i386/133328: Kernel panics with Windows7 client

Spil Oss spil.oss at googlemail.com
Thu Apr 2 13:50:05 PDT 2009


The following reply was made to PR i386/133328; it has been noted by GNATS.

From: Spil Oss <spil.oss at googlemail.com>
To: bug-followup at FreeBSD.org, spil.oss at gmail.com
Cc:  
Subject: Re: i386/133328: Kernel panics with Windows7 client
Date: Thu, 2 Apr 2009 22:22:55 +0200

 gdb output of first crash
 
    1.
       kgdb kernel.debug /var/crash/vmcore.0
    2.
       GNU gdb 6.1.1 [FreeBSD]
    3.
       Copyright 2004 Free Software Foundation, Inc.
    4.
       GDB is free software, covered by the GNU General Public License,
 and you are
    5.
       welcome to change it and/or distribute copies of it under
 certain conditions.
    6.
       Type "show copying" to see the conditions.
    7.
       There is absolutely no warranty for GDB.  Type "show warranty"
 for details.
    8.
       This GDB was configured as "i386-marcel-freebsd"...
    9.
 
   10.
       Unread portion of the kernel message buffer:
   11.
 
   12.
 
   13.
       Fatal trap 12: page fault while in kernel mode
   14.
       fault virtual address   = 0x14
   15.
       fault code              = supervisor read, page not present
   16.
       instruction pointer     = 0x20:0xc05b79fe
   17.
       stack pointer           = 0x28:0xe4067b70
   18.
       frame pointer           = 0x28:0xe4067ba0
   19.
       code segment            = base 0x0, limit 0xfffff, type 0x1b
   20.
                               = DPL 0, pres 1, def32 1, gran 1
   21.
       processor eflags        = interrupt enabled, resume, IOPL = 0
   22.
       current process         = 22 (irq11: cbb0 cbb1+*)
   23.
       trap number             = 12
   24.
       panic: page fault
   25.
       Uptime: 87d0h51m20s
   26.
       Physical memory: 1014 MB
   27.
       Dumping 243 MB: 228 212 196 180 164 148 132 116 100 84 68 52 36 20 4
   28.
 
