VirtualBox: reproductible panic

David Demelier demelier.david at gmail.com
Tue Aug 20 11:19:53 UTC 2013


On 20.08.2013 11:21, Patrick Lamaiziere wrote:
> Le Fri, 09 Aug 2013 23:06:01 +0200,
> David Demelier <demelier.david at gmail.com> a écrit :
> 
>> Hello,
>>
>> I can reproduce a panic by just starting a virtual machine with
>> VirtualBox 4.2.16_2.
>>
>> Unfortunately, as the kmod driver is not built with debug symbols I
>> could not provide much information.
> 
> Debug symbols are in option in the port (make config)
> It's hard to say without a bt.
> 
> Regards
> 

Yes, I finally made DEBUG symbols enabled, there is the panic backtrace:

Unread portion of the kernel message buffer:


Fatal trap 9: general protection fault while in kernel mode
cpuid = 1; apic id = 01
instruction pointer     = 0x20:0xffffffff80b7ddb5
stack pointer           = 0x28:0xffffff80e7d64540
frame pointer           = 0x28:0xffffff80e7d64550
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 25056 (VirtualBox)
trap number             = 9
panic: general protection fault
cpuid = 1
KDB: stack backtrace:
#0 0xffffffff80948376 at kdb_backtrace+0x66
#1 0xffffffff8090dece at panic+0x1ce
#2 0xffffffff80cf2c20 at trap_fatal+0x290
#3 0xffffffff80cf3431 at trap+0x241
#4 0xffffffff80cdc863 at calltrap+0x8
#5 0xffffffff80b7ee97 at vm_map_lookup_entry+0xb7
#6 0xffffffff80b82790 at vm_map_lookup+0x50
#7 0xffffffff80b78a6e at vm_fault_hold+0x15e
#8 0xffffffff80b7b0c3 at vm_fault+0x73
#9 0xffffffff80cf2e9f at trap_pfault+0x12f
#10 0xffffffff80cf36e4 at trap+0x4f4
#11 0xffffffff80cdc863 at calltrap+0x8
Uptime: 1h9m58s
Dumping 459 out of 3043 MB:..4%..11%..21%..32%..42%..53%..63%..74%..81%..91%

