6.3-RELEASE panic

Petr Holub hopet at ics.muni.cz
Tue Feb 26 11:55:41 UTC 2008


Hi all,

I've encountered the panic on 6.3-RELEASE once again - this time with
prepared debug kernel, so here you go. It seems like the panic is usually
initiated when firefox exits. Let me know if any further information is 

Petr


GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain
conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd".

Unread portion of the kernel message buffer:


Fatal trap 12: page fault while in kernel mode
fault virtual address	= 0x9ef418
fault code		= supervisor read, page not present
instruction pointer	= 0x20:0xc07f2348
stack pointer	        = 0x28:0xea61cb08
frame pointer	        = 0x28:0xea61cb14
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, def32 1, gran 1
processor eflags	= interrupt enabled, resume, IOPL = 0
current process		= 1808 (firefox-bin)
trap number		= 12
panic: page fault
Uptime: 4d23h12m54s
Dumping 1023 MB (2 chunks)
  chunk 0: 1MB (159 pages) ... ok
  chunk 1: 1023MB (261760 pages) 1007 991 975 959 943 927 911 895 879 863
847 831 815 799 783 767 751 735 719 703 687 671 655 639 623 607 591 575
(CTRL-C to abort)  (CTRL-C to abort)  (CTRL-C to abort)  559 543 527 511 495
479 463 447 431 415 399 383 367 351 335 319 303 287 271 255 239 223 207 191
175 159 143 127 111 95 79 63 47 31 15

