914011 - [B2G][Helix][stability][fengximing]The device crashed and display a blue screen during monkey test.

Status: RESOLVED INVALID

(Firefox OS Graveyard :: General, defect, P1)

Description

[lecky]

User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; aff-kingsoft-ciba; .NET4.0E; .NET4.0C)

Steps to reproduce:

1, Run monkey testing


Actual results:

1, The device occurs an exception and display a blue screen


Expected results:

1, The device is normal.

Comment 1

[lecky]

1,Please refer to the following log: 

<1>[25949, dnsmasq] [34337.424858] Unable to handle kernel NULL pointer dereference at virtual address 00000000 
<1>[25949, dnsmasq] [34337.424936] pgd = c5b94000 
<1>[25949, dnsmasq] [34337.424981] [00000000] *pgd=05d5a831, *pte=00000000, *ppte=00000000 
<0>[25949, dnsmasq] [34337.425259] Internal error: Oops: 817 [#1] PREEMPT SMP 
<4>[25949, dnsmasq] [34337.425631] Modules linked in: cfg80211 pppoe [last unloaded: ar6000] 
<4>[25949, dnsmasq] [34337.426121] CPU: 0 Not tainted (3.0.21-perf-g07d599d-00527-g7291479-dirty #1) 
<4>[25949, dnsmasq] [34337.426631] PC is at memcpy+0x244/0x330 
<4>[25949, dnsmasq] [34337.426933] LR is at 0x0 
<4>[25949, dnsmasq] [34337.427181] pc : [<c0299724>] lr : [<00000000>] psr: 20000013 
<4>[25949, dnsmasq] [34337.427221] sp : ce635a18 ip : 00000000 fp : ce635a6c 
<4>[25949, dnsmasq] [34337.427961] r10: cca55450 r9 : 00000000 r8 : 00000000 
<4>[25949, dnsmasq] [34337.434624] r7 : 00000000 r6 : 00000156 r5 : 00000024 r4 : 00000182 
<4>[25949, dnsmasq] [34337.442609] r3 : 00000001 r2 : 000000e2 r1 : c2dc5838 r0 : 00000000 
<4>[25949, dnsmasq] [34337.450599] Flags: nzCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user 
<4>[25949, dnsmasq] [34337.459193] Control: 10c5387d Table: 05d9404a DAC: 00000015 
<4>[25949, dnsmasq] [34337.466389] 
<4>[25949, dnsmasq] [34337.466411] PC: 0xc02996a4: 
...... 
...... 
...... 
...... 
...... 
...... 
<0>[25949, dnsmasq] [34337.887921] Process dnsmasq (pid: 25949, stack limit = 0xce6342f8) 
<0>[25949, dnsmasq] [34337.895559] Stack: (0xce635a18 to 0xce636000) 
<0>[25949, dnsmasq] [34337.901384] 5a00: c2269cd8 ce70f300 
<0>[25949, dnsmasq] [34337.911039] 5a20: cca55440 c2269cc0 a0000013 00000000 cca55000 c03ba1fc cca55454 d7b90900 
<0>[25949, dnsmasq] [34337.920676] 5a40: c093b13c ce70fc00 00004000 cca55000 cca55000 00000156 d76688ac d72cc1e0 
...... 
...... 
...... 
...... 
...... 
...... 
<4>[25949, dnsmasq] [34338.363921] [<c0299724>] (memcpy+0x244/0x330) from [<c2269cd8>] (0xc2269cd8) 
<0>[25949, dnsmasq] [34338.372404] Code: e1a09829 e189980c e1a0c82c e18cc80e (e8a013f8) 
<4>[25949, dnsmasq] [34338.380396] ---[ end trace 3567e846afbf2c2a ]--- 
<0>[25949, dnsmasq] [34338.386224] Kernel panic - not syncing: Fatal exception in interrupt 
<4>[25949, dnsmasq] [34338.393901] [<c005141c>] (unwind_backtrace+0x0/0x130) from [<c061a5d0>] (dump_stack+0x18/0x1c) 
<4>[25949, dnsmasq] [34338.403938] [<c061a5d0>] (dump_stack+0x18/0x1c) from [<c061a644>] (panic+0x70/0x18c) 
<4>[25949, dnsmasq] [34338.413131] [<c061a644>] (panic+0x70/0x18c) from [<c004e554>] (die+0x1a8/0x1f0) 
<4>[25949, dnsmasq] [34338.421896] [<c004e554>] (die+0x1a8/0x1f0) from [<c00553e8>] (__do_kernel_fault+0x6c/0x8c) 
<4>[25949, dnsmasq] [34338.431628] [<c00553e8>] (__do_kernel_fault+0x6c/0x8c) from [<c0620038>] (do_page_fault+0x2ec/0x314) 
<4>[25949, dnsmasq] [34338.442219] [<c0620038>] (do_page_fault+0x2ec/0x314) from [<c004427c>] (do_DataAbort+0x3c/0xa0) 
<4>[25949, dnsmasq] [34338.452368] [<c004427c>] (do_DataAbort+0x3c/0xa0) from [<c061dc2c>] (__dabt_svc+0x4c/0x60) 
<4>[25949, dnsmasq] [34338.462053] Exception stack(0xce6359d0 to 0xce635a18) 
<4>[25949, dnsmasq] [34338.468576] 59c0: 00000000 c2dc5838 000000e2 00000001 
<4>[25949, dnsmasq] [34338.478223] 59e0: 00000182 00000024 00000156 00000000 00000000 00000000 cca55450 ce635a6c 
<4>[25949, dnsmasq] [34338.487853] 5a00: 00000000 ce635a18 00000000 c0299724 20000013 ffffffff 
<4>[25949, dnsmasq] [34338.495946] [<c061dc2c>] (__dabt_svc+0x4c/0x60) from [<c0299724>] (memcpy+0x244/0x330) 
<4>[25949, dnsmasq] [34338.505309] [<c0299724>] (memcpy+0x244/0x330) from [<c2269cd8>] (0xc2269cd8) 

