Skip to contentSkip to conversation

jffs2, 2.6.28-git8 : Weird problem.

DISCUSSION Jonathan Cameron 2 participants 5 messages Jan 6, 2009 – Jan 8, 2009 Memory technology devices (MTD)

lore
Share & tools
lore

Jonathan Cameron

author
#0 lore raw

Having applied a few board specific patches on top of Linus' tree (around 2.6.28-git8)
run into the following.

Anyone have an ideas or seeing anything similar?

Works fine on 2.6.28 so git bisection underway, but will take a while given speed of flashing this device (intelmote 2)

WARNING: udev_root != /dev/
Creating initial device nodes...done.

Unable to handle kernel NULL pointer dereference at virtual address 00000150
pgd = c0004000
[00000150] *pgd=00000000
Internal error: Oops: 17 [#1] PREEMPT
Modules linked in:
CPU: 0    Not tainted  (2.6.28_r1.0-06127-g238c6d5 #2)
PC is at set_dumpable+0x3c/0xc8
LR is at commit_creds+0x140/0x23c
pc : [<c0092450>]    lr : [<c0051f90>]    psr: 60000093

sp : c1083ed4 ip : c1083ee4 fp : c1083ee0
r10: 00000000 r9 : 00000000 r8 : c1d38400
r7 : c1c3f080 r6 : c02a72f8 r5 : c1c4faa0 r4 : 00000000 r3 : 60000093 r2 : 60000093 r1 : 00000000 r0 : 00000000
Flags: nZCv IRQs off FIQs on Mode SVC_32 ISA ARM Segment user
Control: 0000397f Table: a1e1c000 DAC: 00000015 Process jffs2_gcd_mtd2 (pid: 787, stack limit = 0xc1082268)

Stack: (0xc1083ed4 to 0xc1084000)

3ec0: c1083f20 c1083ee4 c0051f90
3ee0: c0092420 00000100 00000000 fffffeff ffffffff ffffffff ffffffff 00000100 3f00: 00000000 c1082000 c02a0e38 00000000 00000000 c1083f40 c1083f24 c0039028 3f20: c0051e5c ffffffff ffffffff 00000000 00000000 c1083ff4 c1083f54 c0114ef0 3f40: c0038e10 c0278768 00000002 c0114ecc c1c724a0 00000000 00000000 00000000 3f60: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 3f80: 58000442 00000000 00000000 c1083fac c1083f9c c00319ac c002fec4 00000000 3fa0: 00000000 c1083fb0 c001df84 c0031998 00000000 c1d38400 c0114ecc c0039064 3fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 3fe0: 00000000 00000000 00000000 c1083ff8 c0039064 c0114ed8 a0311021 a0311421

Backtrace: 
[<c0092414>] (set_dumpable+0x0/0xc8) from [<c0051f90>] (commit_creds+0x140/0x23c)
[<c0051e50>] (commit_creds+0x0/0x23c) from [<c0039028>] (daemonize+0x228/0x264)
 r7:00000000 r6:00000000 r5:c02a0e38 r4:c1082000
[<c0038e00>] (daemonize+0x0/0x264) from [<c0114ef0>] (jffs2_garbage_collect_thread+0x24/0x1e4)
 r3:c1c724a0 r2:c0114ecc r1:00000002 r0:c0278768
 r5:00000000 r4:00000000
[<c0114ecc>] (jffs2_garbage_collect_thread+0x0/0x1e4) from [<c0039064>] (do_exit+0x0/0x758)
 r8:00000000 r7:00000000 r6:00000000 r5:00000000 r4:00000000
Code: e89da800 e10f2000 e3823080 e121f003 (e5903150) 
---[ end trace 28404767015f24df ]---

note: jffs2_gcd_mtd2[787] exited with preempt_count 1

Thanks,

--
Jonathan Cameron

#1 lore raw
Quoted 5 lines · Jonathan Cameron

Having applied a few board specific patches on top of Linus' tree (around 2.6.28-git8)
run into the following.

Anyone have an ideas or seeing anything similar?

Yes, I think the same thing just happened on my avr32 board (ATSTK1006)...see below.

Quoted 3 lines

Works fine on 2.6.28 so git bisection underway, but will take a while given speed of flashing this device (intelmote 2)

Please let me know the result, or if you need any help.

