kern/110093: kernel panic in devfs_poplulate_loop

akira you noda akira at nolnol.ddo.jp
Thu Mar 8 16:30:04 UTC 2007


>Number:         110093
>Category:       kern
>Synopsis:       kernel panic in devfs_poplulate_loop
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Thu Mar 08 16:30:03 GMT 2007
>Closed-Date:
>Last-Modified:
>Originator:     akira you noda
>Release:        6.2
>Organization:
SSR titech
>Environment:
FreeBSD kotachu.local 6.2-RELEASE FreeBSD 6.2-RELEASE #2: Wed Jan 17 08:55:55 JST 2007     root at kotachu.local:/ext3/obj/ext3/src/sys/akira  i386

>Description:
sometimes my X hungup (my be coused by nvidia driver??)
In that case FreeBSD 6.1 can restart the X.
but On FreeBSD 6.2,restarting X makes kernel panic.

kernel panic is happen at devfs_poplulate_loop in /sys/fs/devfs/devfs_devs.c
May be TAILQ_REMOVE have race condition?????
kernel panic seems to be happen at line 381 and 396.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    378                         KASSERT(de->de_dir != NULL, ("Null de->de_dir"));
    379                         dev_unlock();
    380
    381                         TAILQ_REMOVE(&de->de_dir->de_dlist, de, de_list);
    382                         de->de_cdp = NULL;
    383                         de->de_inode = 0;
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    393                 if (!(cdp->cdp_flags & CDP_ACTIVE)) {
    394                         if (cdp->cdp_inuse > 0)
    395                                 continue;
    396                         TAILQ_REMOVE(&cdevp_list, cdp, cdp_list);
    397                         dev_unlock();
    398                         dev_rel(&cdp->cdp_c);
    399                         return (1);
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


Here is dmesg of these panic.and obj dump around there.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Mar  6 20:03:05 kotachu syslogd: kernel boot file is /boot/kernel/kernel
Mar  6 20:03:05 kotachu kernel:
Mar  6 20:03:05 kotachu kernel:
Mar  6 20:03:05 kotachu kernel: Fatal trap 12: page fault while in kernel mode
Mar  6 20:03:05 kotachu kernel: fault virtual address   = 0x61746f7f
Mar  6 20:03:05 kotachu kernel: fault code              = supervisor read, page not present
Mar  6 20:03:05 kotachu kernel: instruction pointer     = 0x20:0xc04d0d32
Mar  6 20:03:05 kotachu kernel: stack pointer           = 0x28:0xd84fc7e8
Mar  6 20:03:05 kotachu kernel: frame pointer           = 0x28:0xd84fc818
Mar  6 20:03:05 kotachu kernel: code segment            = base 0x0, limit 0xfffff, type 0x1b
Mar  6 20:03:05 kotachu kernel: = DPL 0, pres 1, def32 1, gran 1
Mar  6 20:03:05 kotachu kernel: processor eflags        = interrupt enabled, resume, IOPL = 3
Mar  6 20:03:05 kotachu kernel: current process         = 67099 (Xorg)
Mar  6 20:03:05 kotachu kernel: trap number             = 12
Mar  6 20:03:05 kotachu kernel: panic: page fault
Mar  6 20:03:05 kotachu kernel: Uptime: 48d1h21m32s
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Mar  6 22:57:14 kotachu kernel: Fatal trap 12: page fault while in kernel mode
Mar  6 22:57:14 kotachu kernel: fault virtual address   = 0x0
Mar  6 22:57:14 kotachu kernel: fault code              = supervisor write, page not present
Mar  6 22:57:14 kotachu kernel: instruction pointer     = 0x20:0xc04d0bd0
Mar  6 22:57:14 kotachu kernel: stack pointer           = 0x28:0xd731e7e8
