Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 07 Nov 2020 22:41:45 +0000
From:      bugzilla-noreply@freebsd.org
To:        bugs@FreeBSD.org
Subject:   [Bug 250934] grub-bhyve "ls" causes kernel panic
Message-ID:  <bug-250934-227@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D250934

            Bug ID: 250934
           Summary: grub-bhyve "ls" causes kernel panic
           Product: Base System
           Version: CURRENT
          Hardware: amd64
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: kern
          Assignee: bugs@FreeBSD.org
          Reporter: warlock@phouka.net

Created attachment 219438
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D219438&action=
=3Dedit
kernel dump text

I'm trying to grub-bhyve the OEL8 boot disk.  I initiate it as:

grub-bhyve -m /home/warlock/pit/cfg/root/oel8-device.map -r cd0 -M 4096M oe=
l8

The device map file has this:

(hd0) /dev/zvol/zaux/oel8
(cd0) /zroot/stash/iso/oel8.2_x64_boot.iso

Those both obviously use ZFS resources.  To cause the panic, I just type th=
is:

grub> ls

The ISO is Oracle's version of RedHat 8.  If it happens to be the bad actor=
 you
can probably grab your own copy:

SHA1 (oel8.2_x64_boot.iso) =3D 54b1094367a80893167ad8cec37e9be638503917

That is a renamed V996905-01.iso, Hopefully you won't need to grab it yours=
elf
(free, but they make you jump through hoops).  The zdev was just created li=
ke
this:

zfs create -V64G -o volmode=3Ddev zaux/oel8

I've attached the crash dump text, but the short version is below.  The "di=
rty"
part is the r367433 pre-patch on top of r367430.

FreeBSD ouroboros.phouka.net 13.0-CURRENT FreeBSD 13.0-CURRENT #226
r367430+999604acfd94-c272718(master)-dirty: Fri Nov  6 12:56:43 PST 2020=20=
=20=20=20
warlock@ouroboros.phouka.net:/usr/obj/usr/src/amd64.amd64/sys/GENERIC  amd64
...
Fatal trap 12: page fault while in kernel mode
cpuid =3D 1; apic id =3D 02
fault virtual address   =3D 0x28
fault code              =3D supervisor read data, page not present
instruction pointer     =3D 0x20:0xffffffff82895808
stack pointer           =3D 0x28:0xfffffe00e0927550
frame pointer           =3D 0x28:0xfffffe00e09275b0
code segment            =3D base 0x0, limit 0xfffff, type 0x1b
                        =3D DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags        =3D interrupt enabled, resume, IOPL =3D 0
current process         =3D 3307 (grub-bhyve)
trap number             =3D 12
panic: page fault
cpuid =3D 1
time =3D 1604786502
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x2b/frame 0xfffffe00e0927=
200
vpanic() at vpanic+0x182/frame 0xfffffe00e0927250
panic() at panic+0x43/frame 0xfffffe00e09272b0
trap_fatal() at trap_fatal+0x387/frame 0xfffffe00e0927310
trap_pfault() at trap_pfault+0x97/frame 0xfffffe00e0927370
trap() at trap+0x2ab/frame 0xfffffe00e0927480
calltrap() at calltrap+0x8/frame 0xfffffe00e0927480
--- trap 0xc, rip =3D 0xffffffff82895808, rsp =3D 0xfffffe00e0927550, rbp =
=3D
0xfffffe00e09275b0 ---
zil_async_to_sync() at zil_async_to_sync+0x18/frame 0xfffffe00e09275b0
zvol_cdev_open() at zvol_cdev_open+0x322/frame 0xfffffe00e09275f0
devfs_open() at devfs_open+0x12f/frame 0xfffffe00e0927660
VOP_OPEN_APV() at VOP_OPEN_APV+0x35/frame 0xfffffe00e0927680
vn_open_vnode() at vn_open_vnode+0x19a/frame 0xfffffe00e0927720
vn_open_cred() at vn_open_cred+0x3d5/frame 0xfffffe00e0927870
kern_openat() at kern_openat+0x263/frame 0xfffffe00e09279c0
amd64_syscall() at amd64_syscall+0x131/frame 0xfffffe00e0927af0
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe00e0927af0
--- syscall (499, FreeBSD ELF64, sys_openat), rip =3D 0x8009ead4a, rsp =3D
0x7fffffffdea8, rbp =3D 0x7fffffffdf20 ---
KDB: enter: panic
Uptime: 16h31m34s
Dumping 4205 out of 32633 MB:..1%..11%..21%..31%..41%..51%..61%..71%..81%..=
91%

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-250934-227>