Date: Fri, 21 Jun 2024 05:59:00 +0000 From: bugzilla-noreply@freebsd.org To: bugs@FreeBSD.org Subject: [Bug 279887] 9pfs kernel page fault on shutdown on UEFI-booted FreeBSD VM Message-ID: <bug-279887-227@https.bugs.freebsd.org/bugzilla/>
next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D279887 Bug ID: 279887 Summary: 9pfs kernel page fault on shutdown on UEFI-booted FreeBSD VM Product: Base System Version: 15.0-CURRENT Hardware: Any OS: Any Status: New Severity: Affects Only Me Priority: --- Component: bin Assignee: bugs@FreeBSD.org Reporter: editor@callfortesting.org Host: 14.1-RELEASE VM: FreeBSD 15.0-CURRENT (GENERIC) #0 main-n270847-42c545c5f8a2: Thu Jun 20 03:41:06 UTC 2024 (First snapshot build to include the 9pfs client) Steps to reproduce: 1. Download the UFS or ZFS VM-IMAGE from 2024-06-20 2. Create a directory to share such as /root/9p 3. Boot a VM with that directory: -s 3,virtio-9p,sharename=3D/root/9p/ 4. VM /boot/loader.conf virtio_p9fs_load=3DYES #vfs.root.mountfrom=3D"p9fs:sharename" VM /etc/fstab sharename /mnt p9fs rw 0 0 5. Enjoy the VM dd(1) to the 9pfs share works reliably 6. VM: shutdown -r now or reboot Result: root@freebsd:~ # mount /dev/gpt/rootfs on / (ufs, local, soft-updates) devfs on /dev (devfs) /dev/gpt/efiboot0 on /boot/efi (msdosfs, local) sharename on /mnt (p9fs, local) root@freebsd:~ # reboot Jun 21 05:47:45 freebsd reboot[697]: rebooted by root Jun 21 05:47:45 freebsd syslogd: exiting on signal 15 Waiting (max 60 seconds) for system process `vnlru' to stop... done Waiting (max 60 seconds) for system process `syncer' to stop...=20 Syncing disks, vnodes remaining... 3 0 0 done All buffers synced. Kernel page fault with the following non-sleepable locks held: exclusive rw vfs hash (vfs hash) r =3D 0 (0xffffffff81803400) locked @ /usr/src/sys/kern/vfs_hash.c:146 stack backtrace: #0 0xffffffff80bb9c9c at witness_debugger+0x6c #1 0xffffffff80bbae79 at witness_warn+0x3e9 #2 0xffffffff8105fdb0 at trap_pfault+0x80 #3 0xffffffff81031448 at calltrap+0x8 #4 0xffffffff82173e5b at p9fs_cleanup+0x12b #5 0xffffffff82175fd7 at p9fs_reclaim+0x37 #6 0xffffffff81129192 at VOP_RECLAIM_APV+0x32 #7 0xffffffff80c3ecb9 at vgonel+0x3a9 #8 0xffffffff80c3e28a at vflush+0x34a #9 0xffffffff821739c3 at p9fs_unmount+0x73 #10 0xffffffff80c32ae5 at dounmount+0x7b5 #11 0xffffffff80c3f66a at vfs_unmountall+0x6a #12 0xffffffff80c0ff93 at bufshutdown+0x323 #13 0xffffffff80b446a3 at kern_reboot+0x703 #14 0xffffffff80b43f46 at sys_reboot+0x396 #15 0xffffffff810606d8 at amd64_syscall+0x158 #16 0xffffffff81031d5b at fast_syscall_common+0xf8 Fatal trap 12: page fault while in kernel mode cpuid =3D 0; apic id =3D 00 fault virtual address =3D 0x47 fault code =3D supervisor read data, page not present instruction pointer =3D 0x20:0xffffffff80c2ba5e stack pointer =3D 0x28:0xfffffe00689c99f0 frame pointer =3D 0x28:0xfffffe00689c9a00 code segment =3D base 0x0, limit 0xfffff, type 0x1b =3D DPL 0, pres 1, long 1, def32 0, gran 1 processor eflags =3D interrupt enabled, resume, IOPL =3D 0 current process =3D 697 (reboot) rdi: ffffffff81803400 rsi: 0000000000000008 rdx: 0000000000000000 rcx: fffff80001fd7040 r8: 0000000000000003 r9: ffffffffffffffff rax: ffffffffffffffff rbx: fffff80001fd7000 rbp: fffffe00689c9a00 