Bug#422324: linux-image-2.6.18-4-footbridge: System spontaneously reboots, logs "NWFPE: ntpd[1694] takes exception 00000001"

[Henrik Stoerner <henrik@hswn.dk>]

Package: linux-image-2.6.18-4-footbridge
Version: 2.6.18.dfsg.1-12etch1
Severity: grave
Justification: causes non-serious data loss

After updating to the kernel version released with DSA-1286-1, the system has 
begun to spontaneously reboot. This is a small Netwinder system, which has been 
running stable for 3 years now on Debian Sarge.

It also logs this message in the kernel log:
  NWFPE: ntpd[1694] takes exception 00000001 at c003118c from 0002d644
although this does not trigger the reboot (there is one such entry in 
the "dmesg" output now, and the system is still running). I'm attaching the
dmesg output.

The system runs ntpd, dhcpd, nutups, and the dnscache+tinydns utilities 
(not in Debian).

The system gets power through a UPS, so there hasn't been a power outage.

-- System Information:
Debian Release: 4.0
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: arm (armv4l)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-4-footbridge
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)

Versions of packages linux-image-2.6.18-4-footbridge depends on:
ii  coreutils                     5.97-5.3   The GNU core utilities
ii  debconf [debconf-2.0]         1.5.11     Debian configuration management sy
ii  initramfs-tools [linux-initra 0.85g      tools for generating an initramfs
ii  module-init-tools             3.3-pre4-2 tools for managing Linux kernel mo

linux-image-2.6.18-4-footbridge recommends no packages.

-- debconf information:
  linux-image-2.6.18-4-footbridge/postinst/depmod-error-2.6.18-4-footbridge: false
  shared/kernel-image/really-run-bootloader: true
  linux-image-2.6.18-4-footbridge/prerm/would-invalidate-boot-loader-2.6.18-4-footbridge: true
  linux-image-2.6.18-4-footbridge/preinst/lilo-has-ramdisk:
  linux-image-2.6.18-4-footbridge/prerm/removing-running-kernel-2.6.18-4-footbridge: true
  linux-image-2.6.18-4-footbridge/postinst/old-initrd-link-2.6.18-4-footbridge: true
  linux-image-2.6.18-4-footbridge/postinst/old-dir-initrd-link-2.6.18-4-footbridge: true
  linux-image-2.6.18-4-footbridge/preinst/abort-overwrite-2.6.18-4-footbridge:
  linux-image-2.6.18-4-footbridge/preinst/failed-to-move-modules-2.6.18-4-footbridge:
* linux-image-2.6.18-4-footbridge/preinst/already-running-this-2.6.18-4-footbridge:
  linux-image-2.6.18-4-footbridge/preinst/abort-install-2.6.18-4-footbridge:
  linux-image-2.6.18-4-footbridge/postinst/depmod-error-initrd-2.6.18-4-footbridge: false
  linux-image-2.6.18-4-footbridge/preinst/lilo-initrd-2.6.18-4-footbridge: true
  linux-image-2.6.18-4-footbridge/postinst/create-kimage-link-2.6.18-4-footbridge: true
  linux-image-2.6.18-4-footbridge/postinst/bootloader-error-2.6.18-4-footbridge:
  linux-image-2.6.18-4-footbridge/preinst/elilo-initrd-2.6.18-4-footbridge: true
  linux-image-2.6.18-4-footbridge/postinst/old-system-map-link-2.6.18-4-footbridge: true
  linux-image-2.6.18-4-footbridge/preinst/overwriting-modules-2.6.18-4-footbridge: true
  linux-image-2.6.18-4-footbridge/preinst/bootloader-initrd-2.6.18-4-footbridge: true
  linux-image-2.6.18-4-footbridge/postinst/kimage-is-a-directory:
  linux-image-2.6.18-4-footbridge/preinst/initrd-2.6.18-4-footbridge:
  linux-image-2.6.18-4-footbridge/postinst/bootloader-test-error-2.6.18-4-footbridge:

Linux version 2.6.18-4-footbridge (Debian 2.6.18.dfsg.1-12etch1) (dannf@debian.org) (gcc version 4.1.2 20061115 (prerelease) (Debian 4.1.1-21)) #1 Sun Apr 15 11:11:12 UTC 2007
CPU: StrongARM-110 [4401a104] revision 4 (ARMv4), cr=0000517f
Machine: Rebel-NetWinder
Converting old-style param struct to taglist
ATAG_INITRD is deprecated; please update your bootloader.
Memory policy: ECC disabled, Data cache writeback
On node 0 totalpages: 16384
  DMA zone: 16384 pages, LIFO batch:3
Built 1 zonelists.  Total pages: 16384
Kernel command line: ide0=autotune noinitrd root=/dev/hda2 console=tty0 netconfig_eth0=disk netconfig_eth1=disk 
ide_setup: ide0=autotune -- OBSOLETE OPTION, WILL BE REMOVED SOON!
PID hash table entries: 512 (order: 9, 2048 bytes)
start_kernel(): bug: interrupts were enabled early
Console: colour dummy device 80x30
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Memory: 64MB = 64MB total
Memory: 60208KB available (2512K code, 563K data, 116K init)
Calibrating delay loop... 185.54 BogoMIPS (lpj=927744)
Security Framework v1.0.0 initialized
SELinux:  Disabled at boot.
Capability LSM initialized
Mount-cache hash table entries: 512
CPU: Testing write buffer coherency: failed, enabling work-around
checking if image is initramfs...it isn't (bad gzip magic numbers); looks like an initrd
Freeing initrd memory: 1458K
NET: Registered protocol family 16
PCI: DC21285 footbridge, revision 03, in central function mode
PCI: bus0: Fast back to back transfers disabled
PCI: Ignore bogus resource 1 [3f6:3f6] of 0000:00:0c.1
PCI: Ignore bogus resource 3 [376:376] of 0000:00:0c.1
Linux Plug and Play Support v0.97 (c) Adam Belay
NET: Registered protocol family 2
IP route cache hash table entries: 512 (order: -1, 2048 bytes)
TCP established hash table entries: 2048 (order: 1, 8192 bytes)
TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
TCP: Hash tables configured (established 2048 bind 1024)
TCP reno registered
NetWinder Floating Point Emulator V0.97 (extended precision)
audit: initializing netlink socket (disabled)
audit(1178325292.449:1): initialized
VFS: Disk quotas dquot_6.5.1
Dquot-cache hash table entries: 1024 (order 0, 4096 bytes)
Initializing Cryptographic API
io scheduler noop registered
io scheduler anticipatory registered
io scheduler deadline registered
io scheduler cfq registered (default)
CyberPro2010: NOT enabling PCI bursts
CyberPro2010: 1024KiB VRAM, using 640x480, 31.468kHz, 59Hz
Console: switching to colour frame buffer device 80x30
isapnp: ISA Plug & Play support disabled
Thermostat: high 50.0, low 48.0, current 41.0 C, fan on.
NetWinder Button Driver Version 0.3 (C) Alex Holden <alex@linuxhacker.org> 1998.
Software Watchdog Timer: 0.07 initialized. soft_noboot=0 soft_margin=60 sec (nowayout= 0)
Serial: 21285 driver $Revision: 1.37 $
ttyFB0 at MMIO 0x42000160 (irq = -1) is a DC21285
Serial: 8250/16550 driver $Revision: 1.90 $ 4 ports, IRQ sharing disabled
serial8250.0: ttyS0 at I/O 0x3f8 (irq = 4) is a 16550A
serial8250.0: ttyS1 at I/O 0x2f8 (irq = 3) is a 16550A
RAMDISK driver initialized: 16 RAM disks of 8192K size 1024 blocksize
Uniform Multi-Platform E-IDE driver Revision: 7.00alpha2
ide: Assuming 33MHz system bus speed for PIO modes; override with idebus=xx
W82C105: IDE controller at PCI slot 0000:00:0c.1
