[FS#228] kernel panic on IPQ8065 (netgear R7800) when routing boot

Fri Oct 14 03:42:17 PDT 2016

A new Flyspray task has been opened.  Details are below. 

User who did this - KerwinKoo (KerwinKoo) 

Attached to Project - LEDE Project
Summary - kernel panic on IPQ8065 (netgear R7800) when routing boot
Task Type - Bug Report
Category - Base system
Status - Unconfirmed
Assigned To - 
Operating System - All
Severity - Critical
Priority - Very Low
Reported Version - Trunk
Due in Version - Undecided
Due Date - Undecided
Details - With the latest version, the image generated for Netgear R7800 doesn't work.

After I flashed img-file `lede-ipq806x-R7800-squashfs-factory.img` to R7800 by tftp-tool, "Kernel panic" occurred with log showed on tty (on the tail of this report).

By rollback commit version and keep boot-flush testing, it's focus on the github commit:d27bce8d28eb129af0abd9c80a7756301b7d588a

I use "UBINIZE_OPTS := -E 5" instead of "UBINIZE_OPTS :=", which modified by Felix Fietkau (nbd at nbd.name) at 2016-09-12. After replaced that line in "include/image.mk", panic gone.

bug record:

Starting kernel ...

[    0.000000] Booting Linux on physical CPU 0x0
[    0.000000] Linux version 4.4.23 (gukq at gukq-CMPC) (gcc version 5.4.0 (LEDE GCC 5.4.0 r1664) ) #0 SMP PREEMPT Sun Oc6
[    0.000000] CPU: ARMv7 Processor [512f04d0] revision 0 (ARMv7), cr=10c5787d
[    0.000000] CPU: PIPT / VIPT nonaliasing data cache, PIPT instruction cache
[    0.000000] Machine model: Netgear Nighthawk X4S R7800
[    0.000000] Memory policy: Data cache writealloc
[    0.000000] PERCPU: Embedded 11 pages/cpu @ddc0d000 s14912 r8192 d21952 u45056
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 121920
[    0.000000] Kernel command line: rootfstype=squashfs noinitrd
[    0.000000] Bootloader command line (ignored): console=ttyHSL1,115200n8
[    0.000000] PID hash table entries: 2048 (order: 1, 8192 bytes)
[    0.000000] Dentry cache hash table entries: 65536 (order: 6, 262144 bytes)
[    0.000000] Inode-cache hash table entries: 32768 (order: 5, 131072 bytes)
[    0.000000] Memory: 480624K/491520K available (4110K kernel code, 240K rwdata, 1568K rodata, 200K init, 287K bss, 1)
[    0.000000] Virtual kernel memory layout:
[    0.000000]     vector  : 0xffff0000 - 0xffff1000   (   4 kB)
[    0.000000]     fixmap  : 0xffc00000 - 0xfff00000   (3072 kB)
[    0.000000]     vmalloc : 0xde800000 - 0xff800000   ( 528 MB)
[    0.000000]     lowmem  : 0xc0000000 - 0xde000000   ( 480 MB)
[    0.000000]     pkmap   : 0xbfe00000 - 0xc0000000   (   2 MB)
[    0.000000]     modules : 0xbf000000 - 0xbfe00000   (  14 MB)
[    0.000000]       .text : 0xc0208000 - 0xc0793cf0   (5680 kB)
[    0.000000]       .init : 0xc0794000 - 0xc07c6000   ( 200 kB)
[    0.000000]       .data : 0xc07c6000 - 0xc08023b8   ( 241 kB)
[    0.000000]        .bss : 0xc0805000 - 0xc084cfb8   ( 288 kB)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
[    0.000000] Preemptible hierarchical RCU implementation.
[    0.000000]  RCU restricting CPUs from NR_CPUS=4 to nr_cpu_ids=2.
[    0.000000] RCU: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2
[    0.000000] NR_IRQS:16 nr_irqs:16 16
[    0.000000] clocksource: dg_timer: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 305801671480 ns
