[#6458] Access remote shared directory through NFS will cause kernel crash
Submitted By: Vivi Li
Open Date
2011-01-20 22:02:04 Close Date
2011-01-30 22:27:51
Priority:
Medium Assignee:
Bob Liu
Status:
Closed Fixed In Release:
N/A
Found In Release:
2011R1 Release:
Category:
N/A Board:
N/A
Processor:
ALL Silicon Revision:
Is this bug repeatable?:
Yes Resolution:
Fixed
Uboot version or rev.:
Toolchain version or rev.:
gcc4.3-2010_Dec_06
App binary format:
N/A
Summary: Access remote shared directory through NFS will cause kernel crash
Details:
Access remote shared directory through NFS will cause kernel crash in latest trunk.
Last passed version:
--
kernel: Linux release 2.6.36.2-ADI-2011R1-pre-svn9543, build #41 Wed Jan 5 21:31:03 CST 2011
toolchain: bfin-uclinux-gcc release gcc version 4.3.5 (ADI-trunk/svn-5013)
user-dist: release svn-10036, build #1012 Wed Jan 5 21:30:27 CST 2011
--
Bellow is the error log:
--
Linux version 2.6.37-ADI-2011R1-pre-svn9577 (test@uclinux61-bf548-std) (gcc version 4.3.5 (ADI-trunk/svn-5013) ) #9 Thu Jan 20 11
register early platform devices
bootconsole [early_shadow0] enabled
bootconsole [early_BFuart1] enabled
early printk enabled on early_BFuart1
Board Memory: 64MB
Kernel Managed Memory: 64MB
Memory map:
fixedcode = 0x00000400-0x00000490
text = 0x00001000-0x001e4b48
rodata = 0x001e4b48-0x0028ab1c
bss = 0x0028b000-0x002a12a8
data = 0x002a12a8-0x002c2000
stack = 0x002c0000-0x002c2000
init = 0x002c2000-0x00989000
available = 0x00989000-0x03e00000
DMA Zone = 0x03e00000-0x04000000
Hardware Trace Active and Enabled
Boot Mode: 1
Blackfin support (C) 2004-2010 Analog Devices, Inc.
Compiled for ADSP-BF548 Rev 0.2
Blackfin Linux support by http://blackfin.uclinux.org/
Processor Speed: 525 MHz core clock and 131 MHz System Clock
NOMPU: setting up cplb tables
Instruction Cache Enabled for CPU0
External memory: cacheable in instruction cache
L2 SRAM : uncacheable in instruction cache
Data Cache Enabled for CPU0
External memory: cacheable (write-through) in data cache
L2 SRAM : uncacheable in data cache
Built 1 zonelists in Zone order, mobility grouping off. Total pages: 15748
Kernel command line: root=/dev/mtdblock0 rw clkin_hz=25000000 earlyprintk=serial,uart1,57600 console=tty0 console=ttyBF1,57600 if
PID hash table entries: 256 (order: -2, 1024 bytes)
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Memory available: 53116k/65536k RAM, (6940k init code, 1934k kernel code, 886k data, 2048k dma, 612k reserved)
NR_IRQS:295
Configuring Blackfin Priority Driven Interrupts
console [ttyBF1] enabled, bootconsole disabled
console [ttyBF1] enabled, bootconsole disabled
Calibrating delay loop... 1046.52 BogoMIPS (lpj=2093056)
pid_max: default: 32768 minimum: 301
Mount-cache hash table entries: 512
Blackfin Scratchpad data SRAM: 4 KB
Blackfin L1 Data A SRAM: 16 KB (16 KB free)
Blackfin L1 Data B SRAM: 16 KB (16 KB free)
Blackfin L1 Instruction SRAM: 48 KB (41 KB free)
Blackfin L2 SRAM: 128 KB (128 KB free)
NET: Registered protocol family 16
Blackfin DMA Controller
ezkit_init(): registering device resources
bio: create slab <bio-0> at 0
SCSI subsystem initialized
spi spi0.2: Warning: SPI CPHA not set: Slave Select not under software control!
