Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 5 Nov 2015 11:48:59 +0100
From:      Lars Engels <lars.engels@0x20.net>
To:        arm@freebsd.org
Subject:   [Banana Pi] Fatal kernel mode data abort: 'Alignment Fault' on read
Message-ID:  <20151105104859.GQ66179@e-new.0x20.net>

next in thread | raw e-mail | index | archive | help

--waqf3ldl5CnEMrQn
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Using FreeBSD-armv6-11.0-A20-290366.img I can reproducible crash the
kernel by USB-tethering the Banana Pi to a mobile phone and run "
pkg bootstrap". It looks like this:

root@bananapi:/ # pkg bootstrap
The package management tool is not yet installed on your system.
Do you want to fetch and install it now? [y/N]: y
Bootstrapping pkg from pkg+http://pkg.FreeBSD.org/FreeBSD:11:armv6/latest, =
please wait...
Fatal kernel mode data abort: 'Alignment Fault' on read
trapframe: 0xea576a90
FSR=3D00000001, FAR=3Dc43a1d6e, spsr=3D60000113
r0 =3D00000014, r1 =3D0000003c, r2 =3D0000003c, r3 =3D00000903
r4 =3D00000000, r5 =3Dc43a1d6a, r6 =3D00000028, r7 =3Dc43a1d56
r8 =3D00000000, r9 =3D00000014, r10=3D00000028, r11=3Dea576bf8
r12=3D00000000, ssp=3Dea576b20, slr=3Dc061aba4, pc =3Dc04f68e8

