[vbox-dev] MacOS (Montery) VM crashes on invalid CPU instruction using VirtualBox 6.1.36 r152435

Michal Necasek michal.necasek at oracle.com
Mon Oct 10 09:24:09 GMT 2022


 Yes and no... the relevant bit is "Kernel trap at 0xffffff80195e7090, type 6=invalid opcode". So probably an unsupported instruction. But unfortunately Apple does not log the opcode bytes at the faulting location, so it's anyone's guess what the instruction might be.

 The simulator probably needs some instruction set extension but your guess is as good as mine as to which of the more of a dozen of the recent ones it might be.


    - Michal
________________________________
From: vbox-dev-bounces at virtualbox.org <vbox-dev-bounces at virtualbox.org> on behalf of Hans Petter Selasky <hps at selasky.org>
Sent: Saturday, October 8, 2022 11:27 PM
To: vbox-dev at virtualbox.org <vbox-dev at virtualbox.org>
Subject: [vbox-dev] MacOS (Montery) VM crashes on invalid CPU instruction using VirtualBox 6.1.36 r152435

Hi,

Is anyone able to decode this crash dump from MacOS?

It is 100% reproducable and happens when I start the IPAD simulator as
part of the freely available XCODE package.

I would be so happy to virtualize may MacOS APP development and if
someone has any advice about this one, I'll happily try out stuff:

--HPS

panic(cpu 0 caller 0xffffff80181d0833): Kernel trap at
0xffffff80195e7090, type 6=invalid opcode, registers:
CR0: 0x00000000c0010033, CR2: 0x00000001028c3a80, CR3:
0x00000002360bd000, CR4: 0x00000000000006e0
RAX: 0x0000000000000000, RBX: 0x0000000000000153, RCX:
0x0000000000000000, RDX: 0xffffffa050f22ca4
RSP: 0xffffffefd978b520, RBP: 0xffffffefd978b9e0, RSI:
0x0000000000000200, RDI: 0xffffffefd978b980
R8:  0xffffff99eb87e008, R9:  0x0000000000000000, R10:
0x0000000000000702, R11: 0x0000000000000702
R12: 0xffffffa050f22ca4, R13: 0x00000000000001cd, R14:
0xffffff99eb87e008, R15: 0xffffffefd978b780
RFL: 0x0000000000010246, RIP: 0xffffff80195e7090, CS:
0x0000000000000008, SS:  0x0000000000000010
Fault CR2: 0x00000001028c3a80, Error code: 0x0000000000000000, Fault
CPU: 0x0 VMM, PL: 0, VF: 0

Panicked task 0xffffff951f246350: 3 threads: pid 619: STExtractionServ
Backtrace (CPU 0), panicked thread: 0xffffff99e531c540, Frame : Return
Address
0xffffffefd978aed0 : 0xffffff801807fdad mach_kernel :
_handle_debugger_trap + 0x41d
0xffffffefd978af20 : 0xffffff80181e10d6 mach_kernel : _kdp_i386_trap + 0x116
0xffffffefd978af60 : 0xffffff80181d0443 mach_kernel : _kernel_trap + 0x4d3
0xffffffefd978afb0 : 0xffffff801801fa70 mach_kernel : _return_from_trap
+ 0xe0
0xffffffefd978afd0 : 0xffffff801808017d mach_kernel :
_DebuggerTrapWithState + 0xad
0xffffffefd978b0f0 : 0xffffff801807f936 mach_kernel :
_panic_trap_to_debugger + 0x2b6
0xffffffefd978b150 : 0xffffff8018915093 mach_kernel : _panic + 0x84
0xffffffefd978b240 : 0xffffff80181d0833 mach_kernel : _sync_iss_to_iks +
0x2c3
0xffffffefd978b3c0 : 0xffffff80181d0516 mach_kernel : _kernel_trap + 0x5a6
0xffffffefd978b410 : 0xffffff801801fa70 mach_kernel : _return_from_trap
+ 0xe0
0xffffffefd978b430 : 0xffffff80195e7090
com.apple.AppleFSCompression.AppleFSCompressionTypeZlib :
_lzvn_decode_buffer + 0x550
0xffffffefd978b9e0 : 0xffffff80195ea4c2
com.apple.AppleFSCompression.AppleFSCompressionTypeZlib :
_lzvn_decode_buffer + 0x3982
0xffffffefd978b9f0 : 0xffffff80195f2429
com.apple.AppleFSCompression.AppleFSCompressionTypeZlib :
_compression_decode_buffer + 0x120b
0xffffffefd978bab0 : 0xffffff80195f1b25
com.apple.AppleFSCompression.AppleFSCompressionTypeZlib :
_compression_decode_buffer + 0x907
0xffffffefd978bb40 : 0xffffff80183755c2 mach_kernel :
_decmpfs_read_compressed + 0x5e2
0xffffffefd978bcc0 : 0xffffff801b35e808 com.apple.filesystems.apfs :
_apfs_vnop_read + 0x1a8
0xffffffefd978bd70 : 0xffffff801834ed22 mach_kernel : _vn_close + 0x2e2
0xffffffefd978bdf0 : 0xffffff801834da90 mach_kernel :
_utf8_normalizeOptCaseFoldAndMatchSubstring + 0x5e0
0xffffffefd978be50 : 0xffffff8018686b22 mach_kernel : _read + 0x2c2
0xffffffefd978bee0 : 0xffffff8018686900 mach_kernel : _read + 0xa0
0xffffffefd978bf40 : 0xffffff80187893db mach_kernel : _unix_syscall64 +
0x1fb
0xffffffefd978bfa0 : 0xffffff8018020236 mach_kernel : _hndl_unix_scall64
+ 0x16
       Kernel Extensions in backtrace:

com.apple.AppleFSCompression.AppleFSCompressionTypeZlib(1.0)[08C22A25-95A6-3B37-B4BD-E182F661F422]@0xffffff80195e5000->0xffffff80195f6fff

com.apple.filesystems.apfs(1934.141.2)[7BE1A42C-8498-3552-889B-B576BD16C310]@0xffffff801b307000->0xffffff801b485fff
             dependency:
com.apple.driver.AppleEFINVRAM(2.1)[19FF0662-D6A1-3A6A-8A08-F13440767F2E]@0xffffff80195b2000->0xffffff80195bbfff
             dependency:
com.apple.driver.AppleEffaceableStorage(1.0)[BC969637-246D-33D8-BE18-E52DDD2BE9B8]@0xffffff80195c8000->0xffffff80195cdfff
             dependency:
com.apple.iokit.CoreAnalyticsFamily(1)[41865250-2C29-3D40-B2A4-0676FF2B2924]@0xffffff8019ad3000->0xffffff8019adafff
             dependency:
com.apple.iokit.IOStorageFamily(2.1)[A3F1B111-78F1-3886-8DE2-ABAE0B6314BE]@0xffffff801ad78000->0xffffff801ad8efff
             dependency:
com.apple.kec.corecrypto(12.0)[250FB6C8-3746-3CA0-B151-52080EFB6D20]@0xffffff801b4bf000->0xffffff801b53ffff
             dependency:
com.apple.security.AppleImage4(4.2.0)[8183FB19-D386-3C87-A7D7-3EBDBA01116A]@0xffffff801964f000->0xffffff8019667fff

Process name corresponding to current thread (0xffffff99e531c540):
STExtractionService
Boot args: usb=0x800 keepsyms=1 -v -serial=0x1

Mac OS version:
21G115

Kernel version:
Darwin Kernel Version 21.6.0: Mon Aug 22 20:17:10 PDT 2022;
root:xnu-8020.140.49~2/RELEASE_X86_64
Kernel UUID: 06A10466-36D7-3A0B-9EE7-A9053A8991A3
KernelCache slide: 0x0000000017e00000
KernelCache base:  0xffffff8018000000
Kernel slide:      0x0000000017e10000
Kernel text base:  0xffffff8018010000
__HIB  text base: 0xffffff8017f00000
System model name: MacBookPro11,2 (Mac-3CBD00234E554E41)
System shutdown begun: NO
Panic diags file available: YES (0x0)
Hibernation exit count: 0

System uptime in nanoseconds: 898637563101
Last Sleep:           absolute           base_tsc          base_nano
   Uptime  : 0x000000d13af90851
   Sleep   : 0x0000000000000000 0x0000000000000000 0x0000000000000000
   Wake    : 0x0000000000000000 0x00000001f412541a 0x0000000000000000
Compressor Info: 1% of compressed pages limit (OK) and 1% of segments
limit (OK) with 0 swapfiles and OK swap space
Zone info:
   Zone map: 0xffffff8050f5e000 - 0xffffffa050f5e000
   . PGZ   : 0xffffff8050f5e000 - 0xffffff8052f5f000
   . VM    : 0xffffff8052f5f000 - 0xffffff851f75e000
   . RO    : 0xffffff851f75e000 - 0xffffff86b8f5e000
   . GEN0  : 0xffffff86b8f5e000 - 0xffffff8b8575e000
   . GEN1  : 0xffffff8b8575e000 - 0xffffff9051f5e000
   . GEN2  : 0xffffff9051f5e000 - 0xffffff951e75e000
   . GEN3  : 0xffffff951e75e000 - 0xffffff99eaf5e000
   . DATA  : 0xffffff99eaf5e000 - 0xffffffa050f5e000
   Metadata: 0xffffffffd9fee000 - 0xfffffffff9fee000
   Bitmaps : 0xfffffffff9fee000 - 0xfffffffffffee000

