Re: free_initrd_mem() corrups mm state on m68knommu.
From: Lennart Sorensen
Date: Wed Sep 16 2009 - 11:45:53 EST
On Tue, Sep 15, 2009 at 05:49:59PM -0400, Lennart Sorensen wrote:
> I have been trying to solve a problem I keep seeing on m68knommu (on a
> coldfire 5271).
>
> I get:
> [42949397.330000] BUG: failure at mm/page_alloc.c:426/page_is_buddy()!
> [42949397.330000] Kernel panic - not syncing: BUG!
>
> The page_count is checked and should be 0, but is in fact 1 in this case.
>
> I am booting with an initramfs and using that as root.
>
> If I pass 'retain_initrd' then there is no problem (but I loose about
> 1MB of the 8MB of ram which isn't great). If I use nfsroot, then
> there also is no issue. It seems that the memory that is returned by
> free_initrd_mem on m68knommu is somehow not correctly initialized and
> breaks the system as soon is it is used.
>
> I don't know if the bootloader isn't reserving memory for the initrd
> correctly, or if it isn't freed properly or what the issue is. All I
> can tell so far is that not freeing the initrd memory back to the system
> makes the problem go away (instead of failing in the first 15 seconds,
> I have run for days without issue when not freeing).
>
> Of course none of the existing m68knommu targets seem to actually use
> an initrd, so I have no doubt that it hasn't had much testing lately.
>
> I have tried with a git tree checked out last friday, and it has the
> same behaviour.
>
> Here is the boot messages with some extra debuging thrown in:
>
> ## Booting kernel from Legacy Image at 00200000 ...
> Image Name: uImage
> Created: 2009-09-15 21:24:56 UTC
> Image Type: M68K Linux Multi-File Image (uncompressed)
> Data Size: 2938380 Bytes = 2.8 MB
> Load Address: 00020000
> Entry Point: 00020000
> Contents:
> Image 0: 1728512 Bytes = 1.6 MB
> Image 1: 1209856 Bytes = 1.2 MB
> Verifying Checksum ... OK
> ## Loading init Ramdisk from multi component Legacy Image at 00200000 ...
> Loading Multi-File Image ... OK
> OK
> Loading Ramdisk to 0065b000, end 00782600 ... OK
> [ 0.000000] Linux version 2.6.29.1 (root@rceng02) (gcc version 4.3.3 (GCC) ) #19 Tue Sep 15 17:26:03 EDT 2009
> [ 0.000000] initrd at 0x65b000:0x782600
> [ 0.000000]
> [ 0.000000]
> [ 0.000000] uClinux/COLDFIRE(m5270/5271)
> [ 0.000000] COLDFIRE port done by Greg Ungerer, gerg@xxxxxxxxxxxx
> [ 0.000000] Flat model support (C) 1998,1999 Kenneth Albanowski, D. Jeff Dionne
> [ 0.000000] free_bootmem(1d7000, 629000)reserve_bootmem(1d7000, 100, BOOTMEM_DEFAULT)<7>On node 0 totalpages: 2048
> [ 0.000000] Built 1 zonelists in Zone order, mobility grouping off. Total pages: 2032
> [ 0.000000] Kernel command line: rdinit=/sbin/init ip=169.254.72.5:169.254.72.4::255.255.255.0:::off ubootver=2009.06RR8 rdinit=/usr/share/bist/init system mtdparts=physmap-flash.0:256k(uboot),8064k(p01),8064k(p02),-(free)
> [ 0.000000] PID hash table entries: 32 (order: 5, 128 bytes)
> [42949372.960000] Dentry cache hash table entries: 1024 (order: 0, 4096 bytes)
> [42949372.960000] Inode-cache hash table entries: 1024 (order: 0, 4096 bytes)
> [42949372.960000] Memory available: 6220k/8192k RAM, (1535k kernel code, 218k data)
> [42949372.960000] Calibrating delay loop... 98.71 BogoMIPS (lpj=493568)
> [42949373.160000] Mount-cache hash table entries: 512
> [42949373.290000] net_namespace: 296 bytes
> [42949373.290000] NET: Registered protocol family 16
> [42949373.320000] bio: create slab <bio-0> at 0
> [42949373.340000] NET: Registered protocol family 2
> [42949373.340000] IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
> [42949373.350000] TCP established hash table entries: 512 (order: 0, 4096 bytes)
> [42949373.350000] TCP bind hash table entries: 512 (order: -1, 2048 bytes)
> [42949373.350000] TCP: Hash tables configured (established 512 bind 512)
> [42949373.350000] TCP reno registered
> [42949373.350000] NET: Registered protocol family 1
> [42949373.360000] checking if image is initramfs... it is