Haavard

Unable to handle kernel NULL pointer dereference at virtual address 00000150
ptbr = 93a9b000 pgd = 93b45000
Oops: Kernel access of bad area, sig: 11 [#1]
FRAME_POINTER chip: 0x01f:0x1e82 rev 2
Modules linked in:
PC is at set_dumpable+0x16/0x5e
LR is at commit_creds+0x86/0x10c
pc : [<9005bfc6>]    lr : [<9002e4fe>]    Not tainted
sp : 93bbff00  r12: 00000000  r11: 00000000

r10: ffffffff r9 : 00000000 r8 : 00000150
r7 : 93bbff00 r6 : 939b9420 r5 : 901eca58 r4 : 00000000 r3 : 939e02e0 r2 : 90021494 r1 : 900a40c4 r0 : 93b52400
Flags: qvnzC
Mode bits: hjmde....G
CPU Mode: Supervisor
Process: jffs2_gcd_mtd1 [281] (task: 939e02e0 thread: 93bbe000)

Stack: (0x93bbff00 to 0x93bc0000)

ff00: 9002e4fe 93bbff14 939b9420 901eca58 00000000 90021b00 93bbff44 93bbe000
ff20: 901ea8b0 00000000 00000000 90021494 900a40c4 93b52400 ffffffff ffffffff
ff40: 93bbff58 900a40da 93bbffdc 00000000 93b52400 00000000 00000001 038e300c
ff60: b3ec22cd 11c4148c b11833cc 338d19ec 77ca338c 734831ec 23dc63cc 33ec334c
ff80: 33cc33cd 338c30cc 37cc338c b3fcb68d 9001be6c 93bbffa4 90204640 939e05c0
ffa0: 93b5248c 90014166 93badcfc 90204640 939e05c0 93b5248c 00400000 900180e0
ffc0: 900180e0 93bc0000 00000000 00000000 00000000 00000000 00000000 90021494
ffe0: 00000000 00000000 00000000 00000000 00000000 90021494 900a40c4 93b52400

Call trace:
 [<9002e4fe>] commit_creds+0x86/0x10c
 [<90021b00>] daemonize+0x14c/0x16c
 [<900a40da>] jffs2_garbage_collect_thread+0x16/0x108
 [<90021494>] do_exit+0x0/0x488
author
#2 lore raw
Quoted 46 lines
Quoted 5 lines · Jonathan Cameron

Having applied a few board specific patches on top of Linus' tree (around 2.6.28-git8)
run into the following.

Anyone have an ideas or seeing anything similar?

Yes, I think the same thing just happened on my avr32 board (ATSTK1006)...see below.

Quoted 3 lines

Works fine on 2.6.28 so git bisection underway, but will take a while given speed of flashing this device (intelmote 2)

Please let me know the result, or if you need any help.

Haavard

Unable to handle kernel NULL pointer dereference at virtual address 00000150
ptbr = 93a9b000 pgd = 93b45000
Oops: Kernel access of bad area, sig: 11 [#1]
FRAME_POINTER chip: 0x01f:0x1e82 rev 2
Modules linked in:
PC is at set_dumpable+0x16/0x5e
LR is at commit_creds+0x86/0x10c
pc : [<9005bfc6>]    lr : [<9002e4fe>]    Not tainted
sp : 93bbff00  r12: 00000000  r11: 00000000

r10: ffffffff r9 : 00000000 r8 : 00000150
r7 : 93bbff00 r6 : 939b9420 r5 : 901eca58 r4 : 00000000 r3 : 939e02e0 r2 : 90021494 r1 : 900a40c4 r0 : 93b52400
Flags: qvnzC
Mode bits: hjmde....G
CPU Mode: Supervisor
Process: jffs2_gcd_mtd1 [281] (task: 939e02e0 thread: 93bbe000)

Stack: (0x93bbff00 to 0x93bc0000)

ff00: 9002e4fe 93bbff14 939b9420 901eca58 00000000 90021b00 93bbff44 93bbe000
ff20: 901ea8b0 00000000 00000000 90021494 900a40c4 93b52400 ffffffff ffffffff
ff40: 93bbff58 900a40da 93bbffdc 00000000 93b52400 00000000 00000001 038e300c
ff60: b3ec22cd 11c4148c b11833cc 338d19ec 77ca338c 734831ec 23dc63cc 33ec334c
ff80: 33cc33cd 338c30cc 37cc338c b3fcb68d 9001be6c 93bbffa4 90204640 939e05c0
ffa0: 93b5248c 90014166 93badcfc 90204640 939e05c0 93b5248c 00400000 900180e0
ffc0: 900180e0 93bc0000 00000000 00000000 00000000 00000000 00000000 90021494
ffe0: 00000000 00000000 00000000 00000000 00000000 90021494 900a40c4 93b52400

