From owner-freebsd-questions@FreeBSD.ORG Fri Dec 23 17:36:43 2005 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id B1BD916A41F for ; Fri, 23 Dec 2005 17:36:43 +0000 (GMT) (envelope-from soman.abhijit@gmail.com) Received: from zproxy.gmail.com (zproxy.gmail.com [64.233.162.193]) by mx1.FreeBSD.org (Postfix) with ESMTP id 24C0643D5D for ; Fri, 23 Dec 2005 17:36:42 +0000 (GMT) (envelope-from soman.abhijit@gmail.com) Received: by zproxy.gmail.com with SMTP id q3so62429nzb for ; Fri, 23 Dec 2005 09:36:41 -0800 (PST) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=tc/gGd3BJmYhbo6cXp6ORvDe0dhcv5zzaZHEjSZZ3K7M5Bov0LxhJ1UolBo3Ow7zG4h82ocAe69BXQRSMv6zmnqj0Ma6jGqM/EmmuAFpDKZcHHrIfITyQrvEunmp/X1yIVD0aUjZq9p7uOHu/kZaydt9YA7gvy2ITu/2ccs/oMw= Received: by 10.36.194.20 with SMTP id r20mr183506nzf; Fri, 23 Dec 2005 09:36:41 -0800 (PST) Received: by 10.37.18.71 with HTTP; Fri, 23 Dec 2005 09:36:41 -0800 (PST) Message-ID: Date: Fri, 23 Dec 2005 23:06:41 +0530 From: Abhi To: freebsd-questions@freebsd.org In-Reply-To: <441x033m21.fsf@be-well.ilk.org> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline References: <441x033m21.fsf@be-well.ilk.org> Subject: Re: 6.0 Release kernel panic - page fault X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 23 Dec 2005 17:36:43 -0000 Hello, Thanks for your reply. Actually i experienced page faults mostly when browsing web mostly from linux opera. So i installed firefox from ports. It didnt cause any panic until yeserday, when it caused the crash. And after that system panic occured while booting. Well i don't know if a particular application is causing system panic but most panics occured when i was using net. Can you tell me if there are any other options for kernel configuration file which can make the debugging mor verbose? I only used -g option in my kernel config. I'm attaching another crash dump which occurred last night when i was browsing net. Greetings, Abhijit ------------ kernel dump Unread portion of the kernel message buffer: panic: clist reservation botch Uptime: 1h4m51s Dumping 510 MB (2 chunks) chunk 0: 1MB (159 pages) ... ok chunk 1: 510MB (130528 pages) 494 478 462 446 430 414 398 382 366 350 334= 318 302 286 270 254 238 222 206 190 174 158 142 126 110 94 78 62 46 30 14 #0 doadump () at pcpu.h:165 165 __asm __volatile("movl %%fs:0,%0" : "=3Dr" (td)); (kgdb) where #0 doadump () at pcpu.h:165 #1 0xc04c524a in boot (howto=3D260) at /usr/src/sys/kern/kern_shutdown.c:3= 99 #2 0xc04c54e0 in panic (fmt=3D0xc06266e5 "clist reservation botch") at /usr/src/sys/kern/kern_shutdown.c:555 #3 0xc04f90be in b_to_q ( src=3D0xc18318ae "ept: */*\r\nAccept-Language: en-us,en;q=3D0.5\r\nAcce= pt-Encodi ng: gzip,deflate\r\nAccept-Charset: ISO-8859-1,utf-8;q=3D0.7,*;q=3D0.7\r\nK= eep-Alive : 300\r\nConnection: keep-alive\r\nReferer: http://www.hi5.com/friend/di"..