From owner-freebsd-bugs@freebsd.org Thu Nov 23 08:40:49 2017 Return-Path: Delivered-To: freebsd-bugs@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id C2462DE4243 for ; Thu, 23 Nov 2017 08:40:49 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2001:1900:2254:206a::16:76]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id B0B792CE1 for ; Thu, 23 Nov 2017 08:40:49 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from bugs.freebsd.org ([127.0.1.118]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id vAN8enCd055487 for ; Thu, 23 Nov 2017 08:40:49 GMT (envelope-from bugzilla-noreply@freebsd.org) From: bugzilla-noreply@freebsd.org To: freebsd-bugs@FreeBSD.org Subject: [Bug 223813] kernel panic in mps driver in 11.1-p4 Date: Thu, 23 Nov 2017 08:40:49 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: new X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 11.1-RELEASE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: daniel@blodan.se X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: freebsd-bugs@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: bug_id short_desc product version rep_platform op_sys bug_status bug_severity priority component assigned_to reporter attachments.created Message-ID: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated MIME-Version: 1.0 X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.25 Precedence: list List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 23 Nov 2017 08:40:49 -0000 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D223813 Bug ID: 223813 Summary: kernel panic in mps driver in 11.1-p4 Product: Base System Version: 11.1-RELEASE Hardware: Any OS: Any Status: New Severity: Affects Only Me Priority: --- Component: kern Assignee: freebsd-bugs@FreeBSD.org Reporter: daniel@blodan.se Created attachment 188209 --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D188209&action= =3Dedit Entire core dump Hi! I just upgraded our firewall from 11.0 to 11.1-p4, however after about ~35-= 45 minutes it panics. After some poking around i saw there were quite a bit of changes in the mps driver so I'm guessing a bug snuck in there somewhere. I'm happy to apply a debug patch to get you more information to sort this o= ut if you need to. It panics with this stracktrace: Unread portion of the kernel message buffer: panic: vm_fault: fault on nofault entry, addr: fffffe00003eb000 cpuid =3D 4 KDB: stack backtrace: #0 0xffffffff80aadac7 at kdb_backtrace+0x67 #1 0xffffffff80a6bba6 at vpanic+0x186 #2 0xffffffff80a6ba13 at panic+0x43 #3 0xffffffff80d58b90 at vm_fault_hold+0x2070 #4 0xffffffff80d56ad5 at vm_fault+0x75 #5 0xffffffff80edf927 at trap_pfault+0xe7 #6 0xffffffff80edf0c6 at trap+0x286 #7 0xffffffff80ec36d1 at calltrap+0x8 #8 0xffffffff8067b346 at mps_ioctl+0x2e86 #9 0xffffffff8093ae38 at devfs_ioctl_f+0x128 #10 0xffffffff80ac9415 at kern_ioctl+0x255 #11 0xffffffff80ac914f at sys_ioctl+0x16f #12 0xffffffff80ee0394 at amd64_syscall+0x6c4 #13 0xffffffff80ec39bb at Xfast_syscall+0xfb And here is the doadump log: (kgdb) #0 doadump (textdump=3D) at pcpu.h:222 #1 0xffffffff80a6b721 in kern_reboot (howto=3D260) at /usr/src/sys/kern/kern_shutdown.c:366 #2 0xffffffff80a6bbe0 in vpanic (fmt=3D, ap=3D) at /usr/src/sys/kern/kern_shutdown.c:759 #3 0xffffffff80a6ba13 in panic (fmt=3D) at /usr/src/sys/kern/kern_shutdown.c:690 #4 0xffffffff80d58b90 in vm_fault_hold (map=3D, vaddr=3D, fault_type=3D1 '\001', fault_flags=3D, m_hold=3D0x0) at /usr/src/sys/vm/vm_fault.c:524 #5 0xffffffff80d56ad5 in vm_fault (map=3D0xfffff80003000000, vaddr=3D, fault_type=3D1 '\001', fault_flags=3D0) at /usr/src/sys/vm/vm_fault.c:475 #6 0xffffffff80edf927 in trap_pfault (frame=3D0xfffffe08595cb510, usermode= =3D0) at /usr/src/sys/amd64/amd64/trap.c:708 #7 0xffffffff80edf0c6 in trap (frame=3D0xfffffe08595cb510) at /usr/src/sys/amd64/amd64/trap.c:421 #8 0xffffffff80ec36d1 in calltrap () at /usr/src/sys/amd64/amd64/exception.S:236 #9 0xffffffff80edd63f in copyout () at /usr/src/sys/amd64/amd64/support.S:= 255 #10 0xffffffff8067b346 in mps_ioctl () at /usr/src/sys/dev/mps/mps_user.c:1= 040 #11 0xffffffff8093ae38 in devfs_ioctl_f (fp=3D0xfffff80013466e10, com=3D3224914180, data=3D0xfffffe08595cb870, cred=3D0xfffff80013892500, td=3D0xfffff8000ab48000) at /usr/src/sys/fs/devfs/devfs_vnops.c:791 #12 0xffffffff80ac9415 in kern_ioctl (td=3D, fd=3D3, com=3D, data=3D) at file.h:323 #13 0xffffffff80ac914f in sys_ioctl (td=3D, uap=3D0xfffffe08595cba30) at /usr/src/sys/kern/sys_generic.c:745 #14 0xffffffff80ee0394 in amd64_syscall (td=3D0xfffff8000ab48000, traced=3D= 0) at subr_syscall.c:135 #15 0xffffffff80ec39bb in Xfast_syscall () at /usr/src/sys/amd64/amd64/exception.S:396 #16 0x0000000000446adc in ?? () Previous frame inner to this frame (corrupt stack?) --=20 You are receiving this mail because: You are the assignee for the bug.=