From owner-freebsd-current@freebsd.org Fri Jun 5 14:07:54 2020 Return-Path: Delivered-To: freebsd-current@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 839E532BFD6 for ; Fri, 5 Jun 2020 14:07:54 +0000 (UTC) (envelope-from hps@selasky.org) Received: from mailman.nyi.freebsd.org (mailman.nyi.freebsd.org [IPv6:2610:1c1:1:606c::50:13]) by mx1.freebsd.org (Postfix) with ESMTP id 49dkxk1NyJz3cq0 for ; Fri, 5 Jun 2020 14:07:54 +0000 (UTC) (envelope-from hps@selasky.org) Received: by mailman.nyi.freebsd.org (Postfix) id 2FAD832C2A7; Fri, 5 Jun 2020 14:07:54 +0000 (UTC) Delivered-To: current@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 2F6D032BFD4 for ; Fri, 5 Jun 2020 14:07:54 +0000 (UTC) (envelope-from hps@selasky.org) Received: from mail.turbocat.net (turbocat.net [88.99.82.50]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 49dkxj5jz4z3cmQ for ; Fri, 5 Jun 2020 14:07:53 +0000 (UTC) (envelope-from hps@selasky.org) Received: from hps2020.home.selasky.org (unknown [62.141.129.235]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by mail.turbocat.net (Postfix) with ESMTPSA id 004B626038B for ; Fri, 5 Jun 2020 16:07:50 +0200 (CEST) Subject: Re: panic: page fault head/amd64 @r361830 To: current@freebsd.org References: <20200605134127.GY2100@albert.catwhisker.org> From: Hans Petter Selasky Message-ID: <911f533b-a2ca-349b-1eb5-2c8f5fe8e685@selasky.org> Date: Fri, 5 Jun 2020 16:07:34 +0200 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:68.0) Gecko/20100101 Thunderbird/68.8.0 MIME-Version: 1.0 In-Reply-To: <20200605134127.GY2100@albert.catwhisker.org> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit X-Rspamd-Queue-Id: 49dkxj5jz4z3cmQ X-Spamd-Bar: ---- Authentication-Results: mx1.freebsd.org; none X-Spamd-Result: default: False [-4.00 / 15.00]; ASN(0.00)[asn:24940, ipnet:88.99.0.0/16, country:DE]; REPLY(-4.00)[] X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.33 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 05 Jun 2020 14:07:54 -0000 On 2020-06-05 15:41, David Wolfskill wrote: > My build machine had no issues with the upgrade from r361784 to r361830, > but my laptop panicked during the transition from single- to multi-user > mode, just after bpf was attached. > > Rebooting from the old kernel worked; trying to boot from r361830 > failed again with similar symptoms, and the laptop normally runs > stable/12 (r361761 yesterday; r361831 today), so it seems to be an > issue in head. > > The build machine isn't a DHCP client, and doesn't run ipfw; the laptop > differs (in both respects). > > The backtrace (from the core.txt file: > > ... > <118>Mounting local filesystems: > linprocfs registered > <118>. > <118>ELF ldconfig path: /lib /usr/lib /usr/lib/compat /usr/local/lib /usr/local/lib/R/lib /usr/local/lib/compat /usr/local/lib/gcc9 /usr/l > ocal/lib/graphviz /usr/local/lib/mysql /usr/local/lib/perl5/5.30/mach/CORE /usr/local/lib/qt5 /usr/local/llvm80/lib /usr/local/llvm90/lib > /usr/local/share/chromium > <118>32-bit compatibility ldconfig path: /usr/lib32 /usr/lib32/compat /usr/local/lib32/compat > <118>Setting hostname: localhost. > <118>Setting up harvesting: PURE_RDRAND,[UMA],[FS_ATIME],SWI,INTERRUPT,NET_NG,[NET_ETHER],NET_TUN,MOUSE,KEYBOARD,ATTACH,CACHED > <118>Feeding entropy: . > <6>wlan0: bpf attached > > <6>wlan0: bpf attached > > Fatal trap 12: page fault while in kernel mode > cpuid = 3; apic id = 03 > fault virtual address = 0x0 > fault code = supervisor read instruction, page not present > instruction pointer = 0x20:0x0 > stack pointer = 0x28:0xfffffe0fc08c3b08 > frame pointer = 0x28:0xfffffe0fc08c3b80 > code segment = base 0x0, limit 0xfffff, type 0x1b > = DPL 0, pres 1, long 1, def32 0, gran 1 > processor eflags = interrupt enabled, resume, IOPL = 0 > current process = 0 (iwn0 net80211 taskq) > trap number = 12 > panic: page fault > cpuid = 3 > time = 1591362374 > KDB: stack backtrace: > db_trace_self_wrapper() at 0xffffffff804a4afb = db_trace_self_wrapper+0x2b/frame 0xfffffe0fc08c37b0 > vpanic() at 0xffffffff80b93452 = vpanic+0x182/frame 0xfffffe0fc08c3800 > panic() at 0xffffffff80b93203 = panic+0x43/frame 0xfffffe0fc08c3860 > trap_fatal() at 0xffffffff81069b07 = trap_fatal+0x387/frame 0xfffffe0fc08c38c0 > trap_pfault() at 0xffffffff81069ba9 = trap_pfault+0x99/frame 0xfffffe0fc08c3920 > trap() at 0xffffffff810691a5 = trap+0x2a5/frame 0xfffffe0fc08c3a30 > calltrap() at 0xffffffff8103edb8 = calltrap+0x8/frame 0xfffffe0fc08c3a30 > --- trap 0xc, rip = 0, rsp = 0xfffffe0fc08c3b08, rbp = 0xfffffe0fc08c3b80 --- > ??