Mar  6 22:57:14 kotachu kernel: frame pointer           = 0x28:0xd731e818
Mar  6 22:57:14 kotachu kernel: code segment            = base 0x0, limit 0xfffff, type 0x1b
Mar  6 22:57:14 kotachu kernel: = DPL 0, pres 1, def32 1, gran 1
Mar  6 22:57:14 kotachu kernel: processor eflags        = interrupt enabled, resume, IOPL = 0
Mar  6 22:57:14 kotachu kernel: current process         = 9861 (sh)
Mar  6 22:57:14 kotachu kernel: trap number             = 12
Mar  6 22:57:14 kotachu kernel: panic: page fault
Mar  6 22:57:14 kotachu kernel: Uptime: 2h53m23s
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Mar  8 20:12:04 kotachu kernel: Fatal trap 12: page fault while in kernel mode
Mar  8 20:12:04 kotachu kernel: fault virtual address   = 0x53444e5d
Mar  8 20:12:04 kotachu kernel: fault code              = supervisor read, page not present
Mar  8 20:12:04 kotachu kernel: instruction pointer     = 0x20:0xc04d0d32
Mar  8 20:12:04 kotachu kernel: stack pointer           = 0x28:0xd741e7e8
Mar  8 20:12:04 kotachu kernel: frame pointer           = 0x28:0xd741e818
Mar  8 20:12:04 kotachu kernel: code segment            = base 0x0, limit 0xfffff, type 0x1b
Mar  8 20:12:04 kotachu kernel: = DPL 0, pres 1, def32 1, gran 1
Mar  8 20:12:04 kotachu kernel: processor eflags        = interrupt enabled, resume, IOPL = 3
Mar  8 20:12:04 kotachu kernel: current process         = 97709 (Xorg)
Mar  8 20:12:04 kotachu kernel: trap number             = 12
Mar  8 20:12:04 kotachu kernel: panic: page fault
Mar  8 20:12:04 kotachu kernel: Uptime: 1d21h14m27s
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Objdump of around panic address.
c04d099e <devfs_populate_loop>:
c04d099e:       55                      push   %ebp
c04d099f:       89 e5                   mov    %esp,%ebp
c04d09a1:       57                      push   %edi
c04d09a2:       56                      push   %esi
c04d09a3:       89 d6                   mov    %edx,%esi
c04d09a5:       53                      push   %ebx
c04d09a6:       83 ec 24                sub    $0x24,%esp
c04d09a9:       89 45 f0                mov    %eax,0xfffffff0(%ebp)
c04d09ac:       e8 e7 af 02 00          call   c04fb998 <dev_lock>
c04d09b1:       a1 14 59 74 c0          mov    0xc0745914,%eax
c04d09b6:       85 c0                   test   %eax,%eax
c04d09b8:       89 45 ec                mov    %eax,0xffffffec(%ebp)
c04d09bb:       74 64                   je     c04d0a21 <devfs_populate_loop+0x83>
c04d09bd:       85 f6                   test   %esi,%esi
c04d09bf:       75 0d                   jne    c04d09ce <devfs_populate_loop+0x30>
c04d09c1:       8b 55 ec                mov    0xffffffec(%ebp),%edx
c04d09c4:       8b 82 c4 00 00 00       mov    0xc4(%edx),%eax
c04d09ca:       a8 01                   test   $0x1,%al
c04d09cc:       75 2e                   jne    c04d09fc <devfs_populate_loop+0x5e>
c04d09ce:       8b 4d f0                mov    0xfffffff0(%ebp),%ecx
c04d09d1:       8b 55 ec                mov    0xffffffec(%ebp),%edx
c04d09d4:       8b 01                   mov    (%ecx),%eax
c04d09d6:       3b 82 cc 00 00 00       cmp    0xcc(%edx),%eax
c04d09dc:       0f 87 b9 01 00 00       ja     c04d0b9b <devfs_populate_loop+0x1fd>
c04d09e2:       8b 92 d0 00 00 00       mov    0xd0(%edx),%edx
c04d09e8:       8b 1c 82                mov    (%edx,%eax,4),%ebx
c04d09eb:       85 db                   test   %ebx,%ebx
c04d09ed:       0f 85 33 03 00 00       jne    c04d0d26 <devfs_populate_loop+0x388>
