[panic] intr_event_execute_handlers() - Corrupted DWARF expression

[Glen Barber]

On Thu, Jan 19, 2012 at 10:50:45AM -0500, John Baldwin wrote:
> On Wednesday, January 18, 2012 5:01:37 pm Glen Barber wrote:
> > Hi,
> > 
> > I'm running -CURRENT from about 5 days ago:
> > 
> > nucleus# uname -a
> > FreeBSD nucleus 10.0-CURRENT FreeBSD 10.0-CURRENT #3 r230037M: Fri Jan
> > 13 17:48:14 EST 2012     gjb at nucleus:/usr/obj/usr/src/sys/NUCLEUS  amd64
> > 
> > (The 'M' is kib's DRM patches for Intel GPU.)
> > 
> > So far, I haven't had much problem with this laptop, but just had the
> > machine panic.
> > 
> > I have kgdb output attached, and I'll be happy to provide whatever
> > additional information that may be needed.
> > 
> > I have core.txt.N available here:
> > 
> >   http://people.freebsd.org/~gjb/core.txt
> 
> In kgdb, can you go to frame 6 and 'p td->td_lock'.  If that is non-null, can 
> you do 'p *td->td_lock'?
> 

Sure, script(1) output is attached.

Thanks.

Glen

-------------- next part --------------
Script started on Thu Jan 19 10:56:46 2012

nucleus# kgdb kernel.debug /var/crash/vmcore.4
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "amd64-marcel-freebsd"...

Unread portion of the kernel message buffer:
ACPI Warning: Large Reference Count (0x806) in object 0xfffffe000449fc80 (20120111/utdelete-491)
ACPI Warning: Large Reference Count (0x807) in object 0xfffffe000449fc80 (20120111/utdelete-491)
kernel trap 12 with interrupts disabled


Fatal trap 12: page fault while in kernel mode
cpuid = 2; apic id = 04
fault virtual address   = 0x18
fault code              = supervisor read data, page not present
instruction pointer     = 0x20:0xffffffff805c2098
stack pointer           = 0x28:0xffffff8000269a50
frame pointer           = 0x28:0xffffff8000269aa0
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags        = resume, IOPL = 0
current process         = 12 (swi4: clock)
trap number             = 12
panic: page fault
cpuid = 2
KDB: stack backtrace:
#0 0xffffffff806009ce at kdb_backtrace+0x5e
#1 0xffffffff805d06a8 at panic+0x1d8
#2 0xffffffff8081a000 at trap_fatal+0x290
#3 0xffffffff8081a63d at trap+0x29d
#4 0xffffffff808063bf at calltrap+0x8
#5 0xffffffff80609bdd at sleepq_timeout+0x1d
#6 0xffffffff805e238f at softclock+0x29f
#7 0xffffffff805ab904 at intr_event_execute_handlers+0x64
#8 0xffffffff805ac567 at ithread_loop+0x97
#9 0xffffffff805a975d at fork_exit+0x11d
#10 0xffffffff808068ee at fork_trampoline+0xe
Uptime: 2h42m5s
Dumping 2511 out of 7846 MB:..1%..11%..21%..31%..41%..51%..61%..71%..81%..91%

kgdb: kvm_read: invalid address (0x64)
Reading symbols from /boot/kernel/vesa.ko...Reading symbols from /boot/kernel/vesa.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/vesa.ko
Reading symbols from /boot/kernel/zfs.ko...Reading symbols from /boot/kernel/zfs.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/zfs.ko
Reading symbols from /boot/kernel/opensolaris.ko...Reading symbols from /boot/kernel/opensolaris.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/opensolaris.ko
Reading symbols from /boot/kernel/linux.ko...Reading symbols from /boot/kernel/linux.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/linux.ko
Reading symbols from /boot/kernel/coretemp.ko...Reading symbols from /boot/kernel/coretemp.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/coretemp.ko
Reading symbols from /boot/kernel/sem.ko...Reading symbols from /boot/kernel/sem.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/sem.ko
Reading symbols from /boot/kernel/i915.ko...Reading symbols from /boot/kernel/i915.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/i915.ko
Reading symbols from /boot/kernel/iicbb.ko...Reading symbols from /boot/kernel/iicbb.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/iicbb.ko
Reading symbols from /boot/kernel/iicbus.ko...Reading symbols from /boot/kernel/iicbus.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/iicbus.ko
Reading symbols from /boot/kernel/iic.ko...Reading symbols from /boot/kernel/iic.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/iic.ko
Reading symbols from /boot/kernel/drm.ko...Reading symbols from /boot/kernel/drm.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/drm.ko
Reading symbols from /boot/kernel/geom_eli.ko...Reading symbols from /boot/kernel/geom_eli.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/geom_eli.ko
Reading symbols from /boot/kernel/crypto.ko...Reading symbols from /boot/kernel/crypto.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/crypto.ko
Reading symbols from /boot/kernel/zlib.ko...Reading symbols from /boot/kernel/zlib.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/zlib.ko
#0  doadump (textdump=Variable "textdump" is not available.
) at pcpu.h:224
224             __asm("movq %%gs:0,%0" : "=r" (td));
(kgdb) frame 6
#6  0xffffffff805c2098 in thread_lock_flags_ (td=0xfffffe0008087000, opts=0, 
    file=0xffffffff8090d5d0 "/usr/src/sys/kern/subr_sleepqueue.c", line=891) at /usr/src/sys/kern/kern_mutex.c:593
593                     WITNESS_CHECKORDER(&m->lock_object,
(kgdb) p td->td_lock
$1 = (struct mtx * volatile) 0x0
(kgdb) p *td->td_lock
Cannot access memory at address 0x0
(kgdb) quit
nucleus# exit

Script done on Thu Jan 19 10:59:29 2012