From owner-freebsd-stable@FreeBSD.ORG  Sun Oct 14 12:37:26 2007
Return-Path: <owner-freebsd-stable@FreeBSD.ORG>
Delivered-To: stable@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 354B316A41A
	for <stable@freebsd.org>; Sun, 14 Oct 2007 12:37:26 +0000 (UTC)
	(envelope-from kris@FreeBSD.org)
Received: from weak.local (hub.freebsd.org [IPv6:2001:4f8:fff6::36])
	by mx1.freebsd.org (Postfix) with ESMTP id 65FED13C48D;
	Sun, 14 Oct 2007 12:37:25 +0000 (UTC)
	(envelope-from kris@FreeBSD.org)
Message-ID: <47120D83.1010703@FreeBSD.org>
Date: Sun, 14 Oct 2007 14:37:23 +0200
From: Kris Kennaway <kris@FreeBSD.org>
User-Agent: Thunderbird 2.0.0.6 (Macintosh/20070728)
MIME-Version: 1.0
To: Esa Karkkainen <ejk@iki.fi>
References: <20071004165755.GA1049@pp.htv.fi>
In-Reply-To: <20071004165755.GA1049@pp.htv.fi>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Cc: stable@freebsd.org
Subject: Re: Reproducable, possibly NFS related,
	fatal double fault in 6.2-R-p7
X-BeenThere: freebsd-stable@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Production branch of FreeBSD source code <freebsd-stable.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>, 
	<mailto:freebsd-stable-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-stable>
List-Post: <mailto:freebsd-stable@freebsd.org>
List-Help: <mailto:freebsd-stable-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 14 Oct 2007 12:37:26 -0000

Esa Karkkainen wrote:
> 	I get "Fatal double fault" error when writing to a filesystem
> mounted from NFS server.
> 
> 	Both NFS server and client are running 6.2-RELEASE-p7.
> 
> 	I've attached dmesg from client and kernel config from server
> and client.
> 
> 	Both have same these NFS options in /etc/rc.conf
> 
> rpcbind_enable="YES"
> nfs_server_enable="YES"
> nfs_client_enable="YES"
> nfs_reserved_port_only="YES"
> rpc_lockd_enable="YES"
> rpc_statd_enable="YES" 
> 
> 	I have three kernel crash dumps available.
> 
> 	The panic message is same in vmcore.0 and .1 
> 
> Fatal double fault:
> eip = 0xc0608015
> esp = 0xe3955000
> ebp = 0xe3955020
> panic: double fault
> 
> 	Panic message in vmcore.2 has different eip and ebp values.
> 
> Fatal double fault:
> eip = 0xc063242a
> esp = 0xe3955000
> ebp = 0xe3955008
> panic: double fault
> 
> 	And here is backtrace from vmcore.2, which is identical to
> backtrace found in vmcore.0 and vmcore.1.

Unfortunately the backtrace contains no information.

> # kgdb kernel.debug /home/crash/vmcore.2 
> Fatal double fault:
> eip = 0xc063242a

Can you look up these IPs in the kernel symbol table (see the developers 
handbook)?  This might give at least one clue, although I'm not sure it 
is relevant.

You might also update to RELENG_6, I think there was at least one bug 
fixed that might have caused such a thing.  Also try to rule out memory 
failure etc.

Kris