RE: RELENG_5 panic

2005-05-23 Thread Robin P. Blanchard
Here's what I could get out of dmesg, and looking again at the dump

# dmesg -M /usr/local/var/adm/crash/vmcore.44 -N /boot/kernel/kernel 
kernel trap 12 with interrupts disabled

Fatal trap 12: page fault while in kernel mode
cpuid = 0; apic id = 00
fault virtual address   = 0x24
fault code  = supervisor read, page not present
instruction pointer = 0x8:0xc0504808
stack pointer   = 0x10:0xc7ac0c08
frame pointer   = 0x10:0xc7ac0c3c
code segment= base 0x0, limit 0xf, type 0x1b
= DPL 0, pres 1, def32 1, gran 1
processor eflags= resume, IOPL = 0
current process = 27 (swi5: clock sio)
trap number = 12
panic: page fault
cpuid = 0
Uptime: 3d6h59m25s
Dumping 127 MB
 16 32 48 64 80 96 112

[EMAIL PROTECTED] [/usr/obj/usr/src/sys/fastipsec]# kgdb kernel.debug
/usr/local/var/adm/crash/vmcore.44 
[GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so:
Undefined symbol ps_pglobal_lookup]
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type show copying to see the conditions.
There is absolutely no warranty for GDB.  Type show warranty for details.
This GDB was configured as i386-marcel-freebsd.
#0  doadump () at pcpu.h:160
160 __asm __volatile(movl %%fs:0,%0 : =r (td));
(kgdb) l *0xc0504808
0xc0504808 is in turnstile_wait (/usr/src/sys/kern/subr_turnstile.c:245).
240 /*
241  * Pick up the lock that td is blocked on.
242  */
243 ts = td-td_blocked;
244 MPASS(ts != NULL);
245 tc = TC_LOOKUP(ts-ts_lockobj);
246 mtx_lock_spin(tc-tc_lock);
247
248 /*
249  * This thread may not be blocked on this turnstile
anymore
(kgdb) 


---
Robin P. Blanchard
Systems Integration Specialist
Georgia Center for Continuing Education
fon: 706.542.2404   fax: 706.542.6546
---
 

 -Original Message-
 From: Doug White [mailto:[EMAIL PROTECTED] 
 Sent: Sunday, May 22, 2005 3:20 PM
 To: Robin P. Blanchard
 Cc: [EMAIL PROTECTED]
 Subject: Re: RELENG_5 panic
 
 On Sat, 21 May 2005, Robin P. Blanchard wrote:
 
  # uname -a
  FreeBSD robinpb.homeip.net 5.4-STABLE FreeBSD 5.4-STABLE 
 #0: Tue May 
  17
  00:30:47 EDT 2005
  [EMAIL PROTECTED]:/usr/obj/usr/src/sys/fastipsec  i386
 
  # kgdb kernel.debug /usr/local/var/adm/crash/vmcore.44
  [GDB will not be able to debug user-mode threads: 
 /usr/lib/libthread_db.so:
  Undefined symbol ps_pglobal_lookup]
  GNU gdb 6.1.1 [FreeBSD]
  Copyright 2004 Free Software Foundation, Inc.
  GDB is free software, covered by the GNU General Public 
 License, and 
  you are welcome to change it and/or distribute copies of it 
 under certain conditions.
  Type show copying to see the conditions.
  There is absolutely no warranty for GDB.  Type show 
 warranty for details.
  This GDB was configured as i386-marcel-freebsd.
  #0  doadump () at pcpu.h:160
  160 __asm __volatile(movl %%fs:0,%0 : =r (td));
  (kgdb) bt full
  #0  doadump () at pcpu.h:160
  No locals.
  #1  0xc04dd58c in boot (howto=260) at 
 /usr/src/sys/kern/kern_shutdown.c:410
  first_buf_printf = 1
  #2  0xc04ddccd in panic (fmt=0xc066e594 %s) at
  /usr/src/sys/kern/kern_shutdown.c:566
  bootopt = 260
  newpanic = 0
  buf = page fault, '\0' repeats 245 times
 
 can you try to fish the trap output from msgbuf?  That or use 
 dmesg's -N and -M options to extract it from the crashdump.
 