() at 0/frame 0xfffffe0fc08c3b80 > taskqueue_thread_loop() at 0xffffffff80bf3214 = taskqueue_thread_loop+0x94/frame 0xfffffe0fc08c3bb0 > fork_exit() at 0xffffffff80b503c0 = fork_exit+0x80/frame 0xfffffe0fc08c3bf0 > fork_trampoline() at 0xffffffff8103fdfe = fork_trampoline+0xe/frame 0xfffffe0fc08c3bf0 > --- trap 0, rip = 0, rsp = 0, rbp = 0 --- > KDB: enter: panic > > __curthread () at /usr/src/sys/amd64/include/pcpu_aux.h:55 > 55 __asm("movq %%gs:%P1,%0" : "=r" (td) : "n" (offsetof(struct pcpu, > (kgdb) #0 __curthread () at /usr/src/sys/amd64/include/pcpu_aux.h:55 > #1 doadump (textdump=0) at /usr/src/sys/kern/kern_shutdown.c:394 > #2 0xffffffff804a1eaa in db_dump (dummy=, > dummy2=, dummy3=, dummy4=) > at /usr/src/sys/ddb/db_command.c:575 > #3 0xffffffff804a1c6c in db_command (last_cmdp=, > cmd_table=, dopager=1) at /usr/src/sys/ddb/db_command.c:482 > #4 0xffffffff804a19dd in db_command_loop () > at /usr/src/sys/ddb/db_command.c:535 > #5 0xffffffff804a4c48 in db_trap (type=, code=) > at /usr/src/sys/ddb/db_main.c:253 > #6 0xffffffff80bdde34 in kdb_trap (type=3, code=0, tf=) > at /usr/src/sys/kern/subr_kdb.c:699 > #7 0xffffffff810696b8 in trap (frame=0xfffffe0fc08c36e0) > at /usr/src/sys/amd64/amd64/trap.c:578 > #8 > #9 kdb_enter (why=0xffffffff8122ff12 "panic", msg=) > at /usr/src/sys/kern/subr_kdb.c:486 > #10 0xffffffff80b9346e in vpanic (fmt=, ap=) > at /usr/src/sys/kern/kern_shutdown.c:902 > #11 0xffffffff80b93203 in panic ( > fmt=0xffffffff81c7f298 "\326/\037\201\377\377\377\377") > at /usr/src/sys/kern/kern_shutdown.c:839 > #2 0xffffffff804a1eaa in db_dump (dummy=, > dummy2=, dummy3=, dummy4=) > at /usr/src/sys/ddb/db_command.c:575 > #3 0xffffffff804a1c6c in db_command (last_cmdp=, > cmd_table=, dopager=1) at /usr/src/sys/ddb/db_command.c:482 > #4 0xffffffff804a19dd in db_command_loop () > at /usr/src/sys/ddb/db_command.c:535 > #5 0xffffffff804a4c48 in db_trap (type=, code=) > at /usr/src/sys/ddb/db_main.c:253 > #6 0xffffffff80bdde34 in kdb_trap (type=3, code=0, tf=) > at /usr/src/sys/kern/subr_kdb.c:699 > #7 0xffffffff810696b8 in trap (frame=0xfffffe0fc08c36e0) > at /usr/src/sys/amd64/amd64/trap.c:578 > #8 > #9 kdb_enter (why=0xffffffff8122ff12 "panic", msg=) > at /usr/src/sys/kern/subr_kdb.c:486 > #10 0xffffffff80b9346e in vpanic (fmt=, ap=) > at /usr/src/sys/kern/kern_shutdown.c:902 > #11 0xffffffff80b93203 in panic ( > fmt=0xffffffff81c7f298 "\326/\037\201\377\377\377\377") > at /usr/src/sys/kern/kern_shutdown.c:839 > #12 0xffffffff81069b07 in trap_fatal (frame=0xfffffe0fc08c3a40, eva=0) > at /usr/src/sys/amd64/amd64/trap.c:919 > #13 0xffffffff81069ba9 in trap_pfault (frame=0xfffffe0fc08c3a40, > usermode=, signo=, ucode=) > at /usr/src/sys/amd64/amd64/trap.c:736 > #14 0xffffffff810691a5 in trap (frame=0xfffffe0fc08c3a40) > at /usr/src/sys/amd64/amd64/trap.c:400 > #15 > #16 0x0000000000000000 in ?? () > #17 0xffffffff80bf219a in taskqueue_run_locked (queue=0xfffff8000f1e9100) > at /usr/src/sys/kern/subr_taskqueue.c:476 > #18 0xffffffff80bf3214 in taskqueue_thread_loop (arg=) > at /usr/src/sys/kern/subr_taskqueue.c:793 > #19 0xffffffff80b503c0 in fork_exit ( > callout=0xffffffff80bf3180 , > arg=0xfffffe1052453148, frame=0xfffffe0fc08c3c00) > at /usr/src/sys/kern/kern_fork.c:1053 > #20 > (kgdb) > > Please see http://www.catwhisker.org/~david/FreeBSD/head/r361830/ > for the crasah cump, core.txt file, and anything else I think to put > there that might be useful. > > http://www.catwhisker.org/~david/FreeBSD/history/ has pointers to > recent copies of dmesg.boot from a verbose boot and sundry other > bits of trivia, some of which may be of use. Any modules in /boot/modules which didn't get rebuilt? --HPS