Bug 5271

Who maintains sk98lin/skge?


Begin forwarded message:

Date: Sat, 17 Sep 2005 06:57:25 -0700
From: bugme-daemon@kernel-bugs.osdl.org
To: bugme-new@lists.osdl.org
Subject: [Bugme-new] [Bug 5271] New: kernel BUG at mm/page_alloc.c:1014! (skge & bonding releated)


http://bugzilla.kernel.org/show_bug.cgi?id=5271

           Summary: kernel BUG at mm/page_alloc.c:1014! (skge & bonding
                    releated)
    Kernel Version: 2.6.13.1
            Status: NEW
          Severity: blocking
             Owner: acme@conectiva.com.br
         Submitter: olel@ans.pl


Distribution: Slackware

Hardware Environment:

# lspci -vvv
00:00.0 Host bridge: Intel Corporation 82845G/GL[Brookdale-G]/GE/PE DRAM
Controller/Host-Hub Interface (rev 03)
        Subsystem: Intel Corporation 82845G/GL[Brookdale-G]/GE/PE DRAM
Controller/Host-Hub Interface
        Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr-
Stepping- SERR- FastB2B-
        Status: Cap+ 66Mhz- UDF- FastB2B+ ParErr- DEVSEL=fast >TAbort- <TAbort-
<MAbort+ >SERR- <PERR-
        Latency: 0
        Region 0: Memory at e8000000 (32-bit, prefetchable) [size=32M]
        Capabilities: [e4] #09 [1105]

00:02.0 VGA compatible controller: Intel Corporation 82845G/GL[Brookdale-G]/GE
Chipset Integrated Graphics Device (rev 03) (prog-if 00 [VGA])
        Subsystem: Intel Corporation 82845G/GL[Brookdale-G]/GE Chipset
Integrated Graphics Device
        Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr-
Stepping- SERR- FastB2B-
        Status: Cap+ 66Mhz- UDF- FastB2B+ ParErr- DEVSEL=fast >TAbort- <TAbort-
<MAbort- >SERR- <PERR-
        Latency: 0
        Interrupt: pin A routed to IRQ 5
        Region 0: Memory at e0000000 (32-bit, prefetchable) [size=128M]
        Region 1: Memory at ea100000 (32-bit, non-prefetchable) [size=512K]
        Expansion ROM at <unassigned> [disabled]
        Capabilities: [d0] Power Management version 1
                Flags: PMEClk- DSI+ D1- D2- AuxCurrent=0mA
PME(D0-,D1-,D2-,D3hot-,D3cold-)
                Status: D0 PME-Enable- DSel=0 DScale=0 PME-

00:1d.0 USB Controller: Intel Corporation 82801DB/DBL/DBM (ICH4/ICH4-L/ICH4-M)
USB UHCI Controller #1 (rev 02) (prog-if 00 [UHCI])
        Subsystem: Intel Corporation 82801DB/DBL/DBM (ICH4/ICH4-L/ICH4-M) USB
UHCI Controller #1
        Control: I/O+ Mem- BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr-
Stepping- SERR- FastB2B-
        Status: Cap- 66Mhz- UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort-
<TAbort- <MAbort- >SERR- <PERR-
        Latency: 0
        Interrupt: pin A routed to IRQ 169
        Region 4: I/O ports at d400 [size=32]

00:1d.1 USB Controller: Intel Corporation 82801DB/DBL/DBM (ICH4/ICH4-L/ICH4-M)
USB UHCI Controller #2 (rev 02) (prog-if 00 [UHCI])
        Subsystem: Intel Corporation: Unknown device 24c2
        Control: I/O+ Mem- BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr-
Stepping- SERR- FastB2B-
        Status: Cap- 66Mhz- UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort-
<TAbort- <MAbort- >SERR- <PERR-
        Latency: 0
        Interrupt: pin B routed to IRQ 193
        Region 4: I/O ports at d000 [size=32]

