Mem abort at bsa_is_domain_monitored+0x70/0x118

[NainaMehtaQUIC]

Hi,

We are trying to boot Qualcomm RB3gen2 board with below ACS build for System Ready compliance.
https://github.com/ARM-software/arm-systemready/tree/main/SystemReady-devicetree-band/prebuilt_images/v24.11_3.0.0-BET0
We are observing mem aborts in following path. Could you please advise on L3 mapping from bsa_is_domain_monitored perspective?

We have raised the issue at https://gitlab.arm.com/linux-arm/linux-acs/-/issues/4 as well, raising the issue here also in-case linux-acs is not the right platform for raising the issue.

[ 8.161560] Mem abort info:
[ 8.163260] cpu cpu4: EM: created perf domain
[ 8.166255] Unable to handle kernel paging request at virtual address ffff8000812bb9c0
[ 8.166258] Mem abort info:
[ 8.166259] ESR = 0x0000000096000007
[ 8.166260] EC = 0x25: DABT (current EL), IL = 32 bits
[ 8.166262] SET = 0, FnV = 0
[ 8.166262] EA = 0, S1PTW = 0
[ 8.166263] FSC = 0x07: level 3 translation fault
[ 8.166264] Data abort info:
[ 8.166264] ISV = 0, ISS = 0x00000007, ISS2 = 0x00000000
[ 8.166265] CM = 0, WnR = 0, TnD = 0, TagAccess = 0
[ 8.166266] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0
[ 8.166267] swapper pgtable: 4k pages, 48-bit VAs, pgdp=0000000179521000
[ 8.166269] [ffff8000812bb9c0] pgd=100000010023b003, p4d=100000010023b003, pud=100000010023c003, pmd=1000000103615003, pte=0000000000000000

[ 8.166312] CPU: 5 PID: 275 Comm: (udev-worker) Not tainted 6.10.14-yocto-standard #1 (closed)
[ 8.166314] Hardware name: Qualcomm Technologies, Inc. Robotics RB3gen2 addons video mezz platform (DT)
[ 8.166315] pstate: 20400005 (nzCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[ 8.166317] pc : bsa_is_domain_monitored+0x70/0x118
[ 8.166323] lr : bsa_is_domain_monitored+0x60/0x118
[ 8.166324] sp : ffff80008178b2e0
[ 8.166325] x29: ffff80008178b2e0 x28: 00000001a7382000 x27: 0000000000000001
[ 8.166327] x26: 00000001a7382000 x25: 0000000ffffe0000 x24: 0000000000000001
[ 8.166329] x23: ffffc9becaa17000 x22: ffff623c4026da60 x21: ffff8000812b8000
[ 8.166331] x20: ffff623c4026da60 x19: ffff623c411b0000 x18: ffff80008099d108
[ 8.166333] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000
[ 8.166335] x14: 0000000000000000 x13: ffff623c40d32000 x12: 0000000000000000
[ 8.166337] x11: 0000000000052820 x10: 0000000000000000 x9 : ffffc9bec7eeae48
[ 8.166340] x8 : ffff623ce7380d80 x7 : 0000000000000000 x6 : 0000000000000fff
[ 8.166342] x5 : 000000000000000c x4 : ffff623c42116a80 x3 : 0000000000000002
[ 8.166343] x2 : 0000000000000008 x1 : 0000000000000004 x0 : ffff623c411b0000
[ 8.166346] Call trace:
[ 8.166348] bsa_is_domain_monitored+0x70/0x118
[ 8.166350] __iommu_map+0xa4/0x270
[ 8.166353] iommu_map_sg+0xcc/0x1c0
[ 8.166355] iommu_dma_map_sg+0x348/0x510
[ 8.166357] __dma_map_sg_attrs+0xa4/0xb0
[ 8.166361] dma_map_sg_attrs+0x1c/0x40
[ 8.166364] sdhci_pre_dma_transfer+0xe0/0x178
[ 8.166368] sdhci_pre_req+0x44/0x60
[ 8.166370] mmc_blk_mq_issue_rq+0x418/0x948
[ 8.166372] mmc_mq_queue_rq+0x128/0x268
[ 8.166374] blk_mq_dispatch_rq_list+0x11c/0x740
[ 8.166377] __blk_mq_sched_dispatch_requests+0x4a0/0x5b0
[ 8.166380] blk_mq_sched_dispatch_requests+0x38/0x80
[ 8.166383] blk_mq_run_hw_queue+0x104/0x1b0
[ 8.166384] blk_mq_flush_plug_list.part.0+0x1dc/0x610
[ 8.166386] blk_mq_flush_plug_list+0x28/0x48
[ 8.166388] __blk_flush_plug+0x108/0x178
[ 8.166390] blk_finish_plug+0x48/0x68
[ 8.166392] read_pages+0x180/0x308
[ 8.166395] page_cache_ra_unbounded+0x10c/0x1f8
[ 8.166398] force_page_cache_ra+0xb0/0xf0
[ 8.166400] page_cache_sync_ra+0x54/0xc0
[ 8.166403] filemap_get_pages+0xcc/0x6f0
[ 8.166404] filemap_read+0xe4/0x388
[ 8.166405] blkdev_read_iter+0x80/0x178
[ 8.166408] vfs_read+0x288/0x338
[ 8.166411] ksys_read+0x80/0x128
[ 8.166413] __arm64_sys_read+0x28/0x40
[ 8.166416] invoke_syscall+0x54/0x130
[ 8.166419] el0_svc_common.constprop.0+0x4c/0x100
[ 8.166422] do_el0_svc+0x28/0x40
[ 8.166425] el0_svc+0x38/0xe8
[ 8.166428] el0t_64_sync_handler+0x128/0x138
[ 8.166430] el0t_64_sync+0x19c/0x1a0
[ 8.166433] Code: aa0003f3 b40001c0 f9442c15 b40000f5 (f95ce2a0)
[ 8.166434] ---[ end trace 0000000000000000 ]---

Thanks,
Naina

[ajayswar-s]

Hi, @NainaMehtaQUIC
Kindly share complete Linux logs for the above Mem abort crash.

Thanks,
Acs Team

[NainaMehtaQUIC]

Hi,

Please find attached the kernel bootup logs.
ACS_boot_logs.txt

Regards,
Naina

[ajayswar-s]

Hi, @NainaMehtaQUIC

The Debug Image is available in the forked branch https://github.com/ajayswar-s/arm-systemready/tree/Partner_Image located inside the Debug_image folder. Due to space constraints of github, the systemready-dt_acs_live_image.wic.xz file has been split into two parts. To reconstruct the full image, please use the following command:

cat part_* > systemready-dt_acs_live_image.wic.xz

Kindly run this image and share the logs with us for further analysis.

Thanks,
ACS Team

[NainaMehtaQUIC]

Hi,

Please find attached the kernel logs with debug image across 3 reboots.

ACS_boot_logs_debug_img.txt

Regards,
Naina