Reading symbols from /boot/kernel/if_lagg.ko...Reading symbols from
/boot/kernel/if_lagg.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/if_lagg.ko
Reading symbols from /boot/kernel/if_msk.ko...Reading symbols from
/boot/kernel/if_msk.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/if_msk.ko
Reading symbols from /boot/kernel/acpi_video.ko...Reading symbols from
/boot/kernel/acpi_video.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/acpi_video.ko
Reading symbols from /boot/modules/vboxdrv.ko...Reading symbols from
/boot/modules/vboxdrv.ko.symbols...done.
done.
Loaded symbols for /boot/modules/vboxdrv.ko
Reading symbols from /boot/kernel/fdescfs.ko...Reading symbols from
/boot/kernel/fdescfs.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/fdescfs.ko
Reading symbols from /boot/kernel/ng_ubt.ko...Reading symbols from
/boot/kernel/ng_ubt.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/ng_ubt.ko
Reading symbols from /boot/kernel/ng_hci.ko...Reading symbols from
/boot/kernel/ng_hci.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/ng_hci.ko
Reading symbols from /boot/kernel/ng_bluetooth.ko...Reading symbols from
/boot/kernel/ng_bluetooth.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/ng_bluetooth.ko
Reading symbols from /boot/kernel/netgraph.ko...Reading symbols from
/boot/kernel/netgraph.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/netgraph.ko
Reading symbols from /boot/kernel/ng_l2cap.ko...Reading symbols from
/boot/kernel/ng_l2cap.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/ng_l2cap.ko
Reading symbols from /boot/kernel/ng_btsocket.ko...Reading symbols from
/boot/kernel/ng_btsocket.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/ng_btsocket.ko
Reading symbols from /boot/kernel/ng_socket.ko...Reading symbols from
/boot/kernel/ng_socket.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/ng_socket.ko
Reading symbols from /boot/kernel/pf.ko...Reading symbols from
/boot/kernel/pf.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/pf.ko
Reading symbols from /boot/kernel/linux.ko...Reading symbols from
/boot/kernel/linux.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/linux.ko
Reading symbols from /boot/kernel/vkbd.ko...Reading symbols from
/boot/kernel/vkbd.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/vkbd.ko
Reading symbols from /usr/local/modules/fuse.ko...done.
Loaded symbols for /usr/local/modules/fuse.ko
Reading symbols from /boot/kernel/radeon.ko...Reading symbols from
/boot/kernel/radeon.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/radeon.ko
Reading symbols from /boot/kernel/drm.ko...Reading symbols from
/boot/kernel/drm.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/drm.ko
#0  doadump (textdump=<value optimized out>) at pcpu.h:234
234     pcpu.h: No such file or directory.
        in pcpu.h
#0  doadump (textdump=<value optimized out>) at pcpu.h:234
No locals.
#1  0xffffffff8090d9a6 in kern_reboot (howto=260) at
/usr/src/sys/kern/kern_shutdown.c:449
        _ep = (struct eventhandler_entry *) 0x0
        _el = (struct eventhandler_list *) 0xfffffe0004914000
        first_buf_printf = 1
#2  0xffffffff8090dea7 in panic (fmt=0x1 <Address 0x1 out of bounds>) at
/usr/src/sys/kern/kern_shutdown.c:637
        td = (struct thread *) 0x1
        bootopt = <value optimized out>
        newpanic = <value optimized out>
        ap = {{gp_offset = 16, fp_offset = 48, overflow_arg_area =
0xffffff80e7d64230, reg_save_area = 0xffffff80e7d64150}}
        panic_cpu = 1
        buf = "general protection fault", '\0' <repeats 231 times>
#3  0xffffffff80cf2c20 in trap_fatal (frame=0x9, eva=<value optimized
out>) at /usr/src/sys/amd64/amd64/trap.c:879
        code = <value optimized out>
        ss = 40
        type = 9
        esp = <value optimized out>
        softseg = {ssd_base = 0, ssd_limit = 1048575, ssd_type = 27,
ssd_dpl = 0, ssd_p = 1, ssd_long = 1, ssd_def32 = 0, ssd_gran = 1}
        msg = <value optimized out>
#4  0xffffffff80cf3431 in trap (frame=0xffffff80e7d64490) at
/usr/src/sys/amd64/amd64/trap.c:605
        td = (struct thread *) 0xfffffe0087225490
        p = (struct proc *) 0x6
        i = <value optimized out>
        ucode = <value optimized out>
        code = 0
        type = 0
        addr = <value optimized out>
        ksi = {ksi_link = {tqe_next = 0xffffff80e7d64400, tqe_prev =
0xffffffff80993873}, ksi_info = {si_signo = 0, si_errno = 0, si_code =
8, si_pid = 0, si_uid = 3889579456,
    si_status = -128, si_addr = 0x0, si_value = {sival_int = -405387776,
sival_ptr = 0xffffff80e7d64600, sigval_int = -405387776, sigval_ptr =
0xffffff80e7d64600}, _reason = {_fault = {
