6.4-PRELEASE sporadically panicking with fatal trap 12

barbara barbara.xxx1975 at libero.it
Sat Oct 11 19:24:23 PDT 2008


> > barbara wrote:
> > > Hello,
> > > I'm running 6.4-PRELEASE, last built on 2008-10-05 with /usr/src updated on the same day.
> > > I had a panic that looks to me very similiar to the one described here (hence the subject): 
> > > http://lists.freebsd.org/pipermail/freebsd-stable/2008-September/045405.html
> > >
> > > What caught my curiosity is the message:
> > > 	
> > > 	Unread portion of the kernel message buffer:
> > >
> > > 	acd0: WARNING - TEST_UNIT_READY read data overrun 18>0
> > >
> > > 	kernel trap 12 with interrupts disabled
> > >
> > > I don't have atapicam built in the kernel and it wasn't loaded, and I'm pretty sure no media was inserted in my dvdrw unit since the last boot.
> > > The other report has a similar message too (acd1: WARNING - READ_TOC read data overrun 18>12)
> > >
> > >
> > > Here's the backtrace:
> > >   
> > Interesting.  I ran 6.3 for a bit before I changed over to 7.0.  Neither
> > 6.3 or 7.0 exhibited this problem.
> > 
> > I'm at 7.1 prerelease #4 now, and I'm using Fluxbox instead of Gnome. 
> > The system has been up six days with no problems.  I'll probably try
> > using Gnome again after 7.1 release is out.  There's also a patch to ATA
> > that I might try.  Or possibly I'll just wait for 7.1. :-)
> > 
> 
> Obviously I was confused when I wrote about atapicam, in fact the message is about acd0.
> Anyway I'm sure that no media was inserted during the whole uptime.
> I'm running both 6 and 7 stable and I've never seen this before too.
> 
> Few minutes ago, while cron was running, the system froze for a couple of minutes and the these lines was added to /var/log/messages:
> 
> 	acd0: WARNING - PREVENT_ALLOW taskqueue timeout - completing request directly
> 	acd0: WARNING - PREVENT_ALLOW freeing taskqueue zombie request
> 
> and again, no media was inserted.
> The only change I did in the last days was enabling powerd, I have no idea if this could be related.
> 

Here's another one, but it looks different.
Having no clue, I've restored the not enabled state of powerd for the moment.


# kgdb kernel.debug /var/crash/vmcore.3
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd"...

Unread portion of the kernel message buffer:
kernel trap 12 with interrupts disabled


Fatal trap 12: page fault while in kernel mode
cpuid = 0; apic id = 00
fault virtual address	= 0xca0a9228
fault code		= supervisor read, page not present
instruction pointer	= 0x20:0xc055d136
stack pointer	        = 0x28:0xe58f8c68
frame pointer	        = 0x28:0xe58f8ca8
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, def32 1, gran 1
processor eflags	= resume, IOPL = 0
current process		= 12 (swi4: clock sio)
trap number		= 12
panic: page fault
cpuid = 0
Uptime: 5h19m51s
Physical memory: 2031 MB
Dumping 282 MB: 267 (CTRL-C to abort)  251 235 219 203 187 (CTRL-C to abort)  171 155 139 123 107 91 75 59 43 27 11 (CTRL-C to abort) 

