From owner-freebsd-stable@FreeBSD.ORG Mon May 2 12:29:29 2005 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 67E2316A4CE for ; Mon, 2 May 2005 12:29:29 +0000 (GMT) Received: from zproxy.gmail.com (zproxy.gmail.com [64.233.162.205]) by mx1.FreeBSD.org (Postfix) with ESMTP id 9DC5543D3F for ; Mon, 2 May 2005 12:29:28 +0000 (GMT) (envelope-from jameskamlyn@gmail.com) Received: by zproxy.gmail.com with SMTP id 40so2246528nzk for ; Mon, 02 May 2005 05:29:28 -0700 (PDT) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:reply-to:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition; b=WTh+wrfMjtVjyShrG5jMjaYUu2pMTH9jB18H3Gi5vPO5+PA5QZkrFDTmLRF5oovRRuXXO0wmTAbpdskg6Kja8YWKWackIH41t+yQzU4EAWj2+bnIV9NUd6IXZ/2TDDVkkGeZWnX/2cW3grF+3Khio0ehf8JNpuL9Ss+oogGEexY= Received: by 10.36.101.20 with SMTP id y20mr248131nzb; Mon, 02 May 2005 05:29:28 -0700 (PDT) Received: by 10.36.41.8 with HTTP; Mon, 2 May 2005 05:29:28 -0700 (PDT) Message-ID: Date: Mon, 2 May 2005 13:29:28 +0100 From: James Kamlyn To: stable@freebsd.org Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline Subject: Fatal trap on boot with RELENG_5 X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: James Kamlyn List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 02 May 2005 12:29:29 -0000 Hi, I'm getting a fatal trap shortly after boot on an up to date 5.4-STABLE box that had previously run 4.11-STABLE flawlessly. Without the debugging options in the kernel the box just locks up. For reference the motherboard is a Abit VH6. If you need any more details, please let me know. Regards, James. kernel trap 1 with interrupts disabled Fatal trap 1: privileged instruction fault while in kernel mode instruction pointer =3D 0x8:0xc04feae4 stack pointer =3D 0x10:0xdc4d9be8 frame pointer =3D 0x10:0xdc4d9bec code segment =3D base 0x0, limit 0xfffff, type 0x1b =3D DPL 0, pres 1, def32 1, gran 1 processor eflags =3D resume, IOPL =3D 0 current process =3D 11 (idle) [thread pid 11 tid 100003 ] Stopped at _mtx_unlock_spin_flags+0x30: cmpl $0xc06bc6e4,0(%ebx) db> wh Tracing pid 11 tid 100003 td 0xc19fd480 _mtx_unlock_spin_flags(c06eb9e0,0,c06890ab,68d,c06e8400) at _mtx_unlock_spin_flags+0x30 witness_lock_list_get(c06ed230,c19fd480,c06e8400,e3,dc4d9c44) at witness_lock_list_get+0x8d witness_lock(c06e8400,a,c0682572,e3,dc4d9cb8) at witness_lock+0xae _mtx_lock_spin_flags(c06e8400,2,c0682572,e3,dc4d9cb8) at _mtx_lock_spin_flags+0xa4 hardclock(dc4d9cb8) at hardclock+0x4a clkintr(dc4d9cb8) at clkintr+0x87 intr_execute_handlers(c06d89c0,dc4d9cb8,c19fcc5c,c04f4018,0) at intr_execute_handlers+0x91 atpic_handle_intr(0) at atpic_handle_intr+0x92 Xatpic_intr0() at Xatpic_intr0+0x20 --- interrupt, eip =3D 0xc0641ed5, esp =3D 0xdc4d9cfc, ebp =3D 0xdc4d9cfc -= -- cpu_idle_default(dc4d9d0c,c04f4041,dc4d9d24,c04f3e70,0) at cpu_idle_default= +0x5 cpu_idle(dc4d9d24,c04f3e70,0,dc4d9d38,0) at cpu_idle+0x1f idle_proc(0,dc4d9d38,0,c04f4018,0) at idle_proc+0x29 fork_exit(c04f4018,0,dc4d9d38) at fork_exit+0xa4 fork_trampoline() at fork_trampoline+0x8 --- trap 0x1, eip =3D 0, esp =3D 0xdc4d9d6c, ebp =3D 0 --- db> # kgdb kernel.debug /var/crash/vmcore.15=20 [GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"] GNU gdb 6.1.1 [FreeBSD] Copyright 2004 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you ar= e welcome to change it and/or distribute copies of it under certain condition= s. