Frequent panics on Dell Latitude D610 running 6.1-STABLE GENERIC

John Stalker stalker at maths.tcd.ie
Sun Aug 6 17:44:34 UTC 2006


> I am experiencing frequent panics on a new Dell Latitude D610 running
> a generic 6-STABLE kernel.  They are not exactly repeatable, but they
> always occur in one of two situations: running shutdown as root in an
> xterm or exiting from a window manager (WindowMaker or Blackbox) to
> a display manager (xdm or wdm).  Included below are output from uname,
> kldstat, dmesg and kgdb.  Any help would be greatly appreciated,
> including suggestions about how to further diagnose the problem.

I am not much wiser, but I have a few more backtraces.  I tried removing
various modules and changing various config options to see if they have
any effect.  It is impossible to be certain, since the panic is not
completely reproducible, but I think the culprit is drm.ko.  Any idea
how I can confirm or refute this suspicion?  Here are the backtraces,
for what they're worth.

Script started on Sun Aug  6 19:24:34 2006
# for i in 0 1 2 3 4 ; do echo where | kgdb kernel.debug /var/crash/vmcore.$i ; done
[GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"]
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd".

Unread portion of the kernel message buffer:
info: [drm] Setting GART location based on old memory map
info: [drm] Loading R300 Microcode
info: [drm] writeback test succeeded in 1 usecs


Fatal trap 12: page fault while in kernel mode
fault virtual address	= 0xe946dd90
fault code		= supervisor write, page not present
instruction pointer	= 0x20:0xc0873f26
stack pointer	        = 0x28:0xe700dc2c
frame pointer	        = 0x28:0xe700dc54
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, def32 1, gran 1
processor eflags	= interrupt enabled, resume, IOPL = 0
current process		= 1191 (sh)
trap number		= 12
panic: page fault
Uptime: 8m7s
Dumping 2047 MB (2 chunks)
  chunk 0: 1MB (159 pages) ... ok
  chunk 1: 2047MB (523985 pages) 2031 2015 1999 1983 1967 1951 1935 1919 1903 1887 1871 1855 1839 1823 1807 1791 1775 1759 1743 1727 1711 1695 1679 1663 1647 1631 1615 1599 1583 1567 1551 1535 1519 1503 1487 1471 1455 1439 1423 1407 1391 1375 1359 1343 1327 1311 1295 1279 1263 1247 1231 1215 1199 1183 1167 1151 1135 1119 1103 1087 1071 1055 1039 1023 1007 991 975 959 943 927 911 895 879 863 847 831 815 799 783 767 751 735 719 703 687 671 655 639 623 607 591 575 559 543 527 511 495 479 463 447 431 415 399 383 367 351 335 319 303 287 271 255 239 223 207 191 175 159 143 127 111 95 79 63 47 31 15

#0  doadump () at pcpu.h:165
165		__asm __volatile("movl %%fs:0,%0" : "=r" (td));
(kgdb) #0  doadump () at pcpu.h:165
#1  0xc0666d7a in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:409
#2  0xc0667010 in panic (fmt=0xc08cbc5d "%s")
    at /usr/src/sys/kern/kern_shutdown.c:565
#3  0xc0876264 in trap_fatal (frame=0xe700dbec, eva=3913735568)
    at /usr/src/sys/i386/i386/trap.c:836
#4  0xc0875fcb in trap_pfault (frame=0xe700dbec, usermode=0, eva=3913735568)
    at /usr/src/sys/i386/i386/trap.c:744
#5  0xc0875c09 in trap (frame=
      {tf_fs = -1026490360, tf_es = -1026490328, tf_ds = -1026490328, tf_edi = -381231728, tf_esi = -419373680, tf_ebp = -419373996, tf_isp = -419374056, tf_ebx = -381231728, tf_edx = -957628416, tf_ecx = 156, tf_eax = 38141952, tf_trapno = 12, tf_err = 2, tf_eip = -1064878298, tf_cs = 32, tf_eflags = 66054, tf_esp = -957632512, tf_ss = -963273728}) at /usr/src/sys/i386/i386/trap.c:434
---Type <return> to continue, or q <return> to quit---#6  0xc08643ca in calltrap () at /usr/src/sys/i386/i386/exception.s:139
#7  0xc0873f26 in generic_bcopy () at /usr/src/sys/i386/i386/support.s:489
Previous frame inner to this frame (corrupt stack?)
(kgdb) [GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"]
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd".