last started kext at 37630361980: |IOAVB!F      1040.6 (addr
0xffffff7fb0f33000, size 77824)
last stopped kext at 281184259113: >pmtelemetry 1 (addr
0xffffff7fb151b000, size 36864)
loaded kexts:
@filesystems.autofs     3.0
 >X86PlatformShim        1.0.0
 >AGPM   129
 >!APlatformEnabler      2.7.0d0
 >!AUpstreamUserClient   3.6.9
 >!AMCCSControl  1.16
@AGDCPluginDisplayMetrics       6.5.7
 >!ALPC  3.1
|IOUserEthernet 1.0.1
 >usb.!UUserHCI  1
 >!AHV   1
 >!ADiskImages2  126.141.2
 >!A!ISlowAdaptiveClocking       4.0.0
 >!AAHCIPort     351.100.4
 >!A!I8254XEthernet      3.1.5
 >!AFileSystemDriver     3.0.1
@filesystems.tmpfs      1
@filesystems.lifs       1
@filesystems.apfs       1934.141.2
@filesystems.hfs.kext   583.100.10
@BootCache      40
@!AFSCompression.!AFSCompressionTypeZlib        1.0.0
@!AFSCompression.!AFSCompressionTypeDataless    1.0.0d1
@private.KextAudit      1.0
 >!AACPIButtons  6.1
 >!AHPET 1.8
 >!ARTC  2.0.1
 >!ASMBIOS       2.1
 >!AAPIC 1.7
@!ASystemPolicy 2.0.0
@nke.applicationfirewall        402
|IOKitRegistryCompatibility     1
|EndpointSecurity       1
@Dont_Steal_Mac_OS_X    7.0.0
@kec.!AEncryptedArchive 1
|IOAVB!F        1040.6
@plugin.IOgPTPPlugin    1040.3
|IOEthernetAVB!C        1.1.0
@kext.triggers  1.0
 >!ASMBus!C      1.0.18d1
|IOSMBus!F      1.1
@vecLib.kext    1.2.0
 >!AAudioClockLibs       140.1
 >X86PlatformPlugin      1.0.0
|IONDRVSupport  597
 >IOPlatformPlugin!F     6.0.0d8
|IO!BSerialManager      9.0.0
|IO!BPacketLogger       9.0.0
|IO!BHost!CUSBTransport 9.0.0
|IO!BHost!CUARTTransport        9.0.0
|IO!BHost!CTransport    9.0.0
 >IO!BHost!CPCIeTransport        9.0.0
|CSR!BHost!CUSBTransport        9.0.0
|Broadcom!BHost!CUSBTransport   9.0.0
|Broadcom!B20703USBTransport    9.0.0
 >!AIPAppender   1.0
|IOSkywalk!F    1.0
 >mDNSOffloadUserClient  1.0.1b8
@!AGPUWrangler  6.5.7
@!AGraphicsDeviceControl        6.5.7
|IOGraphics!F   597
|IOSlowAdaptiveClocking!F       1.0.0
 >usb.IOUSBHostHIDDevice 1.2
 >usb.cdc        5.0.0
 >usb.networking 5.0.0
 >usb.!UHostCompositeDevice      1.2
 >!AXsanScheme   3
|IOAHCIBlock!S  333.140.2
 >usb.!UOHCIPCI  1.2
 >usb.!UOHCI     1.2
 >usb.!UEHCI     1.2
|IOAHCI!F       297
 >!ABSDKextStarter       3
|IOSurface      302.14
@filesystems.hfs.encodings.kext 1
 >usb.!UHostPacketFilter 1.0
|IOUSB!F        900.4.2
 >!AEFINVRAM     2.1
 >!AEFIRuntime   2.1
|IOHID!F        2.0.0
|IOTimeSync!F   1040.3
|IONetworking!F 3.4
 >DiskImages     493.0.0
|IO!B!F 9.0.0
|IOReport!F     47
$quarantine     4
$sandbox        300.0
@kext.!AMatch   1.0.0d1
|CoreAnalytics!F        1
 >!ASSE  1.0
 >!AKeyStore     2
 >!UTDM  533.120.2
|IOUSBMass!SDriver      210.120.3
|IOSCSIBlockCommandsDevice      456.140.3
|IO!S!F 2.1
|IOSCSIArchitectureModel!F      456.140.3
 >!AMobileFileIntegrity  1.0.5
$!AImage4       4.2.0
@kext.CoreTrust 1
 >!AFDEKeyStore  28.30
 >!AEffaceable!S 1.0
 >!ACredentialManager    1.0
 >KernelRelayHost        1
|IOUSBHost!F    1.2
 >!UHostMergeProperties  1.2
 >usb.!UCommon   1.0
 >!ABusPower!C   1.0
 >!ASEPManager   1.0.1
 >IOSlaveProcessor       1
 >!AACPIPlatform 6.1
 >!ASMC  3.1.9
|IOPCI!F        2.9
|IOACPI!F       1.4
 >watchdog       1
@kec.pthread    1
@kec.Libm       1
@kec.corecrypto 12.0

_______________________________________________
vbox-dev mailing list
vbox-dev at virtualbox.org
https://www.virtualbox.org/mailman/listinfo/vbox-dev
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.virtualbox.org/pipermail/vbox-dev/attachments/20221010/ef8cb484/attachment.html>


More information about the vbox-dev mailing list