r323412: Panic on boot (slab->us_keg == keg)

Andrey V. Elsukov bu7cher at yandex.ru
Mon Sep 11 12:27:19 UTC 2017


On 11.09.2017 11:31, Raphael Kubo da Costa wrote:
> I've recently tried to upgrade a HEAD VM (running on a Linux host with
> QEMU) from r321082 to r323412.
> 
> The new kernel panics right after I try to boot into it with:
> 
> panic: Assertion slab->us_keg == keg failed at /usr/src/sys/vm/uma_core.c:2285
> cpuid = 0
> time = 1
> KDB: stack backtrace:
> db_trace_self_wrapper() at db_trace_self_wrapper+0x2b/frame 0xffffffff81c4d780
> vpanic() at vpanic+0x19c/frame 0xffffffff81c4d800
> kassert_panic() at kassert_panic+0x126/frame 0xffffffff81c4d870
> keg_fetch_slab() at keg_fetch_slab+0x2a9/frame 0xffffffff81c4d8c0
> zone_fetch_slab() at zone_fetch_slab+0x51/frame 0xffffffff81c4d8f0
> zone_import() at zone_import+0x4f/frame 0xffffffff81c4d960
> zone_alloc_item() at zone_alloc_item+0x36/frame 0xffffffff81c4d9a0
> uma_zcreate() at uma_zcreate+0x3d3/frame 0xffffffff81c4da40
> uma_startup() at uma_startup+0x147/frame 0xffffffff81c4dae0
> vm_page_startup() at vm_page_startup+0x34e/frame 0xffffffff81c4db30
> vm_mem_init() at vm_mem_init+0x1a/frame 0xffffffff81c4db50
> mi_startup() at mi_startup+0x9c/frame 0xffffffff81c4db70
> btext() at btext+0x2c
> KDB: enter: panic
> [ thread 0 pid 0 tid 0 ]

I have r323177 based system without INVARIANTS that panics at
netboot with similar trace:

Fatal trap 12: page fault while in kernel mode
cpuid = 0; apic id = 00
fault virtual address   = 0x84
fault code              = supervisor read data, page not present
instruction pointer     = 0x20:0xffffffff80d84870
stack pointer           = 0x28:0xffffffff82193970
frame pointer           = 0x28:0xffffffff821939b0
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags        = resume, IOPL = 0
current process         = 0 ()
trap number             = 12
panic: page fault
cpuid = 0
time = 1
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x2b/frame
0xffffffff82193550
vpanic() at vpanic+0x19c/frame 0xffffffff821935d0
panic() at panic+0x43/frame 0xffffffff82193630
trap_fatal() at trap_fatal+0x34d/frame 0xffffffff82193680
trap_pfault() at trap_pfault+0x49/frame 0xffffffff821936e0
trap() at trap+0x2a9/frame 0xffffffff821938a0
calltrap() at calltrap+0x8/frame 0xffffffff821938a0
--- trap 0xc, rip = 0xffffffff80d84870, rsp = 0xffffffff82193970, rbp =
0xffffffff821939b0 ---
zone_import() at zone_import+0x110/frame 0xffffffff821939b0
zone_alloc_item() at zone_alloc_item+0x36/frame 0xffffffff821939f0
uma_startup() at uma_startup+0x1d0/frame 0xffffffff82193ae0
vm_page_startup() at vm_page_startup+0x34e/frame 0xffffffff82193b30
vm_mem_init() at vm_mem_init+0x1a/frame 0xffffffff82193b50
mi_startup() at mi_startup+0x9c/frame 0xffffffff82193b70
btext() at btext+0x2c
Uptime: 1s

-- 
WBR, Andrey V. Elsukov

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 553 bytes
Desc: OpenPGP digital signature
URL: <http://lists.freebsd.org/pipermail/freebsd-current/attachments/20170911/1f622a81/attachment.sig>


More information about the freebsd-current mailing list