Reading symbols from /boot/kernel/linux.ko...done.
Loaded symbols for /boot/kernel/linux.ko
Reading symbols from /boot/modules/nvidia.ko...done.
Loaded symbols for /boot/modules/nvidia.ko
Reading symbols from /boot/kernel/acpi.ko...done.
Loaded symbols for /boot/kernel/acpi.ko
Reading symbols from /boot/kernel/linprocfs.ko...done.
Loaded symbols for /boot/kernel/linprocfs.ko
Reading symbols from /boot/kernel/logo_saver.ko...done.
Loaded symbols for /boot/kernel/logo_saver.ko
#0  doadump () at pcpu.h:165
165		__asm __volatile("movl %%fs:0,%0" : "=r" (td));
(kgdb) bt full
#0  doadump () at pcpu.h:165
No locals.
#1  0xc054d419 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:410
	first_buf_printf = 1
#2  0xc054d7e6 in panic (fmt=0xc0736da9 "%s") at /usr/src/sys/kern/kern_shutdown.c:566
	td = (struct thread *) 0xc6bea900
	bootopt = 260
	newpanic = 0
	ap = 0xc6bea900 "`\230ŸÆ\200ÝŸÆ"
	buf = "page fault", '\0' <repeats 245 times>
#3  0xc071822c in trap_fatal (frame=0xe58f8c28, eva=0) at /usr/src/sys/i386/i386/trap.c:838
	code = 40
	ss = 40
	esp = 0
	type = 12
	softseg = {ssd_base = 0, ssd_limit = 1048575, ssd_type = 27, ssd_dpl = 0, ssd_p = 1, ssd_xx = 0, ssd_xx1 = 0, 
  ssd_def32 = 1, ssd_gran = 1}
	msg = 0x0
#4  0xc07178e4 in trap (frame=
      {tf_fs = 8, tf_es = 40, tf_ds = 40, tf_edi = -960218240, tf_esi = 4, tf_ebp = -443577176, tf_isp = -443577260, tf_ebx = 0, tf_edx = -624430808, tf_ecx = -905276896, tf_eax = 19190235, tf_trapno = 12, tf_err = 0, tf_eip = -1068117706, tf_cs = 32, tf_eflags = 65538, tf_esp = 2, tf_ss = -1068092317}) at /usr/src/sys/i386/i386/trap.c:270
	td = (struct thread *) 0xc6bea900
	p = (struct proc *) 0xc6be9860
	sticks = 3851390008
	type = 12
	i = 0
	ucode = 0
	code = 0
	eva = 3389690408
#5  0xc06ffaaa in calltrap () at /usr/src/sys/i386/i386/exception.s:139
No locals.
#6  0xc055d136 in softclock (dummy=0x0) at /usr/src/sys/kern/kern_timeout.c:203
	c = (struct callout *) 0xca0a9220
	bucket = (struct callout_tailq *) 0xdac7f128
	curticks = 19190235
	steps = 0
	depth = 1
	mpcalls = 0
	mtxcalls = 0
	gcalls = 0
#7  0xc052fbcb in ithread_execute_handlers (p=0xc6be9860, ie=0xc6c43b80) at /usr/src/sys/kern/kern_intr.c:682
	ih = (struct intr_handler *) 0xc6c40dc0
	ihn = (struct intr_handler *) 0xc6dc6400
#8  0xc052fd27 in ithread_loop (arg=0xc6bc68b0) at /usr/src/sys/kern/kern_intr.c:766
	intr_event = (struct intr_thread *) 0xc6bc68b0
	ie = (struct intr_event *) 0xc6c43b80
	td = (struct thread *) 0xc6bea900
	p = (struct proc *) 0xc6be9860
#9  0xc052e4b0 in fork_exit (callout=0xc052fcc0 <ithread_loop>, arg=0x124d1db, frame=0x124d1db)
    at /usr/src/sys/kern/kern_fork.c:788
	p = (struct proc *) 0xc6be9860
	td = (struct thread *) 0xdac7f128
#10 0xc06ffb0c in fork_trampoline () at /usr/src/sys/i386/i386/exception.s:208
No locals.
(kgdb) up 6
#6  0xc055d136 in softclock (dummy=0x0) at /usr/src/sys/kern/kern_timeout.c:203
203				if (c->c_time != curticks) {
(kgdb) 
(kgdb) list
198			curticks = softticks;
199			bucket = &callwheel[curticks & callwheelmask];
200			c = TAILQ_FIRST(bucket);
201			while (c) {
202				depth++;
203				if (c->c_time != curticks) {
204					c = TAILQ_NEXT(c, c_links.tqe);
205					++steps;
206					if (steps >= MAX_SOFTCLOCK_STEPS) {
207						nextsoftcheck = c;
(kgdb) 
(kgdb) thread apply all bt

Thread 192 (Thread 100131):
#0  sched_switch (td=0xc6dd3900, newtd=0xc6dd3a80, flags=1) at /usr/src/sys/kern/sched_4bsd.c:959
#1  0xc0555eef in mi_switch (flags=1, newtd=0x0) at /usr/src/sys/kern/kern_synch.c:420
#2  0xc0573ff9 in sleepq_switch (wchan=0x0) at /usr/src/sys/kern/subr_sleepqueue.c:464
#3  0xc05741a1 in sleepq_wait_sig (wchan=0xc6dc5010) at /usr/src/sys/kern/subr_sleepqueue.c:560
#4  0xc055592e in msleep (ident=0xc6dc5010, mtx=0x0, priority=345, wmesg=0x0, timo=0) at /usr/src/sys/kern/kern_synch.c:209
#5  0xc058aeb9 in ttysleep (tp=0xc6dc5000, chan=0x0, pri=0, wmesg=0x0, timo=0) at /usr/src/sys/kern/tty.c:2786
#6  0xc0589348 in ttread (tp=0xc6dc5000, uio=0xe7444cb0, flag=0) at /usr/src/sys/kern/tty.c:1888
#7  0xc058e55e in ptsread (dev=0x0, uio=0x0, flag=0) at linedisc.h:100
#8  0xc05155ef in giant_read (dev=0xc7e05600, uio=0x0, ioflag=0) at /usr/src/sys/kern/kern_conf.c:346
#9  0xc04ea669 in devfs_read_f (fp=0xc73b1048, uio=0xe7444cb0, cred=0xc76d0500, flags=0, td=0xc6dd3900)
    at /usr/src/sys/fs/devfs/devfs_vnops.c:872
#10 0xc0578f0c in dofileread (td=0xc6dd3900, fd=0, fp=0xc73b1048, auio=0xe7444cb0, offset=Unhandled dwarf expression opcode 0x93
) at file.h:241
#11 0xc0578d20 in kern_readv (td=0xc6dd3900, fd=3, auio=0x0) at /usr/src/sys/kern/sys_generic.c:192
#12 0xc0578bdf in read (td=0x0, uap=0x0) at /usr/src/sys/kern/sys_generic.c:116
#13 0xc0718633 in syscall (frame=
      {tf_fs = 59, tf_es = 59, tf_ds = 59, tf_edi = 134596408, tf_esi = -1077941969, tf_ebp = -1077941992, tf_isp = -414954140, tf_ebx = 126, tf_edx = 0, tf_ecx = 0, tf_eax = 3, tf_trapno = 22, tf_err = 2, tf_eip = 672829719, tf_cs = 51, tf_eflags = 646, tf_esp = -1077942036, tf_ss = 59}) at /usr/src/sys/i386/i386/trap.c:984
#14 0xc06ffaff in Xint0x80_syscall () at /usr/src/sys/i386/i386/exception.s:200
#15 0x00000033 in ?? ()
Previous frame inner to this frame (corrupt stack?)
165		__asm __volatile("movl %%fs:0,%0" : "=r" (td));
(kgdb) quit




More information about the freebsd-stable mailing list