Date: Mon, 3 Jan 2022 09:25:05 +0100 From: Maurizio Vairani <maurizio1018@gmail.com> To: freebsd-current <freebsd-current@freebsd.org> Subject: Lenovo ThinkPad T450 panic in vm_freelist_rem() Message-ID: <CAN0zgYUYcaXa5J0EjoX84Q=VikAOjXFiRD5H1DCo-VuHcnoBLg@mail.gmail.com>
next in thread | raw e-mail | index | archive | help
--000000000000ac4de805d4a942d9
Content-Type: text/plain; charset="UTF-8"
Hello and happy new year.
The laptop is running:
> uname -a
FreeBSD NomadBSD 14.0-CURRENT FreeBSD 14.0-CURRENT #0 e9016c0be: Sun Jan 2
04:27:33 CET 2022 root@NomadBSD:/usr/obj/usr/src/amd64.amd64/sys/GENERIC
amd64
The backtrace command shows:
#0 __curthread () at /usr/src/sys/amd64/include/pcpu_aux.h:55
#1 doadump (textdump=textdump@entry=0) at
/usr/src/sys/kern/kern_shutdown.c:399
#2 0xffffffff804c590a in db_dump (dummy=<optimized out>,
dummy2=<unavailable>, dummy3=<unavailable>, dummy4=<unavailable>) at
/usr/src/sys/ddb/db_command.c:575
#3 0xffffffff804c57c2 in db_command (last_cmdp=<optimized out>,
cmd_table=<optimized out>, dopager=dopager@entry=1) at
/usr/src/sys/ddb/db_command.c:482
#4 0xffffffff804c541d in db_command_loop () at
/usr/src/sys/ddb/db_command.c:535
#5 0xffffffff804c8a56 in db_trap (type=<optimized out>, code=<optimized
out>) at /usr/src/sys/ddb/db_main.c:270
#6 0xffffffff80c4e63b in kdb_trap (type=type@entry=3, code=code@entry=0,
tf=tf@entry=0xfffffe00fc7ae970) at /usr/src/sys/kern/subr_kdb.c:733
#7 0xffffffff810c695a in trap (frame=0xfffffe00fc7ae970) at
/usr/src/sys/amd64/amd64/trap.c:609
#8 <signal handler called>
#9 kdb_enter (why=0xffffffff812c3774 "panic", msg=<optimized out>) at
/usr/src/sys/kern/subr_kdb.c:506
#10 0xffffffff80c00d30 in vpanic (fmt=0xffffffff812b6aa3 "Bad link elm %p
next->prev != elm", ap=ap@entry=0xfffffe00fc7aead0) at
/usr/src/sys/kern/kern_shutdown.c:908
#11 0xffffffff80c00ac3 in panic (fmt=0xffffffff81e8cea0 <cnputs_mtx>
"\223\002(\201\377\377\377\377") at /usr/src/sys/kern/kern_shutdown.c:844
#12 0xffffffff80f8376a in vm_freelist_rem (fl=0xffffff660cc45778, m=0x80,
order=0) at /usr/src/sys/vm/vm_phys.c:390
#13 vm_phys_free_pages (m=0xfffffe0002ad8ac8, order=order@entry=0) at
/usr/src/sys/vm/vm_phys.c:1124
#14 0xffffffff80f7b7ac in vm_page_zone_release (arg=<optimized out>,
store=0xfffff80001783010, cnt=188) at /usr/src/sys/vm/vm_page.c:2596
#15 0xffffffff80f55a4d in bucket_drain (zone=zone@entry=0xfffffe0019861800,
bucket=<optimized out>, bucket@entry=0xfffff80001783000) at
/usr/src/sys/vm/uma_core.c:1363
#16 0xffffffff80f50936 in bucket_free (zone=0xfffffe0019861800,
bucket=0xfffff80001783000, udata=0x0) at /usr/src/sys/vm/uma_core.c:521
