[Bug 237329] Panic in __mtx_lock_sleep() during reboot or shutdown

classic Classic list List threaded Threaded
6 messages Options
Reply | Threaded
Open this post in threaded view
|

[Bug 237329] Panic in __mtx_lock_sleep() during reboot or shutdown

bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=237329

            Bug ID: 237329
           Summary: Panic in __mtx_lock_sleep() during reboot or shutdown
           Product: Base System
           Version: 12.0-STABLE
          Hardware: amd64
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: kern
          Assignee: [hidden email]
          Reporter: [hidden email]

During reboot or shutdown of
FreeBSD FQDN 12.0-STABLE FreeBSD 12.0-STABLE #1 r345045: Tue Mar 12 03:43:08
CET 2019     root@FQDN:/usr/obj/usr/src/amd64.amd64/sys/PE1950  amd64 1200503
1200503
this happens:

Fatal trap 12: page fault while in kernel mode
cpuid = 0; apic id = 00
fault virtual address   = 0x410
fault code              = supervisor read data  , page not present
instruction pointer     = 0x20:0xffffffff807ea33d
stack pointer           = 0x28:0xfffffe005ad3c8d0
frame pointer           = 0x28:0xfffffe005ad3c960
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 12 (swi4: clock (0))
trap number             = 12
panic: page fault
cpuid = 0
time = 1555402802
KDB: stack backtrace:
db_trace_self_wrapper() at 0xffffffff8054125b =
db_trace_self_wrapper+0x2b/frame 0xfffffe005ad3c570
vpanic() at 0xffffffff8080aae4 = vpanic+0x1b4/frame 0xfffffe005ad3c5d0
panic() at 0xffffffff8080a923 = panic+0x43/frame 0xfffffe005ad3c630
trap_fatal() at 0xffffffff80b76244 = trap_fatal+0x394/frame 0xfffffe005ad3c690
trap_pfault() at 0xffffffff80b762a9 = trap_pfault+0x49/frame 0xfffffe005ad3c6f0
trap() at 0xffffffff80b7588f = trap+0x29f/frame 0xfffffe005ad3c800
calltrap() at 0xffffffff80b514c5 = calltrap+0x8/frame 0xfffffe005ad3c800
--- trap 0xc, rip = 0xffffffff807ea33d, rsp = 0xfffffe005ad3c8d0, rbp =
0xfffffe005ad3c960 ---
__mtx_lock_sleep() at 0xffffffff807ea33d = __mtx_lock_sleep+0xbd/frame
0xfffffe005ad3c960
mld_fasttimo() at 0xffffffff80a3ae32 = mld_fasttimo+0x492/frame
0xfffffe005ad3ca50
pffasttimo() at 0xffffffff80899fa4 = pffasttimo+0x54/frame 0xfffffe005ad3ca80
softclock_call_cc() at 0xffffffff80824e0e = softclock_call_cc+0x12e/frame
0xfffffe005ad3cb30
softclock() at 0xffffffff808252f9 = softclock+0x79/frame 0xfffffe005ad3cb50
ithread_loop() at 0xffffffff807cd824 = ithread_loop+0x1d4/frame
0xfffffe005ad3cbb0
fork_exit() at 0xffffffff807ca2d3 = fork_exit+0x83/frame 0xfffffe005ad3cbf0
fork_trampoline() at 0xffffffff80b524be = fork_trampoline+0xe/frame
0xfffffe005ad3cbf0
--- trap 0, rip = 0, rsp = 0, rbp = 0 ---
Uptime: 34d16h8m2s
Dumping 4593 out of 12258 MB:..1%..11%..21%..31%..41%..51%..61%..71%..81%..91%

The system runs a custom kernel. The configuration file will be added shortly.
/etc/rc.conf specifies ddb_enable="YES".

