amd64/131209: 7.1-STABLE amd64 crash

Roar Pettersen roar.pettersen at uib.no
Mon Feb 2 23:34:06 PST 2009


Hello John !

> Is your source tree out of date wrt your kernel?  The kernel messages clearly
> show a page fault, not a TSS fault as Xtss() would indicate.  Also, if
> vattr_null() was passed a NULL pointer, it should have faulted at the start
> of its routine rather than halfway through it.

Yes, forgot that I had done a buildworld and build kernel to get all new
patches installed.


No crash yet, but each time we do a "shutdown -r now" because the system 
get unstable/unusable after some hours (4-6), we now get a dump each time 
:

# kgdb kernel.debug /var/crash/vmcore.6
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you 
are
welcome to change it and/or distribute copies of it under certain 
conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for 
details.
This GDB was configured as "amd64-marcel-freebsd"...

Unread portion of the kernel message buffer:
<118>Feb  3 07:27:50 proxy-gw syslogd: exiting on signal 15
Waiting (max 60 seconds) for system process `vnlru' to stop...done
WaitSiynncing dgi s(kmsa,x  v6n0o dseesc ornedmsa)i nfionrg .s.y.st6e m 
process `syncer' to stop...5 1 2 2 1 1 0 0 0 done
Waiting (max 60 seconds) for system process `bufdaemon' to stop...done
All buffers synced.
Uptime: 7h8m11s


Fatal trap 12: page fault while in kernel mode
cpuid = 1; apic id = 01
fault virtual address   = 0x10
fault code              = supervisor read data, page not present
instruction pointer     = 0x8:0xffffffff8021d746
stack pointer           = 0x10:0xfffffffef7cf3b20
frame pointer           = 0x10:0x12000
code segment            = base 0x0, limit 0xfffff, type 0x1b
                         = DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 29 (irq257: bce1)
trap number             = 12
panic: page fault
cpuid = 1
Uptime: 7h8m11s
Physical memory: 4087 MB
Dumping 362 MB: 347 331 315 299 283 267 251 235 219 203 187 171 155 139 
123 107 91 75 59 43 27 11