Quoted 6 lines
Call trace:
 [<9002e4fe>] commit_creds+0x86/0x10c
 [<90021b00>] daemonize+0x14c/0x16c
 [<900a40da>] jffs2_garbage_collect_thread+0x16/0x108
 [<90021494>] do_exit+0x0/0x488

Hi All,

Results of git bisection are in. The patch highlighted as causing the problem is:

d84f4f992cbd76e8f39c488cf0c5d123843923b1 is first bad commit commit d84f4f992cbd76e8f39c488cf0c5d123843923b1

Author: David Howells <[email protected]>                                               
Date:   Fri Nov 14 10:39:23 2008 +1100

CRED: Inaugurate COW credentials

( lots of info ).

So now for the remaining question of why?

The setup I'm using is now in Linus' tree anyway
(intelmote2 see arm/mach-pxa/imote2.c)

Jonathan

author
#3 lore raw
Quoted 56 lines · Jonathan Cameron
Quoted 43 lines
Quoted 5 lines · Jonathan Cameron

Having applied a few board specific patches on top of Linus' tree (around 2.6.28-git8)
run into the following.

Anyone have an ideas or seeing anything similar?

Yes, I think the same thing just happened on my avr32 board (ATSTK1006)...see below.

Quoted 3 lines

Works fine on 2.6.28 so git bisection underway, but will take a while given speed of flashing this device (intelmote 2)

Please let me know the result, or if you need any help.

Haavard

Unable to handle kernel NULL pointer dereference at virtual address 00000150
ptbr = 93a9b000 pgd = 93b45000
Oops: Kernel access of bad area, sig: 11 [#1]
FRAME_POINTER chip: 0x01f:0x1e82 rev 2
Modules linked in:
PC is at set_dumpable+0x16/0x5e
LR is at commit_creds+0x86/0x10c
pc : [<9005bfc6>]    lr : [<9002e4fe>]    Not tainted
sp : 93bbff00  r12: 00000000  r11: 00000000

r10: ffffffff r9 : 00000000 r8 : 00000150
r7 : 93bbff00 r6 : 939b9420 r5 : 901eca58 r4 : 00000000 r3 : 939e02e0 r2 : 90021494 r1 : 900a40c4 r0 : 93b52400
Flags: qvnzC
Mode bits: hjmde....G
CPU Mode: Supervisor
Process: jffs2_gcd_mtd1 [281] (task: 939e02e0 thread: 93bbe000)

Stack: (0x93bbff00 to 0x93bc0000)

ff00: 9002e4fe 93bbff14 939b9420 901eca58 00000000 90021b00 93bbff44 93bbe000
ff20: 901ea8b0 00000000 00000000 90021494 900a40c4 93b52400 ffffffff ffffffff
ff40: 93bbff58 900a40da 93bbffdc 00000000 93b52400 00000000 00000001 038e300c
ff60: b3ec22cd 11c4148c b11833cc 338d19ec 77ca338c 734831ec 23dc63cc 33ec334c
ff80: 33cc33cd 338c30cc 37cc338c b3fcb68d 9001be6c 93bbffa4 90204640 939e05c0
ffa0: 93b5248c 90014166 93badcfc 90204640 939e05c0 93b5248c 00400000 900180e0
ffc0: 900180e0 93bc0000 00000000 00000000 00000000 00000000 00000000 90021494
ffe0: 00000000 00000000 00000000 00000000 00000000 90021494 900a40c4 93b52400

Quoted 6 lines
Call trace:
 [<9002e4fe>] commit_creds+0x86/0x10c
 [<90021b00>] daemonize+0x14c/0x16c
 [<900a40da>] jffs2_garbage_collect_thread+0x16/0x108
 [<90021494>] do_exit+0x0/0x488

Hi All,

Results of git bisection are in. The patch highlighted as causing the problem is:

d84f4f992cbd76e8f39c488cf0c5d123843923b1 is first bad commit commit d84f4f992cbd76e8f39c488cf0c5d123843923b1

Quoted 9 lines
Author: David Howells <[email protected]>                                               
Date:   Fri Nov 14 10:39:23 2008 +1100

CRED: Inaugurate COW credentials

( lots of info ).

