[Bug 213068] [smbfs] panic in smbfs.ko during operations

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Thu Sep 29 05:16:07 UTC 2016 

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=213068

            Bug ID: 213068
           Summary: [smbfs] panic in smbfs.ko during operations
           Product: Base System
           Version: 10.2-STABLE
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: kern
          Assignee: freebsd-bugs at FreeBSD.org
          Reporter: emz at norma.perm.ru

FreeBSD has crashed during smbfs operations.

Version: FreeBSD gw0.qwerty.perm.ru 10.2-STABLE FreeBSD 10.2-STABLE #0: Thu Mar
10 14:30:22 YEKT 2016     emz at gw0.qwerty.perm.ru:/usr/obj/usr/src/sys/QWERTY 
amd64

(yup, for some reason revision isn't displayed, but it's r291767, accordinf to
the sources)

===Cut===
Fatal trap 12: page fault while in kernel mode
cpuid = 1; apic id = 12
fault virtual address   = 0x0
fault code              = supervisor write data, page not present
instruction pointer     = 0x20:0xffffffff81e69121
stack pointer           = 0x28:0xfffffe023901d7c0
frame pointer           = 0x28:0xfffffe023901d860
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 37420 (smbiod0)
trap number             = 12
panic: page fault
cpuid = 1
KDB: stack backtrace:
#0 0xffffffff80981f70 at kdb_backtrace+0x60
#1 0xffffffff80945a56 at vpanic+0x126
#2 0xffffffff80945923 at panic+0x43
#3 0xffffffff80d7de2b at trap_fatal+0x36b
#4 0xffffffff80d7e12d at trap_pfault+0x2ed
#5 0xffffffff80d7d7ca at trap+0x47a
#6 0xffffffff80d637d2 at calltrap+0x8
#7 0xffffffff81e6992e at smb_iod_sendrq+0xfe
#8 0xffffffff81e69f70 at smb_iod_sendall+0x180
#9 0xffffffff81e69c32 at smb_iod_waitrq+0x32
#10 0xffffffff81e66c66 at smb_rq_reply+0x16
#11 0xffffffff81e66a9f at smb_rq_simple+0x4f
#12 0xffffffff81e652c7 at smb_smb_treeconnect+0x2e7
#13 0xffffffff81e6a8ea at smb_iod_thread+0x24a
#14 0xffffffff8090f32a at fork_exit+0x9a
#15 0xffffffff80d63d0e at fork_trampoline+0xe
Uptime: 155d22h56m14s
Dumping 2208 out of 8155 MB:..1%..11%..21%..31%..41%..51%..61%..71%..81%..91%

------------------------------------------------------------------------
kernel config

