kern/69685: panic: page fault in ffs_write / b_copy

scrappy at hub.org scrappy at hub.org
Tue Jul 27 19:00:39 PDT 2004


>Number:         69685
>Category:       kern
>Synopsis:       panic: page fault in ffs_write / b_copy
>Confidential:   no
>Severity:       critical
>Priority:       high
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Wed Jul 28 02:00:26 GMT 2004
>Closed-Date:
>Last-Modified:
>Originator:     Marc G. Fournier
>Release:        FreeBSD 4.10-STABLE i386
>Organization:
Hub.Org Networking Services
>Environment:

>Description:

Script started on Tue Jul 27 22:50:27 2004
jupiter# gdb -k /usr/obj/usr/src/sys/kernel/kernel.debug vmcore.12 
GNU gdb 4.18 (FreeBSD)
Copyright 1998 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-unknown-freebsd"...Deprecated bfd_read called at /usr/src/gnu/usr.bin/binutils/gdb/../../../../contrib/gdb/gdb/dbxread.c line 2627 in elfstab_build_psymtabs
Deprecated bfd_read called at /usr/src/gnu/usr.bin/binutils/gdb/../../../../contrib/gdb/gdb/dbxread.c line 933 in fill_symbuf

SMP 2 cpus
IdlePTD at physical address 0x00340000
initial pcb at physical address 0x002b0f40
panicstr: page fault
panic messages:
---
Fatal trap 12: page fault while in kernel mode
mp_lock = 00000002; cpuid = 0; lapic.id = 03000000
fault virtual address	= 0x0
fault code		= supervisor read, page not present
instruction pointer	= 0x8:0x8023e416
stack pointer	        = 0x10:0xb892ec04
frame pointer	        = 0x10:0xb892ec30
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, def32 1, gran 1
processor eflags	= interrupt enabled, resume, IOPL = 0
current process		= 7 (syncer)
interrupt mask		= none <- SMP: XXX
trap number		= 12
panic: page fault
mp_lock = 00000002; cpuid = 0; lapic.id = 03000000
boot() called on cpu#0

syncing disks... 

Fatal trap 12: page fault while in kernel mode
mp_lock = 00000003; cpuid = 0; lapic.id = 03000000
fault virtual address	= 0x0
fault code		= supervisor read, page not present
instruction pointer	= 0x8:0x8023e416
stack pointer	        = 0x10:0xb892e790
frame pointer	        = 0x10:0xb892e7bc
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, def32 1, gran 1
processor eflags	= interrupt enabled, resume, IOPL = 0
current process		= 7 (syncer)
interrupt mask		= none <- SMP: XXX
trap number		= 12
panic: page fault
mp_lock = 00000003; cpuid = 0; lapic.id = 03000000
boot() called on cpu#0
Uptime: 51d22h31m49s

