NetBSD Problem Report #26569

Received: (qmail 8699 invoked by uid 605); 6 Aug 2004 12:33:40 -0000
Message-Id: <20040806100935.5B5E311152@narn.netbsd.org>
Date: Fri,  6 Aug 2004 10:09:35 +0000 (UTC)
From: skrll@netbsd.org
Sender: gnats-bugs-owner@NetBSD.org
Reply-To: skrll@netbsd.org
To: gnats-bugs@gnats.NetBSD.org
Subject: Panic running regress/sys/kern/umount
X-Send-Pr-Version: www-1.0

>Number:         26569
>Category:       port-sh3
>Synopsis:       Panic running regress/sys/kern/umount
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    port-sh3-maintainer
>State:          closed
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Fri Aug 06 12:34:00 +0000 2004
>Closed-Date:    Thu Feb 09 10:15:33 +0000 2006
>Last-Modified:  Thu Feb 09 10:15:33 +0000 2006
>Originator:     Nick Hudson
>Release:        NetBSD 2.0G
>Organization:
Nope
>Environment:
NetBSD dc 2.0G NetBSD 2.0G (DC) #0: Tue Jul 27 12:29:09 BST 2004  nick@arthur:/usr/obj/dreamcast/usr/src/sys/arch/dreamcast/compile/DC dreamcast

>Description:
tlb_handler panic on NetBSD/dreamcast

vnd0: no disk label
vnd0: no disk label
panic: tlb_handler: invalid user-space access from kernel mode va=0x00000000, ssr=0x400000f0, spc=0x8c1077ee  lwp=0x8c2ebe10 onfault=0x0
Stopped in pid 2736.1 (disklabel) at    0x8c10433a:     mov     r14, r15
db>

db> show registers
r0          0xf0
r1          0x8c104334
r2          0x88c
r3          0x8c1ae000
r4          0x400000f1
r5          0xd
r6          0
r7          0
r8          0x8c0b84a4
r9          0x8c142d54
r10         0
r11         0x100
r12         0
r13         0x8cfee5a0
r14         0xc2399a34
r15         0xc2399a34
pr          0x8c0b7bcc
spc         0x8c10433a
ssr         0x400000f0
mach        0
macl        0

8c1077d8 <pmap_extract>:
8c1077d8:       86 2f           mov.l   r8,@-r15
8c1077da:       96 2f           mov.l   r9,@-r15
8c1077dc:       e6 2f           mov.l   r14,@-r15
8c1077de:       22 4f           sts.l   pr,@-r15
8c1077e0:       f3 6e           mov     r15,r14
8c1077e2:       53 68           mov     r5,r8
8c1077e4:       0d d0           mov.l   8c10781c <pmap_extract+0x44>,r0 ! 0x8c107d68
8c1077e6:       0b 40           jsr     @r0
8c1077e8:       63 69           mov     r6,r9
8c1077ea:       08 20           tst     r0,r0
8c1077ec:       03 89           bt      8c1077f6 <pmap_extract+0x1e>
8c1077ee:       02 61           mov.l   @r0,r1


>How-To-Repeat:
Run regress/sys/kern/umount
>Fix:
No
>Release-Note:
>Audit-Trail:
From: Nick Hudson <nick.hudson@dsl.pipex.com>
To: gnats-bugs@netbsd.org
Cc: 
Subject: Re: port-dreamcast/26569
Date: Tue, 7 Feb 2006 15:11:58 +0000

 Some more info so it doesn't get lost.

 panic: tlb_handler: invalid user-space access from kernel mode va=0x00000000, ssr=0x40000100, spc=0x8c1182c4  lwp=0x8cf15d5c onfault=0x0
 Stopped in pid 3.1 (nfsio) at   netbsd:cpu_Debugger+0x6:        mov     r14, r15

 db> t
 cpu_Debugger() at netbsd:panic+0xe0
 panic() at netbsd:tlb_exception+0x430
 tlb_exception() at 0x8c000484
 <EXPEVT 040; SSR=40000100> at netbsd:pmap_extract+0x2c
 pmap_extract() at netbsd:uvm_pageratop+0x14
 uvm_pageratop() at netbsd:nfs_doio_write+0xac
 nfs_doio_write() at netbsd:nfs_doio+0x7c
 nfs_doio() at netbsd:nfssvc_iod+0x126
 nfssvc_iod() at netbsd:start_nfsio+0xe
 start_nfsio() at netbsd:proc_trampoline+0x4
 db>

From: Nick Hudson <nick.hudson@dsl.pipex.com>
To: gnats-bugs@netbsd.org
Cc: 
Subject: Re: port-dreamcast/26569
Date: Tue, 7 Feb 2006 15:26:54 +0000

 More info...