> [42949373.820000] Freed initrd memory: <5>65b000 <5>65c000 <5>65d000 <5>65e000 <5>65f000 <5>660000 <5>661000 <5>662000 <5>663000 <5>664000 <5>665000 <5>666000 <5>667000 <5>668000 <5>669000 <5>66a000 <5>66b000 <5>66c000 <5>66d000 <5>66e000 <5>66f000 <5>670000 <5>671000 <5>672000 <5>673000 <5>674000 <5>675000 <5>676000 <5>677000 <5>678000 <5>679000 <5>67a000 <5>67b000 <5>67c000 <5>67d000 <5>67e000 <5>67f000 <5>680000 <5>681000 <5>682000 <5>683000 <5>684000 <5>685000 <5>686000 <5>687000 <5>688000 <5>689000 <5>68a000 <5>68b000 <5>68c000 <5>68d000 <5>68e000 <5>68f000 <5>690000 <5>691000 <5>692000 <5>693000 <5>694000 <5>695000 <5>696000 <5>697000 <5>698000 <5>699000 <5>69a000 <5>69b000 <5>69c000 <5>69d000 <5>69e000 <5>69f000 <5>6a0000 <5>6a1000 <5>6a2000 <5>6a3000 <5>6a4000 <5>6a5000 <5>6a6000 <5>6a7000 <5>6a8000 <5>6a9000 <5>6aa000 <5>6ab000 <5>6ac000 <5>6ad000 <5>6ae000 <5>6af000 <5>6b0000 <5>6b1000 <5>6b2000 <5>6b3000 <5>6b4000 <5>6b5000 <5>6b6000 <5>6b7000 <5>6b8000 <5>6b9000 <
> 5>6ba000 <5>6bb000 <5>6bc000 <5>6bd000 <5>6be000 <5>6bf000 <5>6c0000 <5>6c1000 <5>6c2000 <5>6c3000 <5>6c4000 <5>6c5000 <5>6c6000 <5>6c7000 <5>6c8000 <5>6c9000 <5>6ca000 <5>6cb000 <5>6cc000 <5>6cd000 <5>6ce000 <5>6cf000 <5>6d0000 <5>6d1000 <5>6d2000 <5>6d3000 <5>6d4000 <5>6d5000 <5>6d6000 <5>6d7000 <5>6d8000 <5>6d9000 <5>6da000 <5>6db000 <5>6dc000 <5>6dd000 <5>6de000 <5>6df000 <5>6e0000 <5>6e1000 <5>6e2000 <5>6e3000 <5>6e4000 <5>6e5000 <5>6e6000 <5>6e7000 <5>6e8000 <5>6e9000 <5>6ea000 <5>6eb000 <5>6ec000 <5>6ed000 <5>6ee000 <5>6ef000 <5>6f0000 <5>6f1000 <5>6f2000 <5>6f3000 <5>6f4000 <5>6f5000 <5>6f6000 <5>6f7000 <5>6f8000 <5>6f9000 <5>6fa000 <5>6fb000 <5>6fc000 <5>6fd000 <5>6fe000 <5>6ff000 <5>700000 <5>701000 <5>702000 <5>703000 <5>704000 <5>705000 <5>706000 <5>707000 <5>708000 <5>709000 <5>70a000 <5>70b000 <5>70c000 <5>70d000 <5>70e000 <5>70f000 <5>710000 <5>711000 <5>712000 <5>713000 <5>714000 <5>715000 <5>716000 <5>717000 <5>718000 <5>719000 <5>71a000 <5>71b000 <5>71c000
> <5>71d000 <5>71e000 <5>71f000 <5>720000 <5>721000 <5>722000 <5>723000 <5>724000 <5>725000 <5>726000 <5>727000 <5>728000 <5>729000 <5>72a000 <5>72b000 <5>72c000 <5>72d000 <5>72e000 <5>72f000 <5>730000 <5>731000 <5>732000 <5>733000 <5>734000 <5>735000 <5>736000 <5>737000 <5>738000 <5>739000 <5>73a000 <5>73b000 <5>73c000 <5>73d000 <5>73e000 <5>73f000 <5>740000 <5>741000 <5>742000 <5>743000 <5>744000 <5>745000 <5>746000 <5>747000 <5>748000 <5>749000 <5>74a000 <5>74b000 <5>74c000 <5>74d000 <5>74e000 <5>74f000 <5>750000 <5>751000 <5>752000 <5>753000 <5>754000 <5>755000 <5>756000 <5>757000 <5>758000 <5>759000 <5>75a000 <5>75b000 <5>75c000 <5>75d000 <5>75e000 <5>75f000 <5>760000 <5>761000 <5>762000 <5>763000 <5>764000 <5>765000 <5>766000 <5>767000 <5>768000 <5>769000 <5>76a000 <5>76b000 <5>76c000 <5>76d000 <5>76e000 <5>76f000 <5>770000 <5>771000 <5>772000 <5>773000 <5>774000 <5>775000 <5>776000 <5>777000 <5>778000 <5>779000 <5>77a000 <5>77b000 <5>77c000 <5>77d000 <5>77e000 <5>77f000
> <5>780000 <5>781000 <5>782000 <5>
> [42949373.850000] Freeing initrd memory: 1180k freed
> [42949373.870000] io scheduler noop registered (default)
> [42949373.870000] ColdFire internal UART serial driver
> [42949373.880000] ttyS0 at MMIO 0x40000280 (irq = 79) is a ColdFire UART
> [42949373.880000] console [ttyS0] enabled
> [42949373.930000] brd: module loaded
> [42949373.960000] loop: module loaded
> [42949373.970000] FEC ENET Version 0.2
> [42949373.980000] fec: PHY @ 0x1, ID 0x00221613 -- KS8721BL
> [42949373.990000] eth0 (): not using net_device_ops yet
> [42949374.010000] eth0: ethernet 00:00:00:00:05:01
> [42949374.020000] fec: setting up smi chardev
> [42949374.030000] physmap platform flash device: 01000000 at ff000000
> [42949374.040000] physmap-flash.0: Found 1 x16 devices at 0x0 in 16-bit bank
> [42949374.050000] Amd/Fujitsu Extended Query Table at 0x0040
> [42949374.060000] physmap-flash.0: CFI does not contain boot bank location. Assuming top.