= ., am ount=3D704, clistp=3D0xc1669838) at /usr/src/sys/kern/tty_subr.c:104 #4 0xc0539e44 in pppasyncstart (sc=3D0xc1a3c400) at /usr/src/sys/net/ppp_tty.c:582 #5 0xc053539e in pppoutput (ifp=3D0xc1636400, m0=3D0xc171cb00, dst=3D0xc1b= 64310, rtp=3D0xc17dbb58) at /usr/src/sys/net/if_ppp.c:961 #6 0xc054be9c in ip_output (m=3D0xc171cb00, opt=3D0xc1636400, ro=3D0xd5440= bb0, flags=3D0, imo=3D0x0, inp=3D0xc1814a8c) at /usr/src/sys/netinet/ip_outp= ut.c:776 #7 0xc0554bfa in tcp_output (tp=3D0xc1bddac8) at /usr/src/sys/netinet/tcp_output.c:1080 #8 0xc055a661 in tcp_timer_rexmt (xtp=3D0xc1bddac8) at /usr/src/sys/netinet/tcp_timer.c:579 #9 0xc04d12cf in softclock (dummy=3D0x0) at /usr/src/sys/kern/kern_timeout.c:290 #10 0xc04b0e41 in ithread_loop (arg=3D0xc1581480) at /usr/src/sys/kern/kern_intr.c:547 #11 0xc04b00c8 in fork_exit (callout=3D0xc04b0ce8 , at /usr/src/sys/kern/kern_shutdown.c:555 #3 0xc04f90be in b_to_q ( src=3D0xc18318ae "ept: */*\r\nAccept-Language: en-us,en;q=3D0.5\r\nAcce= pt-Encodi ng: gzip,deflate\r\nAccept-Charset: ISO-8859-1,utf-8;q=3D0.7,*;q=3D0.7\r\nK= eep-Alive : 300\r\nConnection: keep-alive\r\nReferer: http://www.hi5.com/friend/di"..= ., am ount=3D704, clistp=3D0xc1669838) at /usr/src/sys/kern/tty_subr.c:104 #4 0xc0539e44 in pppasyncstart (sc=3D0xc1a3c400) at /usr/src/sys/net/ppp_tty.c:582 #5 0xc053539e in pppoutput (ifp=3D0xc1636400, m0=3D0xc171cb00, dst=3D0xc1b= 64310, rtp=3D0xc17dbb58) at /usr/src/sys/net/if_ppp.c:961 #6 0xc054be9c in ip_output (m=3D0xc171cb00, opt=3D0xc1636400, ro=3D0xd5440= bb0, flags=3D0, imo=3D0x0, inp=3D0xc1814a8c) at /usr/src/sys/netinet/ip_outp= ut.c:776 #7 0xc0554bfa in tcp_output (tp=3D0xc1bddac8) at /usr/src/sys/netinet/tcp_output.c:1080 #8 0xc055a661 in tcp_timer_rexmt (xtp=3D0xc1bddac8) at /usr/src/sys/netinet/tcp_timer.c:579 #9 0xc04d12cf in softclock (dummy=3D0x0) at /usr/src/sys/kern/kern_timeout.c:290 #10 0xc04b0e41 in ithread_loop (arg=3D0xc1581480) at /usr/src/sys/kern/kern_intr.c:547 #11 0xc04b00c8 in fork_exit (callout=3D0xc04b0ce8 , arg=3D0xc1581480, frame=3D0xd5440d38) at /usr/src/sys/kern/kern_fork.c:= 789 #12 0xc05ebe2c in fork_trampoline () at /usr/src/sys/i386/i386/exception.s:= 208 (kgdb) bt full #0 doadump () at pcpu.h:165 No locals. #1 0xc04c524a in boot (howto=3D260) at /usr/src/sys/kern/kern_shutdown.c:3= 99 first_buf_printf =3D 1 #2 0xc04c54e0 in panic (fmt=3D0xc06266e5 "clist reservation botch") at /usr/src/sys/kern/kern_shutdown.c:555 td =3D (struct thread *) 0xc15cb480 bootopt =3D 260 newpanic =3D 0 ap =3D 0xc15cb480 "0=A8\\=C1 uX=C1" buf =3D "clist reservation botch", '\0' #3 0xc04f90be in b_to_q ( src=3D0xc18318ae "ept: */*\r\nAccept-Language: en-us,en;q=3D0.5\r\nAcce= pt-Encodi ng: gzip,deflate\r\nAccept-Charset: ISO-8859-1,utf-8;q=3D0.7,*;q=3D0.7\r\nK= eep-Alive : 300\r\nConnection: keep-alive\r\nReferer: http://www.hi5.com/friend/di"..