From owner-freebsd-hackers@freebsd.org Tue Dec 12 21:31:56 2017 Return-Path: Delivered-To: freebsd-hackers@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id BCE8CE857F4 for ; Tue, 12 Dec 2017 21:31:56 +0000 (UTC) (envelope-from markmi@dsl-only.net) Received: from asp.reflexion.net (outbound-mail-210-145.reflexion.net [208.70.210.145]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 807A073D1C for ; Tue, 12 Dec 2017 21:31:55 +0000 (UTC) (envelope-from markmi@dsl-only.net) Received: (qmail 24728 invoked from network); 12 Dec 2017 21:31:49 -0000 Received: from unknown (HELO mail-cs-01.app.dca.reflexion.local) (10.81.19.1) by 0 (rfx-qmail) with SMTP; 12 Dec 2017 21:31:49 -0000 Received: by mail-cs-01.app.dca.reflexion.local (Reflexion email security v8.40.3) with SMTP; Tue, 12 Dec 2017 16:31:49 -0500 (EST) Received: (qmail 10322 invoked from network); 12 Dec 2017 21:31:49 -0000 Received: from unknown (HELO iron2.pdx.net) (69.64.224.71) by 0 (rfx-qmail) with (AES256-SHA encrypted) SMTP; 12 Dec 2017 21:31:49 -0000 Received: from [192.168.1.25] (c-76-115-7-162.hsd1.or.comcast.net [76.115.7.162]) by iron2.pdx.net (Postfix) with ESMTPSA id 55B69EC8FE9; Tue, 12 Dec 2017 13:31:48 -0800 (PST) From: Mark Millard Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) Subject: Re: head -r326346 (corrected) kernel and before: an example rpi2 panic: pmap_remove_pages: pmap 0xc3c06??? va 0x202????? pte2 0 panic: bad pte2 (2 examples) Date: Tue, 12 Dec 2017 13:31:47 -0800 References: To: Freebsd-arm , FreeBSD Hackers In-Reply-To: Message-Id: <5E7321BA-5745-497A-ABE8-7744C6CA69A7@dsl-only.net> X-Mailer: Apple Mail (2.3273) X-BeenThere: freebsd-hackers@freebsd.org X-Mailman-Version: 2.1.25 Precedence: list List-Id: Technical Discussions relating to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Dec 2017 21:31:56 -0000 [Simply a resend with a corrected Subject line.] On 2017-Dec-12, at 3:40 AM, Mark Millard wrote: > -r326346 is the last kernel version that I can > normally boot the rpi2 I use with. So I do not > know about later versions. World was at > -r326726 as I was bisecting a different > issue based on kernel versions after updating > had boot problems. >=20 > I've only seen this type of panic a couple of > times during the bisect, once at shutdown before > buffers were flushed, once just after login. > I've no, known way to reproduce this on demand. >=20 > If I see it again, I'll try to get more > information. I do have back traces from both > examples below. Both involve exec_elf32_imgact . >=20 > . . . > Waiting for PIDS: 659pmap_remove_pages: pmap 0xc3c06564 va 0x202df000 = pte2 0 > panic: bad pte2 > cpuid =3D 1 > time =3D 1513072659 > KDB: