Kernel panic when kldunload acpi_video

Norberto Meijome freebsd at meijome.net
Tue Jan 15 15:55:08 PST 2008


Hi guys,
I am not sure if this is acpi related or due to other issues.

running latest FreeBSD (built yesterday from fresh sources :

FreeBSD ayiin.xxx.com.au 7.0-PRERELEASE FreeBSD 7.0-PRERELEASE #14: Wed Jan 16 01:38:57 EST 2008     root at ayiin.xxx.com.au:/usr/obj/usr/src/sys/AYIIN  i386

Hardware is Thinkpad z60m , 1.5 GB of RAM. dmesg (non verbose) is @ end of this mail

I had :

Id Refs Address    Size     Name
 1   30 0xc0400000 63b77c   kernel
 2    1 0xc0a3c000 84a0     linprocfs.ko
 3    3 0xc0a45000 28878    linux.ko
 4    1 0xc0a6e000 10328    if_iwi.ko
 5    1 0xc0a7f000 155c4    snd_hda.ko
 6    2 0xc0a95000 4a36c    sound.ko
 7    2 0xc0ae0000 6a184    acpi.ko
 8    1 0xc0b4b000 4ff4     acpi_ibm.ko
 9    1 0xc0b50000 2f338    iwi_ibss.ko
10    1 0xc0b80000 2f4b0    iwi_monitor.ko
11    1 0xc0bb0000 22c98    radeon.ko
12    2 0xc0bd3000 10e98    drm.ko
13    1 0xc4b22000 d000     ipfw.ko
14    1 0xccd23000 2000     rtc.ko

PLUS acpi_video.ko loaded in /boot/loader.conf.local.

doing a kldunload acpi_video would panic the kernel. Also happened in single user.

I have crash dumps, but unfortunately, i wiped the kernel.debug after starting a full clean rebuild of kernel + world for today's changes.

I don't know whether this problem happened before 7 - i only started loading acpi_video for a few weeks when I realised I couldn't change the brightness on the screen anymore when under X (works ok in a vconsole)

Anyway, I followed the steps in the handbook to get some info about the crash. I've included 2 crashes here, both caused with kldunload acpi_video:

[root at ayiin] [Wed Jan 16 10:08:47 2008]
/usr/obj/usr/src/sys/AYIINESC[0m^B
ESCkESC\# ^Gkgdb kernel.debug /var/crash/vmc^Gore.8
kgdb: kvm_nlist(_stopped_cpus): 
kgdb: kvm_nlist(_stoppcbs): 
[GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"]
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd".

Unread portion of the kernel message buffer:


Fatal trap 12: page fault while in kernel mode
fault virtual address   = 0x10
fault code              = supervisor read, page not present
instruction pointer     = 0x20:0xc0ae1889
stack pointer           = 0x28:0xf384fb4c
frame pointer           = 0x28:0xf384fb58
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, def32 1, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 2395 (kldunload)
trap number             = 12
panic: page fault
Uptime: 3m30s
Physical memory: 1526 MB
Dumping 283 MB: 268 252 236 220 204 188 172 156 140 124 108 92 76 60 44 28 12

#0  doadump () at pcpu.h:195
195             __asm __volatile("movl %%fs:0,%0" : "=r" (td));
(kgdb) list *0xc0ae1889
No source file for address 0xc0ae1889.
(kgdb) backtrace
#0  doadump () at pcpu.h:195
#1  0xc05f17d3 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:409
#2  0xc05f19d4 in panic (fmt=Variable "fmt" is not available.
) at /usr/src/sys/kern/kern_shutdown.c:563
#3  0xc086d8bc in trap_fatal (frame=0xf384fb0c, eva=16)
    at /usr/src/sys/i386/i386/trap.c:899
#4  0xc086db2b in trap_pfault (frame=0xf384fb0c, usermode=0, eva=16)
    at /usr/src/sys/i386/i386/trap.c:812
#5  0xc086e4f6 in trap (frame=0xf384fb0c) at /usr/src/sys/i386/i386/trap.c:490
#6  0xc085720b in calltrap () at /usr/src/sys/i386/i386/exception.s:139
#7  0xc0ae1889 in ?? ()
Previous frame inner to this frame (corrupt stack?)
(kgdb) ^M
[root at ayiin] [Wed Jan 16 10:12:15 2008]
/usr/obj/usr/src/sys/AYIINESC[0m^B
ESCkESC\# ESC[Kkgdb kernel.debug /var/crash/vmcore.7
kgdb: kvm_nlist(_stopped_cpus): 
kgdb: kvm_nlist(_stoppcbs): 
[GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"]
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd".

