[#6466] After smbfs is substitute to cifs,kernel will crash when mount samba server(2011)

[#6466] After smbfs is substitute to cifs,kernel will crash when mount samba server

Submitted By: Vivi Li

Open Date

2011-01-31 02:18:35 Close Date

2011-01-31 02:22:53

Priority:

Medium Assignee:

Nobody

Status:

Closed Fixed In Release:

N/A

Found In Release:

2011R1 Release:

Category:

N/A Board:

N/A

Processor:

ALL Silicon Revision:

Is this bug repeatable?:

Yes Resolution:

Duplicate

Uboot version or rev.:

Toolchain version or rev.:

gcc4.3-.2010_Dec_09

App binary format:

N/A

Summary: After smbfs is substitute to cifs,kernel will crash when mount samba server

Details:

After smbfs is substitute to cifs, kernel will crash when mount samba server.

Bellow is the log:

Linux version 2.6.37-ADI-2011R1-pre-svn9584 (test@uclinux52-bf537-spinet) (gcc version 4.3.5 (ADI-trunk/svn-5013) ) #156 Sun Jan 30 08:08:25 CST 2011

bootconsole [early_shadow0] enabled

bootconsole [early_BFuart0] enabled

early printk enabled on early_BFuart0

Limiting kernel memory to 56MB due to anomaly 05000263

Board Memory: 64MB

Kernel Managed Memory: 64MB

Memory map:

fixedcode = 0x00000400-0x00000490

text = 0x00001000-0x00140b60

rodata = 0x00140b60-0x001af618

bss = 0x001b0000-0x001c07d4

data = 0x001c07d4-0x001d4000

stack = 0x001d2000-0x001d4000

init = 0x001d4000-0x008b8000

available = 0x008b8000-0x03800000

DMA Zone = 0x03f00000-0x04000000

Hardware Trace Active and Enabled

Boot Mode: 0

Reset caused by Software reset

Compiled for ADSP-BF537 Rev 0.2

Blackfin Linux support by http://blackfin.uclinux.org/

Processor Speed: 500 MHz core clock and 125 MHz System Clock

NOMPU: setting up cplb tables

Instruction Cache Enabled for CPU0

External memory: cacheable in instruction cache

Data Cache Enabled for CPU0

External memory: cacheable (write-back) in data cache

Built 1 zonelists in Zone order, mobility grouping off. Total pages: 14224

Kernel command line: root=/dev/mtdblock0 rw ip=10.100.4.50 earlyprintk=serial,uart0,57600 console=ttyBF0,57600 ip=10.100.4.50:10.100.4.174:10.100.4.174:255.255.255.0:bf537-stamp:eth0:off

PID hash table entries: 256 (order: -2, 1024 bytes)

Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)

Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)

Memory available: 47808k/65536k RAM, (7056k init code, 1278k kernel code, 590k data, 1024k dma, 7780k reserved)

NR_IRQS:138

Configuring Blackfin Priority Driven Interrupts

console [ttyBF0] enabled, bootconsole disabled

Calibrating delay loop... 995.32 BogoMIPS (lpj=1990656)

pid_max: default: 32768 minimum: 301

Mount-cache hash table entries: 512

Blackfin Scratchpad data SRAM: 4 KB

Blackfin L1 Data A SRAM: 16 KB (16 KB free)

Blackfin L1 Data B SRAM: 16 KB (16 KB free)

Blackfin L1 Instruction SRAM: 48 KB (35 KB free)

NET: Registered protocol family 16

Blackfin DMA Controller

stamp_init(): registering device resources

bio: create slab <bio-0> at 0

bfin-spi bfin-spi.0: Blackfin on-chip SPI Controller Driver, Version 1.0, regs_base@ffc00500, dma channel@7

Switching to clocksource bfin_cs_cycles

NET: Registered protocol family 2

IP route cache hash table entries: 1024 (order: 0, 4096 bytes)

TCP established hash table entries: 2048 (order: 2, 16384 bytes)

TCP bind hash table entries: 2048 (order: 1, 8192 bytes)

TCP: Hash tables configured (established 2048 bind 2048)

TCP reno registered

UDP hash table entries: 256 (order: 0, 4096 bytes)

UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)