See Documentation/blackfin/bfin-spi-notes.txt
bfin-spi bfin-spi.0: Blackfin on-chip SPI Controller Driver, Version 1.0, regs_base@ffc00500, dma channel@4
bfin-spi bfin-spi.1: Blackfin on-chip SPI Controller Driver, Version 1.0, regs_base@ffc02300, dma channel@5
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
i2c-bfin-twi i2c-bfin-twi.0: Blackfin BF5xx on-chip I2C TWI Contoller, regs_base@ffc00700
i2c-bfin-twi i2c-bfin-twi.1: Blackfin BF5xx on-chip I2C TWI Contoller, regs_base@ffc02200
Advanced Linux Sound Architecture Driver Version 1.0.23.
musb_hdrc: version 6.0, musb-dma, host, debug=0
musb_hdrc musb_hdrc.0: MUSB HDRC host driver
musb_hdrc musb_hdrc.0: new USB bus registered, assigned bus number 1
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
musb_hdrc musb_hdrc.0: USB Host mode controller at ffc03c00 using DMA, IRQ 82
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 2048 (order: 2, 16384 bytes)
TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
TCP: Hash tables configured (established 2048 bind 2048)
TCP reno registered
UDP hash table entries: 256 (order: 0, 4096 bytes)
UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
NET: Registered protocol family 1
RPC: Registered udp transport module.
RPC: Registered tcp transport module.
RPC: Registered tcp NFSv4.1 backchannel transport module.
debug-mmrs: setting up Blackfin MMR debugfs
msgmni has been set to 103
io scheduler noop registered (default)
bf54x-lq043: FrameBuffer initializing...
dma_alloc_init: dma_page @ 0x02979000 - 512 pages at 0x03e00000
bfin-otp: initialized
bfin-uart: Blackfin serial driver
bfin-uart.1: ttyBF1 at MMIO 0xffc02000 (irq = 48) is a BFIN-UART
brd: module loaded
register bfin atapi driver
scsi0 : pata-bf54x
ata1: PATA max UDMA/66 irq 68
physmap platform flash device: 02000000 at 20000000
physmap-flash.0: Found 1 x16 devices at 0x0 in 16-bit bank. Manufacturer ID 0x000089 Chip ID 0x00881e
Intel/Sharp Extended Query Table at 0x010A
Intel/Sharp Extended Query Table at 0x010A
Intel/Sharp Extended Query Table at 0x010A
Intel/Sharp Extended Query Table at 0x010A
Intel/Sharp Extended Query Table at 0x010A
Using buffer write method
Using auto-unlock on power-up/resume
cfi_cmdset_0001: Erase suspend on write enabled
RedBoot partition parsing not available
Using physmap partition information
Creating 3 MTD partitions on "physmap-flash.0":
0x000000000000-0x000000080000 : "bootloader(nor)"
0x000000080000-0x000000480000 : "linux kernel(nor)"
0x000000480000-0x000001000000 : "file system(nor)"
m25p80 spi0.1: m25p16 (2048 Kbytes)
Creating 2 MTD partitions on "m25p80":
0x000000000000-0x000000080000 : "bootloader(spi)"
0x000000080000-0x000000200000 : "linux kernel(spi)"
BF5xx on-chip NAND FLash Controller Driver, Version 1.2 (c) 2007 Analog Devices, Inc.
bf5xx-nand bf5xx-nand.0: data_width=8, wr_dly=3, rd_dly=3
ONFI flash detected
NAND device: Manufacturer ID: 0x20, Chip ID: 0xda (ST Micro ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ)
Creating 3 MTD partitions on "NAND 256MiB 3,3V 8-bit":
0x000000000000-0x000000080000 : "bootloader(nand)"
0x000000080000-0x000000480000 : "linux kernel(nand)"
0x000000480000-0x000010000000 : "file system(nand)"
smsc911x: Driver version 2008-10-21.
