Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 12 Dec 2017 13:31:47 -0800
From:      Mark Millard <markmi@dsl-only.net>
To:        Freebsd-arm <freebsd-arm@freebsd.org>, FreeBSD Hackers <freebsd-hackers@freebsd.org>
Subject:   Re: head -r326346 (corrected) kernel and before: an example rpi2 panic: pmap_remove_pages: pmap 0xc3c06??? va 0x202????? pte2 0 panic: bad pte2 (2 examples)
Message-ID:  <5E7321BA-5745-497A-ABE8-7744C6CA69A7@dsl-only.net>
In-Reply-To: <B1AFF273-7058-48B3-B97F-31105AC758E8@dsl-only.net>
References:  <B1AFF273-7058-48B3-B97F-31105AC758E8@dsl-only.net>

next in thread | previous in thread | raw e-mail | index | archive | help
[Simply a resend with a corrected Subject line.]

On 2017-Dec-12, at 3:40 AM, Mark Millard <markmi at dsl-only.net> wrote:

> -r326346 is the last kernel version that I can
> normally boot the rpi2 I use with. So I do not
> know about later versions. World was at
> -r326726 as I was bisecting a different
> issue based on kernel versions after updating
> had boot problems.
>=20
> I've only seen this type of panic a couple of
> times during the bisect, once at shutdown before
> buffers were flushed, once just after login.
> I've no, known way to reproduce this on demand.
>=20
> If I see it again, I'll try to get more
> information. I do have back traces from both
> examples below. Both involve exec_elf32_imgact .
>=20
> . . .
> Waiting for PIDS: 659pmap_remove_pages: pmap 0xc3c06564 va 0x202df000 =
pte2 0
> panic: bad pte2
> cpuid =3D 1
> time =3D 1513072659
> KDB: stack backtrace:
> db_trace_self() at db_trace_self
>         pc =3D 0xc0561a88  lr =3D 0xc005f0d4 =
(db_trace_self_wrapper+0x30)
>         sp =3D 0xc365e878  fp =3D 0xc365e990
> db_trace_self_wrapper() at db_trace_self_wrapper+0x30
>         pc =3D 0xc005f0d4  lr =3D 0xc026abdc (vpanic+0x158)
>         sp =3D 0xc365e998  fp =3D 0xc365e9b8
>         r4 =3D 0x00000100  r5 =3D 0x00000001
>         r6 =3D 0xc06e7d7a  r7 =3D 0xc0933530
> vpanic() at vpanic+0x158
>         pc =3D 0xc026abdc  lr =3D 0xc026ac7c (kproc_shutdown)
>         sp =3D 0xc365e9c0  fp =3D 0xc365e9c4
>         r4 =3D 0x00000000  r5 =3D 0x21dfb801
>         r6 =3D 0xc1e1e15c  r7 =3D 0x00000001
>         r8 =3D 0xc3c06564  r9 =3D 0xc1e1e000
>        r10 =3D 0xc1e1e19c
> kproc_shutdown() at kproc_shutdown
>         pc =3D 0xc026ac7c  lr =3D 0xc057aee8 (pmap_remove_pages+0x8e0)
>         sp =3D 0xc365e9cc  fp =3D 0xc365ea28
>         r4 =3D 0xc026ac7c  r5 =3D 0xc365e9cc
> pmap_remove_pages() at pmap_remove_pages+0x8e0
>         pc =3D 0xc057aee8  lr =3D 0xc022a304 (exec_new_vmspace+0x184)
>         sp =3D 0xc365ea30  fp =3D 0xc365ea78
