From owner-freebsd-bugs@freebsd.org Fri Jun 22 13:19:13 2018 Return-Path: Delivered-To: freebsd-bugs@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id C2E11101B704 for ; Fri, 22 Jun 2018 13:19:13 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mailman.ysv.freebsd.org (mailman.ysv.freebsd.org [IPv6:2001:1900:2254:206a::50:5]) by mx1.freebsd.org (Postfix) with ESMTP id 5A9997017D for ; Fri, 22 Jun 2018 13:19:13 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: by mailman.ysv.freebsd.org (Postfix) id 185BA101B700; Fri, 22 Jun 2018 13:19:13 +0000 (UTC) Delivered-To: bugs@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id EA6B2101B6FE for ; Fri, 22 Jun 2018 13:19:12 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.ysv.freebsd.org (mxrelay.ysv.freebsd.org [IPv6:2001:1900:2254:206a::19:3]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mxrelay.ysv.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 866DC7016C for ; Fri, 22 Jun 2018 13:19:12 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2001:1900:2254:206a::16:76]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mxrelay.ysv.freebsd.org (Postfix) with ESMTPS id C3124C4B3 for ; Fri, 22 Jun 2018 13:19:11 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.118]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id w5MDJBr6018296 for ; Fri, 22 Jun 2018 13:19:11 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id w5MDJB1j018295 for bugs@FreeBSD.org; Fri, 22 Jun 2018 13:19:11 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: bugs@FreeBSD.org Subject: [Bug 229222] 11.2-PRERELEASE panic-General Protection Fault, aesni_encrypt_cbc implicated Date: Fri, 22 Jun 2018 13:19:11 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 11.2-STABLE X-Bugzilla-Keywords: regression X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: dewayne@heuristicsystems.com.au X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: bugs@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated MIME-Version: 1.0 X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.26 Precedence: list List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Jun 2018 13:19:14 -0000 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D229222 --- Comment #3 from dewayne@heuristicsystems.com.au --- (In reply to Konstantin Belousov from comment #2) Thank-you for looking into this. I should clarify an earlier observation. = It appears that the ssh connection was initiated from within an i386 jail that resides on the amd64 base system. i386 jails run openssl and not libressl. To you request Konstantin (kgdb) disassemble 0xffffffff80df76ee Dump of assembler code for function aesni_encrypt_cbc: 0xffffffff80df76b0 : push %rbp 0xffffffff80df76b1 : mov %rsp,%rbp 0xffffffff80df76b4 : sub $0x90,%rsp 0xffffffff80df76bb : mov %edi,-0x2c(%rbp) 0xffffffff80df76be : mov %rsi,-0x38(%rbp) 0xffffffff80df76c2 : mov %rdx,-0x40(%rbp) 0xffffffff80df76c6 : mov %rcx,-0x48(%rbp) 0xffffffff80df76ca : mov %r8,-0x50(%rbp) 0xffffffff80df76ce : mov %r9,-0x58(%rbp) 0xffffffff80df76d2 : mov -0x40(%rbp),%rcx 0xffffffff80df76d6 : shr $0x4,%rcx 0xffffffff80df76da : mov %rcx,-0x40(%rbp) 0xffffffff80df76de : mov -0x58(%rbp),%rcx 0xffffffff80df76e2 : mov %rcx,-0x28(%rbp) 0xffffffff80df76e6 : mov -0x28(%rbp),%rcx 0xffffffff80df76ea : movdqu (%rcx),%xmm0 0xffffffff80df76ee : movdqa %xmm0,-0x80(%rbp) 0xffffffff80df76f3 : movq $0x0,-0x88(%rbp) 0xffffffff80df76fe : mov -0x88(%rbp),%rax 0xffffffff80df7705 : cmp -0x40(%rbp),%rax 0xffffffff80df7709 : jae 0xffffffff80df7795 0xffffffff80df770f : mov -0x2c(%rbp),%eax 0xffffffff80df7712 : sub $0x1,%eax 0xffffffff80df7715 : mov -0x38(%rbp),%rcx 0xffffffff80df7719 : mov -0x48(%rbp),%rdx 0xffffffff80df771d : mov %rdx,-0x8(%rbp) 0xffffffff80df7721 : mov -0x8(%rbp),%rdx 0xffffffff80df7725 : movdqu (%rdx),%xmm0 0xffffffff80df7729 : pxor -0x80(%rbp),%xmm0 0xffffffff80df772e : mov %eax,%edi 0xffffffff80df7730 : mov %rcx,%rsi 0xffffffff80df7733 : callq 0xffffffff80df77a0 0xffffffff80df7738 : movdqa %xmm0,-0x70(%rbp) 0xffffffff80df773d : movdqa -0x70(%rbp),%xmm0 0xffffffff80df7742 : movdqa %xmm0,-0x80(%rbp) 0xffffffff80df7747 : mov -0x50(%rbp),%rcx ---Type to continue, or q to quit--- 0xffffffff80df774b : movdqa -0x70(%rbp),%xmm0 0xffffffff80df7750 : mov %rcx,-0x10(%rbp) 0xffffffff80df7754 : movdqa %xmm0,-0x20(%rbp) 0xffffffff80df7759 : movdqa -0x20(%rbp),%xmm0 0xffffffff80df775e : mov -0x10(%rbp),%rcx 0xffffffff80df7762 : movdqu %xmm0,(%rcx) 0xffffffff80df7766 : mov -0x48(%rbp),%rcx 0xffffffff80df776a : add $0x10,%rcx 0xffffffff80df776e : mov %rcx,-0x48(%rbp) 0xffffffff80df7772 : mov -0x50(%rbp),%rcx 0xffffffff80df7776 : add $0x10,%rcx 0xffffffff80df777a : mov %rcx,-0x50(%rbp) 0xffffffff80df777e : mov -0x88(%rbp),%rax 0xffffffff80df7785 : add $0x1,%rax 0xffffffff80df7789 : mov %rax,-0x88(%rbp) 0xffffffff80df7790 : jmpq 0xffffffff80df76fe 0xffffffff80df7795 : add $0x90,%rsp 0xffffffff80df779c : pop %rbp 0xffffffff80df779d : retq End of assembler dump. Current language: auto; currently minimal (kgdb) p/x *(struct frame *)0xfffffe0688f57d30 No struct type named frame. Happy to provide any information that will help. I'm GMT+10, 23:18 local, so may take awhile. --=20 You are receiving this mail because: You are the assignee for the bug.=