  #3  0xc0641e92 in trap_fatal (frame=0xc7ac0bc8, eva=36) at
  /usr/src/sys/i386/i386/trap.c:817
  code = 16
  type = 12
  ss = 16
  esp = 0
  softseg = {ssd_base = 0, ssd_limit = 1048575, 
 ssd_type = 27, 
  ssd_dpl = 0, ssd_p = 1,
ssd_xx = 0, ssd_xx1 = 0, ssd_def32 = 1, ssd_gran = 1}
  #4  0xc0642535 in trap (frame=
{tf_fs = 24, tf_es = -1066598384, tf_ds = 
 -1066532848, tf_edi = 
  -1053916800, tf_esi = -1049515008, tf_ebp = -945025988, tf_isp = 
  -945026060, tf_ebx = -1053916800, tf_edx = -1053937024, 
 tf_ecx = 56, 
  tf_eax = 0, tf_trapno = 12, tf_err = 0, tf_eip = 
 -1068480504, tf_cs = 
  8, tf_eflags = 65683, tf_esp = -1053914880, tf_ss = 582}) at
  /usr/src/sys/i386/i386/trap.c:255
  p = (struct proc *) 0xc12e754c
  sticks = 3241036032
  i = 0
  ucode = 0
  type = 12
  code = 0
  eva = 36
  #5  0xc062da3a in calltrap () at 
  /usr/src/sys/i386/i386/exception.s:140
  No locals.
  #6  0x0018 in ?? ()
  No symbol table info available.
  #7  0xc06d0010 in ipq ()
  No symbol table info available.
  #8  0xc06e0010 in sc_buffer.3 ()
  No symbol table info

RE: RELENG_5 panic

2005-05-23 Thread Doug White
On Mon, 23 May 2005, Robin P. Blanchard wrote:

 Here's what I could get out of dmesg, and looking again at the dump

 # dmesg -M /usr/local/var/adm/crash/vmcore.44 -N /boot/kernel/kernel
 kernel trap 12 with interrupts disabled

 Fatal trap 12: page fault while in kernel mode
 cpuid = 0; apic id = 00
 fault virtual address   = 0x24
 fault code  = supervisor read, page not present
 instruction pointer = 0x8:0xc0504808
 stack pointer   = 0x10:0xc7ac0c08
 frame pointer   = 0x10:0xc7ac0c3c
 code segment= base 0x0, limit 0xf, type 0x1b
 = DPL 0, pres 1, def32 1, gran 1
 processor eflags= resume, IOPL = 0
 current process = 27 (swi5: clock sio)
 trap number = 12
 panic: page fault
 cpuid = 0
 Uptime: 3d6h59m25s
 Dumping 127 MB
  16 32 48 64 80 96 112

 [EMAIL PROTECTED] [/usr/obj/usr/src/sys/fastipsec]# kgdb kernel.debug
 /usr/local/var/adm/crash/vmcore.44
 [GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so:
 Undefined symbol ps_pglobal_lookup]
 GNU gdb 6.1.1 [FreeBSD]
 Copyright 2004 Free Software Foundation, Inc.
 GDB is free software, covered by the GNU General Public License, and you are
 welcome to change it and/or distribute copies of it under certain conditions.
 Type show copying to see the conditions.
 There is absolutely no warranty for GDB.  Type show warranty for details.
 This GDB was configured as i386-marcel-freebsd.
 #0  doadump () at pcpu.h:160
 160 __asm __volatile(movl %%fs:0,%0 : =r (td));
 (kgdb) l *0xc0504808
 0xc0504808 is in turnstile_wait (/usr/src/sys/kern/subr_turnstile.c:245).
 240 /*
 241  * Pick up the lock that td is blocked on.
 242  */
 243 ts = td-td_blocked;
 244 MPASS(ts != NULL);
 245 tc = TC_LOOKUP(ts-ts_lockobj);
 246 mtx_lock_spin(tc-tc_lock);
 247
 248 /*
 249  * This thread may not be blocked on this turnstile
 anymore
 (kgdb)

Oh another of these wonderful races... can you go to that frame and print
ts?  If its NULL then someone has ripped out the ts out from under us
since it was checked for NULL in the previous line!


