Fatal trap on boot with RELENG_5

James Kamlyn jameskamlyn at gmail.com
Mon May 2 05:29:29 PDT 2005


Hi,

I'm getting a fatal trap shortly after boot on an up to date
5.4-STABLE box that had previously run 4.11-STABLE flawlessly. Without
the debugging options in the kernel the box just locks up. For
reference the motherboard is a Abit VH6.

If you need any more details, please let me know.

Regards,

James.

kernel trap 1 with interrupts disabled


Fatal trap 1: privileged instruction fault while in kernel mode
instruction pointer     = 0x8:0xc04feae4
stack pointer           = 0x10:0xdc4d9be8
frame pointer           = 0x10:0xdc4d9bec
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, def32 1, gran 1
processor eflags        = resume, IOPL = 0
current process         = 11 (idle)
[thread pid 11 tid 100003 ]
Stopped at      _mtx_unlock_spin_flags+0x30:    cmpl    $0xc06bc6e4,0(%ebx)
db> wh
Tracing pid 11 tid 100003 td 0xc19fd480
_mtx_unlock_spin_flags(c06eb9e0,0,c06890ab,68d,c06e8400) at
_mtx_unlock_spin_flags+0x30
witness_lock_list_get(c06ed230,c19fd480,c06e8400,e3,dc4d9c44) at
witness_lock_list_get+0x8d
witness_lock(c06e8400,a,c0682572,e3,dc4d9cb8) at witness_lock+0xae
_mtx_lock_spin_flags(c06e8400,2,c0682572,e3,dc4d9cb8) at
_mtx_lock_spin_flags+0xa4
hardclock(dc4d9cb8) at hardclock+0x4a
clkintr(dc4d9cb8) at clkintr+0x87
intr_execute_handlers(c06d89c0,dc4d9cb8,c19fcc5c,c04f4018,0) at
intr_execute_handlers+0x91
atpic_handle_intr(0) at atpic_handle_intr+0x92
Xatpic_intr0() at Xatpic_intr0+0x20
--- interrupt, eip = 0xc0641ed5, esp = 0xdc4d9cfc, ebp = 0xdc4d9cfc ---
cpu_idle_default(dc4d9d0c,c04f4041,dc4d9d24,c04f3e70,0) at cpu_idle_default+0x5
cpu_idle(dc4d9d24,c04f3e70,0,dc4d9d38,0) at cpu_idle+0x1f
idle_proc(0,dc4d9d38,0,c04f4018,0) at idle_proc+0x29
fork_exit(c04f4018,0,dc4d9d38) at fork_exit+0xa4
fork_trampoline() at fork_trampoline+0x8
--- trap 0x1, eip = 0, esp = 0xdc4d9d6c, ebp = 0 ---
db>