smsc911x-mdio: probed
eth0: attached PHY driver [Generic PHY] (mii_bus:phy_addr=0:01, irq=-1)
net eth0: MAC Address: 00:e0:22:fe:bd:b8
Initializing USB Mass Storage driver...
usbcore: registered new interface driver usb-storage
USB Mass Storage support registered.
input: bf54x-keys as /devices/platform/bf54x-keys/input/input0
ata1.00: ATA-7: FUJITSU MHW2040AT, 0000000B, max UDMA/100
ata1.00: 78140160 sectors, multi 16: LBA
rtc-bfin rtc-bfin: rtc core: registered rtc-bfin as rtc0
i2c /dev entries driver
bfin-wdt: initialized: timeout=20 sec (nowayout=0)
ata1.00: configured for UDMA/66
blk_queue_max_segments: set to minimum 1
scsi 0:0:0:0: Direct-Access ATA FUJITSU MHW2040A 0000 PQ: 0 ANSI: 5
sd 0:0:0:0: [sda] 78140160 512-byte logical blocks: (40.0 GB/37.2 GiB)
sd 0:0:0:0: [sda] Write Protect is off
usbcore: registered new interface driver usbhid
usbhid: USB HID core driver
sd 0:0:0:0: [sda] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA
ALSA device list:
No soundcards found.
TCP cubic registered
NET: Registered protocol family 17
rtc-bfin rtc-bfin: setting system clock to 1970-12-22 17:16:24 UTC (30734184)
sda: sda1
sd 0:0:0:0: [sda] Attached SCSI disk
net eth0: SMSC911x/921x identified at 0x24000000, IRQ: 175
IP-Config: Gateway not on directly connected network.
Freeing unused kernel memory: 6940k freed
_____________________________________
a8888b. / Welcome to the uClinux distribution \
d888888b. / _ _ \
8P"YP"Y88 / | | |_| __ __ (TM) |
8|o||o|88 _____/ | | _ ____ _ _ \ \/ / |
8' .88 \ | | | | _ \| | | | \ / |
8`._.' Y8. \ | |__ | | | | | |_| | / \ |
d/ `8b. \ \____||_|_| |_|\____|/_/\_\ |
dP . Y8b. \ For embedded processors including |
d8:' " `::88b \ the Analog Devices Blackfin /
d8" 'Y88b \___________________________________/
:8P ' :888
8a. : _a88P For further information, check out:
._/"Yaa_: .| 88P| - http://blackfin.uclinux.org/
\ YP" `| 8P `. - http://docs.blackfin.uclinux.org/
/ \.___.d| .' - http://www.uclinux.org/
`--..__)8888P`._.' jgs/a:f - https://www.analog.com/blackfin
Have a lot of fun...
BusyBox v1.18.1 (2011-01-20 15:46:25 CST) hush - the humble shell
root:/> portmap -f &
[1] 362 portmap -f
root:/> mount -o nolock,rsize=1024,wsize=1024 -t nfs 10.100.4.174:/tftpboot/romf
s /mnt/
root:/> ls /mnt/
------------[ cut here ]------------
kernel BUG at mm/nommu.c:432!