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "i386-marcel-freebsd". #0 doadump () at pcpu.h:160 160 pcpu.h: No such file or directory. in pcpu.h (kgdb) where #0 doadump () at pcpu.h:160 #1 0xc05064e0 in boot (howto=3D260) at /usr/src/sys/kern/kern_shutdown.c:4= 10 #2 0xc050678b in panic (fmt=3D0xc0673317 "from debugger") at /usr/src/sys/kern/kern_shutdown.c:566 #3 0xc0466c71 in db_panic (addr=3D-1068504348, have_addr=3D0, count=3D-1,= =20 modif=3D0xdc4d9a40 "") at /usr/src/sys/ddb/db_command.c:435 #4 0xc0466c08 in db_command (last_cmdp=3D0xc06dcda4, cmd_table=3D0x0,=20 aux_cmd_tablep=3D0xc06a7a3c, aux_cmd_tablep_end=3D0xc06a7a40) at /usr/src/sys/ddb/db_command.c:349 #5 0xc0466cd0 in db_command_loop () at /usr/src/sys/ddb/db_command.c:455 #6 0xc0468855 in db_trap (type=3D1, code=3D0) at /usr/src/sys/ddb/db_main.= c:221 #7 0xc051c736 in kdb_trap (type=3D1, code=3D0, tf=3D0xdc4d9ba8) at /usr/src/sys/kern/subr_kdb.c:468 #8 0xc064a7e5 in trap_fatal (frame=3D0xdc4d9ba8, eva=3D0) at /usr/src/sys/i386/i386/trap.c:812 #9 0xc064a39c in trap (frame=3D {tf_fs =3D 24, tf_es =3D -999423984, tf_ds =3D -1066532848, tf_edi = =3D -1066218188, tf_esi =3D 227, tf_ebp =3D -598893588, tf_isp =3D -598893612, tf_ebx =3D -1066485280, tf_edx =3D 1677, tf_ecx =3D -1066889045, tf_eax =3D -1046489984, tf_trapno =3D 1, tf_err =3D 0, tf_eip =3D - 1068504348, tf_cs =3D 8, tf_eflags =3D 65666, tf_esp =3D -1066336984, tf_ss =3D -598893560}) at /usr/src/sys/i386/i386/trap.c:622 #10 0xc063abfa in calltrap () at /usr/src/sys/i386/i386/exception.s:140 #11 0x00000018 in ?? () #12 0xc46e0010 in ?? () ---Type to continue, or q to quit--- #13 0xc06e0010 in default_fkeytab () #14 0xc072cd34 in __pcpu () #15 0x000000e3 in ?? () #16 0xdc4d9bec in ?? () #17 0xdc4d9bd4 in ?? () #18 0xc06eb9e0 in w_lock_list_free () #19 0x0000068d in ?? () #20 0xc06890ab in ?? () #21 0xc19fd480 in ?? () #22 0x00000001 in ?? () #23 0x00000000 in ?? () #24 0xc04feae4 in _mtx_unlock_spin_flags (m=3D0xc06eb9e0, opts=3D0, file=3D= 0x0,=20 line=3D0) at /usr/src/sys/kern/kern_mutex.c:387 #25 0xc0525f01 in witness_lock_list_get () at /usr/src/sys/kern/subr_witness.c:1677 #26 0xc0524f0a in witness_lock (lock=3D0xc06e8400, flags=3D0,=20 file=3D0xc0682572 "/usr/src/sys/kern/kern_clock.c", line=3D227) at /usr/src/sys/kern/subr_witness.c:990 #27 0xc04feaac in _mtx_lock_spin_flags (m=3D0xc06e8400, opts=3D2,=20 file=3D0xc0682572 "/usr/src/sys/kern/kern_clock.c", line=3D227) at /usr/src/sys/kern/kern_mutex.c:380 #28 0xc04e2c46 in hardclock (frame=3D0xdc4d9cb8) at /usr/src/sys/kern/kern_clock.c:227 #29 0xc064ceef in clkintr (frame=3D0xdc4d9cb8) ---Type to continue, or q to quit--- at /usr/src/sys/i386/isa/clock.c:191 #30 0xc063e42d in intr_execute_handlers (isrc=3D0xc06d89c0, iframe=3D0xdc4d= 9cb8) at /usr/src/sys/i386/i386/intr_machdep.c:201 #31 0xc064cd92 in atpic_handle_intr (iframe=3D {if_vec =3D 0, if_fs =3D 24, if_es =3D -598933488, if_ds =3D -1068564464, if_edi =3D 0, if_esi =3D -1068548072, if_ebp =3D -598893316, if_ebx =3D -1046492068, if_edx =3D -1066498048, if_ecx =3D 2, if_eax =3D 0, if_eip =3D -1067180331, if_cs =3D 8, if_eflags =3D 582, if_esp =3D -5 98893308, if_ss =3D -1067180297}) at /usr/src/sys/i386/isa/atpic.c:558 #32 0xc063ac90 in Xatpic_intr0 () at atpic_vector.s:70 #33 0x00000000 in ?? () #34 0x00000018 in ?? () #35 0xdc4d0010 in ?? () #36 0xc04f0010 in knote_alloc (waitok=3D-598893300) at uma.h:275 #37 0xc0641ef7 in cpu_idle () at /usr/src/sys/i386/i386/machdep.c:1135 #38 0xc04f4041 in idle_proc (dummy=3D0x0) at /usr/src/sys/kern/kern_idle.c:= 120 #39 0xc04f3e70 in fork_exit (callout=3D0xc04f4018 , arg=3D0x0,= =20 frame=3D0xdc4d9d38) at /usr/src/sys/kern/kern_fork.c:791 #40 0xc063ac5c in fork_trampoline () at /usr/src/sys/i386/i386/exception.s:= 209 (kgdb) list *0xc04feae4 0xc04feae4 is in _mtx_unlock_spin_flags (/usr/src/sys/kern/kern_mutex.c:388= ). 