Modify

Opened 10 years ago

Closed 10 years ago

Last modified 4 years ago

#3264 closed defect (fixed)

Ethernet on RDC R3211 broken

Reported by: blk3398@… Owned by: florian
Priority: high Milestone: Barrier Breaker 14.07
Component: kernel Version:
Keywords: r6040 null derefernce Cc:

Description

R6040 driver fails to set valid MAC address. If MAC address is set manually via ifconfig its possible to bring up eth0 and eth1, but if one of the interfaces is accessed via IP from another host, kernel crashes.

R6040 have been build both as module and compiled into kernel - makes no difference
The board have a IC IP175c switch.
Hardware is WRT54GR ver. 1.1

Martin

root@OpenWrt:/# insmod lib/modules/2.6.24.2/r6040.ko
<6>r6040: RDC R6040 NAPI net driver,version 0.16 (10Nov2007)
<6>r6040: RDC R6040 NAPI net driver,version 0.16 (10Nov2007)
root@OpenWrt:/# br-lan: Dropping NETIF_F_UFO since no NETIF_F_HW_CSUM feature.

root@OpenWrt:/# BUG: unable to handle kernel NULL pointer dereference at virtua4
printing eip: c1867215 *pde = 00000000
Oops: 0000 #1
Modules linked in: r6040

Pid: 0, comm: swapper Not tainted (2.6.24.2ag-mw #1)
EIP: 0060:[<c1867215>] EFLAGS: 00000282 CPU: 0
EAX: c0cffbd0 EBX: c0cffbd0 ECX: 00000008 EDX: 00000040
ESI: 00000040 EDI: 0000012c EBP: 00000000 ESP: c0291f20

DS: 007b ES: 007b FS: 0000 GS: 0000 SS: 0068

Process swapper (pid: 0, ti=c0290000 task=c0274300 task.ti=c0290000)
Stack: c0274300 ee5dd000 00000040 326bcb46 00000000 c0cffbd0 00000040 0000012c

0000000b c01e3326 c01212c9 00000246 c186772d c0e89620 00013f23 00000001
c02bf038 0000000a 0000000b c0111de0 00000046 c0280128 00000000 c0111e42

Call Trace:

[<c01e3326>] <0> [<c01212c9>] <0> [<c186772d>] <0> [<c0111de0>] <0> [<c0111e42=

Code: 44 83 c8 02 0f b7 c0 89 fa e8 c1 6b 93 fe 66 83 7b 3e 7f 76 99 89 73 1c 5
EIP: [<c1867215>] SS:ESP 0068:c0291f20
Kernel panic - not syncing: Fatal exception in interrupt
Rebooting in 3 seconds..

Attachments (0)

Change History (8)

comment:1 Changed 10 years ago by florian

  • Owner changed from developers to florian
  • Status changed from new to assigned

comment:2 Changed 10 years ago by florian

  • Keywords r6040 null derefernce added; r10651 removed

Can you please :

  • turn on kernel debugging (CONFIG_KALLSYMS=y) and post the oops here again
  • indicate how did you flash/test your device, and if so provide the required patches against trunk/

Thank you

comment:3 Changed 10 years ago by info@…

I have the same problem on an arilink 525.

I did some modification to the driver, and got it working. (although, it need more fixes)

Check http://forum.x-wrt.org/index.php?topic=865.0

comment:4 follow-up: Changed 10 years ago by florian

If fixing means reverting to the old and uncleaned RDC version, then I do not take it at all, which is basically what you have put online.

comment:5 in reply to: ↑ 4 Changed 10 years ago by Bruce

It is not the same old driver.
I dont see why to drop everything. You can fix the current driver as well i work on this other. I dont pretend to make a "final" driver, as im not experienced at driver-coding.

Ill try to paste the oops with debug enabled for the old driver later.

comment:6 Changed 10 years ago by Bruce

This is the best output i managed to get. Turning ksyms on make my kernel too big, and wouldnt boot, so i had to strip some other stuff from kernel.

BUG: unable to handle kernel NULL pointer dereference at virtual address 00004
printing eip: c1c81255 *pde = 00000000
Oops: 0000 #1
Modules linked in: r6040 fuse nfs lockd sunrpc rt61pci rt2x00pci rt2x00lib mac80211 cfg80211 eeprom_93cx6 crci

Pid: 524, comm: dropbearkey Not tainted (2.6.24.7 #7)
EIP: 0060:[<c1c81255>] EFLAGS: 00000286 CPU: 0
EIP is at init_module+0x418255/0x4190e8 [r6040]
EAX: c0c26bd0 EBX: c0c26bd0 ECX: 00000008 EDX: 00000040
ESI: 00000000 EDI: 0000012c EBP: 0000000b ESP: c0e17f30

DS: 007b ES: 007b FS: 0000 GS: 0000 SS: 0068

Process dropbearkey (pid: 524, ti=c0e16000 task=c0d52a90 task.ti=c0e16000)
Stack: 00000005 ee5dd000 00000040 36209871 00000000 c0c26bd0 00000040 0000012c

0000000b c01e1f0f c0120dc1 00000246 c1c818c9 c0c27720 ffff3e8c 00000001
c02c0038 0000000a 0000000b c0111db8 00000046 c0288ce8 00000000 c0111e1a

Call Trace:

[<c01e1f0f>] net_rx_action+0x4f/0x110
[<c0120dc1>] tick_handle_periodic+0xf/0x5e
[<c1c818c9>] init_module+0x4188c9/0x4190e8 [r6040]
[<c0111db8>] do_softirq+0x35/0x75
[<c0111e1a>] do_softirq+0x22/0x26
[<c01052a3>] do_IRQ+0x55/0x68
[<c022808e>] schedule+0x1f3/0x20d
[<c0103da3>] common_interrupt+0x23/0x30
=======================

Code: 44 83 c8 02 0f b7 c0 89 fa e8 91 d3 51 fe 66 83 7b 3e 7f 76 b2 89 73 1c 5b 5e 5f 5d c3 55 57 56 53 83 e
EIP: [<c1c81255>] init_module+0x418255/0x4190e8 [r6040] SS:ESP 0068:c0e17f30
Kernel panic - not syncing: Fatal exception in interrupt
Rebooting in 3 seconds..

comment:7 Changed 10 years ago by florian

  • Resolution set to fixed
  • Status changed from assigned to closed

Fixed with [11506], [11507] and [11508]

comment:8 Changed 4 years ago by jow

  • Milestone changed from Attitude Adjustment 12.09 to Barrier Breaker 14.07

Milestone Attitude Adjustment 12.09 deleted

Add Comment

Modify Ticket

Action
as closed .
The resolution will be deleted. Next status will be 'reopened'.
Author


E-mail address and user name can be saved in the Preferences.

 
Note: See TracTickets for help on using tickets.