>         r4 =3D 0xc3a87f1c  r5 =3D 0xc3a87f00
>         r6 =3D 0xc06a5655  r7 =3D 0xc4502730
>         r8 =3D 0xc3c064b0  r9 =3D 0xc08062c8
>        r10 =3D 0xc365ec20
> exec_new_vmspace() at exec_new_vmspace+0x184
>         pc =3D 0xc022a304  lr =3D 0xc0207d98 (exec_elf32_imgact+0x86c)
>         sp =3D 0xc365ea80  fp =3D 0xc365eb10
>         r4 =3D 0xc08062c8  r5 =3D 0xc09314fc
>         r6 =3D 0xe695c134  r7 =3D 0xc0806380
>         r8 =3D 0x00000000  r9 =3D 0xc365ec20
>        r10 =3D 0xe695c000
> exec_elf32_imgact() at exec_elf32_imgact+0x86c
>         pc =3D 0xc0207d98  lr =3D 0xc0228f98 (kern_execve+0x66c)
>         sp =3D 0xc365eb18  fp =3D 0xc365ed60
>         r4 =3D 0xc365ec20  r5 =3D 0x00000000
>         r6 =3D 0x00000004  r7 =3D 0x00000000
>         r8 =3D 0xc365ed70  r9 =3D 0xffffffff
>        r10 =3D 0xc0931ba0
> kern_execve() at kern_execve+0x66c
>         pc =3D 0xc0228f98  lr =3D 0xc0228604 (sys_execve+0x58)
>         sp =3D 0xc365ed68  fp =3D 0xc365edb0
>         r4 =3D 0xc4515740  r5 =3D 0x00000000
>         r6 =3D 0xc45159d8  r7 =3D 0x00000000
>         r8 =3D 0x00000000  r9 =3D 0xc4515740
>        r10 =3D 0xc45159d0
> sys_execve() at sys_execve+0x58
>         pc =3D 0xc0228604  lr =3D 0xc0584eac (swi_handler+0x2c4)
>         sp =3D 0xc365edb8  fp =3D 0xc365ee40
>         r4 =3D 0x200b2718  r5 =3D 0xc08242a4
>         r6 =3D 0xc4502730 r10 =3D 0xc45159d0
> swi_handler() at swi_handler+0x2c4
>         pc =3D 0xc0584eac  lr =3D 0xc056445c (swi_exit)
>         sp =3D 0xc365ee48  fp =3D 0xbfbfdf78
>         r4 =3D 0x200b2718  r5 =3D 0x200b26cc
>         r6 =3D 0x200b272c  r7 =3D 0x0000003b
>         r8 =3D 0xbfbfdf80  r9 =3D 0x200b2718
>        r10 =3D 0x00033844
> swi_exit() at swi_exit
>         pc =3D 0xc056445c  lr =3D 0xc056445c (swi_exit)
>         sp =3D 0xc365ee48  fp =3D 0xbfbfdf78
> KDB: enter: panic
> [ thread pid 811 tid 100105 ]
> Stopped at      $d.3:   ldrb    r15, [r15, r15, ror r15]!
>=20
> pmap_remove_pages: pmap 0xc3c060b4 va 0x20208000 pte2 0
> panic: bad pte2
> cpuid =3D 0
> time =3D 1513077251
> KDB: stack backtrace:
> db_trace_self() at db_trace_self
>         pc =3D 0xc0562044  lr =3D 0xc005f0d4 =
(db_trace_self_wrapper+0x30)
>         sp =3D 0xc1d8c878  fp =3D 0xc1d8c990
> db_trace_self_wrapper() at db_trace_self_wrapper+0x30
>         pc =3D 0xc005f0d4  lr =3D 0xc026abdc (vpanic+0x158)
>         sp =3D 0xc1d8c998  fp =3D 0xc1d8c9b8
>         r4 =3D 0x00000100  r5 =3D 0x00000001
>         r6 =3D 0xc06e8468  r7 =3D 0xc0933530
> vpanic() at vpanic+0x158
>         pc =3D 0xc026abdc  lr =3D 0xc026ac7c (kproc_shutdown)
>         sp =3D 0xc1d8c9c0  fp =3D 0xc1d8c9c4