--
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
[hidden email] mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-bugs
To unsubscribe, send any mail to "[hidden email]"
Reply | Threaded
Open this post in threaded view
|

[Bug 237329] Panic in __mtx_lock_sleep() during reboot or shutdown

bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=237329

--- Comment #1 from [hidden email] ---
Created attachment 203736
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=203736&action=edit
Configuration file for custom kernel

--
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
[hidden email] mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-bugs
To unsubscribe, send any mail to "[hidden email]"
Reply | Threaded
Open this post in threaded view
|

[Bug 237329] Panic in __mtx_lock_sleep() during reboot or shutdown

bugzilla-noreply
In reply to this post by bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=237329

--- Comment #2 from [hidden email] ---
Here are additional details from kgdb:

#9  __mtx_lock_sleep (c=0xfffff800103eb9a0, v=<optimized out>) at
/usr/src/sys/kern/kern_mutex.c:565
565                     if (TD_IS_RUNNING(owner)) {
(kgdb) list
560                     /*
561                      * If the owner is running on another CPU, spin until
the
562                      * owner stops running or the state of the lock
changes.
563                      */
564                     owner = lv_mtx_owner(v);
565                     if (TD_IS_RUNNING(owner)) {
566                             if (LOCK_LOG_TEST(&m->lock_object, 0))
567                                     CTR3(KTR_LOCK,
568                                         "%s: spinning on %p held by %p",
569                                         __func__, m, owner);
(kgdb) print owner
$1 = (struct thread *) 0x0
(kgdb) print v
$2 = <optimized out>
(kgdb) up
#10 0xffffffff80a3ae32 in mld_fasttimo_vnet (inmh=<optimized out>) at
/usr/src/sys/netinet6/mld6.c:1413
1413                    IF_ADDR_WLOCK(ifp);
(kgdb) list
1408                                PR_FASTHZ);
1409                            mbufq_init(&qrq, MLD_MAX_G_GS_PACKETS);
1410                            mbufq_init(&scq, MLD_MAX_STATE_CHANGE_PACKETS);
1411                    }
1412
1413                    IF_ADDR_WLOCK(ifp);
1414                    NET_EPOCH_ENTER_ET(et);
1415                    CK_STAILQ_FOREACH(ifma, &ifp->if_multiaddrs, ifma_link)
{
1416                            inm = in6m_ifmultiaddr_get_inm(ifma);
1417                            if (inm == NULL)
(kgdb) print ifp
$3 = (struct ifnet *) 0xfffff800103eb800
(kgdb) print *ifp
$4 = {if_link = {cstqe_next = 0x0}, if_clones = {le_next = 0x0, le_prev =
0xfffff8000b8be728}, if_groups = {cstqh_first = 0xfffff8002ef82b00, cstqh_last
= 0xfffff80013e04308}, if_alloctype = 6 '\006', if_softc = 0xfffff8002e3a1200,
if_llsoftc = 0x0, if_l2com = 0x0,
  if_dname = 0xffffffff80d94b78 "lagg", if_dunit = 0, if_index = 6,
if_index_reserved = 0, if_xname =
"lagg0\000\000\000\000\000\000\000\000\000\000", if_description = 0x0, if_flags
= 34819, if_drv_flags = 64, if_capabilities = 262555, if_capenable = 411,
  if_linkmib = 0x0, if_linkmiblen = 0, if_refcount = 0, if_type = 6 '\006',
if_addrlen = 6 '\006', if_hdrlen = 14 '\016', if_link_state = 2 '\002', if_mtu