Unread portion of the kernel message buffer:


Fatal trap 12: page fault while in kernel mode
fault virtual address   = 0x10
fault code              = supervisor read, page not present
instruction pointer     = 0x20:0xc0ae1889
stack pointer           = 0x28:0xf37b8b4c
frame pointer           = 0x28:0xf37b8b58
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, def32 1, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 23712 (kldunload)
trap number             = 12
panic: page fault
Uptime: 16m49s
Physical memory: 1526 MB
Dumping 311 MB: (CTRL-C to abort)  296 280 264 248 232 216 200 184 168 152 136 120 104 88 72 56 40 24 8

#0  doadump () at pcpu.h:195
195             __asm __volatile("movl %%fs:0,%0" : "=r" (td));
(kgdb) bt
#0  doadump () at pcpu.h:195
#1  0xc05f17d3 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:409
#2  0xc05f19d4 in panic (fmt=Variable "fmt" is not available.
) at /usr/src/sys/kern/kern_shutdown.c:563
#3  0xc086d8bc in trap_fatal (frame=0xf37b8b0c, eva=16)
    at /usr/src/sys/i386/i386/trap.c:899
#4  0xc086db2b in trap_pfault (frame=0xf37b8b0c, usermode=0, eva=16)
    at /usr/src/sys/i386/i386/trap.c:812
#5  0xc086e4f6 in trap (frame=0xf37b8b0c) at /usr/src/sys/i386/i386/trap.c:490
#6  0xc085720b in calltrap () at /usr/src/sys/i386/i386/exception.s:139
#7  0xc0ae1889 in ?? ()
Previous frame inner to this frame (corrupt stack?)
(kgdb) list
139             call    trap
140             add     $4, %esp
141             
142             /*
143              * Return via doreti to handle ASTs.
144              */
145             MEXITCOUNT
146             jmp     doreti
147     
148     /*
(kgdb) ^M

Please let me know if you need my ASL and other ACPI related info.

cheers,
PS : dmesg @ end...
_________________________
{Beto|Norberto|Numard} Meijome

Quantum Logic Chicken:
  The chicken is distributed probabalistically on all sides of the
  road until you observe it on the side of your course.

I speak for myself, not my employer. Contents may be hot. Slippery when wet. Reading disclaimers makes you go blind. Writing them is worse. You have been Warned.