#0  doadump () at pcpu.h:195
195             __asm __volatile("movq %%gs:0,%0" : "=r" (td));
(kgdb)
(kgdb) backtrace
#0  doadump () at pcpu.h:195
#1  0x0000000000000004 in ?? ()
#2  0xffffffff802fae39 in boot (howto=260) at 
/usr/src/sys/kern/kern_shutdown.c:418
#3  0xffffffff802fb242 in panic (fmt=0x104 <Address 0x104 out of bounds>)
     at /usr/src/sys/kern/kern_shutdown.c:574
#4  0xffffffff804fbd63 in trap_fatal (frame=0xffffff0001559000, 
eva=Variable "eva" is not available.
) at /usr/src/sys/amd64/amd64/trap.c:764
#5  0xffffffff804fc135 in trap_pfault (frame=0xfffffffef7cf3a70, 
usermode=0)
     at /usr/src/sys/amd64/amd64/trap.c:680
#6  0xffffffff804fca78 in trap (frame=0xfffffffef7cf3a70) at 
/usr/src/sys/amd64/amd64/trap.c:449
#7  0xffffffff804e24be in calltrap () at 
/usr/src/sys/amd64/amd64/exception.S:209
#8  0xffffffff8021d746 in bce_intr (xsc=Variable "xsc" is not available.
) at /usr/src/sys/dev/bce/if_bce.c:5748
#9  0xffffffff802db730 in ithread_loop (arg=0xffffff0001584080) at 
/usr/src/sys/kern/kern_intr.c:1088
#10 0xffffffff802d85d3 in fork_exit (callout=0xffffffff802db5c0 
<ithread_loop>, arg=0xffffff0001584080,
     frame=0xfffffffef7cf3c80) at /usr/src/sys/kern/kern_fork.c:804
#11 0xffffffff804e288e in fork_trampoline () at 
/usr/src/sys/amd64/amd64/exception.S:455
#12 0x0000000000000000 in ?? ()
#13 0x0000000000000000 in ?? ()
#14 0x0000000000000001 in ?? ()
#15 0x0000000000000000 in ?? ()
#16 0x0000000000000000 in ?? ()
#17 0x0000000000000000 in ?? ()
#18 0x0000000000000000 in ?? ()
#19 0x0000000000000000 in ?? ()
#20 0x0000000000000000 in ?? ()
#21 0x0000000000000000 in ?? ()
#22 0x0000000000000000 in ?? ()
#23 0x0000000000000000 in ?? ()
#24 0x0000000000000000 in ?? ()
#25 0x0000000000000000 in ?? ()
#26 0x0000000000000000 in ?? ()
#27 0x0000000000000000 in ?? ()
#28 0x0000000000000000 in ?? ()
#29 0x0000000000000000 in ?? ()
#30 0x0000000000000000 in ?? ()
#31 0x0000000000000000 in ?? ()
#32 0x0000000000000000 in ?? ()
#33 0x0000000000000000 in ?? ()
#34 0x0000000000000000 in ?? ()
#35 0x0000000000000000 in ?? ()
#36 0x00000000008b2000 in ?? ()
#37 0xffffffff80768fc0 in tdq_cpu ()
#38 0xffffffff80774bc0 in tdq_groups ()
#39 0xffffffff80774b40 in tdq_cpu ()
#40 0xffffff0001559000 in ?? ()
#41 0xffffffff80768340 in tdg_maxid ()
#42 0xfffffffef7cf36e8 in ?? ()
#43 0xffffff0001559000 in ?? ()
#44 0xffffffff8031be88 in sched_switch (td=0xffffffff802db5c0, 
newtd=0x800602040, flags=Variable "flags" is not available.
)
     at /usr/src/sys/kern/sched_ule.c:1938
#45 0x0000000000000000 in ?? ()
#46 0x0000000000000000 in ?? ()
#47 0x0000000000000000 in ?? ()
#48 0x0000000000000000 in ?? ()
#49 0x0000000000000000 in ?? ()
#50 0x0000000000000000 in ?? ()
#51 0x0000000000000000 in ?? ()
#52 0x0000000000000000 in ?? ()
#53 0x0000000000000000 in ?? ()
#54 0x0000000000000000 in ?? ()
#55 0x0000000000000000 in ?? ()
#56 0x0000000000000000 in ?? ()
#57 0x0000000000000000 in ?? ()
#58 0x0000000000000000 in ?? ()
#59 0x0000000000000000 in ?? ()
#60 0x0000000000000000 in ?? ()
#61 0x0000000000000000 in ?? ()
#62 0x0000000000000000 in ?? ()
#63 0x0000000000000000 in ?? ()
#64 0x0000000000000000 in ?? ()
#65 0x0000000000000000 in ?? ()
#66 0x0000000000000000 in ?? ()
#67 0x0000000000000000 in ?? ()
#68 0x0000000000000000 in ?? ()
#69 0x0000000000000000 in ?? ()
#70 0x0000000000000000 in ?? ()
#71 0x0000000000000000 in ?? ()
#72 0x0000000000000000 in ?? ()
#73 0x0000000000000000 in ?? ()
#74 0x0000000000000000 in ?? ()
---Type <return> to continue, or q <return> to quit---
#75 0x0000000000000000 in ?? ()
#76 0x0000000000000000 in ?? ()
#77 0x0000000000000000 in ?? ()
#78 0x0000000000000000 in ?? ()
#79 0x0000000000000000 in ?? ()
#80 0x0000000000000000 in ?? ()
#81 0x0000000000000000 in ?? ()
#82 0x0000000000000000 in ?? ()
#83 0x0000000000000000 in ?? ()
#84 0x0000000000000000 in ?? ()
#85 0x0000000000000000 in ?? ()
#86 0x0000000000000000 in ?? ()
#87 0x0000000000000000 in ?? ()
#88 0x0000000000000000 in ?? ()
#89 0x0000000000000000 in ?? ()
#90 0x0000000000000000 in ?? ()
#91 0x0000000000000000 in ?? ()
#92 0x0000000000000000 in ?? ()
#93 0x0000000000000000 in ?? ()
#94 0x0000000000000000 in ?? ()
#95 0x0000000000000000 in ?? ()
#96 0x0000000000000000 in ?? ()
#97 0x0000000000000000 in ?? ()
#98 0x0000000000000000 in ?? ()
#99 0x0000000000000000 in ?? ()
#100 0x0000000000000000 in ?? ()
#101 0x0000000000000000 in ?? ()
#102 0x0000000000000000 in ?? ()
#103 0x0000000000000000 in ?? ()
#104 0x0000000000000000 in ?? ()
#105 0x0000000000000000 in ?? ()
#106 0x0000000000000000 in ?? ()
#107 0x0000000000000000 in ?? ()
#108 0x0000000000000000 in ?? ()
#109 0x0000000000000000 in ?? ()
#110 0x0000000000000000 in ?? ()
#111 0x0000000000000000 in ?? ()
#112 0x0000000000000000 in ?? ()
Cannot access memory at address 0xfffffffef7cf4000



--
Med vennlig hilsen / Regards;

   Roar Pettersen
   Universitetet i Bergen -  The University of Bergen
   Nygardsgt. 5  -  N-5020 BERGEN  - Norway
   Tlf: +47 55 58 40 55  fax: +47 55 58 40 70
   roar.pettersen at it.uib.no - IT-Avd, UiB - http://www.uib.no


More information about the freebsd-amd64 mailing list