On 9/8/13, Oliver Pinter <oliver.p...@gmail.com> wrote:
> Hi!
>
> I got this panic on recent 9-STABLE (amd64):
>
> GNU gdb 6.1.1 [FreeBSD]
> Copyright 2004 Free Software Foundation, Inc.
> GDB is free software, covered by the GNU General Public License, and you
> are
> welcome to change it and/or distribute copies of it under certain
> conditions.
> Type "show copying" to see the conditions.
> There is absolutely no warranty for GDB. Type "show warranty" for details.
> This GDB was configured as "amd64-marcel-freebsd"...
>
> Unread portion of the kernel message buffer:
> <118>Sep 8 20:22:34 pandora-d syslogd: exiting on signal 15
>
>
> Fatal trap 12: page fault while in kernel mode
> cpuid = 0; apic id = 00
> fault virtual address = 0x78
> fault code = supervisor read data, page not present
> instruction pointer = 0x20:0xffffffff80482a05
> stack pointer = 0x28:0xffffff800024e7d0
> frame pointer = 0x28:0xffffff800024e800
> code segment = base 0x0, limit 0xfffff, type 0x1b
> = DPL 0, pres 1, long 1, def32 0, gran 1
> processor eflags = interrupt enabled, resume, IOPL = 0
> current process = 1 (init)
> trap number = 12
> panic: page fault
> cpuid = 0
> KDB: stack backtrace:
> #0 0xffffffff804cd660 at kdb_backtrace+0x60
> #1 0xffffffff8049797e at panic+0x1fe
> #2 0xffffffff8069e3da at trap_fatal+0x37a
> #3 0xffffffff8069e64b at trap_pfault+0x25b
> #4 0xffffffff8069dd74 at trap+0x454
> #5 0xffffffff80688543 at calltrap+0x8
> #6 0xffffffff8046893b at proc_reap+0x4bb
> #7 0xffffffff80468d51 at proc_to_reap+0x361
> #8 0xffffffff80467ddb at kern_wait6+0x22b
> #9 0xffffffff804679b6 at sys_wait4+0x76
> #10 0xffffffff8069eb9d at amd64_syscall+0x29d
> #11 0xffffffff8068882b at Xfast_syscall+0xfb
> Uptime: 34m20s
> Dumping 367 out of 4084
> MB:..5%..14%..22%..31%..44%..53%..62%..75%..83%..92%
>
> This is fully reproducible.
>
> The HEAD stay on :
>
> commit aba57138f98f1a98e4b7c7c61511daefb0542524
> Author: des <d...@freebsd.org>
> Date: Sun Sep 8 10:04:26 2013 +0000
>
> Make libldns and libssh private.
>
> Approved by: re (blanket)
>
> Notes:
> svn path=/head/; revision=255386
>
> The panic first appeared on likely between august 8 and 17.
>
> When you need more info, the ping me.
>
after recompiling the kernel with INVARIANTS:
zone: 4096(0xfffffe00cff68380) slab 0xfffffe00059af470 freed address
0xfffffe00059b2010 unaligned.
panic: should be 0xfffffe00059b2000
cpuid = 0
KDB: stack backtrace:
#0 0xffffffff804c7790 at kdb_backtrace+0x60
#1 0xffffffff80494c8e at panic+0x1fe
#2 0xffffffff8066062c at uma_dbg_free+0x10c
#3 0xffffffff8065dbe5 at uma_zfree_arg+0x75
#4 0xffffffff8047f1f7 at free+0x97
#5 0xffffffff806a2ab3 at cpuctl_ioctl+0x4b3
#6 0xffffffff80401640 at devfs_ioctl_f+0xf0
#7 0xffffffff804db190 at kern_ioctl+0x1b0
#8 0xffffffff804daf92 at sys_ioctl+0x142
#9 0xffffffff806989c1 at amd64_syscall+0x211
#10 0xffffffff80681ecb at Xfast_syscall+0xfb
Uptime: 28s
Dumping 264 out of 4084 MB:..7%..13%..25%..31%..43%..55%..61%..73%..85%..91%
Script started on Sun Sep 8 23:31:25 2013
[1mroot[m@[4mpandora-d[24m ~# kgdb /boot/ker
kernel.old/ kernel/
[1mroot[m@[4mpandora-d[24m ~# kgdb /boot/kernel
kernel.old/ kernel/
[1mroot[m@[4mpandora-d[24m ~# kgdb /boot/kernel/ker
kernel* kernel.symbols*
[1mroot[m@[4mpandora-d[24m ~# kgdb /boot/kernel/kernel /var/crash/vmco
vmcore.0 vmcore.1 vmcore.2 vmcore.3 vmcore.4 vmcore.5
[1mroot[m@[4mpandora-d[24m ~# kgdb /boot/kernel/kernel /var/crash/vmcore.4
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for details.