Unread portion of the kernel message buffer:
info: [drm] Setting GART location based on old memory map
info: [drm] Loading R300 Microcode
info: [drm] writeback test succeeded in 1 usecs


Fatal trap 12: page fault while in kernel mode
fault virtual address	= 0xe9437d90
fault code		= supervisor write, page not present
instruction pointer	= 0x20:0xc0873f26
stack pointer	        = 0x28:0xe93ebc2c
frame pointer	        = 0x28:0xe93ebc54
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, def32 1, gran 1
processor eflags	= interrupt enabled, resume, IOPL = 3
current process		= 562 (Xorg)
trap number		= 12
panic: page fault
Uptime: 48s
Dumping 2047 MB (2 chunks)
  chunk 0: 1MB (159 pages) ... ok
  chunk 1: 2047MB (523985 pages) 2031 2015 1999 1983 1967 1951 1935 1919 1903 1887 1871 1855 1839 1823 1807 1791 1775 1759 1743 1727 1711 1695 1679 1663 1647 1631 1615 1599 1583 1567 1551 1535 1519 1503 1487 1471 1455 1439 1423 1407 1391 1375 1359 1343 1327 1311 1295 1279 1263 1247 1231 1215 1199 1183 1167 1151 1135 1119 1103 1087 1071 1055 1039 1023 1007 991 975 959 943 927 911 895 879 863 847 831 815 799 783 767 751 735 719 703 687 671 655 639 623 607 591 575 559 543 527 511 495 479 463 447 431 415 399 383 367 351 335 319 303 287 271 255 239 223 207 191 175 159 143 127 111 95 79 63 47 31 15

#0  doadump () at pcpu.h:165
165		__asm __volatile("movl %%fs:0,%0" : "=r" (td));
(kgdb) #0  doadump () at pcpu.h:165
#1  0xc0666d7a in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:409
#2  0xc0667010 in panic (fmt=0xc08cbc5d "%s")
    at /usr/src/sys/kern/kern_shutdown.c:565
#3  0xc0876264 in trap_fatal (frame=0xe93ebbec, eva=3913514384)
    at /usr/src/sys/i386/i386/trap.c:836
#4  0xc0875fcb in trap_pfault (frame=0xe93ebbec, usermode=0, eva=3913514384)
    at /usr/src/sys/i386/i386/trap.c:744
#5  0xc0875c09 in trap (frame=
      {tf_fs = -1023803384, tf_es = -1052508120, tf_ds = 40, tf_edi = -381452912, tf_esi = -381764208, tf_ebp = -381764524, tf_isp = -381764584, tf_ebx = -381452912, tf_edx = -948456704, tf_ecx = 156, tf_eax = 311296, tf_trapno = 12, tf_err = 2, tf_eip = -1064878298, tf_cs = 32, tf_eflags = 2175494, tf_esp = -958609884, tf_ss = -958603904}) at /usr/src/sys/i386/i386/trap.c:434
---Type <return> to continue, or q <return> to quit---#6  0xc08643ca in calltrap () at /usr/src/sys/i386/i386/exception.s:139
#7  0xc0873f26 in generic_bcopy () at /usr/src/sys/i386/i386/support.s:489
Previous frame inner to this frame (corrupt stack?)
(kgdb) [GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"]
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd".

Unread portion of the kernel message buffer:
kernel trap 12 with interrupts disabled


Fatal trap 12: page fault while in kernel mode
fault virtual address	= 0xe943dd90
fault code		= supervisor read, page not present
instruction pointer	= 0x20:0xc087483f
stack pointer	        = 0x28:0xe93dcc84
frame pointer	        = 0x28:0xe93dcc9c
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, def32 1, gran 1
processor eflags	= resume, IOPL = 3
current process		= 563 (Xorg)
trap number		= 12
panic: page fault
Uptime: 13m21s
Dumping 2047 MB (2 chunks)
  chunk 0: 1MB (159 pages) ... ok
  chunk 1: 2047MB (523985 pages) 2031 2015 1999 1983 1967 1951 1935 1919 1903 1887 1871 1855 1839 1823 1807 1791 1775 1759 1743 1727 1711 1695 1679 1663 1647 1631 1615 1599 1583 1567 1551 1535 1519 1503 1487 1471 1455 1439 1423 1407 1391 1375 1359 1343 1327 1311 1295 1279 1263 1247 1231 1215 1199 1183 1167 1151 1135 1119 1103 1087 1071 1055 1039 1023 1007 991 975 959 943 927 911 895 879 863 847 831 815 799 783 767 751 735 719 703 687 671 655 639 623 607 591 575 559 543 527 511 495 479 463 447 431 415 399 383 367 351 335 319 303 287 271 255 239 223 207 191 175 159 143 127 111 95 79 63 47 31 15