#0  doadump () at pcpu.h:165
	in pcpu.h
(kgdb) bt
#0  doadump () at pcpu.h:165
#1  0xc06a4ad6 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:409
#2  0xc06a4d6c in panic (fmt=0xc096ba63 "%s")
    at /usr/src/sys/kern/kern_shutdown.c:565
#3  0xc090d0d4 in trap_fatal (frame=0xea61cac8, eva=10417176)
    at /usr/src/sys/i386/i386/trap.c:838
#4  0xc090ce3b in trap_pfault (frame=0xea61cac8, usermode=0, eva=10417176)
    at /usr/src/sys/i386/i386/trap.c:745
#5  0xc090ca79 in trap (frame=
      {tf_fs = -1066532856, tf_es = -648871896, tf_ds = -949551064, tf_edi =
2590720, tf_esi = 0, tf_ebp = -362689772, tf_isp = -362689804, tf_ebx = 0,
tf_edx = 2590720, tf_ecx = 10417152, tf_eax = -981897076, tf_trapno = 12,
tf_err = 0, tf_eip = -1065409720, tf_cs = 32, tf_eflags = 2163206, tf_esp =
-981897076, tf_ss = 132}) at /usr/src/sys/i386/i386/trap.c:435
#6  0xc08f9f0a in calltrap () at /usr/src/sys/i386/i386/exception.s:139
#7  0xc07f2348 in pagedep_find (pagedephd=0xc579708c, ino=2590720, lbn=)
    at /usr/src/sys/ufs/ffs/ffs_softdep.c:1165
#8  0xc07f23ea in pagedep_lookup (ip=0xc771f7bc, lbn=0, flags=1, 
    pagedeppp=0xea61cb64) at /usr/src/sys/ufs/ffs/ffs_softdep.c:1204
#9  0xc07f620b in newdirrem (bp=0xd953e678, dp=0xc771f7bc, ip=0xc6736084, 
    isrmdir=0, prevdirremp=0xea61cb90)
    at /usr/src/sys/ufs/ffs/ffs_softdep.c:3301
#10 0xc07f5fc0 in softdep_setup_remove (bp=0xd953e678, dp=0xc771f7bc, 
    ip=0xc6736084, isrmdir=0) at /usr/src/sys/ufs/ffs/ffs_softdep.c:3230
#11 0xc0806bb6 in ufs_dirremove (dvp=0xc719b440, ip=0xc6736084, 
    flags=83918860, isrmdir=0) at /usr/src/sys/ufs/ufs/ufs_lookup.c:1020
#12 0xc0809b93 in ufs_remove (ap=0x278800)
    at /usr/src/sys/ufs/ufs/ufs_vnops.c:798
#13 0xc091e8b0 in VOP_REMOVE_APV (vop=0xc579708c, a=0xea61cc3c)
    at vnode_if.c:1077
#14 0xc070401f in kern_unlink (td=0xc7678480, 
    path=0xbc29288 <Address 0xbc29288 out of bounds>, pathseg=UIO_USERSPACE)
    at vnode_if.h:563
#15 0xc0703e8e in unlink (td=0xc7678480, uap=0xc579708c)
    at /usr/src/sys/kern/vfs_syscalls.c:1642
#16 0xc090d3eb in syscall (frame=
      {tf_fs = 134611003, tf_es = 134742075, tf_ds = -1078001605, tf_edi =
197300736, tf_esi = 17, tf_ebp = -1077950232, tf_isp = -362689180, tf_ebx =
673223176, tf_edx = 197300736, tf_ecx = 197300736, tf_eax = 10, tf_trapno =
0, tf_err = 2, tf_eip = 684230759, tf_cs = 51, tf_eflags = 2097810, tf_esp =
-1077950388, tf_ss = 59}) at /usr/src/sys/i386/i386/trap.c:984
#17 0xc08f9f5f in Xint0x80_syscall ()
    at /usr/src/sys/i386/i386/exception.s:200
#18 0x00000033 in ?? ()
(kgdb) bt full
#0  doadump () at pcpu.h:165
No locals.
#1  0xc06a4ad6 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:409
	first_buf_printf = 1
#2  0xc06a4d6c in panic (fmt=0xc096ba63 "%s")
    at /usr/src/sys/kern/kern_shutdown.c:565
	td = (struct thread *) 0xc7678480
	bootopt = 260
	newpanic = 0
	ap = 0xc7678480 "0t%ČŕzĺĹ\200'`Ç@t%Č\200'`ÇězĺĹ"
	buf = "page fault", '\0' <repeats 245 times>
#3  0xc090d0d4 in trap_fatal (frame=0xea61cac8, eva=10417176)
    at /usr/src/sys/i386/i386/trap.c:838
	code = 40
	ss = 40
	esp = 0
	type = 12
	softseg = {ssd_base = 0, ssd_limit = 1048575, ssd_type = 27, 
  ssd_dpl = 0, ssd_p = 1, ssd_xx = 4, ssd_xx1 = 3, ssd_def32 = 1, 
  ssd_gran = 1}
	msg = 0x0
#4  0xc090ce3b in trap_pfault (frame=0xea61cac8, usermode=0, eva=10417176)
    at /usr/src/sys/i386/i386/trap.c:745
	va = 10416128
	vm = (struct vmspace *) 0x0
	map = 0xc5de45c8
	rv = 1
	ftype = 1 '\001'
	td = (struct thread *) 0xc7678480
	p = (struct proc *) 0xc8257430
#5  0xc090ca79 in trap (frame=
      {tf_fs = -1066532856, tf_es = -648871896, tf_ds = -949551064, tf_edi =
2590720, tf_esi = 0, tf_ebp = -362689772, tf_isp = -362689804, tf_ebx = 0,
tf_edx = 2590720, tf_ecx = 10417152, tf_eax = -981897076, tf_trapno = 12,
tf_err = 0, tf_eip = -1065409720, tf_cs = 32, tf_eflags = 2163206, tf_esp =
-981897076, tf_ss = 132}) at /usr/src/sys/i386/i386/trap.c:435
	td = (struct thread *) 0xc7678480
	p = (struct proc *) 0xc8257430
	sticks = 3646154360
	type = 12
	i = 0
	ucode = 0
	code = 0
	eva = 10417176
#6  0xc08f9f0a in calltrap () at /usr/src/sys/i386/i386/exception.s:139
No locals.
#7  0xc07f2348 in pagedep_find (pagedephd=0xc579708c, ino=2590720, lbn=)
    at /usr/src/sys/ufs/ffs/ffs_softdep.c:1165
	pagedep = (struct pagedep *) 0x9ef400
#8  0xc07f23ea in pagedep_lookup (ip=0xc771f7bc, lbn=0, flags=1, 
    pagedeppp=0xea61cb64) at /usr/src/sys/ufs/ffs/ffs_softdep.c:1204
	pagedep = (struct pagedep *) 0xc9c4a8c0
	pagedephd = (struct pagedep_hashhead *) 0xc579708c
	mp = (struct mount *) 0xc58477c8
	ret = 132
	i = -981897076
#9  0xc07f620b in newdirrem (bp=0xd953e678, dp=0xc771f7bc, ip=0xc6736084, 
    isrmdir=0, prevdirremp=0xea61cb90)
    at /usr/src/sys/ufs/ffs/ffs_softdep.c:3301
	offset = 132
	lbn = (kgdb) q




More information about the freebsd-stable mailing list