Attachment 222440 Details for Bug 253158 – kgdb output with volatile struct uio short_uio1

kgdb output with volatile struct uio short_uio1

txt.txt (text/plain), 11.26 KB, created by Harald Schmalzbauer on 2021-02-14 17:52:23 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Harald Schmalzbauer

Created: 2021-02-14 17:52:23 UTC

Size: 11.26 KB

patch

obsolete

>Fatal trap 12: page fault while in kernel mode
>cpuid = 3; apic id = 06
>fault virtual address   = 0xfffffe00377ff000
>fault code              = supervisor write data, reserved bits in PTE
>instruction pointer     = 0x20:0xffffffff811d6a36
>stack pointer           = 0x28:0xfffffe014abc71b0
>frame pointer           = 0x28:0xfffffe014abc71b0
>code segment            = base 0x0, limit 0xfffff, type 0x1b
>                        = DPL 0, pres 1, long 1, def32 0, gran 1
>processor eflags        = interrupt enabled, resume, IOPL = 0
>current process         = 1720 (fstyp)
>trap number             = 12
>panic: page fault
>cpuid = 3
>time = 1613324344
>KDB: stack backtrace:
>db_trace_self_wrapper() at db_trace_self_wrapper+0x2c/frame 0xfffffe014abc6a50
>kdb_backtrace() at kdb_backtrace+0x4c/frame 0xfffffe014abc6b00
>vpanic() at vpanic+0x23d/frame 0xfffffe014abc6bb0
>doadump() at doadump/frame 0xfffffe014abc6c10
>enable_intr() at enable_intr/frame 0xfffffe014abc6d50
>trap_pfault() at trap_pfault+0x288/frame 0xfffffe014abc6e50
>trap() at trap+0x737/frame 0xfffffe014abc70c0
>trap_check() at trap_check+0x48/frame 0xfffffe014abc70e0
>calltrap() at calltrap+0x8/frame 0xfffffe014abc70e0
>--- trap 0xc, rip = 0xffffffff811d6a36, rsp = 0xfffffe014abc71b0, rbp = 0xfffffe014abc71b0 ---
>memmove_erms() at memmove_erms+0x116/frame 0xfffffe014abc71b0
>uiomove_fromphys() at uiomove_fromphys+0x2d3/frame 0xfffffe014abc7240
>vn_io_fault_uiomove() at vn_io_fault_uiomove+0x160/frame 0xfffffe014abc72d0
>ffs_read() at ffs_read+0x6a2/frame 0xfffffe014abc7420
>VOP_READ_APV() at VOP_READ_APV+0x138/frame 0xfffffe014abc7480
>VOP_READ() at VOP_READ+0x4e/frame 0xfffffe014abc74e0
>vn_read() at vn_read+0x229/frame 0xfffffe014abc7550
>vn_io_fault_doio() at vn_io_fault_doio+0x73/frame 0xfffffe014abc7590
>vn_io_fault1() at vn_io_fault1+0x43c/frame 0xfffffe014abc7760
>vn_io_fault() at vn_io_fault+0x26b/frame 0xfffffe014abc7810
>fo_read() at fo_read+0x3b/frame 0xfffffe014abc7850
>dofileread() at dofileread+0xf5/frame 0xfffffe014abc78c0
>kern_readv() at kern_readv+0x65/frame 0xfffffe014abc7920
>sys_read() at sys_read+0x87/frame 0xfffffe014abc79a0
>syscallenter() at syscallenter+0x636/frame 0xfffffe014abc7a40
>amd64_syscall() at amd64_syscall+0x1b/frame 0xfffffe014abc7af0
>fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe014abc7af0
>--- syscall (3, FreeBSD ELF64, sys_read), rip = 0x800442bea, rsp = 0x7fffffffe158, rbp = 0x7fffffffe170 ---
>KDB: enter: panic
>Uptime: 1m24s
>Dumping 1453 out of 32335 MB:..2%..12%..21%..31%..41%..51%..61%..71%..81%..91%
>
>0xffffffff80c23ff6 in doadump (textdump=1) at /opt/deploy-tools/FreeBSD-src/main/sys/kern/kern_shutdown.c:398