> [42949374.070000] number of CFI chips: 1
> [42949374.070000] cfi_cmdset_0002: Disabling erase-suspend-program due to code brokenness.
> [42949374.080000] 4 cmdlinepart partitions found on MTD device physmap-flash.0
> [42949374.090000] Creating 4 MTD partitions on "physmap-flash.0":
> [42949374.100000] 0x000000000000-0x000000040000 : "uboot"
> [42949374.110000] 0x000000040000-0x000000820000 : "p01"
> [42949374.130000] 0x000000820000-0x000001000000 : "p02"
> [42949374.140000] 0x000001000000-0x000001000000 : "free"
> [42949374.150000] mtd: partition "free" is out of reach -- disabled
> [42949374.160000] i2c /dev entries driver
> [42949374.250000] lm75 0-0048: hwmon0: sensor 'lm75'
> [42949374.340000] lm75 0-0049: hwmon1: sensor 'lm75'
> [42949374.390000] i2c-adapter i2c-0: ltc4215 forced at address 0x4c
> [42949374.410000] max6369_wdt: Watchdog Driver
> [42949374.420000] TCP cubic registered
> [42949374.420000] NET: Registered protocol family 17
> [42949374.440000] RPC: Registered udp transport module.
> [42949374.450000] RPC: Registered tcp transport module.
> [42949374.970000] eth0: config: auto-negotiation off, 100FDX, 100HDX, 10FDX, 10HDX.
> [42949376.000000] IP-Config: Complete:
> [42949376.010000] device=eth0, addr=169.254.72.5, mask=255.255.255.0, gw=255.255.255.255,
> [42949376.030000] host=169.254.72.5, domain=, nis-domain=(none),
> [42949376.040000] bootserver=169.254.72.4, rootserver=169.254.72.4, rootpath=
> [42949376.060000] Freeing unused kernel memory: 76k freed (0x1b2000 - 0x1c4000)
> [42949376.760000] max6369_wdt: timer margin 60 seconds
> [42949376.770000] max6369_wdt: keep-alive handler deactivated
>
> COLUMNS=271;LINES=66;export COLUMNS LINES;
> type "help" for a list of bist commands..
>
>
> Starting bist
> 00:00:04.204 ledthread: setting up fpled gpio with "echo 50 > /sys/class/gpio/export"
> 00:00:04.325 ledthread: setting up fpled gpio with "echo 52 > /sys/class/gpio/export"
> 00:00:07.682 eval_tests: found sh script eepromtest
> 00:00:07.684 platform m68kuclinux_target1 id 0x23212f62 parms "12-86-0005-[0-9][0-9][0-9] 12-86-001[0123]-[0-9][0-9][0-9]", flags "SYSTEM SELF"
> 00:00:08.297 eval_tests: found sh script lm75test
> 00:00:08.300 platform m68kuclinux_target1 id 0x23212f62 parms "0-0048/temp1_input 0-0049/temp1_input", flags "SYSTEM SELF"
> 00:00:18.252 Installing tests
> 00:00:18.336 Starting pass 1 at Tue Nov 30 00:00:18 UTC 1999
> 00:00:18.423 About to run "BISTCOUNT=1 ./lm75test 0-0048/temp1_input 0-0049/temp1_input"
> 00:00:18.431 About to run "BISTCOUNT=1 ./eepromtest 12-86-0005-[0-9][0-9][0-9] 12-86-001[0123]-[0-9][0-9][0-9]"
> 00:00:18.879 lm75test 0-0048/temp1_input 0-0049/temp1_input: PASS
> [42949397.330000] page_count(buddy)=1
> [42949397.330000] BUG: failure at mm/page_alloc.c:426/page_is_buddy()!
> [42949397.330000] Kernel panic - not syncing: BUG!
OK, seems the issue was that setup.c wasn't flagging the initrd memory
range as 'reserve_bootmem' which caused extra memory to be forced into
the mm state when it was later freed. I guess one has to be very careful
with what patches one finds lying around the internet (in this case the
uboot bootargs patch for m68knommu that we found somewhere).
Seems to work great now, and I finally made sense of how the bootmem
map is passed and what is going where. It all makes sense now.
--
Len Sorensen
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/