00:1d.7 USB Controller: Intel Corporation 82801DB/DBM (ICH4/ICH4-M) USB2 EHCI
Controller (rev 02) (prog-if 20 [EHCI])
        Subsystem: Intel Corporation 82801DB/DBM (ICH4/ICH4-M) USB2 EHCI Controller
        Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr-
Stepping- SERR- FastB2B-
        Status: Cap+ 66Mhz- UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort-
<TAbort- <MAbort- >SERR- <PERR-
        Latency: 0
        Interrupt: pin D routed to IRQ 9
        Region 0: Memory at ea180000 (32-bit, non-prefetchable) [size=1K]
        Capabilities: [50] Power Management version 2
                Flags: PMEClk- DSI- D1- D2- AuxCurrent=375mA
PME(D0+,D1-,D2-,D3hot+,D3cold+)
                Status: D0 PME-Enable- DSel=0 DScale=0 PME-

00:1e.0 PCI bridge: Intel Corporation 82801 PCI Bridge (rev 82) (prog-if 00
[Normal decode])
        Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr-
Stepping- SERR+ FastB2B-
        Status: Cap- 66Mhz- UDF- FastB2B+ ParErr- DEVSEL=fast >TAbort- <TAbort-
<MAbort- >SERR- <PERR+
        Latency: 0
        Bus: primary=00, secondary=01, subordinate=01, sec-latency=32
        I/O behind bridge: 0000c000-0000cfff
        Memory behind bridge: ea000000-ea0fffff
        Prefetchable memory behind bridge: 1f800000-1f8fffff
        BridgeCtl: Parity- SERR+ NoISA+ VGA- MAbort- >Reset- FastB2B-

00:1f.0 ISA bridge: Intel Corporation 82801DB/DBL (ICH4/ICH4-L) LPC Interface
Bridge (rev 02)
        Control: I/O+ Mem+ BusMaster+ SpecCycle+ MemWINV- VGASnoop- ParErr-
Stepping- SERR- FastB2B-
        Status: Cap- 66Mhz- UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort-
<TAbort- <MAbort- >SERR- <PERR-
        Latency: 0

00:1f.1 IDE interface: Intel Corporation 82801DB (ICH4) IDE Controller (rev 02)
(prog-if 8a [Master SecP PriP])
        Subsystem: Intel Corporation: Unknown device 24c2
        Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr-
Stepping- SERR- FastB2B-
        Status: Cap- 66Mhz- UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort-
<TAbort- <MAbort- >SERR- <PERR-
        Latency: 0
        Interrupt: pin A routed to IRQ 185
        Region 0: I/O ports at <unassigned>
        Region 1: I/O ports at <unassigned>
        Region 2: I/O ports at <unassigned>
        Region 3: I/O ports at <unassigned>
        Region 4: I/O ports at f000 [size=16]
        Region 5: Memory at 1f900000 (32-bit, non-prefetchable) [size=1K]

00:1f.3 SMBus: Intel Corporation 82801DB/DBL/DBM (ICH4/ICH4-L/ICH4-M) SMBus
Controller (rev 02)
        Subsystem: Intel Corporation: Unknown device 24c2
        Control: I/O+ Mem- BusMaster- SpecCycle- MemWINV- VGASnoop- ParErr-
Stepping- SERR- FastB2B-
        Status: Cap- 66Mhz- UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort-
<TAbort- <MAbort- >SERR- <PERR-
        Interrupt: pin B routed to IRQ 3
        Region 4: I/O ports at 0500 [size=32]

00:1f.5 Multimedia audio controller: Intel Corporation 82801DB/DBL/DBM
(ICH4/ICH4-L/ICH4-M) AC'97 Audio Controller (rev 02)
        Subsystem: Albatron Corp.: Unknown device 2402
        Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr-
Stepping- SERR- FastB2B-
        Status: Cap+ 66Mhz- UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort-
<TAbort- <MAbort- >SERR- <PERR-
        Latency: 0
        Interrupt: pin B routed to IRQ 3
        Region 0: I/O ports at dc00 [size=256]
        Region 1: I/O ports at e000 [size=64]
        Region 2: Memory at ea181000 (32-bit, non-prefetchable) [size=512]
        Region 3: Memory at ea182000 (32-bit, non-prefetchable) [size=256]
        Capabilities: [50] Power Management version 2
                Flags: PMEClk- DSI- D1- D2- AuxCurrent=375mA
PME(D0+,D1-,D2-,D3hot+,D3cold+)
                Status: D0 PME-Enable- DSel=0 DScale=0 PME-

