Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 12 Dec 2017 03:40:21 -0800
From:      Mark Millard <markmi@dsl-only.net>
To:        Freebsd-arm <freebsd-arm@freebsd.org>, FreeBSD Hackers <freebsd-hackers@freebsd.org>
Subject:   head -r326446 kernel and before: an example rpi2 panic: pmap_remove_pages: pmap 0xc3c06??? va 0x202????? pte2 0 panic: bad pte2 (2 examples)
Message-ID:  <B1AFF273-7058-48B3-B97F-31105AC758E8@dsl-only.net>

next in thread | raw e-mail | index | archive | help
-r326346 is the last kernel version that I can
normally boot the rpi2 I use with. So I do not
know about later versions. World was at
-r326726 as I was bisecting a different
issue based on kernel versions after updating
had boot problems.

I've only seen this type of panic a couple of
times during the bisect, once at shutdown before
buffers were flushed, once just after login.
I've no, known way to reproduce this on demand.

If I see it again, I'll try to get more
information. I do have back traces from both
examples below. Both involve exec_elf32_imgact .

. . .
Waiting for PIDS: 659pmap_remove_pages: pmap 0xc3c06564 va 0x202df000 pte2 0
panic: bad pte2
cpuid = 1
time = 1513072659
KDB: stack backtrace:
db_trace_self() at db_trace_self
         pc = 0xc0561a88  lr = 0xc005f0d4 (db_trace_self_wrapper+0x30)
         sp = 0xc365e878  fp = 0xc365e990
db_trace_self_wrapper() at db_trace_self_wrapper+0x30
         pc = 0xc005f0d4  lr = 0xc026abdc (vpanic+0x158)
         sp = 0xc365e998  fp = 0xc365e9b8
         r4 = 0x00000100  r5 = 0x00000001
         r6 = 0xc06e7d7a  r7 = 0xc0933530
vpanic() at vpanic+0x158
         pc = 0xc026abdc  lr = 0xc026ac7c (kproc_shutdown)
         sp = 0xc365e9c0  fp = 0xc365e9c4
         r4 = 0x00000000  r5 = 0x21dfb801
         r6 = 0xc1e1e15c  r7 = 0x00000001
         r8 = 0xc3c06564  r9 = 0xc1e1e000
        r10 = 0xc1e1e19c
kproc_shutdown() at kproc_shutdown
         pc = 0xc026ac7c  lr = 0xc057aee8 (pmap_remove_pages+0x8e0)
         sp = 0xc365e9cc  fp = 0xc365ea28
         r4 = 0xc026ac7c  r5 = 0xc365e9cc
pmap_remove_pages() at pmap_remove_pages+0x8e0
         pc = 0xc057aee8  lr = 0xc022a304 (exec_new_vmspace+0x184)
         sp = 0xc365ea30  fp = 0xc365ea78
         r4 = 0xc3a87f1c  r5 = 0xc3a87f00
         r6 = 0xc06a5655  r7 = 0xc4502730
         r8 = 0xc3c064b0  r9 = 0xc08062c8
        r10 = 0xc365ec20
exec_new_vmspace() at exec_new_vmspace+0x184
         pc = 0xc022a304  lr = 0xc0207d98 (exec_elf32_imgact+0x86c)
         sp = 0xc365ea80  fp = 0xc365eb10
         r4 = 0xc08062c8  r5 = 0xc09314fc
         r6 = 0xe695c134  r7 = 0xc0806380
         r8 = 0x00000000  r9 = 0xc365ec20
        r10 = 0xe695c000
exec_elf32_imgact() at exec_elf32_imgact+0x86c
         pc = 0xc0207d98  lr = 0xc0228f98 (kern_execve+0x66c)
         sp = 0xc365eb18  fp = 0xc365ed60
         r4 = 0xc365ec20  r5 = 0x00000000
         r6 = 0x00000004  r7 = 0x00000000
         r8 = 0xc365ed70  r9 = 0xffffffff
        r10 = 0xc0931ba0
kern_execve() at kern_execve+0x66c
         pc = 0xc0228f98  lr = 0xc0228604 (sys_execve+0x58)
         sp = 0xc365ed68  fp = 0xc365edb0
         r4 = 0xc4515740  r5 = 0x00000000
         r6 = 0xc45159d8  r7 = 0x00000000
         r8 = 0x00000000  r9 = 0xc4515740
        r10 = 0xc45159d0
sys_execve() at sys_execve+0x58
         pc = 0xc0228604  lr = 0xc0584eac (swi_handler+0x2c4)
         sp = 0xc365edb8  fp = 0xc365ee40
         r4 = 0x200b2718  r5 = 0xc08242a4
         r6 = 0xc4502730 r10 = 0xc45159d0
swi_handler() at swi_handler+0x2c4
         pc = 0xc0584eac  lr = 0xc056445c (swi_exit)
         sp = 0xc365ee48  fp = 0xbfbfdf78
         r4 = 0x200b2718  r5 = 0x200b26cc
         r6 = 0x200b272c  r7 = 0x0000003b
         r8 = 0xbfbfdf80  r9 = 0x200b2718
        r10 = 0x00033844
swi_exit() at swi_exit
         pc = 0xc056445c  lr = 0xc056445c (swi_exit)
         sp = 0xc365ee48  fp = 0xbfbfdf78
KDB: enter: panic
[ thread pid 811 tid 100105 ]
Stopped at      $d.3:   ldrb    r15, [r15, r15, ror r15]!

