From owner-freebsd-ports-bugs@freebsd.org Mon Aug 8 00:13:06 2016 Return-Path: Delivered-To: freebsd-ports-bugs@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 84B82BB0FBC for ; Mon, 8 Aug 2016 00:13:06 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2001:1900:2254:206a::16:76]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 6B6B7199F for ; Mon, 8 Aug 2016 00:13:06 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from bugs.freebsd.org ([127.0.1.118]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id u780D6Bs008962 for ; Mon, 8 Aug 2016 00:13:06 GMT (envelope-from bugzilla-noreply@freebsd.org) From: bugzilla-noreply@freebsd.org To: freebsd-ports-bugs@FreeBSD.org Subject: [Bug 211651] emulators/virtualbox-ose-kmod 5.0.26_1 with Linux guest crashes 12.0-CURRENT host when # of processors > 1 Date: Mon, 08 Aug 2016 00:13:05 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: new X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Ports & Packages X-Bugzilla-Component: Individual Port(s) X-Bugzilla-Version: Latest X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: truckman@FreeBSD.org X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: vbox@FreeBSD.org X-Bugzilla-Flags: maintainer-feedback? X-Bugzilla-Changed-Fields: bug_id short_desc product version rep_platform op_sys bug_status bug_severity priority component assigned_to reporter flagtypes.name Message-ID: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated MIME-Version: 1.0 X-BeenThere: freebsd-ports-bugs@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Ports bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Aug 2016 00:13:06 -0000 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D211651 Bug ID: 211651 Summary: emulators/virtualbox-ose-kmod 5.0.26_1 with Linux guest crashes 12.0-CURRENT host when # of processors > 1 Product: Ports & Packages Version: Latest Hardware: Any OS: Any Status: New Severity: Affects Only Me Priority: --- Component: Individual Port(s) Assignee: vbox@FreeBSD.org Reporter: truckman@FreeBSD.org Flags: maintainer-feedback?(vbox@FreeBSD.org) Assignee: vbox@FreeBSD.org If I attempt to start a Linux guest on a FreeBSD 12.0-CURRENT host I get a kernel panic similar to: panic: Unregistered use of FPU in kernel cpuid =3D 3 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0x2b/frame 0xfffffe085a31c= 030 vpanic() at vpanic+0x182/frame 0xfffffe085a31c0b0 kassert_panic() at kassert_panic+0x126/frame 0xfffffe085a31c120 trap() at trap+0x7ae/frame 0xfffffe085a31c330 calltrap() at calltrap+0x8/frame 0xfffffe085a31c330 --- trap 0x16, rip =3D 0xffffffff827273a9, rsp =3D 0xfffffe085a31c408, rbp = =3D 0xfffff e085a31c430 --- null_bug_bypass() at 0xffffffff827273a9/frame 0xfffffe085a31c430 null_bug_bypass() at 0xffffffff826985c7/frame 0x3 KDB: enter: panic if the VM is configured with more than one processor. I've seen this with = both CentOS 7 and Ubuntu 12 guests. The panic appears to occur near the start of the guest kernel boot after grub has run. It appears to happen shortly aft= er the kernel message about TSC calibration is printed. The symbols printed by DDB leading up to the trap appear to be somewhat arbitrary. The location of the trap seems to be aboe the topmost BSS section symbol in one of the (las= t?) loaded .kmod. The code at the location that triggers the trap is: 0xffffffff8272739d: nop 0xffffffff8272739e: nop 0xffffffff8272739f: nop 0xffffffff827273a0: mov %rsi,%rdx 0xffffffff827273a3: shr $0x20,%rdx 0xffffffff827273a7: mov %esi,%eax =3D> 0xffffffff827273a9: xrstor (%rdi) 0xffffffff827273ac: retq=20=20=20 0xffffffff827273ad: int3=20=20=20 0xffffffff827273ae: int3=20=20=20 0xffffffff827273af: int3=20=20=20 0xffffffff827273b0: int3 It is called from here: 0xffffffff82667489: test %eax,%eax 0xffffffff8266748b: jne 0xffffffff826674a1 0xffffffff8266748d: movq $0x3,0x5238(%r15) 0xffffffff82667498: mov %rbx,%rsi 0xffffffff8266749b: and $0xfffffffffffffffc,%rsi 0xffffffff8266749f: je 0xffffffff826674ad 0xffffffff826674a1: mov 0x5240(%r15),%rdi 0xffffffff826674a8: callq 0xffffffff827273a0 =3D> 0xffffffff826674ad: or %rbx,0x5238(%r15) 0xffffffff826674b4: mov %r14d,%eax 0xffffffff826674b7: add $0x8,%rsp kgdb (from ports) doesn't believe that either of these to any function. The VMs where I first saw the problem were initially created with Virtualbo= x 4 and the paravirtualization setting is "Legacy", but I can reproduce this pa= nic after creating a new VM which uses the "Default" setting, increasing the nu= mber of processors to 4, and booting the CentOS 7 install .iso. The CPU info is: CPU: AMD FX-8320E Eight-Core Processor (3210.84-MHz K8-class = CPU) Origin=3D"AuthenticAMD" Id=3D0x600f20 Family=3D0x15 Model=3D0x2 Stepp= ing=3D0 =20 Features=3D0x178bfbff =20 Features2=3D0x3e98320b AMD Features=3D0x2e500800 AMD Features2=3D0x1ebbfff Structured Extended Features=3D0x8 SVM: NP,NRIP,VClean,AFlush,DAssist,NAsids=3D65536 TSC: P-state invariant, performance statistics Whether or not this problem occurs with Intel CPUs is unknown. This problem did not occur before the upgrade from Virtualbox 4 to Virtualb= ox 5. --=20 You are receiving this mail because: You are the assignee for the bug.=