FAQ:[#6458] Access remote shared directory through NFS will cause kernel crash(2011)

Document created by Aaronwu Employee on Sep 11, 2013
Version 1Show Document
  • View in full screen mode

[#6458] Access remote shared directory through NFS will cause kernel crash

Submitted By: Vivi Li

Open Date

2011-01-20 22:02:04     Close Date

2011-01-30 22:27:51

Priority:

Medium     Assignee:

Bob Liu

Status:

Closed     Fixed In Release:

N/A

Found In Release:

2011R1     Release:

Category:

N/A     Board:

N/A

Processor:

ALL     Silicon Revision:

Is this bug repeatable?:

Yes     Resolution:

Fixed

Uboot version or rev.:

    Toolchain version or rev.:

gcc4.3-2010_Dec_06

App binary format:

N/A     

Summary: Access remote shared directory through NFS will cause kernel crash

Details:

 

Access remote shared directory through NFS will cause kernel crash in latest trunk.

 

Last passed version:

--

kernel:    Linux release 2.6.36.2-ADI-2011R1-pre-svn9543, build #41 Wed Jan 5 21:31:03 CST 2011

toolchain: bfin-uclinux-gcc release gcc version 4.3.5 (ADI-trunk/svn-5013)

user-dist: release svn-10036, build #1012 Wed Jan 5 21:30:27 CST 2011

--

 

Bellow is the error log:

--

Linux version 2.6.37-ADI-2011R1-pre-svn9577 (test@uclinux61-bf548-std) (gcc version 4.3.5 (ADI-trunk/svn-5013) ) #9 Thu Jan 20 11

register early platform devices

bootconsole [early_shadow0] enabled

bootconsole [early_BFuart1] enabled

early printk enabled on early_BFuart1

Board Memory: 64MB

Kernel Managed Memory: 64MB

Memory map:

  fixedcode = 0x00000400-0x00000490

  text      = 0x00001000-0x001e4b48

  rodata    = 0x001e4b48-0x0028ab1c

  bss       = 0x0028b000-0x002a12a8

  data      = 0x002a12a8-0x002c2000

    stack   = 0x002c0000-0x002c2000

  init      = 0x002c2000-0x00989000

  available = 0x00989000-0x03e00000

  DMA Zone  = 0x03e00000-0x04000000

Hardware Trace Active and Enabled

Boot Mode: 1

Blackfin support (C) 2004-2010 Analog Devices, Inc.

Compiled for ADSP-BF548 Rev 0.2

Blackfin Linux support by http://blackfin.uclinux.org/

Processor Speed: 525 MHz core clock and 131 MHz System Clock

NOMPU: setting up cplb tables

Instruction Cache Enabled for CPU0

  External memory: cacheable in instruction cache

  L2 SRAM        : uncacheable in instruction cache

Data Cache Enabled for CPU0

  External memory: cacheable (write-through) in data cache

  L2 SRAM        : uncacheable in data cache

Built 1 zonelists in Zone order, mobility grouping off.  Total pages: 15748

Kernel command line: root=/dev/mtdblock0 rw clkin_hz=25000000 earlyprintk=serial,uart1,57600 console=tty0 console=ttyBF1,57600 if

PID hash table entries: 256 (order: -2, 1024 bytes)

Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)

Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)

Memory available: 53116k/65536k RAM, (6940k init code, 1934k kernel code, 886k data, 2048k dma, 612k reserved)

NR_IRQS:295

Configuring Blackfin Priority Driven Interrupts

console [ttyBF1] enabled, bootconsole disabled

console [ttyBF1] enabled, bootconsole disabled

Calibrating delay loop... 1046.52 BogoMIPS (lpj=2093056)

pid_max: default: 32768 minimum: 301

Mount-cache hash table entries: 512

Blackfin Scratchpad data SRAM: 4 KB

Blackfin L1 Data A SRAM: 16 KB (16 KB free)

Blackfin L1 Data B SRAM: 16 KB (16 KB free)

Blackfin L1 Instruction SRAM: 48 KB (41 KB free)

Blackfin L2 SRAM: 128 KB (128 KB free)

NET: Registered protocol family 16

Blackfin DMA Controller

ezkit_init(): registering device resources

bio: create slab <bio-0> at 0

SCSI subsystem initialized

spi spi0.2: Warning: SPI CPHA not set: Slave Select not under software control!

