[FS#1211] Comtrend VR-3026e kernel panic using last snapshots

LEDE Bugs lede-bugs at lists.infradead.org
Fri Dec 8 10:37:58 PST 2017


A new Flyspray task has been opened.  Details are below. 

User who did this - Sofartin (hrubymar10) 

Attached to Project - LEDE Project
Summary - Comtrend VR-3026e kernel panic using last snapshots
Task Type - Bug Report
Category - Kernel
Status - Unconfirmed
Assigned To - 
Operating System - All
Severity - Critical
Priority - Very Low
Reported Version - Trunk
Due in Version - Undecided
Due Date - Undecided
Details - Supply the following if possible:
 - Device problem occurs on
 - Software versions of LEDE release, packages, etc.
 - Steps to reproduce
   
Problem occurs on Comtrend VR-3026e with last generic snapshots

Symptoms/How to reproduce:
1. Using CFE bootloader in "Update Software" mode try to flash any generic or smp snapshot of LEDE (of course for this board so file lede-brcm63xx-generic-VR-3026e-squashfs-cfe.bin)

2. After flash, turn up the router, and after while ~10sec it crashes and reboots

Backstory:
I need newest snapshot for my project and I am pretty sure that on the same device snapshots from around April-May/2017 worked (sadly I don't know exactly which).

Just mention that last snapshot of OpenWRT works:
[    0.000000] Linux version 4.4.14 (buildbot at owrtbuild01) (gcc version 5.3.0 (OpenWrt GCC 5.3.0 50072) ) #1 Thu Dec 7 07:17:30 UTC 2017

I have access to serial console now and this is complete log from starting from flashing and ending with kernel panic:

CFE version 1.0.37-106.24-31 for BCM96368 (32bit,SP,BE)
Build Date: 2012-06-29 16:09:03 (lain at SW1-BCM-04)
Copyright (C) 2000-2009 Broadcom Corporation.

Parallel flash device: name AM29DL800B, id 0x22cb size 8192KB
Total Flash size: 8192K with 135 sectors
Chip ID: BCM6368B2, MIPS: 400MHz
Main Thread: TP0
Total Memory: 67108864 bytes (64MB)
Boot Address: 0xb8000000


*** Break into CFE console ( GPIO Mode )***

Board IP address                  : 192.168.1.1:ffffff00  
Host IP address                   : 192.168.1.100  
Gateway IP address                :   
Run from flash/host (f/h)         : f  
Default host run file name        : vmlinux  
Default host flash file name      : bcm963xx_fs_kernel  
Boot delay (0-9 seconds)          : 1  
Board Id (0-15)                   : 96368MT-1341N1  
Number of MAC Addresses (1-32)    : 32  
Base MAC Address                  : 38:72:c0:09:ac:b6  
PSI Size (1-64) KBytes            : 24  
Enable Backup PSI [0|1]           : 0  
System Log Size (0-256) KBytes    : 0  
Main Thread Number [0|1]          : 0  
Serial Number                     : 117QJA02737  
Default PSK key                   : sFbaTpKdkF  

web info: Waiting for connection on socket 0.
web info: Waiting for connection on socket 1.
web info: Waiting for connection on socket 0.
web info: Upload 4194560 bytes, Broadcom image format.
CFE> 
Flashing root file system and kernel at 0xb8010000: .................................................................

.
*** Image flash done *** !

Resetting board...?

CFE version 1.0.37-106.24-31 for BCM96368 (32bit,SP,BE)
Build Date: 2012-06-29 16:09:03 (lain at SW1-BCM-04)
Copyright (C) 2000-2009 Broadcom Corporation.

Parallel flash device: name AM29DL800B, id 0x22cb size 8192KB
Total Flash size: 8192K with 135 sectors
Chip ID: BCM6368B2, MIPS: 400MHz
Main Thread: TP0
Total Memory: 67108864 bytes (64MB)
Boot Address: 0xb8000000

Board IP address                  : 192.168.1.1:ffffff00  
Host IP address                   : 192.168.1.100  
Gateway IP address                :   
Run from flash/host (f/h)         : f  
Default host run file name        : vmlinux  
Default host flash file name      : bcm963xx_fs_kernel  
Boot delay (0-9 seconds)          : 1  
Board Id (0-15)                   : 96368MT-1341N1  
Number of MAC Addresses (1-32)    : 32  
Base MAC Address                  : 38:72:c0:09:ac:b6  
PSI Size (1-64) KBytes            : 24  
Enable Backup PSI [0|1]           : 0  
System Log Size (0-256) KBytes    : 0  
Main Thread Number [0|1]          : 0  
Serial Number                     : 117QJA02737  
Default PSK key                   : sFbaTpKdkF  

