Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 29 Dec 2019 15:57:58 +0000
From:      bugzilla-noreply@freebsd.org
To:        bugs@FreeBSD.org
Subject:   =?UTF-8?B?W0J1ZyAyNDI5NjFdIENyYXNoZXMgKGVsZjY0X2NvcmVkdW1wIA==?= =?UTF-8?B?4oCmIHZtX29iamVjdF9zZXRfd3JpdGVhYmxlX2RpcnR5KSBhZnRlciB0aGUg?= =?UTF-8?B?cmVjZW50IHZtIHBhdGNoIHNlcmllcw==?=
Message-ID:  <bug-242961-227@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D242961

            Bug ID: 242961
           Summary: Crashes (elf64_coredump =E2=80=A6
                    vm_object_set_writeable_dirty) after the recent vm
                    patch series
           Product: Base System
           Version: CURRENT
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: kern
          Assignee: bugs@FreeBSD.org
          Reporter: greg@unrelenting.technology

Either the series with https://reviews.freebsd.org/D22885 or 'Correctly
implement PMAP_ENTER_NOREPLACE=E2=80=A6' is causing my system to crash very=
 soon after
entering the desktop (wayfire). (I reverted both 'PMAP_=E2=80=A6' and every=
thing from
'Remove some unused functions' to 'Don't update per-page activation counts=
=E2=80=A6'
and that fixed the problem.)

A dump I got doesn't seem desktop/gpu specific in any way, but seems to poi=
nt
at the coredump functionality:


Fatal trap 12: page fault while in kernel mode
cpuid =3D 2; apic id =3D 02
fault virtual address   =3D 0x89
fault code              =3D supervisor read data, page not present
instruction pointer     =3D 0x20:0xffffffff806e8d84
stack pointer           =3D 0x0:0xfffffe00cdc812c0
frame pointer           =3D 0x0:0xfffffe00cdc812c0
code segment            =3D base 0x0, limit 0xfffff, type 0x1b
                        =3D DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags        =3D interrupt enabled, resume, IOPL =3D 0
current process         =3D 63690 (cron)
trap number             =3D 12
panic: page fault
cpuid =3D 2
time =3D 1577630640
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x2b/frame 0xfffffe00cdc80=
f30
vpanic() at vpanic+0x17e/frame 0xfffffe00cdc80f90
panic() at panic+0x43/frame 0xfffffe00cdc80ff0
trap_fatal() at trap_fatal+0x386/frame 0xfffffe00cdc81050
trap_pfault() at trap_pfault+0x4f/frame 0xfffffe00cdc810c0
trap() at trap+0x288/frame 0xfffffe00cdc811f0
calltrap() at calltrap+0x8/frame 0xfffffe00cdc811f0
--- trap 0xc, rip =3D 0xffffffff806e8d84, rsp =3D 0xfffffe00cdc812c0, rbp =
=3D
0xfffffe00cdc812c0 ---
vm_object_set_writeable_dirty() at vm_object_set_writeable_dirty+0x4/frame
0xfffffe00cdc812c0
vm_fault() at vm_fault+0x163f/frame 0xfffffe00cdc81400
vm_fault_quick_hold_pages() at vm_fault_quick_hold_pages+0x18a/frame
0xfffffe00cdc81480
vn_io_fault1() at vn_io_fault1+0x268/frame 0xfffffe00cdc815d0
vn_rdwr() at vn_rdwr+0x295/frame 0xfffffe00cdc816a0
vn_rdwr_inchunks() at vn_rdwr_inchunks+0x90/frame 0xfffffe00cdc81720
elf64_coredump() at elf64_coredump+0xbda/frame 0xfffffe00cdc81820
sigexit() at sigexit+0xba2/frame 0xfffffe00cdc81b00
postsig() at postsig+0x2f5/frame 0xfffffe00cdc81bc0
ast() at ast+0x2e7/frame 0xfffffe00cdc81bf0
doreti_ast() at doreti_ast+0x1f/frame 0x7fffffffdcb0

__curthread () at /usr/src/sys/amd64/include/pcpu_aux.h:55
55              __asm("movq %%gs:%P1,%0" : "=3Dr" (td) : "n" (offsetof(stru=
ct
pcpu,
(kgdb) bt
[=E2=80=A6]
#8  <signal handler called>
#9  vm_object_set_writeable_dirty (object=3D0x0) at
/usr/src/sys/vm/vm_object.c:2236
#10 0xffffffff806d461f in vm_fault_dirty (entry=3D0xfffff8003205e000,
m=3D0xfffffe0008806d60, prot=3D<optimized out>,
    fault_type=3D<optimized out>, fault_flags=3D0) at
/usr/src/sys/vm/vm_fault.c:249
#11 vm_fault (map=3D0xfffff8002e7a5000, vaddr=3D140737488240640, fault_type=
=3D1
'\001', fault_flags=3D0,
    m_hold=3D0xfffffe00cdc814c0) at /usr/src/sys/vm/vm_fault.c:1358
#12 0xffffffff806d58ba in vm_fault_quick_hold_pages (map=3D0xfffff8002e7a50=
00,
addr=3D140737488240640,
    len=3D<optimized out>, prot=3D1 '\001', ma=3D0xfffffe00cdc81490,
max_count=3D<optimized out>)
    at /usr/src/sys/vm/vm_fault.c:1657
#13 0xffffffff80510908 in vn_io_fault1 (vp=3D<optimized out>,
uio=3D0xfffffe00cdc81608, args=3D0xfffffe00cdc81638,
    td=3D0xfffff80056797000) at /usr/src/sys/kern/vfs_vnops.c:1111
#14 0xffffffff80510565 in vn_rdwr (rw=3D<optimized out>, vp=3D0xfffff801264=
f6000,
base=3D<optimized out>,
    len=3D<optimized out>, offset=3D<optimized out>, segflg=3D<optimized ou=
t>,
ioflg=3D16641,
    active_cred=3D0xfffff80018530e00, file_cred=3D0x0, aresid=3D0xfffffe00c=
dc816e0,
td=3D0xfffff80056797000)
    at /usr/src/sys/kern/vfs_vnops.c:603

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-242961-227>