01:00.0 Ethernet controller: 3Com Corporation 3CSOHO100B-TX 910-A01 [tulip] (rev 31)
        Subsystem: 3Com Corporation: Unknown device 1000
        Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr-
Stepping- SERR- FastB2B-
        Status: Cap+ 66Mhz- UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort-
<TAbort- <MAbort- >SERR- <PERR-
        Latency: 32 (16000ns min, 32000ns max), cache line size 08
        Interrupt: pin A routed to IRQ 177
        Region 0: I/O ports at c000 [size=256]
        Region 1: Memory at ea024000 (32-bit, non-prefetchable) [size=1K]
        Expansion ROM at 1f800000 [disabled] [size=128K]
        Capabilities: [c0] Power Management version 2
                Flags: PMEClk- DSI- D1+ D2+ AuxCurrent=100mA
PME(D0+,D1+,D2+,D3hot+,D3cold+)
                Status: D0 PME-Enable- DSel=0 DScale=0 PME-

01:04.0 Ethernet controller: 3Com Corporation 3c940 10/100/1000Base-T [Marvell]
(rev 10)
        Subsystem: 3Com Corporation 3C941 Gigabit LOM Ethernet Adapter
        Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr-
Stepping- SERR- FastB2B-
        Status: Cap+ 66Mhz+ UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort-
<TAbort- <MAbort- >SERR- <PERR-
        Latency: 32 (5750ns min, 7750ns max), cache line size 08
        Interrupt: pin A routed to IRQ 169
        Region 0: Memory at ea020000 (32-bit, non-prefetchable) [size=16K]
        Region 1: I/O ports at c400 [size=256]
        Expansion ROM at 1f820000 [disabled] [size=128K]
        Capabilities: [48] Power Management version 2
                Flags: PMEClk- DSI- D1+ D2+ AuxCurrent=0mA
PME(D0+,D1+,D2+,D3hot+,D3cold+)
                Status: D0 PME-Enable- DSel=0 DScale=1 PME-
        Capabilities: [50] Vital Product Data

# cat /proc/cpuinfo
processor       : 0
vendor_id       : GenuineIntel
cpu family      : 15
model           : 1
model name      : Intel(R) Celeron(R) CPU 1.70GHz
stepping        : 3
cpu MHz         : 1697.545
cache size      : 128 KB
fdiv_bug        : no
hlt_bug         : no
f00f_bug        : no
coma_bug        : no
fpu             : yes
fpu_exception   : yes
cpuid level     : 2
wp              : yes
flags           : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov
pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm
bogomips        : 3398.33

# cat /proc/ioports
0000-001f : dma1
0020-0021 : pic1
0040-0043 : timer0
0050-0053 : timer1
0060-006f : keyboard
0070-0077 : rtc
0080-008f : dma page reg
00a0-00a1 : pic2
00c0-00df : dma2
00f0-00ff : fpu
0170-0177 : ide1
01f0-01f7 : ide0
0376-0376 : ide1
03c0-03df : vga+
03f6-03f6 : ide0
03f8-03ff : serial
0400-047f : 0000:00:1f.0
  0400-0403 : PM1a_EVT_BLK
  0404-0405 : PM1a_CNT_BLK
  0408-040b : PM_TMR
  0428-042f : GPE0_BLK
0480-04bf : 0000:00:1f.0
0500-051f : 0000:00:1f.3
0cf8-0cff : PCI conf1
c000-cfff : PCI Bus #01
  c000-c0ff : 0000:01:00.0
    c000-c0ff : tulip
  c400-c4ff : 0000:01:04.0
    c400-c4ff : skge
d000-d01f : 0000:00:1d.1
  d000-d01f : uhci_hcd
d400-d41f : 0000:00:1d.0
  d400-d41f : uhci_hcd
dc00-dcff : 0000:00:1f.5
e000-e03f : 0000:00:1f.5
f000-f00f : 0000:00:1f.1
  f000-f007 : ide0
  f008-f00f : ide1