  -Original Message-
  From: Doug White [mailto:[EMAIL PROTECTED]
  Sent: Sunday, May 22, 2005 3:20 PM
  To: Robin P. Blanchard
  Cc: [EMAIL PROTECTED]
  Subject: Re: RELENG_5 panic
 
  On Sat, 21 May 2005, Robin P. Blanchard wrote:
 
   # uname -a
   FreeBSD robinpb.homeip.net 5.4-STABLE FreeBSD 5.4-STABLE
  #0: Tue May
   17
   00:30:47 EDT 2005
   [EMAIL PROTECTED]:/usr/obj/usr/src/sys/fastipsec  i386
  
   # kgdb kernel.debug /usr/local/var/adm/crash/vmcore.44
   [GDB will not be able to debug user-mode threads:
  /usr/lib/libthread_db.so:
   Undefined symbol ps_pglobal_lookup]
   GNU gdb 6.1.1 [FreeBSD]
   Copyright 2004 Free Software Foundation, Inc.
   GDB is free software, covered by the GNU General Public
  License, and
   you are welcome to change it and/or distribute copies of it
  under certain conditions.
   Type show copying to see the conditions.
   There is absolutely no warranty for GDB.  Type show
  warranty for details.
   This GDB was configured as i386-marcel-freebsd.
   #0  doadump () at pcpu.h:160
   160 __asm __volatile(movl %%fs:0,%0 : =r (td));
   (kgdb) bt full
   #0  doadump () at pcpu.h:160
   No locals.
   #1  0xc04dd58c in boot (howto=260) at
  /usr/src/sys/kern/kern_shutdown.c:410
   first_buf_printf = 1
   #2  0xc04ddccd in panic (fmt=0xc066e594 %s) at
   /usr/src/sys/kern/kern_shutdown.c:566
   bootopt = 260
   newpanic = 0
   buf = page fault, '\0' repeats 245 times
 
  can you try to fish the trap output from msgbuf?  That or use
  dmesg's -N and -M options to extract it from the crashdump.
 
   #3  0xc0641e92 in trap_fatal (frame=0xc7ac0bc8, eva=36) at
   /usr/src/sys/i386/i386/trap.c:817
   code = 16
   type = 12
   ss = 16
   esp = 0
   softseg = {ssd_base = 0, ssd_limit = 1048575,
  ssd_type = 27,
   ssd_dpl = 0, ssd_p = 1,
 ssd_xx = 0, ssd_xx1 = 0, ssd_def32 = 1, ssd_gran = 1}
   #4  0xc0642535 in trap (frame=
 {tf_fs = 24, tf_es = -1066598384, tf_ds =
  -1066532848, tf_edi =
   -1053916800, tf_esi = -1049515008, tf_ebp = -945025988, tf_isp =
   -945026060, tf_ebx = -1053916800, tf_edx = -1053937024,
  tf_ecx = 56,
   tf_eax = 0, tf_trapno = 12, tf_err = 0, tf_eip =
  -1068480504, tf_cs =
   8, tf_eflags = 65683, tf_esp = -1053914880, tf_ss = 582}) at
   /usr/src/sys/i386/i386/trap.c:255
   p = (struct proc *) 0xc12e754c
   sticks = 3241036032
   i = 0
   ucode = 0
   type = 12
   code = 0
   eva = 36
   #5  0xc062da3a in calltrap () at
   /usr/src/sys/i386/i386/exception.s:140
   No locals.
   #6  0x0018 in ?? ()
   No symbol table info

RE: RELENG_5 panic

2005-05-23 Thread Robin P. Blanchard
 Oh another of these wonderful races... can you go to that 
 frame and print ts?  If its NULL then someone has ripped 
 out the ts out from under us since it was checked for NULL in 
 the previous line!