[    0.000008] sched_clock: 32 bits at 6MHz, resolution 160ns, wraps every 343597383600ns
[    0.000024] Switching to timer-based delay loop, resolution 160ns
[    0.000237] Calibrating delay loop (skipped), value calculated using timer frequency.. 12.50 BogoMIPS (lpj=62500)
[    0.000262] pid_max: default: 32768 minimum: 301
[    0.000405] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.000423] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.001036] CPU: Testing write buffer coherency: ok
[    0.001351] CPU0: thread -1, cpu 0, socket 0, mpidr 80000000
[    0.001452] Setting up static identity map for 0x42208280 - 0x422082d8
[    0.094467] CPU1: thread -1, cpu 1, socket 0, mpidr 80000001
[    0.094629] Brought up 2 CPUs
[    0.094649] SMP: Total of 2 processors activated (25.00 BogoMIPS).
[    0.094661] CPU: All CPU(s) started in SVC mode.
[    0.107157] VFP support v0.3: implementor 51 architecture 64 part 4d variant 2 rev 0
[    0.107597] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.107760] pinctrl core: initialized pinctrl subsystem
[    0.109380] NET: Registered protocol family 16
[    0.109674] DMA: preallocated 256 KiB pool for atomic coherent allocations
[    0.134906] cpuidle: using governor ladder
[    0.165922] cpuidle: using governor menu
[    0.185450] qcom_rpm 108000.rpm: RPM firmware 3.0.16777364
[    0.230530] pps_core: LinuxPPS API ver. 1 registered
[    0.230550] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti 
[    0.230599] PTP clock support registered
[    0.231944] clocksource: Switched to clocksource dg_timer
[    0.233952] NET: Registered protocol family 2
[    0.234773] TCP established hash table entries: 4096 (order: 2, 16384 bytes)
[    0.234817] TCP bind hash table entries: 4096 (order: 3, 32768 bytes)
[    0.234872] TCP: Hash tables configured (established 4096 bind 4096)
[    0.234930] UDP hash table entries: 256 (order: 1, 8192 bytes)
[    0.234961] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
[    0.235206] NET: Registered protocol family 1
[    0.237164] futex hash table entries: 512 (order: 3, 32768 bytes)
[    0.237313] No memory allocated for crashlog
[    0.246074] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.246102] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.249222] io scheduler noop registered
[    0.249252] io scheduler deadline registered (default)
[    0.250905] gpio-export gpio_export: 2 gpio(s) exported
[    0.251813] 1b500000.pci supply vdda not found, using dummy regulator
[    0.251918] 1b500000.pci supply vdda_phy not found, using dummy regulator
[    0.252036] 1b500000.pci supply vdda_refclk not found, using dummy regulator
[    0.252697] PCI host bridge /soc/pci at 1b500000 ranges:
[    0.252743]    IO 0x0fe00000..0x0fefffff -> 0x0fe00000
[    0.252771]   MEM 0x08000000..0x0fdfffff -> 0x08000000
[    0.287485] qcom-pcie 1b500000.pci: PCI host bridge to bus 0000:00
[    0.287511] pci_bus 0000:00: root bus resource [bus 00-ff]
[    0.287533] pci_bus 0000:00: root bus resource [io  0x0000-0xfffff] (bus address [0xfe00000-0xfefffff])
[    0.287550] pci_bus 0000:00: root bus resource [mem 0x08000000-0x0fdfffff]
[    0.288312] PCI: bus0: Fast back to back transfers disabled