dumping to dev #da/0x20001, offset 8519808
---
#0  dumpsys () at /usr/src/sys/kern/kern_shutdown.c:487
487		if (dumping++) {
(kgdb) where
#0  dumpsys () at /usr/src/sys/kern/kern_shutdown.c:487
#1  0x801522eb in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:316
#2  0x8015275d in panic (fmt=0x80275399 "%s") at /usr/src/sys/kern/kern_shutdown.c:595
#3  0x8023fa41 in trap_fatal (frame=0xb892e750, eva=0) at /usr/src/sys/i386/i386/trap.c:974
#4  0x8023f6ad in trap_pfault (frame=0xb892e750, usermode=0, eva=0) at /usr/src/sys/i386/i386/trap.c:867
#5  0x8023f20b in trap (frame={tf_fs = -1774387176, tf_es = -2042626032, tf_ds = -2042626032, tf_edi = -1509507072, tf_esi = 0, 
      tf_ebp = -1198331972, tf_isp = -1198332036, tf_ebx = 8192, tf_edx = -1509507072, tf_ecx = 2048, tf_eax = -1509507072, 
      tf_trapno = 12, tf_err = 0, tf_eip = -2145131498, tf_cs = 8, tf_eflags = 66054, tf_esp = -1198331732, tf_ss = -1198331760})
    at /usr/src/sys/i386/i386/trap.c:466
#6  0x8023e416 in generic_bcopy ()
#7  0x801f5b65 in ffs_write (ap=0xb892e854) at /usr/src/sys/ufs/ufs/ufs_readwrite.c:547
#8  0x80191451 in union_write (ap=0xb892e898) at vnode_if.h:363
#9  0x8020cca8 in vnode_pager_generic_putpages (vp=0xca66d740, m=0xb892e970, bytecount=8192, flags=12, rtvals=0xb892e93c)
    at vnode_if.h:363
#10 0x801912c2 in union_putpages (ap=0xb892e900) at /usr/src/sys/miscfs/union/union_vnops.c:1047
#11 0x8020caca in vnode_pager_putpages (object=0xc4c81958, m=0xb892e970, count=2, sync=12, rtvals=0xb892e93c) at vnode_if.h:1147
#12 0x80209a0f in vm_pageout_flush (mc=0xb892e970, count=2, flags=12) at /usr/src/sys/vm/vm_pager.h:147
#13 0x8020697b in vm_object_page_collect_flush (object=0xc4c81958, p=0x828b23b0, curgeneration=47865, pagerflags=12)
    at /usr/src/sys/vm/vm_object.c:806
#14 0x80206559 in vm_object_page_clean (object=0xc4c81958, start=0, end=0, flags=4) at /usr/src/sys/vm/vm_object.c:605
#15 0x80182b08 in vfs_msync (mp=0x8fd6c600, flags=2) at /usr/src/sys/kern/vfs_subr.c:2731
#16 0x80183c80 in sync (p=0x802c5440, uap=0x0) at /usr/src/sys/kern/vfs_syscalls.c:582
#17 0x80152086 in boot (howto=256) at /usr/src/sys/kern/kern_shutdown.c:235
#18 0x8015275d in panic (fmt=0x80275399 "%s") at /usr/src/sys/kern/kern_shutdown.c:595
#19 0x8023fa41 in trap_fatal (frame=0xb892ebc4, eva=0) at /usr/src/sys/i386/i386/trap.c:974
#20 0x8023f6ad in trap_pfault (frame=0xb892ebc4, usermode=0, eva=0) at /usr/src/sys/i386/i386/trap.c:867
#21 0x8023f20b in trap (frame={tf_fs = -1851260904, tf_es = -2146303984, tf_ds = -1989672944, tf_edi = -1464680448, tf_esi = 0, 
      tf_ebp = -1198330832, tf_isp = -1198330896, tf_ebx = 8192, tf_edx = -1464680448, tf_ecx = 2048, tf_eax = -1464680448, 
      tf_trapno = 12, tf_err = 0, tf_eip = -2145131498, tf_cs = 8, tf_eflags = 66054, tf_esp = -1198330592, tf_ss = -1198330620})
    at /usr/src/sys/i386/i386/trap.c:466
#22 0x8023e416 in generic_bcopy ()
#23 0x801f5b65 in ffs_write (ap=0xb892ecc8) at /usr/src/sys/ufs/ufs/ufs_readwrite.c:547
#24 0x80191451 in union_write (ap=0xb892ed0c) at vnode_if.h:363
#25 0x8020cca8 in vnode_pager_generic_putpages (vp=0xc83f83c0, m=0xb892ede4, bytecount=8192, flags=12, rtvals=0xb892edb0)
    at vnode_if.h:363
#26 0x801912c2 in union_putpages (ap=0xb892ed74) at /usr/src/sys/miscfs/union/union_vnops.c:1047
#27 0x8020caca in vnode_pager_putpages (object=0xc7076170, m=0xb892ede4, count=2, sync=12, rtvals=0xb892edb0) at vnode_if.h:1147
#28 0x80209a0f in vm_pageout_flush (mc=0xb892ede4, count=2, flags=12) at /usr/src/sys/vm/vm_pager.h:147
#29 0x8020697b in vm_object_page_collect_flush (object=0xc7076170, p=0x835e4830, curgeneration=25361, pagerflags=12)
    at /usr/src/sys/vm/vm_object.c:806
#30 0x80206559 in vm_object_page_clean (object=0xc7076170, start=0, end=0, flags=4) at /usr/src/sys/vm/vm_object.c:605
#31 0x80182b08 in vfs_msync (mp=0x8fd6c600, flags=2) at /usr/src/sys/kern/vfs_subr.c:2731
#32 0x80182ed6 in sync_fsync (ap=0xb892ef7c) at /usr/src/sys/kern/vfs_subr.c:2992
#33 0x801811bf in sched_sync () at vnode_if.h:558
(kgdb) up 7
#7  0x801f5b65 in ffs_write (ap=0xb892e854) at /usr/src/sys/ufs/ufs/ufs_readwrite.c:547
547			error =
(kgdb) list
542	
543			size = BLKSIZE(fs, ip, lbn) - bp->b_resid;
544			if (size < xfersize)
545				xfersize = size;
546	
547			error =
548			    uiomove((char *)bp->b_data + blkoffset, (int)xfersize, uio);
549			if ((ioflag & (IO_VMIO|IO_DIRECT)) && 
550			    (LIST_FIRST(&bp->b_dep) == NULL)) {
551				bp->b_flags |= B_RELBUF;
(kgdb) up
#8  0x80191451 in union_write (ap=0xb892e898) at vnode_if.h:363
363		rc = VCALL(vp, VOFFSET(vop_write), &a);
(kgdb) list
358		a.a_desc = VDESC(vop_write);
359		a.a_vp = vp;
360		a.a_uio = uio;
361		a.a_ioflag = ioflag;
362		a.a_cred = cred;
363		rc = VCALL(vp, VOFFSET(vop_write), &a);
364		return (rc);
365	}
366	struct vop_lease_args {
367		struct vnodeop_desc *a_desc;
(kgdb) quit
jupiter# exit
exit

Script done on Tue Jul 27 22:52:07 2004
>How-To-Repeat:
	
>Fix:

	


>Release-Note:
>Audit-Trail:
>Unformatted:


More information about the freebsd-bugs mailing list