From owner-freebsd-arm@FreeBSD.ORG Mon Dec 29 02:43:49 2014 Return-Path: Delivered-To: freebsd-arm@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id D9756928; Mon, 29 Dec 2014 02:43:49 +0000 (UTC) Received: from gromit.dlib.vt.edu (gromit.dlib.vt.edu [128.173.126.120]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "gromit.dlib.vt.edu", Issuer "Chumby Certificate Authority" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id A6CC76481B; Mon, 29 Dec 2014 02:43:49 +0000 (UTC) Received: from gromit.chumby.lan (c-71-63-94-21.hsd1.va.comcast.net [71.63.94.21]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by gromit.dlib.vt.edu (Postfix) with ESMTPSA id 9F96B570; Sun, 28 Dec 2014 21:35:25 -0500 (EST) Content-Type: text/plain; charset=iso-8859-1 Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\)) Subject: Re: vm_fault during BBB-boot From: Paul Mather In-Reply-To: <1419795385.1018.213.camel@freebsd.org> Date: Sun, 28 Dec 2014 21:35:24 -0500 Content-Transfer-Encoding: quoted-printable Message-Id: <973784F2-73A2-4421-9A11-0FCC338F59E4@gromit.dlib.vt.edu> References: <54A0376A.8080908@freenet.de> <1419789437.1018.207.camel@freebsd.org> <54A04FEB.2080809@freenet.de> <1419795385.1018.213.camel@freebsd.org> To: Ian Lepore X-Mailer: Apple Mail (2.1878.6) Cc: freebsd-arm@freebsd.org X-BeenThere: freebsd-arm@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: "Porting FreeBSD to ARM processors." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 29 Dec 2014 02:43:49 -0000 On Dec 28, 2014, at 2:36 PM, Ian Lepore wrote: > On Sun, 2014-12-28 at 19:46 +0100, Manuel St=FChn wrote: >> Am 28.12.2014 um 18:57 schrieb Ian Lepore: >>> I can't reproduce this on my BBB. I sync'd to the exact rev you = used >>> and rebuilt, installed it all on an sdcard and booted, and I boot = all >>> the way to the login prompt. I even diff'd my boot messages against = the >>> ones you posted and there are no significant differences other than >>> pathnames and compile times. >>>=20 >>> Maybe a stack backtrace would help... enter 'bt' at that db> prompt = and >>> post the output (everything from the vm_fault(...)-> 1 to the end of = the >>> backtrace). >>=20 >> [...] >> mmcsd0: 8GB at mmc0=20= >> 48.0MHz/4bit/65535-block >>=20 >> vm_fault(0xc0788e48, 0, 1, 0) -> 1 >> Fatal kernel mode data abort: 'Translation Fault (S)' >> trapframe: 0xdd0cbc60 >> FSR=3D00000005, FAR=3D00000010, spsr=3D00000113 >> r0 =3D00000000, r1 =3D00000004, r2 =3D00003d2e, r3 =3D00000137 >> r4 =3Dc2be4180, r5 =3Dc2be4180, r6 =3Dc078876c, r7 =3Dc0869a24 >> r8 =3D028f5c28, r9 =3Dc0713d48, r10=3D00000000, r11=3Ddd0cbcb0 >> r12=3D00000001, ssp=3Ddd0cbcb0, slr=3D00101010, pc =3Dc0377d64 >>=20 >> [ thread pid 12 tid 100006 ] >> Stopped at _sx_assert+0x48: ldr r14, [r0, #0x010] >> db> bt >> Tracing pid 12 tid 100006 td 0xc2a7d660 >> db_trace_self() at db_trace_self >> pc =3D 0xc05c43d4 lr =3D 0xc02324d0 (db_stack_trace+0x108) >> sp =3D 0xdd0cb960 fp =3D 0xdd0cb978 >> r10 =3D 0xc0787b70 >> db_stack_trace() at db_stack_trace+0x108 >> pc =3D 0xc02324d0 lr =3D 0xc0231e28 (db_command+0x294) >> sp =3D 0xdd0cb980 fp =3D 0xdd0cba20 >> r4 =3D 0x00000000 r5 =3D 0x00000000 >> r6 =3D 0x00000000 >> db_command() at db_command+0x294 >> pc =3D 0xc0231e28 lr =3D 0xc0231b80 (db_command_loop+0x78) >> sp =3D 0xdd0cba28 fp =3D 0xdd0cba38 >> r4 =3D 0xc060cef5 r5 =3D 0xc062832d >> r6 =3D 0xc0787b5c r7 =3D 0xc06cfce8 >> r8 =3D 0xc07235e4 r9 =3D 0xc07235e0 >> r10 =3D 0x00000001 >> db_command_loop() at db_command_loop+0x78 >> pc =3D 0xc0231b80 lr =3D 0xc0234698 (db_trap+0x108) >> sp =3D 0xdd0cba40 fp =3D 0xdd0cbb60 >> r4 =3D 0x00000000 r5 =3D 0xc0787b68 >> r6 =3D 0xc0723608 >> db_trap() at db_trap+0x108 >> pc =3D 0xc0234698 lr =3D 0xc03a8c38 (kdb_trap+0xd4) >> sp =3D 0xdd0cbb68 fp =3D 0xdd0cbb88 >> r4 =3D 0x00000000 r5 =3D 0x00000005 >> r6 =3D 0xc0723608 r7 =3D 0xc06cfce8 >> kdb_trap() at kdb_trap+0xd4 >> pc =3D 0xc03a8c38 lr =3D 0xc05d9464 (dab_fatal+0x1c0) >> sp =3D 0xdd0cbb90 fp =3D 0xdd0cbba8 >> r4 =3D 0xdd0cbc60 r5 =3D 0x00000005 >> r6 =3D 0x600001d3 r7 =3D 0x00000010 >> r8 =3D 0xc2a7d660 r9 =3D 0xdd0cbc60 >> r10 =3D 0x00000001 >> dab_fatal() at dab_fatal+0x1c0 >> pc =3D 0xc05d9464 lr =3D 0xc05d91a4 (abort_handler+0x66c) >> sp =3D 0xdd0cbbb0 fp =3D 0xdd0cbc58 >> r4 =3D 0x00000005 r5 =3D 0x00000001 >> r6 =3D 0xc0788e48 r7 =3D 0xdd0cbea0 >> abort_handler() at abort_handler+0x66c >> pc =3D 0xc05d91a4 lr =3D 0xc05c61e0 (exception_exit) >> sp =3D 0xdd0cbc60 fp =3D 0xdd0cbcb0 >> r4 =3D 0xc2be4180 r5 =3D 0xc2be4180 >> r6 =3D 0xc078876c r7 =3D 0xc0869a24 >> r8 =3D 0x028f5c28 r9 =3D 0xc0713d48 >> r10 =3D 0x00000000 >> exception_exit() at exception_exit >> pc =3D 0xc05c61e0 lr =3D 0x00101010 (0x101010) >> sp =3D 0xdd0cbcb0 fp =3D 0xdd0cbcb0 >> r0 =3D 0x00000000 r1 =3D 0x00000004 >> r2 =3D 0x00003d2e r3 =3D 0x00000137 >> r4 =3D 0xc2be4180 r5 =3D 0xc2be4180 >> r6 =3D 0xc078876c r7 =3D 0xc0869a24 >> r8 =3D 0x028f5c28 r9 =3D 0xc0713d48 >> r10 =3D 0x00000000 r12 =3D 0x00000001 >> _sx_assert() at _sx_assert+0x48 >> pc =3D 0xc0377d64 lr =3D 0xc085e4d0 ($a+0x54) >> sp =3D 0xdd0cbcb8 fp =3D 0xdd0cbdb8 >> Unknown entry: 0 >> $a() at $a+0x54 >> pc =3D 0xc085e4d0 lr =3D 0xc085e4d0 ($a+0x54) >> sp =3D 0xdd0cbcb8 fp =3D 0xdd0cbdb8 >> Unable to unwind into user mode >> db> >=20 > Well that didn't really help at all, because that output is crazy. It > says it can't unwind into user mode, but the PC in the last frame = isn't > from usermode, it's an address beyond the end of the kernel code. I > have a feeling that "unknown entry" is why the backtrace is broken. >=20 > So all in all, I'm out of ideas. We should have nearly identical > setups, except I didn't build with crochet, and thus I'm probably = using > a slightly different u-boot (a bit newer probably). I don't see how > that could lead to working vs. failing at this point. I also get this problem with a -CURRENT built today. I also updated the = files on the MS-DOS boot partition to those of the most recent = 11.0-CURRENT snapshot = (FreeBSD-11.0-CURRENT-arm-armv6-BEAGLEBONE-20141222-r276066.img.bz2), = but I get the same panic. Here is the boot output typescript: U-Boot SPL 2014.04 (Dec 24 2014 - 15:19:25) reading args spl_load_image_fat_os: error reading image args, err - -1 reading bb-uboot.img reading bb-uboot.img U-Boot 2014.04 (Dec 24 2014 - 15:19:25) I2C: ready DRAM: 512 MiB MMC: OMAP SD/MMC: 0, OMAP SD/MMC: 1 Using default environment Net: not set. Validating first E-fuse MAC cpsw, usb_ether Hit any key to stop autoboot: 1 =08=08=08 0=20 mmc0 is current device SD/MMC found on device 0 reading bb-uEnv.txt reading bbubldr 251119 bytes read in 20 ms (12 MiB/s) reading bboneblk.dtb 16176 bytes read in 6 ms (2.6 MiB/s) ## Starting application at 0x88000054 ... Consoles: U-Boot console =20 Compatible U-Boot API signature found @9f635510 FreeBSD/armv6 U-Boot loader, Revision 1.2 (root@grind.freebsd.org, Wed Dec 24 15:19:16 UTC 2014) DRAM: 512MB Number of U-Boot devices: 2 U-Boot env: loaderdev not set, will probe all devices. Found U-Boot device: disk Probing all disk devices... Checking unit=3D0 slice=3D partition=3D... good. = |=08/=08-=08\=08|=08/=08-=08\=08|=08/=08-=08\=08|=08/=08-=08\=08|=08/=08-=08= \=08|=08/=08-=08\=08|=08/=08-=08\=08|=08/=08-=08\=08|=08/=08-=08\=08|=08/=08= -=08\=08|=08/=08-=08\=08|=08/=08-=08\=08|=08/=08-=08\=08|=08/=08-=08\=08|=08= /=08-=08\=08|=08/=08-=08\=08Loading /boot/defaults/loader.conf=20 = |=08/=08-=08\=08|=08/=08-=08\=08|=08/=08-=08\=08|=08/=08-=08\=08|=08/=08-=08= \=08|=08/=08-=08\=08|=08/=08-=08\=08|=08/=08-=08\=08|=08/=08-=08\=08|=08/=08= -=08\=08|=08/=08-=08\=08|=08/=08-=08\=08|=08/=08-=08\=08|=08/=08-=08\=08|=08= /=08-=08\=08|=08/boot/kernel/kernel