# cat /proc/iomem
00000000-0009fbff : System RAM
  00000000-00000000 : Crash kernel
0009fc00-0009ffff : reserved
000a0000-000bffff : Video RAM area
000c0000-000c7fff : Video ROM
000d0000-000d1fff : Adapter ROM
000d2000-000d27ff : Adapter ROM
000f0000-000fffff : System ROM
00100000-1f7effff : System RAM
  00100000-0044f079 : Kernel code
  0044f07a-00597da7 : Kernel data
1f7f0000-1f7f2fff : ACPI Non-volatile Storage
1f7f3000-1f7fffff : ACPI Tables
1f800000-1f8fffff : PCI Bus #01
  1f800000-1f81ffff : 0000:01:00.0
  1f820000-1f83ffff : 0000:01:04.0
1f900000-1f9003ff : 0000:00:1f.1
e0000000-e7ffffff : 0000:00:02.0
e8000000-e9ffffff : 0000:00:00.0
ea000000-ea0fffff : PCI Bus #01
  ea020000-ea023fff : 0000:01:04.0
    ea020000-ea023fff : skge
  ea024000-ea0243ff : 0000:01:00.0
    ea024000-ea0243ff : tulip
ea100000-ea17ffff : 0000:00:02.0
ea180000-ea1803ff : 0000:00:1d.7
ea181000-ea1811ff : 0000:00:1f.5
ea182000-ea1820ff : 0000:00:1f.5
fec00000-ffffffff : reserved

Software Environment:
Linux space 2.6.13.1 #1 SMP Sat Sep 17 13:53:24 CEST 2005 i686 unknown unknown
GNU/Linux

Gnu C                  3.3.6
Gnu make               3.80
binutils               2.15.92.0.2
util-linux             2.12p
mount                  2.12p
module-init-tools      3.1
e2fsprogs              1.38
reiserfsprogs          line
reiser4progs           line
quota-tools            3.12.
Linux C Library        2.3.5
Dynamic linker (ldd)   2.3.5
Linux C++ Library      5.0.7
Procps                 3.2.5
Net-tools              1.60
Kbd                    1.12
Sh-utils               5.2.1
Modules Loaded         bonding

Problem Description:

Kernel logs BUG and hangs or oopses.

Two logs: BUG & Oops, from two different kernel boots.

------------[ cut here ]------------
kernel BUG at mm/page_alloc.c:1014!
invalid operand: 0000 [#1]
PREEMPT SMP
Modules linked in: bonding
CPU:    0
EIP:    0060:[<c0150594>]    Not tainted VLI
EFLAGS: 00010256   (2.6.13.1)
EIP is at __free_pages+0x44/0x50
eax: 00000000   ebx: df752000   ecx: c139e500   edx: 00000003
esi: 00000000   edi: c1555620   ebp: 00000000   esp: da2bfdac
ds: 007b   es: 007b   ss: 0068
Process ifenslave (pid: 765, threadinfo=da2be000 task=da211a60)
Stack: df752000 00000000 c0308678 df752044 00005000 dcf28000 1cf28000 00000001
       c1555400 da2bfe44 c1555620 c0309f34 c1555400 00000046 00000000 da2bfe44
       c1555400 da2bfe4c da2bfe46 c03998b0 c1555400 da2bfe44 c0124ad7 dcd3de00
Call Trace:
 [<c0308678>] skge_down+0x188/0x1e0
 [<c0309f34>] skge_set_mac_address+0x74/0x100
 [<c03998b0>] dev_set_mac_address+0x40/0x80
 [<c0124ad7>] printk+0x17/0x20
 [<e01c1560>] bond_enslave+0x180/0x860 [bonding]
 [<c0129e17>] local_bh_enable+0x37/0xb0
 [<c0411265>] fib6_walk+0x85/0x90
 [<e01c44be>] bond_do_ioctl+0x10e/0x310 [bonding]
 [<c044e01e>] _read_lock+0xe/0xa0
 [<c044e36d>] _read_unlock+0xd/0x30
 [<c044a38a>] vlan_device_event+0x1a/0x1c0
 [<e01c43b0>] bond_do_ioctl+0x0/0x310 [bonding]
 [<c0399c24>] dev_ifsioc+0x334/0x3a0
 [<c0399e87>] dev_ioctl+0x1f7/0x270
 [<c03d7edc>] inet_ioctl+0x9c/0xb0
 [<c038eb59>] sock_ioctl+0xc9/0x1e0
 [<c017f53e>] do_ioctl+0x8e/0xa0
 [<c017f735>] vfs_ioctl+0x65/0x1f0
 [<c017f905>] sys_ioctl+0x45/0x70
 [<c010345b>] sysenter_past_esp+0x54/0x75
Code: c0 84 c0 74 22 85 d2 75 0a 89 c8 83 c4 08 e9 a4 f7 ff ff 89 54 24 04 89 0c
24 e8 88 f1 ff ff 90 8d b4 26 00 00 00 00 83 c4 08 c3 <0f> 0b f6 03 40 f4 47 c0
eb c4 89 f6 85 c0 74 2c 05 00 00 00 40

