[#5548] Application speaker-test will cause kernel crash

Submitted By: Vivi Li

Open Date

2009-09-22 06:09:58 Close Date

2009-10-12 02:42:36

Priority:

Medium Assignee:

Barry Song

Status:

Closed Fixed In Release:

N/A

Found In Release:

2010R1 Release:

Category:

Custom applications Board:

N/A

Processor:

ALL Silicon Revision:

Is this bug repeatable?:

Yes Resolution:

Duplicate

Uboot version or rev.:

Toolchain version or rev.:

gcc4.1-09r1-rc9

App binary format:

N/A

Summary: Application speaker-test will cause kernel crash

Details:

Application speaker-test will cause kernel crash in latest trunk.

root:/> speaker-test -c 6

speaker-test 1.0.12

Playback device is default

Stream parameters are 48000Hz, S16_LE, 6 channels

Using 16 octaves of pink noise

Rate set to 48000Hz (requested 48000Hz)NULL pointer access

Kernel OOPS in progress

Deferred Exception context

CURRENT PROCESS:

COMM=speaker-test PID=186

CPU = 0

TEXT = 0x02ab0000-0x02ab51cc DATA = 0x029ce1cc-0x029ce964

BSS = 0x029ce964-0x02a80000 USER-STACK = 0x02a9fe80

return address: [0x0008e75e]; contents of:

0x0008e730: 2ff7 0000 05fb e800 0003 3218 3239 63e7

0x0008e740: 2001 9118 5438 3228 0c45 1820 0000 0000

0x0008e750: 3208 9128 4800 101a 0000 5438 3220 [aca2]

0x0008e760: 0855 182e 0c42 181b 9110 4800 1418 4a00

ADSP-BF537-0.2 500(MHz CCLK) 125(MHz SCLK) (mpu off)

Linux version 2.6.31-ADI-2010R1-pre-svn7396 (test@uboot34-bf537stamp) (gcc version 4.1.2 (ADI svn)) #58 Tue Sep 22 17:38:10 CST 9

SEQUENCER STATUS: Not tainted

SEQSTAT: 00000027 IPEND: 8008 IMASK: ffff SYSCFG: 0006

EXCAUSE : 0x27

physical IVG3 asserted : <0xffa006f8> { _trap + 0x0 }

physical IVG15 asserted : <0xffa00fc8> { _evt_system_call + 0x0 }

logical irq 6 mapped : <0xffa00374> { _timer_interrupt + 0x0 }

logical irq 10 mapped : <0x000b26ac> { _bfin_rtc_interrupt + 0x0 }

logical irq 12 mapped : <0x000d29c4> { _rx_handler + 0x0 }

logical irq 13 mapped : <0x000d2960> { _tx_handler + 0x0 }

logical irq 16 mapped : <0x000b5140> { _bfin_twi_interrupt_entry + 0x0 }

logical irq 18 mapped : <0x000a3378> { _bfin_serial_dma_rx_int + 0x0 }

logical irq 19 mapped : <0x000a374c> { _bfin_serial_dma_tx_int + 0x0 }

logical irq 45 mapped : <0x000d375c> { _err_handler + 0x0 }

RETE: <0x00000000> /* Maybe null pointer? */

RETN: <0x02997e6c> /* kernel dynamic memory */

RETX: <0x00000480> /* Maybe fixed code section */

RETS: <0x0003d226> { _do_mmap_pgoff + 0x286 }

PC : <0x0008e75e> { _rb_insert_color + 0x2a }

DCPLB_FAULT_ADDR: <0x00000008> /* Maybe null pointer? */

ICPLB_FAULT_ADDR: <0x0008e75e> { _rb_insert_color + 0x2a }

PROCESSOR STATE:

R0 : 00000000 R1 : 0018a58c R2 : 00000000 R3 : 0203043c

R4 : 04000021 R5 : 02607614 R6 : 00000000 R7 : fffffffc

P0 : 02607edc P1 : 02607ed4 P2 : 00000000 P3 : 02607614

P4 : 00000000 P5 : 02607ed4 FP : 0018a58c SP : 02997d90

LB0: ffa01534 LT0: ffa01534 LC0: 00000000

LB1: 02b739f5 LT1: 02b739f4 LC1: 00000000

B0 : 00000000 L0 : 00000000 M0 : 00000000 I0 : 00000000

B1 : 00000000 L1 : 00000000 M1 : 00000000 I1 : 029c1940

B2 : 00000000 L2 : 00000000 M2 : 00000000 I2 : 00000000

B3 : 00000000 L3 : 00000000 M3 : 00000000 I3 : 00000000

A0.w: 00000000 A0.x: 00000000 A1.w: 00000000 A1.x: 00000000

USP : 02a9f90c ASTAT: 02002021

Hardware Trace:

0 Target : <0x00004e44> { _trap_c + 0x0 }

Source : <0xffa0068c> { _exception_to_level5 + 0xa4 } CALL pcrel

1 Target : <0xffa005e8> { _exception_to_level5 + 0x0 }

Source : <0xffa0049c> { _bfin_return_from_exception + 0x20 } RTX

2 Target : <0xffa0047c> { _bfin_return_from_exception + 0x0 }

Source : <0xffa00540> { _ex_trap_c + 0x74 } JUMP.S

3 Target : <0xffa004cc> { _ex_trap_c + 0x0 }

Source : <0xffa003a4> { _ex_workaround_261 + 0x1c } JUMP.S

4 Target : <0xffa00388> { _ex_workaround_261 + 0x0 }

Source : <0xffa00760> { _trap + 0x68 } JUMP (P4)

5 Target : <0xffa00718> { _trap + 0x20 }

Source : <0xffa00714> { _trap + 0x1c } IF !CC JUMP

6 Target : <0xffa006f8> { _trap + 0x0 }

Source : <0xffa0049c> { _bfin_return_from_exception + 0x20 } RTX

7 Target : <0xffa0047c> { _bfin_return_from_exception + 0x0 }

Source : <0xffa0039a> { _ex_workaround_261 + 0x12 } IF !CC JUMP

8 Target : <0xffa00388> { _ex_workaround_261 + 0x0 }

Source : <0xffa00760> { _trap + 0x68 } JUMP (P4)

9 Target : <0xffa00718> { _trap + 0x20 }

Source : <0xffa00714> { _trap + 0x1c } IF !CC JUMP

10 Target : <0xffa006f8> { _trap + 0x0 }

Source : <0x0008e75c> { _rb_insert_color + 0x28 } 0x3220

11 Target : <0x0008e742> { _rb_insert_color + 0xe }

Source : <0x0008e740> { _rb_insert_color + 0xc } JUMP.S

12 Target : <0x0008e734> { _rb_insert_color + 0x0 }

Source : <0x0003c3b2> { _add_nommu_region + 0x3e } JUMP.L

13 Target : <0x0003c38b> { _add_nommu_region + 0x17 }

Source : <0x0003c39e> { _add_nommu_region + 0x2a } IF CC JUMP

14 Target : <0x0003c374> { _add_nommu_region + 0x0 }

Source : <0x0003d222> { _do_mmap_pgoff + 0x282 } CALL pcrel

15 Target : <0x0003d21a> { _do_mmap_pgoff + 0x27a }

Source : <0x0003d138> { _do_mmap_pgoff + 0x198 } IF CC JUMP

Kernel Stack

Stack info:

SP: [0x02997f24] <0x02997f24> /* kernel dynamic memory */

Memory from 0x02997f20 to 02998000

02997f20: 00000000 [026cd46a] 00008000 00000000 00000000 02998000 026cd46a 026cd46a

02997f40:<026ef394><ffa0102c> 02003025 02b739f5 026df891 02b739f4 026df890 00000000

02997f60: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000

02997f80: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000

02997fa0: 00000000 00000000 00000000 029c1940 00000000 02a9f90c 02a9f918 00000000

02997fc0: 029c1940 029c1940 04000021 00000000 000000c0 029c15b8 02ab8b10 00000000

02997fe0: 00000000 04000021 00000003 00001000 00000000 00000000 000000c0 00000006

Return addresses in stack:

address : <0x026ef394> [ /lib/libc.so.0 + 0x2f394 ]

address : <0xffa0102c> { _evt_system_call + 0x64 }

Modules linked in:

Kernel panic - not syncing: Kernel exception

Hardware Trace:

Stack info:

SP: [0x02997ca8] <0x02997ca8> /* kernel dynamic memory */

FP: (0x02997e70)

Memory from 0x02997ca0 to 02998000

02997ca0: 02997ca8 02607614 [001520a8]<0000fc68> 00187d90 001520a8 001843c2 001843c2

02997cc0: 001843c2 02997ce4 02997ce4 <000051b6> 02997d90 ffe02014 02607614 00151b78

02997ce0:<ffa01b04> 0000003f ffffffff 02997d08 00000000 0003000b 0000ffff 00000015

02997d00: 00000017 00000000 0019ab58 <000aecce> 02997d60 0019a8c0 0019acf0 02997d38