# kgdb kernel.debug /var/crash/vmcore.15 
[GDB will not be able to debug user-mode threads:
/usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"]
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd".
#0  doadump () at pcpu.h:160
160     pcpu.h: No such file or directory.
        in pcpu.h
(kgdb) where
#0  doadump () at pcpu.h:160
#1  0xc05064e0 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:410
#2  0xc050678b in panic (fmt=0xc0673317 "from debugger")
    at /usr/src/sys/kern/kern_shutdown.c:566
#3  0xc0466c71 in db_panic (addr=-1068504348, have_addr=0, count=-1, 
    modif=0xdc4d9a40 "") at /usr/src/sys/ddb/db_command.c:435
#4  0xc0466c08 in db_command (last_cmdp=0xc06dcda4, cmd_table=0x0, 
    aux_cmd_tablep=0xc06a7a3c, aux_cmd_tablep_end=0xc06a7a40)
    at /usr/src/sys/ddb/db_command.c:349
#5  0xc0466cd0 in db_command_loop () at /usr/src/sys/ddb/db_command.c:455
#6  0xc0468855 in db_trap (type=1, code=0) at /usr/src/sys/ddb/db_main.c:221
#7  0xc051c736 in kdb_trap (type=1, code=0, tf=0xdc4d9ba8)
    at /usr/src/sys/kern/subr_kdb.c:468
#8  0xc064a7e5 in trap_fatal (frame=0xdc4d9ba8, eva=0)
    at /usr/src/sys/i386/i386/trap.c:812
#9  0xc064a39c in trap (frame=
      {tf_fs = 24, tf_es = -999423984, tf_ds = -1066532848, tf_edi =
-1066218188, tf_esi = 227, tf_ebp = -598893588, tf_isp = -598893612,
tf_ebx = -1066485280, tf_edx = 1677, tf_ecx = -1066889045, tf_eax =
-1046489984, tf_trapno = 1, tf_err = 0, tf_eip = -
1068504348, tf_cs = 8, tf_eflags = 65666, tf_esp = -1066336984, tf_ss
= -598893560}) at /usr/src/sys/i386/i386/trap.c:622
#10 0xc063abfa in calltrap () at /usr/src/sys/i386/i386/exception.s:140
#11 0x00000018 in ?? ()
#12 0xc46e0010 in ?? ()
---Type <return> to continue, or q <return> to quit---
#13 0xc06e0010 in default_fkeytab ()
#14 0xc072cd34 in __pcpu ()
#15 0x000000e3 in ?? ()
#16 0xdc4d9bec in ?? ()
#17 0xdc4d9bd4 in ?? ()
#18 0xc06eb9e0 in w_lock_list_free ()
#19 0x0000068d in ?? ()
#20 0xc06890ab in ?? ()
#21 0xc19fd480 in ?? ()
#22 0x00000001 in ?? ()
#23 0x00000000 in ?? ()
#24 0xc04feae4 in _mtx_unlock_spin_flags (m=0xc06eb9e0, opts=0, file=0x0, 
    line=0) at /usr/src/sys/kern/kern_mutex.c:387
#25 0xc0525f01 in witness_lock_list_get ()
    at /usr/src/sys/kern/subr_witness.c:1677
#26 0xc0524f0a in witness_lock (lock=0xc06e8400, flags=0, 
    file=0xc0682572 "/usr/src/sys/kern/kern_clock.c", line=227)
    at /usr/src/sys/kern/subr_witness.c:990
#27 0xc04feaac in _mtx_lock_spin_flags (m=0xc06e8400, opts=2, 
    file=0xc0682572 "/usr/src/sys/kern/kern_clock.c", line=227)
    at /usr/src/sys/kern/kern_mutex.c:380
#28 0xc04e2c46 in hardclock (frame=0xdc4d9cb8)
    at /usr/src/sys/kern/kern_clock.c:227
#29 0xc064ceef in clkintr (frame=0xdc4d9cb8)
---Type <return> to continue, or q <return> to quit---
    at /usr/src/sys/i386/isa/clock.c:191
#30 0xc063e42d in intr_execute_handlers (isrc=0xc06d89c0, iframe=0xdc4d9cb8)
    at /usr/src/sys/i386/i386/intr_machdep.c:201
#31 0xc064cd92 in atpic_handle_intr (iframe=
      {if_vec = 0, if_fs = 24, if_es = -598933488, if_ds =
-1068564464, if_edi = 0, if_esi = -1068548072, if_ebp = -598893316,
if_ebx = -1046492068, if_edx = -1066498048, if_ecx = 2, if_eax = 0,
if_eip = -1067180331, if_cs = 8, if_eflags = 582, if_esp = -5
98893308, if_ss = -1067180297})
    at /usr/src/sys/i386/isa/atpic.c:558
#32 0xc063ac90 in Xatpic_intr0 () at atpic_vector.s:70
#33 0x00000000 in ?? ()
#34 0x00000018 in ?? ()
#35 0xdc4d0010 in ?? ()
#36 0xc04f0010 in knote_alloc (waitok=-598893300) at uma.h:275
#37 0xc0641ef7 in cpu_idle () at /usr/src/sys/i386/i386/machdep.c:1135
#38 0xc04f4041 in idle_proc (dummy=0x0) at /usr/src/sys/kern/kern_idle.c:120
#39 0xc04f3e70 in fork_exit (callout=0xc04f4018 <idle_proc>, arg=0x0, 
    frame=0xdc4d9d38) at /usr/src/sys/kern/kern_fork.c:791
#40 0xc063ac5c in fork_trampoline () at /usr/src/sys/i386/i386/exception.s:209
(kgdb) list *0xc04feae4
0xc04feae4 is in _mtx_unlock_spin_flags (/usr/src/sys/kern/kern_mutex.c:388).
383     void
384     _mtx_unlock_spin_flags(struct mtx *m, int opts, const char
*file, int line)
385     {
386     
387             MPASS(curthread != NULL);
388             KASSERT(m->mtx_object.lo_class == &lock_class_mtx_spin,
389                 ("mtx_unlock_spin() of sleep mutex %s @ %s:%d",
390                 m->mtx_object.lo_name, file, line));
391             WITNESS_UNLOCK(&m->mtx_object, opts | LOP_EXCLUSIVE,
file, line);
392             LOCK_LOG_LOCK("UNLOCK", &m->mtx_object, opts,
m->mtx_recurse, file,
(kgdb)