options CONFIG_AUTOGENERATED
ident   GENERIC
machine amd64
cpu     HAMMER
makeoptions     WITH_CTF=1
makeoptions     DEBUG=-g
options ROUTETABLES=8
options ALTQ_DEBUG
options ALTQ_NOPCC
options ALTQ_PRIQ
options ALTQ_CDNR
options ALTQ_HFSC
options ALTQ_RIO
options ALTQ_RED
options ALTQ_CBQ
options ALTQ
options XENHVM
options HYPERV
options USB_DEBUG
options ATH_ENABLE_11N
options AH_AR5416_INTERRUPT_MITIGATION
options AH_SUPPORT_AR5416
options IEEE80211_SUPPORT_MESH
options IEEE80211_AMPDU_AGE
options IEEE80211_DEBUG
options SC_PIXEL_MODE
options VESA
options AHD_REG_PRETTY_PRINT
options AHC_REG_PRETTY_PRINT
options ATA_STATIC_ID
options ACPI_DMAR
options SMP
options KDB_TRACE
options KDB
options RCTL
options RACCT_DEFAULT_TO_DISABLED
options RACCT
options INCLUDE_CONFIG_FILE
options DDB_CTF
options KDTRACE_HOOKS
options KDTRACE_FRAME
options MAC
options PROCDESC
options CAPABILITIES
options CAPABILITY_MODE
options AUDIT
options HWPMC_HOOKS
options KBD_INSTALL_CDEV
options PRINTF_BUFR_SIZE=128
options _KPOSIX_PRIORITY_SCHEDULING
options SYSVSEM
options SYSVMSG
options SYSVSHM
options STACK
options KTRACE
options SCSI_DELAY=5000
options COMPAT_FREEBSD7
options COMPAT_FREEBSD6
options COMPAT_FREEBSD5
options COMPAT_FREEBSD4
options COMPAT_FREEBSD32
options GEOM_LABEL
options GEOM_RAID
options GEOM_PART_GPT
options PSEUDOFS
options PROCFS
options CD9660
options MSDOSFS
options NFS_ROOT
options NFSLOCKD
options NFSD
options NFSCL
options MD_ROOT
options QUOTA
options UFS_GJOURNAL
options UFS_DIRHASH
options UFS_ACL
options SOFTUPDATES
options FFS
options SCTP
options TCP_OFFLOAD
options INET6
options INET
options PREEMPTION
options SCHED_ULE
options NEW_PCIB
options GEOM_PART_MBR
options GEOM_PART_EBR_COMPAT
options GEOM_PART_EBR
options GEOM_PART_BSD
device  isa
device  mem
device  io
device  uart_ns8250
device  cpufreq
device  acpi
device  pci
device  fdc
device  ahci
device  ata
device  mvs
device  siis
device  ahc
device  ahd
device  esp
device  hptiop
device  isp
device  mpt
device  mps
device  mpr
device  sym
device  trm
device  adv
device  adw
device  aic
device  bt
device  isci
device  scbus
device  ch
device  da
device  sa
device  cd
device  pass
device  ses
device  amr
device  arcmsr
device  ciss
device  dpt
device  hptmv
device  hptnr
device  hptrr
device  hpt27xx
device  iir
device  ips
device  mly
device  twa
device  tws
device  aac
device  aacp
device  aacraid
device  ida
device  mfi
device  mlx
device  mrsas
device  twe
device  nvme
device  nvd
device  atkbdc
device  atkbd
device  psm
device  kbdmux
device  splash
device  vt
device  vt_vga
device  vt_efifb
device  agp
device  cbb
device  pccard
device  cardbus
device  uart
device  ppc
device  ppbus
device  lpt
device  ppi
device  puc
device  bxe
device  de
device  em
device  igb
device  ix
device  ixv
device  ixl
device  ixlv
device  le
device  ti
device  txp
device  vx
device  miibus
device  ae
device  age
device  alc
device  ale
device  bce
device  bfe
device  bge
device  cas
device  dc
device  et
device  fxp
device  gem
device  hme
device  jme
device  lge
device  msk
device  nfe
device  nge
device  pcn
device  re
device  rl
device  sf
device  sge
device  sis
device  sk
device  ste
device  stge
device  tl
device  tx
device  vge
device  vr
device  wb
device  xl
device  cs
device  ed
device  ex
device  ep
device  fe
device  sn
device  xe
device  wlan
device  wlan_wep
device  wlan_ccmp
device  wlan_tkip
device  wlan_amrr
device  an
device  ath
device  ath_pci
device  ath_hal
device  ath_rate_sample
device  ipw
device  iwi
device  iwn
device  malo
device  mwl
device  ral
device  wi
device  wpi
device  loop
device  random
device  padlock_rng
device  rdrand_rng
device  ether
device  vlan
device  tun
device  md
device  gif
device  faith
device  firmware
device  bpf
device  uhci
device  ohci
device  ehci
device  xhci
device  usb
device  ukbd
device  umass
device  sound
device  snd_cmi
device  snd_csa
device  snd_emu10kx
device  snd_es137x
device  snd_hda
device  snd_ich
device  snd_via8233
device  mmc
device  mmcsd
device  sdhci
device  virtio
device  virtio_pci
device  vtnet
device  virtio_blk
device  virtio_scsi
device  virtio_balloon
device  hyperv
device  xenpci
device  vmx
device  carp
device  pf
device  pflog
device  pfsync

------------------------------------------------------------------------
ddb capture buffer

ddb: ddb_capture: kvm_nlist

[root at gw0:/var/crash]# more core.txt.0 
gw0.qwerty.perm.ru dumped core - see /var/crash/vmcore.0

Thu Sep 29 08:36:55 YEKT 2016

FreeBSD gw0.qwerty.perm.ru 10.2-STABLE FreeBSD 10.2-STABLE #0: Thu Mar 10
14:30:22 YEKT 2016     emz at gw0.qwerty.perm.ru:/usr/obj/usr/src/sys/QWERTY 
amd64

panic: page fault

GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "amd64-marcel-freebsd"...