Maybe this is a more useful kgdb session (I'm hoping)

# kgdb kernel.debug /usr/local/var/adm/crash/vmcore.44 
[GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so:
Undefined symbol ps_pglobal_lookup]
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type show copying to see the conditions.
There is absolutely no warranty for GDB.  Type show warranty for details.
This GDB was configured as i386-marcel-freebsd.
#0  doadump () at pcpu.h:160
160 __asm __volatile(movl %%fs:0,%0 : =r (td));
(kgdb) l *0xc0504808
0xc0504808 is in turnstile_wait (/usr/src/sys/kern/subr_turnstile.c:245).
240 /*
241  * Pick up the lock that td is blocked on.
242  */
243 ts = td-td_blocked;
244 MPASS(ts != NULL);
245 tc = TC_LOOKUP(ts-ts_lockobj);
246 mtx_lock_spin(tc-tc_lock);
247
248 /*
249  * This thread may not be blocked on this turnstile
anymore
(kgdb) bt 
#0  doadump () at pcpu.h:160
#1  0xc04dd58c in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:410
#2  0xc04ddccd in panic (fmt=0xc066e594 %s) at
/usr/src/sys/kern/kern_shutdown.c:566
#3  0xc0641e92 in trap_fatal (frame=0xc7ac0bc8, eva=36) at
/usr/src/sys/i386/i386/trap.c:817
#4  0xc0642535 in trap (frame=
  {tf_fs = 24, tf_es = -1066598384, tf_ds = -1066532848, tf_edi =
-1053916800, tf_esi = -1049515008, tf_ebp = -945025988, tf_isp = -945026060,
tf_ebx = -1053916800, tf_edx = -1053937024, tf_ecx = 56, tf_eax = 0,
tf_trapno = 12, tf_err = 0, tf_eip = -1068480504, tf_cs = 8, tf_eflags =
65683, tf_esp = -1053914880, tf_ss = 582}) at
/usr/src/sys/i386/i386/trap.c:255
#5  0xc062da3a in calltrap () at /usr/src/sys/i386/i386/exception.s:140
#6  0x0018 in ?? ()
#7  0xc06d0010 in ipq ()
#8  0xc06e0010 in sc_buffer.3 ()
#9  0xc12e8180 in ?? ()
#10 0xc171ac00 in ?? ()
#11 0xc7ac0c3c in ?? ()
#12 0xc7ac0bf4 in ?? ()
#13 0xc12e8180 in ?? ()
#14 0xc12e3280 in ?? ()
#15 0x0038 in ?? ()
#16 0x in ?? ()
#17 0x000c in ?? ()
#18 0x in ?? ()
#19 0xc0504808 in turnstile_wait (ts=0xc12e3280, lock=0xc06d022c,
owner=0xc171ac00)
at /usr/src/sys/kern/subr_turnstile.c:243
#20 0xc04d2b7f in _mtx_lock_sleep (m=0xc06d022c, td=0xc12e8180, opts=0,
file=0x0, line=0)
at /usr/src/sys/kern/kern_mutex.c:552
#21 0xc058a592 in tcp_isn_tick (xtp=0x0) at
/usr/src/sys/netinet/tcp_subr.c:1380
#22 0xc04ed069 in softclock (dummy=0x0) at
/usr/src/sys/kern/kern_timeout.c:279
#23 0xc04c460a in ithread_loop (arg=0xc12fd500) at
/usr/src/sys/kern/kern_intr.c:547
#24 0xc04c32c2 in fork_exit (callout=0xc04c4550 ithread_loop, arg=0x0,
frame=0x0)
at /usr/src/sys/kern/kern_fork.c:791
#25 0xc062da9c in fork_trampoline () at
/usr/src/sys/i386/i386/exception.s:209
(kgdb) frame 19
#19 0xc0504808 in turnstile_wait (ts=0xc12e3280, lock=0xc06d022c,
owner=0xc171ac00)
at /usr/src/sys/kern/subr_turnstile.c:243
243 ts = td-td_blocked;
(kgdb) list
238 ts-ts_lockobj-lo_name));
239
240 /*
241  * Pick up the lock that td is blocked on.
242  */
243 ts = td-td_blocked;
244 MPASS(ts != NULL);
245 tc = TC_LOOKUP(ts-ts_lockobj);
246 mtx_lock_spin(tc-tc_lock);
247
(kgdb) print ts
$1 = (struct turnstile *) 0xc12e3280
(kgdb) up
#20 0xc04d2b7f in _mtx_lock_sleep (m=0xc06d022c, td=0xc12e8180, opts=0,
file=0x0, line=0)
at /usr/src/sys/kern/kern_mutex.c:552
552 turnstile_wait(ts, m-mtx_object, mtx_owner(m));
(kgdb) list
547 #endif
548
549 /*
550  * Block on the turnstile.
551  */
552 turnstile_wait(ts, m-mtx_object, mtx_owner(m));
553 }
554
555 #ifdef KTR
556 if (cont_logged) {
(kgdb) print ts
$2 = (struct turnstile *) 0x0
(kgdb) 

