Bug 226167 - Orange Pi PC aw_mmc related: g_vfs_done():panic: vm_fault_hold: fault on nofault entry, addr: 0xcda8c000
Summary: Orange Pi PC aw_mmc related: g_vfs_done():panic: vm_fault_hold: fault on nofa...
Status: Open
Alias: None
Product: Base System
Classification: Unclassified
Component: arm (show other bugs)
Version: CURRENT
Hardware: arm Any
: --- Affects Only Me
Assignee: freebsd-arm (Nobody)
URL:
Keywords: crash
Depends on:
Blocks:
 
Reported: 2018-02-24 13:12 UTC by Val Packett
Modified: 2023-07-09 09:16 UTC (History)
0 users

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Val Packett 2018-02-24 13:12:04 UTC 
Orange Pi PC with recent CURRENT crashed with some SD/MMC stuff:

[…]
g_vfs_done():mmcsd0s2a[WRITE(offset=2925240320, length=8192)]error = 5
aw_mmc0: controller timeout
aw_mmc0: timeout updating clock
mmcsd0: Error indicated: 1 Timeout
g_vfs_done():mmcsd0s2a[WRITE(offset=2925252608, length=8192)]error = 5
aw_mmc0: controller timeout
aw_mmc0: timeout updating clock
mmcsd0: Error indicated: 1 Timeout
g_vfs_done():mmcsd0s2a[WRITE(offset=2925260800, length=4096)]error = 5
aw_mmc0: controller timeout
aw_mmc0: timeout updating clock
mmcsd0: Error indicated: 1 Timeout
g_vfs_done():panic: vm_fault_hold: fault on nofault entry, addr: 0xcda8c000
cpuid = 2
time = 1262331340
KDB: stack backtrace:
db_trace_self() at db_trace_self
         pc = 0xc05f3fe0  lr = 0xc00a25cc (db_trace_self_wrapper+0x30)
         sp = 0xc479d7f0  fp = 0xc479d908
db_trace_self_wrapper() at db_trace_self_wrapper+0x30
         pc = 0xc00a25cc  lr = 0xc02d2e88 (vpanic+0x154)
         sp = 0xc479d910  fp = 0xc479d930
         r4 = 0x00000100  r5 = 0x00000001
         r6 = 0xc0763a9a  r7 = 0xc09b6a60
vpanic() at vpanic+0x154
         pc = 0xc02d2e88  lr = 0xc02d2d34 (vpanic)
         sp = 0xc479d938  fp = 0xc479d93c
         r4 = 0x00000002  r5 = 0xc479da08
         r6 = 0x00000001  r7 = 0x00000000
         r8 = 0x00000000  r9 = 0x00000000
        r10 = 0xc08a40a8
vpanic() at vpanic
         pc = 0xc02d2d34  lr = 0xc05c071c (unlock_and_deallocate)
         sp = 0xc479d944  fp = 0xc479da50
         r4 = 0x00000000  r5 = 0x00000000
         r6 = 0x00000000  r7 = 0xc08a40a8
         r8 = 0xc479d93c  r9 = 0xc02d2d34
        r10 = 0xc479d944
unlock_and_deallocate() at unlock_and_deallocate
         pc = 0xc05c071c  lr = 0xc05be048 (vm_fault+0x88)
         sp = 0xc479da58  fp = 0xc479da78
         r4 = 0xcda8c000  r5 = 0x00000000
         r6 = 0x00000002  r7 = 0xc09dc81c
vm_fault() at vm_fault+0x88
         pc = 0xc05be048  lr = 0xc0616158 (abort_handler+0x308)
         sp = 0xc479da80  fp = 0xc479db10
         r4 = 0x00000007  r5 = 0x00000000
         r6 = 0x00000005  r7 = 0x00002807
         r8 = 0x00000013  r9 = 0xd9a4e740
        r10 = 0xcda8c000
abort_handler() at abort_handler+0x308
         pc = 0xc0616158  lr = 0xc05f69b8 (exception_exit)
         sp = 0xc479db18  fp = 0xc479dbd8
         r4 = 0x00000000  r5 = 0x4bea6000