   29.
       Reading symbols from /boot/kernel/if_ath.ko...Reading symbols
 from /boot/kernel/if_ath.ko.symbols...done.
   30.
       done.
   31.
       Loaded symbols for /boot/kernel/if_ath.ko
   32.
       Reading symbols from /boot/kernel/ath_hal.ko...Reading symbols
 from /boot/kernel/ath_hal.ko.symbols...done.
   33.
       done.
   34.
       Loaded symbols for /boot/kernel/ath_hal.ko
   35.
       Reading symbols from /boot/kernel/wlan.ko...Reading symbols from
 /boot/kernel/wlan.ko.symbols...done.
   36.
       done.
   37.
       Loaded symbols for /boot/kernel/wlan.ko
   38.
       Reading symbols from /boot/kernel/ath_rate.ko...Reading symbols
 from /boot/kernel/ath_rate.ko.symbols...done.
   39.
       done.
   40.
       Loaded symbols for /boot/kernel/ath_rate.ko
   41.
       Reading symbols from /boot/kernel/acpi_video.ko...Reading
 symbols from /boot/kernel/acpi_video.ko.symbols...done.
   42.
       done.
   43.
       Loaded symbols for /boot/kernel/acpi_video.ko
   44.
       Reading symbols from /boot/kernel/acpi.ko...Reading symbols from
 /boot/kernel/acpi.ko.symbols...done.
   45.
       done.
   46.
       Loaded symbols for /boot/kernel/acpi.ko
   47.
       Reading symbols from /boot/kernel/wlan_scan_ap.ko...Reading
 symbols from /boot/kernel/wlan_scan_ap.ko.symbols...done.
   48.
       done.
   49.
       Loaded symbols for /boot/kernel/wlan_scan_ap.ko
   50.
       Reading symbols from /boot/kernel/wlan_ccmp.ko...Reading symbols
 from /boot/kernel/wlan_ccmp.ko.symbols...done.
   51.
       done.
   52.
       Loaded symbols for /boot/kernel/wlan_ccmp.ko
   53.
       Reading symbols from /boot/kernel/if_bridge.ko...Reading symbols
 from /boot/kernel/if_bridge.ko.symbols...done.
   54.
       done.
   55.
       Loaded symbols for /boot/kernel/if_bridge.ko
   56.
       Reading symbols from /boot/kernel/bridgestp.ko...Reading symbols
 from /boot/kernel/bridgestp.ko.symbols...done.
   57.
       done.
   58.
       Loaded symbols for /boot/kernel/bridgestp.ko
   59.
       Reading symbols from /boot/kernel/wlan_xauth.ko...Reading
 symbols from /boot/kernel/wlan_xauth.ko.symbols...done.
   60.
       done.
   61.
       Loaded symbols for /boot/kernel/wlan_xauth.ko
   62.
       Reading symbols from /boot/kernel/nullfs.ko...Reading symbols
 from /boot/kernel/nullfs.ko.symbols...done.
   63.
       done.
   64.
       Loaded symbols for /boot/kernel/nullfs.ko
   65.
       Reading symbols from /boot/kernel/fdescfs.ko...Reading symbols
 from /boot/kernel/fdescfs.ko.symbols...done.
   66.
       done.
   67.
       Loaded symbols for /boot/kernel/fdescfs.ko
   68.
       Reading symbols from /boot/kernel/smbfs.ko...Reading symbols
 from /boot/kernel/smbfs.ko.symbols...done.
   69.
       done.
   70.
       Loaded symbols for /boot/kernel/smbfs.ko
   71.
       Reading symbols from /boot/kernel/libiconv.ko...Reading symbols
 from /boot/kernel/libiconv.ko.symbols...done.
   72.
       done.
   73.
       Loaded symbols for /boot/kernel/libiconv.ko
   74.
       Reading symbols from /boot/kernel/libmchain.ko...Reading symbols
 from /boot/kernel/libmchain.ko.symbols...done.
   75.
       done.
   76.
       Loaded symbols for /boot/kernel/libmchain.ko
   77.
       #0  doadump () at pcpu.h:196
   78.
       196             __asm __volatile("movl %%fs:0,%0" : "=r" (td));
   79.
       (kgdb) list *0xc05b79fe
   80.
       0xc05b79fe is in m_dup (/usr/src/sys/kern/uipc_mbuf.c:850).
   81.
       845             while (remain > 0 || top == NULL) {     /* allow
 m->m_pkthdr.len == 0 */
   82.
       846                     struct mbuf *n;
   83.
       847
   84.
       848                     /* Get the next new mbuf */
   85.
       849                     if (remain >= MINCLSIZE) {
   86.
       850                             n = m_getcl(how, m->m_type, 0);
   87.
       851                             nsize = MCLBYTES;
   88.
       852                     } else {
   89.
       853                             n = m_get(how, m->m_type);
   90.
       854                             nsize = MLEN;
   91.
       (kgdb) backtrace
   92.
       #0  doadump () at pcpu.h:196
   93.
       #1  0xc0569073 in boot (howto=260) at
 /usr/src/sys/kern/kern_shutdown.c:418
   94.
       #2  0xc0569281 in panic (fmt=Variable "fmt" is not available.
   95.
       ) at /usr/src/sys/kern/kern_shutdown.c:574
   96.
       #3  0xc076014c in trap_fatal (frame=0xe4067b30, eva=20) at
 /usr/src/sys/i386/i386/trap.c:939
   97.
       #4  0xc07603db in trap_pfault (frame=0xe4067b30, usermode=0,
 eva=20) at /usr/src/sys/i386/i386/trap.c:852
   98.
       #5  0xc0760dd2 in trap (frame=0xe4067b30) at
 /usr/src/sys/i386/i386/trap.c:530
   99.
       #6  0xc074979b in calltrap () at /usr/src/sys/i386/i386/exception.s:159
  100.
       #7  0xc05b79fe in m_dup (m=0x0, how=1) at
 /usr/src/sys/kern/uipc_mbuf.c:849
  101.
       #8  0xc3f6173b in bridge_broadcast (sc=0xc3bcec00,
 src_if=0xc3bbd000, m=0xc7660d00, runfilt=1)
  102.
           at /usr/src/sys/modules/if_bridge/../../net/if_bridge.c:2354
  103.
       #9  0xc3f63815 in bridge_forward (sc=0xc3bcec00,
 sbif=0xc3e88000, m=0xc7660d00)
  104.
           at /usr/src/sys/modules/if_bridge/../../net/if_bridge.c:2046
  105.
       #10 0xc3f63b82 in bridge_input (ifp=0xc3bbd000, m=0xc7660900)
  106.
           at /usr/src/sys/modules/if_bridge/../../net/if_bridge.c:2168
  107.
       #11 0xc0604740 in ether_input (ifp=0xc3bbd000, m=0xc7660900) at
 /usr/src/sys/net/if_ethersubr.c:655
  108.
       #12 0xc047b5b2 in bge_intr (xsc=0xc3bc5000) at
 /usr/src/sys/dev/bge/if_bge.c:3165
  109.
       #13 0xc054853b in ithread_loop (arg=0xc3b9d0d0) at
 /usr/src/sys/kern/kern_intr.c:1088
  110.
       #14 0xc05450e1 in fork_exit (callout=0xc0548370 <ithread_loop>,
 arg=0xc3b9d0d0, frame=0xe4067d38)
  111.
           at /usr/src/sys/kern/kern_fork.c:804
  112.
       #15 0xc0749810 in fork_trampoline () at
 /usr/src/sys/i386/i386/exception.s:264
  113.
       (kgdb)
 
