[Bug 257885] panic: vm_fault: fault on nofault entry during elf64_coredump

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=257885

            Bug ID: 257885
           Summary: panic: vm_fault: fault on nofault entry during
                    elf64_coredump
           Product: Base System
           Version: 12.2-RELEASE
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: kern
          Assignee: bugs@FreeBSD.org
          Reporter: asomers@FreeBSD.org

On a slightly modified version of 12.2-RELEASE amd64, a user process repeatedly
crashed with SIGBUS.  While dumping core, the kernel panicked.  I recorded a
textdump of the crash, but not a full core dump.  Here are the final messages.

<6>pid 43272 (myprocess), jid 0, uid 0: exited on signal 10 (core dumped)
<4>Failed to fully fault in a core file segment at VA 0x82f15c000 with size
0x2000 to be written at offset 0x8db3000 for process myprocess
<4>Failed to fully fault in a core file segment at VA 0x82fa00000 with size
0x3000 to be written at offset 0x95b1000 for process myprocess
<4>Failed to fully fault in a core file segment at VA 0x83084d000 with size
0x5000 to be written at offset 0xa2fa000 for process myprocess
<4>Failed to fully fault in a core file segment at VA 0x833e0a000 with size
0x7000 to be written at offset 0xd428000 for process myprocess
<4>Failed to fully fault in a core file segment at VA 0x833e48000 with size
0x9000 to be written at offset 0xd453000 for process myprocess
<4>Failed to fully fault in a core file segment at VA 0x837944000 with size
0x1000 to be written at offset 0x10a0d000 for process myprocess
<4>Failed to fully fault in a core file segment at VA 0x83b954000 with size
0x7000 to be written at offset 0x14439000 for process myprocess
<4>Failed to fully fault in a core file segment at VA 0x83c38a000 with size
0x5000 to be written at offset 0x14d8e000 for process myprocess
<4>Failed to fully fault in a core file segment at VA 0x83c454000 with size
0xa000 to be written at offset 0x14e2b000 for process myprocess
<4>Failed to fully fault in a core file segment at VA 0x83f575000 with size
0xe000 to be written at offset 0x17568000 for process myprocess
<4>Failed to fully fault in a core file segment at VA 0x83f587000 with size
0x7000 to be written at offset 0x1757a000 for process myprocess
<4>Failed to fully fault in a core file segment at VA 0x844a9e000 with size
0x1000 to be written at offset 0x1b026000 for process myprocess
<4>Failed to fully fault in a core file segment at VA 0x8484c6000 with size
0x7000 to be written at offset 0x1c173000 for process myprocess
<6>pid 43278 (myprocess), jid 0, uid 0: exited on signal 10 (core dumped)
<6>pid 43295 (myprocess), jid 0, uid 0: exited on signal 10 (core dumped)
<6>pid 43320 (myprocess), jid 0, uid 0: exited on signal 10 (core dumped)
<4>Failed to fully fault in a core file segment at VA 0x835ec3000 with size
0x7000 to be written at offset 0xf1f6000 for process myprocess
<4>Failed to fully fault in a core file segment at VA 0x837551000 with size
0x1000 to be written at offset 0x1065c000 for process myprocess
<4>Failed to fully fault in a core file segment at VA 0x837833000 with size
0x3000 to be written at offset 0x1091e000 for process myprocess
<4>Failed to fully fault in a core file segment at VA 0x837997000 with size
0x3000 to be written at offset 0x10a2e000 for process myprocess
<4>Failed to fully fault in a core file segment at VA 0x837d33000 with size
0x6000 to be written at offset 0x10d66000 for process myprocess
<4>Failed to fully fault in a core file segment at VA 0x83d257000 with size
0x1000 to be written at offset 0x159ea000 for process myprocess
<4>Failed to fully fault in a core file segment at VA 0x83f4e2000 with size
0x6000 to be written at offset 0x174ac000 for process myprocess
<4>Failed to fully fault in a core file segment at VA 0x840953000 with size
0xe000 to be written at offset 0x18608000 for process myprocess
<4>Failed to fully fault in a core file segment at VA 0x8438bc000 with size
0x2000 to be written at offset 0x1a8da000 for process myprocess
<6>pid 43332 (myprocess), jid 0, uid 0: exited on signal 10 (core dumped)
panic: vm_fault: fault on nofault entry, addr: 0xfffffe0c928a2000
cpuid = 13
time = 1629122975
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x2b/frame 0xfffffe075c10cb20
vpanic() at vpanic+0x17b/frame 0xfffffe075c10cb70
panic() at panic+0x43/frame 0xfffffe075c10cbd0
vm_fault() at vm_fault+0x24f2/frame 0xfffffe075c10cd20
vm_fault_trap() at vm_fault_trap+0x60/frame 0xfffffe075c10cd60
trap_pfault() at trap_pfault+0x19c/frame 0xfffffe075c10cdb0
trap() at trap+0x286/frame 0xfffffe075c10cec0
calltrap() at calltrap+0x8/frame 0xfffffe075c10cec0
--- trap 0xc, rip = 0xffffffff80b5c7cb, rsp = 0xfffffe075c10cf90, rbp =
0xfffffe075c10cf90 ---
cb_put_phdr() at cb_put_phdr+0x1b/frame 0xfffffe075c10cf90
each_dumpable_segment() at each_dumpable_segment+0x4d/frame 0xfffffe075c10cfd0
elf64_coredump() at elf64_coredump+0x936/frame 0xfffffe075c10d0a0
sigexit() at sigexit+0xd96/frame 0xfffffe075c10d380
postsig() at postsig+0x2fd/frame 0xfffffe075c10d440
ast() at ast+0x317/frame 0xfffffe075c10d470
fast_syscall_common() at fast_syscall_common+0x18f/frame 0xfffffe075c10d470
--- syscall (0, FreeBSD ELF64, nosys), rip = 0x800a08611, rsp = 0x7fffc6d32d70,
rbp = 0x7fffc6d32d88 ---
KDB: enter: panic

-- 
You are receiving this mail because:
You are the assignee for the bug.