Re: 14.3 panics: supervisor write data, page not present

J.R. Oldroyd <fbsd_at_opal.com> wrote on
Date: Fri, 05 Sep 2025 17:20:07 UTC :

> On Thu, 4 Sep 2025 09:11:53 -0400 "J.R. Oldroyd" <fbsd@opal.com> wrote:
> >
> > Well, even with locally compiled kernel AND now also with the suggested
> > microcode update in place, this system continues to panic after 1-3 days
> > of uptime.  As noted before, this never happened on 14.2 or many earlier
> > kernels.
> > 
> > 	-jr
> > 
> > 
> > Fatal trap 12: page fault while in kernel mode
> > cpuid = 2; apic id = 04
> > fault virtual address	= 0x3b
> > fault code		= supervisor write data, page not present
> > instruction pointer	= 0x20:0xffffffff80d2c1af
> > stack pointer	        = 0x28:0xfffffe00c5ea9c80
> > frame pointer	        = 0x28:0xfffffe00c5ea9cc0
> 
> Additional info:
> 
> (kgdb) list *0xffffffff80d2c1af
> 0xffffffff80d2c1af is in tcp_hc_update (../../../netinet/tcp_hostcache.c:533).

Just noting a few prior lines of context:

		hc_entry = uma_zalloc_smr(V_tcp_hostcache.zone, M_NOWAIT);
		if (hc_entry == NULL) {
			THC_UNLOCK(hc_head);
			return;
> 528			}
> 529	
> 530			/*
> 531			 * Initialize basic information of hostcache entry.
> 532			 */
> 533			bzero(hc_entry, sizeof(*hc_entry));
> 534			if (inc->inc_flags & INC_ISIPV6) {
> 535				hc_entry->ip6 = inc->inc6_faddr;
> 536				hc_entry->ip6_zoneid = inc->inc6_zoneid;
> 537			} else
> (kgdb) bt
> #0  __curthread () at /usr/src/sys/amd64/include/pcpu_aux.h:57
> #1  doadump (textdump=<optimized out>) at ../../../kern/kern_shutdown.c:405
> #2  0xffffffff80b5a56b in kern_reboot (howto=260) at ../../../kern/kern_shutdown.c:523
> #3  0xffffffff80b5aa69 in vpanic (fmt=0xffffffff811a02b2 "%s", ap=ap@entry=0xfffffe00c5ea9b40) at ../../../kern/kern_shutdown.c:967
> #4  0xffffffff80b5a8a3 in panic (fmt=<unavailable>) at ../../../kern/kern_shutdown.c:891
> #5  0xffffffff8104dbfa in trap_fatal (frame=<optimized out>, eva=<optimized out>) at ../../../amd64/amd64/trap.c:1000
> #6  0xffffffff8104dbfa in trap_pfault (frame=0xfffffe00c5ea9bc0, usermode=false, signo=<optimized out>, ucode=<optimized out>)
> #7  <signal handler called>
> #8  tcp_hc_update (inc=inc@entry=0xfffff802777e6b0c, hcml=hcml@entry=0xfffffe00c5ea9cd4) at ../../../netinet/tcp_hostcache.c:533
> #9  0xffffffff80d4122f in tcp_discardcb (tp=tp@entry=0xfffff802777e6a80) at ../../../netinet/tcp_subr.c:2568
> #10 0xffffffff80d4c6a4 in tcp_usr_detach (so=<optimized out>) at ../../../netinet/tcp_usrreq.c:216
> #11 0xffffffff80c000c9 in sofree (so=0xfffff803c12bd000) at ../../../kern/uipc_socket.c:1859
> #12 sorele_locked (so=so@entry=0xfffff803c12bd000) at ../../../kern/uipc_socket.c:1886
> #13 0xffffffff80d41040 in tcp_close (tp=tp@entry=0xfffff802777e6a80) at ../../../netinet/tcp_subr.c:2610
> #14 0xffffffff80d4b00b in tcp_timer_2msl (tp=0xfffff802777e6a80) at ../../../netinet/tcp_timer.c:373
> #15 0xffffffff80d4a074 in tcp_timer_enter (xtp=0xfffff802777e6a80) at ../../../netinet/tcp_timer.c:882
> #16 0xffffffff80b78c79 in softclock_call_cc (c=0xfffff802777e6c18, cc=cc@entry=0xffffffff83929300, direct=direct@entry=0) at ../../../kern/kern_timeout.c:719
> #17 0xffffffff80b7a445 in softclock_thread (arg=arg@entry=0xffffffff83929300) at ../../../kern/kern_timeout.c:858
> #18 0xffffffff80b13641 in fork_exit (callout=0xffffffff80b7a360 <softclock_thread>, arg=0xffffffff83929300, frame=0xfffffe00c5ea9f40) at ../../../kern/kern_fork.c:1153
> #19 <signal handler called>
> #20 0x1929192818381839 in ?? ()
> Backtrace stopped: Cannot access memory at address 0x228c339c229d239c
> 

===
Mark Millard
marklmi at yahoo.com