Copyright (c) 1992-2008 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
	The Regents of the University of California. All rights reserved.
FreeBSD is a registered trademark of The FreeBSD Foundation.
FreeBSD 7.0-PRERELEASE #14: Wed Jan 16 01:38:57 EST 2008
    root at ayiin.xxxxx.com.au:/usr/obj/usr/src/sys/AYIIN
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: Intel(R) Pentium(R) M processor 2.00GHz (1995.02-MHz 686-class CPU)
  Origin = "GenuineIntel"  Id = 0x6d8  Stepping = 8
  Features=0xafe9fbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,TM,PBE>
  Features2=0x180<EST,TM2>
real memory  = 1609433088 (1534 MB)
avail memory = 1567571968 (1494 MB)
ACPI APIC Table: <IBM    TP-77   >
ACPI Warning (tbfadt-0505): Optional field "Gpe1Block" has zero address or length:        0    102C/0 [20070320]
ioapic0: Changing APIC ID to 1
ioapic0 <Version 2.0> irqs 0-23 on motherboard
kbd1 at kbdmux0
acpi0: <IBM TP-77> on motherboard
acpi0: [ITHREAD]
acpi_ec0: <Embedded Controller: GPE 0x1c, ECDT> port 0x62,0x66 on acpi0
acpi0: Power Button (fixed)
acpi0: reservation of 0, a0000 (3) failed
acpi0: reservation of 100000, 5ff00000 (3) failed
Timecounter "ACPI-safe" frequency 3579545 Hz quality 850
acpi_timer0: <24-bit timer at 3.579545MHz> port 0x1008-0x100b on acpi0
cpu0: <ACPI CPU> on acpi0
est0: <Enhanced SpeedStep Frequency Control> on cpu0
p4tcc0: <CPU Frequency Thermal Control> on cpu0
acpi_lid0: <Control Method Lid Switch> on acpi0
acpi_button0: <Sleep Button> on acpi0
pcib0: <ACPI Host-PCI bridge> port 0xcf8-0xcff on acpi0
pci0: <ACPI PCI bus> on pcib0
pcib1: <ACPI PCI-PCI bridge> irq 16 at device 1.0 on pci0
pci1: <ACPI PCI bus> on pcib1
vgapci0: <VGA-compatible display> port 0x2000-0x20ff mem 0xc8000000-0xcfffffff,0xb0100000-0xb010ffff irq 16 at device 0.0 on pci1
drm0: <ATI Radeon Mobility X600 M24> on vgapci0
info: [drm] Initialized radeon 1.25.0 20060524
pcm0: <Intel 82801F High Definition Audio Controller> mem 0xb0000000-0xb0003fff irq 16 at device 27.0 on pci0
pcm0: [ITHREAD]
pcib2: <ACPI PCI-PCI bridge> irq 20 at device 28.0 on pci0
pci2: <ACPI PCI bus> on pcib2
bge0: <Broadcom NetXtreme Gigabit Ethernet Controller, ASIC rev. 0x4101> mem 0xb0200000-0xb020ffff irq 16 at device 0.0 on pci2
miibus0: <MII bus> on bge0
brgphy0: <BCM5750 10/100/1000baseTX PHY> PHY 1 on miibus0
brgphy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-FDX, auto
bge0: Ethernet address: 00:16:36:29:e1:36
bge0: [ITHREAD]
pcib3: <ACPI PCI-PCI bridge> irq 21 at device 28.1 on pci0
pci3: <ACPI PCI bus> on pcib3
pcib4: <ACPI PCI-PCI bridge> irq 22 at device 28.2 on pci0
pci11: <ACPI PCI bus> on pcib4
pcib5: <ACPI PCI-PCI bridge> irq 23 at device 28.3 on pci0
pci19: <ACPI PCI bus> on pcib5
uhci0: <Intel 82801FB/FR/FW/FRW (ICH6) USB controller USB-A> port 0x1800-0x181f irq 16 at device 29.0 on pci0
uhci0: [GIANT-LOCKED]
uhci0: [ITHREAD]
usb0: <Intel 82801FB/FR/FW/FRW (ICH6) USB controller USB-A> on uhci0
usb0: USB revision 1.0
uhub0: <Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1> on usb0
uhub0: 2 ports with 2 removable, self powered
uhci1: <Intel 82801FB/FR/FW/FRW (ICH6) USB controller USB-B> port 0x1820-0x183f irq 17 at device 29.1 on pci0
uhci1: [GIANT-LOCKED]
uhci1: [ITHREAD]
usb1: <Intel 82801FB/FR/FW/FRW (ICH6) USB controller USB-B> on uhci1
usb1: USB revision 1.0
uhub1: <Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1> on usb1
uhub1: 2 ports with 2 removable, self powered
uhci2: <Intel 82801FB/FR/FW/FRW (ICH6) USB controller USB-C> port 0x1840-0x185f irq 18 at device 29.2 on pci0
uhci2: [GIANT-LOCKED]
uhci2: [ITHREAD]
usb2: <Intel 82801FB/FR/FW/FRW (ICH6) USB controller USB-C> on uhci2
usb2: USB revision 1.0
uhub2: <Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1> on usb2
uhub2: 2 ports with 2 removable, self powered
uhci3: <Intel 82801FB/FR/FW/FRW (ICH6) USB controller USB-D> port 0x1860-0x187f irq 19 at device 29.3 on pci0
uhci3: [GIANT-LOCKED]
uhci3: [ITHREAD]
usb3: <Intel 82801FB/FR/FW/FRW (ICH6) USB controller USB-D> on uhci3
usb3: USB revision 1.0
uhub3: <Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1> on usb3
uhub3: 2 ports with 2 removable, self powered
ehci0: <Intel 82801FB (ICH6) USB 2.0 controller> mem 0xb0004000-0xb00043ff irq 19 at device 29.7 on pci0
ehci0: [GIANT-LOCKED]
ehci0: [ITHREAD]
usb4: EHCI version 1.0
usb4: companion controllers, 2 ports each: usb0 usb1 usb2 usb3
usb4: <Intel 82801FB (ICH6) USB 2.0 controller> on ehci0
usb4: USB revision 2.0
uhub4: <Intel EHCI root hub, class 9/0, rev 2.00/1.00, addr 1> on usb4
uhub4: 8 ports with 8 removable, self powered
