misc panics

Hello,

While in vacation, my home router crashed. I power-cycled it as soon as
I returned, as console was unresponsive (I access it via serial console,
so lines in following traces may be truncated)

I then crashed a few seconds after finished boot :

> OpenBSD/amd64 (fremen.geekwu.org) (tty00)
>
> login: panic: pool_do_get: art_table free list modified: page 0xfffffd812b0ac000; item addr 0xfffffdc
> Starting stack trace...
> panic(ffffffff81e7958a) at panic+0x11d
> pool_do_get(ffffffff82196790,a,ffff8000339a7f14) at pool_do_get+0x321
> pool_get(ffffffff82196790,a) at pool_get+0x8f
> art_table_get(ffff800000294480,fffffd812b0ac1a8,15) at art_table_get+0x7d
> art_insert(ffff800000294480,fffffd812b2f2480,ffff80000193c908,2d) at art_insert+0xe3
> rtable_insert(0,ffff80000193c900,ffff8000080213a0,ffff800008021380,30,fffffd812b3cc738) at rtable_inc
> rtrequest(1,ffff8000339a8298,30,ffff8000339a8210,0) at rtrequest+0x4fe
> rtm_output(ffff800008021300,ffff8000339a8340,ffff8000339a8298,30,0) at rtm_output+0x526
> route_output(fffffd80784e0b00,fffffd814a2f7b30,0,0) at route_output+0x396
> route_usrreq(fffffd814a2f7b30,9,fffffd80784e0b00,0,0,ffff8000227e4290) at route_usrreq+0x21a
> sosend(fffffd814a2f7b30,0,ffff8000339a8610,0,0,80) at sosend+0x36c
> dofilewritev(ffff8000227e4290,6,ffff8000339a8610,0,ffff8000339a8710) at dofilewritev+0x14d
> sys_writev(ffff8000227e4290,ffff8000339a86b0,ffff8000339a8710) at sys_writev+0xe2
> syscall(ffff8000339a8780) at syscall+0x389
> Xsyscall() at Xsyscall+0x128
> end of kernel
> end trace frame: 0x7f7ffffd5530, count: 242
> End of stack trace.
> syncing disks...18 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 giving up

After I unplugged all but one ethernet cable, I had time to log in and
enter a few commands (including syspatch, that only upgraded smtpd)
before another crash :

> fremen# ospfctl sh ne
> ID Pri State DeadTime Address Iface Uptime
> 51.255.165.194 1 DOWN/DOWN 00:02:05 10.120.0.58 wg3 -
> 151.80.16.138 1 FULL/DR 00:00:17 10.120.0.2 tap0 00:01:30
> 10.42.42.21 1 2-WAY/WAIT 00:00:39 10.42.42.21 em1 -
> fremen# fatal protection fault in supervisor mode
> trap type 4 code 0 rip ffffffff81131c89 cs 8 rflags 10282 cr2 207673f0010 cpl 0 rsp ffff800022717250
> gsbase 0xffffffff8211cff0 kgsbase 0x0
> panic: trap type 4, code=0, pc=ffffffff81131c89
> Starting stack trace...
> panic(ffffffff81de4ae4,ffffffff81de4ae4,ffff8000227171a0,4,ffff800022717268,ffffffff821e3d18) at pand
> kerntrap(ffff8000227171a0,ffff8000227171a0,8b36cc049b52fe43,f7fffd812f03fdd0,fffffd812f03ff90,6148604
> alltraps_kern_meltdown(4,6148601dcf42cca0,ffff800022717264,0,f7fffd812f03fdd0,fffffd812f03ff90) at ab
> pool_p_free(ffffffff821e3d18,fffffd812f03ff90,3c3fbd5ca1bd0af6,fffffd812f03ff90,ffffffff821e3d18,fff9
> pool_put(ffffffff821e3d18,fffffd812a7379d0,fa2dd1afa1e566dc,0,fffffd812a7379d0,0) at pool_put+0x16b
> art_gc(0,0,cf984c543a977bcb,ffffffff82114d50,ffffffff82114d38,1) at art_gc+0x71
> taskq_thread(ffffffff82114d38,ffffffff82114d38,0,0,ffffffff82114d38,ffffffff81be29b0) at taskq_threa1
> end trace frame: 0x0, count: 250
> End of stack trace.