This GDB was configured as "amd64-marcel-freebsd"...
Unread portion of the kernel message buffer:
<118>nginx: configuration file /usr/local/etc/nginx/nginx.conf test is
successful
<118>Starting nginx.
<118>Updating cpucodes...
<118>/usr/local/share/cpucontrol/m101067770A.fw: updating cpu /dev/cpuctl0 from
rev 0x705 to rev 0x70a...
zone: 4096(0xfffffe00cff68380) slab 0xfffffe00059af470 freed address
0xfffffe00059b2010 unaligned.
panic: should be 0xfffffe00059b2000
cpuid = 0
KDB: stack backtrace:
#0 0xffffffff804c7790 at kdb_backtrace+0x60
#1 0xffffffff80494c8e at panic+0x1fe
#2 0xffffffff8066062c at uma_dbg_free+0x10c
#3 0xffffffff8065dbe5 at uma_zfree_arg+0x75
#4 0xffffffff8047f1f7 at free+0x97
#5 0xffffffff806a2ab3 at cpuctl_ioctl+0x4b3
#6 0xffffffff80401640 at devfs_ioctl_f+0xf0
#7 0xffffffff804db190 at kern_ioctl+0x1b0
#8 0xffffffff804daf92 at sys_ioctl+0x142
#9 0xffffffff806989c1 at amd64_syscall+0x211
#10 0xffffffff80681ecb at Xfast_syscall+0xfb
Uptime: 28s
Dumping 264 out of 4084 MB:..7%..13%..25%..31%..43%..55%..61%..73%..85%..91%
Reading symbols from /boot/kernel/linux.ko...Reading symbols from
/boot/kernel/linux.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/linux.ko
Reading symbols from /boot/kernel/geom_sched.ko...Reading symbols from
/boot/kernel/geom_sched.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/geom_sched.ko
Reading symbols from /boot/kernel/gsched_rr.ko...Reading symbols from
/boot/kernel/gsched_rr.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/gsched_rr.ko
#0 doadump (textdump=<value optimized out>) at pcpu.h:234
234 pcpu.h: No such file or directory.
in pcpu.h
(kgdb) bt du full
#0 doadump (textdump=<value optimized out>) at pcpu.h:234
No locals.