W82C105: chipset revision 5
W82C105: 100% native mode on irq 14
    ide0: BM-DMA at 0x10a0-0x10a7, BIOS settings: hda:pio, hdb:pio
    ide1: BM-DMA at 0x10a8-0x10af, BIOS settings: hdc:pio, hdd:pio
Probing IDE interface ide0...
hda: IBM-DKLA-24320, ATA DISK drive
hda: selected PIO 4 (120ns) (0240)
ide0 at 0x10c0-0x10c7,0x3f6 on irq 14
Probing IDE interface ide1...
Probing IDE interface ide1...
hda: max request size: 128KiB
hda: 8452080 sectors (4327 MB) w/460KiB Cache, CHS=8944/15/63
hda: cache flushes not supported
 hda: hda1 hda2 hda3 < hda5 >
DC21285 flash support (8-bit bankwidth)
Found: Intel 28F008S5
DC21285 flash: Found 1 x8 devices at 0x0 in 8-bit bank
DC21285 flash: Found an alias at 0x100000 for the chip at 0x0
DC21285 flash: Found an alias at 0x200000 for the chip at 0x0
DC21285 flash: Found an alias at 0x300000 for the chip at 0x0
DC21285 flash: Found an alias at 0x400000 for the chip at 0x0
DC21285 flash: Found an alias at 0x500000 for the chip at 0x0
DC21285 flash: Found an alias at 0x600000 for the chip at 0x0
DC21285 flash: Found an alias at 0x700000 for the chip at 0x0
DC21285 flash: Found an alias at 0x800000 for the chip at 0x0
DC21285 flash: Found an alias at 0x900000 for the chip at 0x0
DC21285 flash: Found an alias at 0xa00000 for the chip at 0x0
DC21285 flash: Found an alias at 0xb00000 for the chip at 0x0
DC21285 flash: Found an alias at 0xc00000 for the chip at 0x0
DC21285 flash: Found an alias at 0xd00000 for the chip at 0x0
DC21285 flash: Found an alias at 0xe00000 for the chip at 0x0
DC21285 flash: Found an alias at 0xf00000 for the chip at 0x0
erase region 0: offset=0x0,size=0x10000,blocks=16
serio: i8042 AUX port at 0x60,0x64 irq 5
serio: i8042 KBD port at 0x60,0x64 irq 1
mice: PS/2 mouse device common for all mice
NET: Registered protocol family 1
NET: Registered protocol family 17
NET: Registered protocol family 8
NET: Registered protocol family 20
EXT3-fs: INFO: recovery required on readonly filesystem.
EXT3-fs: write access will be enabled during recovery.
input: AT Raw Set 2 keyboard as /class/input/input0
input: PS/2 Generic Mouse as /class/input/input1
kjournald starting.  Commit interval 5 seconds
EXT3-fs: recovery complete.
EXT3-fs: mounted filesystem with ordered data mode.
VFS: Mounted root (ext3 filesystem) readonly.
Freeing init memory: 116K
Linux Tulip driver version 1.1.13-NAPI (May 11, 2002)
PCI: enabling device 0000:00:0a.0 (0000 -> 0003)
tulip0:  EEPROM default media type Autosense.
tulip0:  Index #0 - Media MII (#11) described by a 21142 MII PHY (3) block.
tulip0:  MII transceiver #1 config 3000 status 7809 advertising 01e1.
eth0: Digital DS21143 Tulip rev 65 at ff001000, 00:10:57:C0:1B:E6, IRQ 22.
ne2k-pci.c:v1.03 9/22/2003 D. Becker/P. Gortmaker
  http://www.scyld.com/network/ne2k-pci.html
eth1: Winbond W89C940F found at 0x1080, IRQ 21, 00:10:57:00:1B:E6.
Adding 184708k swap on /dev/hda5.  Priority:-1 extents:1 across:184708k
EXT3 FS on hda2, internal journal
device-mapper: ioctl: 4.7.0-ioctl (2006-06-24) initialised: dm-devel@redhat.com
eth0: Setting full-duplex based on MII#1 link partner capability of 45e1.
NET: Registered protocol family 10
lo: Disabled Privacy Extensions
IPv6 over IPv4 tunneling driver
eth0: no IPv6 routers present
NWFPE: ntpd[1694] takes exception 00000001 at c003118c from 0002d644