head -r326346 (corrected) kernel and before: an example rpi2 panic: pmap_remove_pages: pmap 0xc3c06??? va 0x202????? pte2 0 panic: bad pte2 (2 examples)
Mark Millard
markmi at dsl-only.net
Tue Dec 12 21:38:31 UTC 2017
[Simply a resend with a corrected Subject line.]
On 2017-Dec-12, at 3:40 AM, Mark Millard <markmi at dsl-only.net> wrote:
> -r326346 is the last kernel version that I can
> normally boot the rpi2 I use with. So I do not
> know about later versions. World was at
> -r326726 as I was bisecting a different
> issue based on kernel versions after updating
> had boot problems.
>
> I've only seen this type of panic a couple of
> times during the bisect, once at shutdown before
> buffers were flushed, once just after login.
> I've no, known way to reproduce this on demand.
>
> If I see it again, I'll try to get more
> information. I do have back traces from both
> examples below. Both involve exec_elf32_imgact .
>
> . . .
> Waiting for PIDS: 659pmap_remove_pages: pmap 0xc3c06564 va 0x202df000 pte2 0
> panic: bad pte2
> cpuid = 1
> time = 1513072659
> KDB: stack backtrace:
> db_trace_self() at db_trace_self
> pc = 0xc0561a88 lr = 0xc005f0d4 (db_trace_self_wrapper+0x30)
> sp = 0xc365e878 fp = 0xc365e990
> db_trace_self_wrapper() at db_trace_self_wrapper+0x30
> pc = 0xc005f0d4 lr = 0xc026abdc (vpanic+0x158)
> sp = 0xc365e998 fp = 0xc365e9b8
> r4 = 0x00000100 r5 = 0x00000001
> r6 = 0xc06e7d7a r7 = 0xc0933530
> vpanic() at vpanic+0x158
> pc = 0xc026abdc lr = 0xc026ac7c (kproc_shutdown)
> sp = 0xc365e9c0 fp = 0xc365e9c4
> r4 = 0x00000000 r5 = 0x21dfb801
> r6 = 0xc1e1e15c r7 = 0x00000001
> r8 = 0xc3c06564 r9 = 0xc1e1e000
> r10 = 0xc1e1e19c
> kproc_shutdown() at kproc_shutdown
> pc = 0xc026ac7c lr = 0xc057aee8 (pmap_remove_pages+0x8e0)
> sp = 0xc365e9cc fp = 0xc365ea28
> r4 = 0xc026ac7c r5 = 0xc365e9cc
> pmap_remove_pages() at pmap_remove_pages+0x8e0
> pc = 0xc057aee8 lr = 0xc022a304 (exec_new_vmspace+0x184)
> sp = 0xc365ea30 fp = 0xc365ea78
> r4 = 0xc3a87f1c r5 = 0xc3a87f00
> r6 = 0xc06a5655 r7 = 0xc4502730
> r8 = 0xc3c064b0 r9 = 0xc08062c8
> r10 = 0xc365ec20
> exec_new_vmspace() at exec_new_vmspace+0x184
> pc = 0xc022a304 lr = 0xc0207d98 (exec_elf32_imgact+0x86c)
> sp = 0xc365ea80 fp = 0xc365eb10
> r4 = 0xc08062c8 r5 = 0xc09314fc
> r6 = 0xe695c134 r7 = 0xc0806380
> r8 = 0x00000000 r9 = 0xc365ec20
> r10 = 0xe695c000
> exec_elf32_imgact() at exec_elf32_imgact+0x86c
> pc = 0xc0207d98 lr = 0xc0228f98 (kern_execve+0x66c)
> sp = 0xc365eb18 fp = 0xc365ed60
> r4 = 0xc365ec20 r5 = 0x00000000
> r6 = 0x00000004 r7 = 0x00000000
> r8 = 0xc365ed70 r9 = 0xffffffff
> r10 = 0xc0931ba0
> kern_execve() at kern_execve+0x66c
> pc = 0xc0228f98 lr = 0xc0228604 (sys_execve+0x58)
> sp = 0xc365ed68 fp = 0xc365edb0
> r4 = 0xc4515740 r5 = 0x00000000
> r6 = 0xc45159d8 r7 = 0x00000000
> r8 = 0x00000000 r9 = 0xc4515740
> r10 = 0xc45159d0
> sys_execve() at sys_execve+0x58
> pc = 0xc0228604 lr = 0xc0584eac (swi_handler+0x2c4)
> sp = 0xc365edb8 fp = 0xc365ee40
> r4 = 0x200b2718 r5 = 0xc08242a4
> r6 = 0xc4502730 r10 = 0xc45159d0
> swi_handler() at swi_handler+0x2c4
> pc = 0xc0584eac lr = 0xc056445c (swi_exit)
> sp = 0xc365ee48 fp = 0xbfbfdf78
> r4 = 0x200b2718 r5 = 0x200b26cc
> r6 = 0x200b272c r7 = 0x0000003b
> r8 = 0xbfbfdf80 r9 = 0x200b2718
> r10 = 0x00033844
> swi_exit() at swi_exit
> pc = 0xc056445c lr = 0xc056445c (swi_exit)
> sp = 0xc365ee48 fp = 0xbfbfdf78
> KDB: enter: panic
> [ thread pid 811 tid 100105 ]
> Stopped at $d.3: ldrb r15, [r15, r15, ror r15]!
