[Prism54-devel] kfree_skb passed an skb still on a list

[Bruno Randolf]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

hello!

i also have stability problems with prism54 on my meshcube (mipsel). i have 
one cube as AP and another one as client, both with EZWFM05 miniPCI cards 
(isl3880) from eazix. it crashes about every hour, when i permanently 
generate traffic with netperf. i'm using kernel 2.4.24 and prism54 1.2. this 
error occurred with firmware 1.0.4.3. i also tried 1.0.3.0, where it ran for 
about 3 hours without problems.

now i catched this oops on the serial console, hope it is of some value.
this is the error fed thru ksymoops:

Warning: kfree_skb passed an skb still on a list (from 8020c344).
Break instruction in kernel code in traps.c::do_bp, line 591:
$0 : 00000000 1000fc00 00000045 00000001 00000000 82978000 0000001f 802b6920
$8 : 00000001 ffffd875 00001875 00000000 fffffffe ffffffff 00000010 00000007
$16: 803a6080 803a6080 fffffffd 1000fc00 82979e60 10001304 7fff7bf8 7fff79ec
$24: 82979cdf 80314b0f                   82978000 82979dc0 7fff7750 8020710c
Hi : 00000000
Lo : 00000000
epc   : 8020710c    Not tainted
Using defaults from ksymoops -t elf32-tradlittlemips -a mips:3000
Status: 1000fc03
Cause : 00800024
Process netserver (pid: 2115, stackpage=82978000)
Stack:    82979e60 8020c344 00000000 803101a0 829b40c0 8020c344 00000000
 ffffdfff 811d39c0 02000001 00000000 802cf070 8011610c 416cc350 82979e68
 00000001 00000000 4620a500 802ce020 811d39c0 fffffffb 00000001 80101340
 828ed768 00015554 100076f0 00000000 00e61a80 1001cc50 0000288d 00000003
 00000002 10001308 80283708 00000000 801b47f0 82979e40 00000001 80282ba8
 416cc29b ...
Call Trace:   [<8020c344>] [<8020c344>] [<8011610c>] [<80101340>] [<80283708>]
 [<801b47f0>] [<80282ba8>] [<80206ec0>] [<80204468>] [<8020447c>] [<80204370>]
 [<80283708>] [<801074e0>] [<801045e8>] [<80160178>]
Code: 3c04802a  0c0443d8  2484c54c <0000800d> 08081be5  8e03002c  3c028033  
8c4
Error (Oops_code_values): invalid value 0x8c4 in Code line, must be 2, 4, 8 or 
16 digits, value ignored


>>$5; 82978000 <_end+2640fc0/3fe3d020>
>>$7; 802b6920 <print_memory_map+d4/100>
>>$16; 803a6080 <_end+6f040/3fe3d020>
>>$17; 803a6080 <_end+6f040/3fe3d020>
>>$20; 82979e60 <_end+2642e20/3fe3d020>
>>$24; 82979cdf <_end+2642c9f/3fe3d020>
>>$25; 80314b0f <printk_buf.4+3ff/400>
>>$28; 82978000 <_end+2640fc0/3fe3d020>
>>$29; 82979dc0 <_end+2642d80/3fe3d020>
>>$31; 8020710c <__kfree_skb+194/1a0>

>>PC;  8020710c <__kfree_skb+194/1a0>   <=====

Trace; 8020c344 <net_tx_action+84/14c>
Trace; 8020c344 <net_tx_action+84/14c>
Trace; 8011610c <do_softirq+17c/184>
Trace; 80101340 <do_IRQ+114/11c>
Trace; 80283708 <intc0_req0_irqdispatch+80/8c>
Trace; 801b47f0 <fpu_emu+99c/d90>
Trace; 80282ba8 <au1000_IRQ+128/1a0>
Trace; 80206ec0 <kfree_skbmem+14/cc>
Trace; 80204468 <sys_recv+0/20>
Trace; 8020447c <sys_recv+14/20>
Trace; 80204370 <sys_recvfrom+0/f8>
Trace; 80283708 <intc0_req0_irqdispatch+80/8c>
Trace; 801074e0 <stack_done+1c/38>
Trace; 801045e8 <handle_cpu_int+20/38>
Trace; 80160178 <create_proc_entry+58/d0>

Code;  80207100 <__kfree_skb+188/1a0>
00000000 <_PC>:
Code;  80207100 <__kfree_skb+188/1a0>
   0:   3c04802a  lui     a0,0x802a
Code;  80207104 <__kfree_skb+18c/1a0>
   4:   0c0443d8  jal     110f60 <_PC+0x110f60>
Code;  80207108 <__kfree_skb+190/1a0>
   8:   2484c54c  addiu   a0,a0,-15028
Code;  8020710c <__kfree_skb+194/1a0>   <=====
   c:   0000800d  break   0x0,0x200   <=====
Code;  80207110 <__kfree_skb+198/1a0>
  10:   08081be5  j       206f94 <_PC+0x206f94>
Code;  80207114 <__kfree_skb+19c/1a0>
  14:   8e03002c  lw      v1,44(s0)
Code;  80207118 <skb_clone+0/2a0>
  18:   3c028033  lui     v0,0x8033

Kernel panic: Aiee, killing interrupt handler!
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFA96Hpfg2jtUL97G4RAhGLAJ0XdVNe6tmpN4Z720T014cLpO2gAwCgkZUr
DPihkYDT0F+R9oLY/tlQ8o8=
=lAOT
-----END PGP SIGNATURE-----