panic in pmap_remove_pages()

[Konstantin Belousov]

On Wed, Jan 21, 2015 at 01:47:06PM -0800, Steve Kargl wrote:
> Just got this panic.  If anyone is interested I have the
> kenrel and core, so can do some additional poking around.
> 
> troutmask.apl.washington.edu dumped core - see /var/crash/vmcore.0
> 
> Wed Jan 21 13:28:04 PST 2015
> 
> FreeBSD troutmask.apl.washington.edu 11.0-CURRENT FreeBSD 11.0-CURRENT #7 r276378M: Mon Dec 29 14:13:57 PST 2014     kargl at troutmask.apl.washington.edu:/data/obj/usr/src/sys/SPEW  amd64
> 
> panic: general protection fault
> 
> Unread portion of the kernel message buffer:
> 
> Fatal trap 9: general protection fault while in kernel mode
> cpuid = 3; apic id = 13
> instruction pointer	= 0x20:0xffffffff8079abf9
> stack pointer	        = 0x28:0xfffffe047325e360
> frame pointer	        = 0x28:0xfffffe047325e440
> code segment		= base 0x0, limit 0xfffff, type 0x1b
> 			= DPL 0, pres 1, long 1, def32 0, gran 1
> processor eflags	= interrupt enabled, resume, IOPL = 0
> current process		= 41779 (z)
> trap number		= 9
> panic: general protection fault
> cpuid = 3
> KDB: stack backtrace:
> db_trace_self_wrapper() at db_trace_self_wrapper+0x2b/frame 0xfffffe047325e020
> panic() at panic+0x1c1/frame 0xfffffe047325e0e0
> trap_fatal() at trap_fatal+0x396/frame 0xfffffe047325e140
> trap() at trap+0x6ce/frame 0xfffffe047325e2a0
> calltrap() at calltrap+0x8/frame 0xfffffe047325e2a0
> --- trap 0x9, rip = 0xffffffff8079abf9, rsp = 0xfffffe047325e360, rbp = 0xfffffe047325e440 ---
> pmap_remove_pages() at pmap_remove_pages+0x539/frame 0xfffffe047325e440
> exec_new_vmspace() at exec_new_vmspace+0x180/frame 0xfffffe047325e4a0
> exec_elf64_imgact() at exec_elf64_imgact+0x6c0/frame 0xfffffe047325e570
> kern_execve() at kern_execve+0x484/frame 0xfffffe047325e8c0
> sys_execve() at sys_execve+0x35/frame 0xfffffe047325e920
> amd64_syscall() at amd64_syscall+0x289/frame 0xfffffe047325ea30
> Xfast_syscall() at Xfast_syscall+0xfb/frame 0xfffffe047325ea30
> --- syscall (59, FreeBSD ELF64, sys_execve), rip = 0x4251ba, rsp = 0x7ffffe8ebab8, rbp = 0x7ffffe8ec1c0 ---
> Uptime: 22d22h22m46s
> 
> #0  doadump (textdump=1) at pcpu.h:219
> 219	pcpu.h: No such file or directory.
> 	in pcpu.h
> (kgdb) #0  doadump (textdump=1) at pcpu.h:219
> #1  0xffffffff80555bd7 in kern_reboot (howto=260)
>     at /usr/src/sys/kern/kern_shutdown.c:447
> #2  0xffffffff80556040 in panic (fmt=<value optimized out>)
>     at /usr/src/sys/kern/kern_shutdown.c:746
> #3  0xffffffff807a2986 in trap_fatal (frame=<value optimized out>, 
>     eva=<value optimized out>) at /usr/src/sys/amd64/amd64/trap.c:867
> #4  0xffffffff807a25de in trap (frame=<value optimized out>)
>     at /usr/src/sys/amd64/amd64/trap.c:201
> #5  0xffffffff80787ca3 in calltrap ()
>     at /usr/src/sys/amd64/amd64/exception.S:235
> #6  0xffffffff8079abf9 in pmap_remove_pages (pmap=0xfffff801c627dec8)
>     at /usr/src/sys/amd64/amd64/pmap.c:5389
Please do 'frame 6' and from there, do 'p *m'.  Is it reproducable ?

> #7  0xffffffff8051fa00 in exec_new_vmspace (imgp=0xfffffe047325e6e0, 
>     sv=0xffffffff80b3e8e8) at /usr/src/sys/kern/kern_exec.c:1036
> #8  0xffffffff804fed20 in exec_elf64_imgact (imgp=0xfffffe047325e6e0)
>     at /usr/src/sys/kern/imgact_elf.c:830
> #9  0xffffffff8051e4f4 in kern_execve (td=0xfffff8027588f490, 
>     args=0xfffffe047325e8d8, mac_p=0x1da) at /usr/src/sys/kern/kern_exec.c:486
> #10 0xffffffff8051de15 in sys_execve (td=<value optimized out>, 
>     uap=<value optimized out>) at /usr/src/sys/kern/kern_exec.c:210
> #11 0xffffffff807a3199 in amd64_syscall (td=0xfffff8027588f490, traced=0)
>     at subr_syscall.c:133
> #12 0xffffffff80787f8b in Xfast_syscall ()
>     at /usr/src/sys/amd64/amd64/exception.S:395
> #13 0x00000000004251ba in ?? ()
> 
> -- 
> Steve
> _______________________________________________
> freebsd-current at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-current
> To unsubscribe, send any mail to "freebsd-current-unsubscribe at freebsd.org"