From owner-freebsd-current@freebsd.org Sat Jul 13 22:58:14 2019 Return-Path: Delivered-To: freebsd-current@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 1661915CF741 for ; Sat, 13 Jul 2019 22:58:14 +0000 (UTC) (envelope-from ler@lerctr.org) Received: from thebighonker.lerctr.org (ns-b.lerctr.org [IPv6:2001:470:1f0f:3ad::53:2]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "*.lerctr.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 3BA1973205 for ; Sat, 13 Jul 2019 22:58:12 +0000 (UTC) (envelope-from ler@lerctr.org) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=lerctr.org; s=ler2019; h=Message-ID:References:In-Reply-To:Subject:Cc:To:From:Date: Content-Transfer-Encoding:Content-Type:MIME-Version:Sender:Reply-To: Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender: Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=jytyRYAEb/Gh7dSSC9eCXaqTTXESILtlkeWU7Ax2on0=; b=AZJ6oWbx5H0iPdb15RZzaLYUlf cwYrW4l0eH49gm1xcYWDLE1nXdsBEERvZ+xWkgfhcgDvACocmjGfCFowtxdD0S6hBTU1WY+LkmXM8 3+74hFj9v28r99mgGR5K90y9ay+I4bS8mJicdiz+YH3uiwkqEYCD+oyWB4cxueEKgtfDxTEYMWtAT ZRKHxBQxJgqrjrIVfXBeHhoFHdEgzuFzZMH4YICSYYLiaXGDqJ4EqlfG320mQ4LpsE9DAfkRFuO6U 5nPYIHzq9mn9NN9msDs6zGw/K/OZSjmQYSLBPa5srHNhTPvDGWW3BCcghmERXxnnilK0/wlN55IbK 2r1tLqUQ==; Received: from thebighonker.lerctr.org ([2001:470:1f0f:3ad:bb:dcff:fe50:d900]:57412 helo=webmail.lerctr.org) by thebighonker.lerctr.org with esmtpsa (TLSv1.3:TLS_AES_256_GCM_SHA384:256) (Exim 4.92 (FreeBSD)) (envelope-from ) id 1hmQy2-0008zG-Av; Sat, 13 Jul 2019 17:58:10 -0500 Received: from 2600:1700:210:b180:f157:6b99:8553:a9d by webmail.lerctr.org with HTTP (HTTP/1.1 POST); Sat, 13 Jul 2019 17:58:10 -0500 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit Date: Sat, 13 Jul 2019 17:58:10 -0500 From: Larry Rosenman To: Konstantin Belousov Cc: Freebsd current Subject: Re: panic: vm_page_free_prep: freeing mapped page In-Reply-To: <20190713221457.GP47193@kib.kiev.ua> References: <20190713221457.GP47193@kib.kiev.ua> Message-ID: X-Sender: ler@lerctr.org User-Agent: Roundcube Webmail/1.3.9 X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 13 Jul 2019 22:58:14 -0000 On 07/13/2019 5:14 pm, Konstantin Belousov wrote: > On Sat, Jul 13, 2019 at 04:50:57PM -0500, Larry Rosenman wrote: >> I have cores. Ideas? >> svn rev: r349976 >> >> [I] ➜ more core.txt.12 >> borg.lerctr.org dumped core - see /var/crash/vmcore.12 >> >> Sat Jul 13 16:47:03 CDT 2019 >> >> FreeBSD borg.lerctr.org 13.0-CURRENT FreeBSD 13.0-CURRENT r349976 >> LER-MINIMAL amd64 >> >> panic: vm_page_free_prep: freeing mapped page 0xfffff82031044790 >> >> GNU gdb (GDB) 8.3 [GDB v8.3 for FreeBSD] >> Copyright (C) 2019 Free Software Foundation, Inc. >> License GPLv3+: GNU GPL version 3 or later >> >> This is free software: you are free to change and redistribute it. >> There is NO WARRANTY, to the extent permitted by law. >> Type "show copying" and "show warranty" for details. >> This GDB was configured as "x86_64-portbld-freebsd13.0". >> Type "show configuration" for configuration details. >> For bug reporting instructions, please see: >> . >> Find the GDB manual and other documentation resources online at: >> . >> >> For help, type "help". >> Type "apropos word" to search for commands related to "word"... >> Reading symbols from /boot/kernel/kernel... >> Reading symbols from /usr/lib/debug//boot/kernel/kernel.debug... >> >> Unread portion of the kernel message buffer: >> panic: vm_page_free_prep: freeing mapped page 0xfffff82031044790 >> cpuid = 21 >> time = 1563053382 >> KDB: stack backtrace: >> db_trace_self_wrapper() at db_trace_self_wrapper+0x2b/frame >> 0xfffffe018f9fd890 >> vpanic() at