[ thread pid 13 tid 100024 ]
Stopped at      tcp_input+0x820:        ldr     r0, [r5, #0x004]
db> bt
Tracing pid 13 tid 100024 td 0xc3d8ea20
db_trace_self() at db_trace_self
         pc =3D 0xc061795c  lr =3D 0xc0241d10 (db_stack_trace+0x108)
         sp =3D 0xea576778  fp =3D 0xea576790
        r10 =3D 0xc07fbae0
db_stack_trace() at db_stack_trace+0x108
         pc =3D 0xc0241d10  lr =3D 0xc024175c (db_command+0x388)
         sp =3D 0xea576798  fp =3D 0xea576838
         r4 =3D 0x00000000  r5 =3D 0x00000000
         r6 =3D 0x00000000 r10 =3D 0xc07fbae0
db_command() at db_command+0x388
         pc =3D 0xc024175c  lr =3D 0xc02413c4 (db_command_loop+0x74)
         sp =3D 0xea576840  fp =3D 0xea576850
         r4 =3D 0xc0663bc0  r5 =3D 0xc06817f5
         r6 =3D 0xc07fbacc  r7 =3D 0xea576a90
         r8 =3D 0xc0797d60  r9 =3D 0xc073e8f4
        r10 =3D 0xc0797d64
db_command_loop() at db_command_loop+0x74
         pc =3D 0xc02413c4  lr =3D 0xc0243ef4 (db_trap+0x108)
         sp =3D 0xea576858  fp =3D 0xea576970
         r4 =3D 0x00000000  r5 =3D 0xc07fbad8
         r6 =3D 0xc0797d88 r10 =3D 0xc0797d64
db_trap() at db_trap+0x108
         pc =3D 0xc0243ef4  lr =3D 0xc03be9dc (kdb_trap+0x184)
         sp =3D 0xea576978  fp =3D 0xea5769a0
         r4 =3D 0x00000000  r5 =3D 0x00000001
         r6 =3D 0xc0797d88  r7 =3D 0xea576a90
kdb_trap() at kdb_trap+0x184
         pc =3D 0xc03be9dc  lr =3D 0xc062f83c (abort_fatal+0x1d4)
         sp =3D 0xea5769a8  fp =3D 0xea5769c8
         r4 =3D 0xea576a90  r5 =3D 0x00000013
         r6 =3D 0xc43a1d6e  r7 =3D 0x00000001
         r8 =3D 0x00000001  r9 =3D 0xc3d8ea20
        r10 =3D 0x00000013
abort_fatal() at abort_fatal+0x1d4
         pc =3D 0xc062f83c  lr =3D 0xc062f8fc (uiomove_fromphys)
         sp =3D 0xea5769d0  fp =3D 0xea5769e8
         r4 =3D 0xea576a90  r5 =3D 0xc3d8ea20
         r6 =3D 0x00000001  r7 =3D 0x00000001
         r8 =3D 0xc43a1d6e r10 =3D 0x00000013
uiomove_fromphys() at uiomove_fromphys
         pc =3D 0xc062f8fc  lr =3D 0xc062f5d4 (abort_handler+0x448)
         sp =3D 0xea5769f0  fp =3D 0xea576a88
         r4 =3D 0xc062f8fc  r5 =3D 0x00000000
         r6 =3D 0xc3d8ea20  r7 =3D 0xea576a10
         r8 =3D 0x00000013  r9 =3D 0xea576a90
        r10 =3D 0xc062f84c
abort_handler() at abort_handler+0x448
         pc =3D 0xc062f5d4  lr =3D 0xc0618ff4 (exception_exit)
         sp =3D 0xea576a90  fp =3D 0xea576bf8
         r4 =3D 0x00000000  r5 =3D 0xc43a1d6a
         r6 =3D 0x00000028  r7 =3D 0xc43a1d56
         r8 =3D 0x00000000  r9 =3D 0x00000014
        r10 =3D 0x00000028
exception_exit() at exception_exit
         pc =3D 0xc0618ff4  lr =3D 0xc061aba4 (in_cksum+0x3c)
         sp =3D 0xea576b20  fp =3D 0xea576bf8
         r0 =3D 0x00000014  r1 =3D 0x0000003c
         r2 =3D 0x0000003c  r3 =3D 0x00000903
         r4 =3D 0x00000000  r5 =3D 0xc43a1d6a
         r6 =3D 0x00000028  r7 =3D 0xc43a1d56
         r8 =3D 0x00000000  r9 =3D 0x00000014
        r10 =3D 0x00000028 r12 =3D 0x00000000
tcp_input() at tcp_input+0x824
         pc =3D 0xc04f68ec  lr =3D 0xc04811f0 (ip_input+0x164)
         sp =3D 0xea576c00  fp =3D 0xea576c38
         r4 =3D 0xc43a1d56  r5 =3D 0xc43f00b8
         r6 =3D 0x00000016  r7 =3D 0x00000000
         r8 =3D 0x00000000  r9 =3D 0xc0771720
        r10 =3D 0xc07fe444
ip_input() at ip_input+0x164
         pc =3D 0xc04811f0  lr =3D 0xc045fea0 (netisr_dispatch_src+0xc4)
         sp =3D 0xea576c40  fp =3D 0xea576c68
         r4 =3D 0x00000001  r5 =3D 0xc43a1d00
         r6 =3D 0x00000000  r7 =3D 0xc07f78b0
         r8 =3D 0x00000800  r9 =3D 0xc07f78f8
        r10 =3D 0xc3d69400
netisr_dispatch_src() at netisr_dispatch_src+0xc4
         pc =3D 0xc045fea0  lr =3D 0xc045bf90 (ether_demux+0x1c4)