*** Press any key to stop auto run (1 seconds) ***
Auto run second count down: 0
Booting from only image (0xb8010000) ...
Code Address: 0x80A00000, Entry Address: 0x80a00000
LZMA: Prossible old LZMA format, trying to decompress..
Decompression OK!
Entry at 0x80a00000
Closing network.
Disabling Switch ports.
Flushing Receive Buffers...
18 buffers found.
Closing DMA Channels.
Starting program at 0x80a00000
[    0.000000] Linux version 4.4.100 (buildbot at builds) (gcc version 5.5.0 (LEDE GCC 5.5.0 r5448-deaf959) ) #0 Tue Dec 5 21:56:31 2017
[    0.000000] Detected Broadcom 0x6368 CPU revision b2
[    0.000000] CPU frequency is 400 MHz
[    0.000000] 64MB of RAM installed
[    0.000000] board_bcm963xx: Boot address 0xb8000000
[    0.000000] board_bcm963xx: CFE version: 1.0.37-106.24-31
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 0002a031 (Broadcom BMIPS4350)
[    0.000000] board: board name: 96368MT-1341N1
[    0.000000] MIPS: machine is Comtrend VR-3026e
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 04000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000003ffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000003ffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000003ffffff]
[    0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 16 bytes.
[    0.000000] Primary data cache 32kB, 2-way, VIPT, cache aliases, linesize 16 bytes
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 16256
[    0.000000] Kernel command line: root=/dev/mtdblock2 rootfstype=squashfs,jffs2 noinitrd console=ttyS0,115200
[    0.000000] PID hash table entries: 256 (order: -2, 1024 bytes)
[    0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
[    0.000000] Memory: 58992K/65536K available (3259K kernel code, 154K rwdata, 900K rodata, 1312K init, 198K bss, 6544K reserved, 0K cma-reserved)
[    0.000000] SLUB: HWalign=16, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[    0.000000] NR_IRQS:256
[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 9556302233 ns
[    0.000014] sched_clock: 32 bits at 200MHz, resolution 5ns, wraps every 10737418237ns
[    0.008091] Calibrating delay loop... 397.82 BogoMIPS (lpj=795648)
[    0.042717] pid_max: default: 32768 minimum: 301
[    0.047690] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.054462] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.069456] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 7645041785100000 ns
[    0.079502] futex hash table entries: 256 (order: -1, 3072 bytes)
[    0.086013] pinctrl core: initialized pinctrl subsystem
[    0.093570] NET: Registered protocol family 16
[    0.109581] registering PCI controller with io_map_base unset
[    0.115480] registering PCI controller with io_map_base unset
[    0.134979] PCI host bridge to bus 0000:00
[    0.139213] pci_bus 0000:00: root bus resource [mem 0x30000000-0x37ffffff]
[    0.146251] pci_bus 0000:00: root bus resource [io  0x8000000-0x8007fff]
[    0.153146] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0]
[    0.160132] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    0.175992] pci 0000:00:01.0: BAR 0: assigned [mem 0x30000000-0x30003fff]
[    0.183680] PCI host bridge to bus 0000:01
[    0.187868] pci_bus 0000:01: root bus resource [mem 0x38000000-0x3fffffff]
[    0.194925] pci_bus 0000:01: root bus resource [io  0x8008000-0x800ffff]
[    0.201822] pci_bus 0000:01: root bus resource [??? 0x00000000 flags 0x0]
[    0.208811] pci_bus 0000:01: No busn resource found for root bus, will use [bus 01-ff]
[    0.217391] pci 0000:01:1e.0: bridge configuration invalid ([bus 00-00]), reconfiguring
[    0.225896] pci 0000:01:1e.0: BAR 10: assigned [mem 0x38000000-0x3fffffff]
