7
................
[ 284.961087] 00000020: a7 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7
................
[ 284.961087] cannot submit urb (err = -27)
[ 284.961087] cannot submit urb (err = -27)
[ 284.961087] cannot submit urb (err = -27)
[ 284.961087] cannot submit urb (err = -27)
[ 284.961087] cannot submit urb (err = -27)
[ 284.961087] cannot submit urb (err = -27)
[ 284.961087] cannot submit urb (err = -27)
[ 284.961087] cannot submit urb (err = -27)
----------------------------

0xa7 is POOL_POISON_FREED. The memory pages to be allocated from the
pool should be filled with such bytes.

Each time I observed this problem, the first 8 bytes of the listed
memory area were overwritten, with different data each time.

Regards,
Eugene

--
Eugene Shatokhin, ROSA Laboratory.
www.rosalab.com


\
 
 \ /
  Last update: 2013-12-11 16:41    [W:0.064 / U:0.172 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site