c04d09f3:       8b 55 ec                mov    0xffffffec(%ebp),%edx
c04d09f6:       8b 82 c4 00 00 00       mov    0xc4(%edx),%eax
c04d09fc:       a8 01                   test   $0x1,%al
c04d09fe:       75 30                   jne    c04d0a30 <devfs_populate_loop+0x92>
c04d0a00:       8b 4d ec                mov    0xffffffec(%ebp),%ecx
c04d0a03:       8b 81 c8 00 00 00       mov    0xc8(%ecx),%eax
c04d0a09:       85 c0                   test   %eax,%eax
c04d0a0b:       0f 84 98 01 00 00       je     c04d0ba9 <devfs_populate_loop+0x20b>
c04d0a11:       8b 45 ec                mov    0xffffffec(%ebp),%eax
c04d0a14:       8b 80 b8 00 00 00       mov    0xb8(%eax),%eax
c04d0a1a:       89 45 ec                mov    %eax,0xffffffec(%ebp)
c04d0a1d:       85 c0                   test   %eax,%eax
c04d0a1f:       75 9c                   jne    c04d09bd <devfs_populate_loop+0x1f>
c04d0a21:       e8 c1 af 02 00          call   c04fb9e7 <dev_unlock>
c04d0a26:       83 c4 24                add    $0x24,%esp
c04d0a29:       31 c0                   xor    %eax,%eax
c04d0a2b:       5b                      pop    %ebx
c04d0a2c:       5e                      pop    %esi
c04d0a2d:       5f                      pop    %edi
c04d0a2e:       5d                      pop    %ebp
c04d0a2f:       c3                      ret
c04d0a30:       85 f6                   test   %esi,%esi
c04d0a32:       75 dd                   jne    c04d0a11 <devfs_populate_loop+0x73>
c04d0a34:       8b 4d f0                mov    0xfffffff0(%ebp),%ecx
c04d0a37:       8b 45 ec                mov    0xffffffec(%ebp),%eax
c04d0a3a:       8b 11                   mov    (%ecx),%edx
c04d0a3c:       3b 90 cc 00 00 00       cmp    0xcc(%eax),%edx
c04d0a42:       77 0d                   ja     c04d0a51 <devfs_populate_loop+0xb3>
c04d0a44:       8b 80 d0 00 00 00       mov    0xd0(%eax),%eax
c04d0a4a:       8b 3c 90                mov    (%eax,%edx,4),%edi
c04d0a4d:       85 ff                   test   %edi,%edi
c04d0a4f:       75 c0                   jne    c04d0a11 <devfs_populate_loop+0x73>
c04d0a51:       8b 45 ec                mov    0xffffffec(%ebp),%eax
c04d0a54:       83 80 c8 00 00 00 01    addl   $0x1,0xc8(%eax)
c04d0a5b:       e8 87 af 02 00          call   c04fb9e7 <dev_unlock>
c04d0a60:       8b 55 f0                mov    0xfffffff0(%ebp),%edx
c04d0a63:       8b 4d ec                mov    0xffffffec(%ebp),%ecx
c04d0a66:       8b 02                   mov    (%edx),%eax
c04d0a68:       3b 81 cc 00 00 00       cmp    0xcc(%ecx),%eax
c04d0a6e:       0f 87 7e 01 00 00       ja     c04d0bf2 <devfs_populate_loop+0x254>
c04d0a74:       8b 45 f0                mov    0xfffffff0(%ebp),%eax
c04d0a77:       8b 55 ec                mov    0xffffffec(%ebp),%edx
c04d0a7a:       8b 40 08                mov    0x8(%eax),%eax
c04d0a7d:       89 45 e8                mov    %eax,0xffffffe8(%ebp)
c04d0a80:       8b 72 58                mov    0x58(%edx),%esi
c04d0a83:       89 f3                   mov    %esi,%ebx
c04d0a85:       0f b6 06                movzbl (%esi),%eax
c04d0a88:       3c 2f                   cmp    $0x2f,%al
c04d0a8a:       0f 95 c2                setne  %dl
c04d0a8d:       84 c0                   test   %al,%al
c04d0a8f:       0f 95 c0                setne  %al
c04d0a92:       0f b6 c0                movzbl %al,%eax
c04d0a95:       85 c2                   test   %eax,%edx
c04d0a97:       74 5c                   je     c04d0af5 <devfs_populate_loop+0x157>