pmap_remove_pages: pmap 0xc3c060b4 va 0x20208000 pte2 0
panic: bad pte2
cpuid = 0
time = 1513077251
KDB: stack backtrace:
db_trace_self() at db_trace_self
         pc = 0xc0562044  lr = 0xc005f0d4 (db_trace_self_wrapper+0x30)
         sp = 0xc1d8c878  fp = 0xc1d8c990
db_trace_self_wrapper() at db_trace_self_wrapper+0x30
         pc = 0xc005f0d4  lr = 0xc026abdc (vpanic+0x158)
         sp = 0xc1d8c998  fp = 0xc1d8c9b8
         r4 = 0x00000100  r5 = 0x00000001
         r6 = 0xc06e8468  r7 = 0xc0933530
vpanic() at vpanic+0x158
         pc = 0xc026abdc  lr = 0xc026ac7c (kproc_shutdown)
         sp = 0xc1d8c9c0  fp = 0xc1d8c9c4
         r4 = 0x00000000  r5 = 0x15f40801
         r6 = 0xc1e2d828  r7 = 0x00000001
         r8 = 0xc3c060b4  r9 = 0xc1e2d000
        r10 = 0xc1e2d868
kproc_shutdown() at kproc_shutdown
         pc = 0xc026ac7c  lr = 0xc057b4a8 (pmap_remove_pages+0x8e0)
         sp = 0xc1d8c9cc  fp = 0xc1d8ca28
         r4 = 0xc026ac7c  r5 = 0xc1d8c9cc
pmap_remove_pages() at pmap_remove_pages+0x8e0
         pc = 0xc057b4a8  lr = 0xc022a304 (exec_new_vmspace+0x184)
         sp = 0xc1d8ca30  fp = 0xc1d8ca78
         r4 = 0xc3a87f1c  r5 = 0xc3a87f00
         r6 = 0xc06a5c55  r7 = 0xc49f2ac8
         r8 = 0xc3c06000  r9 = 0xc0806b08
        r10 = 0xc1d8cc20
exec_new_vmspace() at exec_new_vmspace+0x184
         pc = 0xc022a304  lr = 0xc0207d98 (exec_elf32_imgact+0x86c)
         sp = 0xc1d8ca80  fp = 0xc1d8cb10
         r4 = 0xc0806b08  r5 = 0xc09314fc
         r6 = 0xe75bc134  r7 = 0xc0806bc0
         r8 = 0x00000000  r9 = 0xc1d8cc20
        r10 = 0xe75bc000
exec_elf32_imgact() at exec_elf32_imgact+0x86c
         pc = 0xc0207d98  lr = 0xc0228f98 (kern_execve+0x66c)
         sp = 0xc1d8cb18  fp = 0xc1d8cd60
         r4 = 0xc1d8cc20  r5 = 0x00000000
         r6 = 0x00000004  r7 = 0x00000000
         r8 = 0xc1d8cd70  r9 = 0xffffffff
        r10 = 0xc0931ba0
kern_execve() at kern_execve+0x66c
         pc = 0xc0228f98  lr = 0xc0228604 (sys_execve+0x58)
         sp = 0xc1d8cd68  fp = 0xc1d8cdb0
         r4 = 0xc4994ae0  r5 = 0x00000000
         r6 = 0xc4994d78  r7 = 0x00000000
         r8 = 0x00000000  r9 = 0xc4994ae0
        r10 = 0xc4994d70
sys_execve() at sys_execve+0x58
         pc = 0xc0228604  lr = 0xc05854ac (swi_handler+0x2c4)
         sp = 0xc1d8cdb8  fp = 0xc1d8ce40
         r4 = 0x200ef268  r5 = 0xc0824ae4
         r6 = 0xc49f2ac8 r10 = 0xc4994d70
swi_handler() at swi_handler+0x2c4
         pc = 0xc05854ac  lr = 0xc0564a18 (swi_exit)
         sp = 0xc1d8ce48  fp = 0xbfbfe5d0
         r4 = 0x200ef268  r5 = 0x200ef210
         r6 = 0x200ef29c  r7 = 0x0000003b
         r8 = 0xbfbfe5d8  r9 = 0x200ef268
        r10 = 0x00033844
swi_exit() at swi_exit
         pc = 0xc0564a18  lr = 0xc0564a18 (swi_exit)
         sp = 0xc1d8ce48  fp = 0xbfbfe5d0
KDB: enter: panic
[ thread pid 712 tid 100152 ]
Stopped at      $d.3:   ldrb    r15, [r15, r15, ror r15]!


===
Mark Millard
markmi at dsl-only.net




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?B1AFF273-7058-48B3-B97F-31105AC758E8>