After that I got a (maybe) endless loop of panics inducing panics (I did
not got the output, it was cycling fast), and after that the /bsd file
was left empty :

>>> OpenBSD/amd64 BOOT 3.52
> boot>
> NOTE: random seed is being reused.
> booting hd0a:/bsd: read header
> failed(0). will try /bsd

I booted /bsd.booted and got another crash at the end of boot sequence :

> boot> boot /bsd.booted
> NOTE: random seed is being reused.
> booting hd0a:/bsd.booted: 14415144+3195920+344096+0+880640 [497303+128+1138200+861220]=0x145ad58
> entry point at 0xffffffff81001000
> 0
> ffffff810010[ using 2497880 bytes of bsd ELF symbol table ]
> Copyright (c) 1982, 1986, 1989, 1991, 1993
> The Regents of the University of California. All rights reserved.
> Copyright (c) 1995-2020 OpenBSD. All rights reserved. https://www.OpenBSD.org
>
> OpenBSD 6.8 (GENERIC.MP) #2: Sat Dec 5 07:17:48 MST 2020
> root@syspatch-68-amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP
> real mem = 4196302848 (4001MB)
> avail mem = 4054564864 (3866MB)
> random: good seed from bootblocks
> mpath0 at root
> scsibus0 at mpath0: 256 targets
> mainbus0 at root
> bios0 at mainbus0: SMBIOS rev. 2.8 @ 0x8ce22000 (85 entries)
> bios0: vendor American Megatrends Inc. version "5.12" date 11/23/2018
> bios0: Default string Default string
> acpi0 at bios0: ACPI 6.0
> acpi0: sleep states S0 S3 S5
> acpi0: tables DSDT FACP APIC FPDT FIDT MCFG SSDT SSDT HPET SSDT SSDT UEFI SSDT LPIT SSDT SSDT SSDT ST
> acpi0: wakeup devices RP09(S3) PXSX(S3) RP10(S3) PXSX(S3) RP11(S3) PXSX(S3) RP12(S3) PXSX(S3) RP13(S]
> acpitimer0 at acpi0: 3579545 Hz, 24 bits
> acpimadt0 at acpi0 addr 0xfee00000: PC-AT compat
> cpu0 at mainbus0: apid 0 (boot processor)
> cpu0: Intel(R) Celeron(R) CPU 3855U @ 1.60GHz, 1596.81 MHz, 06-4e-03
> cpu0: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSN
> cpu0: 256KB 64b/line 8-way L2 cache
> cpu0: smt 0, core 0, package 0
> mtrr: Pentium Pro MTRR support, 10 var ranges, 88 fixed ranges
> cpu0: apic clock running at 24MHz
> cpu0: mwait min=64, max=64, C-substates=0.2.1.2.4.1.1.1, IBE
> cpu1 at mainbus0: apid 2 (application processor)
> cpu1: Intel(R) Celeron(R) CPU 3855U @ 1.60GHz, 1596.29 MHz, 06-4e-03
> cpu1: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSN
> cpu1: 256KB 64b/line 8-way L2 cache
> cpu1: smt 0, core 1, package 0
> ioapic0 at mainbus0: apid 2 pa 0xfec00000, version 20, 120 pins
> acpimcfg0 at acpi0
> acpimcfg0: addr 0xe0000000, bus 0-255
> acpihpet0 at acpi0: 23999999 Hz
> acpiprt0 at acpi0: bus 0 (PCI0)
> acpiprt1 at acpi0: bus -1 (PEG0)
> acpiprt2 at acpi0: bus -1 (PEG1)
> acpiprt3 at acpi0: bus -1 (PEG2)
> acpiprt4 at acpi0: bus -1 (RP09)
> acpiprt5 at acpi0: bus -1 (RP10)
> acpiprt6 at acpi0: bus -1 (RP11)
> acpiprt7 at acpi0: bus -1 (RP12)
> acpiprt8 at acpi0: bus -1 (RP13)
> acpiprt9 at acpi0: bus 1 (RP01)
> acpiprt10 at acpi0: bus 2 (RP02)
> acpiprt11 at acpi0: bus 3 (RP03)
> acpiprt12 at acpi0: bus 4 (RP04)
> acpiprt13 at acpi0: bus 5 (RP05)
> acpiprt14 at acpi0: bus 6 (RP06)
> acpiprt15 at acpi0: bus -1 (RP07)
> acpiprt16 at acpi0: bus -1 (RP08)
> acpiprt17 at acpi0: bus -1 (RP17)
> acpiprt18 at acpi0: bus -1 (RP18)
> acpiprt19 at acpi0: bus -1 (RP19)