c04d0a99:       83 c3 01                add    $0x1,%ebx
c04d0a9c:       0f b6 0b                movzbl (%ebx),%ecx
c04d0a9f:       80 f9 2f                cmp    $0x2f,%cl
c04d0aa2:       0f 95 c2                setne  %dl
c04d0aa5:       31 c0                   xor    %eax,%eax
c04d0aa7:       84 c9                   test   %cl,%cl
c04d0aa9:       0f 95 c0                setne  %al
c04d0aac:       85 c2                   test   %eax,%edx
c04d0aae:       75 e9                   jne    c04d0a99 <devfs_populate_loop+0xfb>
c04d0ab0:       80 f9 2f                cmp    $0x2f,%cl
c04d0ab3:       75 48                   jne    c04d0afd <devfs_populate_loop+0x15f>
c04d0ab5:       89 d9                   mov    %ebx,%ecx
c04d0ab7:       29 f1                   sub    %esi,%ecx
c04d0ab9:       89 4d e4                mov    %ecx,0xffffffe4(%ebp)
c04d0abc:       89 4c 24 08             mov    %ecx,0x8(%esp)
c04d0ac0:       89 74 24 04             mov    %esi,0x4(%esp)
c04d0ac4:       8b 45 e8                mov    0xffffffe8(%ebp),%eax
c04d0ac7:       89 04 24                mov    %eax,(%esp)
c04d0aca:       e8 2e f9 ff ff          call   c04d03fd <devfs_find>
c04d0acf:       85 c0                   test   %eax,%eax
c04d0ad1:       89 c7                   mov    %eax,%edi
c04d0ad3:       0f 84 21 02 00 00       je     c04d0cfa <devfs_populate_loop+0x35c>
c04d0ad9:       8d 73 01                lea    0x1(%ebx),%esi
c04d0adc:       89 7d e8                mov    %edi,0xffffffe8(%ebp)
c04d0adf:       89 f3                   mov    %esi,%ebx
c04d0ae1:       0f b6 06                movzbl (%esi),%eax
c04d0ae4:       3c 2f                   cmp    $0x2f,%al
c04d0ae6:       0f 95 c2                setne  %dl
c04d0ae9:       84 c0                   test   %al,%al
c04d0aeb:       0f 95 c0                setne  %al
c04d0aee:       0f b6 c0                movzbl %al,%eax
c04d0af1:       85 c2                   test   %eax,%edx
c04d0af3:       75 a4                   jne    c04d0a99 <devfs_populate_loop+0xfb>
c04d0af5:       0f b6 0e                movzbl (%esi),%ecx
c04d0af8:       80 f9 2f                cmp    $0x2f,%cl
c04d0afb:       74 b8                   je     c04d0ab5 <devfs_populate_loop+0x117>
c04d0afd:       29 f3                   sub    %esi,%ebx
c04d0aff:       89 34 24                mov    %esi,(%esp)
c04d0b02:       89 5c 24 04             mov    %ebx,0x4(%esp)
c04d0b06:       e8 3f f9 ff ff          call   c04d044a <devfs_newdirent>
c04d0b0b:       8b 55 ec                mov    0xffffffec(%ebp),%edx
c04d0b0e:       f6 42 04 02             testb  $0x2,0x4(%edx)
c04d0b12:       89 c7                   mov    %eax,%edi
c04d0b14:       0f 85 64 01 00 00       jne    c04d0c7e <devfs_populate_loop+0x2e0>
c04d0b1a:       8b 4d ec                mov    0xffffffec(%ebp),%ecx
c04d0b1d:       8b 41 20                mov    0x20(%ecx),%eax
c04d0b20:       89 47 30                mov    %eax,0x30(%edi)
c04d0b23:       8b 41 24                mov    0x24(%ecx),%eax
c04d0b26:       89 47 34                mov    %eax,0x34(%edi)
c04d0b29:       0f b7 41 28             movzwl 0x28(%ecx),%eax
c04d0b2d:       66 89 47 2c             mov    %ax,0x2c(%edi)
c04d0b31:       8b 47 10                mov    0x10(%edi),%eax
c04d0b34:       c6 40 06 02             movb   $0x2,0x6(%eax)
c04d0b38:       8b 55 ec                mov    0xffffffec(%ebp),%edx