         sp =3D 0xea576c70  fp =3D 0xea576c80
         r4 =3D 0xc3d69400  r5 =3D 0x00000800
         r6 =3D 0xc43a1d48  r7 =3D 0xc43a1d10
         r8 =3D 0x00000800  r9 =3D 0xc07f7978
        r10 =3D 0xc3d69400
ether_demux() at ether_demux+0x1c4
         pc =3D 0xc045bf90  lr =3D 0xc045cd84 (ether_nh_input+0x3c4)
         sp =3D 0xea576c88  fp =3D 0xea576ca8
         r4 =3D 0xc3d69400  r5 =3D 0xc43a1d00
ether_nh_input() at ether_nh_input+0x3c4
         pc =3D 0xc045cd84  lr =3D 0xc045fea0 (netisr_dispatch_src+0xc4)
         sp =3D 0xea576cb0  fp =3D 0xea576cd8
         r4 =3D 0x00000005  r5 =3D 0xc43a1d00
         r6 =3D 0x00000000  r7 =3D 0xc07f7930
         r8 =3D 0xc0695640 r10 =3D 0xc3d69400
netisr_dispatch_src() at netisr_dispatch_src+0xc4
         pc =3D 0xc045fea0  lr =3D 0xc045c2c0 (ether_input+0x60)
         sp =3D 0xea576ce0  fp =3D 0xea576cf8
         r4 =3D 0xc3d69400  r5 =3D 0xc43a1d00
         r6 =3D 0x00000000  r7 =3D 0x00000000
         r8 =3D 0xc0695640  r9 =3D 0xc0695653
        r10 =3D 0xc3d69400
ether_input() at ether_input+0x60
         pc =3D 0xc045c2c0  lr =3D 0xc5764d88 (uether_rxflush+0x84)
         sp =3D 0xea576d00  fp =3D 0xea576d18
         r4 =3D 0xc4474800  r5 =3D 0xc3d69400
         r6 =3D 0xc5764f4f  r7 =3D 0xc43a1d00
         r8 =3D 0x00000000  r9 =3D 0xc48ee0c0
uether_rxflush() at uether_rxflush+0x84
         pc =3D 0xc5764d88  lr =3D 0xc47b47e8 (urndis_bulk_read_callback+0x=
3a4)
         sp =3D 0xea576d20  fp =3D 0xea576d98
         r4 =3D 0xc4474800  r5 =3D 0xc3d69400
         r6 =3D 0xc47bdae0  r7 =3D 0xc48eeaa0
         r8 =3D 0x00000076 r10 =3D 0xc3d69400
urndis_bulk_read_callback() at urndis_bulk_read_callback+0x3a4
         pc =3D 0xc47b47e8  lr =3D 0xc02a528c (usbd_callback_wrapper+0x6cc)
         sp =3D 0xea576da0  fp =3D 0xea576dd8
         r4 =3D 0xc48ee0c0  r5 =3D 0xc48ee173
         r6 =3D 0xc066e31c  r7 =3D 0xc448c4b8
         r8 =3D 0xc48ee000  r9 =3D 0xc078632c
        r10 =3D 0xc48ee030
usbd_callback_wrapper() at usbd_callback_wrapper+0x6cc
         pc =3D 0xc02a528c  lr =3D 0xc02a6550 (usb_command_wrapper+0x174)
         sp =3D 0xea576de0  fp =3D 0xea576df8
         r4 =3D 0xc48ee030  r5 =3D 0xc078632c
         r6 =3D 0xc066e66b  r7 =3D 0xc066e692
         r8 =3D 0x00000000  r9 =3D 0xc066e67f
        r10 =3D 0xc3e28d0c
usb_command_wrapper() at usb_command_wrapper+0x174
         pc =3D 0xc02a6550  lr =3D 0xc02a5498 (usb_callback_proc+0x68)
         sp =3D 0xea576e00  fp =3D 0xea576e08
         r4 =3D 0xc066e31c  r5 =3D 0xc48ee000
         r6 =3D 0xc48ee044  r7 =3D 0xc066dc12
         r8 =3D 0xc0786374  r9 =3D 0xc066dc1e
usb_callback_proc() at usb_callback_proc+0x68
         pc =3D 0xc02a5498  lr =3D 0xc02a0354 (usb_process+0xdc)
         sp =3D 0xea576e10  fp =3D 0xea576e30
         r4 =3D 0xc3e28cfc  r5 =3D 0xc3e28d04
usb_process() at usb_process+0xdc
         pc =3D 0xc02a0354  lr =3D 0xc034da54 (fork_exit+0xa0)
         sp =3D 0xea576e38  fp =3D 0xea576e50
         r4 =3D 0xc3d8ea20  r5 =3D 0xc3d88000
         r6 =3D 0xc02a0278  r7 =3D 0xc3e28cfc
         r8 =3D 0xea576e58  r9 =3D 0x00000000
        r10 =3D 0x00000000
fork_exit() at fork_exit+0xa0
         pc =3D 0xc034da54  lr =3D 0xc0618f84 (swi_exit)
         sp =3D 0xea576e58  fp =3D 0x00000000
         r4 =3D 0xc02a0278  r5 =3D 0xc3e28cfc
         r6 =3D 0x00000000  r7 =3D 0x00000000
         r8 =3D 0x00000000 r10 =3D 0x00000000
swi_exit() at swi_exit
         pc =3D 0xc0618f84  lr =3D 0xc0618f84 (swi_exit)
         sp =3D 0xea576e58  fp =3D 0x00000000
db> =20
=20


--waqf3ldl5CnEMrQn
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=
=3MJG
-----END PGP SIGNATURE-----

--waqf3ldl5CnEMrQn--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20151105104859.GQ66179>