kern/149097: [panic] cdpd causes kernel panic

[Valentin Nechayev]

The following reply was made to PR kern/149097; it has been noted by GNATS.

From: Valentin Nechayev <netch at netch.kiev.ua>
To: bug-followup at FreeBSD.org, vvv at lucky.net
Cc:  
Subject: Re: kern/149097: [panic] cdpd causes kernel panic
Date: Tue, 3 Aug 2010 10:24:58 +0300

 The same problem, 8.1-RELEASE. Data from kernel core file:
 
 kgdb report:
 
 This GDB was configured as "i386-marcel-freebsd"...(no debugging symbols found).
 ..
 Attempt to extract a component of a value that is not a structure pointer.
 Attempt to extract a component of a value that is not a structure pointer.
 Attempt to extract a component of a value that is not a structure pointer.
 Attempt to extract a component of a value that is not a structure pointer.
 #0  0xc05a247c in doadump ()
 (kgdb) bt
 #0  0xc05a247c in doadump ()
 #1  0xc05a2b63 in boot ()
 #2  0xc05a2e05 in panic ()
 #3  0xc0844893 in trap_fatal ()
 #4  0xc0844af0 in trap_pfault ()
 #5  0xc0845473 in trap ()
 #6  0xc082792b in calltrap ()
 #7  0xc0842c24 in bcmp ()
 #8  0x000000be in ?? ()
 #9  0x00000000 in ?? ()
 #10 0x00000000 in ?? ()
 #11 0x00000000 in ?? ()
 #12 0x00000001 in ?? ()
 #13 0xc635d280 in ?? ()
 #14 0xbfbfe5c5 in ?? ()
 #15 0x00000000 in ?? ()
 #16 0xe7a9fd2c in ?? ()
 #17 0xc0844de3 in syscall ()
 Previous frame inner to this frame (corrupt stack?)
 
 Strings from core file:
 
 Fatal trap 12: page fault while in kernel mode
 cpuid = 0; apic id = 00
 fault virtual address   = 0x0
 fault code              = supervisor read, page not present
 instruction pointer     = 0x20:0xc0842c24
 stack pointer           = 0x28:0xe7a9fb54
 frame pointer           = 0x28:0xe7a9fbb8
 code segment            = base 0x0, limit 0xfffff, type 0x1b
                         = DPL 0, pres 1, def32 1, gran 1
 processor eflags        = interrupt enabled, resume, IOPL = 0
 current process         = 4533 (cdpd)
 trap number             = 12
 panic: page fault
 cpuid = 0
 KDB: stack backtrace:
 db_trace_self_wrapper(c089ba2e,e7a9f9f4,c05a2dc9,c08bcf13,0,...) at db_trace_sel
 f_wrapper+0x26
 kdb_backtrace(c08bcf13,0,c08853c6,e7a9fa00,0,...) at kdb_backtrace+0x29
 panic(c08853c6,c08be2b9,c635d3e8,1,1,...) at panic+0x119
 trap_fatal(c5156cb0,0,1,0,0,...) at trap_fatal+0x333
 trap_pfault(0,0,0,0,c637c7f8,...) at trap_pfault+0x250
 trap(e7a9fb14) at trap+0x453
 calltrap() at calltrap+0x6
 --- trap 0xc, eip = 0xc0842c24, esp = 0xe7a9fb54, ebp = 0xe7a9fbb8 ---
 bcmp(c5191c00,e7a9fc58,0,0,0,...) at bcmp+0x14
 devfs_write_f(c5b98770,e7a9fc58,c608fd00,0,c635d280,...) at devfs_write_f+0x7c
 dofilewrite(e7a9fc58,ffffffff,ffffffff,0,c5b98770,...) at dofilewrite+0x97
 kern_writev(c635d280,5,e7a9fc58,e7a9fc78,1,...) at kern_writev+0x58
 write(c635d280,e7a9fcf8,e7a9fcbc,c05ab716,c635d280,...) at write+0x4f
 syscall(e7a9fd38) at syscall+0x2d3
 Xint0x80_syscall() at Xint0x80_syscall+0x20
 --- syscall (4, FreeBSD ELF32, write), eip = 0x281b50d3, esp = 0xbfbfe36c, ebp =
  0xbfbfe398 ---
 Uptime: 11m3s
 Physical memory: 2006 MB
 Dumping 128 MB:
 
 Seems devfs is crash place?
 
 This isn't security issue because root is needed to start cdpd.
 
 - - - -
 
 While I have enough resources to debug and test, please prompt
 how to deal with it when stack is destroyed.
 
 
 -netch-