c04d0b3b:       8b 82 c0 00 00 00       mov    0xc0(%edx),%eax
c04d0b41:       89 17                   mov    %edx,(%edi)
c04d0b43:       89 47 04                mov    %eax,0x4(%edi)
c04d0b46:       8b 4d e8                mov    0xffffffe8(%ebp),%ecx
c04d0b49:       c7 47 14 00 00 00 00    movl   $0x0,0x14(%edi)
c04d0b50:       89 4f 24                mov    %ecx,0x24(%edi)
c04d0b53:       8b 41 20                mov    0x20(%ecx),%eax
c04d0b56:       89 47 18                mov    %eax,0x18(%edi)
c04d0b59:       8b 41 20                mov    0x20(%ecx),%eax
c04d0b5c:       89 38                   mov    %edi,(%eax)
c04d0b5e:       8d 47 14                lea    0x14(%edi),%eax
c04d0b61:       89 41 20                mov    %eax,0x20(%ecx)
c04d0b64:       89 7c 24 04             mov    %edi,0x4(%esp)
c04d0b68:       8b 45 f0                mov    0xfffffff0(%ebp),%eax
c04d0b6b:       89 04 24                mov    %eax,(%esp)
c04d0b6e:       e8 78 0b 00 00          call   c04d16eb <devfs_rules_apply>
c04d0b73:       e8 20 ae 02 00          call   c04fb998 <dev_lock>
c04d0b78:       8b 4d f0                mov    0xfffffff0(%ebp),%ecx
c04d0b7b:       8b 11                   mov    (%ecx),%edx
c04d0b7d:       8b 4d ec                mov    0xffffffec(%ebp),%ecx
c04d0b80:       8b 81 d0 00 00 00       mov    0xd0(%ecx),%eax
c04d0b86:       89 3c 90                mov    %edi,(%eax,%edx,4)
c04d0b89:       e8 59 ae 02 00          call   c04fb9e7 <dev_unlock>
c04d0b8e:       83 c4 24                add    $0x24,%esp
c04d0b91:       b8 01 00 00 00          mov    $0x1,%eax
c04d0b96:       5b                      pop    %ebx
c04d0b97:       5e                      pop    %esi
c04d0b98:       5f                      pop    %edi
c04d0b99:       5d                      pop    %ebp
c04d0b9a:       c3                      ret
c04d0b9b:       8b 4d ec                mov    0xffffffec(%ebp),%ecx
c04d0b9e:       8b 81 c4 00 00 00       mov    0xc4(%ecx),%eax
c04d0ba4:       e9 53 fe ff ff          jmp    c04d09fc <devfs_populate_loop+0x5e>
c04d0ba9:       8b 91 b8 00 00 00       mov    0xb8(%ecx),%edx
c04d0baf:       85 d2                   test   %edx,%edx
c04d0bb1:       75 31                   jne    c04d0be4 <devfs_populate_loop+0x246>
c04d0bb3:       8b 55 ec                mov    0xffffffec(%ebp),%edx
c04d0bb6:       8b 82 bc 00 00 00       mov    0xbc(%edx),%eax
c04d0bbc:       a3 18 59 74 c0          mov    %eax,0xc0745918
c04d0bc1:       8b 92 b8 00 00 00       mov    0xb8(%edx),%edx
c04d0bc7:       8b 4d ec                mov    0xffffffec(%ebp),%ecx
c04d0bca:       8b 81 bc 00 00 00       mov    0xbc(%ecx),%eax
c04d0bd0:       89 10                   mov    %edx,(%eax)
c04d0bd2:       e8 10 ae 02 00          call   c04fb9e7 <dev_unlock>
c04d0bd7:       8b 45 ec                mov    0xffffffec(%ebp),%eax
c04d0bda:       89 04 24                mov    %eax,(%esp)
c04d0bdd:       e8 09 af 02 00          call   c04fbaeb <dev_rel>
c04d0be2:       eb aa                   jmp    c04d0b8e <devfs_populate_loop+0x1f0>
c04d0be4:       8b 81 bc 00 00 00       mov    0xbc(%ecx),%eax
c04d0bea:       89 82 bc 00 00 00       mov    %eax,0xbc(%edx)
c04d0bf0:       eb d5                   jmp    c04d0bc7 <devfs_populate_loop+0x229>
c04d0bf2:       8d 04 85 04 00 00 00    lea    0x4(,%eax,4),%eax
c04d0bf9:       c7 44 24 08 02 01 00    movl   $0x102,0x8(%esp)
c04d0c00:       00
c04d0c01:       c7 44 24 04 c0 58 74    movl   $0xc07458c0,0x4(%esp)