---
Robin P. Blanchard
Systems Integration Specialist
Georgia Center for Continuing Education
fon: 706.542.2404   fax: 706.542.6546
---
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: RELENG_5 panic

2005-05-23 Thread Torfinn Ingolfsen
On Mon, 23 May 2005 10:43:48 -0700 (PDT)
Doug White [EMAIL PROTECTED] wrote:

Note: this comment goes to all participants on this mailing list, it is
not targeted specifically towards Doug.

soapbox_mode
People, would you please trim away excess / non-relevant text when you
are quoting a message?
I don't have a three feet tall monitor, so I cannot display 100 - 200
lines of text at once, and I guess most of you are in the same
situation. If you only quote the necessary lines, reading *your* part of
the message becomes easier. And that's important, no?

Thank you for your time.
/soapbox_ mode
-- 
Regards,
Torfinn Ingolfsen,
Norway

___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: RELENG_5 panic

2005-05-22 Thread Doug White
On Sat, 21 May 2005, Robin P. Blanchard wrote:

 # uname -a
 FreeBSD robinpb.homeip.net 5.4-STABLE FreeBSD 5.4-STABLE #0: Tue May 17
 00:30:47 EDT 2005
 [EMAIL PROTECTED]:/usr/obj/usr/src/sys/fastipsec  i386

 # kgdb kernel.debug /usr/local/var/adm/crash/vmcore.44
 [GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so:
 Undefined symbol ps_pglobal_lookup]
 GNU gdb 6.1.1 [FreeBSD]
 Copyright 2004 Free Software Foundation, Inc.
 GDB is free software, covered by the GNU General Public License, and you are
 welcome to change it and/or distribute copies of it under certain conditions.
 Type show copying to see the conditions.
 There is absolutely no warranty for GDB.  Type show warranty for details.
 This GDB was configured as i386-marcel-freebsd.
 #0  doadump () at pcpu.h:160
 160 __asm __volatile(movl %%fs:0,%0 : =r (td));
 (kgdb) bt full
 #0  doadump () at pcpu.h:160
 No locals.
 #1  0xc04dd58c in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:410
 first_buf_printf = 1
 #2  0xc04ddccd in panic (fmt=0xc066e594 %s) at
 /usr/src/sys/kern/kern_shutdown.c:566
 bootopt = 260
 newpanic = 0
 buf = page fault, '\0' repeats 245 times

can you try to fish the trap output from msgbuf?  That or use dmesg's -N
and -M options to extract it from the crashdump.