> acpiprt20 at acpi0: bus -1 (RP20)
> acpiprt21 at acpi0: bus -1 (RP21)
> acpiprt22 at acpi0: bus -1 (RP22)
> acpiprt23 at acpi0: bus -1 (RP23)
> acpiprt24 at acpi0: bus -1 (RP24)
> acpiprt25 at acpi0: bus -1 (RP14)
> acpiprt26 at acpi0: bus -1 (RP15)
> acpiprt27 at acpi0: bus -1 (RP16)
> acpiec0 at acpi0: not present
> acpipci0 at acpi0 PCI0: 0x00000000 0x00000011 0x00000001
> acpicmos0 at acpi0
> "INT344B" at acpi0 not configured
> acpibtn0 at acpi0: SLPB
> "PNP0C14" at acpi0 not configured
> "INT33A1" at acpi0 not configured
> acpibtn1 at acpi0: PWRB
> "PNP0C0B" at acpi0 not configured
> "PNP0C0B" at acpi0 not configured
> "PNP0C0B" at acpi0 not configured
> "PNP0C0B" at acpi0 not configured
> "PNP0C0B" at acpi0 not configured
> acpicpu0 at acpi0: C3(200@1034 mwait.1@0x60), C2(200@151 mwait.1@0x33), C1(1000@1 mwait.1), PSS
> acpicpu1 at acpi0: C3(200@1034 mwait.1@0x60), C2(200@151 mwait.1@0x33), C1(1000@1 mwait.1), PSS
> acpipwrres0 at acpi0: FN00, resource for FAN0
> acpipwrres1 at acpi0: FN01, resource for FAN1
> acpipwrres2 at acpi0: FN02, resource for FAN2
> acpipwrres3 at acpi0: FN03, resource for FAN3
> acpipwrres4 at acpi0: FN04, resource for FAN4
> acpitz0 at acpi0: critical temperature is 119 degC
> acpitz1 at acpi0: critical temperature is 119 degC
> acpivideo0 at acpi0: GFX0
> acpivout0 at acpivideo0: DD1F
> cpu0: using VERW MDS workaround (except on vmm entry)
> cpu0: Enhanced SpeedStep 1596 MHz: speeds: 1601, 1600, 1500, 1400, 1300, 1200, 1100, 1000, 900, 800,z
> pci0 at mainbus0 bus 0
> pchb0 at pci0 dev 0 function 0 "Intel Core 6G Host" rev 0x08
> inteldrm0 at pci0 dev 2 function 0 "Intel HD Graphics 510" rev 0x07
> drm0 at inteldrm0
> inteldrm0: msi, SKYLAKE, gen 9
> "Intel Core GMM" rev 0x00 at pci0 dev 8 function 0 not configured
> xhci0 at pci0 dev 20 function 0 "Intel 100 Series xHCI" rev 0x21: msi, xHCI 1.0
> usb0 at xhci0: USB revision 3.0
> uhub0 at usb0 configuration 1 interface 0 "Intel xHCI root hub" rev 3.00/1.00 addr 1
> pchtemp0 at pci0 dev 20 function 2 "Intel 100 Series Thermal" rev 0x21
> dwiic0 at pci0 dev 21 function 0 "Intel 100 Series I2C" rev 0x21: apic 2 int 16
> iic0 at dwiic0
> dwiic1 at pci0 dev 21 function 1 "Intel 100 Series I2C" rev 0x21: apic 2 int 17
> iic1 at dwiic1
> "Intel 100 Series MEI" rev 0x21 at pci0 dev 22 function 0 not configured
> ahci0 at pci0 dev 23 function 0 "Intel 100 Series AHCI" rev 0x21: msi, AHCI 1.3.1
> ahci0: PHY offline on port 0
> ahci0: port 1: 6.0Gb/s
> scsibus1 at ahci0: 32 targets
> sd0 at scsibus1 targ 1 lun 0: <ATA, KINGSTON SMS200S, 600A> naa.50026b7253081a83
> sd0: 28626MB, 512 bytes/sector, 58626288 sectors, thin
> ppb0 at pci0 dev 28 function 0 "Intel 100 Series PCIE" rev 0xf1: msi
> pci1 at ppb0 bus 1
> em0 at pci1 dev 0 function 0 "Intel I211" rev 0x03: msi, address 40:62:31:01:4b:65
> ppb1 at pci0 dev 28 function 1 "Intel 100 Series PCIE" rev 0xf1: msi
> pci2 at ppb1 bus 2
> em1 at pci2 dev 0 function 0 "Intel I211" rev 0x03: msi, address 40:62:31:01:4b:66
> ppb2 at pci0 dev 28 function 2 "Intel 100 Series PCIE" rev 0xf1: msi
> pci3 at ppb2 bus 3
> em2 at pci3 dev 0 function 0 "Intel I211" rev 0x03: msi, address 40:62:31:01:4b:67
> ppb3 at pci0 dev 28 function 3 "Intel 100 Series PCIE" rev 0xf1: msi