[    0.232953] pci 0000:01:1e.0: BAR 7: assigned [io  0x8008000-0x80080ff]
[    0.239746] pci 0000:01:1e.0: BAR 8: assigned [io  0x8008400-0x80084ff]
[    0.246552] pci 0000:01:1e.0: CardBus bridge to [bus 02-05]
[    0.252286] pci 0000:01:1e.0:   bridge window [io  0x8008000-0x80080ff]
[    0.259096] pci 0000:01:1e.0:   bridge window [io  0x8008400-0x80084ff]
[    0.265905] pci 0000:01:1e.0:   bridge window [mem 0x38000000-0x3fffffff]
[    0.274816] clocksource: Switched to clocksource MIPS
[    0.282251] PCI: Enabling device 0000:00:01.0 (0000 -> 0002)
[    0.307860] ssb: Found chip with id 0xA8D6, rev 0x00 and package 0x08
[    0.373046] ssb: Sonics Silicon Backplane found on PCI device 0000:00:01.0
[    0.380616] NET: Registered protocol family 2
[    0.386687] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
[    0.393929] TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
[    0.400478] TCP: Hash tables configured (established 1024 bind 1024)
[    0.407359] UDP hash table entries: 256 (order: 0, 4096 bytes)
[    0.413408] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[    0.420329] NET: Registered protocol family 1
[    0.427748] Crashlog allocated RAM at address 0x3f00000
[    0.459747] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.465780] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.480792] io scheduler noop registered
[    0.484845] io scheduler deadline registered (default)
[    0.492501] bcm6368-pinctrl 10000080.pin-controller: registered at mmio b0000080
?[    0.510994] console [ttyS0] enabled MMIO 0xb0000100 (irq = 10, base_baud = 1562500) is a bcm63xx_uart
[    0.510994] console [ttyS0] enabled
[    0.518113] bootconsole [early0] disabled
[    0.518113] bootconsole [early0] disabled
[    0.527110] bcm63xx-rng bcm63xx-rng: registered RNG driver
[    0.533917] 18000000.nor: Found 1 x16 devices at 0x0 in 16-bit bank. Manufacturer ID 0x0000c2 Chip ID 0x0022cb
[    0.544326] Amd/Fujitsu Extended Query Table at 0x0040
[    0.549586]   Amd/Fujitsu Extended Query version 1.1.
[    0.554762] number of CFI chips: 1
[    0.563611] bcm63xxpart: CFE boot tag found with version 6 and board type 96368MT-1341N1
[    0.572008] 5 bcm63xxpart partitions found on MTD device 18000000.nor
[    0.578614] Creating 5 MTD partitions on "18000000.nor":
[    0.584070] 0x000000000000-0x000000010000 : "CFE"
[    0.591326] 0x000000010100-0x00000016a758 : "kernel"
[    0.599046] 0x00000016a758-0x0000007f0000 : "rootfs"
[    0.606666] mtd: device 2 (rootfs) set to be root filesystem
[    0.612525] 1 squashfs-split partitions found on MTD device rootfs
[    0.618848] 0x000000350000-0x0000007f0000 : "rootfs_data"
[    0.627077] 0x000000010000-0x0000007f0000 : "linux"
[    0.634650] 0x0000007f0000-0x000000800000 : "nvram"
[    0.644627] bcm63xx-spi 10000800.spi: at [mem 0x10000800-0x10000f0b flags 0x200] (irq 9, FIFOs size 542)
[    0.691627] b53_common: found switch: BCM63xx, rev 0
[    0.697142] bcm63xx-wdt bcm63xx-wdt:  started, timer margin: 30 sec
[    0.704980] CPU 0 Unable to handle kernel paging request at virtual address 00000000, epc == 00000000, ra == 801dd40c
[    0.715856] Oops[#1]:
[    0.718193] CPU: 0 PID: 1 Comm: swapper Not tainted 4.4.100 #0
[    0.724193] task: 8382c000 ti: 83822000 task.ti: 83822000
[    0.729740] $ 0   : 00000000 10008c00 00000000 00000174
[    0.735115] $ 4   : 7b9000c0 00000000 0000000f 00000000
[    0.740491] $ 8   : 83407094 83407000 803d522e 6c656473
[    0.745866] $12   : 2f757372 ffffff80 00000000 2f736269
[    0.751242] $16   : b0000098 00000000 0000000f 00000000
[    0.756619] $20   : 00000001 8392fd0c 00000000 83882610
[    0.761994] $24   : 00000003 801d3ee4                  