pcib6: <ACPI PCI-PCI bridge> at device 30.0 on pci0
pci20: <ACPI PCI bus> on pcib6
cbb0: <RF5C476 PCI-CardBus Bridge> mem 0xc0000000-0xc0000fff irq 16 at device 0.0 on pci20
cardbus0: <CardBus bus> on cbb0
pccard0: <16-bit PCCard bus> on cbb0
cbb0: [ITHREAD]
fwohci0: <Ricoh R5C552> mem 0xc0001000-0xc00017ff irq 17 at device 0.1 on pci20
fwohci0: [FILTER]
fwohci0: OHCI version 1.10 (ROM=0)
fwohci0: No. of Isochronous channels is 4.
fwohci0: EUI64 00:06:1b:00:20:22:73:c2
fwohci0: Phy 1394a available S400, 2 ports.
fwohci0: Link S400, max_rec 2048 bytes.
firewire0: <IEEE1394(FireWire) bus> on fwohci0
sbp0: <SBP-2/SCSI over FireWire> on firewire0
dcons_crom0: <dcons configuration ROM> on firewire0
dcons_crom0: bus_addr 0x1164000
fwe0: <Ethernet over FireWire> on firewire0
if_fwe0: Fake Ethernet address: 02:06:1b:22:73:c2
fwe0: Ethernet address: 02:06:1b:22:73:c2
fwip0: <IP over FireWire> on firewire0
fwip0: Firewire address: 00:06:1b:00:20:22:73:c2 @ 0xfffe00000000, S400, maxrec 2048
fwohci0: Initiate bus reset
fwohci0: BUS reset
fwohci0: node_id=0xc800ffc0, gen=1, CYCLEMASTER mode
pci20: <base peripheral> at device 0.2 (no driver attached)
pci20: <base peripheral> at device 0.3 (no driver attached)
iwi0: <Intel(R) PRO/Wireless 2915ABG> mem 0xc0002000-0xc0002fff irq 21 at device 2.0 on pci20
iwi0: Ethernet address: 00:13:ce:cc:a8:7a
iwi0: [ITHREAD]
isab0: <PCI-ISA bridge> at device 31.0 on pci0
isa0: <ISA bus> on isab0
atapci0: <Intel ICH6M SATA150 controller> port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0x1880-0x188f at device 31.2 on pci0
ata0: <ATA channel 0> on atapci0
ata0: [ITHREAD]
ata1: <ATA channel 1> on atapci0
ata1: [ITHREAD]
pci0: <serial bus, SMBus> at device 31.3 (no driver attached)
acpi_tz0: <Thermal Zone> on acpi0
atkbdc0: <Keyboard controller (i8042)> port 0x60,0x64 irq 1 on acpi0
atkbd0: <AT Keyboard> irq 1 on atkbdc0
kbd0 at atkbd0
atkbd0: [GIANT-LOCKED]
atkbd0: [ITHREAD]
psm0: <PS/2 Mouse> irq 12 on atkbdc0
psm0: [GIANT-LOCKED]
psm0: [ITHREAD]
psm0: model Generic PS/2 mouse, device ID 0
sio0: <Generic IRDA-compatible device> port 0x2f8-0x2ff irq 3 drq 3 flags 0x10 on acpi0
sio0: type 16550A
sio0: [FILTER]
battery0: <ACPI Control Method Battery> on acpi0
acpi_acad0: <AC Adapter> on acpi0
acpi_ibm0: <IBM ThinkPad ACPI Extras> on acpi0
cryptosoft0: <software crypto> on motherboard
pmtimer0 on isa0
orm0: <ISA Option ROMs> at iomem 0xc0000-0xcffff,0xd1800-0xd27ff,0xdc000-0xdffff,0xe0000-0xeffff pnpid ORM0000 on isa0
sc0: <System console> at flags 0x100 on isa0
sc0: VGA <16 virtual consoles, flags=0x300>
vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
ucom0: <vendor 0x067b product 0x2303, class 0/0, rev 1.10/2.02, addr 2> on uhub0
ums0: <Microsoft Microsoft 3-Button Mouse with IntelliEye(TM), class 0/0, rev 1.10/3.00, addr 2> on uhub1
ums0: 3 buttons and Z dir.
ugen0: <STMicroelectronics Biometric Coprocessor, class 0/0, rev 1.00/0.01, addr 2> on uhub2
Timecounter "TSC" frequency 1995015224 Hz quality 800
Timecounters tick every 1.250 msec
Fast IPsec: Initialized Security Association Processing.
firewire0: 1 nodes, maxhop <= 0, cable IRM = 0 (me)
firewire0: bus manager 0 (me)
ad0: 95396MB <HTS541010G9SA00 MBZIC60H> at ata0-master SATA150
acd0: DVDR <MATSHITADVD-RAM UJ-830Sx/1.00> at ata1-master UDMA33
pcm0: <HDA Codec: Analog Devices AD1981HD>
pcm0: <HDA Driver Revision: 20071129_0050>
acd0: FAILURE - INQUIRY ILLEGAL REQUEST asc=0x24 ascq=0x00 
cd0 at ata1 bus 0 target 0 lun 0
cd0: <MATSHITA DVD-RAM UJ-830Sx 1.00> Removable CD-ROM SCSI-0 device 
cd0: 33.000MB/s transfers
cd0: Attempt to query device size failed: NOT READY, Medium not present
Trying to mount root from ufs:/dev/ad0s1a
Loading configuration files.
kernel dumps on /dev/ad0s1g
Entropy harvesting:
 interrupts
 ethernet
 point_to_point
 kickstart
.
swapon: adding /dev/ad0s1b as swap device
Starting file system checks:
/dev/ad0s1a: FILE SYSTEM CLEAN; SKIPPING CHECKS
/dev/ad0s1a: clean, 333052 free (1716 frags, 41417 blocks, 0.3% fragmentation)
/dev/ad0s1e: FILE SYSTEM CLEAN; SKIPPING CHECKS
/dev/ad0s1e: clean, 113639 free (135 frags, 14188 blocks, 0.0% fragmentation)
/dev/ad0s1f: FILE SYSTEM CLEAN; SKIPPING CHECKS
/dev/ad0s1f: clean, 11008500 free (180964 frags, 1353442 blocks, 0.4% fragmentation)
/dev/ad0s1d: FILE SYSTEM CLEAN; SKIPPING CHECKS
/dev/ad0s1d: clean, 1056584 free (4576 frags, 131501 blocks, 0.3% fragmentation)
Setting hostuuid: f1361401-4750-11cb-9867-96e843b1afff.
Setting hostid: 0x71df97f3.
Mounting local file systems:
.
Setting hostname: ayiin.xxxx.com.au.
net.inet6.ip6.auto_linklocal: 
1
 -> 
0