>398             savectx(&dumppcb);
>(kgdb) bt
>#0  0xffffffff80c23ff6 in doadump (textdump=1) at /opt/deploy-tools/FreeBSD-src/main/sys/kern/kern_shutdown.c:398
>#1  0xffffffff80c23c4e in kern_reboot (howto=260) at /opt/deploy-tools/FreeBSD-src/main/sys/kern/kern_shutdown.c:486
>#2  0xffffffff80c24588 in vpanic (fmt=0xffffffff812c08c2 "%s", ap=0xfffffe014abc6bf0) at /opt/deploy-tools/FreeBSD-src/main/sys/kern/kern_shutdown.c:919
>#3  0xffffffff80c23fa0 in panic (fmt=0xffffffff812c08c2 "%s") at /opt/deploy-tools/FreeBSD-src/main/sys/kern/kern_shutdown.c:843
>#4  0xffffffff811dc2e0 in trap_fatal (frame=0xfffffe014abc70f0, eva=18446741875617427456) at /opt/deploy-tools/FreeBSD-src/main/sys/amd64/amd64/trap.c:915
>#5  0xffffffff811dc5f8 in trap_pfault (frame=0xfffffe014abc70f0, usermode=false, signo=0x0, ucode=0x0) at /opt/deploy-tools/FreeBSD-src/main/sys/amd64/amd64/trap.c:775
>#6  0xffffffff811db2d7 in trap (frame=0xfffffe014abc70f0) at /opt/deploy-tools/FreeBSD-src/main/sys/amd64/amd64/trap.c:398
>#7  0xffffffff811dcad8 in trap_check (frame=0xfffffe014abc70f0) at /opt/deploy-tools/FreeBSD-src/main/sys/amd64/amd64/trap.c:636
>#8  <signal handler called>
>#9  memmove_erms () at /opt/deploy-tools/FreeBSD-src/main/sys/amd64/amd64/support.S:547
>#10 0xffffffff811de873 in uiomove_fromphys (ma=0xfffffe014abc7698, offset=4096, n=19840, uio=0xfffffe014abc7280) at /opt/deploy-tools/FreeBSD-src/main/sys/amd64/amd64/uio_machdep.c:110
>#11 0xffffffff80dadc20 in vn_io_fault_uiomove (data=0xfffffe003ab2a470 "", xfersize=23440, uio=0xfffffe014abc7658) at /opt/deploy-tools/FreeBSD-src/main/sys/kern/vfs_vnops.c:1475
>#12 0xffffffff8106fdc2 in ffs_read (ap=0xfffffe014abc7498) at /opt/deploy-tools/FreeBSD-src/main/sys/ufs/ffs/ffs_vnops.c:786
>#13 0xffffffff81284a68 in VOP_READ_APV (vop=0xffffffff81716d98 <ffs_vnodeops2>, a=0xfffffe014abc7498) at vnode_if.c:1050
>#14 0xffffffff80dacabe in VOP_READ (vp=0xfffff801408a23d0, uio=0xfffffe014abc7658, ioflag=0, cred=0xfffff8002b43b100) at ./vnode_if.h:542
>#15 0xffffffff80db2c59 in vn_read (fp=0xfffff8002b53e6e0, uio=0xfffffe014abc7658, active_cred=0xfffff8002b1fa600, flags=1, td=0xfffffe013e6f8800) at /opt/deploy-tools/FreeBSD-src/main/sys/kern/vfs_vnops.c:1027
>#16 0xffffffff80db2863 in vn_io_fault_doio (args=0xfffffe014abc77a0, uio=0xfffffe014abc7658, td=0xfffffe013e6f8800) at /opt/deploy-tools/FreeBSD-src/main/sys/kern/vfs_vnops.c:1174
>#17 0xffffffff80dac8dc in vn_io_fault1 (vp=0xfffff801408a23d0, uio=0xfffffe014abc7958, args=0xfffffe014abc77a0, td=0xfffffe013e6f8800) at /opt/deploy-tools/FreeBSD-src/main/sys/kern/vfs_vnops.c:1344
>#18 0xffffffff80da921b in vn_io_fault (fp=0xfffff8002b53e6e0, uio=0xfffffe014abc7958, active_cred=0xfffff8002b1fa600, flags=0, td=0xfffffe013e6f8800) at /opt/deploy-tools/FreeBSD-src/main/sys/kern/vfs_vnops.c:1416
>#19 0xffffffff80cdfa2b in fo_read (fp=0xfffff8002b53e6e0, uio=0xfffffe014abc7958, active_cred=0xfffff8002b1fa600, flags=0, td=0xfffffe013e6f8800) at /opt/deploy-tools/FreeBSD-src/main/sys/sys/file.h:330