#0  doadump () at pcpu.h:165
165		__asm __volatile("movl %%fs:0,%0" : "=r" (td));
(kgdb) #0  doadump () at pcpu.h:165
#1  0xc0666d7a in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:409
#2  0xc0667010 in panic (fmt=0xc08cbc5d "%s")
    at /usr/src/sys/kern/kern_shutdown.c:565
#3  0xc0876264 in trap_fatal (frame=0xe93dcc44, eva=3913538960)
    at /usr/src/sys/i386/i386/trap.c:836
#4  0xc0875a02 in trap (frame=
      {tf_fs = -1066991608, tf_es = -958398424, tf_ds = -1063518168, tf_edi = -958351872, tf_esi = 0, tf_ebp = -381825892, tf_isp = -381825936, tf_ebx = -948296192, tf_edx = -381428336, tf_ecx = -948296192, tf_eax = 0, tf_trapno = 12, tf_err = 0, tf_eip = -1064875969, tf_cs = 32, tf_eflags = 2174983, tf_esp = -1066958129, tf_ss = -958351872}) at /usr/src/sys/i386/i386/trap.c:269
#5  0xc08643ca in calltrap () at /usr/src/sys/i386/i386/exception.s:139
#6  0xc087483f in cpu_switch () at /usr/src/sys/i386/i386/swtch.s:161
Previous frame inner to this frame (corrupt stack?)
(kgdb) [GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"]
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd".

Unread portion of the kernel message buffer:


Fatal trap 12: page fault while in kernel mode
fault virtual address	= 0xe9489080
fault code		= supervisor read, page not present
instruction pointer	= 0x20:0xc0870b7c
stack pointer	        = 0x28:0xe93e2a50
frame pointer	        = 0x28:0xe93e2a50
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, def32 1, gran 1
processor eflags	= interrupt enabled, resume, IOPL = 0
current process		= 612 (wdm)
trap number		= 12
panic: page fault
Uptime: 4m40s
Dumping 2047 MB (2 chunks)
  chunk 0: 1MB (159 pages) ... ok
  chunk 1: 2047MB (523985 pages) 2031 2015 1999 1983 1967 1951 1935 1919 1903 1887 1871 1855 1839 1823 1807 1791 1775 1759 1743 1727 1711 1695 1679 1663 1647 1631 1615 1599 1583 1567 1551 1535 1519 1503 1487 1471 1455 1439 1423 1407 1391 1375 1359 1343 1327 1311 1295 1279 1263 1247 1231 1215 1199 1183 1167 1151 1135 1119 1103 1087 1071 1055 1039 1023 1007 991 975 959 943 927 911 895 879 863 847 831 815 799 783 767 751 735 719 703 687 671 655 639 623 607 591 575 559 543 527 511 495 479 463 447 431 415 399 383 367 351 335 319 303 287 271 255 239 223 207 191 175 159 143 127 111 95 79 63 47 31 15