> pci4 at ppb3 bus 4
> em3 at pci4 dev 0 function 0 "Intel I211" rev 0x03: msi, address 40:62:31:01:4b:68
> ppb4 at pci0 dev 28 function 4 "Intel 100 Series PCIE" rev 0xf1: msi
> pci5 at ppb4 bus 5
> em4 at pci5 dev 0 function 0 "Intel I211" rev 0x03: msi, address 40:62:31:01:4b:69
> ppb5 at pci0 dev 28 function 5 "Intel 100 Series PCIE" rev 0xf1: msi
> pci6 at ppb5 bus 6
> em5 at pci6 dev 0 function 0 "Intel I211" rev 0x03: msi, address 40:62:31:01:4b:6a
> "Intel 100 Series UART" rev 0x21 at pci0 dev 30 function 0 not configured
> pcib0 at pci0 dev 31 function 0 "Intel 100 Series LPC" rev 0x21
> "Intel 100 Series PMC" rev 0x21 at pci0 dev 31 function 2 not configured
> azalia0 at pci0 dev 31 function 3 "Intel 100 Series HD Audio" rev 0x21: msi
> azalia0: no supported codecs
> ichiic0 at pci0 dev 31 function 4 "Intel 100 Series SMBus" rev 0x21: apic 2 int 16
> iic2 at ichiic0
> spdmem0 at iic2 addr 0x50: 4GB DDR4 SDRAM PC4-19200 SO-DIMM
> isa0 at pcib0
> isadma0 at isa0
> com0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
> com0: console
> com1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo
> vga0 at isa0 port 0x3b0/48 iomem 0xa0000/131072
> wsdisplay at vga0 not configured
> pcppi0 at isa0 port 0x61
> spkr0 at pcppi0
> vmm0 at mainbus0: VMX/EPT
> vscsi0 at root
> scsibus2 at vscsi0: 256 targets
> softraid0 at root
> scsibus3 at softraid0: 256 targets
> root on sd0a (d560a7ae33c40936.a) swap on sd0b dump on sd0b
> zlib inflate failed: data errorWARNING: / was not properly unmounted
> inteldrm0: 1024x768, 32bpp
> wsdisplay0 at inteldrm0 mux 1
> wsdisplay0: screen 0-5 added (std, vt100 emulation)
> Automatic boot in progress: starting file system checks.
> /dev/sd0a (d560a7ae33c40936.a): 6065 files, 78663 used, 435776 free (448 frags, 54416 blocks, 0.1% f)
> /dev/sd0a (d560a7ae33c40936.a): MARKING FILE SYSTEM CLEAN
> /dev/sd0d (d560a7ae33c40936.d): 7 files, 6 used, 923841 free (49 frags, 115474 blocks, 0.0% fragment)
> /dev/sd0d (d560a7ae33c40936.d): MARKING FILE SYSTEM CLEAN
> /dev/sd0f (d560a7ae33c40936.f): UNREF FILE I=208013 OWNER=root MODE=100555
> /dev/sd0f: SIZE=534952 MTIME=Oct 4 23:47 2020 (CLEARED)
> /dev/sd0f (d560a7ae33c40936.f): FREE BLK COUNT(S) WRONG IN SUPERBLK (SALVAGED)
> /dev/sd0f (d560a7ae33c40936.f): SUMMARY INFORMATION BAD (SALVAGED)
> /dev/sd0f (d560a7ae33c40936.f): BLK(S) MISSING IN BIT MAPS (SALVAGED)
> /dev/sd0f (d560a7ae33c40936.f): 17752 files, 720605 used, 273042 free (4514 frags, 33566 blocks, 0.5)
> /dev/sd0f (d560a7ae33c40936.f): MARKING FILE SYSTEM CLEAN
> /dev/sd0g (d560a7ae33c40936.g): file system is clean; not checking
> /dev/sd0h (d560a7ae33c40936.h): file system is clean; not checking
> /dev/sd0j (d560a7ae33c40936.j): file system is clean; not checking
> /dev/sd0i (d560a7ae33c40936.i): file system is clean; not checking
> /dev/sd0e (d560a7ae33c40936.e): 906 files, 285552 used, 1158879 free (383 frags, 144812 blocks, 0.0%)
> /dev/sd0e (d560a7ae33c40936.e): MARKING FILE SYSTEM CLEAN
> /dev/sd0k (d560a7ae33c40936.k): 649 files, 4327 used, 17744 free (64 frags, 2210 blocks, 0.3% fragme)
> /dev/sd0k (d560a7ae33c40936.k): MARKING FILE SYSTEM CLEAN