         r6 = 0x00000000  r7 = 0x00010000
         r8 = 0x00010000  r9 = 0xcda8c000
        r10 = 0xc0886304
exception_exit() at exception_exit
         pc = 0xc05f69b8  lr = 0xc05f22c0 ($a.2+0x9c)
         sp = 0xc479dba8  fp = 0xc479dbd8
         r0 = 0xcda9c000  r1 = 0xcda8c000
         r2 = 0xc05f2b94  r3 = 0x00000001
         r4 = 0x00000000  r5 = 0x4bea6000
         r6 = 0x00000000  r7 = 0x00010000
         r8 = 0x00010000  r9 = 0xcda8c000
        r10 = 0xc0886304 r12 = 0xd8b64000
$a.2() at $a.2+0x6c
         pc = 0xc05f2290  lr = 0xc062ca8c (aw_mmc_request+0x2d8)
         sp = 0xc479dbe0  fp = 0xc479dc18
         r4 = 0xc2ed1800  r5 = 0xd8ad5400
         r6 = 0xd8b34400  r7 = 0xc479dce0
         r8 = 0x80003740  r9 = 0xc08a40a8
        r10 = 0xc2ed18a4
aw_mmc_request() at aw_mmc_request+0x2d8
         pc = 0xc062ca8c  lr = 0xc00eae10 (mmc_wait_for_request+0x130)
         sp = 0xc479dc20  fp = 0xc479dc58
         r4 = 0xc083ac24  r5 = 0xc479dca0
         r6 = 0xc4aa1680  r7 = 0xc2eff780
         r8 = 0xd9a43280  r9 = 0x00000000
        r10 = 0xd8b21900
mmc_wait_for_request() at mmc_wait_for_request+0x130
         pc = 0xc00eae10  lr = 0xc00f46f0 (mmcsd_rw+0x1ec)
         sp = 0xc479dc60  fp = 0xc479dd28
         r4 = 0x00000000  r5 = 0xd8a64000
         r6 = 0xc479dca0  r7 = 0xc2eff780
         r8 = 0x00583a80  r9 = 0x00583a88
        r10 = 0x00000008
mmcsd_rw() at mmcsd_rw+0x1ec
         pc = 0xc00f46f0  lr = 0xc00f30d4 (mmcsd_task+0x2b0)
         sp = 0xc479dd30  fp = 0xc479de18
         r4 = 0xc2e97500  r5 = 0x00000200
         r6 = 0x00000000  r7 = 0x00583a80
         r8 = 0xdad3b358  r9 = 0xdad3b240
        r10 = 0x00000000
mmcsd_task() at mmcsd_task+0x2b0
         pc = 0xc00f30d4  lr = 0xc02962fc (fork_exit+0xc0)
         sp = 0xc479de20  fp = 0xc479de40
         r4 = 0xd9a4e740  r5 = 0xd9a47390
         r6 = 0xc00f2e24  r7 = 0xc2e97500
         r8 = 0xc479de48  r9 = 0xc08a40cc
        r10 = 0xc09dab20
fork_exit() at fork_exit+0xc0
         pc = 0xc02962fc  lr = 0xc05f6948 (swi_exit)
         sp = 0xc479de48  fp = 0x00000000
         r4 = 0xc00f2e24  r5 = 0xc2e97500
         r6 = 0xc2eefae0  r7 = 0x7ff6d8c6
         r8 = 0xc09c8904 r10 = 0xc09dab20
swi_exit() at swi_exit
         pc = 0xc05f6948  lr = 0xc05f6948 (swi_exit)
         sp = 0xc479de48  fp = 0x00000000
Comment 1 Val Packett 2018-02-24 13:19:34 UTC 
aaaand fsck when writing changes:

** 3890 journal records in 49356WARNING: /: reload pending error: blocks 320 files 2

and "FILE SYSTEM MARKED CLEAN" but the changes don't appear written, I can rerun fsck endlessly.

Bad SD card or just driver problems?
Comment 2 Graham Perrin freebsd_committer freebsd_triage 2022-10-17 12:17:21 UTC 
Keyword: 

    crash

– in lieu of summary line prefix: 

    [panic]

* bulk change for the keyword
* summary lines may be edited manually (not in bulk). 

Keyword descriptions and search interface: 

    <https://bugs.freebsd.org/bugzilla/describekeywords.cgi>