#0  doadump () at pcpu.h:165
165		__asm __volatile("movl %%fs:0,%0" : "=r" (td));
(kgdb) #0  doadump () at pcpu.h:165
#1  0xc0666d7a in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:409
#2  0xc0667010 in panic (fmt=0xc08cbc5d "%s")
    at /usr/src/sys/kern/kern_shutdown.c:565
#3  0xc0876264 in trap_fatal (frame=0xe93e2a10, eva=3913846912)
    at /usr/src/sys/i386/i386/trap.c:836
#4  0xc0875fcb in trap_pfault (frame=0xe93e2a10, usermode=0, eva=3913846912)
    at /usr/src/sys/i386/i386/trap.c:744
#5  0xc0875c09 in trap (frame=
      {tf_fs = 8, tf_es = -1022951384, tf_ds = -958529496, tf_edi = -1023605816, tf_esi = -1014281336, tf_ebp = -381801904, tf_isp = -381801924, tf_ebx = -1014281360, tf_edx = 32, tf_ecx = -948281152, tf_eax = -381120512, tf_trapno = 12, tf_err = 0, tf_eip = -1064891524, tf_cs = 32, tf_eflags = 590354, tf_esp = -381801876, tf_ss = -1064882185}) at /usr/src/sys/i386/i386/trap.c:434
---Type <return> to continue, or q <return> to quit---#6  0xc08643ca in calltrap () at /usr/src/sys/i386/i386/exception.s:139
#7  0xc0870b7c in pmap_unuse_pt (pmap=0xc77a60c0, va=32)
    at /usr/src/sys/i386/i386/pmap.c:1018
#8  0xc0872ff7 in pmap_remove_pages (pmap=0xc77a60c0, sva=0, eva=3217031168)
    at /usr/src/sys/i386/i386/pmap.c:2615
#9  0xc064d9ef in exec_new_vmspace (imgp=0xe93e2be8, sv=0xc09a2080)
    at vm_map.h:251
#10 0xc0638ef3 in exec_elf32_imgact (imgp=0xe93e2be8)
    at /usr/src/sys/kern/imgact_elf.c:668
#11 0xc064c91e in do_execve (td=0xc6dea900, args=0xe93e2cb4, mac_p=0x0)
    at /usr/src/sys/kern/kern_exec.c:417
#12 0xc064c628 in kern_execve (td=0xc6dea900, args=0xe93e2cb4, mac_p=0x0)
    at /usr/src/sys/kern/kern_exec.c:258
#13 0xc064c532 in execve (td=0xc6dea900, uap=0xe9489000)
    at /usr/src/sys/kern/kern_exec.c:186
#14 0xc087657b in syscall (frame=
      {tf_fs = 59, tf_es = 59, tf_ds = 59, tf_edi = 134725744, tf_esi = -1077941976, tf_ebp = -1077942008, tf_isp = -381801116, tf_ebx = 0, tf_edx = -1, tf_ecx = 9, tf_eax = 59, tf_trapno = 12, tf_err = 2, tf_eip = 674973131, tf_cs = 51, tf_eflags = 642, tf_esp = -1077943076, tf_ss = 59})
    at /usr/src/sys/i386/i386/trap.c:981
#15 0xc086441f in Xint0x80_syscall () at /usr/src/sys/i386/i386/exception.s:200
#16 0x00000033 in ?? ()
Previous frame inner to this frame (corrupt stack?)
(kgdb) [GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"]
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd".

