Date: Thu, 04 May 2017 14:53:13 +0000 From: bugzilla-noreply@freebsd.org To: freebsd-bugs@FreeBSD.org Subject: [Bug 219070] vm_radix_remove: invalid key found panic Message-ID: <bug-219070-8@https.bugs.freebsd.org/bugzilla/>
next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D219070 Bug ID: 219070 Summary: vm_radix_remove: invalid key found panic Product: Base System Version: 11.0-STABLE Hardware: arm64 OS: Any Status: New Severity: Affects Only Me Priority: --- Component: kern Assignee: freebsd-bugs@FreeBSD.org Reporter: asmodai@FreeBSD.org Created attachment 182301 --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D182301&action= =3Dedit dmesg.boot after panic This is an ASROCK Q2900 motherboard (http://www.asrock.com/mb/intel/q2900-itx/). Had similar panics with 10-STABLE and 11-STABLE and in the end replaced both memory banks with new SO-DIMMS (Kingston KVR16LS11K2 in a 2-kit that's on t= heir supported memory list) and still received this. So I am excluding memory st= ick issues. The problem only seems to occur when under heavy load, say compiling ports = with poudriere or building world. Panic details: panic: vm_radix_remove: invalid key found cpuid =3D 0 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0x2b/frame 0xfffffe0455872= 360 vpanic() at vpanic+0x186/frame 0xfffffe04558723e0 panic() at panic+0x43/frame 0xfffffe0455872440 vm_radix_remove() at vm_radix_remove+0x200/frame 0xfffffe0455872450 vm_page_free_toq() at vm_page_free_toq+0x56/frame 0xfffffe0455872470 vm_object_page_remove() at vm_object_page_remove+0x145/frame 0xfffffe045587= 24d0 vnode_pager_setsize() at vnode_pager_setsize+0xfd/frame 0xfffffe0455872520 trunc_pages() at trunc_pages+0x126/frame 0xfffffe0455872580 softdep_setup_freeblocks() at softdep_setup_freeblocks+0x9d6/frame 0xfffffe0455872600 ffs_truncate() at ffs_truncate+0x32e/frame 0xfffffe0455872760 ufs_inactive() at ufs_inactive+0x1c7/frame 0xfffffe04558727a0 VOP_INACTIVE_APV() at VOP_INACTIVE_APV+0x89/frame 0xfffffe04558727d0 vinactive() at vinactive+0xf2/frame 0xfffffe0455872830 vputx() at vputx+0x2c5/frame 0xfffffe0455872890 kern_unlinkat() at kern_unlinkat+0x22a/frame 0xfffffe0455872a60 amd64_syscall() at amd64_syscall+0x6c4/frame 0xfffffe0455872bf0 Xfast_syscall() at Xfast_syscall+0xfb/frame 0xfffffe0455872bf0 --- syscall (10, FreeBSD ELF64, sys_unlink), rip =3D 0x8009756aa, rsp =3D 0x7fffffffe718, rbp =3D 0x7fffffffe7e0 --- KDB: enter: panic (kgdb) bt #0 doadump (textdump=3D0) at pcpu.h:222 #1 0xffffffff8030b2ab in db_dump (dummy=3D<value optimized out>, dummy2=3D= <value optimized out>, dummy3=3D<value optimized out>, dummy4=3D<value optimized o= ut>) at /usr/src/sys/ddb/db_command.c:533 #2 0xffffffff8030b09f in db_command (cmd_table=3D<value optimized out>) at /usr/src/sys/ddb/db_command.c:440 #3 0xffffffff8030add4 in db_command_loop () at /usr/src/sys/ddb/db_command.c:493 #4 0xffffffff8030de8f in db_trap (type=3D<value optimized out>, code=3D<va= lue optimized out>) at /usr/src/sys/ddb/db_main.c:248 #5 0xffffffff8054b833 in kdb_trap (type=3D3, code=3D-61456, tf=3D<value op= timized out>) at /usr/src/sys/kern/subr_kdb.c:654 #6 0xffffffff807ed79f in trap (frame=3D0xfffffe0455872290) at /usr/src/sys/amd64/amd64/trap.c:537 #7 0xffffffff807d3111 in calltrap () at /usr/src/sys/amd64/amd64/exception.S:236 #8 0xffffffff8054af6b in kdb_enter (why=3D0xffffffff808f0e3a "panic", msg= =3D<value optimized out>) at cpufunc.h:63 #9 0xffffffff80509303 in vpanic (fmt=3D<value optimized out>, ap=3D0xfffffe0455872420) at /usr/src/sys/kern/kern_shutdown.c:752 #10 0xffffffff80509153 in panic (fmt=3D<value optimized out>) at /usr/src/sys/kern/kern_shutdown.c:690 #11 0xffffffff807c88c0 in vm_radix_remove (rtree=3D0x0, index=3D18446741893301083792) at uma.h:364 #12 0xffffffff807bcd56 in vm_page_free_toq (m=3D0xfffff804385afe30) at /usr/src/sys/vm/vm_page.c:1287 #13 0xffffffff807b9055 in vm_object_page_remove (object=3D<value optimized = out>, start=3D<value optimized out>, end=3D119283, options=3D<value optimized out= >) at /usr/src/sys/vm/vm_object.c:1948 #14 0xffffffff807cbbcd in vnode_pager_setsize (vp=3D<value optimized