>
> pmap_remove_pages: pmap 0xc3c060b4 va 0x20208000 pte2 0
> panic: bad pte2
> cpuid = 0
> time = 1513077251
> KDB: stack backtrace:
> db_trace_self() at db_trace_self
> pc = 0xc0562044 lr = 0xc005f0d4 (db_trace_self_wrapper+0x30)
> sp = 0xc1d8c878 fp = 0xc1d8c990
> db_trace_self_wrapper() at db_trace_self_wrapper+0x30
> pc = 0xc005f0d4 lr = 0xc026abdc (vpanic+0x158)
> sp = 0xc1d8c998 fp = 0xc1d8c9b8
> r4 = 0x00000100 r5 = 0x00000001
> r6 = 0xc06e8468 r7 = 0xc0933530
> vpanic() at vpanic+0x158
> pc = 0xc026abdc lr = 0xc026ac7c (kproc_shutdown)
> sp = 0xc1d8c9c0 fp = 0xc1d8c9c4
> r4 = 0x00000000 r5 = 0x15f40801
> r6 = 0xc1e2d828 r7 = 0x00000001
> r8 = 0xc3c060b4 r9 = 0xc1e2d000
> r10 = 0xc1e2d868
> kproc_shutdown() at kproc_shutdown
> pc = 0xc026ac7c lr = 0xc057b4a8 (pmap_remove_pages+0x8e0)
> sp = 0xc1d8c9cc fp = 0xc1d8ca28
> r4 = 0xc026ac7c r5 = 0xc1d8c9cc
> pmap_remove_pages() at pmap_remove_pages+0x8e0
> pc = 0xc057b4a8 lr = 0xc022a304 (exec_new_vmspace+0x184)
> sp = 0xc1d8ca30 fp = 0xc1d8ca78
> r4 = 0xc3a87f1c r5 = 0xc3a87f00
> r6 = 0xc06a5c55 r7 = 0xc49f2ac8
> r8 = 0xc3c06000 r9 = 0xc0806b08
> r10 = 0xc1d8cc20
> exec_new_vmspace() at exec_new_vmspace+0x184
> pc = 0xc022a304 lr = 0xc0207d98 (exec_elf32_imgact+0x86c)
> sp = 0xc1d8ca80 fp = 0xc1d8cb10
> r4 = 0xc0806b08 r5 = 0xc09314fc
> r6 = 0xe75bc134 r7 = 0xc0806bc0
> r8 = 0x00000000 r9 = 0xc1d8cc20
> r10 = 0xe75bc000
> exec_elf32_imgact() at exec_elf32_imgact+0x86c
> pc = 0xc0207d98 lr = 0xc0228f98 (kern_execve+0x66c)
> sp = 0xc1d8cb18 fp = 0xc1d8cd60
> r4 = 0xc1d8cc20 r5 = 0x00000000
> r6 = 0x00000004 r7 = 0x00000000
> r8 = 0xc1d8cd70 r9 = 0xffffffff
> r10 = 0xc0931ba0
> kern_execve() at kern_execve+0x66c
> pc = 0xc0228f98 lr = 0xc0228604 (sys_execve+0x58)
> sp = 0xc1d8cd68 fp = 0xc1d8cdb0
> r4 = 0xc4994ae0 r5 = 0x00000000
> r6 = 0xc4994d78 r7 = 0x00000000
> r8 = 0x00000000 r9 = 0xc4994ae0
> r10 = 0xc4994d70
> sys_execve() at sys_execve+0x58
> pc = 0xc0228604 lr = 0xc05854ac (swi_handler+0x2c4)
> sp = 0xc1d8cdb8 fp = 0xc1d8ce40
> r4 = 0x200ef268 r5 = 0xc0824ae4
> r6 = 0xc49f2ac8 r10 = 0xc4994d70
> swi_handler() at swi_handler+0x2c4
> pc = 0xc05854ac lr = 0xc0564a18 (swi_exit)
> sp = 0xc1d8ce48 fp = 0xbfbfe5d0
> r4 = 0x200ef268 r5 = 0x200ef210
> r6 = 0x200ef29c r7 = 0x0000003b
> r8 = 0xbfbfe5d8 r9 = 0x200ef268
> r10 = 0x00033844
> swi_exit() at swi_exit
> pc = 0xc0564a18 lr = 0xc0564a18 (swi_exit)
> sp = 0xc1d8ce48 fp = 0xbfbfe5d0
> KDB: enter: panic
> [ thread pid 712 tid 100152 ]
> Stopped at $d.3: ldrb r15, [r15, r15, ror r15]!
===
Mark Millard
markmi at dsl-only.net
More information about the freebsd-arm
mailing list