See Documentation/blackfin/bfin-spi-notes.txt

bfin-spi bfin-spi.0: Blackfin on-chip SPI Controller Driver, Version 1.0, regs_base@ffc00500, dma channel@4

bfin-spi bfin-spi.1: Blackfin on-chip SPI Controller Driver, Version 1.0, regs_base@ffc02300, dma channel@5

usbcore: registered new interface driver usbfs

usbcore: registered new interface driver hub

usbcore: registered new device driver usb

i2c-bfin-twi i2c-bfin-twi.0: Blackfin BF5xx on-chip I2C TWI Contoller, regs_base@ffc00700

i2c-bfin-twi i2c-bfin-twi.1: Blackfin BF5xx on-chip I2C TWI Contoller, regs_base@ffc02200

Advanced Linux Sound Architecture Driver Version 1.0.23.

musb_hdrc: version 6.0, musb-dma, host, debug=0

musb_hdrc musb_hdrc.0: MUSB HDRC host driver

musb_hdrc musb_hdrc.0: new USB bus registered, assigned bus number 1

hub 1-0:1.0: USB hub found

hub 1-0:1.0: 1 port detected

musb_hdrc musb_hdrc.0: USB Host mode controller at ffc03c00 using DMA, IRQ 82

NET: Registered protocol family 2

IP route cache hash table entries: 1024 (order: 0, 4096 bytes)

TCP established hash table entries: 2048 (order: 2, 16384 bytes)

TCP bind hash table entries: 2048 (order: 1, 8192 bytes)

TCP: Hash tables configured (established 2048 bind 2048)

TCP reno registered

UDP hash table entries: 256 (order: 0, 4096 bytes)

UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)

NET: Registered protocol family 1

RPC: Registered udp transport module.

RPC: Registered tcp transport module.

RPC: Registered tcp NFSv4.1 backchannel transport module.

debug-mmrs: setting up Blackfin MMR debugfs

msgmni has been set to 103

io scheduler noop registered (default)

bf54x-lq043: FrameBuffer initializing...

dma_alloc_init: dma_page @ 0x02979000 - 512 pages at 0x03e00000

bfin-otp: initialized

bfin-uart: Blackfin serial driver

bfin-uart.1: ttyBF1 at MMIO 0xffc02000 (irq = 48) is a BFIN-UART

brd: module loaded

register bfin atapi driver

scsi0 : pata-bf54x

ata1: PATA max UDMA/66 irq 68

physmap platform flash device: 02000000 at 20000000

physmap-flash.0: Found 1 x16 devices at 0x0 in 16-bit bank. Manufacturer ID 0x000089 Chip ID 0x00881e

Intel/Sharp Extended Query Table at 0x010A

Intel/Sharp Extended Query Table at 0x010A

Intel/Sharp Extended Query Table at 0x010A

Intel/Sharp Extended Query Table at 0x010A

Intel/Sharp Extended Query Table at 0x010A

Using buffer write method

Using auto-unlock on power-up/resume

cfi_cmdset_0001: Erase suspend on write enabled

RedBoot partition parsing not available

Using physmap partition information

Creating 3 MTD partitions on "physmap-flash.0":

0x000000000000-0x000000080000 : "bootloader(nor)"

0x000000080000-0x000000480000 : "linux kernel(nor)"

0x000000480000-0x000001000000 : "file system(nor)"

m25p80 spi0.1: m25p16 (2048 Kbytes)

Creating 2 MTD partitions on "m25p80":

0x000000000000-0x000000080000 : "bootloader(spi)"

0x000000080000-0x000000200000 : "linux kernel(spi)"

BF5xx on-chip NAND FLash Controller Driver, Version 1.2 (c) 2007 Analog Devices, Inc.

bf5xx-nand bf5xx-nand.0: data_width=8, wr_dly=3, rd_dly=3

ONFI flash detected

NAND device: Manufacturer ID: 0x20, Chip ID: 0xda (ST Micro ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ)

Creating 3 MTD partitions on "NAND 256MiB 3,3V 8-bit":