#17 zone_put_bucket (zone=0xfffffe0019861800, zone@entry=0xfffff80001783000,
domain=<optimized out>, bucket=0xfffff80001783000, bucket@entry
=0xfffffe0105017560,
udata=udata@entry=0x0, ws=false) at /usr/src/sys/vm/uma_core.c:904
#18 0xffffffff80f57823 in zone_free_bucket (zone=zone@entry=0xfffffe0019861800,
bucket=bucket@entry=0xfffff80001783000, udata=udata@entry=0x0,
itemdomain=itemdomain@entry=0, ws=<optimized out>) at
/usr/src/sys/vm/uma_core.c:4643
#19 0xffffffff80f51091 in cache_free (zone=zone@entry=0xfffffe0019861800,
cache=<optimized out>, udata=udata@entry=0x0, itemdomain=1, itemdomain@entry
=0)
at /usr/src/sys/vm/uma_core.c:4710
#20 0xffffffff80f4fec8 in uma_zfree_arg (zone=0xfffffe0019861800,
item=0xfffffe0007970ca0, item@entry=0xfffffe0007970c38, udata=udata@entry
=0x0)
at /usr/src/sys/vm/uma_core.c:4514
#21 0xffffffff80f73515 in uma_zfree (zone=0xffffffff81e8cea0 <cnputs_mtx>,
item=<optimized out>) at /usr/src/sys/vm/uma.h:404
#22 0xffffffff80f7348b in vm_page_free (m=0xffffffff81e8cea0 <cnputs_mtx>)
at /usr/src/sys/vm/vm_page.c:1330
#23 0xffffffff80f6d66d in vm_object_terminate_pages
(object=0xfffff8012e589108) at /usr/src/sys/vm/vm_object.c:907
#24 vm_object_terminate (object=object@entry=0xfffff8012e589108) at
/usr/src/sys/vm/vm_object.c:958
#25 0xffffffff80f6d37d in vm_object_deallocate (object=0xfffff8012e589108)
at /usr/src/sys/vm/vm_object.c:693
#26 0xffffffff80f5f309 in vm_map_entry_deallocate
(entry=0xfffff8012e5fb420, system_map=0) at /usr/src/sys/vm/vm_map.c:3813
#27 vm_map_process_deferred () at /usr/src/sys/vm/vm_map.c:613
#28 0xffffffff80f66aa9 in _vm_map_unlock (map=<optimized out>, line=4002,
file=<optimized out>) at /usr/src/sys/vm/vm_map.c:676
#29 vm_map_remove (map=<optimized out>, map@entry=0xfffffe01056713f0,
start=4096, end=<optimized out>) at /usr/src/sys/vm/vm_map.c:4002
#30 0xffffffff80f5edf9 in vmspace_dofree (vm=0xfffffe01056713f0) at
/usr/src/sys/vm/vm_map.c:382
#31 vmspace_exit (td=td@entry=0xfffffe0105017560) at
/usr/src/sys/vm/vm_map.c:457
#32 0xffffffff80bb2fe8 in exit1 (td=<optimized out>, rval=<optimized out>,
signo=signo@entry=0) at /usr/src/sys/kern/kern_exit.c:421
#33 0xffffffff80bb2a8d in sys_exit (td=0xffffffff81e8cea0 <cnputs_mtx>,
uap=<optimized out>) at /usr/src/sys/kern/kern_exit.c:212
#34 0xffffffff810c771e in syscallenter (td=<optimized out>) at
/usr/src/sys/amd64/amd64/../../kern/subr_syscall.c:189
#35 amd64_syscall (td=0xfffffe0105017560, traced=0) at
/usr/src/sys/amd64/amd64/trap.c:1191
#36 <signal handler called>
#37 0x000000080848d1fa in ?? ()
Backtrace stopped: Cannot access memory at address 0x7fffffffe848
I can share the /var/crash directory if needed.