 #3  0xc0641e92 in trap_fatal (frame=0xc7ac0bc8, eva=36) at
 /usr/src/sys/i386/i386/trap.c:817
 code = 16
 type = 12
 ss = 16
 esp = 0
 softseg = {ssd_base = 0, ssd_limit = 1048575, ssd_type = 27, ssd_dpl
 = 0, ssd_p = 1,
   ssd_xx = 0, ssd_xx1 = 0, ssd_def32 = 1, ssd_gran = 1}
 #4  0xc0642535 in trap (frame=
   {tf_fs = 24, tf_es = -1066598384, tf_ds = -1066532848, tf_edi =
 -1053916800, tf_esi = -1049515008, tf_ebp = -945025988, tf_isp = -945026060,
 tf_ebx = -1053916800, tf_edx = -1053937024, tf_ecx = 56, tf_eax = 0,
 tf_trapno = 12, tf_err = 0, tf_eip = -1068480504, tf_cs = 8, tf_eflags =
 65683, tf_esp = -1053914880, tf_ss = 582}) at
 /usr/src/sys/i386/i386/trap.c:255
 p = (struct proc *) 0xc12e754c
 sticks = 3241036032
 i = 0
 ucode = 0
 type = 12
 code = 0
 eva = 36
 #5  0xc062da3a in calltrap () at /usr/src/sys/i386/i386/exception.s:140
 No locals.
 #6  0x0018 in ?? ()
 No symbol table info available.
 #7  0xc06d0010 in ipq ()
 No symbol table info available.
 #8  0xc06e0010 in sc_buffer.3 ()
 No symbol table info available.
 #9  0xc12e8180 in ?? ()
 No symbol table info available.
 #10 0xc171ac00 in ?? ()
 No symbol table info available.
 #11 0xc7ac0c3c in ?? ()
 No symbol table info available.
 #12 0xc7ac0bf4 in ?? ()
 No symbol table info available.
 #13 0xc12e8180 in ?? ()
 No symbol table info available.
 #14 0xc12e3280 in ?? ()
 No symbol table info available.
 #15 0x0038 in ?? ()
 No symbol table info available.
 #16 0x in ?? ()
 No symbol table info available.
 #17 0x000c in ?? ()
 No symbol table info available.
 #18 0x in ?? ()
 No symbol table info available.
 #19 0xc0504808 in turnstile_wait (ts=0xc12e3280, lock=0xc06d022c,
 owner=0xc171ac00)
 at /usr/src/sys/kern/subr_turnstile.c:243
 tc = (struct turnstile_chain *) 0xc06cb770
 td1 = (struct thread *) 0xc12e8180
 #20 0xc04d2b7f in _mtx_lock_sleep (m=0xc06d022c, td=0xc12e8180, opts=0,
 file=0x0, line=0)
 at /usr/src/sys/kern/kern_mutex.c:552
 ts = (struct turnstile *) 0x0
 owner = (struct thread *) 0xc171ac00
 v = 0
 #21 0xc058a592 in tcp_isn_tick (xtp=0x0) at
 /usr/src/sys/netinet/tcp_subr.c:1380
 projected_offset = 0
 #22 0xc04ed069 in softclock (dummy=0x0) at
 /usr/src/sys/kern/kern_timeout.c:279
 c_func = (void (*)(void *)) 0xc058a4d0 tcp_isn_tick
 c_arg = (void *) 0x0
 c_flags = 14
 c = (struct callout *) 0x0
 bucket = (struct callout_tailq *) 0xc39ba4a8
 steps = 14
 depth = 2
 mpcalls = 2
 gcalls = 0
 wakeup_cookie = 14
 #23 0xc04c460a in ithread_loop (arg=0xc12fd500) at
 /usr/src/sys/kern/kern_intr.c:547
 ih = (struct intrhand *) 0xc12e2c80
 p = (struct proc *) 0xc12e754c
 count = 0
 warming = 5000
 warned = 0
 #24 0xc04c32c2 in fork_exit (callout=0xc04c4550 ithread_loop, arg=0x0,
 frame=0x0)
 at /usr/src/sys/kern/kern_fork.c:791
 p = (struct proc *) 0xc12e754c
 #25 0xc062da9c in fork_trampoline () at
 /usr/src/sys/i386/i386/exception.s:209
 No locals.
 (kgdb)