c04d0c08:       c0
c04d0c09:       89 04 24                mov    %eax,(%esp)
c04d0c0c:       e8 61 13 05 00          call   c0521f72 <malloc>
c04d0c11:       89 c3                   mov    %eax,%ebx
c04d0c13:       e8 80 ad 02 00          call   c04fb998 <dev_lock>
c04d0c18:       8b 55 ec                mov    0xffffffec(%ebp),%edx
c04d0c1b:       8b 82 cc 00 00 00       mov    0xcc(%edx),%eax
c04d0c21:       8b 4d f0                mov    0xfffffff0(%ebp),%ecx
c04d0c24:       39 01                   cmp    %eax,(%ecx)
c04d0c26:       0f 86 b4 00 00 00       jbe    c04d0ce0 <devfs_populate_loop+0x342>
c04d0c2c:       8d 04 85 04 00 00 00    lea    0x4(,%eax,4),%eax
c04d0c33:       89 44 24 08             mov    %eax,0x8(%esp)
c04d0c37:       8b 55 ec                mov    0xffffffec(%ebp),%edx
c04d0c3a:       8b 82 d0 00 00 00       mov    0xd0(%edx),%eax
c04d0c40:       89 1c 24                mov    %ebx,(%esp)
c04d0c43:       89 44 24 04             mov    %eax,0x4(%esp)
c04d0c47:       e8 d0 38 21 00          call   c06e451c <memcpy>
c04d0c4c:       8b 4d ec                mov    0xffffffec(%ebp),%ecx
c04d0c4f:       8b b1 cc 00 00 00       mov    0xcc(%ecx),%esi
c04d0c55:       85 f6                   test   %esi,%esi
c04d0c57:       0f 85 24 01 00 00       jne    c04d0d81 <devfs_populate_loop+0x3e3>
c04d0c5d:       8b 45 ec                mov    0xffffffec(%ebp),%eax
c04d0c60:       89 98 d0 00 00 00       mov    %ebx,0xd0(%eax)
c04d0c66:       8b 55 f0                mov    0xfffffff0(%ebp),%edx
c04d0c69:       8b 4d ec                mov    0xffffffec(%ebp),%ecx
c04d0c6c:       8b 02                   mov    (%edx),%eax
c04d0c6e:       89 81 cc 00 00 00       mov    %eax,0xcc(%ecx)
c04d0c74:       e8 6e ad 02 00          call   c04fb9e7 <dev_unlock>
c04d0c79:       e9 f6 fd ff ff          jmp    c04d0a74 <devfs_populate_loop+0xd6>
c04d0c7e:       c7 40 30 00 00 00 00    movl   $0x0,0x30(%eax)
c04d0c85:       c7 40 34 00 00 00 00    movl   $0x0,0x34(%eax)
c04d0c8c:       66 c7 40 2c ed 01       movw   $0x1ed,0x2c(%eax)
c04d0c92:       8b 40 10                mov    0x10(%eax),%eax
c04d0c95:       c6 40 06 0a             movb   $0xa,0x6(%eax)
c04d0c99:       8b 5a 54                mov    0x54(%edx),%ebx
c04d0c9c:       8b 43 58                mov    0x58(%ebx),%eax
c04d0c9f:       89 04 24                mov    %eax,(%esp)
c04d0ca2:       e8 a1 9a 0d 00          call   c05aa748 <strlen>
c04d0ca7:       c7 44 24 08 02 00 00    movl   $0x2,0x8(%esp)
c04d0cae:       00
c04d0caf:       8d 70 01                lea    0x1(%eax),%esi
c04d0cb2:       c7 44 24 04 a0 5a 74    movl   $0xc0745aa0,0x4(%esp)
c04d0cb9:       c0
c04d0cba:       89 34 24                mov    %esi,(%esp)
c04d0cbd:       e8 b0 12 05 00          call   c0521f72 <malloc>
c04d0cc2:       89 47 58                mov    %eax,0x58(%edi)
c04d0cc5:       89 74 24 08             mov    %esi,0x8(%esp)
c04d0cc9:       8b 47 58                mov    0x58(%edi),%eax
c04d0ccc:       89 44 24 04             mov    %eax,0x4(%esp)
c04d0cd0:       8b 43 58                mov    0x58(%ebx),%eax
c04d0cd3:       89 04 24                mov    %eax,(%esp)
c04d0cd6:       e8 f1 37 21 00          call   c06e44cc <bcopy>
c04d0cdb:       e9 58 fe ff ff          jmp    c04d0b38 <devfs_populate_loop+0x19a>
c04d0ce0:       e8 02 ad 02 00          call   c04fb9e7 <dev_unlock>