NET: Registered protocol family 1

debug-mmrs: setting up Blackfin MMR debugfs

msgmni has been set to 93

io scheduler noop registered (default)

bfin-uart: Blackfin serial driver

bfin-uart.0: ttyBF0 at MMIO 0xffc00400 (irq = 18) is a BFIN-UART

brd: module loaded

bfin_mii_bus: probed

bfin_mac: attached PHY driver [SMSC LAN83C185] (mii_bus:phy_addr=0:01, irq=-1, mdc_clk=2500000Hz(mdc_div=24)@sclk=125MHz)

bfin_mac bfin_mac.0: eth0: Blackfin on-chip Ethernet MAC driver, Version 1.1

rtc-bfin rtc-bfin: rtc core: registered rtc-bfin as rtc0

bfin-wdt: initialized: timeout=20 sec (nowayout=0)

TCP cubic registered

NET: Registered protocol family 17

rtc-bfin rtc-bfin: setting system clock to 1970-08-09 04:34:35 UTC (19024475)^RIP-Config: Complete:

device=eth0, addr=10.100.4.50, mask=255.255.255.0, gw=10.100.4.174,

host=bf537-stamp, domain=, nis-domain=(none),

bootserver=10.100.4.174, rootserver=10.100.4.174, rootpath=

dma_alloc_init: dma_page @ 0x02926000 - 256 pages at 0x03f00000

Freeing unused kernel memory: 7056k freed

_____________________________________

a8888b. / Welcome to the uClinux distribution \

d888888b. / _ _ \

8P"YP"Y88 / | | |_| __ __ (TM) |

8|o||o|88 _____/ | | _ ____ _ _ \ \/ / |

8' .88 \ | | | | _ \| | | | \ / |

8`._.' Y8. \ | |__ | | | | | |_| | / \ |

d/ `8b. \ \____||_|_| |_|\____|/_/\_\ |

dP . Y8b. \ For embedded processors including |

d8:' " `::88b \ the Analog Devices Blackfin /

d8" 'Y88b \___________________________________/

:8P ' :888

8a. : _a88P For further information, check out:

._/"Yaa_: .| 88P| - http://blackfin.uclinux.org/

\ YP" `| 8P `. - http://docs.blackfin.uclinux.org/

/ \.___.d| .' - http://www.uclinux.org/

`--..__)8888P`._.' jgs/a:f - http://www.analog.com/blackfin

Have a lot of fun...

BusyBox v1.18.1 (2011-01-30 05:51:31 CST) hush - the humble shell

root:/> ifconfig eth0 10.100.4.50

root:/> mount.cifs //10.100.4.174/users /mnt rw -o username=test,password=test

Data access misaligned address violation

<5> - Attempted misaligned data memory or data cache access.

Kernel OOPS in progress

Deferred Exception context

CURRENT PROCESS:

COMM=cifsd PID=178 CPU=0

invalid mm

return address: [0x00098adc]; contents of:

0x00098ab0: 0040 2fdd 3210 e490 0024 4f08 3208 6538

0x00098ac0: 5a8a 6d2a 9511 5008 0010 0000 3210 e490

0x00098ad0: 0024 4f08 3208 6538 5a8a 6d2a [9511] 5008

0x00098ae0: 0010 0000 0568 0167 6f86 6002 ce82 ca01

ADSP-BF537-0.2 500(MHz CCLK) 125(MHz SCLK) (mpu off)

Linux version 2.6.37-ADI-2011R1-pre-svn9584 (test@uclinux52-bf537-spinet) (gcc version 4.3.5 (ADI-trunk/svn-5013) ) #156 Sun Jan 30 08:08:25 CST 2011

SEQUENCER STATUS: Not tainted

SEQSTAT: 00002024 IPEND: 8008 IMASK: ffff SYSCFG: 0006

EXCAUSE : 0x24

physical IVG3 asserted : <0xffa007d4> { _trap + 0x0 }

physical IVG15 asserted : <0xffa010b8> { _evt_system_call + 0x0 }

logical irq 6 mapped : <0xffa003ec> { _bfin_coretmr_interrupt + 0x0 }

logical irq 10 mapped : <0x000e5b90> { _bfin_rtc_interrupt + 0x0 }

logical irq 18 mapped : <0x000cf74c> { _bfin_serial_dma_rx_int + 0x0 }

logical irq 19 mapped : <0x000cf4a4> { _bfin_serial_dma_tx_int + 0x0 }

logical irq 24 mapped : <0x000e0c50> { _bfin_mac_interrupt + 0x0 }

RETE: <0x00000000> /* Maybe null pointer? */

RETN: <0x02ad7f0c> /* kernel dynamic memory (maybe user-space) */

RETX: <0x00000480> /* Maybe fixed code section */

RETS: <0x000983ec> { _checkSMB + 0x1c8 }

PC : <0x00098adc> { _smbCalcSize_LE + 0x10 }

DCPLB_FAULT_ADDR: <0x02868086> /* kernel dynamic memory (maybe user-space) */

ICPLB_FAULT_ADDR: <0x00098adc> { _smbCalcSize_LE + 0x10 }

PROCESSOR STATE:

R0 : 00000049 R1 : 00000001 R2 : 00000001 R3 : 0000111c

R4 : 0000004f R5 : 00000001 R6 : 00000053 R7 : 0000004f

P0 : 02003ce0 P1 : 00000022 P2 : 02868087 P3 : 02937800

P4 : 00000001 P5 : 02868040 FP : 02868040 SP : 02ad7e30

LB0: ffa017c4 LT0: ffa017c2 LC0: 00000000

LB1: ffa00456 LT1: ffa00456 LC1: 00000000

B0 : 00000000 L0 : 00000000 M0 : 00000000 I0 : 029374a0

B1 : 00000000 L1 : 00000000 M1 : 00000000 I1 : 029190b4

B2 : 00000000 L2 : 00000000 M2 : 00000000 I2 : 00000000

B3 : 00000000 L3 : 00000000 M3 : 00000000 I3 : 00000000

A0.w: 000028aa A0.x: 00000000 A1.w: 000000aa A1.x: 00000000

USP : 00000000 ASTAT: 02002060

Hardware Trace:

0 Target : <0x00003fc0> { _trap_c + 0x0 }

Source : <0xffa00768> { _exception_to_level5 + 0xa4 } JUMP.L

1 Target : <0xffa006c4> { _exception_to_level5 + 0x0 }

Source : <0xffa00578> { _bfin_return_from_exception + 0x20 } RTX

2 Target : <0xffa00558> { _bfin_return_from_exception + 0x0 }

Source : <0xffa0061c> { _ex_trap_c + 0x74 } JUMP.S

3 Target : <0xffa005a8> { _ex_trap_c + 0x0 }

Source : <0xffa0083c> { _trap + 0x68 } JUMP (P4)

4 Target : <0xffa007f2> { _trap + 0x1e }

Source : <0xffa007ee> { _trap + 0x1a } IF CC JUMP pcrel

5 Target : <0xffa007d4> { _trap + 0x0 }

FAULT : <0x00098adc> { _smbCalcSize_LE + 0x10 } R1 = W[P2] (Z)

Source : <0x00098ada> { _smbCalcSize_LE + 0xe } 0x6d2a

6 Target : <0x00098acc> { _smbCalcSize_LE + 0x0 }

Source : <0x000983e8> { _checkSMB + 0x1c4 } CALL pcrel

7 Target : <0x000983e4> { _checkSMB + 0x1c0 }

Source : <0x000983b8> { _checkSMB + 0x194 } IF CC JUMP pcrel

8 Target : <0x000983b2> { _checkSMB + 0x18e }

Source : <0x0009838e> { _checkSMB + 0x16a } IF CC JUMP pcrel

9 Target : <0x0009837e> { _checkSMB + 0x15a }

Source : <0x000982b8> { _checkSMB + 0x94 } IF CC JUMP pcrel

10 Target : <0x000982ac> { _checkSMB + 0x88 }

Source : <0x00098280> { _checkSMB + 0x5c } IF CC JUMP pcrel (BP)

11 Target : <0x0009826e> { _checkSMB + 0x4a }

Source : <0x0009824e> { _checkSMB + 0x2a } IF !CC JUMP pcrel (BP)

12 Target : <0x00098224> { _checkSMB + 0x0 }

Source : <0x0008dd06> { _cifs_demultiplex_thread + 0x692 } JUMP.L

13 Target : <0x0008dcf2> { _cifs_demultiplex_thread + 0x67e }

Source : <0x00097c8c> { _dump_smb + 0x20 } RTS

14 Target : <0x00097c6c> { _dump_smb + 0x0 }

Source : <0x0008dcee> { _cifs_demultiplex_thread + 0x67a } CALL pcrel

15 Target : <0x0008dcea> { _cifs_demultiplex_thread + 0x676 }

Source : <0x0008db1e> { _cifs_demultiplex_thread + 0x4aa } IF !CC JUMP pcrel

Kernel Stack

Stack info:

SP: [0x02ad7cd4] <0x02ad7cd4> /* kernel dynamic memory (maybe user-space) */

FP: (0x02ad7fa0)

Memory from 0x02ad7cd0 to 02ad8000

02ad7cd0: 6e72656b [64206c65] 6d616e79 6d206369 726f6d65 6d282079 65627961 65737520

02ad7cf0: 70732d72 29656361 002f2a20 002f2a20 02ad7d84 02ad7d10 00000035 0000003f

02ad7d10: 00000000 00140af0 02ad7d50 0000000f 02ad7d58 00098af0 00098adc 00098af0

02ad7d30: 00000001 7fffffff 0000860a 02ad7d4c 00008648 00000007 0000003f 02868040

02ad7d50: 00140af0 02ad7e30 00000000 02868040 000043e8 02ad7e30 ffe02014 02937800

02ad7d70: 00008008 00000007 00000024 00000013 02ad7e30 02ad7cd4 0000003f 00119b42

02ad7d90: 02040760 00030001 00000004 0000004f 00000001 00119b42 02040760 02ad7efc

02ad7db0: 02ad7f98 0000004f 0000ffff 020555f8 00035200 02ad6000 02ad6000 02ad6000

02ad7dd0: 00000000 02ab20a0 00000001 00000000 00000000 02ab22f8 02ab20d8 02ab23b8

02ad7df0: 02ab2090 000006d6 00000000 00000000 02868040 <00131a96> 02ad7f7c ffa0076c

02ad7e10: 001b2000 00008008 00002024 00000001 0000004f 00000000 00000079 00000480

02ad7e30: 00000480 00008008 00002024 00000000 02ad7f0c 00000480 00098adc 000983ec

02ad7e50: 00000049 02002060 ffa00456 ffa017c4 ffa00456 ffa017c2 00000000 00000000

02ad7e70: 000000aa 00000000 000028aa 00000000 00000000 00000000 00000000 00000000

02ad7e90: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000

02ad7eb0: 00000000 00000000 029190b4 029374a0 00000000 02868040 02868040 00000001

02ad7ed0: 02937800 02868087 00000022 02003ce0 0000004f 00000053 00000001 0000004f

02ad7ef0: 0000111c 00000001 00000001 00000049 00000049 02003ce0 00000006 000987ee

02ad7f10: 000ec7d4 02ad6000 02868040 0008dcf2 0008dd0a 0000004f 00000001 0000004f

02ad7f30: 00000000 00000053 02a9de60 0292d5ac 001c2ad8 0292d5b4 00000001 0000004f

02ad7f50: 00000000 02ad6000 02ad6000 02868044 0292d5ac 029378c8 0293782c 029378d8

02ad7f70: 02868040 02c000c0 ffa01e46 0206fcec 00000000 02ad7f98 00000001 00000000

02ad7f90: 00000000 02ad6008 02868093 00000000 (00000000)<000237c4> 0206fcec 0008d674

02ad7fb0: 00000000 02937800 00000000 00000000 00000000 00000000 00000000 00023768

02ad7fd0: 00000000 02937800 00000000 02ad7fdc 02ad7fdc <00001576> 00000000 00000000

02ad7ff0: 00000000 00000000 ffffffff 00000006

Return addresses in stack:

address : <0x00131a96> { _inet_recvmsg + 0x32 }

frame 1 : <0x000237c4> { _kthread + 0x5c }

address : <0x00001576> { _kernel_thread_helper + 0x6 }

Modules linked in:

Kernel panic - not syncing: Kernel exception

Hardware Trace:

Stack info:

SP: [0x02ad7d3c] <0x02ad7d3c> /* kernel dynamic memory (maybe user-space) */

FP: (0x02ad7fa0)

Memory from 0x02ad7d30 to 02ad8000

02ad7d30: 00000007 02ad7d3c 00000013 [00177168] 001409ac 02ad7e30 00177168 001b53cf

02ad7d50: 001b53cf 001b53cf 02ad7d84 02868040 000043f8 02ad7e30 ffe02014 02937800

02ad7d70: 00008008 00000007 00000024 00000013 02ad7e30 0000003f 0000003f 00119b42