 ---
 Robin P. Blanchard
 Systems Integration Specialist
 Georgia Center for Continuing Education
 fon: 706.542.2404 - fax: 706.542.6546
 ---
 ___
 freebsd-stable@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-stable
 To unsubscribe, send any mail to [EMAIL PROTECTED]


-- 
Doug White|  

RELENG_5 panic

2005-05-21 Thread Robin P. Blanchard
# uname -a
FreeBSD robinpb.homeip.net 5.4-STABLE FreeBSD 5.4-STABLE #0: Tue May 17
00:30:47 EDT 2005
[EMAIL PROTECTED]:/usr/obj/usr/src/sys/fastipsec  i386

# kgdb kernel.debug /usr/local/var/adm/crash/vmcore.44 
[GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so:
Undefined symbol ps_pglobal_lookup]
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type show copying to see the conditions.
There is absolutely no warranty for GDB.  Type show warranty for details.
This GDB was configured as i386-marcel-freebsd.
#0  doadump () at pcpu.h:160
160 __asm __volatile(movl %%fs:0,%0 : =r (td));
(kgdb) bt full
#0  doadump () at pcpu.h:160
No locals.
#1  0xc04dd58c in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:410
first_buf_printf = 1
#2  0xc04ddccd in panic (fmt=0xc066e594 %s) at
/usr/src/sys/kern/kern_shutdown.c:566
bootopt = 260
newpanic = 0
buf = page fault, '\0' repeats 245 times
#3  0xc0641e92 in trap_fatal (frame=0xc7ac0bc8, eva=36) at
/usr/src/sys/i386/i386/trap.c:817
code = 16
type = 12
ss = 16
esp = 0
softseg = {ssd_base = 0, ssd_limit = 1048575, ssd_type = 27, ssd_dpl
= 0, ssd_p = 1, 
  ssd_xx = 0, ssd_xx1 = 0, ssd_def32 = 1, ssd_gran = 1}
#4  0xc0642535 in trap (frame=
  {tf_fs = 24, tf_es = -1066598384, tf_ds = -1066532848, tf_edi =
-1053916800, tf_esi = -1049515008, tf_ebp = -945025988, tf_isp = -945026060,
tf_ebx = -1053916800, tf_edx = -1053937024, tf_ecx = 56, tf_eax = 0,
tf_trapno = 12, tf_err = 0, tf_eip = -1068480504, tf_cs = 8, tf_eflags =
65683, tf_esp = -1053914880, tf_ss = 582}) at
/usr/src/sys/i386/i386/trap.c:255
p = (struct proc *) 0xc12e754c
sticks = 3241036032
i = 0
ucode = 0
type = 12
code = 0
eva = 36
#5  0xc062da3a in calltrap () at /usr/src/sys/i386/i386/exception.s:140
No locals.
#6  0x0018 in ?? ()
No symbol table info available.
#7  0xc06d0010 in ipq ()
No symbol table info available.
#8  0xc06e0010 in sc_buffer.3 ()
No symbol table info available.
#9  0xc12e8180 in ?? ()
No symbol table info available.
#10 0xc171ac00 in ?? ()
No symbol table info available.
#11 0xc7ac0c3c in ?? ()
No symbol table info available.
#12 0xc7ac0bf4 in ?? ()
No symbol table info available.
#13 0xc12e8180 in ?? ()
No symbol table info available.
#14 0xc12e3280 in ?? ()
No symbol table info available.
#15 0x0038 in ?? ()
No symbol table info available.
#16 0x in ?? ()
No symbol table info available.
#17 0x000c in ?? ()
No symbol table info available.
#18 0x in ?? ()
No symbol table info available.
#19 0xc0504808 in turnstile_wait (ts=0xc12e3280, lock=0xc06d022c,
owner=0xc171ac00)
at /usr/src/sys/kern/subr_turnstile.c:243
tc = (struct turnstile_chain *) 0xc06cb770
td1 = (struct thread *) 0xc12e8180
#20 0xc04d2b7f in _mtx_lock_sleep (m=0xc06d022c, td=0xc12e8180, opts=0,
file=0x0, line=0)
at /usr/src/sys/kern/kern_mutex.c:552
ts = (struct turnstile *) 0x0
owner = (struct thread *) 0xc171ac00
v = 0
#21 0xc058a592 in tcp_isn_tick (xtp=0x0) at
/usr/src/sys/netinet/tcp_subr.c:1380
projected_offset = 0
#22 0xc04ed069 in softclock (dummy=0x0) at
/usr/src/sys/kern/kern_timeout.c:279
c_func = (void (*)(void *)) 0xc058a4d0 tcp_isn_tick
c_arg = (void *) 0x0
c_flags = 14
c = (struct callout *) 0x0
bucket = (struct callout_tailq *) 0xc39ba4a8
steps = 14
depth = 2
mpcalls = 2
gcalls = 0
wakeup_cookie = 14
#23 0xc04c460a in ithread_loop (arg=0xc12fd500) at
/usr/src/sys/kern/kern_intr.c:547
ih = (struct intrhand *) 0xc12e2c80
p = (struct proc *) 0xc12e754c
count = 0
warming = 5000
warned = 0
#24 0xc04c32c2 in fork_exit (callout=0xc04c4550 ithread_loop, arg=0x0,
frame=0x0)
at /usr/src/sys/kern/kern_fork.c:791
p = (struct proc *) 0xc12e754c
#25 0xc062da9c in fork_trampoline () at
/usr/src/sys/i386/i386/exception.s:209
No locals.
(kgdb) 