kern.ps_arg_cache_limit: 
256
 -> 
10000

hw.acpi.reset_video: 
0
 -> 
1

net.link.tap.user_open: 
0
 -> 
1

net.inet.ip.forwarding: 
0
 -> 
1

kern.ipc.shmmax: 
33554432
 -> 
67108864

kern.ipc.shmall: 
8192
 -> 
32768

dev.acpi_ibm.0.events: 
0
 -> 
1

dev.pcm.0.play.vchans: 
1
 -> 
10

dev.pcm.0.rec.vchans: 
1
 -> 
6

dev.pcm.0.polling: 
0
 -> 
1

debug.cpufreq.lowest: 
0
 -> 
932

hw.pci.do_power_nodriver: 
0
 -> 
3

hw.acpi.cpu.cx_lowest: 
C1
 -> 
C3

hw.acpi.thermal.user_override: 
0
 -> 
1

hw.acpi.thermal.polling_rate: 
10
 -> 
3

lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
	inet6 fe80::1%lo0 prefixlen 64 scopeid 0x5 
	inet6 ::1 prefixlen 128 
	inet 127.0.0.1 netmask 0xff000000 
Additional routing options:
 ignore ICMP redirect=YES
 log ICMP redirect=YES
 IP gateway=YES
.
Starting devd.
Starting ums0 moused:
.
ipfw2 (+ipv6) initialized, divert loadable, rule-based forwarding disabled, default to deny, logging disabled
Flushed all rules.
...


More information about the freebsd-stable mailing list