Unread portion of the kernel message buffer:
<118>X connection to :0.0 broken (explicit kill or server shutdown).
<118>X connection to :0.0 broken (explicit kill or server shutdown).
<118>X connection to :0.0 broken (explicit kill or server shutdown).
<118>X connection to :0.0 broken (explicit kill or server shutdown).
<118>X connection to :0.0 broken (explicit kill or server shutdown).
<118>X connection to :0.0 broken (explicit kill or server shutdown).
<118>X connection to :0.0 broken (explicit kill or server shutdown).
<118>X connection to :0.0 broken (explicit kill or server shutdown).
<118>X connection to :0.0 broken (explicit kill or server shutdown).
<118>X connection to :0.0 broken (explicit kill or server shutdown).
<118>X connection to :0.0 broken (explicit kill or server shutdown).
<118>X connection to :0.0 broken (explicit kill or server shutdown).
<118>X connection to :0.0 broken (explicit kill or server shutdown).
<118>X connection to :0.0 broken (explicit kill or server shutdown).
<118>X connection to :0.0 broken (explicit kill or server shutdown).
<118>X connection to :0.0 broken (explicit kill or server shutdown).
<118>X connection to :0.0 broken (explicit kill or server shutdown).
<118>X connection to :0.0 broken (explicit kill or server shutdown).
<118>X connection to :0.0 broken (explicit kill or server shutdown).
<118>X connection to :0.0 broken (explicit kill or server shutdown).
<118>X connection to :0.0 broken (explicit kill or server shutdown).
<118>X connection to :0.0 broken (explicit kill or server shutdown).
<118>blackbox: managing screen 0 using TrueColor visual 0x23, depth 16
<118>X connection to :0.0 broken (explicit kill or server shutdown).
<118>X connection to :0.0 broken (explicit kill or server shutdown).
<118>blackbox: managing screen 0 using TrueColor visual 0x23, depth 16
<118>X connection to :0.0 broken (explicit kill or server shutdown).
<118>X connection to :0.0 broken (explicit kill or server shutdown).
<118>blackbox: managing screen 0 using TrueColor visual 0x23, depth 16
<118>X connection to :0.0 broken (explicit kill or server shutdown).
<118>X connection to :0.0 broken (explicit kill or server shutdown).
<118>blackbox: managing screen 0 using TrueColor visual 0x23, depth 16
<118>X connection to :0.0 broken (explicit kill or server shutdown).
<118>X connection to :0.0 broken (explicit kill or server shutdown).
<118>blackbox: managing screen 0 using TrueColor visual 0x23, depth 16
<118>X connection to :0.0 broken (explicit kill or server shutdown).
<118>X connection to :0.0 broken (explicit kill or server shutdown).
<118>blackbox: managing screen 0 using TrueColor visual 0x23, depth 16
<118>X connection to :0.0 broken (explicit kill or server shutdown).
<118>X connection to :0.0 broken (explicit kill or server shutdown).
<118>blackbox: managing screen 0 using TrueColor visual 0x23, depth 16
<118>X connection to :0.0 broken (explicit kill or server shutdown).
<118>X connection to :0.0 broken (explicit kill or server shutdown).
<118>blackbox: managing screen 0 using TrueColor visual 0x23, depth 16
<118>X connection to :0.0 broken (explicit kill or server shutdown).
<118>X connection to :0.0 broken (explicit kill or server shutdown).
<118>blackbox: managing screen 0 using TrueColor visual 0x23, depth 16
<118>X connection to :0.0 broken (explicit kill or server shutdown).
<118>X connection to :0.0 broken (explicit kill or server shutdown).
<118>blackbox: managing screen 0 using TrueColor visual 0x23, depth 16
<118>X connection to :0.0 broken (explicit kill or server shutdown).
<118>X connection to :0.0 broken (explicit kill or server shutdown).
<118>blackbox: managing screen 0 using TrueColor visual 0x23, depth 16
<118>X connection to :0.0 broken (explicit kill or server shutdown).
<118>X connection to :0.0 broken (explicit kill or server shutdown).
<118>blackbox: managing screen 0 using TrueColor visual 0x23, depth 16
<118>X connection to :0.0 broken (explicit kill or server shutdown).
<118>X connection to :0.0 broken (explicit kill or server shutdown).
<118>blackbox: managing screen 0 using TrueColor visual 0x23, depth 16
<118>X connection to :0.0 broken (explicit kill or server shutdown).
<118>X connection to :0.0 broken (explicit kill or server shutdown).
<118>blackbox: managing screen 0 using TrueColor visual 0x23, depth 16
<118>X connection to :0.0 broken (explicit kill or server shutdown).
<118>X connection to :0.0 broken (explicit kill or server shutdown).
<118>blackbox: managing screen 0 using TrueColor visual 0x23, depth 16
<118>X connection to :0.0 broken (explicit kill or server shutdown).
<118>X connection to :0.0 broken (explicit kill or server shutdown).
<118>blackbox: managing screen 0 using TrueColor visual 0x23, depth 16
<118>X connection to :0.0 broken (explicit kill or server shutdown).
<118>blackbox: managing screen 0 using TrueColor visual 0x23, depth 16
<118>X connection to :0.0 broken (explicit kill or server shutdown).
<118>blackbox: managing screen 0 using TrueColor visual 0x23, depth 16


Fatal trap 12: page fault while in kernel mode
fault virtual address	= 0xe90aa080
fault code		= supervisor read, page not present
instruction pointer	= 0x20:0xc0870f4f
stack pointer	        = 0x28:0xe8d4bbd0
frame pointer	        = 0x28:0xe8d4bbdc
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, def32 1, gran 1
processor eflags	= interrupt enabled, resume, IOPL = 0
current process		= 20314 (sh)
trap number		= 12
panic: page fault
Uptime: 1h58m44s
Dumping 2047 MB (2 chunks)
  chunk 0: 1MB (159 pages) ... ok
  chunk 1: 2047MB (523985 pages) 2031 2015 1999 1983 1967 1951 1935 1919 1903 1887 1871 1855 1839 1823 1807 1791 1775 1759 1743 1727 1711 1695 1679 1663 1647 1631 1615 1599 1583 1567 1551 1535 1519 1503 1487 1471 1455 1439 1423 1407 1391 1375 1359 1343 1327 1311 1295 1279 1263 1247 1231 1215 1199 1183 1167 1151 1135 1119 1103 1087 1071 1055 1039 1023 1007 991 975 959 943 927 911 895 879 863 847 831 815 799 783 767 751 735 719 703 687 671 655 639 623 607 591 575 559 543 527 511 495 479 463 447 431 415 399 383 367 351 335 319 303 287 271 255 239 223 207 191 175 159 143 127 111 95 79 63 47 31 15

