From owner-freebsd-bugs@FreeBSD.ORG Tue May 26 20:02:23 2015 Return-Path: Delivered-To: freebsd-bugs@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id B3E904CA for ; Tue, 26 May 2015 20:02:23 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2001:1900:2254:206a::16:76]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 95B689D7 for ; Tue, 26 May 2015 20:02:23 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from bugs.freebsd.org ([127.0.1.118]) by kenobi.freebsd.org (8.14.9/8.14.9) with ESMTP id t4QK2N50027885 for ; Tue, 26 May 2015 20:02:23 GMT (envelope-from bugzilla-noreply@freebsd.org) From: bugzilla-noreply@freebsd.org To: freebsd-bugs@FreeBSD.org Subject: [Bug 200474] Fatal trap 12 in counter_u64_zero_one_cpu Date: Tue, 26 May 2015 20:02:23 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: new X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 10.1-STABLE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: olgeni@FreeBSD.org X-Bugzilla-Status: New X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: freebsd-bugs@FreeBSD.org X-Bugzilla-Target-Milestone: --- X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: bug_id short_desc product version rep_platform op_sys bug_status bug_severity priority component assigned_to reporter attachments.created Message-ID: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: 7bit X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated MIME-Version: 1.0 X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 26 May 2015 20:02:23 -0000 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=200474 Bug ID: 200474 Summary: Fatal trap 12 in counter_u64_zero_one_cpu Product: Base System Version: 10.1-STABLE Hardware: Any OS: Any Status: New Severity: Affects Only Me Priority: --- Component: kern Assignee: freebsd-bugs@FreeBSD.org Reporter: olgeni@FreeBSD.org Created attachment 157177 --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=157177&action=edit full dmesg buffer I got this panic on 10.1-STABLE FreeBSD 10.1-STABLE #3 r283361. There's not much context here: lots of starting/stopping a single bhyve VM while testing, and at some point a script tried to create lots of tap interface, which were then removed. Not sure if it could be related. Firefox got a signal 10 while browsing, its window disappeared and immediately after I got the panic. kernel trap 12 with interrupts disabled Fatal trap 12: page fault while in kernel mode cpuid = 3; apic id = 03 fault virtual address = 0xc00 fault code = supervisor write data, page not present instruction pointer = 0x20:0xffffffff80997b8a stack pointer = 0x28:0xfffffe046a6f4570 frame pointer = 0x28:0xfffffe046a6f4590 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, long 1, def32 0, gran 1 processor eflags = resume, IOPL = 0 current process = 15284 (firefox) trap number = 12 panic: page fault cpuid = 3 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0x2b/frame 0xfffffe046a6f4030 kdb_backtrace() at kdb_backtrace+0x39/frame 0xfffffe046a6f40e0 panic() at panic+0x1c1/frame 0xfffffe046a6f41a0 trap_fatal() at trap_fatal+0x38f/frame 0xfffffe046a6f4200 trap_pfault() at trap_pfault+0x2ed/frame 0xfffffe046a6f42a0 trap() at trap+0x47a/frame 0xfffffe046a6f44b0 calltrap() at calltrap+0x8/frame 0xfffffe046a6f44b0 --- trap 0xc, rip = 0xffffffff80997b8a, rsp = 0xfffffe046a6f4570, rbp = 0xfffffe046a6f4590 --- counter_u64_zero_one_cpu() at counter_u64_zero_one_cpu+0x1a/frame 0xfffffe046a6f4590 smp_rendezvous_action() at smp_rendezvous_action+0xbc/frame 0xfffffe046a6f45c0 Xrendezvous() at Xrendezvous+0x89/frame 0xfffffe046a6f45c0 --- interrupt, rip = 0xffffffff80d7c965, rsp = 0xfffffe046a6f4680, rbp = 0xfffffe046a6f4760 --- pmap_remove_pages() at pmap_remove_pages+0x285/frame 0xfffffe046a6f4760 vmspace_exit() at vmspace_exit+0x9c/frame 0xfffffe046a6f47a0 exit1() at exit1+0x63f/frame 0xfffffe046a6f4830 sigexit() at sigexit+0x925/frame 0xfffffe046a6f4af0 postsig() at postsig+0x286/frame 0xfffffe046a6f4bb0 ast() at ast+0x427/frame 0xfffffe046a6f4bf0 doreti_ast() at doreti_ast+0x1f/frame 0x801dd1780 Uptime: 1d23h6m2s Checking if I can reproduce it somehow... -- You are receiving this mail because: You are the assignee for the bug.