head -r326446 kernel and before: an example rpi2 panic: pmap_remove_pages: pmap 0xc3c06??? va 0x202????? pte2 0 panic: bad pte2 (2 examples)
Mark Millard
markmi at dsl-only.net
Tue Dec 12 11:40:30 UTC 2017
-r326346 is the last kernel version that I can
normally boot the rpi2 I use with. So I do not
know about later versions. World was at
-r326726 as I was bisecting a different
issue based on kernel versions after updating
had boot problems.
I've only seen this type of panic a couple of
times during the bisect, once at shutdown before
buffers were flushed, once just after login.
I've no, known way to reproduce this on demand.
If I see it again, I'll try to get more
information. I do have back traces from both
examples below. Both involve exec_elf32_imgact .
. . .
Waiting for PIDS: 659pmap_remove_pages: pmap 0xc3c06564 va 0x202df000 pte2 0
panic: bad pte2
cpuid = 1
time = 1513072659
KDB: stack backtrace:
db_trace_self() at db_trace_self
pc = 0xc0561a88 lr = 0xc005f0d4 (db_trace_self_wrapper+0x30)
sp = 0xc365e878 fp = 0xc365e990
db_trace_self_wrapper() at db_trace_self_wrapper+0x30
pc = 0xc005f0d4 lr = 0xc026abdc (vpanic+0x158)
sp = 0xc365e998 fp = 0xc365e9b8
r4 = 0x00000100 r5 = 0x00000001
r6 = 0xc06e7d7a r7 = 0xc0933530
vpanic() at vpanic+0x158
pc = 0xc026abdc lr = 0xc026ac7c (kproc_shutdown)
sp = 0xc365e9c0 fp = 0xc365e9c4
r4 = 0x00000000 r5 = 0x21dfb801
r6 = 0xc1e1e15c r7 = 0x00000001
r8 = 0xc3c06564 r9 = 0xc1e1e000
r10 = 0xc1e1e19c
kproc_shutdown() at kproc_shutdown
pc = 0xc026ac7c lr = 0xc057aee8 (pmap_remove_pages+0x8e0)
sp = 0xc365e9cc fp = 0xc365ea28
r4 = 0xc026ac7c r5 = 0xc365e9cc
pmap_remove_pages() at pmap_remove_pages+0x8e0
pc = 0xc057aee8 lr = 0xc022a304 (exec_new_vmspace+0x184)
sp = 0xc365ea30 fp = 0xc365ea78
r4 = 0xc3a87f1c r5 = 0xc3a87f00
r6 = 0xc06a5655 r7 = 0xc4502730
r8 = 0xc3c064b0 r9 = 0xc08062c8
r10 = 0xc365ec20
exec_new_vmspace() at exec_new_vmspace+0x184
pc = 0xc022a304 lr = 0xc0207d98 (exec_elf32_imgact+0x86c)
sp = 0xc365ea80 fp = 0xc365eb10
r4 = 0xc08062c8 r5 = 0xc09314fc
r6 = 0xe695c134 r7 = 0xc0806380
r8 = 0x00000000 r9 = 0xc365ec20
r10 = 0xe695c000
exec_elf32_imgact() at exec_elf32_imgact+0x86c
pc = 0xc0207d98 lr = 0xc0228f98 (kern_execve+0x66c)
sp = 0xc365eb18 fp = 0xc365ed60
r4 = 0xc365ec20 r5 = 0x00000000
r6 = 0x00000004 r7 = 0x00000000
r8 = 0xc365ed70 r9 = 0xffffffff
r10 = 0xc0931ba0
kern_execve() at kern_execve+0x66c
pc = 0xc0228f98 lr = 0xc0228604 (sys_execve+0x58)
sp = 0xc365ed68 fp = 0xc365edb0
r4 = 0xc4515740 r5 = 0x00000000
r6 = 0xc45159d8 r7 = 0x00000000
r8 = 0x00000000 r9 = 0xc4515740
r10 = 0xc45159d0
sys_execve() at sys_execve+0x58
pc = 0xc0228604 lr = 0xc0584eac (swi_handler+0x2c4)
sp = 0xc365edb8 fp = 0xc365ee40
r4 = 0x200b2718 r5 = 0xc08242a4
r6 = 0xc4502730 r10 = 0xc45159d0
swi_handler() at swi_handler+0x2c4
pc = 0xc0584eac lr = 0xc056445c (swi_exit)
sp = 0xc365ee48 fp = 0xbfbfdf78
r4 = 0x200b2718 r5 = 0x200b26cc
r6 = 0x200b272c r7 = 0x0000003b
r8 = 0xbfbfdf80 r9 = 0x200b2718
r10 = 0x00033844
swi_exit() at swi_exit
pc = 0xc056445c lr = 0xc056445c (swi_exit)
sp = 0xc365ee48 fp = 0xbfbfdf78
KDB: enter: panic
[ thread pid 811 tid 100105 ]
Stopped at $d.3: ldrb r15, [r15, r15, ror r15]!