KDB: debugger backends: ddb
KDB: current backend: ddb
Copyright (c) 1992-2005 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
        The Regents of the University of California. All rights reserved.
FreeBSD 5.4-STABLE #1: Sun May  1 22:07:54 UTC 2005
    root at ignite:/usr/obj/usr/src/sys/IGNITE
WARNING: WITNESS option enabled, expect reduced performance.
WARNING: DIAGNOSTIC option enabled, expect reduced performance.
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: Intel Pentium III (935.47-MHz 686-class CPU)
  Origin = "GenuineIntel"  Id = 0x686  Stepping = 6
  Features=0x383f9ff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR,SSE>
real memory  = 805240832 (767 MB)
avail memory = 782434304 (746 MB)
npx0: <math processor> on motherboard
npx0: INT 16 interface
cpu0 on motherboard
pcib0: <Host to PCI bridge> pcibus 0 on motherboard
pir0: <PCI Interrupt Routing Table: 7 Entries> on motherboard
pci0: <PCI bus> on pcib0
agp0: <VIA 82C691 (Apollo Pro) host to PCI bridge> mem
0xd4000000-0xd4ffffff at device 0.0 on pci0
pcib1: <PCI-PCI bridge> at device 1.0 on pci0
pci1: <PCI bus> on pcib1
pci1: <display, VGA> at device 0.0 (no driver attached)
isab0: <PCI-ISA bridge> at device 7.0 on pci0
isa0: <ISA bus> on isab0
atapci0: <VIA 82C686A UDMA66 controller> port
0xe000-0xe00f,0x376,0x170-0x177,0x3f6,0x1f0-0x1f7 at device 7.1 on
pci0
ata0: channel #0 on atapci0
ata1: channel #1 on atapci0
viapropm0: SMBus I/O base at 0x5000
viapropm0: SMBus I/O base at 0x5000
viapropm0: SMBus revision code 0x0
smbus0: <System Management Bus> on viapropm0
smb0: <SMBus generic I/O> on smbus0
fxp0: <Intel 82558 Pro/100 Ethernet> port 0xec00-0xec1f mem
0xd7000000-0xd70fffff,0xd7100000-0xd7100fff irq 11 at device 15.0 on
pci0
miibus0: <MII bus> on fxp0
inphy0: <i82555 10/100 media interface> on miibus0
inphy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
fxp0: Ethernet address: 00:08:c7:99:45:26
orm0: <ISA Option ROMs> at iomem 0xc8000-0xc87ff,0xc0000-0xc7fff on isa0
atkbdc0: <Keyboard controller (i8042)> at port 0x64,0x60 on isa0
atkbd0: <AT Keyboard> irq 1 on atkbdc0
kbd0 at atkbd0
fdc0: <Enhanced floppy controller> at port 0x3f0-0x3f5 irq 6 drq 2 on isa0
fd0: <1440-KB 3.5" drive> on fdc0 drive 0
ppc0: <Parallel port> at port 0x378-0x37f irq 7 on isa0
ppc0: Generic chipset (EPP/NIBBLE) in COMPATIBLE mode
ppbus0: <Parallel port bus> on ppc0
lpt0: <Printer> on ppbus0
lpt0: Interrupt-driven port
ppi0: <Parallel I/O> on ppbus0
sc0: <System console> at flags 0x100 on isa0
sc0: VGA <16 virtual consoles, flags=0x300>
sio0 at port 0x3f8-0x3ff irq 4 flags 0x10 on isa0
sio0: type 16550A, console
sio1 at port 0x2f8-0x2ff irq 3 on isa0
sio1: type 16550A
vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
unknown: <PNP0303> can't assign resources (port)
unknown: <PNP0700> can't assign resources (port)
unknown: <PNP0501> can't assign resources (port)
unknown: <PNP0501> can't assign resources (port)
unknown: <PNP0400> can't assign resources (port)
Timecounter "TSC" frequency 935465664 Hz quality 800
Timecounters tick every 10.000 msec
Expensive timeout(9) function: 0xc0538004(0) 0.005552378 s
ad0: 114473MB <ST3120026A/3.06> [232581/16/63] at ata0-master UDMA66


More information about the freebsd-stable mailing list