[    0.290475] PCI: bus1: Fast back to back transfers disabled
[    0.290792] pci 0000:00:00.0: BAR 8: assigned [mem 0x08000000-0x081fffff]
[    0.290820] pci 0000:01:00.0: BAR 0: assigned [mem 0x08000000-0x081fffff 64bit]
[    0.290939] pci 0000:00:00.0: PCI bridge to [bus 01]
[    0.290964] pci 0000:00:00.0:   bridge window [mem 0x08000000-0x081fffff]
[    0.291389] pcieport 0000:00:00.0: Signaling PME through PCIe PME interrupt
[    0.291409] pci 0000:01:00.0: Signaling PME through PCIe PME interrupt
[    0.292294] 1b700000.pci supply vdda not found, using dummy regulator
[    0.292399] 1b700000.pci supply vdda_phy not found, using dummy regulator
[    0.292524] 1b700000.pci supply vdda_refclk not found, using dummy regulator
[    0.293000] PCI host bridge /soc/pci at 1b700000 ranges:
[    0.293040]    IO 0x31e00000..0x31efffff -> 0x31e00000
[    0.293065]   MEM 0x2e000000..0x31dfffff -> 0x2e000000
[    0.327923] qcom-pcie 1b700000.pci: PCI host bridge to bus 0001:00
[    0.327944] pci_bus 0001:00: root bus resource [bus 00-ff]
[    0.327962] pci_bus 0001:00: root bus resource [mem 0x2e000000-0x31dfffff]
[    0.328618] PCI: bus0: Fast back to back transfers disabled
[    0.330747] PCI: bus1: Fast back to back transfers disabled
[    0.331192] pci 0001:00:00.0: BAR 8: assigned [mem 0x2e000000-0x2e1fffff]
[    0.331218] pci 0001:01:00.0: BAR 0: assigned [mem 0x2e000000-0x2e1fffff 64bit]
[    0.331331] pci 0001:00:00.0: PCI bridge to [bus 01]
[    0.331353] pci 0001:00:00.0:   bridge window [mem 0x2e000000-0x2e1fffff]
[    0.331727] pcieport 0001:00:00.0: Signaling PME through PCIe PME interrupt
[    0.331744] pci 0001:01:00.0: Signaling PME through PCIe PME interrupt
[    0.337729] gsbi 16300000.gsbi: GSBI port protocol: 6 crci: 0
[    0.339086] gsbi 1a200000.gsbi: GSBI port protocol: 3 crci: 0
[    0.340248] Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
[    0.341540] msm_serial 16340000.serial: msm_serial: detected port #0
[    0.341657] msm_serial 16340000.serial: uartclk = 1843200
[    0.341732] 16340000.serial: ttyMSM0 at MMIO 0x16340000 (irq = 170, base_baud = 115200) is a MSM
[    0.341782] msm_serial: console setup on port #0
[    1.027830] console [ttyMSM0] enabled
[    1.032771] msm_serial: driver initialized
[    1.039675] nand: device found, Manufacturer ID: 0x01, Chip ID: 0xa1
[    1.039862] nand: AMD/Spansion S34MS01G2
[    1.046467] nand: 128 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
[    1.050287] Scanning device for bad blocks
[    1.571616] random: nonblocking pool is initialized
[    1.952952] 10 ofpart partitions found on MTD device qcom-nandc
[    1.952986] Creating 10 MTD partitions on "qcom-nandc":
[    1.957694] 0x000000000000-0x000000c80000 : "qcadata"
[    1.975222] 0x000000c80000-0x000001180000 : "APPSBL"
[    1.986989] 0x000001180000-0x000001200000 : "APPSBLENV"
[    1.998695] 0x000001200000-0x000001340000 : "art"
[    2.000129] 0x000001340000-0x000001480000 : "artbak"
[    2.014255] 0x000001480000-0x000001680000 : "kernel"
[    2.015484] 0x000001680000-0x000003480000 : "ubi"
[    2.019793] 0x000003480000-0x000007900000 : "netgear"
[    2.034826] 0x000007900000-0x000008000000 : "reserve"
[    2.046632] 0x000001480000-0x000003480000 : "firmware"
[    2.059735] no rootfs found after FIT image in "firmware"