#0  doadump () at pcpu.h:165
165		__asm __volatile("movl %%fs:0,%0" : "=r" (td));
(kgdb) #0  doadump () at pcpu.h:165
#1  0xc0666d7a in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:409
#2  0xc0667010 in panic (fmt=0xc08cbc5d "%s")
    at /usr/src/sys/kern/kern_shutdown.c:565
#3  0xc0876264 in trap_fatal (frame=0xe8d4bb90, eva=3909787776)
    at /usr/src/sys/i386/i386/trap.c:836
#4  0xc0875fcb in trap_pfault (frame=0xe8d4bb90, usermode=0, eva=3909787776)
    at /usr/src/sys/i386/i386/trap.c:744
#5  0xc0875c09 in trap (frame=
      {tf_fs = -1066663928, tf_es = -388759512, tf_ds = -388759512, tf_edi = 1, tf_esi = -919924544, tf_ebp = -388711460, tf_isp = -388711492, tf_ebx = 32, tf_edx = -1037975880, tf_ecx = 134619136, tf_eax = -385179648, tf_trapno = 12, tf_err = 0, tf_eip = -1064890545, tf_cs = 32, tf_eflags = 66050, tf_esp = 134512640, tf_ss = 1673049125}) at /usr/src/sys/i386/i386/trap.c:434
---Type <return> to continue, or q <return> to quit---#6  0xc08643ca in calltrap () at /usr/src/sys/i386/i386/exception.s:139
#7  0xc0870f4f in pmap_allocpte (pmap=0xc92b10c0, va=3909787648, flags=1)
    at /usr/src/sys/i386/i386/pmap.c:1188
#8  0xc087291d in pmap_copy (dst_pmap=0xc92b10c0, src_pmap=0xc6ed4310, 
    dst_addr=134512640, len=106496, src_addr=134512640)
    at /usr/src/sys/i386/i386/pmap.c:2359
#9  0xc07d6f14 in vm_map_copy_entry (src_map=0xc6ed4250, dst_map=0xc92b1000, 
    src_entry=0xc69f250c, dst_entry=0xc69a8b6c)
    at /usr/src/sys/vm/vm_map.c:2499
#10 0xc07d720e in vmspace_fork (vm1=0xc6ed4250)
    at /usr/src/sys/vm/vm_map.c:2654
#11 0xc07d2e4b in vm_forkproc (td=0xc6ad6480, p2=0xc935b000, td2=0xc930f480, 
    flags=20) at /usr/src/sys/vm/vm_glue.c:540
#12 0xc0650d6b in fork1 (td=0xc6ad6480, flags=20, pages=0, procp=0xe8d4bcd4)
    at /usr/src/sys/kern/kern_fork.c:659
#13 0xc064fb24 in fork (td=0xc6ad6480, uap=0xe8d4bd04)
    at /usr/src/sys/kern/kern_fork.c:96
#14 0xc087657b in syscall (frame=
      {tf_fs = 59, tf_es = 59, tf_ds = 59, tf_edi = 0, tf_esi = 134643712, tf_ebp = -1077941272, tf_isp = -388711068, tf_ebx = 134643712, tf_edx = 0, tf_ecx = -1, tf_eax = 2, tf_trapno = 12, tf_err = 2, tf_eip = 672392747, tf_cs = 51, tf_eflags = 582, tf_esp = -1077941300, tf_ss = 59})
    at /usr/src/sys/i386/i386/trap.c:981
---Type <return> to continue, or q <return> to quit---#15 0xc086441f in Xint0x80_syscall () at /usr/src/sys/i386/i386/exception.s:200
#16 0x00000033 in ?? ()
Previous frame inner to this frame (corrupt stack?)
(kgdb) 
# ^D
Script done on Sun Aug  6 19:25:13 2006
--
John Stalker
University of Dublin, Trinity College
School of Mathematics


More information about the freebsd-stable mailing list