#1 0xffffffff80494880 in kern_reboot (howto=260)
at /usr/src/sys/kern/kern_shutdown.c:449
_el = <value optimized out>
#2 0xffffffff80494cdf in panic (fmt=<value optimized out>)
at /usr/src/sys/kern/kern_shutdown.c:637
panic_cpu = 0
buf = "should be 0xfffffe00059b2000\n", '\0' <repeats 226 times>
ap = {{gp_offset = 16, fp_offset = 48,
overflow_arg_area = 0xffffff812edb78c0,
reg_save_area = 0xffffff812edb7840}}
td = <value optimized out>
newpanic = <value optimized out>
bootopt = <value optimized out>
#3 0xffffffff8066062c in uma_dbg_free (zone=0xfffffe00cff68380,
slab=<value optimized out>, item=0xfffffe00059b2010)
at /usr/src/sys/vm/uma_dbg.c:279
keg = <value optimized out>
freei = 0
#4 0xffffffff8065dbe5 in uma_zfree_arg (zone=0xfffffe00cff68380,
item=0xfffffe00059b2010, udata=0xfffffe00059af470)
at /usr/src/sys/vm/uma_core.c:2557
---Type <return> to continue, or q <return> to quit---
cache = <value optimized out>
bucket = <value optimized out>
#5 0xffffffff8047f1f7 in free (addr=<value optimized out>,
mtp=0xffffffff80a221b0) at /usr/src/sys/kern/kern_malloc.c:567
mtpp = <value optimized out>
size = <value optimized out>
#6 0xffffffff806a2ab3 in cpuctl_ioctl (dev=<value optimized out>,
cmd=<value optimized out>, data=<value optimized out>, flags=0,
td=<value optimized out>) at /usr/src/sys/dev/cpuctl/cpuctl.c:478
cpu = <value optimized out>
ret = <value optimized out>
#7 0xffffffff80401640 in devfs_ioctl_f (fp=0xfffffe0005ae3370,
com=3222299396, data=0xfffffe00059e6830, cred=<value optimized out>,
td=0xfffffe0005b4d490) at /usr/src/sys/fs/devfs/devfs_vnops.c:757
dev = (struct cdev *) 0xfffffe00019aca00
dsw = (struct cdevsw *) 0xffffffff80a221d0
ref = 1
dev = (struct cdev *) 0xfffffe00019aca00
dev = (struct cdev *) 0xfffffe00019aca00
dsw = (struct cdevsw *) 0xffffffff80a221d0
ref = 1
fpop = (struct file *) 0x0
error = <value optimized out>
---Type <return> to continue, or q <return> to quit---
p = <value optimized out>
i = <value optimized out>
vp = <value optimized out>
vpold = <value optimized out>
#8 0xffffffff804db190 in kern_ioctl (td=0xfffffe0005b4d490, fd=8,
com=3222299396) at file.h:311
fp = (struct file *) 0xfffffe0005ae3370
fp = (struct file *) 0xfffffe0005ae3370
tmp = 2
fp = (struct file *) 0xfffffe0005ae3370
fp = (struct file *) 0xfffffe0005ae3370
fp = (struct file *) 0xfffffe0005ae3370
fp = (struct file *) 0xfffffe0005ae3370
error = <value optimized out>
fdp = <value optimized out>
#9 0xffffffff804daf92 in sys_ioctl (td=0xfffffe0005b4d490,
uap=0xffffff812edb7bc0) at /usr/src/sys/kern/sys_generic.c:692
arg = -1
com = 3222299396
size = <value optimized out>
error = <value optimized out>
#10 0xffffffff806989c1 in amd64_syscall (td=0xfffffe0005b4d490, traced=0)
at subr_syscall.c:135
---Type <return> to continue, or q <return> to quit---
sa = {code = 54, callp = 0xffffffff809efc60, args = {8, 3222299396,
140737488344792, 4786339709536220145, 1, -2137015568, -544674710480,
-2142411608}, narg = 3}
ksi = {ksi_link = {tqe_next = 0xffffff812edb7b50,
tqe_prev = 0xffffffff8049aedf}, ksi_info = {si_signo = 786135984,
si_errno = -127, si_code = -2142540264, si_pid = -1, si_uid = 514,
si_status = 0, si_addr = 0x2580, si_value = {sival_int = -2136602624,
sival_ptr = 0xffffffff80a60800, sigval_int = -2136602624,
sigval_ptr = 0xffffffff80a60800}, _reason = {_fault = {_trapno = 3},
_timer = {_timerid = 3, _overrun = 0}, _mesgq = {_mqd = 3}, _poll = {
_band = 3}, __spare__ = {__spare1__ = 3, __spare2__ = {6370729, 8,
98320384, -512, 22, 0, 95736976}}}}, ksi_flags = 65540,
ksi_sigq = 0x10004}
error = <value optimized out>
#11 0xffffffff80681ecb in Xfast_syscall ()
at /usr/src/sys/amd64/amd64/exception.S:391
No locals.
#12 0x0000000800924aec in ?? ()
No symbol table info available.
Previous frame inner to this frame (corrupt stack?)
Current language: auto; currently minimal
(kgdb) q
[1mroot[m@[4mpandora-d[24m ~# ^Dexit
Script done on Sun Sep 8 23:32:24 2013
_______________________________________________
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "freebsd-stable-unsubscr...@freebsd.org"