= 1500, if_metric = 0, if_baudrate = 4000000000, if_hwassist = 22, if_epoch =
11, if_lastchange = {
    tv_sec = 1552406977, tv_usec = 971493}, if_snd = {ifq_head = 0x0, ifq_tail
= 0x0, ifq_len = 0, ifq_maxlen = 50, ifq_mtx = {lock_object = {lo_name =
0xfffff800103eb858 "lagg0", lo_flags = 16908288, lo_data = 0, lo_witness =
0x0}, mtx_lock = 4}, ifq_drv_head = 0x0,
    ifq_drv_tail = 0x0, ifq_drv_len = 0, ifq_drv_maxlen = 0, altq_type = 0,
altq_flags = 0, altq_disc = 0x0, altq_ifp = 0xfffff800103eb800, altq_enqueue =
0x0, altq_dequeue = 0x0, altq_request = 0x0, altq_clfier = 0x0, altq_classify =
0x0, altq_tbr = 0x0,
    altq_cdnr = 0x0}, if_linktask = {ta_link = {stqe_next = 0x0}, ta_pending =
0, ta_priority = 0, ta_func = 0xffffffff80912410 <do_link_state_change>,
ta_context = 0xfffff800103eb800}, if_addr_lock = {lock_object = {lo_name =
0xffffffff80c2b74c "if_addr_lock",
      lo_flags = 16908288, lo_data = 0, lo_witness = 0x0}, mtx_lock = 4},
if_addrhead = {cstqh_first = 0xfffff8002ebce700, cstqh_last =
0xfffff800130d3e28}, if_multiaddrs = {cstqh_first = 0xfffff8000ab24100,
cstqh_last = 0xfffff800430d7100}, if_amcount = 0,
  if_addr = 0xfffff8002ebce700, if_hw_addr = 0xfffff8002eefa500,
if_broadcastaddr = 0xffffffff80d945c0 <etherbroadcastaddr>
"\377\377\377\377\377\377", if_afdata_lock = {lock_object = {lo_name =
0xffffffff80c73b50 "if_afdata", lo_flags = 16908288, lo_data = 0,
      lo_witness = 0x0}, mtx_lock = 4}, if_afdata = {0x0, 0x0,
0xfffff8002ec26d00, 0x0 <repeats 25 times>, 0xfffff8002eefab00, 0x0 <repeats 13
times>}, if_afdata_initialized = 2, if_fib = 0, if_vnet = 0xfffff80002472900,
if_home_vnet = 0xfffff80002472900,
  if_vlantrunk = 0x0, if_bpf = 0xfffff8002ec62700, if_pcount = 0, if_bridge =
0x0, if_lagg = 0x0, if_pf_kif = 0x0, if_carp = 0x0, if_label = 0x0, if_netmap =
0x0, if_output = 0xffffffff8091d7b0 <ether_output>, if_input =
0xffffffff8091e4f0 <ether_input>,
  if_bridge_input = 0x0, if_bridge_output = 0x0, if_bridge_linkstate = 0x0,
if_start = 0x0, if_ioctl = 0xffffffff80921a30 <lagg_ioctl>, if_init =
0xffffffff809218b0 <lagg_init>, if_resolvemulti = 0xffffffff8091e560
<ether_resolvemulti>,
  if_qflush = 0xffffffff809218a0 <lagg_qflush>, if_transmit =
0xffffffff809216e0 <lagg_transmit>, if_reassign = 0xffffffff8091e750
<ether_reassign>, if_get_counter = 0xffffffff80923980 <lagg_get_counter>,
if_requestencap = 0xffffffff8091e680 <ether_requestencap>,
  if_counters = {0xfffffe0000481b50, 0xfffffe0000481b40, 0xfffffe0000481b30,
0xfffffe0000481b20, 0xfffffe0000481b10, 0xfffffe0000481b00, 0xfffffe0000481af0,
0xfffffe0000481ae0, 0xfffffe0000481ad0, 0xfffffe0000481ac0, 0xfffffe0000481ab0,
0xfffffe0000481aa0},
  if_hw_tsomax = 65518, if_hw_tsomaxsegcount = 35, if_hw_tsomaxsegsize = 2048,
if_snd_tag_alloc = 0x0, if_snd_tag_modify = 0x0, if_snd_tag_query = 0x0,
if_snd_tag_free = 0x0, if_pcp = 255 '\377', if_netdump_methods = 0x0,
if_epoch_ctx = {data = {
      0xffffffff80912910 <if_destroy>, 0x0}}, if_addr_et = {datap = {0x0, 0x0,
0x0}, datai = {0}}, if_maddr_et = {datap = {0x0, 0x0, 0x0}, datai = {0}},
if_ispare = {0, 0, 0, 0}}

--
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
[hidden email] mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-bugs
To unsubscribe, send any mail to "[hidden email]"
Reply | Threaded
Open this post in threaded view
|