Please look at: [<c0299724>] (memcpy+0x244/0x330) from [<c2269cd8>] (0xc2269cd8). 
This is the end of log, this log analyzed from dump. 

2,Then I use the dump to generate dmesg.txt, the crash is the panic happend in b2g.
From dmesg, the message show, this is b2g process excepiton.
<1>[159, b2g] [24478.575559] Unable to handle kernel NULL pointer dereference at virtual address 00000000 
<1>[159, b2g] [24478.575599] pgd = d7798000 
<1>[159, b2g] [24478.575609] [00000000] *pgd=279c2831, *pte=00000000, *ppte=00000000 
<0>[159, b2g] [24478.575650] Internal error: Oops: 817 [#1] PREEMPT SMP 
<4>[159, b2g] [24478.575860] Modules linked in: cfg80211 pppoe [last unloaded: ar6000] 
<4>[159, b2g] [24478.576117] CPU: 0 Not tainted (3.0.21-perf-g07d599d-00522-ge658ec7-dirty #1) 
<4>[159, b2g] [24478.576412] PC is at memcpy+0x244/0x330 
<4>[159, b2g] [24478.576572] LR is at 0x0 
.... 
<0>[159, b2g] [24478.657622] Kernel panic - not syncing: Fatal exception in interrupt 
... 
<4>[159, b2g] [24478.657830] Exception stack(0xd78d1cc0 to 0xd78d1d08) 
… 
<4>[159, b2g] [24478.657905] [<c061dcac>] (__dabt_svc+0x4c/0x60) from [<c0299724>] (memcpy+0x244/0x330) 
<4>[159, b2g] [24478.657927] [<c0299724>] (memcpy+0x244/0x330) from [<ccf269worker/0:2] 
... 
<6>[159, b2g] [24483.462584] task PC stack pid father 
... 
<6>[159, b2g] [24483.465682] Settings D c061b3f4 4928 30957 273 0x00000000 
… 
<4>[159, b2g] [24483.465860] [<c014976c>] (__lock_page_or_retry+0x98/0xac) from [<c0149dac>] (filemap_fault+0x204/0x3f8) 
<4>[159, b2g] [24483.465885] [<c0149dac>] (filemap_fault+0x204/0x3f8) from [<c016503c>] (__do_fault+0x54/0x468) 
<4>[159, b2g] [24483.465910] [<c016503c>] (__do_fault+0x54/0x468) from [<c01659e4>] (handle_pte_fault+0x340/0xc1c) 
<4>[159, b2g] [24483.465934] [<c01659e4>] (handle_pte_fault+0x340/0xc1c) from [<c0166900>] (handle_mm_fault+0x1c8/0x1e8) 
<4>[159, b2g] [24483.465960] [<c0166900>] (handle_mm_fault+0x1c8/0x1e8) from [<c061ff38>] (do_page_fault+0x16c/0x314) 
<4>[159, b2g] [24483.465987] [<c061ff38>] (do_page_fault+0x16c/0x314) from [<c00441dc>] (do_PrefetchAbort+0x3c/0xa0) 
<4>[159, b2g] [24483.466012] [<c00441dc>] (do_PrefetchAbort+0x3c/0xa0) from [<c061e124>] (ret_from_exception+0x0/0x10) 
<4>[159, b2g] [24483.466029] Exception stack(0xcb257fb0 to 0xcb257ff8) 

please look at: <6>[159, b2g] [24483.465682] Settings D c061b3f4 4928 30957 273 0x00000000 
and this issue has occurred four times again.