out>, nsize=3D0) at /usr/src/sys/vm/vnode_pager.c:425 #15 0xffffffff8076edd6 in trunc_pages (ip=3D<value optimized out>, length= =3D0, extblocks=3D<value optimized out>, flags=3D<value optimized out>) at /usr/src/sys/ufs/ffs/ffs_softdep.c:7015 #16 0xffffffff8076fb56 in softdep_setup_freeblocks (ip=3D0xfffff8017d859000, length=3D<value optimized out>, flags=3D<value optimized out>) at /usr/src/sys/ufs/ffs/ffs_softdep.c:6981 #17 0xffffffff807599ce in ffs_truncate (vp=3D<value optimized out>, length= =3D<value optimized out>, flags=3D<value optimized out>, cred=3D<value optimized out>= ) at /usr/src/sys/ufs/ffs/ffs_inode.c:393 #18 0xffffffff8078d507 in ufs_inactive (ap=3D<value optimized out>) at /usr/src/sys/ufs/ufs/ufs_inode.c:131 #19 0xffffffff808804b9 in VOP_INACTIVE_APV (vop=3D<value optimized out>, a=3D0xfffffe04558727e8) at vnode_if.c:1955 #20 0xffffffff805d1022 in vinactive (vp=3D0xfffff8019851c1d8, td=3D0xfffff802e2097560) at vnode_if.h:807 #21 0xffffffff805d1555 in vputx (vp=3D0xfffff8019851c1d8, func=3D2) at /usr/src/sys/kern/vfs_subr.c:2715 #22 0xffffffff805db81a in kern_unlinkat (td=3D0xfffff802e2097560, fd=3D-100, path=3D0x800e5d908 <Address 0x800e5d908 out of bounds>, pathseg=3DUIO_USERS= PACE, oldinum=3D<value optimized out>) at /usr/src/sys/kern/vfs_syscalls.c:1791 #23 0xffffffff807eea74 in amd64_syscall (td=3D0xfffff802e2097560, traced=3D= 0) at subr_syscall.c:135 #24 0xffffffff807d33fb in Xfast_syscall () at /usr/src/sys/amd64/amd64/exception.S:396 #25 0x00000008009756aa in ?? () (kgdb) fr 11 #11 0xffffffff807c88c0 in vm_radix_remove (rtree=3D0x0, index=3D18446741893301083792) at uma.h:364 364 uma_zfree_arg(zone, item, NULL); (kgdb) p/x index $2 =3D 0xfffffe0455871e90 (kgdb) fr 12 #12 0xffffffff807bcd56 in vm_page_free_toq (m=3D0xfffff804385afe30) at /usr/src/sys/vm/vm_page.c:1287 1287 vm_radix_remove(&object->rtree, m->pindex); (kgdb) p (struct vm_page)m $7 =3D {plinks =3D {q =3D {tqe_next =3D 0xfffff804385afe30, tqe_prev =3D 0x= 0}, s =3D {ss =3D {sle_next =3D 0xfffff804385afe30}, pv =3D 0x0}, memguard =3D {p =3D 18446735295741886000, v =3D 0}}, listq =3D {tqe_next =3D 0xfffff802867fed68= ,=20 tqe_prev =3D 0xfffff804385afe98}, object =3D 0xfffffe0455872440, pindex= =3D 18446744071567348051, phys_addr =3D 18446741893301085264, md =3D {pv_list = =3D {tqh_first =3D 0xffffffff8092c3ed, tqh_last =3D 0xe}, pv_gen =3D 979041840,= pat_mode =3D -2044},=20 wire_count =3D 2178760728, busy_lock =3D 4294967295, hold_count =3D 3, fl= ags =3D 0, aflags =3D 0 '\0', oflags =3D 0 '\0', queue =3D 0 '\0', psind =3D 0 '\0', s= egind =3D 16 '\020', order =3D 0 '\0', pool =3D 0 '\0', act_count =3D 0 '\0', valid =3D = 48 '0',=20 dirty =3D 0 '\0'} (kgdb) p/x 18446735295741886000 $8 =3D 0xfffff804385afe30 (kgdb) p/x 18446744071567348051 $9 =3D 0xffffffff80509153 (kgdb) p/x 18446741893301085264 $10 =3D 0xfffffe0455872450 (kgdb) fr 13 #13 0xffffffff807b9055 in vm_object_page_remove (object=3D<value optimized = out>, start=3D<value optimized out>, end=3D119283, options=3D<value optimized out= >) at /usr/src/sys/vm/vm_object.c:1948 1948 vm_page_free(p); (kgdb) print (struct vm_page)p $5 =3D {plinks =3D {q =3D {tqe_next =3D 0xfffff804385afe98, tqe_prev =3D 0xfffffe0455872440}, s =3D {ss =3D {sle_next =3D 0xfffff804385afe98}, pv =3D 0xfffffe0455872440}, memguard =3D {p =3D 18446735295741886104, v =3D 18446741893301085248}}, listq =3D { tqe_next =3D 0xffffffff80509153, tqe_prev =3D 0xfffffe0455872450}, obje= ct =3D 0xffffffff8092c3ed, pindex =3D 14, phys_addr =3D 18446735295775440432, md = =3D {pv_list =3D {tqh_first =3D 0xffffffff81dd4018, tqh_last =3D 0x3}, pv_gen = =3D 16,=20 pat_mode =3D 48}, wire_count =3D 1434920016, busy_lock =3D 4294966788, = hold_count =3D 9200, flags =3D 21895, aflags =3D 4 '\004', oflags =3D 254 '', queue = =3D 255 '', psind =3D -1 '', segind =3D 0 '\0', order =3D 0 '\0', pool =3D 0 '\0',=20 act_count =3D 0 '\0', valid =3D 0 '\0', dirty =3D 0 '\0'} (kgdb) p/x 18446735295741886104 $14 =3D 0xfffff804385afe98 --=20 You are receiving this mail because: You are the assignee for the bug.=
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-219070-8>