0x000000000000-0x000000080000 : "bootloader(nand)"

0x000000080000-0x000000480000 : "linux kernel(nand)"

0x000000480000-0x000010000000 : "file system(nand)"

smsc911x: Driver version 2008-10-21.

smsc911x-mdio: probed

eth0: attached PHY driver [Generic PHY] (mii_bus:phy_addr=0:01, irq=-1)

net eth0: MAC Address: 00:e0:22:fe:bd:b8

Initializing USB Mass Storage driver...

usbcore: registered new interface driver usb-storage

USB Mass Storage support registered.

input: bf54x-keys as /devices/platform/bf54x-keys/input/input0

ata1.00: ATA-7: FUJITSU MHW2040AT, 0000000B, max UDMA/100

ata1.00: 78140160 sectors, multi 16: LBA

rtc-bfin rtc-bfin: rtc core: registered rtc-bfin as rtc0

i2c /dev entries driver

bfin-wdt: initialized: timeout=20 sec (nowayout=0)

ata1.00: configured for UDMA/66

blk_queue_max_segments: set to minimum 1

scsi 0:0:0:0: Direct-Access     ATA      FUJITSU MHW2040A 0000 PQ: 0 ANSI: 5

sd 0:0:0:0: [sda] 78140160 512-byte logical blocks: (40.0 GB/37.2 GiB)

sd 0:0:0:0: [sda] Write Protect is off

usbcore: registered new interface driver usbhid

usbhid: USB HID core driver

sd 0:0:0:0: [sda] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA

ALSA device list:

  No soundcards found.

TCP cubic registered

NET: Registered protocol family 17

rtc-bfin rtc-bfin: setting system clock to 1970-12-22 17:16:24 UTC (30734184)

sda: sda1

sd 0:0:0:0: [sda] Attached SCSI disk

net eth0: SMSC911x/921x identified at 0x24000000, IRQ: 175

IP-Config: Gateway not on directly connected network.

Freeing unused kernel memory: 6940k freed

                           _____________________________________

        a8888b.           / Welcome to the uClinux distribution \

       d888888b.         /       _     _                         \

       8P"YP"Y88        /       | |   |_|            __  __ (TM)  |

       8|o||o|88  _____/        | |    _ ____  _   _ \ \/ /       |

       8'    .88       \        | |   | |  _ \| | | | \  /        |

       8`._.' Y8.       \       | |__ | | | | | |_| | /  \        |

      d/      `8b.       \      \____||_|_| |_|\____|/_/\_\       |

     dP   .    Y8b.       \   For embedded processors including   |

    d8:'  "  `::88b        \    the Analog Devices Blackfin      /

   d8"         'Y88b        \___________________________________/

  :8P    '      :888

   8a.   :     _a88P         For further information, check out:

._/"Yaa_:   .| 88P|            - http://blackfin.uclinux.org/

\    YP"    `| 8P  `.          - http://docs.blackfin.uclinux.org/

/     \.___.d|    .'           - http://www.uclinux.org/

`--..__)8888P`._.'  jgs/a:f    - http://www.analog.com/blackfin

 

Have a lot of fun...

 

 

BusyBox v1.18.1 (2011-01-20 15:46:25 CST) hush - the humble shell

 

root:/> portmap -f &

[1] 362 portmap -f

root:/> mount -o nolock,rsize=1024,wsize=1024 -t nfs 10.100.4.174:/tftpboot/romf

s /mnt/

root:/> ls /mnt/

------------[ cut here ]------------

kernel BUG at mm/nommu.c:432!

Kernel panic - not syncing: BUG()

Hardware Trace:

   0 Target : <0x00004024> { _trap_c + 0x0 }

     Source : <0xffa00730> { _exception_to_level5 + 0xa4 } JUMP.L

   1 Target : <0xffa0068c> { _exception_to_level5 + 0x0 }

     Source : <0xffa00540> { _bfin_return_from_exception + 0x18 } RTX

   2 Target : <0xffa00528> { _bfin_return_from_exception + 0x0 }

     Source : <0xffa005e4> { _ex_trap_c + 0x74 } JUMP.S

   3 Target : <0xffa00570> { _ex_trap_c + 0x0 }

     Source : <0xffa007f6> { _trap + 0x5a } JUMP (P4)