 
---
Robin P. Blanchard
Systems Integration Specialist
Georgia Center for Continuing Education
fon: 706.542.2404 - fax: 706.542.6546
---
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


RELENG_5: panic: ffs_blkfree: freeing free block

2005-01-14 Thread Pierre Beyssac
RELENG_5 sources from yesterday.

This was after attempting a dump -L (snapshot before dump) on a
huge (5TB) gconcat filesystem while scp'ing massive amounts of data
to it. The snapshot failed with ETOOLARGE; the system became very
sluggish after that then paniced a few minutes later.

I'm keeping a copy of the crash dump and debug kernel in case someone
wants to know more.

#13 0xc05524a0 in ffs_blkfree (fs=0xc990f800, devvp=0xc4aa4840, bno=1, 
size=16384, inum=1) at ../../../ufs/ffs/ffs_alloc.c:1751
#14 0xc0560913 in indir_trunc (freeblks=0xc83c6700, dbn=5677551840, level=0, 
lbn=268441612, countp=0xe64ffc3c) at ../../../ufs/ffs/ffs_softdep.c:2628
#15 0xc05608ed in indir_trunc (freeblks=0xc83c6700, dbn=5676799200, level=1, 
lbn=268437516, countp=0xe64ffc3c) at ../../../ufs/ffs/ffs_softdep.c:2624
#16 0xc05608ed in indir_trunc (freeblks=0xc83c6700, dbn=8097653792, level=2, 
lbn=4196364, countp=0xe64ffc3c) at ../../../ufs/ffs/ffs_softdep.c:2624
#17 0xc0560474 in handle_workitem_freeblocks (freeblks=0xc83c6700, flags=0)
at ../../../ufs/ffs/ffs_softdep.c:2483
#18 0xc055dbf4 in process_worklist_item (matchmnt=0x0, flags=0)
at ../../../ufs/ffs/ffs_softdep.c:758
#19 0xc055d984 in softdep_process_worklist (matchmnt=0x0)
at ../../../ufs/ffs/ffs_softdep.c:624
#20 0xc04f9fd2 in sched_sync () at ../../../kern/vfs_subr.c:1675
#21 0xc049cb04 in fork_exit (callout=0xc04f9bb8 sched_sync, arg=0x0, 
frame=0xe64ffd48) at ../../../kern/kern_fork.c:807
#22 0xc05aa3cc in fork_trampoline () at ../../../i386/i386/exception.s:209
-- 
A: Yes.   Pierre Beyssac [EMAIL PROTECTED]
Q: Are you sure?
A: Because it reverses the logical flow of conversation.
Q: Why is top posting annoying in email?
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]