[    2.060558] spi_qup 1a280000.spi: IN:block:16, fifo:64, OUT:block:16, fifo:64
[    2.065735] m25p80 spi32766.0: unrecognized JEDEC id bytes: 00,  0,  0
[    2.072098] libphy: Fixed MDIO Bus: probed
[    2.078238] libphy: GPIO Bitbanged MDIO: probed
[    2.106778] switch0: Atheros AR8337 rev. 2 switch registered on gpio-0
[    2.394513] stmmac - user ID: 0x10, Synopsys ID: 0x37
[    2.394544]  Ring mode enabled
[    2.398541]  DMA HW capability register supported
[    2.401494]  Enhanced/Alternate descriptors
[    2.406268]  Enabled extended descriptors
[    2.410262]  RX Checksum Offload Engine supported (type 2)
[    2.414530]  TX Checksum insertion supported
[    2.419808]  Wake-Up On Lan supported
[    2.424421]  Enable RX Mitigation via HW Watchdog Timer
[    2.429503] stmmac - user ID: 0x10, Synopsys ID: 0x37
[    2.432932]  Ring mode enabled
[    2.438036]  DMA HW capability register supported
[    2.440990]  Enhanced/Alternate descriptors
[    2.445764]  Enabled extended descriptors
[    2.449758]  RX Checksum Offload Engine supported (type 2)
[    2.454013]  TX Checksum insertion supported
[    2.459306]  Wake-Up On Lan supported
[    2.463905]  Enable RX Mitigation via HW Watchdog Timer
[    2.468127] i2c /dev entries driver
[    2.473919] Speed bin: 0
[    2.475795] PVS bin: 4
[    2.481299] L2 @ QSB rate. Forcing new rate.
[    2.481463] L2 @ 384000 KHz
[    2.485438] CPU0 @ 800000 KHz
[    2.487691] CPU1 @ QSB rate. Forcing new rate.
[    2.490900] CPU1 @ 384000 KHz
[    2.497509] NET: Registered protocol family 10
[    2.499921] NET: Registered protocol family 17
[    2.502706] bridge: automatic filtering via arp/ip/ip6tables has been deprecated. Update your scripts to load br_ne.
[    2.507342] 8021q: 802.1Q VLAN Support v1.8
[    2.519947] Registering SWP/SWPB emulation handler
[    2.532704] running cpufreq without cooling device: -38
[    2.532728] running cpufreq without cooling device: -38
[    2.537549] UBI: auto-attach mtd6
[    2.541933] ubi0: attaching mtd6
[    2.754011] ubi0 error: scan_peb: bad image sequence number 995306599 in PEB 159, expected 752293285
[    2.754038] Erase counter header dump:
[    2.762194]  magic          0x55424923
[    2.765812]  version        1
[    2.769484]  ec             25
[    2.772584]  vid_hdr_offset 2048
[    2.775475]  data_offset    4096
[    2.778860]  image_seq      995306599
[    2.782075]  hdr_crc        0x89c3af63
[    2.785704] erase counter header hexdump:
[    2.789417] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd6, error -22
[    2.793435] UBI error: cannot attach mtd6
[    2.800496] hctosys: unable to open rtc device (rtc0)
[    2.810943] VFS: Cannot open root device "(null)" or unknown-block(0,0): error -6
[    2.810967] Please append a correct "root=" boot option; here are the available partitions:
[    2.817494] 1f00           12800 mtdblock0  (driver?)
[    2.829717] 1f01            5120 mtdblock1  (driver?)
[    2.834823] 1f02             512 mtdblock2  (driver?)
[    2.839785] 1f03            1280 mtdblock3  (driver?)
[    2.844882] 1f04            1280 mtdblock4  (driver?)
[    2.849856] 1f05            2048 mtdblock5  (driver?)
[    2.854971] 1f06           30720 mtdblock6  (driver?)