383 void 384 _mtx_unlock_spin_flags(struct mtx *m, int opts, const char *file, int line) 385 { 386 =20 387 MPASS(curthread !=3D NULL); 388 KASSERT(m->mtx_object.lo_class =3D=3D &lock_class_mtx_spin, 389 ("mtx_unlock_spin() of sleep mutex %s @ %s:%d", 390 m->mtx_object.lo_name, file, line)); 391 WITNESS_UNLOCK(&m->mtx_object, opts | LOP_EXCLUSIVE, file, line); 392 LOCK_LOG_LOCK("UNLOCK", &m->mtx_object, opts, m->mtx_recurse, file, (kgdb) KDB: debugger backends: ddb KDB: current backend: ddb Copyright (c) 1992-2005 The FreeBSD Project. Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 The Regents of the University of California. All rights reserved. FreeBSD 5.4-STABLE #1: Sun May 1 22:07:54 UTC 2005 root@ignite:/usr/obj/usr/src/sys/IGNITE WARNING: WITNESS option enabled, expect reduced performance. WARNING: DIAGNOSTIC option enabled, expect reduced performance. Timecounter "i8254" frequency 1193182 Hz quality 0 CPU: Intel Pentium III (935.47-MHz 686-class CPU) Origin =3D "GenuineIntel" Id =3D 0x686 Stepping =3D 6 Features=3D0x383f9ff real memory =3D 805240832 (767 MB) avail memory =3D 782434304 (746 MB) npx0: on motherboard npx0: INT 16 interface cpu0 on motherboard pcib0: pcibus 0 on motherboard pir0: on motherboard pci0: on pcib0 agp0: mem 0xd4000000-0xd4ffffff at device 0.0 on pci0 pcib1: at device 1.0 on pci0 pci1: on pcib1 pci1: at device 0.0 (no driver attached) isab0: at device 7.0 on pci0 isa0: on isab0 atapci0: port 0xe000-0xe00f,0x376,0x170-0x177,0x3f6,0x1f0-0x1f7 at device 7.1 on pci0 ata0: channel #0 on atapci0 ata1: channel #1 on atapci0 viapropm0: SMBus I/O base at 0x5000 viapropm0: SMBus I/O base at 0x5000 viapropm0: SMBus revision code 0x0 smbus0: on viapropm0 smb0: on smbus0 fxp0: port 0xec00-0xec1f mem 0xd7000000-0xd70fffff,0xd7100000-0xd7100fff irq 11 at device 15.0 on pci0 miibus0: on fxp0 inphy0: on miibus0 inphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto fxp0: Ethernet address: 00:08:c7:99:45:26 orm0: at iomem 0xc8000-0xc87ff,0xc0000-0xc7fff on isa0 atkbdc0: at port 0x64,0x60 on isa0 atkbd0: irq 1 on atkbdc0 kbd0 at atkbd0 fdc0: at port 0x3f0-0x3f5 irq 6 drq 2 on isa0 fd0: <1440-KB 3.5" drive> on fdc0 drive 0 ppc0: at port 0x378-0x37f irq 7 on isa0 ppc0: Generic chipset (EPP/NIBBLE) in COMPATIBLE mode ppbus0: on ppc0 lpt0: on ppbus0 lpt0: Interrupt-driven port ppi0: on ppbus0 sc0: at flags 0x100 on isa0 sc0: VGA <16 virtual consoles, flags=3D0x300> sio0 at port 0x3f8-0x3ff irq 4 flags 0x10 on isa0 sio0: type 16550A, console sio1 at port 0x2f8-0x2ff irq 3 on isa0 sio1: type 16550A vga0: at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0 unknown: can't assign resources (port) unknown: can't assign resources (port) unknown: can't assign resources (port) unknown: can't assign resources (port) unknown: can't assign resources (port) Timecounter "TSC" frequency 935465664 Hz quality 800 Timecounters tick every 10.000 msec Expensive timeout(9) function: 0xc0538004(0) 0.005552378 s ad0: 114473MB [232581/16/63] at ata0-master UDMA66