[Bug 237329] Panic in __mtx_lock_sleep() during reboot or shutdown

bugzilla-noreply
In reply to this post by bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=237329

--- Comment #3 from [hidden email] ---
This backtrace is more to the point:

(kgdb) bt
#0  __curthread () at ./machine/pcpu.h:230
#1  doadump (textdump=<optimized out>) at /usr/src/sys/kern/kern_shutdown.c:371
#2  0xffffffff8080a6a0 in kern_reboot (howto=260) at
/usr/src/sys/kern/kern_shutdown.c:451
#3  0xffffffff8080ab40 in vpanic (fmt=<optimized out>, ap=0xfffffe005ad3c610)
at /usr/src/sys/kern/kern_shutdown.c:877
#4  0xffffffff8080a923 in panic (fmt=<unavailable>) at
/usr/src/sys/kern/kern_shutdown.c:804
#5  0xffffffff80b76244 in trap_fatal (frame=0xfffffe005ad3c810, eva=1040) at
/usr/src/sys/amd64/amd64/trap.c:946
#6  0xffffffff80b762a9 in trap_pfault (frame=0xfffffe005ad3c810, usermode=0) at
/usr/src/sys/amd64/amd64/trap.c:765
#7  0xffffffff80b7588f in trap (frame=0xfffffe005ad3c810) at
/usr/src/sys/amd64/amd64/trap.c:441
#8  <signal handler called>
#9  __mtx_lock_sleep (c=0xfffff800103eb9a0, v=<optimized out>) at
/usr/src/sys/kern/kern_mutex.c:565
#10 0xffffffff80a3ae32 in mld_fasttimo_vnet (inmh=<optimized out>) at
/usr/src/sys/netinet6/mld6.c:1413
#11 mld_fasttimo () at /usr/src/sys/netinet6/mld6.c:1333
#12 0xffffffff80899fa4 in pffasttimo (arg=0xfffff800103eb9a0) at
/usr/src/sys/kern/uipc_domain.c:521
#13 0xffffffff80824e0e in softclock_call_cc (c=0xffffffff8121af90
<pffast_callout>, cc=0xffffffff812ed900 <cc_cpu>, direct=0) at
/usr/src/sys/kern/kern_timeout.c:731
#14 0xffffffff808252f9 in softclock (arg=0xffffffff812ed900 <cc_cpu>) at
/usr/src/sys/kern/kern_timeout.c:869
#15 0xffffffff807cd824 in intr_event_execute_handlers (ie=<optimized out>,
p=<optimized out>) at /usr/src/sys/kern/kern_intr.c:1119
#16 ithread_execute_handlers (ie=<optimized out>, p=<optimized out>) at
/usr/src/sys/kern/kern_intr.c:1132
#17 ithread_loop (arg=<optimized out>) at /usr/src/sys/kern/kern_intr.c:1212
#18 0xffffffff807ca2d3 in fork_exit (callout=0xffffffff807cd650 <ithread_loop>,
arg=0xfffff80002591100, frame=0xfffffe005ad3cc00) at
/usr/src/sys/kern/kern_fork.c:1059
#19 <signal handler called>

--
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
[hidden email] mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-bugs
To unsubscribe, send any mail to "[hidden email]"
Reply | Threaded
Open this post in threaded view
|

[Bug 237329] Panic in mld_fasttimo() during reboot or shutdown

bugzilla-noreply
In reply to this post by bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=237329

Andrey V. Elsukov <[hidden email]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[hidden email]
            Summary|Panic in __mtx_lock_sleep() |Panic in mld_fasttimo()
                   |during reboot or shutdown   |during reboot or shutdown

--
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
[hidden email] mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-bugs
To unsubscribe, send any mail to "[hidden email]"
Reply | Threaded
Open this post in threaded view
|

[Bug 237329] Panic in mld_fasttimo() during reboot or shutdown

bugzilla-noreply
In reply to this post by bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=237329

Andrey V. Elsukov <[hidden email]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Assignee|[hidden email]            |[hidden email]

--
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
[hidden email] mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-bugs
To unsubscribe, send any mail to "[hidden email]"