Kernel panic - not syncing: BUG()
Hardware Trace:
0 Target : <0x00004024> { _trap_c + 0x0 }
Source : <0xffa00730> { _exception_to_level5 + 0xa4 } JUMP.L
1 Target : <0xffa0068c> { _exception_to_level5 + 0x0 }
Source : <0xffa00540> { _bfin_return_from_exception + 0x18 } RTX
2 Target : <0xffa00528> { _bfin_return_from_exception + 0x0 }
Source : <0xffa005e4> { _ex_trap_c + 0x74 } JUMP.S
3 Target : <0xffa00570> { _ex_trap_c + 0x0 }
Source : <0xffa007f6> { _trap + 0x5a } JUMP (P4)
4 Target : <0xffa0079c> { _trap + 0x0 }
FAULT : <0x00043008> { _vm_map_ram + 0x0 } BUG
Source : <0x00080a7c> { _nfs_readdir_xdr_to_array + 0xcc } JUMP.L
5 Target : <0x00080a62> { _nfs_readdir_xdr_to_array + 0xb2 }
Source : <0x0003a774> { ___alloc_pages_nodemask + 0xc8 } RTS
6 Target : <0x0003a762> { ___alloc_pages_nodemask + 0xb6 }
Source : <0x0003a5b0> { _get_page_from_freelist + 0x218 } RTS
7 Target : <0x0003a5a4> { _get_page_from_freelist + 0x20c }
Source : <0x0003a57c> { _get_page_from_freelist + 0x1e4 } IF !CC JUMP pcrel
8 Target : <0x0003a57a> { _get_page_from_freelist + 0x1e2 }
Source : <0x0003a4d4> { _get_page_from_freelist + 0x13c } IF CC JUMP pcrel
9 Target : <0x0003a4d2> { _get_page_from_freelist + 0x13a }
Source : <0x0003a1a8> { _prep_new_page + 0x80 } RTS
10 Target : <0x0003a1a0> { _prep_new_page + 0x78 }
Source : <0x0003a20c> { _prep_new_page + 0xe4 } JUMP.S
11 Target : <0x0003a20a> { _prep_new_page + 0xe2 }
Source : <0x0003a202> { _prep_new_page + 0xda } IF CC JUMP pcrel
12 Target : <0x0003a200> { _prep_new_page + 0xd8 }
Source : <0x0003a1be> { _prep_new_page + 0x96 } IF CC JUMP pcrel (BP)
13 Target : <0x0003a1ae> { _prep_new_page + 0x86 }
Source : <0x0003a170> { _prep_new_page + 0x48 } IF !CC JUMP pcrel
14 Target : <0x0003a128> { _prep_new_page + 0x0 }
Source : <0x0003a4ce> { _get_page_from_freelist + 0x136 } JUMP.L
15 Target : <0x0003a468> { _get_page_from_freelist + 0xd0 }
Source : <0x0003a578> { _get_page_from_freelist + 0x1e0 } JUMP.S
Stack info:
SP: [0x02cabb1c] <0x02cabb1c> /* kernel dynamic memory (maybe user-space) */
FP: (0x02cabd90)
Memory from 0x02cabb10 to 02cac000
02cabb10: 00000021 02cabb1c 00000013 [00231f4c] 001e3234 02cabc10 00231f4c 0029070f
02cabb30: 0029070f 0029070f 02cabb64 02cabd44 0000441a 02cabc10 ffe02014 02cc2d78
02cabb50: 00008008 00000021 00000021 00000013 0000001f 0000003f 0000003f 02cabb9c
02cabb70: 001d0820 02cabba4 <0000c7f0> 029ee2e0 029ee440 001d2604 002a3e1c 00000001
02cabb90: 0000001f 001e57e8 029ee43c 00000000 029ee2e0 02cabbd0 001e3696 001e57e8
02cabbb0: 029ee43c 029ee2e0 00000000 0000002c 00000000 002be59c 00a0d00c 0003a4d2
02cabbd0: 009e47a0 002be578 00a0d000 00000001 00000000 00000001 0000ffff ffa00734
02cabbf0: 0028d000 00008008 00000021 00000008 00000000 0000000c 00000000 00000480
02cabc10: 00000480 00008008 00000021 00000000 02cabcec 00000480 00043008 00080a80
02cabc30: 02cabd44 02003065 02a9248b 02d0ce5d 02a92480 02d0ce5c 00000000 00000000
02cabc50: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