> /dev/sd0m (d560a7ae33c40936.m): 32 files, 179 used, 1764 free (44 frags, 215 blocks, 2.3% fragmentat)
> /dev/sd0m (d560a7ae33c40936.m): MARKING FILE SYSTEM CLEAN
> /dev/sd0l (d560a7ae33c40936.l): 270 files, 271 used, 21800 free (48 frags, 2719 blocks, 0.2% fragmen)
> /dev/sd0l (d560a7ae33c40936.l): MARKING FILE SYSTEM CLEAN
> /dev/sd0n (d560a7ae33c40936.n): 7 files, 5 used, 1938 free (26 frags, 239 blocks, 1.3% fragmentation)
> /dev/sd0n (d560a7ae33c40936.n): MARKING FILE SYSTEM CLEAN
> pf enabled
> net.inet.ip.forwarding: 0 -> 1
> net.inet6.ip6.forwarding: 0 -> 1
> net.inet.ip.mforwarding: 0 -> 1
> net.inet6.ip6.mforwarding: 0 -> 1
> net.inet.ipcomp.enable: 0 -> 1
> net.inet.tcp.ecn: 0 -> 1
> ddb.panic: 1 -> 0
> ddb.console: 0 -> 0
> kern.splassert: 1 -> 2
> net.inet.gre.allow: 0 -> 1
> net.inet.ip.multipath: 0 -> 1
> net.inet6.ip6.multipath: 0 -> 1
> sysctl: kern.watchdog.period: value is not available
> starting network
> add net default: gateway 82.64.208.254
> add net default: gateway 2a01:0e0a:0505:cbd0::1
> ifconfig: SIOCSIFRDOMAIN: Invalid argument
> add net default: gateway 0.0.0.1
> svc: /service/dhcp6c: unable to open control pipe
> reordering libraries: done.
> starting early daemons: syslogd pflogd nsd unbound ntpdpppoe0: received unexpected PADO
> .
> starting RPC daemons:.
> savecore: no core dump
> checking quotas: done.
> clearing /tmp
> kern.securelevel: 0 -> 1
> creating runtime link editor directory cache.
> preserving editor files.
> starting network daemons: sshd ospfd(failed) ospf6d(failed) bgpd dhcpd mrouted rad smtpd ftpproxy sn.
> starting package daemons: svscan munin_node.
> cron1050 addresses added.
> starting local daemons: cron(failed).
> Sun Dec 27 13:34:51 CET 2020
>
> OpenBSD/amd64 (fremen.geekwu.org) (tty00)
>
> login: fatal protection fault in supervisor mode
> trap type 4 code 0 rip ffffffff81258dbe cs 8 rflags 10206 cr2 34233f38028 cpl a rsp ffff8000227c3510
> gsbase 0xffff800022410ff0 kgsbase 0x0
> panic: trap type 4, code=0, pc=ffffffff81258dbe
> Starting stack trace...
> panic(ffffffff81de4ae4,ffffffff81de4ae4,ffff8000227c3460,4,fffffd813537d6a8,fffffd800805b500) at pand
> kerntrap(ffff8000227c3460,ffff8000227c3460,6d4dc77a2f1bac75,fffffd800805b568,fffffd813843e340,8000004
> alltraps_kern_meltdown(4,800000000000000,0,0,fffffd800805b568,fffffd813843e340) at alltraps_kern_melb
> pmap_page_remove(fffffd800805b500,fffffd800805b500,e03d06e9ac14a5a6,fffffd800805b500,fffffd813843e34e
> uvm_anfree_list(fffffd813843e340,ffff8000227c35c8,9353a28319cbf425,ffff8000227c35c8,fffffd813537d6806
> amap_wipeout(fffffd813537d680,fffffd813537d680,f88a0e1c22e82980,ffff8000227c3678,1,ffff8000227c3680)7
> uvm_unmap_detach(ffff8000227c3678,1,416162009098f49d,0,fffffd816e493000,ffff800022796c68) at uvm_unm4
> uvm_map_teardown(fffffd816e493000,fffffd816e493000,5f0772d5f721764e,0,fffffd816e493000,fffffd81353e59
> uvmspace_free(fffffd816e493000,fffffd816e493000,1671103de78dc753,ffff8000ffff0f28,ffffffff8185c77d,fd
> uvm_exit(ffff8000ffff0f28,ffff8000ffff0f28,d28c4c5e6a7e09f8,ffff8000ffff0f28,ffffffff81db4744,ffff804
> reaper(ffff800022796c68,ffff800022796c68,0,ffffffff81a74460,ffffffff81a745ac,ffff8000227c3740) at rec
> end trace frame: 0x0, count: 246
> End of stack trace.