   4 Target : <0xffa0079c> { _trap + 0x0 }

      FAULT : <0x00043008> { _vm_map_ram + 0x0 } BUG

     Source : <0x00080a7c> { _nfs_readdir_xdr_to_array + 0xcc } JUMP.L

   5 Target : <0x00080a62> { _nfs_readdir_xdr_to_array + 0xb2 }

     Source : <0x0003a774> { ___alloc_pages_nodemask + 0xc8 } RTS

   6 Target : <0x0003a762> { ___alloc_pages_nodemask + 0xb6 }

     Source : <0x0003a5b0> { _get_page_from_freelist + 0x218 } RTS

   7 Target : <0x0003a5a4> { _get_page_from_freelist + 0x20c }

     Source : <0x0003a57c> { _get_page_from_freelist + 0x1e4 } IF !CC JUMP pcrel

   8 Target : <0x0003a57a> { _get_page_from_freelist + 0x1e2 }

     Source : <0x0003a4d4> { _get_page_from_freelist + 0x13c } IF CC JUMP pcrel

   9 Target : <0x0003a4d2> { _get_page_from_freelist + 0x13a }

     Source : <0x0003a1a8> { _prep_new_page + 0x80 } RTS

  10 Target : <0x0003a1a0> { _prep_new_page + 0x78 }

     Source : <0x0003a20c> { _prep_new_page + 0xe4 } JUMP.S

  11 Target : <0x0003a20a> { _prep_new_page + 0xe2 }

     Source : <0x0003a202> { _prep_new_page + 0xda } IF CC JUMP pcrel

  12 Target : <0x0003a200> { _prep_new_page + 0xd8 }

     Source : <0x0003a1be> { _prep_new_page + 0x96 } IF CC JUMP pcrel (BP)

  13 Target : <0x0003a1ae> { _prep_new_page + 0x86 }

     Source : <0x0003a170> { _prep_new_page + 0x48 } IF !CC JUMP pcrel

  14 Target : <0x0003a128> { _prep_new_page + 0x0 }

     Source : <0x0003a4ce> { _get_page_from_freelist + 0x136 } JUMP.L

  15 Target : <0x0003a468> { _get_page_from_freelist + 0xd0 }

     Source : <0x0003a578> { _get_page_from_freelist + 0x1e0 } JUMP.S

Stack info:

SP: [0x02cabb1c] <0x02cabb1c> /* kernel dynamic memory (maybe user-space) */

FP: (0x02cabd90)

Memory from 0x02cabb10 to 02cac000

02cabb10: 00000021  02cabb1c  00000013 [00231f4c] 001e3234  02cabc10  00231f4c  0029070f

02cabb30: 0029070f  0029070f  02cabb64  02cabd44  0000441a  02cabc10  ffe02014  02cc2d78

02cabb50: 00008008  00000021  00000021  00000013  0000001f  0000003f  0000003f  02cabb9c

02cabb70: 001d0820  02cabba4 <0000c7f0> 029ee2e0  029ee440  001d2604  002a3e1c  00000001

02cabb90: 0000001f  001e57e8  029ee43c  00000000  029ee2e0  02cabbd0  001e3696  001e57e8

02cabbb0: 029ee43c  029ee2e0  00000000  0000002c  00000000  002be59c  00a0d00c  0003a4d2

02cabbd0: 009e47a0  002be578  00a0d000  00000001  00000000  00000001  0000ffff  ffa00734

02cabbf0: 0028d000  00008008  00000021  00000008  00000000  0000000c  00000000  00000480

02cabc10: 00000480  00008008  00000021  00000000  02cabcec  00000480  00043008  00080a80

02cabc30: 02cabd44  02003065  02a9248b  02d0ce5d  02a92480  02d0ce5c  00000000  00000000

02cabc50: 00000000  00000000  00000000  00000000  00000000  00000000  00000000  00000000

02cabc70: 00000000  00000000  00000000  00000000  00000000  00000000  00000000  0000002c

02cabc90: 00000000  02d73eac  02d69688  002be620  02d73de8  02cabd44  02cabe50  02836ea0