vpanic+0x19d/frame 0xfffffe018f9fd8e0 >> panic() at panic+0x43/frame 0xfffffe018f9fd940 >> vm_page_free_prep() at vm_page_free_prep+0x18a/frame >> 0xfffffe018f9fd960 >> vm_page_free_toq() at vm_page_free_toq+0x12/frame 0xfffffe018f9fd990 >> vm_object_terminate() at vm_object_terminate+0x1db/frame >> 0xfffffe018f9fd9e0 >> vm_object_deallocate() at vm_object_deallocate+0x412/frame >> 0xfffffe018f9fda40 >> vm_map_process_deferred() at vm_map_process_deferred+0x7f/frame >> 0xfffffe018f9fda60 >> kern_munmap() at kern_munmap+0x181/frame 0xfffffe018f9fdad0 >> amd64_syscall() at amd64_syscall+0x25c/frame 0xfffffe018f9fdbf0 >> fast_syscall_common() at fast_syscall_common+0x101/frame >> 0xfffffe018f9fdbf0 >> --- syscall (73, FreeBSD ELF64, sys_munmap), rip = 0x80119978a, rsp = >> 0x7fffffffce18, rbp = 0x7fffffffce20 --- >> Uptime: 2h27m22s >> Dumping 15640 out of 131026 >> MB:..1%..11%..21%..31%..41%..51%..61%..71%..81%..91% >> >> __curthread () at /usr/src/sys/amd64/include/pcpu.h:246 >> 246 __asm("movq %%gs:%P1,%0" : "=r" (td) : "n" >> (OFFSETOF_CURTHREAD)); >> (kgdb) #0 __curthread () at /usr/src/sys/amd64/include/pcpu.h:246 >> #1 doadump (textdump=1) at /usr/src/sys/kern/kern_shutdown.c:392 >> #2 0xffffffff804b6620 in kern_reboot (howto=260) >> at /usr/src/sys/kern/kern_shutdown.c:479 >> #3 0xffffffff804b6a99 in vpanic (fmt=, ap=> out>) >> at /usr/src/sys/kern/kern_shutdown.c:905 >> #4 0xffffffff804b67d3 in panic (fmt=) >> at /usr/src/sys/kern/kern_shutdown.c:832 >> #5 0xffffffff8076c21a in vm_page_free_prep (m=0xfffff82031044790) >> at /usr/src/sys/vm/vm_page.c:3273 >> #6 0xffffffff80768152 in vm_page_free_toq (m=0xfffff82031044790) >> at /usr/src/sys/vm/vm_page.c:3483 >> #7 0xffffffff8076321b in vm_object_terminate_pages (object=> out>) >> at /usr/src/sys/vm/vm_object.c:726 >> #8 vm_object_terminate (object=0xfffff81b924c9600) >> at /usr/src/sys/vm/vm_object.c:798 >> #9 0xffffffff80762582 in vm_object_deallocate >> (object=0xfffff81b924c9600) >> at /usr/src/sys/vm/vm_object.c:663 >> #10 0xffffffff80756aef in vm_map_entry_deallocate (entry=> out>, >> system_map=0) at /usr/src/sys/vm/vm_map.c:3457 >> #11 vm_map_process_deferred () at /usr/src/sys/vm/vm_map.c:586 >> #12 0xffffffff807606b1 in kern_munmap (td=0xfffff80c207e0000, >> addr0=, size=149200896) at >> /usr/src/sys/vm/vm_mmap.c:603 >> #13 0xffffffff807adaac in syscallenter (td=0xfffff80c207e0000) >> at /usr/src/sys/amd64/amd64/../../kern/subr_syscall.c:135 >> #14 amd64_syscall (td=0xfffff80c207e0000, traced=0) >> at /usr/src/sys/amd64/amd64/trap.c:1181 >> #15 >> #16 0x000000080119978a in ?? () >> Backtrace stopped: Cannot access memory at address 0x7fffffffce18 >> (kgdb) > > What was the process which caused the panic ? Was it threaded ? I got a second one: [00:02:04] Building 43 packages using 24 builders [00:02:04] Starting/Cloning builders [00:02:07] Hit CTRL+t at any time to see build progress and stats [00:02:07] [01] [00:00:00] Building devel/llvm80 | llvm80-8.0.0_2 [00:02:07] [02] [00:00:00] Building lang/gcc48 | gcc48-4.8.5_10 [00:02:07] [03] [00:00:00] Building lang/gcc8 | gcc8-8.3.0_2 [00:35:48] [02] [00:33:41] Finished lang/gcc48 | gcc48-4.8.5_10: Success [00:35:50] [02] [00:00:00] Building sysutils/uefi-edk2-bhyve | uefi-edk2-bhyve-0.2_1,1 packet_write_wait: Connection to 2600:1700:210:b180:a6ba:dbff:fe29:6695 port 22: Broken pipe [I] ➜ more core.txt.13 borg.lerctr.org dumped core - see /var/crash/vmcore.13 Sat Jul 13 17:38:44 CDT 2019 FreeBSD borg.lerctr.org 13.0-CURRENT FreeBSD 13.0-CURRENT r349976 LER-MINIMAL amd64 panic: freeing mapped page 0xfffff82024146980 GNU gdb (GDB) 8.3 [GDB v8.3 for FreeBSD] Copyright (C) 2019 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-portbld-freebsd13.0". Type "show configuration" for configuration details. For bug reporting instructions, please see: . Find the GDB manual and other documentation resources online at: . For help, type "help". Type "apropos word" to search for commands related to "word"... Reading symbols from /boot/kernel/kernel... Reading symbols from /usr/lib/debug//boot/kernel/kernel.debug... Unread portion of the kernel message buffer: panic: freeing mapped page 0xfffff82024146980 cpuid = 4 time = 1563056884 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0x2b/frame 0xfffffe03fdf757e0 vpanic() at vpanic+0x19d/frame 0xfffffe03fdf75830 panic() at panic+0x43/frame 0xfffffe03fdf75890 vm_object_collapse_scan() at vm_object_collapse_scan+0x326/frame 0xfffffe03fdf758f0 vm_object_collapse() at vm_object_collapse+0x13a/frame 0xfffffe03fdf75960 vm_object_deallocate() at vm_object_deallocate+0x4af/frame 0xfffffe03fdf759c0 vm_map_process_deferred() at vm_map_process_deferred+0x7f/frame 0xfffffe03fdf759e0 vm_map_remove() at vm_map_remove+0xc6/frame 0xfffffe03fdf75a10 vmspace_exit() at vmspace_exit+0xd8/frame 0xfffffe03fdf75a50 exit1() at exit1+0x58d/frame 0xfffffe03fdf75ac0 sys_sys_exit() at sys_sys_exit+0xd/frame 0xfffffe03fdf75ad0 amd64_syscall() at amd64_syscall+0x25c/frame 0xfffffe03fdf75bf0 fast_syscall_common() at fast_syscall_common+0x101/frame 0xfffffe03fdf75bf0 --- syscall (1, FreeBSD ELF64, sys_sys_exit), rip = 0x80112d92a, rsp = 0x7fffffffcd58, rbp = 0x7fffffffcd70 --- Uptime: 50m59s Dumping 11669 out of 131026 MB:..1%..11%..21%..31%..41%..51%..61%..71%..81%..91% __curthread () at /usr/src/sys/amd64/include/pcpu.h:246 246 __asm("movq %%gs:%P1,%0" : "=r" (td) : "n" (OFFSETOF_CURTHREAD)); (kgdb) #0 __curthread () at /usr/src/sys/amd64/include/pcpu.h:246 #1 doadump (textdump=1) at /usr/src/sys/kern/kern_shutdown.c:392 #2 0xffffffff804b6620 in kern_reboot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:479 #3 0xffffffff804b6a99 in vpanic (fmt=, ap=) at /usr/src/sys/kern/kern_shutdown.c:905 #4 0xffffffff804b67d3 in panic (fmt=) at /usr/src/sys/kern/kern_shutdown.c:832 #5 0xffffffff80764df6 in vm_object_collapse_scan (object=, op=4) at /usr/src/sys/vm/vm_object.c:1582 #6 0xffffffff8076298a in vm_object_collapse (object=0xfffff80c6f32ba00) at /usr/src/sys/vm/vm_object.c:1760 #7 0xffffffff8076261f in vm_object_deallocate (object=0xfffff80c6f32ba00) at /usr/src/sys/vm/vm_object.c:636 #8 0xffffffff80756aef in vm_map_entry_deallocate (entry=, system_map=0) at /usr/src/sys/vm/vm_map.c:3457 #9 vm_map_process_deferred () at /usr/src/sys/vm/vm_map.c:586 #10 0xffffffff8075c796 in _vm_map_unlock (map=, file=, line=3658) at /usr/src/sys/vm/vm_map.c:599 #11 vm_map_remove (map=, start=4096, end=140737488355328) at /usr/src/sys/vm/vm_map.c:3658 #12 0xffffffff807566f8 in vmspace_dofree (vm=) at /usr/src/sys/vm/vm_map.c:335 #13 vmspace_exit (td=0xfffff81310e4a000) at /usr/src/sys/vm/vm_map.c:416 #14 0xffffffff80476dbd in exit1 (td=0xfffff81310e4a000, rval=, signo=0) at /usr/src/sys/kern/kern_exit.c:417 #15 0xffffffff8047682d in sys_sys_exit (td=, uap=) at /usr/src/sys/kern/kern_exit.c:195 #16 0xffffffff807adaac in syscallenter (td=0xfffff81310e4a000) at /usr/src/sys/amd64/amd64/../../kern/subr_syscall.c:135 #17 amd64_syscall (td=0xfffff81310e4a000, traced=0) at /usr/src/sys/amd64/amd64/trap.c:1181 #18 #19 0x000000080112d92a in ?? () Backtrace stopped: Cannot access memory at address 0x7fffffffcd58 (kgdb) -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 E-Mail: ler@lerctr.org US Mail: 5708 Sabbia Dr, Round Rock, TX 78665-2106