#9962 NORM Not Tri: libertas list corruption when queueing commands (during suspend)

[Zarro Boogs per Child]

#9962: libertas list corruption when queueing commands (during suspend)
--------------------+-------------------------------------------------------
 Reporter:  dsd     |                 Owner:  dsaxena      
     Type:  defect  |                Status:  new          
 Priority:  normal  |             Milestone:  Not Triaged  
Component:  kernel  |               Version:  not specified
 Keywords:          |           Next_action:  never set    
 Verified:  0       |   Deployment_affected:               
Blockedby:          |              Blocking:               
--------------------+-------------------------------------------------------
 XO-1.5 B3 running os103.

 While attempting to reproduce #9836 (a terminal running "while true; do
 echo mem > /sys/power/state; sleep 0.4; done" with another PC pinging the
 XO) I have seen the following twice in the last few minutes:

 {{{
 [  651.772379] PM: Syncing filesystems ... done.
 [  651.791347] Freezing user space processes ...
 [  651.797186] ------------[ cut here ]------------
 [  651.800125] WARNING: at lib/list_debug.c:30 __list_add+0x44/0x5c()
 [  651.800125] Hardware name: XO
 [  651.800125] list_add corruption. prev->next should be next (cae40e68),
 but was cae40e60. (prev=c9b7f660).
 [  651.800125] Modules linked in: fuse uinput videobuf_dma_contig
 videobuf_core mousedev psmouse serio_raw libertas_sdio libertas lib80211
 [last unloaded: scsi_wait_scan]
 [  651.800125] Pid: 2223, comm: NetworkManager Not tainted
 2.6.31_xo1.5-20091215.1440.1.olpc.9815d58 #1
 [  651.800125] Call Trace:
 [  651.800125]  [<b04209a0>] warn_slowpath_common+0x6a/0x81
 [  651.800125]  [<b05825bc>] ? __list_add+0x44/0x5c
 [  651.800125]  [<b04209f5>] warn_slowpath_fmt+0x29/0x2c
 [  651.800125]  [<b05825bc>] __list_add+0x44/0x5c
 [  651.800125]  [<d0a8a0c1>] lbs_queue_cmd+0x12c/0x1b8 [libertas]
 [  651.800125]  [<d0a8ca1c>] lbs_prepare_and_send_command+0x957/0xae9
 [libertas]
 [  651.800125]  [<b0432c14>] ? autoremove_wake_function+0x0/0x34
 [  651.800125]  [<d0a884fc>] lbs_get_wireless_stats+0x28b/0x2f5 [libertas]
 [  651.800125]  [<b0751b4c>] iw_handler_get_iwstats+0x20/0x51
 [  651.800125]  [<b07526c2>] ioctl_standard_call+0x1d1/0x285
 [  651.800125]  [<b06d1242>] ? __dev_get_by_name+0x72/0x7f
 [  651.800125]  [<b06d1242>] ? __dev_get_by_name+0x72/0x7f
 [  651.800125]  [<b0752849>] wext_handle_ioctl+0xd3/0x15e
 [  651.800125]  [<b0751b2c>] ? iw_handler_get_iwstats+0x0/0x51
 [  651.800125]  [<b06d4feb>] dev_ioctl+0x564/0x584
 [  651.800125]  [<b075d3af>] ? _spin_unlock_irqrestore+0x1c/0x31
 [  651.800125]  [<b0582f22>] ? __debug_object_init+0x2ae/0x2d6
 [  651.800125]  [<b0489b92>] ? cache_alloc_debugcheck_after+0xf2/0x120
 [  651.800125]  [<b06c6066>] sock_ioctl+0x1f4/0x200
 [  651.800125]  [<b06c5e72>] ? sock_ioctl+0x0/0x200
 [  651.800125]  [<b049b39a>] vfs_ioctl+0x1d/0x76
 [  651.800125]  [<b055cca6>] ? security_d_instantiate+0x21/0x23
 [  651.800125]  [<b049b9ac>] do_vfs_ioctl+0x4f9/0x537
 [  651.800125]  [<b075d3db>] ? _spin_unlock+0x17/0x2b
 [  651.800125]  [<b048e721>] ? fd_install+0x48/0x4e
 [  651.800125]  [<b06c6628>] ? sock_map_fd+0x54/0x5f
 [  651.800125]  [<b06c72f6>] ? sys_socket+0x48/0x5f
 [  651.800125]  [<b049ba30>] sys_ioctl+0x46/0x66
 [  651.800125]  [<b0402934>] sysenter_do_call+0x12/0x26
 [  651.800125] ---[ end trace 6fd8235dee84211a ]---
 [  652.016833] ------------[ cut here ]------------
 [  652.021745] WARNING: at lib/list_debug.c:30 __list_add+0x44/0x5c()
 [  652.026074] Hardware name: XO
 [  652.026074] list_add corruption. prev->next should be next (cae40e60),
 but was c9b7f694. (prev=c9b7f660).
 [  652.026074] Modules linked in: fuse uinput videobuf_dma_contig
 videobuf_core mousedev psmouse serio_raw libertas_sdio libertas lib80211
 [last unloaded: scsi_wait_scan]
 [  652.026074] Pid: 1171, comm: lbs_main Tainted: G        W
 2.6.31_xo1.5-20091215.1440.1.olpc.9815d58 #1
 [  652.026074] Call Trace:
 [  652.026074]  [<b04209a0>] warn_slowpath_common+0x6a/0x81
 [  652.026074]  [<b05825bc>] ? __list_add+0x44/0x5c
 [  652.026074]  [<b04209f5>] warn_slowpath_fmt+0x29/0x2c
 [  652.026074]  [<b05825bc>] __list_add+0x44/0x5c
 [  652.026074]  [<d0a89eb0>] __lbs_cleanup_and_insert_cmd+0x80/0xc8
 [libertas]
 [  652.026074]  [<d0a89f84>] lbs_complete_command+0x51/0x62 [libertas]
 [  652.026074]  [<d0a8e543>] lbs_process_command_response+0x9f0/0xa4d
 [libertas]
 [  652.026074]  [<d0a8480e>] lbs_thread+0x374/0x6b8 [libertas]
 [  652.026074]  [<b041cd1e>] ? default_wake_function+0x0/0x12
 [  652.026074]  [<d0a8449a>] ? lbs_thread+0x0/0x6b8 [libertas]
 [  652.026074]  [<b04329a9>] kthread+0x6d/0x72
 [  652.026074]  [<b043293c>] ? kthread+0x0/0x72
 [  652.026074]  [<b0403103>] kernel_thread_helper+0x7/0x10
 [  652.026074] ---[ end trace 6fd8235dee84211b ]---
 [  652.173622] libertas: EVENT: unknown event id 1
 [  652.180545] libertas: Received CMD_RESP with invalid sequence 504
 (expected 0)
 }}}

 at this point the system continually reports of more list corruption and
 command timeouts.

-- 
Ticket URL: <http://dev.laptop.org/ticket/9962>
One Laptop Per Child <http://laptop.org/>
OLPC bug tracking system