>         r4 =3D 0x00000000  r5 =3D 0x15f40801
>         r6 =3D 0xc1e2d828  r7 =3D 0x00000001
>         r8 =3D 0xc3c060b4  r9 =3D 0xc1e2d000
>        r10 =3D 0xc1e2d868
> kproc_shutdown() at kproc_shutdown
>         pc =3D 0xc026ac7c  lr =3D 0xc057b4a8 (pmap_remove_pages+0x8e0)
>         sp =3D 0xc1d8c9cc  fp =3D 0xc1d8ca28
>         r4 =3D 0xc026ac7c  r5 =3D 0xc1d8c9cc
> pmap_remove_pages() at pmap_remove_pages+0x8e0
>         pc =3D 0xc057b4a8  lr =3D 0xc022a304 (exec_new_vmspace+0x184)
>         sp =3D 0xc1d8ca30  fp =3D 0xc1d8ca78
>         r4 =3D 0xc3a87f1c  r5 =3D 0xc3a87f00
>         r6 =3D 0xc06a5c55  r7 =3D 0xc49f2ac8
>         r8 =3D 0xc3c06000  r9 =3D 0xc0806b08
>        r10 =3D 0xc1d8cc20
> exec_new_vmspace() at exec_new_vmspace+0x184
>         pc =3D 0xc022a304  lr =3D 0xc0207d98 (exec_elf32_imgact+0x86c)
>         sp =3D 0xc1d8ca80  fp =3D 0xc1d8cb10
>         r4 =3D 0xc0806b08  r5 =3D 0xc09314fc
>         r6 =3D 0xe75bc134  r7 =3D 0xc0806bc0
>         r8 =3D 0x00000000  r9 =3D 0xc1d8cc20
>        r10 =3D 0xe75bc000
> exec_elf32_imgact() at exec_elf32_imgact+0x86c
>         pc =3D 0xc0207d98  lr =3D 0xc0228f98 (kern_execve+0x66c)
>         sp =3D 0xc1d8cb18  fp =3D 0xc1d8cd60
>         r4 =3D 0xc1d8cc20  r5 =3D 0x00000000
>         r6 =3D 0x00000004  r7 =3D 0x00000000
>         r8 =3D 0xc1d8cd70  r9 =3D 0xffffffff
>        r10 =3D 0xc0931ba0
> kern_execve() at kern_execve+0x66c
>         pc =3D 0xc0228f98  lr =3D 0xc0228604 (sys_execve+0x58)
>         sp =3D 0xc1d8cd68  fp =3D 0xc1d8cdb0
>         r4 =3D 0xc4994ae0  r5 =3D 0x00000000
>         r6 =3D 0xc4994d78  r7 =3D 0x00000000
>         r8 =3D 0x00000000  r9 =3D 0xc4994ae0
>        r10 =3D 0xc4994d70
> sys_execve() at sys_execve+0x58
>         pc =3D 0xc0228604  lr =3D 0xc05854ac (swi_handler+0x2c4)
>         sp =3D 0xc1d8cdb8  fp =3D 0xc1d8ce40
>         r4 =3D 0x200ef268  r5 =3D 0xc0824ae4
>         r6 =3D 0xc49f2ac8 r10 =3D 0xc4994d70
> swi_handler() at swi_handler+0x2c4
>         pc =3D 0xc05854ac  lr =3D 0xc0564a18 (swi_exit)
>         sp =3D 0xc1d8ce48  fp =3D 0xbfbfe5d0
>         r4 =3D 0x200ef268  r5 =3D 0x200ef210
>         r6 =3D 0x200ef29c  r7 =3D 0x0000003b
>         r8 =3D 0xbfbfe5d8  r9 =3D 0x200ef268
>        r10 =3D 0x00033844
> swi_exit() at swi_exit
>         pc =3D 0xc0564a18  lr =3D 0xc0564a18 (swi_exit)
>         sp =3D 0xc1d8ce48  fp =3D 0xbfbfe5d0
> KDB: enter: panic
> [ thread pid 712 tid 100152 ]
> Stopped at      $d.3:   ldrb    r15, [r15, r15, ror r15]!


=3D=3D=3D
Mark Millard
markmi at dsl-only.net





Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?5E7321BA-5745-497A-ABE8-7744C6CA69A7>