r10: 0000000000000000 r11: 0000000000000004 r12: fffff80001d9ec00 r13: 0000000000000000 r14: fffff80001fd7000 r15: fffff80001d9ed80 trap number =3D 12 panic: page fault cpuid =3D 0 time =3D 1718948875 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0x2b/frame 0xfffffe00689c9= 6c0 vpanic() at vpanic+0x13f/frame 0xfffffe00689c97f0 panic() at panic+0x43/frame 0xfffffe00689c9850 trap_fatal() at trap_fatal+0x40b/frame 0xfffffe00689c98b0 trap_pfault() at trap_pfault+0xa0/frame 0xfffffe00689c9920 calltrap() at calltrap+0x8/frame 0xfffffe00689c9920 --- trap 0xc, rip =3D 0xffffffff80c2ba5e, rsp =3D 0xfffffe00689c99f0, rbp = =3D 0xfffffe00689c9a00 --- vfs_hash_remove() at vfs_hash_remove+0x2e/frame 0xfffffe00689c9a00 p9fs_cleanup() at p9fs_cleanup+0x12b/frame 0xfffffe00689c9a40 p9fs_reclaim() at p9fs_reclaim+0x37/frame 0xfffffe00689c9a60 VOP_RECLAIM_APV() at VOP_RECLAIM_APV+0x32/frame 0xfffffe00689c9a80 vgonel() at vgonel+0x3a9/frame 0xfffffe00689c9af0 vflush() at vflush+0x34a/frame 0xfffffe00689c9c30 p9fs_unmount() at p9fs_unmount+0x73/frame 0xfffffe00689c9c80 dounmount() at dounmount+0x7b5/frame 0xfffffe00689c9cf0 vfs_unmountall() at vfs_unmountall+0x6a/frame 0xfffffe00689c9d20 bufshutdown() at bufshutdown+0x323/frame 0xfffffe00689c9d70 kern_reboot() at kern_reboot+0x703/frame 0xfffffe00689c9db0 sys_reboot() at sys_reboot+0x396/frame 0xfffffe00689c9e00 amd64_syscall() at amd64_syscall+0x158/frame 0xfffffe00689c9f30 fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe00689c9f30 --- syscall (55, FreeBSD ELF64, reboot), rip =3D 0x337c8919491a, rsp =3D 0x337c85f24f28, rbp =3D 0x337c85f25cf0 --- KDB: enter: panic [ thread pid 697 tid 100078 ] Stopped at kdb_enter+0x33: movq $0,0x105f692(%rip) db> bt Tracing pid 697 tid 100078 td 0xfffff80001fb7000 kdb_enter() at kdb_enter+0x33/frame 0xfffffe00689c97f0 panic() at panic+0x43/frame 0xfffffe00689c9850 trap_fatal() at trap_fatal+0x40b/frame 0xfffffe00689c98b0 trap_pfault() at trap_pfault+0xa0/frame 0xfffffe00689c9920 calltrap() at calltrap+0x8/frame 0xfffffe00689c9920 --- trap 0xc, rip =3D 0xffffffff80c2ba5e, rsp =3D 0xfffffe00689c99f0, rbp = =3D 0xfffffe00689c9a00 --- vfs_hash_remove() at vfs_hash_remove+0x2e/frame 0xfffffe00689c9a00 p9fs_cleanup() at p9fs_cleanup+0x12b/frame 0xfffffe00689c9a40 p9fs_reclaim() at p9fs_reclaim+0x37/frame 0xfffffe00689c9a60 VOP_RECLAIM_APV() at VOP_RECLAIM_APV+0x32/frame 0xfffffe00689c9a80 vgonel() at vgonel+0x3a9/frame 0xfffffe00689c9af0 vflush() at vflush+0x34a/frame 0xfffffe00689c9c30 p9fs_unmount() at p9fs_unmount+0x73/frame 0xfffffe00689c9c80 dounmount() at dounmount+0x7b5/frame 0xfffffe00689c9cf0 vfs_unmountall() at vfs_unmountall+0x6a/frame 0xfffffe00689c9d20 bufshutdown() at bufshutdown+0x323/frame 0xfffffe00689c9d70 kern_reboot() at kern_reboot+0x703/frame 0xfffffe00689c9db0 sys_reboot() at sys_reboot+0x396/frame 0xfffffe00689c9e00 amd64_syscall() at amd64_syscall+0x158/frame 0xfffffe00689c9f30 fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe00689c9f30 --- syscall (55, FreeBSD ELF64, reboot), rip =3D 0x337c8919491a, rsp =3D 0x337c85f24f28, rbp =3D 0x337c85f25cf0 --- --=20 You are receiving this mail because: You are the assignee for the bug.=
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-279887-227>