Unread portion of the kernel message buffer:


Fatal trap 12: page fault while in kernel mode
cpuid = 1; apic id = 12
fault virtual address   = 0x0
fault code              = supervisor write data, page not present
instruction pointer     = 0x20:0xffffffff81e69121
stack pointer           = 0x28:0xfffffe023901d7c0
frame pointer           = 0x28:0xfffffe023901d860
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 37420 (smbiod0)
trap number             = 12
panic: page fault
cpuid = 1
KDB: stack backtrace:
#0 0xffffffff80981f70 at kdb_backtrace+0x60
#1 0xffffffff80945a56 at vpanic+0x126
#2 0xffffffff80945923 at panic+0x43
#3 0xffffffff80d7de2b at trap_fatal+0x36b
#4 0xffffffff80d7e12d at trap_pfault+0x2ed
#5 0xffffffff80d7d7ca at trap+0x47a
#6 0xffffffff80d637d2 at calltrap+0x8
#7 0xffffffff81e6992e at smb_iod_sendrq+0xfe
#8 0xffffffff81e69f70 at smb_iod_sendall+0x180
#9 0xffffffff81e69c32 at smb_iod_waitrq+0x32
#10 0xffffffff81e66c66 at smb_rq_reply+0x16
#11 0xffffffff81e66a9f at smb_rq_simple+0x4f
#12 0xffffffff81e652c7 at smb_smb_treeconnect+0x2e7
#13 0xffffffff81e6a8ea at smb_iod_thread+0x24a
#14 0xffffffff8090f32a at fork_exit+0x9a
#15 0xffffffff80d63d0e at fork_trampoline+0xe
Uptime: 155d22h56m14s
Dumping 2208 out of 8155 MB:..1%..11%..21%..31%..41%..51%..61%..71%..81%..91%

