freebsd-bugs

[Albert]

internetgateway# kgdb kernel.debug /var/crash/vmcore.8
[GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"]
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd".

Unread portion of the kernel message buffer:


Fatal trap 12: page fault while in kernel mode
fault virtual address   = 0x4563254e
fault code              = supervisor read, page not present
instruction pointer     = 0x20:0xc067d6ec
stack pointer           = 0x28:0xeefbca04
frame pointer           = 0x28:0xeefbca30
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, def32 1, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 60372 (stargazer)
trap number             = 12
panic: page fault
Uptime: 4d2h6m4s
Dumping 991 MB (2 chunks)
  chunk 0: 1MB (160 pages) ... ok
  chunk 1: 991MB (253680 pages) 975 959 943 927 911 895 879 863 847 831 815 799 783 767 751 735 719 703 687 671 655 639 623 607 591 575 559 543 527 511 495 479 463 447 431 415 399 383 367 351 335 319 303 287 271 255 239 223 207 191 175 159 143 127 111 95 79 63 47 31 15

#0  doadump () at pcpu.h:165
165             __asm __volatile("movl %%fs:0,%0" : "=r" (td));
(kgdb) list *0xc067d6ec
0xc067d6ec is in brelse (../../../kern/vfs_bio.c:1200).
1195             * the commit state and we cannot afford to lose the buffer. If the
1196             * buffer has a background write in progress, we need to keep it
1197             * around to prevent it from being reconstituted and starting a second
1198             * background write.
1199             */
1200            if ((bp->b_flags & B_VMIO)
1201                && !(bp->b_vp->v_mount != NULL &&
1202                     (bp->b_vp->v_mount->mnt_vfc->vfc_flags & VFCF_NETWORK) != 0 &&
1203                     !vn_isdisk(bp->b_vp, NULL) &&
1204                     (bp->b_flags & B_DELWRI))
(kgdb) backtrace
#0  doadump () at pcpu.h:165
#1  0xc0638552 in boot (howto=260) at ../../../kern/kern_shutdown.c:399
#2  0xc06387e8 in panic (fmt=0xc085a72b "%s") at ../../../kern/kern_shutdown.c:555
#3  0xc0813880 in trap_fatal (frame=0xeefbc9c4, eva=1164125518) at ../../../i386/i386/trap.c:831
#4  0xc08135eb in trap_pfault (frame=0xeefbc9c4, usermode=0, eva=1164125518) at ../../../i386/i386/trap.c:742
#5  0xc0813229 in trap (frame=
      {tf_fs = 8, tf_es = 40, tf_ds = 40, tf_edi = 512, tf_esi = -1030038300, tf_ebp = -285488592, tf_isp = -285488656, tf_ebx = -700536128, tf_edx = -1030015936, tf_ecx = -1029999552, tf_eax = 1164125506, tf_trapno = 12, tf_err = 0, tf_eip = -1066936596, tf_cs = 32, tf_eflags = 66054, tf_esp = 0, tf_ss = -285488624}) at ../../../i386/i386/trap.c:432
#6  0xc0802a1a in calltrap () at ../../../i386/i386/exception.s:139
#7  0xc067d6ec in brelse (bp=0xd63eaac0) at ../../../kern/vfs_bio.c:1200
#8  0xc07996cf in ufs_lookup (ap=0xeefbcb18) at ../../../ufs/ufs/ufs_lookup.c:462
#9  0xc08229b4 in VOP_CACHEDLOOKUP_APV (vop=0x45632542, a=0xc29b3440) at vnode_if.c:150
#10 0xc0682fee in vfs_cache_lookup (ap=0x45632542) at vnode_if.h:82
#11 0xc0822943 in VOP_LOOKUP_APV (vop=0xc090a060, a=0xeefbcbb0) at vnode_if.c:99
#12 0xc068757d in lookup (ndp=0xeefbcc6c) at vnode_if.h:56
#13 0xc0686ebe in namei (ndp=0xeefbcc6c) at ../../../kern/vfs_lookup.c:203
#14 0xc0693c7a in kern_unlink (td=0xc2768480, path=0x8cb4e0c <Address 0x8cb4e0c out of bounds>, pathseg=UIO_USERSPACE)
    at ../../../kern/vfs_syscalls.c:1637
#15 0xc0693c3e in unlink (td=0xc2768480, uap=0x45632542) at ../../../kern/vfs_syscalls.c:1621
#16 0xc0813b97 in syscall (frame=
      {tf_fs = 59, tf_es = 59, tf_ds = 59, tf_edi = 671998600, tf_esi = -1083191296, tf_ebp = -1082143592, tf_isp = -285487772, tf_ebx = 674391780, tf_edx = 1, tf_ecx = 0, tf_eax = 10, tf_trapno = 0, tf_err = 2, tf_eip = 672687987, tf_cs = 51, tf_eflags = 646, tf_esp = -1082143636, tf_ss = 59}) at ../../../i386/i386/trap.c:976
#17 0xc0802a6f in Xint0x80_syscall () at ../../../i386/i386/exception.s:200
#18 0x00000033 in ?? ()
Previous frame inner to this frame (corrupt stack?)