Regards
--
Maurizio
--000000000000ac4de805d4a942d9
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
<div dir=3D"ltr">Hello and happy new year.<br><div><br></div><div>The lapto=
p is running:</div><div>> uname -a<br>FreeBSD NomadBSD 14.0-CURRENT Free=
BSD 14.0-CURRENT #0 e9016c0be: Sun Jan =C2=A02 04:27:33 CET 2022 =C2=A0 =C2=
=A0 root@NomadBSD:/usr/obj/usr/src/amd64.amd64/sys/GENERIC =C2=A0amd64<br><=
/div><div><br></div><div>The backtrace command shows:<br>#0 =C2=A0__curthre=
ad () at /usr/src/sys/amd64/include/pcpu_aux.h:55<br>#1 =C2=A0doadump (text=
dump=3Dtextdump@entry=3D0) at /usr/src/sys/kern/kern_shutdown.c:399<br>#2 =
=C2=A00xffffffff804c590a in db_dump (dummy=3D<optimized out>, dummy2=
=3D<unavailable>, dummy3=3D<unavailable>, dummy4=3D<unavaila=
ble>) at /usr/src/sys/ddb/db_command.c:575<br>#3 =C2=A00xffffffff804c57c=
2 in db_command (last_cmdp=3D<optimized out>, cmd_table=3D<optimiz=
ed out>, dopager=3Ddopager@entry=3D1) at /usr/src/sys/ddb/db_command.c:4=
82<br>#4 =C2=A00xffffffff804c541d in db_command_loop () at /usr/src/sys/ddb=
/db_command.c:535<br>#5 =C2=A00xffffffff804c8a56 in db_trap (type=3D<opt=
imized out>, code=3D<optimized out>) at /usr/src/sys/ddb/db_main.c=
:270<br>#6 =C2=A00xffffffff80c4e63b in kdb_trap (type=3Dtype@entry=3D3, cod=
e=3Dcode@entry=3D0, tf=3Dtf@entry=3D0xfffffe00fc7ae970) at /usr/src/sys/ker=
n/subr_kdb.c:733<br>#7 =C2=A00xffffffff810c695a in trap (frame=3D0xfffffe00=
fc7ae970) at /usr/src/sys/amd64/amd64/trap.c:609<br>#8 =C2=A0<signal han=
dler called><br>#9 =C2=A0kdb_enter (why=3D0xffffffff812c3774 "panic=
", msg=3D<optimized out>) at /usr/src/sys/kern/subr_kdb.c:506<br=
>#10 0xffffffff80c00d30 in vpanic (fmt=3D0xffffffff812b6aa3 "Bad link =
elm %p next->prev !=3D elm", ap=3Dap@entry=3D0xfffffe00fc7aead0) at=
/usr/src/sys/kern/kern_shutdown.c:908<br>#11 0xffffffff80c00ac3 in panic (=
fmt=3D0xffffffff81e8cea0 <cnputs_mtx> "\223\002(\201\377\377\377=
\377") at /usr/src/sys/kern/kern_shutdown.c:844<br>#12 0xffffffff80f83=
76a in vm_freelist_rem (fl=3D0xffffff660cc45778, m=3D0x80, order=3D0) at /u=
sr/src/sys/vm/vm_phys.c:390<br>#13 vm_phys_free_pages (m=3D0xfffffe0002ad8a=
c8, order=3Dorder@entry=3D0) at /usr/src/sys/vm/vm_phys.c:1124<br>#14 0xfff=
fffff80f7b7ac in vm_page_zone_release (arg=3D<optimized out>, store=
=3D0xfffff80001783010, cnt=3D188) at /usr/src/sys/vm/vm_page.c:2596<br>#15 =
0xffffffff80f55a4d in bucket_drain (zone=3Dzone@entry=3D0xfffffe0019861800,=
bucket=3D<optimized out>, bucket@entry=3D0xfffff80001783000) at /usr=
/src/sys/vm/uma_core.c:1363<br>#16 0xffffffff80f50936 in bucket_free (zone=
=3D0xfffffe0019861800, bucket=3D0xfffff80001783000, udata=3D0x0) at /usr/sr=
c/sys/vm/uma_core.c:521<br>#17 zone_put_bucket (zone=3D0xfffffe0019861800, =
zone@entry=3D0xfffff80001783000, domain=3D<optimized out>, bucket=3D0=
xfffff80001783000, bucket@entry=3D0xfffffe0105017560,<br>=C2=A0 =C2=A0 udat=
a=3Dudata@entry=3D0x0, ws=3Dfalse) at /usr/src/sys/vm/uma_core.c:904<br>#18=
