From owner-freebsd-virtualization@FreeBSD.ORG Sun Jul 6 15:46:33 2014 Return-Path: Delivered-To: virtualization@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 15443958; Sun, 6 Jul 2014 15:46:33 +0000 (UTC) Received: from mouf.net (mouf.net [IPv6:2607:fc50:0:4400:216:3eff:fe69:33b3]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "mouf.net", Issuer "mouf.net" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id DB2482C38; Sun, 6 Jul 2014 15:46:32 +0000 (UTC) Received: from mouf.net (swills@mouf [199.48.129.64]) by mouf.net (8.14.5/8.14.5) with ESMTP id s66FkMMH083091 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Sun, 6 Jul 2014 15:46:27 GMT (envelope-from swills@mouf.net) Received: (from swills@localhost) by mouf.net (8.14.5/8.14.5/Submit) id s66FkMBN083090; Sun, 6 Jul 2014 15:46:22 GMT (envelope-from swills) Date: Sun, 6 Jul 2014 15:46:22 +0000 From: Steve Wills To: current@freebsd.org, virtualization@freebsd.org Subject: Re: tmpfs panic Message-ID: <20140706154621.GA81830@mouf.net> References: <20140706135333.GA80856@mouf.net> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="YiEDa0DAkWCtVeE4" Content-Disposition: inline In-Reply-To: <20140706135333.GA80856@mouf.net> User-Agent: Mutt/1.5.23 (2014-03-12) X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.4.3 (mouf.net [199.48.129.64]); Sun, 06 Jul 2014 15:46:28 +0000 (UTC) X-Spam-Status: No, score=0.0 required=4.5 tests=none autolearn=unavailable version=3.3.2 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on mouf.net X-Virus-Scanned: clamav-milter 0.98.1 at mouf.net X-Virus-Status: Clean X-BeenThere: freebsd-virtualization@freebsd.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: "Discussion of various virtualization techniques FreeBSD supports." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 06 Jul 2014 15:46:33 -0000 --YiEDa0DAkWCtVeE4 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable I should have noted this system is running in bhyve. Also I'm told this pan= ic may be related to the fact that the system is running in bhyve. Looking at it a little more closely: (kgdb) list *__mtx_lock_sleep+0xb1 0xffffffff809638d1 is in __mtx_lock_sleep (/usr/src/sys/kern/kern_mutex.c:4= 31). 426 * owner stops running or the state of the lock cha= nges. 427 */ 428 v =3D m->mtx_lock; 429 if (v !=3D MTX_UNOWNED) { 430 owner =3D (struct thread *)(v & ~MTX_FLAGMA= SK); 431 if (TD_IS_RUNNING(owner)) { 432 if (LOCK_LOG_TEST(&m->lock_object, = 0)) 433 CTR3(KTR_LOCK, 434 "%s: spinning on %p hel= d by %p", 435 __func__, m, owner); (kgdb)=20 I'm told that MTX_CONTESTED was set on the unlocked mtx and that MTX_CONTEN= DED is spuriously left behind, and to ask how lock prefix is handled in bhyve. = Any of that make sense to anyone? Thanks, Steve On Sun, Jul 06, 2014 at 01:53:37PM +0000, Steve Wills wrote: > Hi, >=20 > Just experienced this tmpfs panic on r268160: >=20 > Freed UMA keg (TMPFS node) was not empty (16 items). Lost 1 pages of mem= ory. >=20 >=20 > Fatal trap 12: page fault while in kernel mode > cpuid =3D 12; apic id =3D 0c > fault virtual address =3D 0x378 > fault code =3D supervisor read data, page not present > instruction pointer =3D 0x20:0xffffffff809638d1 > stack pointer =3D 0x28:0xfffffe07243800a0 > frame pointer =3D 0x28:0xfffffe0724380120 > code segment =3D base 0x0, limit 0xfffff, type 0x1b > =3D DPL 0, pres 1, long 1, def32 0, gran 1 > processor eflags =3D interrupt enabled, resume, IOPL =3D 0 > current process =3D 65339 (pkg-static) > [ thread pid 65339 tid 101641 ] > Stopped at __mtx_lock_sleep+0xb1: movl 0x378(%rax),%ecx > db> bt > Tracing pid 65339 tid 101641 td 0xfffff80286b2e490 > __mtx_lock_sleep() at __mtx_lock_sleep+0xb1/frame 0xfffffe0724380120 > free_unr() at free_unr+0x9d/frame 0xfffffe0724380160 > tmpfs_free_node() at tmpfs_free_node+0xf2/frame 0xfffffe07243801a0 > tmpfs_reclaim() at tmpfs_reclaim+0xdc/frame 0xfffffe07243801d0 > VOP_RECLAIM_APV() at VOP_RECLAIM_APV+0xa7/frame 0xfffffe0724380200 > vgonel() at vgonel+0x24c/frame 0xfffffe0724380280 > vrecycle() at vrecycle+0x84/frame 0xfffffe07243802c0 > tmpfs_inactive() at tmpfs_inactive+0x18/frame 0xfffffe07243802d0 > VOP_INACTIVE_APV() at VOP_INACTIVE_APV+0xa7/frame 0xfffffe0724380300 > vinactive() at vinactive+0x181/frame 0xfffffe0724380360 > vputx() at vputx+0x30d/frame 0xfffffe07243803d0 > vn_close() at vn_close+0x13e/frame 0xfffffe0724380450 > vn_closefile() at vn_closefile+0x48/frame 0xfffffe07243804d0 > _fdrop() at _fdrop+0x29/frame 0xfffffe07243804f0 > closef() at closef+0x2ae/frame 0xfffffe0724380580 > fdescfree() at fdescfree+0x64c/frame 0xfffffe0724380630 > exit1() at exit1+0x682/frame 0xfffffe07243806c0 > sigexit() at sigexit+0x929/frame 0xfffffe0724380980 > postsig() at postsig+0x3c4/frame 0xfffffe0724380a70 > ast() at ast+0x487/frame 0xfffffe0724380ab0 > doreti_ast() at doreti_ast+0x1f/frame 0x7fffffffc6e0 > db>=20 >=20 > Any further debugging I can do? >=20 > Thanks, > Steve --YiEDa0DAkWCtVeE4 Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEcBAEBAgAGBQJTuW9NAAoJEPXPYrMgexuhjY4IAJQGh3fo3FBJKkK0Kfh21W2W Qlr4NCa04RB7PY7ra9dqvIvIztMhzgrD+qCcPQYdj0Jt+BqdAJo9yjTDkJAPh++d dbJXDYD2wr8TV/bPo+iU3tMy5qRF2SnJjiqJzf6MBzQ/IwLzSigCF+5yVL85Uest U0sX8sEOOu3mYvp7lOe9PeyvzpB0BBvckVzLQyvynsFwFgvzcfC9FNQYjo8i3KFy +/5PkANY199FyVxp/+F2/yA5G9c+OiF1F+LUeaCgr82ye9dMwrDV9gU/ySLkDixd +SWbscnBnNBLD26ne4EbaVPxw7TdMaQCR0uxOkloMIEXFJIkpFmTxeKi/z0w5zM= =8lEj -----END PGP SIGNATURE----- --YiEDa0DAkWCtVeE4--