data=3D0x4fb948+0x3c6b8 = /=08-=08\=08|=08/=08-=08\=08|=08/=08-=08\=08|=08/=08-=08\=08|=08/=08-=08\=08= |=08/=08-=08\=08|=08/=08-=08\=08|=08/=08-=08\=08|=08/=08-=08\=08|=08/=08-=08= \=08|=08/=08-=08\=08|=08/=08-=08\=08|=08/=08-=08\=08|=08/=08-=08\=08|=08/=08= -=08\=08|=08/=08-=08\=08|=08/=08-=08\=08|=08/=08-=08\=08|=08/=08-=08\=08|=08= /=08-=08\=08|=08/=08-=08\=08|=08/=08-=08\=08|=08/=08-=08\=08|=08/=08-=08\=08= |=08/=08-=08\=08|=08/=08-=08\=08|=08/=08-=08\=08|=08/=08-=08\=08|=08/=08-=08= \=08|=08/=08-=08\=08|=08/=08-=08\=08|=08/=08-=08\=08|=08/=08-=08\=08|=08/=08= -=08\=08|=08/=08-=08\=08|=08/=08-=08\=08|=08/=08-=08\=08|=08/=08-=08\=08|=08= /=08-=08\=08|=08/=08-=08\=08|=08/=08syms=3D[0x4+0x6d6e0-=08\=08|=08/=08-=08= \=08|=08/=08-=08\=08|=08/=08-=08\=08+0x4+0x55b4b|=08/=08-=08\=08|=08/=08-=08= \=08|=08/=08-=08] = \=08|=08/=08-=08\=08|=08/=08-=08\=08|=08/=08-=08\=08|=08/=08-=08\=08|=08/=08= -=08\=08|=08/=08-=08\=08/boot/kernel/geom_label.ko text=3D0x48c4 = data=3D0x77c+0x4 syms=3D[0x4+0xd20+0x4+0xe3e] = |=08/=08-=08\=08|=08/=08-=08\=08|=08/=08-=08\=08|=08/=08-=08\=08|=08/=08-=08= \=08|=08/=08-=08\=08|=08/boot/kernel/geom_part_gpt.ko text=3D0x4020 = data=3D0x4b0+0x20 syms=3D[0x4+0x7f0+0x4+0x6e9] Hit [Enter] to boot immediately, or any other key for command prompt. Booting [/boot/kernel/kernel] in 9 seconds...=20 Booting [/boot/kernel/kernel] in 8 seconds...=20 Booting [/boot/kernel/kernel] in 7 seconds...=20 Booting [/boot/kernel/kernel] in 6 seconds...=20 Booting [/boot/kernel/kernel] in 5 seconds...=20 Booting [/boot/kernel/kernel] in 4 seconds...=20 Booting [/boot/kernel/kernel] in 3 seconds...=20 Booting [/boot/kernel/kernel] in 2 seconds...=20 Booting [/boot/kernel/kernel] in 1 second...=20 Booting [/boot/kernel/kernel]... =20 Using DTB provided by U-Boot at address 0x80000100. /=08-=08\=08|=08/=08-=08\=08Kernel entry at 0x80200100... Kernel args: (null) KDB: debugger backends: ddb KDB: current backend: ddb Copyright (c) 1992-2014 The FreeBSD Project. Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 The Regents of the University of California. All rights = reserved. FreeBSD is a registered trademark of The FreeBSD Foundation. FreeBSD 11.0-CURRENT #0 r276351: Sun Dec 28 19:07:21 EST 2014 = paul@chumby.chumby.lan:/build/obj/bbb/arm.armv6/build/src/head/sys/BEAGLEB= ONE-NO_WITNESS arm FreeBSD clang version 3.4.1 (tags/RELEASE_34/dot1-final 208032) 20140512 can't re-use a leaf (geom_part_gpt)! module_register: module g_part_gpt already exists! Module g_part_gpt failed to register: 17 CPU: Cortex A8-r3 rev 2 (Cortex-A core) Supported features: ARM_ISA THUMB2 JAZELLE THUMBEE ARMv4 Security_Ext WB disabled EABT branch prediction enabled LoUU:2 LoC:3 LoUIS:1=20 Cache level 1:=20 32KB/64B 4-way data cache WT WB Read-Alloc 32KB/64B 4-way instruction cache Read-Alloc Cache level 2:=20 256KB/64B 8-way unified cache WT WB Read-Alloc Write-Alloc real memory =3D 536870912 (512 MB) avail memory =3D 516239360 (492 MB) Texas Instruments AM3358 Processor, Revision ES1.1 random device not loaded/active; using insecure pseudo-random number = generator random: entropy device infrastructure driver random: selecting highest priority adaptor random: SOFT: yarrow init() random: selecting highest priority adaptor GEOM_PART: scheme GPT is already registered! ofwbus0: simplebus0: on ofwbus0 aintc0: mem 0x48200000-0x48200fff on = simplebus0 aintc0: Revision 5.0 ti_scm0: mem 0x44e10000-0x44e11fff on simplebus0 am335x_prcm0: mem = 0x44e00000-0x44e012ff on simplebus0 am335x_prcm0: Clocks: System 24.0 MHz, CPU 1000 MHz am335x_dmtimer0: mem = 0x44e05000-0x44e05fff,0x44e31000-0x44e31fff,0x48040000-0x48040fff,0x480420= 00-0x48042fff,0x48044000-0x48044fff,0x48046000-0x48046fff,0x48048000-0x480= 48fff,0x4804a000-0x4804afff irq 66,67,68,69,92,93,94,95 on simplebus0 Timecounter "AM335x Timecounter" frequency 24000000 Hz quality 1000 Event timer "AM335x Eventtimer" frequency 24000000 Hz quality 1000 ti_adc0: mem 0x44e0d000-0x44e0efff irq 16 on = simplebus0 ti_adc0: scheme: 0x1 func: 0x730 rtl: 0 rev: 0.1 custom rev: 0 ti_wdt0: mem 0x44e35000-0x44e35fff irq 91 on = simplebus0 gpio0: mem = 0x44e07000-0x44e07fff,0x4804c000-0x4804cfff,0x481ac000-0x481acfff,0x481ae0= 00-0x481aefff irq 96,97,98,99,32,33,62,63 on simplebus0 gpioc0: on gpio0 gpiobus0: on gpio0 gpioled0: at pin(s) 53 on gpiobus0 gpioled1: at pin(s) 54 on gpiobus0 gpioled2: at pin(s) 55 on gpiobus0 gpioled3: at pin(s) 56 on gpiobus0 uart0: mem 0x44e09000-0x44e09fff irq 72 on = simplebus0 uart0: console (115384,n,8,1) ti_edma30: mem = 0x49000000-0x490fffff,0x49800000-0x498fffff,0x49900000-0x499fffff,0x49a000= 00-0x49afffff irq 12,13,14 on simplebus0 ti_edma30: EDMA revision 40014c00 sdhci_ti0: mem 0x48060000-0x48060fff irq 64 on = simplebus0 mmc0: on sdhci_ti0 sdhci_ti1: mem 0x481d8000-0x481d8fff irq 28 on = simplebus0 mmc1: on sdhci_ti1 cpsw0: <3-port Switch Ethernet Subsystem> mem 0x4a100000-0x4a103fff irq = 40,41,42,43 on simplebus0 cpsw0: CPSW SS Version 1.12 (0) cpsw0: Initial queue size TX=3D128 RX=3D384 miibus0: on cpsw0 smscphy0: PHY 0 on miibus0 smscphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto cpsw0: Ethernet address: 90:59:af:55:26:eb iichb0: mem 0x44e0b000-0x44e0bfff irq 70 on = simplebus0 iichb0: I2C revision 4.0 FIFO size: 32 bytes iicbus0: on iichb0 iic0: on iicbus0 am335x_pmic0: at addr 0x48 on iicbus0 iichb1: mem 0x4802a000-0x4802afff irq 71 on = simplebus0 iichb1: I2C revision 4.0 FIFO size: 32 bytes iicbus1: on iichb1 iic1: on iicbus1 iichb2: mem 0x4819c000-0x4819cfff irq 30 on = simplebus0 iichb2: I2C revision 4.0 FIFO size: 32 bytes iicbus2: on iichb2 iic2: on iicbus2 am335x_pwm0: mem = 0x48300000-0x483000ff,0x48300100-0x4830017f,0x48300180-0x483001ff,0x483002= 00-0x4830025f irq 86,58 on simplebus0 am335x_pwm1: mem = 0x48302000-0x483020ff,0x48302100-0x4830217f,0x48302180-0x483021ff,0x483022= 00-0x4830225f irq 87,59 on simplebus0 am335x_pwm2: mem = 0x48304000-0x483040ff,0x48304100-0x4830417f,0x48304180-0x483041ff,0x483042= 00-0x4830425f irq 88,60 on simplebus0 musbotg0: mem = 0x47400000-0x47400fff,0x47401000-0x474012ff,0x47401300-0x474013ff,0x474014= 00-0x474017ff,0x47401800-0x47401aff,0x47401b00-0x47401bff,0x47401c00-0x474= 01fff irq 17,18,19 on simplebus0 musbotg0: TI AM335X USBSS v0.0.13 usbus0: Dynamic FIFO sizing detected, assuming 16Kbytes of FIFO RAM usbus0 on musbotg0 usbus1: Dynamic FIFO sizing detected, assuming 16Kbytes of FIFO RAM usbus1 on musbotg0 ti_pruss0: mem = 0x4a300000-0x4a37ffff irq 20,21,22,23,24,25,26,27 on simplebus0 ti_pruss0: AM33xx PRU-ICSS Timecounters tick every 10.000 msec usbus0: 480Mbps High Speed USB v2.0 usbus1: 480Mbps High Speed USB v2.0 uugen0.1: at usbus0 uhub0: = on usbus0 gen1.1: at usbus1 uhub1: = on usbus1 mmcsd0: 16GB at mmc0 = 48.0MHz/4bit/65535-block vm_fault(0xc07279c8, 0, 1, 0) -> 1 Fatal kernel mode data abort: 'Translation Fault (S)' trapframe: 0xdcfcbc50 FSR=3D00000005, FAR=3D00000010, spsr=3D80000113 r0 =3D00000000, r1 =3D00000004, r2 =3D00000010, r3 =3D00000137 r4 =3Dc03775ac, r5 =3D00000000, r6 =3Dc07272ec, r7 =3Dc0808a64 r8 =3D028f5c28, r9 =3Dc070bd48, r10=3D00000000, r11=3Ddcfcbcb0 r12=3D00003d2e, ssp=3Ddcfcbca0, slr=3Dc07fd4d0, pc =3Dc0377654 [ thread pid 12 tid 100006 ] Stopped at $a+0x54: ldr r5, [r0, #0x010] db> bt Tracing pid 12 tid 100006 td 0xc264b660 db_trace_self() at db_trace_self pc =3D 0xc05be52c lr =3D 0xc02324d0 (db_stack_trace+0x108) sp =3D 0xdcfcb950 fp =3D 0xdcfcb968 r10 =3D 0xc07266f0 db_stack_trace() at db_stack_trace+0x108 pc =3D 0xc02324d0 lr =3D 0xc0231e28 (db_command+0x294) sp =3D 0xdcfcb970 fp =3D 0xdcfcba10 r4 =3D 0x00000000 r5 =3D 0x00000000 r6 =3D 0x00000000 db_command() at db_command+0x294 pc =3D 0xc0231e28 lr =3D 0xc0231b80 (db_command_loop+0x78) sp =3D 0xdcfcba18 fp =3D 0xdcfcba28 r4 =3D 0xc0606caf r5 =3D 0xc062242f r6 =3D 0xc07266dc r7 =3D 0xc06c8bc8 r8 =3D 0xc071b5e4 r9 =3D 0xc071b5e0 r10 =3D 0x00000001 db_command_loop() at db_command_loop+0x78 pc =3D 0xc0231b80 lr =3D 0xc0234698 (db_trap+0x108) sp =3D 0xdcfcba30 fp =3D 0xdcfcbb50 --More-- =20 r4 =3D 0x00000000 r5 =3D 0xc07266e8 r6 =3D 0xc071b608 db_trap() at db_trap+0x108 pc =3D 0xc0234698 lr =3D 0xc03a839c (kdb_trap+0xd4) sp =3D 0xdcfcbb58 fp =3D 0xdcfcbb78 r4 =3D 0x00000000 r5 =3D 0x00000005 r6 =3D 0xc071b608 r7 =3D 0xc06c8bc8 kdb_trap() at kdb_trap+0xd4 pc =3D 0xc03a839c lr =3D 0xc05d35cc (dab_fatal+0x1c0) sp =3D 0xdcfcbb80 fp =3D 0xdcfcbb98 r4 =3D 0xdcfcbc50 r5 =3D 0x00000005 r6 =3D 0x600001d3 r7 =3D 0x00000010 r8 =3D 0xc264b660 r9 =3D 0x00000000 r10 =3D 0x00000001 dab_fatal() at dab_fatal+0x1c0 pc =3D 0xc05d35cc lr =3D 0xc05d3314 (abort_handler+0x65c) sp =3D 0xdcfcbba0 fp =3D 0xdcfcbc48 r4 =3D 0x00000001 r5 =3D 0xdcfcbea0 r6 =3D 0x00000000 r7 =3D 0x00000013 abort_handler() at abort_handler+0x65c --More-- =20 pc =3D 0xc05d3314 lr =3D 0xc05c0338 (exception_exit) sp =3D 0xdcfcbc50 fp =3D 0xdcfcbcb0 r4 =3D 0xc03775ac r5 =3D 0x00000000 r6 =3D 0xc07272ec r7 =3D 0xc0808a64 r8 =3D 0x028f5c28 r9 =3D 0xc070bd48 r10 =3D 0x00000000 exception_exit() at exception_exit pc =3D 0xc05c0338 lr =3D 0xc07fd4d0 ($a+0x54) sp =3D 0xdcfcbca0 fp =3D 0xdcfcbcb0 r0 =3D 0x00000000 r1 =3D 0x00000004 r2 =3D 0x00000010 r3 =3D 0x00000137 r4 =3D 0xc03775ac r5 =3D 0x00000000 r6 =3D 0xc07272ec r7 =3D 0xc0808a64 r8 =3D 0x028f5c28 r9 =3D 0xc070bd48 r10 =3D 0x00000000 r12 =3D 0x00003d2e $a() at $a+0x54 pc =3D 0xc0377654 lr =3D 0xc07fd4d0 ($a+0x54) sp =3D 0xdcfcbcb8 fp =3D 0xdcfcbdb8 r4 =3D 0xc27a2180 r5 =3D 0xc27a2180 Unknown entry: 0 --More-- =20 $a() at $a+0x54 pc =3D 0xc07fd4d0 lr =3D 0xc07fd4d0 ($a+0x54) sp =3D 0xdcfcbcb8 fp =3D 0xdcfcbdb8 Unable to unwind into user mode db>=20 The BEAGLEBONE-NO_WITNESS kernel config file is the BEAGLEBONE config = file with WITNESS options disabled: =3D=3D=3D=3D=3D include BEAGLEBONE ident BEAGLEBONE-NO_WITNESS nooption WITNESS nooption WITNESS_SKIPSPIN =3D=3D=3D=3D=3D This system was updated by cross-building on a FreeBSD/amd64 10.1-STABLE = system. The odd thing is that the RPI-B system I updated today using the same = method boots all the way to the root prompt. Cheers, Paul.=