[Bug 221151] panic: tdsendsignal(): invalid signal 0

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=221151

--- Comment #2 from Nils Beyer <nbe at renzel.net> ---
(In reply to Konstantin Belousov from comment #1)

> Can you provide the minimal test case which reproduces this issue ?  It might depend on the kernel configuration.

- install FreeBSD 11.1-RELEASE (amd64) incl. ports tree
- apply patch

    https://bugs.freebsd.org/bugzilla/attachment.cgi?id=184876

to ports tree

- sysctl security.bsd.map_at_zero=1
- pkg install python
- pkg install make
- cd /usr/ports/security/sandsifter
- make
- cd work/sandsifter-dff63246fed84d90118441b8ba5b5d3bdd094427
- edit "siftper.py" - shebang line to "#!/usr/bin/env python"
- ./sifter.py --unk --dis --len --sync --tick --save -- -P1 -t -j8

it will eventually crash.


> With the core dump you get, load it into kgdb and print out the trap frame by doing
>  frame 7
>  p/x *frame

------------------------------------------------------------------------------
root at capetown:/var/crash/#kgdb -c vmcore.0
/usr/lib/debug/boot/kernel/kernel.debug
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "amd64-marcel-freebsd"...

Unread portion of the kernel message buffer:
panic: tdsendsignal(): invalid signal 0
cpuid = 3
KDB: stack backtrace:
#0 0xffffffff80aada97 at kdb_backtrace+0x67
#1 0xffffffff80a6bb76 at vpanic+0x186
#2 0xffffffff80a6b9e3 at panic+0x43
#3 0xffffffff80a71bbd at tdsendsignal+0xcbd
#4 0xffffffff80a70be4 at trapsignal+0x184
#5 0xffffffff80edf3cd at trap+0x58d
#6 0xffffffff80ec3671 at calltrap+0x8
Uptime: 5h3m50s
Dumping 903 out of 16282 MB:..2%..11%..22%..31%..41%..52%..61%..71%..82%..91%

Reading symbols from /usr/lib/debug/boot/kernel/zfs.ko.debug...done.
Loaded symbols for /usr/lib/debug/boot/kernel/zfs.ko.debug
Reading symbols from /usr/lib/debug/boot/kernel/opensolaris.ko.debug...done.
Loaded symbols for /usr/lib/debug/boot/kernel/opensolaris.ko.debug
Reading symbols from /usr/lib/debug/boot/kernel/uhid.ko.debug...done.
Loaded symbols for /usr/lib/debug/boot/kernel/uhid.ko.debug
Reading symbols from /usr/lib/debug/boot/kernel/pflog.ko.debug...done.
Loaded symbols for /usr/lib/debug/boot/kernel/pflog.ko.debug
Reading symbols from /usr/lib/debug/boot/kernel/pf.ko.debug...done.
Loaded symbols for /usr/lib/debug/boot/kernel/pf.ko.debug
#0  doadump (textdump=<value optimized out>) at pcpu.h:222
222     pcpu.h: No such file or directory.
        in pcpu.h
(kgdb) bt
#0  doadump (textdump=<value optimized out>) at pcpu.h:222
#1  0xffffffff80a6b6f1 in kern_reboot (howto=260) at
/usr/src/sys/kern/kern_shutdown.c:366
#2  0xffffffff80a6bbb0 in vpanic (fmt=<value optimized out>, ap=<value
optimized out>) at /usr/src/sys/kern/kern_shutdown.c:759
#3  0xffffffff80a6b9e3 in panic (fmt=<value optimized out>) at
/usr/src/sys/kern/kern_shutdown.c:690
#4  0xffffffff80a71bbd in tdsendsignal (p=<value optimized out>, td=<value
optimized out>, sig=<value optimized out>, ksi=<value optimized out>)
    at /usr/src/sys/kern/kern_sig.c:2137
#5  0xffffffff80a70be4 in trapsignal (td=<value optimized out>, ksi=<value
optimized out>) at /usr/src/sys/kern/kern_sig.c:2021
#6  0xffffffff80edf3cd in trap (frame=0xfffffe0466890ac0) at
/usr/src/sys/amd64/amd64/trap.c:578
#7  0xffffffff80ec3671 in calltrap () at
/usr/src/sys/amd64/amd64/exception.S:236
#8  0x000000080121e000 in ?? ()
Previous frame inner to this frame (corrupt stack?)
Current language:  auto; currently minimal
(kgdb) frame 6
#6  0xffffffff80edf3cd in trap (frame=0xfffffe0466890ac0) at
/usr/src/sys/amd64/amd64/trap.c:578
578             trapsignal(td, &ksi);
(kgdb) p/x *frame
$1 = {tf_rdi = 0x0, tf_rsi = 0x0, tf_rdx = 0x0, tf_rcx = 0x0, tf_r8 = 0x0,
tf_r9 = 0x0, tf_rax = 0x0, tf_rbx = 0x0, tf_rbp = 0x0, tf_r10 = 0x0, tf_r11 =
0x0, tf_r12 = 0x0, 
  tf_r13 = 0x0, tf_r14 = 0x0, tf_r15 = 0x0, tf_trapno = 0x20, tf_fs = 0x13,
tf_gs = 0x1b, tf_addr = 0x0, tf_flags = 0x1, tf_es = 0x3b, tf_ds = 0x3b, tf_err
= 0x0, 
  tf_rip = 0x80121e000, tf_cs = 0x43, tf_rflags = 0x302, tf_rsp = 0x866800,
tf_ss = 0x3b}
------------------------------------------------------------------------------

-- 
You are receiving this mail because:
You are the assignee for the bug.