 
 gdb output of second crash
    1.
       kgdb kernel.debug /var/crash/vmcore.1
    2.
       GNU gdb 6.1.1 [FreeBSD]
    3.
       Copyright 2004 Free Software Foundation, Inc.
    4.
       GDB is free software, covered by the GNU General Public License,
 and you are
    5.
       welcome to change it and/or distribute copies of it under
 certain conditions.
    6.
       Type "show copying" to see the conditions.
    7.
       There is absolutely no warranty for GDB.  Type "show warranty"
 for details.
    8.
       This GDB was configured as "i386-marcel-freebsd"...
    9.
 
   10.
       Unread portion of the kernel message buffer:
   11.
 
   12.
 
   13.
       Fatal trap 12: page fault while in kernel mode
   14.
       fault virtual address   = 0xc
   15.
       fault code              = supervisor read, page not present
   16.
       instruction pointer     = 0x20:0xc05b954c
   17.
       stack pointer           = 0x28:0xe3faea3c
   18.
       frame pointer           = 0x28:0xe3faea44
   19.
       code segment            = base 0x0, limit 0xfffff, type 0x1b
   20.
                               = DPL 0, pres 1, def32 1, gran 1
   21.
       processor eflags        = interrupt enabled, resume, IOPL = 0
   22.
       current process         = 14 (swi1: net)
   23.
       trap number             = 12
   24.
       panic: page fault
   25.
       Uptime: 1h2m1s
   26.
       Physical memory: 1014 MB
   27.
       Dumping 154 MB: 139 123 107 91 75 59 43 27 11
   28.
 