Reading symbols from /boot/kernel/zfs.ko.symbols...done.
Loaded symbols for /boot/kernel/zfs.ko.symbols
Reading symbols from /boot/kernel/opensolaris.ko.symbols...done.
Loaded symbols for /boot/kernel/opensolaris.ko.symbols
Reading symbols from /boot/kernel/geom_mirror.ko.symbols...done.
Loaded symbols for /boot/kernel/geom_mirror.ko.symbols
Reading symbols from /boot/kernel/ng_ether.ko.symbols...done.
Loaded symbols for /boot/kernel/ng_ether.ko.symbols
Reading symbols from /boot/kernel/netgraph.ko.symbols...done.
Loaded symbols for /boot/kernel/netgraph.ko.symbols
Reading symbols from /boot/kernel/accf_data.ko.symbols...done.
Loaded symbols for /boot/kernel/accf_data.ko.symbols
Reading symbols from /boot/kernel/accf_http.ko.symbols...done.
Loaded symbols for /boot/kernel/accf_http.ko.symbols
Reading symbols from /boot/kernel/ipmi.ko.symbols...done.
Loaded symbols for /boot/kernel/ipmi.ko.symbols
Reading symbols from /boot/kernel/smbus.ko.symbols...done.
Loaded symbols for /boot/kernel/smbus.ko.symbols
Reading symbols from /boot/kernel/ums.ko.symbols...done.
Loaded symbols for /boot/kernel/ums.ko.symbols
Reading symbols from /boot/kernel/ng_socket.ko.symbols...done.
Loaded symbols for /boot/kernel/ng_socket.ko.symbols
Reading symbols from /boot/kernel/ng_mppc.ko.symbols...done.
Loaded symbols for /boot/kernel/ng_mppc.ko.symbols
Reading symbols from /boot/kernel/rc4.ko.symbols...done.
Loaded symbols for /boot/kernel/rc4.ko.symbols
Reading symbols from /boot/kernel/ng_iface.ko.symbols...done.
Loaded symbols for /boot/kernel/ng_iface.ko.symbols
Reading symbols from /boot/kernel/ng_ppp.ko.symbols...done.
Loaded symbols for /boot/kernel/ng_ppp.ko.symbols
Reading symbols from /boot/kernel/ng_tee.ko.symbols...done.
Loaded symbols for /boot/kernel/ng_tee.ko.symbols
Reading symbols from /boot/kernel/ng_netflow.ko.symbols...done.
Loaded symbols for /boot/kernel/ng_netflow.ko.symbols
Reading symbols from /boot/kernel/ng_ksocket.ko.symbols...done.
Loaded symbols for /boot/kernel/ng_ksocket.ko.symbols
Reading symbols from /boot/kernel/ng_pptpgre.ko.symbols...done.
Loaded symbols for /boot/kernel/ng_pptpgre.ko.symbols
Reading symbols from /boot/kernel/ng_vjc.ko.symbols...done.
Loaded symbols for /boot/kernel/ng_vjc.ko.symbols
Reading symbols from /boot/kernel/ng_nat.ko.symbols...done.
Loaded symbols for /boot/kernel/ng_nat.ko.symbols
Reading symbols from /boot/kernel/libalias.ko.symbols...done.
Loaded symbols for /boot/kernel/libalias.ko.symbols
Reading symbols from /boot/kernel/ng_tcpmss.ko.symbols...done.
Loaded symbols for /boot/kernel/ng_tcpmss.ko.symbols
Reading symbols from /boot/kernel/smbfs.ko.symbols...done.
Loaded symbols for /boot/kernel/smbfs.ko.symbols
Reading symbols from /boot/kernel/libiconv.ko.symbols...done.
Loaded symbols for /boot/kernel/libiconv.ko.symbols
Reading symbols from /boot/kernel/libmchain.ko.symbols...done.
Loaded symbols for /boot/kernel/libmchain.ko.symbols
#0  doadump (textdump=<value optimized out>) at pcpu.h:219
219     pcpu.h: No such file or directory.
        in pcpu.h
(kgdb) #0  doadump (textdump=<value optimized out>) at pcpu.h:219
#1  0xffffffff809456b2 in kern_reboot (howto=260)
    at /usr/src/sys/kern/kern_shutdown.c:455
#2  0xffffffff80945a95 in vpanic (fmt=<value optimized out>, 
    ap=<value optimized out>) at /usr/src/sys/kern/kern_shutdown.c:762
#3  0xffffffff80945923 in panic (fmt=0x0)
    at /usr/src/sys/kern/kern_shutdown.c:691
#4  0xffffffff80d7de2b in trap_fatal (frame=<value optimized out>, 
    eva=<value optimized out>) at /usr/src/sys/amd64/amd64/trap.c:851
#5  0xffffffff80d7e12d in trap_pfault (frame=0xfffffe023901d710, 
    usermode=<value optimized out>) at /usr/src/sys/amd64/amd64/trap.c:674
#6  0xffffffff80d7d7ca in trap (frame=0xfffffe023901d710)
    at /usr/src/sys/amd64/amd64/trap.c:440
#7  0xffffffff80d637d2 in calltrap ()
    at /usr/src/sys/amd64/amd64/exception.S:236
#8  0xffffffff81e69121 in smb_rq_sign (rqp=0xfffff8022ed06a00)
    at /usr/src/sys/modules/smbfs/../../netsmb/smb_crypt.c:244
#9  0xffffffff81e6992e in smb_iod_sendrq (iod=0xfffff8020468ba00, 
    rqp=0xfffff8022ed06a00)
    at /usr/src/sys/modules/smbfs/../../netsmb/smb_iod.c:243
#10 0xffffffff81e69f70 in smb_iod_sendall ()
    at /usr/src/sys/modules/smbfs/../../netsmb/smb_iod.c:548
#11 0xffffffff81e69c32 in smb_iod_waitrq (rqp=0xfffff80147942400)
    at /usr/src/sys/modules/smbfs/../../netsmb/smb_iod.c:499
#12 0xffffffff81e66c66 in smb_rq_reply (rqp=0xfffff80147942400)
    at /usr/src/sys/modules/smbfs/../../netsmb/smb_rq.c:329
#13 0xffffffff81e66a9f in smb_rq_simple (rqp=0xfffff80147942400)
    at /usr/src/sys/modules/smbfs/../../netsmb/smb_rq.c:171
#14 0xffffffff81e652c7 in smb_smb_treeconnect (ssp=0xfffff800b74fd700, 
    scred=0xfffff8020468ba68)
    at /usr/src/sys/modules/smbfs/../../netsmb/smb_smb.c:574
#15 0xffffffff81e6a8ea in smb_iod_thread (arg=0xfffff8020468ba00)
    at /usr/src/sys/modules/smbfs/../../netsmb/smb_iod.c:204
#16 0xffffffff8090f32a in fork_exit (
    callout=0xffffffff81e6a6a0 <smb_iod_thread>, arg=0xfffff8020468ba00, 
    frame=0xfffffe023901dc00) at /usr/src/sys/kern/kern_fork.c:1027
#17 0xffffffff80d63d0e in fork_trampoline ()
    at /usr/src/sys/amd64/amd64/exception.S:611
#18 0x0000000000000000 in ?? ()
Current language:  auto; currently minimal
(kgdb)
===Cut===

-- 
You are receiving this mail because:
You are the assignee for the bug.

More information about the freebsd-bugs mailing list