From owner-freebsd-hackers@freebsd.org Tue Dec 12 11:40:30 2017 Return-Path: Delivered-To: freebsd-hackers@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id ACAACE953BE for ; Tue, 12 Dec 2017 11:40:30 +0000 (UTC) (envelope-from markmi@dsl-only.net) Received: from asp.reflexion.net (outbound-mail-210-129.reflexion.net [208.70.210.129]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 6D8E377C5F for ; Tue, 12 Dec 2017 11:40:29 +0000 (UTC) (envelope-from markmi@dsl-only.net) Received: (qmail 28013 invoked from network); 12 Dec 2017 11:40:22 -0000 Received: from unknown (HELO mail-cs-02.app.dca.reflexion.local) (10.81.19.2) by 0 (rfx-qmail) with SMTP; 12 Dec 2017 11:40:22 -0000 Received: by mail-cs-02.app.dca.reflexion.local (Reflexion email security v8.40.3) with SMTP; Tue, 12 Dec 2017 06:40:22 -0500 (EST) Received: (qmail 6924 invoked from network); 12 Dec 2017 11:40:22 -0000 Received: from unknown (HELO iron2.pdx.net) (69.64.224.71) by 0 (rfx-qmail) with (AES256-SHA encrypted) SMTP; 12 Dec 2017 11:40:22 -0000 Received: from [192.168.1.25] (c-76-115-7-162.hsd1.or.comcast.net [76.115.7.162]) by iron2.pdx.net (Postfix) with ESMTPSA id 074D0EC861A; Tue, 12 Dec 2017 03:40:22 -0800 (PST) From: Mark Millard Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) Subject: head -r326446 kernel and before: an example rpi2 panic: pmap_remove_pages: pmap 0xc3c06??? va 0x202????? pte2 0 panic: bad pte2 (2 examples) Message-Id: Date: Tue, 12 Dec 2017 03:40:21 -0800 To: Freebsd-arm , FreeBSD Hackers X-Mailer: Apple Mail (2.3273) X-BeenThere: freebsd-hackers@freebsd.org X-Mailman-Version: 2.1.25 Precedence: list List-Id: Technical Discussions relating to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Dec 2017 11:40:30 -0000 -r326346 is the last kernel version that I can normally boot the rpi2 I use with. So I do not know about later versions. World was at -r326726 as I was bisecting a different issue based on kernel versions after updating had boot problems. I've only seen this type of panic a couple of times during the bisect, once at shutdown before buffers were flushed, once just after login. I've no, known way to reproduce this on demand. If I see it again, I'll try to get more information. I do have back traces from both examples below. Both involve exec_elf32_imgact . . . . Waiting for PIDS: 659pmap_remove_pages: pmap 0xc3c06564 va 0x202df000 pte2 0 panic: bad pte2 cpuid = 1 time = 1513072659 KDB: stack backtrace: db_trace_self() at db_trace_self pc = 0xc0561a88 lr = 0xc005f0d4 (db_trace_self_wrapper+0x30) sp = 0xc365e878 fp = 0xc365e990 db_trace_self_wrapper() at db_trace_self_wrapper+0x30 pc = 0xc005f0d4 lr = 0xc026abdc (vpanic+0x158) sp = 0xc365e998 fp = 0xc365e9b8 r4 = 0x00000100 r5 = 0x00000001 r6 = 0xc06e7d7a r7 = 0xc0933530 vpanic() at vpanic+0x158 pc = 0xc026abdc lr = 0xc026ac7c (kproc_shutdown) sp = 0xc365e9c0 fp = 0xc365e9c4 r4 = 0x00000000 r5 = 0x21dfb801 r6 = 0xc1e1e15c r7 = 0x00000001 r8 = 0xc3c06564 r9 = 0xc1e1e000 r10 = 0xc1e1e19c kproc_shutdown() at kproc_shutdown pc = 0xc026ac7c lr = 0xc057aee8 (pmap_remove_pages+0x8e0) sp = 0xc365e9cc fp = 0xc365ea28 r4 = 0xc026ac7c r5 = 0xc365e9cc pmap_remove_pages() at pmap_remove_pages+0x8e0 pc = 0xc057aee8 lr = 0xc022a304 (exec_new_vmspace+0x184) sp = 0xc365ea30 fp = 0xc365ea78 r4 = 0xc3a87f1c r5 = 0xc3a87f00 r6 = 0xc06a5655 r7 = 0xc4502730 r8 = 0xc3c064b0 r9 = 0xc08062c8 r10 = 0xc365ec20 exec_new_vmspace() at exec_new_vmspace+0x184 pc = 0xc022a304 lr = 0xc0207d98 (exec_elf32_imgact+0x86c) sp = 0xc365ea80 fp = 0xc365eb10 r4 = 0xc08062c8 r5 = 0xc09314fc r6 = 0xe695c134 r7 = 0xc0806380 r8 = 0x00000000 r9 = 0xc365ec20 r10 = 0xe695c000 exec_elf32_imgact() at exec_elf32_imgact+0x86c pc = 0xc0207d98 lr = 0xc0228f98 (kern_execve+0x66c) sp = 0xc365eb18 fp = 0xc365ed60 r4 = 0xc365ec20 r5 = 0x00000000 r6 = 0x00000004 r7 = 0x00000000 r8 = 0xc365ed70 r9 = 0xffffffff r10 = 0xc0931ba0 kern_execve() at kern_execve+0x66c pc = 0xc0228f98 lr = 0xc0228604 (sys_execve+0x58) sp = 0xc365ed68 fp = 0xc365edb0 r4 = 0xc4515740 r5 = 0x00000000 r6 = 0xc45159d8 r7 = 0x00000000 r8 = 0x00000000 r9 = 0xc4515740 r10 = 0xc45159d0 sys_execve() at sys_execve+0x58 pc = 0xc0228604 lr = 0xc0584eac (swi_handler+0x2c4) sp = 0xc365edb8 fp = 0xc365ee40 r4 = 0x200b2718 r5 = 0xc08242a4 r6 = 0xc4502730 r10 = 0xc45159d0 swi_handler() at swi_handler+0x2c4 pc = 0xc0584eac lr = 0xc056445c (swi_exit) sp = 0xc365ee48 fp = 0xbfbfdf78 r4 = 0x200b2718 r5 = 0x200b26cc r6 = 0x200b272c r7 = 0x0000003b r8 = 0xbfbfdf80 r9 = 0x200b2718 r10 = 0x00033844 swi_exit() at swi_exit pc = 0xc056445c lr = 0xc056445c (swi_exit) sp = 0xc365ee48 fp = 0xbfbfdf78 KDB: enter: panic [ thread pid 811 tid 100105 ] Stopped at $d.3: ldrb r15, [r15, r15, ror r15]! pmap_remove_pages: pmap 0xc3c060b4 va 0x20208000 pte2 0 panic: bad pte2 cpuid = 0 time = 1513077251 KDB: stack backtrace: db_trace_self() at db_trace_self pc = 0xc0562044 lr = 0xc005f0d4 (db_trace_self_wrapper+0x30) sp = 0xc1d8c878 fp = 0xc1d8c990 db_trace_self_wrapper() at db_trace_self_wrapper+0x30 pc = 0xc005f0d4 lr = 0xc026abdc (vpanic+0x158) sp = 0xc1d8c998 fp = 0xc1d8c9b8 r4 = 0x00000100 r5 = 0x00000001 r6 = 0xc06e8468 r7 = 0xc0933530 vpanic() at vpanic+0x158 pc = 0xc026abdc lr = 0xc026ac7c (kproc_shutdown) sp = 0xc1d8c9c0 fp = 0xc1d8c9c4 r4 = 0x00000000 r5 = 0x15f40801 r6 = 0xc1e2d828 r7 = 0x00000001 r8 = 0xc3c060b4 r9 = 0xc1e2d000 r10 = 0xc1e2d868 kproc_shutdown() at kproc_shutdown pc = 0xc026ac7c lr = 0xc057b4a8 (pmap_remove_pages+0x8e0) sp = 0xc1d8c9cc fp = 0xc1d8ca28 r4 = 0xc026ac7c r5 = 0xc1d8c9cc pmap_remove_pages() at pmap_remove_pages+0x8e0 pc = 0xc057b4a8 lr = 0xc022a304 (exec_new_vmspace+0x184) sp = 0xc1d8ca30 fp = 0xc1d8ca78 r4 = 0xc3a87f1c r5 = 0xc3a87f00 r6 = 0xc06a5c55 r7 = 0xc49f2ac8 r8 = 0xc3c06000 r9 = 0xc0806b08 r10 = 0xc1d8cc20 exec_new_vmspace() at exec_new_vmspace+0x184 pc = 0xc022a304 lr = 0xc0207d98 (exec_elf32_imgact+0x86c) sp = 0xc1d8ca80 fp = 0xc1d8cb10 r4 = 0xc0806b08 r5 = 0xc09314fc r6 = 0xe75bc134 r7 = 0xc0806bc0 r8 = 0x00000000 r9 = 0xc1d8cc20 r10 = 0xe75bc000 exec_elf32_imgact() at exec_elf32_imgact+0x86c pc = 0xc0207d98 lr = 0xc0228f98 (kern_execve+0x66c) sp = 0xc1d8cb18 fp = 0xc1d8cd60 r4 = 0xc1d8cc20 r5 = 0x00000000 r6 = 0x00000004 r7 = 0x00000000 r8 = 0xc1d8cd70 r9 = 0xffffffff r10 = 0xc0931ba0 kern_execve() at kern_execve+0x66c pc = 0xc0228f98 lr = 0xc0228604 (sys_execve+0x58) sp = 0xc1d8cd68 fp = 0xc1d8cdb0 r4 = 0xc4994ae0 r5 = 0x00000000 r6 = 0xc4994d78 r7 = 0x00000000 r8 = 0x00000000 r9 = 0xc4994ae0 r10 = 0xc4994d70 sys_execve() at sys_execve+0x58 pc = 0xc0228604 lr = 0xc05854ac (swi_handler+0x2c4) sp = 0xc1d8cdb8 fp = 0xc1d8ce40 r4 = 0x200ef268 r5 = 0xc0824ae4 r6 = 0xc49f2ac8 r10 = 0xc4994d70 swi_handler() at swi_handler+0x2c4 pc = 0xc05854ac lr = 0xc0564a18 (swi_exit) sp = 0xc1d8ce48 fp = 0xbfbfe5d0 r4 = 0x200ef268 r5 = 0x200ef210 r6 = 0x200ef29c r7 = 0x0000003b r8 = 0xbfbfe5d8 r9 = 0x200ef268 r10 = 0x00033844 swi_exit() at swi_exit pc = 0xc0564a18 lr = 0xc0564a18 (swi_exit) sp = 0xc1d8ce48 fp = 0xbfbfe5d0 KDB: enter: panic [ thread pid 712 tid 100152 ] Stopped at $d.3: ldrb r15, [r15, r15, ror r15]! === Mark Millard markmi at dsl-only.net