(beagleboneblack/urtwn) Kernel page fault with the following non-sleepable locks held

[Andriy Voskoboinyk]

Tue, 21 Jun 2016 03:06:15 +0300 було написано Otacílio  
<otacilio.neto at bsd.com.br>:

Should be fixed in r302064.

> Em 19/06/2016 18:47, Otacílio escreveu:
>> Em 19/06/2016 18:40, Otacílio escreveu:
>>> I was installing netperf on a fresh FreeBSD-ALPHA3
>>>
>>> FreeBSD beaglebone 11.0-ALPHA3 FreeBSD 11.0-ALPHA3 #0 r301846: Mon Jun  
>>> 13 19:54:27 BRT 2016  
>>> ota at nostromo:/root/crochet/work/obj/arm.armv6/usr/src/sys/BEAGLEBONE-DEBUG  
>>> arm
>>>
>>>  on BeagleboneBlack using wrtwn when I got this kernel panic:
>>>
>>> root at beaglebone:/usr/home/ota # pkg install netperf
>>> Updating FreeBSD repository catalogue...
>>> Fetching meta.txz: 100%    944 B   0.9kB/s    00:01
>>> Fetching packagesite.txz: 100%    4 MiB  46.0kB/s    01:42
>>> Processing entries:   6%lock order reversal:
>>>  1st 0xc30b35d4 syncer (syncer) @ /usr/src/sys/kern/vfs_subr.c:2048
>>>  2nd 0xc319d6f4 ufs (ufs) @ /usr/src/sys/kern/vfs_subr.c:2498
>>> stack backtrace:
>>> Processing entries:  58%Kernel page fault with the following  
>>> non-sleepable locks held:
>>> exclusive sleep mutex tcp_sc_head (tcp_sc_head) r = 0 (0xc2f9d520)  
>>> locked @ /usr/src/sys/netinet/tcp_syncache.c:494
>>> shared rw tcp (tcp) r = 0 (0xc08ef348) locked @  
>>> /usr/src/sys/netinet/tcp_input.c:1034
>>> exclusive rw tcpinp (tcpinp) r = 0 (0xc31ab494) locked @  
>>> /usr/src/sys/netinet/in_pcb.c:1964
>>> stack backtrace:
>>> Fatal kernel mode data abort: 'Alignment Fault' on read
>>> trapframe: 0xdcfe58a8
>>> FSR=00000001, FAR=c2e7187a, spsr=60000013
>>> r0 =c08e7988, r1 =00000004, r2 =c06fa3ad, r3 =000007b6
>>> r4 =dcfe5a10, r5 =dcfe5b28, r6 =c2e71876, r7 =c2f9d520
>>> r8 =c2f9d520, r9 =c2e71876, r10=dcfe5b28, r11=dcfe5970
>>> r12=00000000, ssp=dcfe5938, slr=c2d34370, pc =c053d8e8
>>>
>>> [ thread pid 13 tid 100036 ]
>>> Stopped at      syncookie_lookup+0x38:  ldmib   r6, {r1-r2}
>>> db>
>>>
>>>
>>> []'s
>>>
>>> -Otacílio
>>>
>> The kernel panic is totally reproducible. I need only do a ssh in the  
>> beaglebone using ptty on windows or ssh on freebsd and the kernel panic  
>> is raised.
>>
>> FreeBSD/arm (beaglebone) (ttyu0)
>>
>> login: Kernel page fault with the following non-sleepable locks held:
>> exclusive sleep mutex tcp_sc_head (tcp_sc_head) r = 0 (0xc2f95480)  
>> locked @ /usr/src/sys/netinet/tcp_syncache.c:494
>> shared rw tcp (tcp) r = 0 (0xc08ef348) locked @  
>> /usr/src/sys/netinet/tcp_input.c:1034
>> exclusive rw tcpinp (tcpinp) r = 0 (0xc341e494) locked @  
>> /usr/src/sys/netinet/in_pcb.c:1964
>> stack backtrace:
>> Fatal kernel mode data abort: 'Alignment Fault' on read
>> trapframe: 0xdcfe58a8
>> FSR=00000001, FAR=c2e7807a, spsr=60000013
>> r0 =c08e7988, r1 =00000004, r2 =c06fa3ad, r3 =000007b6
>> r4 =dcfe5a10, r5 =dcfe5b28, r6 =c2e78076, r7 =c2f95480
>> r8 =c2f95480, r9 =c2e78076, r10=dcfe5b28, r11=dcfe5970
>> r12=00000000, ssp=dcfe5938, slr=c2d34370, pc =c053d8e8
>>
>> [ thread pid 13 tid 100036 ]
>> Stopped at      syncookie_lookup+0x38:  ldmib   r6, {r1-r2}
>> db>
>>
> FreeBSD11-ALPHA4 shows the same behavior. The only thing that I need to  
> raise the fault is ssh in the beaglebone.
>
>
> root at beaglebone:~ # uname -a
> FreeBSD beaglebone 11.0-ALPHA4 FreeBSD 11.0-ALPHA4 #0 r301975: Fri Jun  
> 17 13:32:55 UTC 2016  
> root at releng2.nyi.freebsd.org:/usr/obj/arm.armv6/usr/src/sys/BEAGLEBONE  
> arm
> root at beaglebone:~ # Kernel page fault with the following non-sleepable  
> locks held:
> exclusive sleep mutex tcp_sc_head (tcp_sc_head) r = 0 (0xc2f98740)  
> locked @ /usr/src/sys/netinet/tcp_syncache.c:494
> shared rw tcp (tcp) r = 0 (0xc08ef348) locked @  
> /usr/src/sys/netinet/tcp_input.c:1034
> exclusive rw tcpinp (tcpinp) r = 0 (0xc33e4494) locked @  
> /usr/src/sys/netinet/in_pcb.c:1964
> stack backtrace:
> Fatal kernel mode data abort: 'Alignment Fault' on read
> trapframe: 0xdcfe58c0
> FSR=00000001, FAR=c2e7a07a, spsr=60000013
> r0 =c08e7988, r1 =00000004, r2 =c06fabe6, r3 =000007b6
> r4 =dcfe5a28, r5 =dcfe5b40, r6 =c2e7a076, r7 =c2f98740
> r8 =c2f98740, r9 =c2e7a076, r10=dcfe5b40, r11=dcfe5988
> r12=00000000, ssp=dcfe5950, slr=c2d33370, pc =c053df7c
>
> [ thread pid 13 tid 100036 ]
> Stopped at      syncookie_lookup+0x38:  ldmib   r6, {r1-r2}
> db>
>
>
> _______________________________________________
> freebsd-hackers at freebsd.org mailing list
> https://lists.freebsd.org/mailman/listinfo/freebsd-hackers
> To unsubscribe, send any mail to  
> "freebsd-hackers-unsubscribe at freebsd.org"