0xffffffff80f57823 in zone_free_bucket (zone=3Dzone@entry=3D0xfffffe001986=
1800, bucket=3Dbucket@entry=3D0xfffff80001783000, udata=3Dudata@entry=3D0x0=
,<br>=C2=A0 =C2=A0 itemdomain=3Ditemdomain@entry=3D0, ws=3D<optimized ou=
t>) at /usr/src/sys/vm/uma_core.c:4643<br>#19 0xffffffff80f51091 in cach=
e_free (zone=3Dzone@entry=3D0xfffffe0019861800, cache=3D<optimized out&g=
t;, udata=3Dudata@entry=3D0x0, itemdomain=3D1, itemdomain@entry=3D0)<br>=C2=
=A0 =C2=A0 at /usr/src/sys/vm/uma_core.c:4710<br>#20 0xffffffff80f4fec8 in =
uma_zfree_arg (zone=3D0xfffffe0019861800, item=3D0xfffffe0007970ca0, item@e=
ntry=3D0xfffffe0007970c38, udata=3Dudata@entry=3D0x0)<br>=C2=A0 =C2=A0 at /=
usr/src/sys/vm/uma_core.c:4514<br>#21 0xffffffff80f73515 in uma_zfree (zone=
=3D0xffffffff81e8cea0 <cnputs_mtx>, item=3D<optimized out>) at =
/usr/src/sys/vm/uma.h:404<br>#22 0xffffffff80f7348b in vm_page_free (m=3D0x=
ffffffff81e8cea0 <cnputs_mtx>) at /usr/src/sys/vm/vm_page.c:1330<br>#=
23 0xffffffff80f6d66d in vm_object_terminate_pages (object=3D0xfffff8012e58=
9108) at /usr/src/sys/vm/vm_object.c:907<br>#24 vm_object_terminate (object=
=3Dobject@entry=3D0xfffff8012e589108) at /usr/src/sys/vm/vm_object.c:958<br=
>#25 0xffffffff80f6d37d in vm_object_deallocate (object=3D0xfffff8012e58910=
8) at /usr/src/sys/vm/vm_object.c:693<br>#26 0xffffffff80f5f309 in vm_map_e=
ntry_deallocate (entry=3D0xfffff8012e5fb420, system_map=3D0) at /usr/src/sy=
s/vm/vm_map.c:3813<br>#27 vm_map_process_deferred () at /usr/src/sys/vm/vm_=
map.c:613<br>#28 0xffffffff80f66aa9 in _vm_map_unlock (map=3D<optimized =
out>, line=3D4002, file=3D<optimized out>) at /usr/src/sys/vm/vm_m=
ap.c:676<br>#29 vm_map_remove (map=3D<optimized out>, map@entry=3D0xf=
ffffe01056713f0, start=3D4096, end=3D<optimized out>) at /usr/src/sys=
/vm/vm_map.c:4002<br>#30 0xffffffff80f5edf9 in vmspace_dofree (vm=3D0xfffff=
e01056713f0) at /usr/src/sys/vm/vm_map.c:382<br>#31 vmspace_exit (td=3Dtd@e=
ntry=3D0xfffffe0105017560) at /usr/src/sys/vm/vm_map.c:457<br>#32 0xfffffff=
f80bb2fe8 in exit1 (td=3D<optimized out>, rval=3D<optimized out>=
;, signo=3Dsigno@entry=3D0) at /usr/src/sys/kern/kern_exit.c:421<br>#33 0xf=
fffffff80bb2a8d in sys_exit (td=3D0xffffffff81e8cea0 <cnputs_mtx>, ua=
p=3D<optimized out>) at /usr/src/sys/kern/kern_exit.c:212<br>#34 0xff=
ffffff810c771e in syscallenter (td=3D<optimized out>) at /usr/src/sys=
/amd64/amd64/../../kern/subr_syscall.c:189<br>#35 amd64_syscall (td=3D0xfff=
ffe0105017560, traced=3D0) at /usr/src/sys/amd64/amd64/trap.c:1191<br>#36 &=
lt;signal handler called><br>#37 0x000000080848d1fa in ?? ()<br>Backtrac=
e stopped: Cannot access memory at address 0x7fffffffe848<br><br>I can shar=
e the /var/crash directory if needed.<br><br>Regards<br>--<br>Maurizio<br><=
/div></div>
--000000000000ac4de805d4a942d9--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAN0zgYUYcaXa5J0EjoX84Q=VikAOjXFiRD5H1DCo-VuHcnoBLg>