c04d0ce5:       c7 44 24 04 c0 58 74    movl   $0xc07458c0,0x4(%esp)
c04d0cec:       c0
c04d0ced:       89 1c 24                mov    %ebx,(%esp)
c04d0cf0:       e8 40 13 05 00          call   c0522035 <free>
c04d0cf5:       e9 7a fd ff ff          jmp    c04d0a74 <devfs_populate_loop+0xd6>
c04d0cfa:       c7 44 24 10 00 00 00    movl   $0x0,0x10(%esp)
c04d0d01:       00
c04d0d02:       8b 55 e8                mov    0xffffffe8(%ebp),%edx
c04d0d05:       89 54 24 0c             mov    %edx,0xc(%esp)
c04d0d09:       8b 4d e4                mov    0xffffffe4(%ebp),%ecx
c04d0d0c:       89 74 24 04             mov    %esi,0x4(%esp)
c04d0d10:       89 4c 24 08             mov    %ecx,0x8(%esp)
c04d0d14:       8b 45 f0                mov    0xfffffff0(%ebp),%eax
c04d0d17:       89 04 24                mov    %eax,(%esp)
c04d0d1a:       e8 e2 f7 ff ff          call   c04d0501 <devfs_vmkdir>
c04d0d1f:       89 c7                   mov    %eax,%edi
c04d0d21:       e9 b3 fd ff ff          jmp    c04d0ad9 <devfs_populate_loop+0x13b>
c04d0d26:       c7 04 82 00 00 00 00    movl   $0x0,(%edx,%eax,4)
c04d0d2d:       e8 b5 ac 02 00          call   c04fb9e7 <dev_unlock>
c04d0d32:       8b 53 14                mov    0x14(%ebx),%edx
c04d0d35:       85 d2                   test   %edx,%edx
c04d0d37:       74 63                   je     c04d0d9c <devfs_populate_loop+0x3fe>
c04d0d39:       8b 43 18                mov    0x18(%ebx),%eax
c04d0d3c:       89 42 18                mov    %eax,0x18(%edx)
c04d0d3f:       8b 43 18                mov    0x18(%ebx),%eax
c04d0d42:       89 10                   mov    %edx,(%eax)
c04d0d44:       c7 03 00 00 00 00       movl   $0x0,(%ebx)
c04d0d4a:       c7 43 04 00 00 00 00    movl   $0x0,0x4(%ebx)
c04d0d51:       c7 44 24 08 00 00 00    movl   $0x0,0x8(%esp)
c04d0d58:       00
c04d0d59:       89 5c 24 04             mov    %ebx,0x4(%esp)
c04d0d5d:       8b 45 f0                mov    0xfffffff0(%ebp),%eax
c04d0d60:       89 04 24                mov    %eax,(%esp)
c04d0d63:       e8 ca f8 ff ff          call   c04d0632 <devfs_delete>
c04d0d68:       e8 2b ac 02 00          call   c04fb998 <dev_lock>
c04d0d6d:       8b 55 ec                mov    0xffffffec(%ebp),%edx
c04d0d70:       83 aa c8 00 00 00 01    subl   $0x1,0xc8(%edx)
c04d0d77:       e8 6b ac 02 00          call   c04fb9e7 <dev_unlock>
c04d0d7c:       e9 0d fe ff ff          jmp    c04d0b8e <devfs_populate_loop+0x1f0>
c04d0d81:       c7 44 24 04 c0 58 74    movl   $0xc07458c0,0x4(%esp)
c04d0d88:       c0
c04d0d89:       8b 81 d0 00 00 00       mov    0xd0(%ecx),%eax
c04d0d8f:       89 04 24                mov    %eax,(%esp)
c04d0d92:       e8 9e 12 05 00          call   c0522035 <free>
c04d0d97:       e9 c1 fe ff ff          jmp    c04d0c5d <devfs_populate_loop+0x2bf>
c04d0d9c:       8b 53 24                mov    0x24(%ebx),%edx
c04d0d9f:       8b 43 18                mov    0x18(%ebx),%eax
c04d0da2:       89 42 20                mov    %eax,0x20(%edx)
c04d0da5:       8b 53 14                mov    0x14(%ebx),%edx
c04d0da8:       eb 95                   jmp    c04d0d3f <devfs_populate_loop+0x3a1>


>How-To-Repeat:
I don't know why but some times My X.org ignore any mouse click and key input.
(I use nvidia driver)
then push C-M-BackSpace to shutdown the X.
and restart X with "startx" command.

then kernes panic happens.
 
>Fix:
none
>Release-Note:
>Audit-Trail:
>Unformatted:


More information about the freebsd-bugs mailing list