[Bug 200474] Fatal trap 12 in counter_u64_zero_one_cpu

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=200474

            Bug ID: 200474
           Summary: Fatal trap 12 in counter_u64_zero_one_cpu
           Product: Base System
           Version: 10.1-STABLE
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: kern
          Assignee: freebsd-bugs at FreeBSD.org
          Reporter: olgeni at FreeBSD.org

Created attachment 157177
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=157177&action=edit
full dmesg buffer

I got this panic on 10.1-STABLE FreeBSD 10.1-STABLE #3 r283361.

There's not much context here: lots of starting/stopping a single bhyve VM
while testing, and at some point a script tried to create lots of tap
interface, which were then removed. Not sure if it could be related.

Firefox got a signal 10 while browsing, its window disappeared and immediately
after I got the panic.

kernel trap 12 with interrupts disabled
Fatal trap 12: page fault while in kernel mode
cpuid = 3; apic id = 03
fault virtual address    = 0xc00
fault code        = supervisor write data, page not present
instruction pointer    = 0x20:0xffffffff80997b8a
stack pointer            = 0x28:0xfffffe046a6f4570
frame pointer            = 0x28:0xfffffe046a6f4590
code segment        = base 0x0, limit 0xfffff, type 0x1b
            = DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags    = resume, IOPL = 0
current process        = 15284 (firefox)
trap number        = 12
panic: page fault
cpuid = 3
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x2b/frame 0xfffffe046a6f4030
kdb_backtrace() at kdb_backtrace+0x39/frame 0xfffffe046a6f40e0
panic() at panic+0x1c1/frame 0xfffffe046a6f41a0
trap_fatal() at trap_fatal+0x38f/frame 0xfffffe046a6f4200
trap_pfault() at trap_pfault+0x2ed/frame 0xfffffe046a6f42a0
trap() at trap+0x47a/frame 0xfffffe046a6f44b0
calltrap() at calltrap+0x8/frame 0xfffffe046a6f44b0
--- trap 0xc, rip = 0xffffffff80997b8a, rsp = 0xfffffe046a6f4570, rbp =
0xfffffe046a6f4590 ---
counter_u64_zero_one_cpu() at counter_u64_zero_one_cpu+0x1a/frame
0xfffffe046a6f4590
smp_rendezvous_action() at smp_rendezvous_action+0xbc/frame 0xfffffe046a6f45c0
Xrendezvous() at Xrendezvous+0x89/frame 0xfffffe046a6f45c0
--- interrupt, rip = 0xffffffff80d7c965, rsp = 0xfffffe046a6f4680, rbp =
0xfffffe046a6f4760 ---
pmap_remove_pages() at pmap_remove_pages+0x285/frame 0xfffffe046a6f4760
vmspace_exit() at vmspace_exit+0x9c/frame 0xfffffe046a6f47a0
exit1() at exit1+0x63f/frame 0xfffffe046a6f4830
sigexit() at sigexit+0x925/frame 0xfffffe046a6f4af0
postsig() at postsig+0x286/frame 0xfffffe046a6f4bb0
ast() at ast+0x427/frame 0xfffffe046a6f4bf0
doreti_ast() at doreti_ast+0x1f/frame 0x801dd1780
Uptime: 1d23h6m2s

Checking if I can reproduce it somehow...

-- 
You are receiving this mail because:
You are the assignee for the bug.