[    0.767371] $28   : 83822000 83823b20 81006994 801dd40c
[    0.772748] Hi    : 00000000
[    0.775705] Lo    : 00000174
[    0.778664] epc   : 00000000   (null)
[    0.782454] ra    : 801dd40c regmap_update_bits+0x34/0x80
[    0.787980] Status: 10008c02	KERNEL EXL 
[    0.792015] Cause : 00800008 (ExcCode 02)
[    0.796133] BadVA : 00000000
[    0.799093] PrId  : 0002a031 (Broadcom BMIPS4350)
[    0.803927] Modules linked in:
[    0.807074] Process swapper (pid: 1, threadinfo=83822000, task=8382c000, tls=00000000)
[    0.815216] Stack : 00000001 0000000a ffffffff ffffffff 803d51ac 803d518c 10010aff 803e9bf8
	  803e9a84 839ce410 10008c01 8019b944 80177b34 803d8c60 00000000 83882610
	  838e6080 8393f900 8043badc 8397ba80 0000001f 80194e6c 8392fd0c 000001ff
	  8393f900 0000001f 803bf6d0 80177b34 83823c6c 8392fd0c 8397ba80 8393f900
	  0000001f 803bf6d0 803d8c60 8019562c 81006994 839ce7f4 8392d690 000001ff
	  ...
[    0.851775] Call Trace:
[    0.854330] [] bcm6368_gpio_request_enable+0xa4/0xd0
[    0.860302] [] kasprintf+0x1c/0x28
[    0.864689] [] pin_request+0x1a0/0x25c
[    0.869435] [] kasprintf+0x1c/0x28
[    0.873828] [] pinmux_request_gpio+0x58/0x98
[    0.879114] [] pinctrl_request_gpio+0xbc/0x1a4
[    0.884583] [] class_dev_iter_next+0x18/0x54
[    0.889866] [] __gpiod_request+0x90/0x120
[    0.894889] [] gpiod_request+0x5c/0xa4
[    0.899632] [] fwnode_get_named_gpiod+0x78/0x108
[    0.905307] [] snprintf+0x18/0x24
[    0.909586] [] devm_get_gpiod_from_child+0xd4/0x174
[    0.915514] [] __kernfs_new_node+0x3c/0xec
[    0.920627] [] __of_device_is_available+0x1c/0xb0
[    0.926336] [] of_get_next_available_child+0x48/0x88
[    0.932340] [] gpio_led_probe+0x150/0x380
[    0.937363] [] repair_env_string+0x0/0x9c
[    0.942374] [] platform_drv_probe+0x28/0x70
[    0.947569] [] of_match_node+0x30/0x58
[    0.952316] [] driver_probe_device+0x124/0x28c
[    0.957783] [] platform_match+0x60/0x110
[    0.962710] [] __driver_attach+0x7c/0xb4
[    0.967663] [] next_device+0x10/0x30
[    0.972206] [] __driver_attach+0x0/0xb4
[    0.977048] [] bus_for_each_dev+0x9c/0xac
[    0.982062] [] klist_add_tail+0x24/0x50
[    0.986910] [] gpio_led_driver_init+0x0/0x10
[    0.992190] [] bus_get+0x2c/0x50
[    0.996407] [] bus_add_driver+0xe8/0x200
[    1.001327] [] kvasprintf+0x70/0x94
[    1.005808] [] gpio_led_driver_init+0x0/0x10
[    1.011092] [] driver_register+0xa8/0xf8
[    1.016022] [] gpio_led_driver_init+0x0/0x10
[    1.021308] [] gpio_led_driver_init+0x0/0x10
[    1.026608] [] do_one_initcall+0x200/0x22c
[    1.031702] [] proc_alloc_inum+0x5c/0xf8
[    1.036630] [] gpio_led_driver_init+0x0/0x10
[    1.041928] [] __of_add_property_sysfs+0xdc/0x12c
[    1.047651] [] parse_args+0x2b4/0x3ec
[    1.052332] [] __kmalloc+0xc8/0x1d8
[    1.056792] [] __of_attach_node_sysfs+0xc8/0xf4
[    1.062350] [] kernel_init_freeable+0x164/0x224
[    1.067900] [] repair_env_string+0x0/0x9c
[    1.072935] [] kernel_init+0x0/0x114
[    1.077490] [] kernel_init+0x10/0x114
[    1.082148] [] kernel_init+0x0/0x114
[    1.086715] [] ret_from_kernel_thread+0x14/0x1c
[    1.092270] 
[    1.093782] 
Code: (Bad address in epc)
[    1.097814] 
[    1.099451] ---[ end trace 3d383cfd4d315576 ]---
[    1.106838] Fatal exception: panic in 5 seconds
[    6.114832] Kernel panic - not syncing: Fatal exception
[    6.122159] Rebooting in 1 seconds..
?    7.120419] triggering watchdog soft-reset...

CFE version 1.0.37-106.24-31 for BCM96368 (32bit,SP,BE)
...... and etc. ......

More information can be found at the following URL:
https://bugs.lede-project.org/index.php?do=details&task_id=1211



More information about the lede-bugs mailing list