Comment 2

[lecky]

Hi 
We can reproduce this issue by using 10 devices for all one night.

Comment 3

[Wayne Chang [:wchang]]

Alan, does this tie to the other monkey test bug you're checking?

Comment 4

[Alan Huang]

Hi Lecky,

It's not an user space process receive SIGSEGV. This is apparently a kernel panic, not the monkey test memory leak bug. This needs to check from below back traces:

1.
<4>[25949, dnsmasq] [34338.363921] [<c0299724>] (memcpy+0x244/0x330) from [<c2269cd8>] (0xc2269cd8) 
<0>[25949, dnsmasq] [34338.372404] Code: e1a09829 e189980c e1a0c82c e18cc80e (e8a013f8) 
<4>[25949, dnsmasq] [34338.380396] ---[ end trace 3567e846afbf2c2a ]--- 
<0>[25949, dnsmasq] [34338.386224] Kernel panic - not syncing: Fatal exception in interrupt 
<4>[25949, dnsmasq] [34338.393901] [<c005141c>] (unwind_backtrace+0x0/0x130) from [<c061a5d0>] (dump_stack+0x18/0x1c) 
<4>[25949, dnsmasq] [34338.403938] [<c061a5d0>] (dump_stack+0x18/0x1c) from [<c061a644>] (panic+0x70/0x18c) 
<4>[25949, dnsmasq] [34338.413131] [<c061a644>] (panic+0x70/0x18c) from [<c004e554>] (die+0x1a8/0x1f0) 
<4>[25949, dnsmasq] [34338.421896] [<c004e554>] (die+0x1a8/0x1f0) from [<c00553e8>] (__do_kernel_fault+0x6c/0x8c) 
<4>[25949, dnsmasq] [34338.431628] [<c00553e8>] (__do_kernel_fault+0x6c/0x8c) from [<c0620038>] (do_page_fault+0x2ec/0x314) 
<4>[25949, dnsmasq] [34338.442219] [<c0620038>] (do_page_fault+0x2ec/0x314) from [<c004427c>] (do_DataAbort+0x3c/0xa0) 
<4>[25949, dnsmasq] [34338.452368] [<c004427c>] (do_DataAbort+0x3c/0xa0) from [<c061dc2c>] (__dabt_svc+0x4c/0x60) 
<4>[25949, dnsmasq] [34338.462053] Exception stack(0xce6359d0 to 0xce635a18) 
<4>[25949, dnsmasq] [34338.468576] 59c0: 00000000 c2dc5838 000000e2 00000001 
<4>[25949, dnsmasq] [34338.478223] 59e0: 00000182 00000024 00000156 00000000 00000000 00000000 cca55450 ce635a6c 
<4>[25949, dnsmasq] [34338.487853] 5a00: 00000000 ce635a18 00000000 c0299724 20000013 ffffffff 
<4>[25949, dnsmasq] [34338.495946] [<c061dc2c>] (__dabt_svc+0x4c/0x60) from [<c0299724>] (memcpy+0x244/0x330) 
<4>[25949, dnsmasq] [34338.505309] [<c0299724>] (memcpy+0x244/0x330) from [<c2269cd8>] (0xc2269cd8) 

2.
<1>[159, b2g] [24478.575559] Unable to handle kernel NULL pointer dereference at virtual address 00000000 
<1>[159, b2g] [24478.575599] pgd = d7798000 
<1>[159, b2g] [24478.575609] [00000000] *pgd=279c2831, *pte=00000000, *ppte=00000000 
<0>[159, b2g] [24478.575650] Internal error: Oops: 817 [#1] PREEMPT SMP 
<4>[159, b2g] [24478.575860] Modules linked in: cfg80211 pppoe [last unloaded: ar6000] 
<4>[159, b2g] [24478.576117] CPU: 0 Not tainted (3.0.21-perf-g07d599d-00522-ge658ec7-dirty #1) 
<4>[159, b2g] [24478.576412] PC is at memcpy+0x244/0x330 
<4>[159, b2g] [24478.576572] LR is at 0x0 
<0>[159, b2g] [24478.657622] Kernel panic - not syncing: Fatal exception in interrupt

Comment 5

[Wayne Chang [:wchang]]

HI Lecky,

As Alan pointed out above, this is most likely a problem within your kernel.
I am assigning this bug to you, please follow up here.

Comment 6

[lecky]

Hi Wayne,

I have a suggestion about How to reproduce this issue.
if you can test for a long time and don't restart b2g process in testing proecess, it should be able to reproduce our problem.
The key is "don't restart b2g process in testing proecess". 

Thanks.

Comment 7

[Wayne Chang [:wchang]]

Marking POVB as this is a kernel bug suggested in comment 4

Comment 8

[lecky]

Hi 
We are working with Others for this issue.