 db> mach frame
 [switch frame]
 sf_sr           0x400001e1
 sf_r15          0xc22eef74
 sf_r14          0xc22eef74
 sf_r13          0x00000000
 sf_r12          0x8cf15d5c
 sf_r11          0x8c1ba370      netbsd:__assert+0x80d84:        bra     1778(0x6f2)
 sf_r10          0x8cf1e9a8
 sf_r9           0x8c1b8120      netbsd:__assert+0x7eb34:        ????
 sf_r8           0x00000002
 sf_pr           0x8c0cb840      netbsd:mi_switch+0x108: bra     16(0x10)
 sf_r6_bank      0xc22ecfa4
 sf_r7_bank      0xc22ef000
 [trap frame]
 -- 0xc22eceec-0xc22ecf48 --
 tf_expevt       0x00000160
 tf_ubc          0x00000000
 tf_spc          0x8c115016      netbsd:cpu_Debugger+0x6:        mov     r14, r15
 tf_ssr          0x400000f1
 tf_macl         0x00000000
 tf_mach         0x00000002
 tf_pr           0x8c0d7d28      netbsd:panic+0xe0:      mov     r11, r4
 tf_r13          0x00000000
 tf_r12          0x00000000
 tf_r11          0x00000100
 tf_r10          0x8cf15d5c
 tf_r9           0x8c15920c      netbsd:__assert+0x1fc20:        mov.b   @r7+, r12
 tf_r8           0x8c0d8624      netbsd:printf:  mov.l   r7, @-r15
 tf_r7           0x00000000
 tf_r6           0x00000000
 tf_r5           0x0000000d
 tf_r4           0x400000f1
 tf_r3           0x8c1be000      netbsd:__assert+0x84a14:        ????
 tf_r2           0x0000092d
 tf_r1           0x8c115010      netbsd:cpu_Debugger:    mov.l   r14, @-r15
 tf_r0           0x00000001
 tf_r15          0xc22eee88
 tf_r14          0xc22eee88
 -- 0xc22ecf48-0xc22ecfa4 --
 tf_expevt       0x00000040
 tf_ubc          0x00000000
 tf_spc          0x8c1182d2      netbsd:pmap_extract+0x3a:       mov.l   @r8, r1
 tf_ssr          0x40000000
 tf_macl         0x0000a1b6
 tf_mach         0x00000002
 tf_pr           0x8c1182cc      netbsd:pmap_extract+0x34:       add     #0x4, r15
 tf_r13          0x00000000
 tf_r12          0x000001bc
 tf_r11          0xc22eef2c
 tf_r10          0x8c1ba2b8      netbsd:__assert+0x80ccc:        fadd    fr0, fr0
 tf_r9           0x8c3e8c00
 tf_r8           0x00000fa0
 tf_r7           0x00000006
 tf_r6           0x00000001
 tf_r5           0x00000289
 tf_r4           0x40000001
 tf_r3           0x8c1b8d9c      netbsd:__assert+0x7f7b0:        ????
 tf_r2           0x000000f0
 tf_r1           0x8c1b9244      netbsd:__assert+0x7fc58:        ????
 tf_r0           0x00000000
 tf_r15          0xc22eef14
 tf_r14          0xc22eef14
 -- 0xc22ecfa4-0xc22ed000 --
 tf_expevt       0x00000040
 tf_ubc          0x00000000
 tf_spc          0x8c0bf470      netbsd:proc_alloc+0x40: mov.l   @r3, r0
 tf_ssr          0x400000e0
 tf_macl         0x000004b0
 tf_mach         0x0283c5ad
 tf_pr           0x8c0bf460      netbsd:proc_alloc+0x30: mov     r0, r6
 tf_r13          0x8c1b7f90      netbsd:__assert+0x7e9a4:        ????
 tf_r12          0x0000001e
 tf_r11          0x8c0c2520      netbsd:chgproccnt:      mov.l   r8, @-r15
 tf_r10          0x8c1b7c60      netbsd:__assert+0x7e674:        ????
 tf_r9           0x8cf1e9a8
 tf_r8           0x8c1a9898      netbsd:__assert+0x702ac:        shll    r12
 tf_r7           0x8c1b7a30      netbsd:__assert+0x7e444:        ????
 tf_r6           0x00000000
 tf_r5           0x00000002
 tf_r4           0x400000e0
 tf_r3           0xc0004c18
 tf_r2           0xc0004c00
 tf_r1           0x00000018
 tf_r0           0x00000000
 tf_r15          0x8c1bde70      netbsd:__assert+0x84884:        mov.b   @(r0, r9), r10
 tf_r14          0x8c1bde70      netbsd:__assert+0x84884:        mov.b   @(r0, r9), r10
 db>

Responsible-Changed-From-To: port-dreamcast-maintainer->port-sh3-maintainer
Responsible-Changed-By: uwe@netbsd.org
Responsible-Changed-When: Tue, 07 Feb 2006 21:47:46 +0000
Responsible-Changed-Why:
I can reproduce this on my Jornada - move to port-sh3.


From: "Valeriy E. Ushakov" <uwe@netbsd.org>
To: gnats-bugs@netbsd.org
Cc: 
Subject: PR/26569 CVS commit: src/sys/arch/sh3/sh3
Date: Thu,  9 Feb 2006 10:08:32 +0000 (UTC)

 Module Name:	src
 Committed By:	uwe
 Date:		Thu Feb  9 10:08:32 UTC 2006

 Modified Files:
 	src/sys/arch/sh3/sh3: pmap.c

 Log Message:
 pmap_extract: handle P1 and P2 (MMU bypass) addresses specially.
 PMAP_MAP_POOLPAGE maps pa -> P1 va, so we must handle this case here.
 PR port-sh3/26569 by Nick Hudson.


 To generate a diff of this commit:
 cvs rdiff -r1.52 -r1.53 src/sys/arch/sh3/sh3/pmap.c

 Please note that diffs are not public domain; they are subject to the
 copyright notices on the relevant files.

State-Changed-From-To: open->feedback
State-Changed-By: uwe@netbsd.org
State-Changed-When: Thu, 09 Feb 2006 10:12:55 +0000
State-Changed-Why:
Should be fixed now.  Please test.


State-Changed-From-To: feedback->closed
State-Changed-By: uwe@netbsd.org
State-Changed-When: Thu, 09 Feb 2006 10:15:33 +0000
State-Changed-Why:
Fixed.


>Unformatted:

Home	PR Database Search