VMMR0InitVM_…_kernel_panic:_fatal_trap_9:_gen eral_protection_fault_while_in_kernel_mode

From: Graham Perrin <grahamperrin_at_gmail.com>
Date: Sun, 17 Oct 2021 12:24:29 UTC
Is it worth opening a bug for what's below?

GENERIC-NODEBUG, main-n249988-2c614481fd5
<https://cgit.freebsd.org/src/log/?qt=range&q=2c614481fd5>
<https://cgit.freebsd.org/src/log/?qt=range&q=2c614481fd5...>

Gut feeling: it might be very difficult to reproduce.

 From <https://pastebin.com/PCxXfE39>:

…
Unread portion of the kernel message buffer:
VMMR0InitVM: eflags=246 fKernelFeatures=0x0 (SUPKERNELFEATURES_SMAP=0)


Fatal trap 9: general protection fault while in kernel mode
cpuid = 3; apic id = 03
instruction pointer     = 0x20:0xffffffff810bc0a6
stack pointer           = 0x28:0xfffffe00c5303ba0
frame pointer           = 0x28:0xfffffe00c5303ba0
code segment            = base 0x0, limit 0xfffff, type 0x1b
                         = DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 19 (arc_reap)
trap number             = 9
panic: general protection fault
cpuid = 3
time = 1634464447
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x2b/frame 
0xfffffe00c53038a0
vpanic() at vpanic+0x187/frame 0xfffffe00c5303900
panic() at panic+0x43/frame 0xfffffe00c5303960
trap_fatal() at trap_fatal+0x387/frame 0xfffffe00c53039c0
trap() at trap+0x8b/frame 0xfffffe00c5303ad0
calltrap() at calltrap+0x8/frame 0xfffffe00c5303ad0
--- trap 0x9, rip = 0xffffffff810bc0a6, rsp = 0xfffffe00c5303ba0, rbp = 
0xfffffe00c5303ba0 ---
pmap_invalidate_all_pcid_noinvpcid_cb() at 
pmap_invalidate_all_pcid_noinvpcid_cb+0x36/frame 0xfffffe00c5303ba0
smp_targeted_tlb_shootdown() at smp_targeted_tlb_shootdown+0x2b7/frame 
0xfffffe00c5303c20
pmap_invalidate_all() at pmap_invalidate_all+0x117/frame 0xfffffe00c5303c90
pmap_remove() at pmap_remove+0x5ae/frame 0xfffffe00c5303d10
_kmem_unback() at _kmem_unback+0x32/frame 0xfffffe00c5303d60
kmem_free() at kmem_free+0x2d/frame 0xfffffe00c5303d80
keg_free_slab() at keg_free_slab+0xdc/frame 0xfffffe00c5303dc0
keg_drain_domain() at keg_drain_domain+0x1c1/frame 0xfffffe00c5303e00
zone_reclaim() at zone_reclaim+0x1aa/frame 0xfffffe00c5303e50
arc_kmem_reap_soon() at arc_kmem_reap_soon+0x61/frame 0xfffffe00c5303e80
arc_reap_cb() at arc_reap_cb+0x9/frame 0xfffffe00c5303e90
zthr_procedure() at zthr_procedure+0xba/frame 0xfffffe00c5303ef0
fork_exit() at fork_exit+0x8a/frame 0xfffffe00c5303f30
fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe00c5303f30
--- trap 0x4dda280, rip = 0x100000000, rsp = 0, rbp = 0x1a99c090 ---
KDB: enter: panic
…
fstat

USER     CMD          PID   FD MOUNT      INUM MODE         SZ|DV R/W
grahampe VirtualBoxVM  3085 root /             4 drwxr-xr-x 37  r
…


Context: <https://pastebin.com/KWYPHyG6> lines 1285–1372.