02cabc70: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 0000002c
02cabc90: 00000000 02d73eac 02d69688 002be620 02d73de8 02cabd44 02cabe50 02836ea0
02cabcb0: 02cc2d78 009e47c0 02cabd64 009e47b8 02cabd64 02cb8000 00000008 00000000
02cabcd0: 003fffff 00000000 00000008 02cabd44 02cabd44 009e47b8 00000006 0003a762
02cabcf0: 00000000 002befbc 00000000 000201da 000201da 00000002 00000000 000201da
02cabd10: 00000000 00000000 002befbc 00000000 00000000 00000000 00000000 002be59c
02cabd30: 00a0d00c 00000000 029ec160 029ec6a0 00080bc8 009e4580 009e45a0 009e4880
02cabd50: 009e48a0 009e48c0 009e48e0 009e4780 009e47a0 00080bc8 00080bde 02cc2d78
02cabd70: 009e4700 00000000 009e4700 00000000 000201da 00000000 02cc2e18 009e4700
02cabd90:(00000000)<0003639e> 02cc2e18 000000d0 009e4700 002befbc 00000000 000000d0
02cabdb0: 000000d0 002a27a0 00036404 00000000 00080bc8 ffffffc0 000200da 00000000
02cabdd0: 02cc2e18 02cabe50 00000000 02cabe44 02bfc000 02cabe50 000200da 02cc2d0c
02cabdf0: 000364d4 00000000 02cc3ed4 02cc2d78 00000000 02cabedc 02cabe50 002a1298
02cabe10: 02bfc000 00000000 02caa000 02cabe50 000200da 000364e8 02cc2d78 00080e3e
02cabe30: 02836ea0 02cabe50 00080e76 029a9ad4 029a9ad4 00000000 02cabe50 00000000
02cabe50: 02836ea0 00000000 00000000 029ea69c 00000000 00000000 00000000 00000000
02cabe70: 0009230c 00000000 00000000 00000000 00000001 02d73dfc <00052d30> 02836ea0
02cabe90: 02cc2d78 020ad408 00000000 02cabedc 00052ab8 02cc2dec 02cabeb0 02cabedc
02cabeb0: 00052ab8 00052d94 00052d44 000000dc 020ad408 02836ea0 00000400 00000400
02cabed0: 020ad000 00000003 00051fd2 020ad408 00000000 00000400 00000000 00000000
02cabef0:<ffa0092e><ffa0092e> 00052d44 000000dc 00000000 ffffe000 02d69688 029fdff7
02cabf10: 029ee820 029ee2e0 020adff4 00000400 02d69688 02d18340 00008000 00000000
02cabf30: 00000000 02cac000 02d18340 02d18340 02d18332 ffa01048 02003044 02a9248b
02cabf50: 02d0ce5d 02a92480 02d0ce5c 00000000 00000000 00000000 00000000 00000000
02cabf70: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
02cabf90: 00000000 00000000 00000000 00000000 00000004 00000000 02d73eac 02d69688
02cabfb0: 02d73e90 02d73de8 02d73dfc 020ad004 02d681e0 020ad408 020ad408 00000100
02cabfd0: 000000dc 00000000 00000000 02d69688 00000400 020adff4 00000400 020ad408
02cabff0: 00000003 00000003 000000dc 00000006
Return addresses in stack:
address : <0x0000c7f0> { _dequeue_task + 0x1c }
frame 1 : <0x0003639e> { ___read_cache_page + 0x56 }
address : <0x00052d30> { _vfs_readdir + 0x60 }
address : <0xffa0092e> { _system_call + 0x6a }
address : <0xffa0092e> { _system_call + 0x6a }
--
Follow-ups
--- Bob Liu 2011-01-26 04:23:38
This bug should be fixed by commit NFS: Don't use vm_map_ram() in readdir.
see
--- Bob Liu 2011-01-28 04:16:57
fixed by commit 9582
--- Vivi Li 2011-01-30 22:27:51
OK. Close it.
Files
Changes
Commits
Dependencies
Duplicates
Associations
Tags
File Name File Type File Size Posted By
config.linux.nfs application/octet-stream 47642 Vivi Li