>#20 0xffffffff80cdada5 in dofileread (td=0xfffffe013e6f8800, fd=3, fp=0xfffff8002b53e6e0, auio=0xfffffe014abc7958, offset=-1, flags=0) at /opt/deploy-tools/FreeBSD-src/main/sys/kern/sys_generic.c:369
>#21 0xffffffff80cda9d5 in kern_readv (td=0xfffffe013e6f8800, fd=3, auio=0xfffffe014abc7958) at /opt/deploy-tools/FreeBSD-src/main/sys/kern/sys_generic.c:290
>#22 0xffffffff80cda957 in sys_read (td=0xfffffe013e6f8800, uap=0xfffffe013e6f8be8) at /opt/deploy-tools/FreeBSD-src/main/sys/kern/sys_generic.c:206
>#23 0xffffffff811ddce6 in syscallenter (td=0xfffffe013e6f8800) at /opt/deploy-tools/FreeBSD-src/main/sys/amd64/amd64/../../kern/subr_syscall.c:189
>#24 0xffffffff811dd3eb in amd64_syscall (td=0xfffffe013e6f8800, traced=0) at /opt/deploy-tools/FreeBSD-src/main/sys/amd64/amd64/trap.c:1156
>#25 <signal handler called>
>#26 0x0000000800442bea in ?? ()
>Backtrace stopped: Cannot access memory at address 0x7fffffffe158
>(kgdb) frame 12
>#12 0xffffffff8106fdc2 in ffs_read (ap=0xfffffe014abc7498) at /opt/deploy-tools/FreeBSD-src/main/sys/ufs/ffs/ffs_vnops.c:786
>786                             error = vn_io_fault_uiomove((char *)bp->b_data +
>(kgdb) p bp->b_pages[0]
>$1 = (struct vm_page *) 0x600000000
>(kgdb) p bp->b_pages[1]
>$2 = (struct vm_page *) 0xfffffffe00000000
>(kgdb) p bp->b_pages[2]
>$3 = (struct vm_page *) 0xd00ff0000
>(kgdb) p bp->b_pages[3]
>$4 = (struct vm_page *) 0x900
>(kgdb) p bp->b_pages[4]
>$5 = (struct vm_page *) 0x0
>(kgdb) p bp->b_pages[5]
>$6 = (struct vm_page *) 0x0
>(kgdb) p bp->b_pages[6]
>$7 = (struct vm_page *) 0x0
>(kgdb) p bp->b_pages[7]
>$8 = (struct vm_page *) 0x0
>(kgdb) info locals
>vp = 0xfffff801408a23d0
>ip = 0xfffff8002b0ef460
>uio = 0xfffffe014abc7658
>fs = 0xfffffe010b7fe000
>bp = 0xfffffe00378b0b88
>lbn = 0
>nextlbn = 1
>bytesinfile = 38230928
>size = 32768
>xfersize = 23440
>blkoffset = 9328
>orig_resid = 56208
>bflag = 72
>error = 0
>ioflag = 0
>seqcount = 0
>(kgdb) p *fs
>$9 = {fs_firstfield = 0, fs_unused_1 = 0, fs_sblkno = 24, fs_cblkno = 32, fs_iblkno = 40, fs_dblkno = 120, fs_old_cgoffset = 0, fs_old_cgmask = 0, fs_old_time = 0, fs_old_size = 0, fs_old_dsize = 0, fs_ncg = 4, fs_bsize = 32768, 
>  fs_fsize = 4096, fs_frag = 8, fs_minfree = 8, fs_old_rotdelay = 0, fs_old_rps = 0, fs_bmask = -32768, fs_fmask = -4096, fs_bshift = 15, fs_fshift = 12, fs_maxcontig = 32, fs_maxbpg = 4096, fs_fragshift = 3, fs_fsbtodb = 3, 
>  fs_sbsize = 4096, fs_spare1 = {0, 0}, fs_nindir = 4096, fs_inopb = 128, fs_old_nspf = 0, fs_optim = 0, fs_old_npsect = 0, fs_old_interleave = 0, fs_old_trackskew = 0, fs_id = {1613159396, 2068546175}, fs_old_csaddr = 0, fs_cssize = 4096, 
>  fs_cgsize = 4096, fs_spare2 = 0, fs_old_nsect = 0, fs_old_spc = 0, fs_old_ncyl = 0, fs_old_cpg = 0, fs_ipg = 1280, fs_fpg = 2336, fs_old_cstotal = {cs_ndir = 0, cs_nbfree = 0, cs_nifree = 0, cs_nffree = 0}, fs_fmod = 1 '\001', 
>  fs_clean = 0 '\000', fs_ronly = 0 '\000', fs_old_flags = -128 '\200', fs_fsmnt = "/", '\000' <repeats 466 times>, fs_volname = "boscoROOT", '\000' <repeats 22 times>, fs_swuid = 0, fs_pad = 0, fs_cgrotor = 0, fs_ocsp = {