[    2.859926] 1f07           70144 mtdblock7  (driver?)
[    2.865027] 1f08            7168 mtdblock8  (driver?)
[    2.869994] 1f09           32768 mtdblock9  (driver?)
[    2.875084] Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(0,0)
[    2.875909] CPU: 0 PID: 1 Comm: swapper/0 Not tainted 4.4.23 #0
[    2.884235] Hardware name: Generic DT based system
[    2.890069] [] (unwind_backtrace) from [] (show_stack+0x14/0x20)
[    2.894931] [] (show_stack) from [] (dump_stack+0x88/0x9c)
[    2.902825] [] (dump_stack) from [] (panic+0xa8/0x224)
[    2.909863] [] (panic) from [] (mount_block_root+0x19c/0x260)
[    2.916711] [] (mount_block_root) from [] (prepare_namespace+0x160/0x19c)
[    2.924262] [] (prepare_namespace) from [] (kernel_init_freeable+0x1e8/0x1f8)
[    2.932771] [] (kernel_init_freeable) from [] (kernel_init+0x14/0x108)
[    2.941626] [] (kernel_init) from [] (ret_from_fork+0x14/0x3c)
[    2.949784] CPU1: stopping
[    2.957323] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 4.4.23 #0
[    2.960016] Hardware name: Generic DT based system
[    2.965837] [] (unwind_backtrace) from [] (show_stack+0x14/0x20)
[    2.970703] [] (show_stack) from [] (dump_stack+0x88/0x9c)
[    2.978601] [] (dump_stack) from [] (handle_IPI+0x128/0x1e4)
[    2.985632] [] (handle_IPI) from [] (gic_handle_irq+0x90/0xbc)
[    2.993184] [] (gic_handle_irq) from [] (__irq_svc+0x54/0x90)
[    3.000559] Exception stack(0xdd471f88 to 0xdd471fd0)
[    3.008114] 1f80:                   00000001 00000000 00000000 c020b520 dd470000 c07c8480
[    3.013156] 1fa0: c06d3878 00000000 00000000 c07c12e4 dd471fe0 c07c8488 de80400c dd471fd8
[    3.021310] 1fc0: c021af04 c021af08 60000013 ffffffff
[    3.029464] [] (__irq_svc) from [] (arch_cpu_idle+0x38/0x5c)
[    3.034506] [] (arch_cpu_idle) from [] (cpu_startup_entry+0x17c/0x250)
[    3.041970] [] (cpu_startup_entry) from [] (0x4220956c)
[    3.050042] Rebooting in 1 seconds..
[    5.057260] BUG: scheduling while atomic: swapper/0/1/0x00000002
[    5.057283] Modules linked in:
[    5.065346] Preemption disabled at:[<  (null)>]   (null)
[    5.068735] 
[    5.070646] CPU: 0 PID: 1 Comm: swapper/0 Not tainted 4.4.23 #0
[    5.072300] Hardware name: Generic DT based system
[    5.077948] [] (unwind_backtrace) from [] (show_stack+0x14/0x20)
[    5.082815] [] (show_stack) from [] (dump_stack+0x88/0x9c)
[    5.090720] [] (dump_stack) from [] (__schedule_bug+0xa8/0xc4)
[    5.097747] [] (__schedule_bug) from [] (__schedule+0x94/0x490)
[    5.105295] [] (__schedule) from [] (schedule+0x94/0xbc)
[    5.112849] [] (schedule) from [] (schedule_timeout+0x1e0/0x220)
[    5.120144] [] (schedule_timeout) from [] (msleep+0x2c/0x48)
[    5.127872] [] (msleep) from [] (qcom_wdt_restart+0x64/0x74)
[    5.135245] [] (qcom_wdt_restart) from [] (notifier_call_chain+0x38/0x90)
[    5.142623] [] (notifier_call_chain) from [] (atomic_notifier_call_chain+0x3c/0x5c)
[    5.151043] [] (atomic_notifier_call_chain) from [] (machine_restart+0x4c/0x84)
[    5.160247] [] (machine_restart) from [] (panic+0x1b4/0x224)
[    5.169272] [] (panic) from [] (mount_block_root+0x19c/0x260)
[    5.176910] [] (mount_

More information can be found at the following URL:
https://bugs.lede-project.org/index.php?do=details&task_id=228