kern/87791: Kernel crash when running df

[Desjardins, Kristian]

The following reply was made to PR kern/87791; it has been noted by GNATS.

From: "Desjardins, Kristian" <kdesjard at CCRS.NRCan.gc.ca>
To: "'bug-followup at FreeBSD.org'" <bug-followup at FreeBSD.org>
Cc:  
Subject: Re: kern/87791: Kernel crash when running df
Date: Tue, 25 Oct 2005 12:59:26 -0400

 /cdrom was mounted, ran sysinstall to look at packages, quit, and then did a
 ls /cdrom and it panic'd.
 
 --------------------
 
 test-a# kgdb /boot/kernel/kernel.debug /var/crash/vmcore.1
 [GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so:
 Undefined symb
 ol "ps_pglobal_lookup"]
 GNU gdb 6.1.1 [FreeBSD]
 Copyright 2004 Free Software Foundation, Inc.
 GDB is free software, covered by the GNU General Public License, and you are
 welcome to change it and/or distribute copies of it under certain
 conditions.
 Type "show copying" to see the conditions.
 There is absolutely no warranty for GDB.  Type "show warranty" for details.
 This GDB was configured as "i386-marcel-freebsd".
 
 Unread portion of the kernel message buffer:
 
 
 Fatal trap 12: page fault while in kernel mode
 fault virtual address   = 0x0
 fault code              = supervisor read, page not present
 instruction pointer     = 0x20:0xc05ff472
 stack pointer           = 0x28:0xcca12ad4
 frame pointer           = 0x28:0xcca12ae8
 code segment            = base 0x0, limit 0xfffff, type 0x1b
                         = DPL 0, pres 1, def32 1, gran 1
 processor eflags        = interrupt enabled, resume, IOPL = 0
 current process         = 4572 (ls)
 trap number             = 12
 panic: page fault
 Uptime: 1d4h53m56s
 Dumping 255 MB (2 chunks)
   chunk 0: 1MB (160 pages) ... ok
   chunk 1: 255MB (65182 pages) 239 223 207 191 175 159 143 127 111 95 79 63
 47 31 15
 
 #0  doadump () at pcpu.h:165
 165     pcpu.h: No such file or directory.
         in pcpu.h
 (kgdb) list *0xc05ff472
 0xc05ff472 is in g_io_request (/usr/src/sys/geom/geom_io.c:259).
 254                     KASSERT(bp->bio_length % cp->provider->sectorsize ==
 0,
 255                         ("wrong length %jd for sectorsize %u",
 256                         bp->bio_length, cp->provider->sectorsize));
 257             }
 258
 259             g_trace(G_T_BIO, "bio_request(%p) from %p(%s) to %p(%s) cmd
 %d",
 260                 bp, cp, cp->geom->name, pp, pp->name, bp->bio_cmd);
 261
 262             bp->bio_from = cp;
 263             bp->bio_to = pp;
 (kgdb) backtrace
 #0  doadump () at pcpu.h:165
 #1  0xc0637806 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:399
 #2  0xc0637a9c in panic (fmt=0xc084d766 "%s") at
 /usr/src/sys/kern/kern_shutdown.c:555
 #3  0xc0806e60 in trap_fatal (frame=0xcca12a94, eva=0)
     at /usr/src/sys/i386/i386/trap.c:831
 #4  0xc0806bcb in trap_pfault (frame=0xcca12a94, usermode=0, eva=0)
     at /usr/src/sys/i386/i386/trap.c:742
 #5  0xc0806809 in trap (frame=      {tf_fs = -1052114936, tf_es = 40, tf_ds
 = 40, tf_edi = -1043043520, tf_esi = 0, tf_e
 bp = -861852952, tf_isp = -861852992, tf_ebx = -1049503812, tf_edx = 2048,
 tf_ecx = 0, tf_
 eax = 1, tf_trapno = 12, tf_err = 0, tf_eip = -1067453326, tf_cs = 32,
 tf_eflags = 66182,
 tf_esp = 1, tf_ss = 0}) at /usr/src/sys/i386/i386/trap.c:432
 #6  0xc07f600a in calltrap () at /usr/src/sys/i386/i386/exception.s:139
 #7  0xc05ff472 in g_io_request (bp=0xc171d7bc, cp=0xc1d46b40)    at
 /usr/src/sys/geom/geom_io.c:259
 #8  0xc06019bd in g_vfs_strategy (bo=0x1, bp=0xc664cff0)    at
 /usr/src/sys/geom/geom_vfs.c:106
 #9  0xc06098fd in cd9660_strategy (ap=0x1)    at
 /usr/src/sys/isofs/cd9660/cd9660_vnops.c:755
 #10 0xc0816c79 in VOP_STRATEGY_APV (vop=0xc08bc420, a=0xcca12b3c) at
 vnode_if.c:1796
 #11 0xc06813fc in bufstrategy (bo=0xc21fad80, bp=0x1) at vnode_if.h:928
 #12 0xc067bd91 in breadn (vp=0xc21facc0, blkno=0, size=2048, rablkno=0x0,
 rabsize=0x0,    cnt=0, cred=0x0, bpp=0x1) at buf.h:415
 #13 0xc067bcd4 in bread (vp=0xc21facc0, blkno=0, size=2048, cred=0x0,
 bpp=0xcca12bc8)    at /usr/src/sys/kern/vfs_bio.c:719
 #14 0xc0606209 in cd9660_blkatoff (vp=0x800, offset=0, res=0x0,
 bpp=0xcca12c28)    at /usr/src/sys/isofs/cd9660/cd9660_lookup.c:406
 #15 0xc06093d6 in cd9660_readdir (ap=0xcca12c90)    at
 /usr/src/sys/isofs/cd9660/cd9660_vnops.c:513
 #16 0xc0816984 in VOP_READDIR_APV (vop=0x1, a=0x800) at vnode_if.c:1427
 #17 0xc06963e7 in getdirentries (td=0xc1608780, uap=0xcca12d04) at
 vnode_if.h:746
 #18 0xc0807177 in syscall (frame=      {tf_fs = 59, tf_es = 59, tf_ds = 59,
 tf_edi = 134557696, tf_esi = 2, tf_ebp = -10779
 42968, tf_isp = -861852316, tf_ebx = 672687332, tf_edx = 0, tf_ecx = 0,
 tf_eax = 196, tf_t
 rapno = 12, tf_err = 2, tf_eip = 672160371, tf_cs = 51, tf_eflags = 582,
 tf_esp = -1077943
 012, tf_ss = 59}) at /usr/src/sys/i386/i386/trap.c:976
 #19 0xc07f605f in Xint0x80_syscall () at
 /usr/src/sys/i386/i386/exception.s:200
 #20 0x00000033 in ?? ()
 Previous frame inner to this frame (corrupt stack?)