pmap_remove_pages: pmap 0xc3c060b4 va 0x20208000 pte2 0
panic: bad pte2
cpuid = 0
time = 1513077251
KDB: stack backtrace:
db_trace_self() at db_trace_self
pc = 0xc0562044 lr = 0xc005f0d4 (db_trace_self_wrapper+0x30)
sp = 0xc1d8c878 fp = 0xc1d8c990
db_trace_self_wrapper() at db_trace_self_wrapper+0x30
pc = 0xc005f0d4 lr = 0xc026abdc (vpanic+0x158)
sp = 0xc1d8c998 fp = 0xc1d8c9b8
r4 = 0x00000100 r5 = 0x00000001
r6 = 0xc06e8468 r7 = 0xc0933530
vpanic() at vpanic+0x158
pc = 0xc026abdc lr = 0xc026ac7c (kproc_shutdown)
sp = 0xc1d8c9c0 fp = 0xc1d8c9c4
r4 = 0x00000000 r5 = 0x15f40801
r6 = 0xc1e2d828 r7 = 0x00000001
r8 = 0xc3c060b4 r9 = 0xc1e2d000
r10 = 0xc1e2d868
kproc_shutdown() at kproc_shutdown
pc = 0xc026ac7c lr = 0xc057b4a8 (pmap_remove_pages+0x8e0)
sp = 0xc1d8c9cc fp = 0xc1d8ca28
r4 = 0xc026ac7c r5 = 0xc1d8c9cc
pmap_remove_pages() at pmap_remove_pages+0x8e0
pc = 0xc057b4a8 lr = 0xc022a304 (exec_new_vmspace+0x184)
sp = 0xc1d8ca30 fp = 0xc1d8ca78
r4 = 0xc3a87f1c r5 = 0xc3a87f00
r6 = 0xc06a5c55 r7 = 0xc49f2ac8
r8 = 0xc3c06000 r9 = 0xc0806b08
r10 = 0xc1d8cc20
exec_new_vmspace() at exec_new_vmspace+0x184
pc = 0xc022a304 lr = 0xc0207d98 (exec_elf32_imgact+0x86c)
sp = 0xc1d8ca80 fp = 0xc1d8cb10
r4 = 0xc0806b08 r5 = 0xc09314fc
r6 = 0xe75bc134 r7 = 0xc0806bc0
r8 = 0x00000000 r9 = 0xc1d8cc20
r10 = 0xe75bc000
exec_elf32_imgact() at exec_elf32_imgact+0x86c
pc = 0xc0207d98 lr = 0xc0228f98 (kern_execve+0x66c)
sp = 0xc1d8cb18 fp = 0xc1d8cd60
r4 = 0xc1d8cc20 r5 = 0x00000000
r6 = 0x00000004 r7 = 0x00000000
r8 = 0xc1d8cd70 r9 = 0xffffffff
r10 = 0xc0931ba0
kern_execve() at kern_execve+0x66c
pc = 0xc0228f98 lr = 0xc0228604 (sys_execve+0x58)
sp = 0xc1d8cd68 fp = 0xc1d8cdb0
r4 = 0xc4994ae0 r5 = 0x00000000
r6 = 0xc4994d78 r7 = 0x00000000
r8 = 0x00000000 r9 = 0xc4994ae0
r10 = 0xc4994d70
sys_execve() at sys_execve+0x58
pc = 0xc0228604 lr = 0xc05854ac (swi_handler+0x2c4)
sp = 0xc1d8cdb8 fp = 0xc1d8ce40
r4 = 0x200ef268 r5 = 0xc0824ae4
r6 = 0xc49f2ac8 r10 = 0xc4994d70
swi_handler() at swi_handler+0x2c4
pc = 0xc05854ac lr = 0xc0564a18 (swi_exit)
sp = 0xc1d8ce48 fp = 0xbfbfe5d0
r4 = 0x200ef268 r5 = 0x200ef210
r6 = 0x200ef29c r7 = 0x0000003b
r8 = 0xbfbfe5d8 r9 = 0x200ef268
r10 = 0x00033844
swi_exit() at swi_exit
pc = 0xc0564a18 lr = 0xc0564a18 (swi_exit)
sp = 0xc1d8ce48 fp = 0xbfbfe5d0
KDB: enter: panic
[ thread pid 712 tid 100152 ]
Stopped at $d.3: ldrb r15, [r15, r15, ror r15]!
===
Mark Millard
markmi at dsl-only.net
More information about the freebsd-hackers
mailing list