02997d20: 00000000 0019ab88 0261eea0 00000002 <000cfaaa><000cfb5e> 00000000 02997d3c

02997d40: 02997d3c <000d1daa> 0261ef64 00000012 02997d54 <000d13de> 0262ed20 0261ef00

02997d60: 02997da8 02997da8 0204e080 <ffa00690> 00181000 00008008 00000027 02607614

02997d80: 04000021 02997d80 00000000 00000480 00000480 00008008 00000027 00000000

02997da0: 02997e6c 00000480 0008e75e <0003d226> 00000000 02002021 02b739f5 ffa01534

02997dc0: 02b739f4 ffa01534 00000000 00000000 00000000 00000000 00000000 00000000

02997de0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000

02997e00: 00000000 00000000 00000000 00000000 00000000 00000000 029c1940 00000000

02997e20: 02a9f90c 0018a58c 02607ed4 00000000 02607614 00000000 02607ed4 02607edc

02997e40: fffffffc 00000000 02607614 04000021 0203043c 00000000 0018a58c 00000000

02997e60: 00000000 02607edc 00000006 <0003e72e>(00000000)<0003d134> 00000000 <0003d226>

02997e80: 0018a5c8 00000000 08000073 02996000 00000000 02a9f980 00009000 00000004

02997ea0: 04000021 00000000 02997eb0 020303e4 00000004 02a9f918 <00003b5c> 00000000

02997ec0: 00001000 029c1940 02996000 04000021 00000000 00000003 c0684113 020fdce0

02997ee0: 00001000 00000003 04000021 00000000 <ffa00898> 00003b14 000000c0 00000000

02997f00: ffffe000 00000000 00000000 ffc00014 00000000 ffffffea 04000021 00000000

02997f20: 00000000 026cd46a 00008000 00000000 00000000 02998000 026cd46a 026cd46a

02997f40:<026ef394><ffa0102c> 02003025 02b739f5 026df891 02b739f4 026df890 00000000

02997f60: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000

02997f80: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000

02997fa0: 00000000 00000000 00000000 029c1940 00000000 02a9f90c 02a9f918 00000000

02997fc0: 029c1940 029c1940 04000021 00000000 000000c0 029c15b8 02ab8b10 00000000

02997fe0: 00000000 04000021 00000003 00001000 00000000 00000000 000000c0 00000006

Return addresses in stack:

address : <0x0000fc68> { _panic + 0x4c }

address : <0x000051b6> { _trap_c + 0x372 }

address : <0xffa01b04> { _wait_for_common + 0x10 }

address : <0x000aecce> { _spi_sync + 0x3e }

address : <0x000cfaaa> { _is_connected_input_ep + 0x6e }

address : <0x000cfb5e> { _is_connected_output_ep + 0x6e }

address : <0x000d1daa> { _ad1938_write_reg + 0x82 }

address : <0x000d13de> { _dapm_dac_check_power + 0x16 }

address : <0xffa00690> { _exception_to_level5 + 0xa8 }

address : <0x0003d226> { _do_mmap_pgoff + 0x286 }

address : <0x0003e72e> { _kmem_cache_alloc + 0x7a }

frame 1 : <0x0003d134> { _do_mmap_pgoff + 0x194 }

address : <0x0003d226> { _do_mmap_pgoff + 0x286 }

address : <0x00003b5c> { _sys_mmap2 + 0x48 }

address : <0xffa00898> { _system_call + 0x68 }

address : <0x026ef394> [ /lib/libc.so.0 + 0x2f394 ]

address : <0xffa0102c> { _evt_system_call + 0x64 }

Follow-ups

--- Barry Song 2009-10-09 02:26:37

Memory map issue, which has actually been fixed by [#5534].

root:/> speaker-test -c 6

speaker-test 1.0.12

Playback device is default

Stream parameters are 48000Hz, S16_LE, 6 channels

Using 16 octaves of pink noise

Rate set to 48000Hz (requested 48000Hz)

Buffer size range from 342 to 1365

Period size range from 171 to 682

Using max buffer size 1364

Periods = 4

was set period_size = 341

was set buffer_size = 1364

0 - Front Left

4 - Center

1 - Front Right

3 - Rear Right

2 - Rear Left

5 - LFE

Time per period = 17.964000

0 - Front Left

4 - Center

1 - Front Right

3 - Rear Right

2 - Rear Left

5 - LFE

Time per period = 17.988000

0 - Front Left

4 - Center

...

--- Vivi Li 2009-10-12 02:42:36

OK now. Close it.

Files

Changes

Commits

Dependencies

Duplicates

Associations