>    0x0 <repeats 15 times>}, fs_si = 0xfffff80012d0af80, fs_old_cpc = 0, fs_maxbsize = 32768, fs_unrefs = 0, fs_providersize = 9328, fs_metaspace = 88, fs_sparecon64 = {0 <repeats 13 times>}, fs_sblockactualloc = 65536, 
>  fs_sblockloc = 65536, fs_cstotal = {cs_ndir = 56, cs_nbfree = 236, cs_nifree = 4307, cs_nffree = 40, cs_numclusters = 0, cs_spare = {0, 0, 0}}, fs_time = 1613324343, fs_size = 9328, fs_dsize = 8919, fs_csaddr = 120, fs_pendingblocks = 0, 
>  fs_pendinginodes = 0, fs_snapinum = {4114, 2867, 0 <repeats 18 times>}, fs_avgfilesize = 16384, fs_avgfpdir = 64, fs_save_cgsize = 0, fs_mtime = 1613324342, fs_sujfree = 0, fs_sparecon32 = {0 <repeats 21 times>}, fs_ckhash = 1795856385, 
>  fs_metackhash = 7, fs_flags = 512, fs_contigsumsize = 16, fs_maxsymlinklen = 120, fs_old_inodefmt = 0, fs_maxfilesize = 2252349704110079, fs_qbmask = 32767, fs_qfmask = 4095, fs_state = 0, fs_old_postblformat = 0, fs_old_nrpos = 0, 
>  fs_spare5 = {0, 0}, fs_magic = 424935705}
>(kgdb) p *ip
>$10 = {i_nextsnap = {tqe_next = 0x0, tqe_prev = 0xfffff80015128780}, i_vnode = 0xfffff801408a23d0, i_ump = 0xfffff80012cf7e00, i_dquot = {0x0, 0x0}, i_un = {dirhash = 0x0, snapblklist = 0x0}, dinode_u = {din1 = 0xfffff8002b0e9300, 
>    din2 = 0xfffff8002b0e9300}, i_number = 2867, i_flag = 1024, i_effnlink = 1, i_count = 0, i_endoff = 0, i_diroff = 0, i_offset = 0, i_nextclustercg = -1, i_ea_area = 0x0, i_ea_len = 0, i_ea_error = 0, i_ea_refs = 0, i_size = 38240256, 
>  i_gen = 1902361709, i_flags = 2097152, i_uid = 0, i_gid = 5, i_mode = 33056, i_nlink = 1}
>(kgdb) p *bp
>$11 = {b_bufobj = 0xfffff801408a24b8, b_bcount = 32768, b_caller1 = 0x0, b_data = 0xfffffe003ab28000 "", b_error = 0, b_iocmd = 2, b_ioflags = 0, b_iooffset = 18907136, b_resid = 0, b_iodone = 0x0, b_ckhashcalc = 0x0, b_ckhash = 0, 
>  b_blkno = 36928, b_offset = 0, b_bobufs = {tqe_next = 0xfffffe00378b09d0, tqe_prev = 0xfffff801408a2500}, b_vflags = 0, b_qindex = 3 '\003', b_domain = 1 '\001', b_subqueue = 1, b_flags = 2684354592, b_xflags = 2, b_lock = {lock_object = {
>      lo_name = 0xffffffff813b3acc "bufwait", lo_flags = 645070848, lo_data = 0, lo_witness = 0xfffff8087ed79200}, lk_lock = 18446741880028760064, lk_exslpfail = 0, lk_timo = 0, lk_pri = 96}, b_bufsize = 32768, b_runningbufspace = 0, 
>  b_kvasize = 32768, b_dirtyoff = 0, b_dirtyend = 0, b_kvabase = 0xfffffe003ab28000 "", b_lblkno = 0, b_vp = 0xfffff801408a23d0, b_rcred = 0x0, b_wcred = 0x0, {b_freelist = {tqe_next = 0xfffffe00378b09d0, tqe_prev = 0xfffffe00378b1358}, {
>      b_pgiodone = 0xfffffe00378b09d0, b_pgbefore = 931861336, b_pgafter = -512}}, b_cluster = {cluster_head = {tqh_first = 0x0, tqh_last = 0x0}, cluster_entry = {tqe_next = 0x0, tqe_prev = 0x0}}, b_npages = 8, b_dep = {lh_first = 0x0}, 
>  b_fsprivate1 = 0x0, b_fsprivate2 = 0x0, b_fsprivate3 = 0x0, b_pages = 0xfffffe00378b0cc0}
>(kgdb)

Actions: View

Attachments on bug 253158: 222084 | 222359 | 222440