stack backtrace: > db_trace_self() at db_trace_self > pc =3D 0xc0561a88 lr =3D 0xc005f0d4 = (db_trace_self_wrapper+0x30) > sp =3D 0xc365e878 fp =3D 0xc365e990 > db_trace_self_wrapper() at db_trace_self_wrapper+0x30 > pc =3D 0xc005f0d4 lr =3D 0xc026abdc (vpanic+0x158) > sp =3D 0xc365e998 fp =3D 0xc365e9b8 > r4 =3D 0x00000100 r5 =3D 0x00000001 > r6 =3D 0xc06e7d7a r7 =3D 0xc0933530 > vpanic() at vpanic+0x158 > pc =3D 0xc026abdc lr =3D 0xc026ac7c (kproc_shutdown) > sp =3D 0xc365e9c0 fp =3D 0xc365e9c4 > r4 =3D 0x00000000 r5 =3D 0x21dfb801 > r6 =3D 0xc1e1e15c r7 =3D 0x00000001 > r8 =3D 0xc3c06564 r9 =3D 0xc1e1e000 > r10 =3D 0xc1e1e19c > kproc_shutdown() at kproc_shutdown > pc =3D 0xc026ac7c lr =3D 0xc057aee8 (pmap_remove_pages+0x8e0) > sp =3D 0xc365e9cc fp =3D 0xc365ea28 > r4 =3D 0xc026ac7c r5 =3D 0xc365e9cc > pmap_remove_pages() at pmap_remove_pages+0x8e0 > pc =3D 0xc057aee8 lr =3D 0xc022a304 (exec_new_vmspace+0x184) > sp =3D 0xc365ea30 fp =3D 0xc365ea78 > r4 =3D 0xc3a87f1c r5 =3D 0xc3a87f00 > r6 =3D 0xc06a5655 r7 =3D 0xc4502730 > r8 =3D 0xc3c064b0 r9 =3D 0xc08062c8 > r10 =3D 0xc365ec20 > exec_new_vmspace() at exec_new_vmspace+0x184 > pc =3D 0xc022a304 lr =3D 0xc0207d98 (exec_elf32_imgact+0x86c) > sp =3D 0xc365ea80 fp =3D 0xc365eb10 > r4 =3D 0xc08062c8 r5 =3D 0xc09314fc > r6 =3D 0xe695c134 r7 =3D 0xc0806380 > r8 =3D 0x00000000 r9 =3D 0xc365ec20 > r10 =3D 0xe695c000 > exec_elf32_imgact() at exec_elf32_imgact+0x86c > pc =3D 0xc0207d98 lr =3D 0xc0228f98 (kern_execve+0x66c) > sp =3D 0xc365eb18 fp =3D 0xc365ed60 > r4 =3D 0xc365ec20 r5 =3D 0x00000000 > r6 =3D 0x00000004 r7 =3D 0x00000000 > r8 =3D 0xc365ed70 r9 =3D 0xffffffff > r10 =3D 0xc0931ba0 > kern_execve() at kern_execve+0x66c > pc =3D 0xc0228f98 lr =3D 0xc0228604 (sys_execve+0x58) > sp =3D 0xc365ed68 fp =3D 0xc365edb0 > r4 =3D 0xc4515740 r5 =3D 0x00000000 > r6 =3D 0xc45159d8 r7 =3D 0x00000000 > r8 =3D 0x00000000 r9 =3D 0xc4515740 > r10 =3D 0xc45159d0 > sys_execve() at sys_execve+0x58 > pc =3D 0xc0228604 lr =3D 0xc0584eac (swi_handler+0x2c4) > sp =3D 0xc365edb8 fp =3D 0xc365ee40 > r4 =3D 0x200b2718 r5 =3D 0xc08242a4 > r6 =3D 0xc4502730 r10 =3D 0xc45159d0 > swi_handler() at swi_handler+0x2c4 > pc =3D 0xc0584eac lr =3D 0xc056445c (swi_exit) > sp =3D 0xc365ee48 fp =3D 0xbfbfdf78 > r4 =3D 0x200b2718 r5 =3D 0x200b26cc > r6 =3D 0x200b272c r7 =3D 0x0000003b > r8 =3D 0xbfbfdf80 r9 =3D 0x200b2718 > r10 =3D 0x00033844 > swi_exit() at swi_exit > pc =3D 0xc056445c lr =3D 0xc056445c (swi_exit) > sp =3D 0xc365ee48 fp =3D 0xbfbfdf78 > KDB: enter: panic > [ thread pid 811 tid 100105 ] > Stopped at $d.3: ldrb r15, [r15, r15, ror r15]! >=20 > pmap_remove_pages: pmap 0xc3c060b4 va 0x20208000 pte2 0 > panic: bad pte2 > cpuid =3D 0 > time =3D 1513077251 > KDB: stack backtrace: > db_trace_self() at db_trace_self > pc =3D 0xc0562044 lr =3D 0xc005f0d4 = (db_trace_self_wrapper+0x30) > sp =3D 0xc1d8c878 fp =3D 0xc1d8c990 > db_trace_self_wrapper() at db_trace_self_wrapper+0x30 > pc =3D 0xc005f0d4 lr =3D 0xc026abdc (vpanic+0x158) > sp =3D 0xc1d8c998 fp =3D 0xc1d8c9b8 > r4 =3D 0x00000100 r5 =3D 0x00000001 > r6 =3D 0xc06e8468 r7 =3D 0xc0933530 > vpanic() at vpanic+0x158 > pc =3D 0xc026abdc lr =3D 0xc026ac7c (kproc_shutdown) > sp =3D 0xc1d8c9c0 fp =3D 0xc1d8c9c4 > r4 =3D 0x00000000 r5 =3D 0x15f40801 > r6 =3D 0xc1e2d828 r7 =3D 0x00000001 > r8 =3D 0xc3c060b4 r9 =3D 0xc1e2d000 > r10 =3D 0xc1e2d868 > kproc_shutdown() at kproc_shutdown > pc =3D 0xc026ac7c lr =3D 0xc057b4a8 (pmap_remove_pages+0x8e0) > sp =3D 0xc1d8c9cc fp =3D 0xc1d8ca28 > r4 =3D 0xc026ac7c r5 =3D 0xc1d8c9cc > pmap_remove_pages() at pmap_remove_pages+0x8e0 > pc =3D 0xc057b4a8 lr =3D 0xc022a304 (exec_new_vmspace+0x184) > sp =3D 0xc1d8ca30 fp =3D 0xc1d8ca78 > r4 =3D 0xc3a87f1c r5 =3D 0xc3a87f00 > r6 =3D 0xc06a5c55 r7 =3D 0xc49f2ac8 > r8 =3D 0xc3c06000 r9 =3D 0xc0806b08 > r10 =3D 0xc1d8cc20 > exec_new_vmspace() at exec_new_vmspace+0x184 > pc =3D 0xc022a304 lr =3D 0xc0207d98 (exec_elf32_imgact+0x86c) > sp =3D 0xc1d8ca80 fp =3D 0xc1d8cb10 > r4 =3D 0xc0806b08 r5 =3D 0xc09314fc > r6 =3D 0xe75bc134 r7 =3D 0xc0806bc0 > r8 =3D 0x00000000 r9 =3D 0xc1d8cc20 > r10 =3D 0xe75bc000 > exec_elf32_imgact() at exec_elf32_imgact+0x86c > pc =3D 0xc0207d98 lr =3D 0xc0228f98 (kern_execve+0x66c) > sp =3D 0xc1d8cb18 fp =3D 0xc1d8cd60 > r4 =3D 0xc1d8cc20 r5 =3D 0x00000000 > r6 =3D 0x00000004 r7 =3D 0x00000000 > r8 =3D 0xc1d8cd70 r9 =3D 0xffffffff > r10 =3D 0xc0931ba0 > kern_execve() at kern_execve+0x66c > pc =3D 0xc0228f98 lr =3D 0xc0228604 (sys_execve+0x58) > sp =3D 0xc1d8cd68 fp =3D 0xc1d8cdb0 > r4 =3D 0xc4994ae0 r5 =3D 0x00000000 > r6 =3D 0xc4994d78 r7 =3D 0x00000000 > r8 =3D 0x00000000 r9 =3D 0xc4994ae0 > r10 =3D 0xc4994d70 > sys_execve() at sys_execve+0x58 > pc =3D 0xc0228604 lr =3D 0xc05854ac (swi_handler+0x2c4) > sp =3D 0xc1d8cdb8 fp =3D 0xc1d8ce40 > r4 =3D 0x200ef268 r5 =3D 0xc0824ae4 > r6 =3D 0xc49f2ac8 r10 =3D 0xc4994d70 > swi_handler() at swi_handler+0x2c4 > pc =3D 0xc05854ac lr =3D 0xc0564a18 (swi_exit) > sp =3D 0xc1d8ce48 fp =3D 0xbfbfe5d0 > r4 =3D 0x200ef268 r5 =3D 0x200ef210 > r6 =3D 0x200ef29c r7 =3D 0x0000003b > r8 =3D 0xbfbfe5d8 r9 =3D 0x200ef268 > r10 =3D 0x00033844 > swi_exit() at swi_exit > pc =3D 0xc0564a18 lr =3D 0xc0564a18 (swi_exit) > sp =3D 0xc1d8ce48 fp =3D 0xbfbfe5d0 > KDB: enter: panic > [ thread pid 712 tid 100152 ] > Stopped at $d.3: ldrb r15, [r15, r15, ror r15]! =3D=3D=3D Mark Millard markmi at dsl-only.net