Reproducable, possibly NFS related, fatal double fault in 6.2-R-p7

[Chris H.]

Quoting Kris Kennaway <kris at freebsd.org>:

> Chris H. wrote:
>
-----8<----SNIP----8<----
>
> I think that document explains everything that is necessary, but if 
> you are unsure about something please feel free to ask.  Good luck :)
>
> Kris
>

Whooo Hooo! I crashed my server!
Whooo Hooo! it made a big mess in my /var/crash
and here are the results:

/var/crash/info.0
Dump header from device /dev/ad0s1b
  Architecture: i386
  Architecture Version: 2
  Dump Length: 536416256B (511 MB)
  Blocksize: 512
  Dumptime: Fri Nov  2 03:20:53 2007
  Hostname: ns1.1command.com
  Magic: FreeBSD Kernel Dump
  Version String: FreeBSD 6.2-RELEASE #0: Fri Jan 26 16:27:14 PST 2007
    root at ns1.1command.com:/usr/obj/usr/src/sys/NS1_01
  Panic String: double fault
  Dump Parity: 2079915865
  Bounds: 0
  Dump Status: good

/var/crash/bounds
1

backtrace of /var/crash/vmcore0
3:43am
Fri, 02 ns1# script /tmp/vmdump kgdb kernel.debug /var/crash/vmcore.0
Script started, output file is /tmp/vmdump
kgdb: kvm_nlist(_stopped_cpus):
kgdb: kvm_nlist(_stoppcbs):
[GDB will not be able to debug user-mode threads: 
/usr/lib/libthread_db.so: Unde
fined symbol "ps_pglobal_lookup"]
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd".

Unread portion of the kernel message buffer:

Fatal double fault:
eip = 0xc0667e49
esp = 0xd5694000
ebp = 0xd5694020
panic: double fault
Uptime: 5h39m36s
Dumping 511 MB (2 chunks)
  chunk 0: 1MB (160 pages) ... ok
  chunk 1: 511MB (130800 pages) 495 479 463 447 431 415 399 383 367 351 335 319
303 287 271 255 239 223 207 191 175 159 143 127 111 95 79 63 47 31 15

#0  doadump () at pcpu.h:165
165             __asm __volatile("movl %%fs:0,%0" : "=r" (td));
(kgdb)
(kgdb) list 0xc0667e49
Function "0xc0667e49" not defined.
(kgdb) list *0xc0667e49
0xc0667e49 is in uma_zfree_arg (/usr/src/sys/vm/uma_core.c:2270).
2265    #endif
2266            CTR2(KTR_UMA, "uma_zfree_arg thread %x zone %s", curthread,
2267                zone->uz_name);
2268
2269            if (zone->uz_dtor)
2270                    zone->uz_dtor(item, keg->uk_size, udata);
2271    #ifdef INVARIANTS
2272            ZONE_LOCK(zone);
2273            if (keg->uk_flags & UMA_ZONE_MALLOC)
2274                    uma_dbg_free(zone, udata, item);
(kgdb)
(kgdb) list *0xc0667e49
0xc0667e49 is in uma_zfree_arg (/usr/src/sys/vm/uma_core.c:2270).
2265    #endif
2266            CTR2(KTR_UMA, "uma_zfree_arg thread %x zone %s", curthread,
2267                zone->uz_name);
2268
2269            if (zone->uz_dtor)
2270                    zone->uz_dtor(item, keg->uk_size, udata);
2271    #ifdef INVARIANTS
2272            ZONE_LOCK(zone);
2273            if (keg->uk_flags & UMA_ZONE_MALLOC)
2274                    uma_dbg_free(zone, udata, item);
(kgdb) backtrace
#0  doadump () at pcpu.h:165
#1  0xc052a7aa in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:409
#2  0xc052aa40 in panic (fmt=0xc070e8e5 "double fault")
    at /usr/src/sys/kern/kern_shutdown.c:565
#3  0xc06bc82e in dblfault_handler () at /usr/src/sys/i386/i386/trap.c:866
#4  0x00000000 in ?? ()
(kgdb) quit

Script done, output file is /tmp/vmdump

/usr/obj/usr/src/sys/NS1_01
3:52am
Fri, 02 ns1#
############################################

Hope this helps.

--Chris

P.S.
Note to onlookers:
I would have produced this information months ago except for a preconceived
notion that it would be a difficult/time consuming task. D'OH! WRONG!
It is truly a *trivial* task. So /please/ give generously! :)



> _______________________________________________
> freebsd-stable at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-stable
> To unsubscribe, send any mail to "freebsd-stable-unsubscribe at freebsd.org"
>



-- 
panic: kernel trap (ignored)