bonding: Warning : no link monitoring support for eth0
skge eth0: disabling interface
Unable to handle kernel NULL pointer dereference at virtual address 00000004
 printing eip:
c03060a0
*pde = 00000000
Oops: 0000 [#1]
PREEMPT SMP
Modules linked in: bonding
CPU:    0
EIP:    0060:[<c03060a0>]    Not tainted VLI
EFLAGS: 00010282   (2.6.13.1)
EIP is at skge_rx_clean+0x10/0x60
eax: 00000000   ebx: 00000000   ecx: 00000001   edx: 00000001
esi: c155564c   edi: c1555620   ebp: 00000000   esp: d9f4bda8
ds: 007b   es: 007b   ss: 0068
Process ifenslave (pid: 680, threadinfo=d9f4a000 task=d9f63a60)
Stack: 00000000 c158bd80 00000000 c030862f c1555620 00000000 df43d600 da2f6bf8
       00000001 c1555400 d9f4be44 c1555620 c0309f34 c1555400 00000046 00000000
       d9f4be44 c1555400 d9f4be4c d9f4be46 c03998b0 c1555400 d9f4be44 c0124ad7
Call Trace:
 [<c030862f>] skge_down+0x13f/0x1e0
 [<c0309f34>] skge_set_mac_address+0x74/0x100
 [<c03998b0>] dev_set_mac_address+0x40/0x80
 [<c0124ad7>] printk+0x17/0x20
 [<e01bf560>] bond_enslave+0x180/0x860 [bonding]
 [<c011fa37>] __wake_up_locked+0x27/0x30
 [<c044e39f>] _spin_unlock_irqrestore+0xf/0x30
 [<c010244a>] __down_trylock+0x3a/0x60
 [<e01c24be>] bond_do_ioctl+0x10e/0x310 [bonding]
 [<c044e39f>] _spin_unlock_irqrestore+0xf/0x30
 [<c010244a>] __down_trylock+0x3a/0x60
 [<c03d51c3>] inet_insert_ifa+0x113/0x150
 [<e01c23b0>] bond_do_ioctl+0x0/0x310 [bonding]
 [<c0399c24>] dev_ifsioc+0x334/0x3a0
 [<c0399e87>] dev_ioctl+0x1f7/0x270
 [<c03d7edc>] inet_ioctl+0x9c/0xb0
 [<c038eb59>] sock_ioctl+0xc9/0x1e0
 [<c017f53e>] do_ioctl+0x8e/0xa0
 [<c017f735>] vfs_ioctl+0x65/0x1f0
 [<c017f905>] sys_ioctl+0x45/0x70
 [<c010345b>] sysenter_past_esp+0x54/0x75
Code: 44 24 08 8b 52 04 66 c7 42 18 00 00 66 c7 42 1c 0e 00 0d 00 00 56 c8 89 02
c3 90 56 53 83 ec 04 8b 74 24 10 83 c6 2c 8b 5e 08 90 <8b> 43 04 c7 00 00 00 00
00 8b 53 08 85 d2 74 1e 8b 82 90 00 00


Steps to reproduce:
 Call "ifenslave bond0 eth0", where eth0 is Yukon rev 1, driven by skge.

------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.

Fixed in 2.6.14-rc2 and scheduled for 2.6.13.3