   29.
       Reading symbols from /boot/kernel/if_ath.ko...Reading symbols
 from /boot/kernel/if_ath.ko.symbols...done.
   30.
       done.
   31.
       Loaded symbols for /boot/kernel/if_ath.ko
   32.
       Reading symbols from /boot/kernel/ath_hal.ko...Reading symbols
 from /boot/kernel/ath_hal.ko.symbols...done.
   33.
       done.
   34.
       Loaded symbols for /boot/kernel/ath_hal.ko
   35.
       Reading symbols from /boot/kernel/wlan.ko...Reading symbols from
 /boot/kernel/wlan.ko.symbols...done.
   36.
       done.
   37.
       Loaded symbols for /boot/kernel/wlan.ko
   38.
       Reading symbols from /boot/kernel/ath_rate.ko...Reading symbols
 from /boot/kernel/ath_rate.ko.symbols...done.
   39.
       done.
   40.
       Loaded symbols for /boot/kernel/ath_rate.ko
   41.
       Reading symbols from /boot/kernel/acpi_video.ko...Reading
 symbols from /boot/kernel/acpi_video.ko.symbols...done.
   42.
       done.
   43.
       Loaded symbols for /boot/kernel/acpi_video.ko
   44.
       Reading symbols from /boot/kernel/acpi.ko...Reading symbols from
 /boot/kernel/acpi.ko.symbols...done.
   45.
       done.
   46.
       Loaded symbols for /boot/kernel/acpi.ko
   47.
       Reading symbols from /boot/kernel/wlan_scan_ap.ko...Reading
 symbols from /boot/kernel/wlan_scan_ap.ko.symbols...done.
   48.
       done.
   49.
       Loaded symbols for /boot/kernel/wlan_scan_ap.ko
   50.
       Reading symbols from /boot/kernel/wlan_ccmp.ko...Reading symbols
 from /boot/kernel/wlan_ccmp.ko.symbols...done.
   51.
       done.
   52.
       Loaded symbols for /boot/kernel/wlan_ccmp.ko
   53.
       Reading symbols from /boot/kernel/wlan_xauth.ko...Reading
 symbols from /boot/kernel/wlan_xauth.ko.symbols...done.
   54.
       done.
   55.
       Loaded symbols for /boot/kernel/wlan_xauth.ko
   56.
       Reading symbols from /boot/kernel/if_bridge.ko...Reading symbols
 from /boot/kernel/if_bridge.ko.symbols...done.
   57.
       done.
   58.
       Loaded symbols for /boot/kernel/if_bridge.ko
   59.
       Reading symbols from /boot/kernel/bridgestp.ko...Reading symbols
 from /boot/kernel/bridgestp.ko.symbols...done.
   60.
       done.
   61.
       Loaded symbols for /boot/kernel/bridgestp.ko
   62.
       Reading symbols from /boot/kernel/nullfs.ko...Reading symbols
 from /boot/kernel/nullfs.ko.symbols...done.
   63.
       done.
   64.
       Loaded symbols for /boot/kernel/nullfs.ko
   65.
       #0  doadump () at pcpu.h:196
   66.
       196             __asm __volatile("movl %%fs:0,%0" : "=r" (td));
   67.
       (kgdb) list *0xc05b954c
   68.
       0xc05b954c is in sbsndptr (/usr/src/sys/kern/uipc_sockbuf.c:939).
   69.
       934             *moff = off - sb->sb_sndptroff;
   70.
       935             m = ret = sb->sb_sndptr ? sb->sb_sndptr : sb->sb_mb;
   71.
       936
   72.
       937             /* Advance by len to be as close as possible for
 the next transmit. */
   73.
       938             for (off = off - sb->sb_sndptroff + len - 1;
   74.
       939                  off > 0 && off >= m->m_len;
   75.
       940                  m = m->m_next) {
   76.
       941                     sb->sb_sndptroff += m->m_len;
   77.
       942                     off -= m->m_len;
   78.
       943             }
   79.
       (kgdb) backtrace
   80.
       #0  doadump () at pcpu.h:196
   81.
       #1  0xc0569073 in boot (howto=260) at
 /usr/src/sys/kern/kern_shutdown.c:418
   82.
       #2  0xc0569281 in panic (fmt=Variable "fmt" is not available.
   83.
       ) at /usr/src/sys/kern/kern_shutdown.c:574
   84.
       #3  0xc076014c in trap_fatal (frame=0xe3fae9fc, eva=12) at
 /usr/src/sys/i386/i386/trap.c:939
   85.
       #4  0xc07603db in trap_pfault (frame=0xe3fae9fc, usermode=0,
 eva=12) at /usr/src/sys/i386/i386/trap.c:852
   86.
       #5  0xc0760dd2 in trap (frame=0xe3fae9fc) at
 /usr/src/sys/i386/i386/trap.c:530
   87.
       #6  0xc074979b in calltrap () at /usr/src/sys/i386/i386/exception.s:159
   88.
       #7  0xc05b954c in sbsndptr (sb=0xc48a4c44, off=1079, len=1448,
 moff=0xe3faeac4)
   89.
           at /usr/src/sys/kern/uipc_sockbuf.c:939
   90.
       #8  0xc068c2f4 in tcp_output (tp=0xc43c2ae0) at
 /usr/src/sys/netinet/tcp_output.c:802
   91.
       #9  0xc06897f5 in tcp_do_segment (m=0xc3e66800, th=0xc3e668ac,
 so=0xc48a4b60, tp=0xc43c2ae0, drop_hdrlen=52, tlen=0)
   92.
           at /usr/src/sys/netinet/tcp_input.c:2358
   93.
       #10 0xc068a7de in tcp_input (m=0xc3e66800, off0=20) at
 /usr/src/sys/netinet/tcp_input.c:846
   94.
       #11 0xc0629240 in ip_input (m=0xc3e66800) at
 /usr/src/sys/netinet/ip_input.c:665
   95.
       #12 0xc06094eb in netisr_processqueue (ni=0xc081e658) at
 /usr/src/sys/net/netisr.c:143
   96.
       #13 0xc06097fb in swi_net (dummy=0x0) at /usr/src/sys/net/netisr.c:256
   97.
       #14 0xc054853b in ithread_loop (arg=0xc3a91aa0) at
 /usr/src/sys/kern/kern_intr.c:1088
   98.
       #15 0xc05450e1 in fork_exit (callout=0xc0548370 <ithread_loop>,
 arg=0xc3a91aa0, frame=0xe3faed38)
   99.
           at /usr/src/sys/kern/kern_fork.c:804
  100.
       #16 0xc0749810 in fork_trampoline () at
 /usr/src/sys/i386/i386/exception.s:264
  101.
       (kgdb)


More information about the freebsd-i386 mailing list