        _trapno = -2135743275}, _timer = {_timerid = -2135743275,
_overrun = -1}, _mesgq = {_mqd = -2135743275}, _poll = {_band =
-2135743275}, __spare__ = {__spare1__ = -2135743275,
        __spare2__ = {-1361072696, -512, -1361072496, -512, -405388176,
-128, -2135575828}}}}, ksi_flags = -2131116318, ksi_sigq = 0x8af}
#5  0xffffffff80cdc863 in calltrap () at
/usr/src/sys/amd64/amd64/exception.S:232
No locals.
#6  0xffffffff80b7ddb5 in vm_map_entry_splay (addr=34385813504,
root=0xfffffe006fd34d00) at /usr/src/sys/vm/vm_map.c:832
        llist = 0x0
        rlist = 0x0
        ltree = <value optimized out>
        rtree = <value optimized out>
        y = 0xfffffe0032325082
#7  0xffffffff80b7ee97 in vm_map_lookup_entry (map=0xfffffe00328dc4b0,
address=34385813504, entry=0xffffff80e7d64888) at
/usr/src/sys/vm/vm_map.c:1080
        cur = 0xfffffe006fd34d00
        locked = <value optimized out>
#8  0xffffffff80b82790 in vm_map_lookup (var_map=0xffffff80e7d64880,
vaddr=34385813504, fault_typea=<value optimized out>,
out_entry=0xffffff80e7d64888, object=0xffffff80e7d64870,
    pindex=0xffffff80e7d64878, out_prot=0xffffff80e7d648e7
"�\213�J\227ly���\030\177\207", wired=0xffffff80e7d648e0) at
/usr/src/sys/vm/vm_map.c:3809
        entry = 0xffffff80e7d64888
        map = 0xfffffe00328dc4b0
        prot = 255 '�'
        fault_type = 2 '\002'
        eobject = 0xfffffe0087225490
        size = 0
        cred = <value optimized out>
#9  0xffffffff80b78a6e in vm_fault_hold (map=0xfffffe00328dc4b0,
vaddr=34385813504, fault_type=2 '\002', fault_flags=0, m_hold=0x0) at
/usr/src/sys/vm/vm_fault.c:268
        prot = 255 '�'
        ahead = 4
        behind = 0
        alloc_req = <value optimized out>
        era = <value optimized out>
        faultcount = 0
        reqpage = 0
        result = 0
        growstack = 1
        is_first_object_locked = -2027793264
        wired = -405386864
        next_object = 0xffffff80e7d64888
        hardfault = 0
        fs = {m = 0x0, object = 0x0, pindex = 18446743527843318064,
first_m = 0xffffffff8098aae2, first_object = 0x0, first_pindex =
18446741877819083008, map = 0xfffffe00328dc4b0,
  entry = 0xffffffff80b7613c, lookup_still_valid = 1868102304, vp = 0x0,
vfslocked = 0}
        vp = (struct vnode *) 0xffffff80e7d64888
        locked = -2027793264
        error = <value optimized out>
#10 0xffffffff80b7b0c3 in vm_fault (map=0xfffffe00328dc4b0,
vaddr=34385813504, fault_type=<value optimized out>, fault_flags=0) at
/usr/src/sys/vm/vm_fault.c:229
        td = (struct thread *) 0xfffffe0087225490
        result = <value optimized out>
#11 0xffffffff80cf2e9f in trap_pfault (frame=0xffffff80e7d64c00,
usermode=1) at /usr/src/sys/amd64/amd64/trap.c:762
        id = <value optimized out>
        va = 34385813504
        vm = <value optimized out>
        map = 0xfffffe00328dc4b0
        rv = <value optimized out>
        ftype = 2 '\002'
        td = (struct thread *) 0xfffffe0087225490
        p = (struct proc *) 0xfffffe008723b950
        eva = 34385815552
#12 0xffffffff80cf36e4 in trap (frame=0xffffff80e7d64c00) at
/usr/src/sys/amd64/amd64/trap.c:363
        regs = {r_r15 = 0, r_r14 = 2161059892, r_r13 = 34387497004,
r_r12 = 4096, r_r11 = -2127162112, r_r10 = -2196755990192, r_r9 = 35,
r_r8 = -2196755990192, r_rdi = -545866232848,
  r_rsi = -2133909322, r_rbp = -2196756081520, r_rbx = 2267175152, r_rdx
= -545866233088, r_rcx = -2137957845, r_rax = -545866232992, r_trapno =
2157158774, r_fs = 65535, r_gs = 65535,
  r_err = 3889580928, r_es = 1, r_ds = 0, r_rip = -2126630144, r_cs =
6562141328, r_rflags = -549753520768, r_rsp = 4294967296, r_ss = 4197822}
        td = (struct thread *) 0xfffffe0087225490
        p = (struct proc *) 0xfffffe008723b950
        i = <value optimized out>
        ucode = <value optimized out>
        code = 7
        type = <value optimized out>
        addr = 34385815552
        ksi = {ksi_link = {tqe_next = 0xfffffe0087225490, tqe_prev =
0x207}, ksi_info = {si_signo = 0, si_errno = 0, si_code = 16777215,
si_pid = -1, si_uid = 29, si_status = -128,
    si_addr = 0xffffffff812f4f70, si_value = {sival_int = 15, sival_ptr
= 0xf, sigval_int = 15, sigval_ptr = 0xf}, _reason = {_fault = {_trapno
= 27758636}, _timer = {_timerid = 27758636,
        _overrun = 8}, _mesgq = {_mqd = 27758636}, _poll = {_band =
34387497004}, __spare__ = {__spare1__ = 34387497004, __spare2__ = {4096,
0, 0, 0, 0, 0, 0}}}}, ksi_flags = 65540,
  ksi_sigq = 0xffffffff813e3300}
#13 0xffffffff80cdc863 in calltrap () at
/usr/src/sys/amd64/amd64/exception.S:232
No locals.
#14 0x0000000801293284 in ?? ()
No symbol table info available.



More information about the freebsd-questions mailing list