So now for the remaining question of why?

Got to run in a mo, so thought I'd post my progress on working out what is happening.

For some reason, when set_dumpable is run in commit_creds (cred.c) task->mm is null. Don't know my way around this bit of the kernel, but guessing that isn't good!

author
#4 lore raw
Quoted 63 lines · Jonathan Cameron
Quoted 62 lines · Jonathan Cameron
Quoted 42 lines
Quoted 5 lines · Jonathan Cameron

Having applied a few board specific patches on top of Linus' tree (around 2.6.28-git8)
run into the following.

Anyone have an ideas or seeing anything similar?

Yes, I think the same thing just happened on my avr32 board (ATSTK1006)...see below.

Quoted 3 lines

Works fine on 2.6.28 so git bisection underway, but will take a while given speed of flashing this device (intelmote 2)

Please let me know the result, or if you need any help.

Haavard

Unable to handle kernel NULL pointer dereference at virtual address 00000150
ptbr = 93a9b000 pgd = 93b45000
Oops: Kernel access of bad area, sig: 11 [#1]
FRAME_POINTER chip: 0x01f:0x1e82 rev 2
Modules linked in:
PC is at set_dumpable+0x16/0x5e
LR is at commit_creds+0x86/0x10c
pc : [<9005bfc6>]    lr : [<9002e4fe>]    Not tainted
sp : 93bbff00  r12: 00000000  r11: 00000000

r10: ffffffff r9 : 00000000 r8 : 00000150
r7 : 93bbff00 r6 : 939b9420 r5 : 901eca58 r4 : 00000000 r3 : 939e02e0 r2 : 90021494 r1 : 900a40c4 r0 : 93b52400
Flags: qvnzC
Mode bits: hjmde....G
CPU Mode: Supervisor
Process: jffs2_gcd_mtd1 [281] (task: 939e02e0 thread: 93bbe000)

Stack: (0x93bbff00 to 0x93bc0000)

ff00: 9002e4fe 93bbff14 939b9420 901eca58 00000000 90021b00 93bbff44 93bbe000
ff20: 901ea8b0 00000000 00000000 90021494 900a40c4 93b52400 ffffffff ffffffff
ff40: 93bbff58 900a40da 93bbffdc 00000000 93b52400 00000000 00000001 038e300c
ff60: b3ec22cd 11c4148c b11833cc 338d19ec 77ca338c 734831ec 23dc63cc 33ec334c
ff80: 33cc33cd 338c30cc 37cc338c b3fcb68d 9001be6c 93bbffa4 90204640 939e05c0
ffa0: 93b5248c 90014166 93badcfc 90204640 939e05c0 93b5248c 00400000 900180e0
ffc0: 900180e0 93bc0000 00000000 00000000 00000000 00000000 00000000 90021494
ffe0: 00000000 00000000 00000000 00000000 00000000 90021494 900a40c4 93b52400

Quoted 6 lines
Call trace:
 [<9002e4fe>] commit_creds+0x86/0x10c
 [<90021b00>] daemonize+0x14c/0x16c
 [<900a40da>] jffs2_garbage_collect_thread+0x16/0x108
 [<90021494>] do_exit+0x0/0x488

Hi All,

Results of git bisection are in. The patch highlighted as causing the problem is:

d84f4f992cbd76e8f39c488cf0c5d123843923b1 is first bad commit commit d84f4f992cbd76e8f39c488cf0c5d123843923b1

Author: David Howells <[email protected]>                                               
Date:   Fri Nov 14 10:39:23 2008 +1100

CRED: Inaugurate COW credentials

( lots of info ).

Quoted 9 lines
Quoted 2 lines

So now for the remaining question of why?

Got to run in a mo, so thought I'd post my progress on working out what is happening.

For some reason, when set_dumpable is run in commit_creds (cred.c) task->mm is null. Don't know my way around this bit of the kernel, but guessing that isn't good!

Not sure I'm making much progress on this problem. My guess is that the set_dumpable shouldn't actually be running. The reason it is is that the gc task appears to have the CAP_SETPCAP capability and the init task does not. Any hints as to what should be happening here would be appreciated.

Jonathan