02cabcb0: 02cc2d78  009e47c0  02cabd64  009e47b8  02cabd64  02cb8000  00000008  00000000

02cabcd0: 003fffff  00000000  00000008  02cabd44  02cabd44  009e47b8  00000006  0003a762

02cabcf0: 00000000  002befbc  00000000  000201da  000201da  00000002  00000000  000201da

02cabd10: 00000000  00000000  002befbc  00000000  00000000  00000000  00000000  002be59c

02cabd30: 00a0d00c  00000000  029ec160  029ec6a0  00080bc8  009e4580  009e45a0  009e4880

02cabd50: 009e48a0  009e48c0  009e48e0  009e4780  009e47a0  00080bc8  00080bde  02cc2d78

02cabd70: 009e4700  00000000  009e4700  00000000  000201da  00000000  02cc2e18  009e4700

02cabd90:(00000000)<0003639e> 02cc2e18  000000d0  009e4700  002befbc  00000000  000000d0

02cabdb0: 000000d0  002a27a0  00036404  00000000  00080bc8  ffffffc0  000200da  00000000

02cabdd0: 02cc2e18  02cabe50  00000000  02cabe44  02bfc000  02cabe50  000200da  02cc2d0c

02cabdf0: 000364d4  00000000  02cc3ed4  02cc2d78  00000000  02cabedc  02cabe50  002a1298

02cabe10: 02bfc000  00000000  02caa000  02cabe50  000200da  000364e8  02cc2d78  00080e3e

02cabe30: 02836ea0  02cabe50  00080e76  029a9ad4  029a9ad4  00000000  02cabe50  00000000

02cabe50: 02836ea0  00000000  00000000  029ea69c  00000000  00000000  00000000  00000000

02cabe70: 0009230c  00000000  00000000  00000000  00000001  02d73dfc <00052d30> 02836ea0

02cabe90: 02cc2d78  020ad408  00000000  02cabedc  00052ab8  02cc2dec  02cabeb0  02cabedc

02cabeb0: 00052ab8  00052d94  00052d44  000000dc  020ad408  02836ea0  00000400  00000400

02cabed0: 020ad000  00000003  00051fd2  020ad408  00000000  00000400  00000000  00000000

02cabef0:<ffa0092e><ffa0092e> 00052d44  000000dc  00000000  ffffe000  02d69688  029fdff7

02cabf10: 029ee820  029ee2e0  020adff4  00000400  02d69688  02d18340  00008000  00000000

02cabf30: 00000000  02cac000  02d18340  02d18340  02d18332  ffa01048  02003044  02a9248b

02cabf50: 02d0ce5d  02a92480  02d0ce5c  00000000  00000000  00000000  00000000  00000000

02cabf70: 00000000  00000000  00000000  00000000  00000000  00000000  00000000  00000000

02cabf90: 00000000  00000000  00000000  00000000  00000004  00000000  02d73eac  02d69688

02cabfb0: 02d73e90  02d73de8  02d73dfc  020ad004  02d681e0  020ad408  020ad408  00000100

02cabfd0: 000000dc  00000000  00000000  02d69688  00000400  020adff4  00000400  020ad408

02cabff0: 00000003  00000003  000000dc  00000006

Return addresses in stack:

    address : <0x0000c7f0> { _dequeue_task + 0x1c }

   frame  1 : <0x0003639e> { ___read_cache_page + 0x56 }

    address : <0x00052d30> { _vfs_readdir + 0x60 }

    address : <0xffa0092e> { _system_call + 0x6a }

    address : <0xffa0092e> { _system_call + 0x6a }

--

 

Follow-ups

 

--- Bob Liu                                                  2011-01-26 04:23:38

This bug should be fixed by commit NFS: Don't use vm_map_ram() in readdir.

see

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=6650239a4b01077e80d5a4468562756d77afaa59

 

--- Bob Liu                                                  2011-01-28 04:16:57

fixed by commit 9582

 

--- Vivi Li                                                  2011-01-30 22:27:51

OK. Close it.

 

 

 

    Files

    Changes

    Commits

    Dependencies

    Duplicates

    Associations

    Tags

 

File Name     File Type     File Size     Posted By

config.linux.nfs    application/octet-stream    47642    Vivi Li

Attachments

Outcomes