FreeBSD 11.0-STABLE #0 r307979M: panic: vm_radix_remove: impossible to locate the key

[Ulrich Grey]

Hello,

I am running:

freebsd at worktest:~ % uname -ap
FreeBSD worktest 11.0-STABLE FreeBSD 11.0-STABLE #0 r307979M: Thu Oct 27 09:04:38 UTC
2016     freebsd at worktest:/usr/local/DEVEL/obj/usr/local/DEVEL/SRC/11/sys/IMX6  arm armv6

on a CUBOX.

After > 50 hours building ports I got a panic:

panic: vm_radix_remove: impossible to locate the key
cpuid = 0
KDB: stack backtrace:
db_trace_self() at db_trace_self
         pc = 0xc259e47c  lr = 0xc205d1f8 (db_trace_self_wrapper+0x30)
         sp = 0xfbbe98b8  fp = 0xfbbe99d0
db_trace_self_wrapper() at db_trace_self_wrapper+0x30
         pc = 0xc205d1f8  lr = 0xc2216f98 (vpanic+0x13c)
         sp = 0xfbbe99d8  fp = 0xfbbe99f8
         r4 = 0x00000100  r5 = 0xc7a356e0
         r6 = 0xc265c1c6  r7 = 0x00000001
vpanic() at vpanic+0x13c
         pc = 0xc2216f98  lr = 0xc2216e5c (vpanic)
         sp = 0xfbbe9a00  fp = 0xfbbe9a04
         r4 = 0xe086130c  r5 = 0x00000000
         r6 = 0x000c585c  r7 = 0xc287a720
         r8 = 0x00000001  r9 = 0xc7b8dc5c
        r10 = 0x00000018
vpanic() at vpanic
         pc = 0xc2216e5c  lr = 0xc258fc9c (vm_radix_remove+0x1c8)
         sp = 0xfbbe9a0c  fp = 0xfbbe9a28
         r4 = 0xc287a720  r5 = 0x00000001
         r6 = 0xc7b8dc5c  r7 = 0x00000018
         r8 = 0xfbbe9a04  r9 = 0xc2216e5c
        r10 = 0xfbbe9a0c
vm_radix_remove() at vm_radix_remove+0x1c8
         pc = 0xc258fc9c  lr = 0xc257fbbc (vm_page_remove+0x34)
         sp = 0xfbbe9a30  fp = 0xfbbe9a38
         r4 = 0xc2c48a50  r5 = 0xca5c1f18
         r6 = 0x000c585c  r7 = 0xc287a720
vm_page_remove() at vm_page_remove+0x34
         pc = 0xc257fbbc  lr = 0xc257ee90 (vm_page_free_toq+0x5c)
         sp = 0xfbbe9a40  fp = 0xfbbe9a58
         r4 = 0xc2c48a50  r5 = 0xc2c48a50
vm_page_free_toq() at vm_page_free_toq+0x5c
         pc = 0xc257ee90  lr = 0xc25b5f90 (free_pv_chunk+0x168)
         sp = 0xfbbe9a60  fp = 0xfbbe9a70
         r4 = 0xc585c000  r5 = 0xc2c48a50
         r6 = 0x000c585c r10 = 0x00000018
free_pv_chunk() at free_pv_chunk+0x168
         pc = 0xc25b5f90  lr = 0xc25b5c0c (pmap_remove_pages+0x66c)
         sp = 0xfbbe9a78  fp = 0xfbbe9ad0
         r4 = 0x00000000  r5 = 0x00000000
         r6 = 0xc3ae6170  r7 = 0x56adcc33
pmap_remove_pages() at pmap_remove_pages+0x66c
         pc = 0xc25b5c0c  lr = 0xc256ad00 (vmspace_exit+0xc8)
         sp = 0xfbbe9ad8  fp = 0xfbbe9af8
         r4 = 0xc7b8dc58  r5 = 0x00000001
         r6 = 0xc285e650  r7 = 0xcab14000
         r8 = 0xc7b8dc5c  r9 = 0xc7b8dba0
        r10 = 0xc7a356e0
vmspace_exit() at vmspace_exit+0xc8
         pc = 0xc256ad00  lr = 0xc21bbdf8 (exit1+0xb9c)
         sp = 0xfbbe9b00  fp = 0xfbbe9b58
         r4 = 0xc7a356e0  r5 = 0x00000004
         r6 = 0xc7a356e0  r7 = 0xcab14000
         r8 = 0xcab140bc  r9 = 0xc707825c
        r10 = 0xcab140ac
exit1() at exit1+0xb9c
         pc = 0xc21bbdf8  lr = 0xc221bc78 ($a.5+0x934)
         sp = 0xfbbe9b60  fp = 0xfbbe9d38
         r4 = 0xfbbe9c88  r5 = 0x00000000
         r6 = 0x00000005  r7 = 0xc261d701
         r8 = 0xc7a356e0  r9 = 0x0000000b
        r10 = 0xc7a356e0
$a.5() at $a.5+0x934
         pc = 0xc221bc78  lr = 0xc221cc5c (osigsuspend)
         sp = 0xfbbe9d40  fp = 0xfbbe9dd0
         r4 = 0x0000000b  r5 = 0xc7a356e0
         r6 = 0xc7a356e0  r7 = 0xcab14000
         r8 = 0xcb01aab8  r9 = 0x00020804
        r10 = 0x00000000
osigsuspend() at osigsuspend
         pc = 0xc221cc5c  lr = 0xc22865cc (ast+0x620)
         sp = 0xfbbe9dd8  fp = 0xfbbe9e00
ast() at ast+0x620
         pc = 0xc22865cc  lr = 0xc25a0da4 (exception_exit+0x40)
         sp = 0xfbbe9e08  fp = 0xbfbfdf28
         r4 = 0x60000113  r5 = 0xc7a356e0
         r6 = 0x00000000  r7 = 0x2003a200
         r8 = 0x20035bc4  r9 = 0x20036718
        r10 = 0x20036700
exception_exit() at exception_exit+0x40
         pc = 0xc25a0da4  lr = 0x200287ec (0x200287ec)
         sp = 0xfbbe9e98  fp = 0xbfbfdf28
         r0 = 0x00000000  r1 = 0x00000000
         r2 = 0x00000000  r3 = 0x00000002
         r4 = 0x00000002  r5 = 0xbfbfe3d8
         r6 = 0x00000000  r7 = 0x2003a200
         r8 = 0x20035bc4  r9 = 0x20036718
        r10 = 0x20036700 r12 = 0x2003a200
Unable to unwind into user mode
KDB: enter: panic
[ thread pid 17915 tid 100894 ]
Stopped at      $d.6:   ldrb    r15, [r15, r15, ror r15]!
db> show all pcpu
...

For further information please see:
http://ulrich-grey.de/dl/cubox_panic20161106.log