I managed to get a working shell only by booting /bsd.sp, from which I
re-downloaded the stock /bsd, and reverted all syspatches, but after a
reboot I get the usual cash on boot, which induced another crash (but
this time it was not looping)

> Sun Dec 27 13:48:34 CET 2020
>
> OpenBSD/amd64 (fremen.geekwu.org) (tty00)
>
> login: fatal protection fault in supervisor mode
> trap type 4 code 0 rip ffffffff8160f334 cs 8 rflags 10282 cr2 3091d1000 cpl a rsp ffff80003398a890
> gsbase 0xffff800022410ff0 kgsbase 0x0
> panic: trap type 4, code=0, pc=ffffffff8160f334
> Starting stack trace...
> panic(ffffffff81de58d0) at panic+0x11d
> kerntrap(ffff80003398a7e0) at kerntrap+0x114
> alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b
> pool_do_get(ffffffff821ece68,2,ffff80003398a934) at pool_do_get+0x74
> pool_get(ffffffff821ece68,2) at pool_get+0x8f
> pmap_enter(ffffffff82185100,ffff800008053000,132836000,3,33) at pmap_enter+0xb9
> uvm_pagermapin(ffff80003398abc8,1,2) at uvm_pagermapin+0xa8
> uvn_io(fffffd81413fccf8,ffff80003398abc8,1,2,0) at uvn_io+0xbf
> uvn_get(fffffd81413fccf8,67b4000,ffff80003398ae10,ffff80003398adc4,0,2) at uvn_get+0x156
> uvm_fault(fffffd814c81d228,3091d1000,0,2) at uvm_fault+0xcb4
> pageflttrap(ffff80003398af40,3091d1000,1) at pageflttrap+0xfe
> usertrap(ffff80003398af40) at usertrap+0x16e
> recall_trap() at recall_trap+0x8
> end of kernel
> end trace frame: 0x23ac14fc0, count: 244
> End of stack trace.
> syncing disks...fatal protection fault in supervisor mode
> trap type 4 code 0 rip ffffffff8160f334 cs 8 rflags 10282 cr2 3091bd000 cpl 0 rsp ffff8000339c47c0
> gsbase 0xffffffff8210cff0 kgsbase 0x0
> panic: trap type 4, code=0, pc=ffffffff8160f334
> Starting stack trace...
> panic(ffffffff81de58d0) at panic+0x11d
> kerntrap(ffff8000339c4710) at kerntrap+0x114
> alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b
> pool_do_get(ffffffff821ece68,2,ffff8000339c4864) at pool_do_get+0x74
> pool_get(ffffffff821ece68,2) at pool_get+0x8f
> pmap_enter(ffffffff82185100,ffff800008063000,132834000,3,33) at pmap_enter+0xb9
> uvm_pagermapin(ffff8000339c4af8,1,2) at uvm_pagermapin+0xa8
> uvn_io(fffffd81413fccf8,ffff8000339c4af8,1,2,0) at uvn_io+0xbf
> uvn_get(fffffd81413fccf8,67a0000,ffff8000339c4d40,ffff8000339c4cf4,0,2) at uvn_get+0x156
> uvm_fault(fffffd814c81d228,3091bd000,0,2) at uvm_fault+0xcb4
> pageflttrap(ffff8000339c4e70,3091bd000,1) at pageflttrap+0xfe
> usertrap(ffff8000339c4e70) at usertrap+0x16e
> recall_trap() at recall_trap+0x8
> end of kernel
> end trace frame: 0x205ed3430, count: 244
> End of stack trace.
>
> dump to dev 4,1 not possible
> rpaenboioct: inkge.rn.e.

After that I gave up and installed a spare router.

How can I figure out the cause of all these problems ?

Thanks,

--
Bastien Durel