= ., am ount=3D704, clistp=3D0xc1669838) at /usr/src/sys/kern/tty_subr.c:104 prev =3D (struct cblock *) 0x0 cblockp =3D (struct cblock *) 0xc1af9380 firstbyte =3D 0xc0c293c0 " \223=C2=C0`\224=C2=C0=C4=C9d=C0=C0)b=C0z= \ac=C0" lastbyte =3D 0x3
startmask =3D 0 '\0' endmask =3D 0 '\0' startbit =3D 0 endbit =3D -1067774825 num_between =3D 0 numc =3D 108 #4 0xc0539e44 in pppasyncstart (sc=3D0xc1a3c400) at /usr/src/sys/net/ppp_tty.c:582 tp =3D (struct tty *) 0xc1669800 m =3D (struct mbuf *) 0xc171bd00 len =3D 878 start =3D ( u_char *) 0xc1831800 "GET /w/get.media?sid=3D16683&m=3D1&tp=3D5&d=3Dj&t= =3Ds HTTP/1.1\r \nHost: media.fastclick.net\r\nUser-Agent: Mozilla/5.0 (X11; U; FreeBSD i38= 6; en -US; rv:1.8) Gecko/20051219 Firefox/1.5\r\nAccept: */*\r\nAccept-Language:"= ... stop =3D (u_char *) 0xc1831b6e "\001" cp =3D (u_char *) 0x0 n =3D 878 ndone =3D 0 done =3D 1 idle =3D 0 #5 0xc053539e in pppoutput (ifp=3D0xc1636400, m0=3D0xc171cb00, dst=3D0xc1b= 64310, rtp=3D0xc17dbb58) at /usr/src/sys/net/if_ppp.c:961 sc =3D (struct ppp_softc *) 0xc1a3c400 protocol =3D 33 address =3D 255 control =3D 3 cp =3D (u_char *) 0x0 error =3D -1050450696 ip =3D (struct ip *) 0x0 ifq =3D (struct ifqueue *) 0xc16364f8 mode =3D NPMODE_PASS len =3D 922 #6 0xc054be9c in ip_output (m=3D0xc171cb00, opt=3D0xc1636400, ro=3D0xd5440= bb0, flags=3D0, imo=3D0x0, inp=3D0xc1814a8c) at /usr/src/sys/netinet/ip_outp= ut.c:776 ip =3D (struct ip *) 0xc171cb40 ifp =3D (struct ifnet *) 0xc1636400 m0 =3D (struct mbuf *) 0xc171cb40 hlen =3D 20 len =3D -716960796 error =3D 0 dst =3D (struct sockaddr_in *) 0xc1b64310 ia =3D (struct in_ifaddr *) 0xc1a8fd00 isbroadcast =3D 0 sw_csum =3D 1 iproute =3D {ro_rt =3D 0xc17dbb58, ro_dst =3D {sa_len =3D 16 '\020'= , sa_family =3D 2 '\002', sa_data =3D "\000\000=CD=B4V\016\000\000\000\000\000\000\000"}} odst =3D {s_addr =3D 1} #7 0xc0554bfa in tcp_output (tp=3D0xc1bddac8) at /usr/src/sys/netinet/tcp_output.c:1080 so =3D (struct socket *) 0xc1b5fb20 len =3D 878 recwin =3D 65535 sendwin =3D -1049506988 off =3D 0 flags =3D 24 error =3D 0 m =3D (struct mbuf *) 0xc171cb00 ip =3D (struct ip *) 0xc171cb40 th =3D (struct tcphdr *) 0xc171cb54 opt =3D "p\fD=D5=BEeM=C0\000=F3f=C0T\201=B5=C1\000\000\000\000\200\= fD=D5=EDfM=C0\203\000\000\0 00=A3dM=C0\200=B4\\=C1" ipoptlen =3D 0 optlen =3D 0 hdrlen =3D 40 idle =3D 0 sendalot =3D 0 i =3D -1068669610 sack_rxmit =3D 0 sack_bytes_rxmt =3D 0 p =3D (struct sackhole *) 0x0 ip6 =3D (struct ip6_hdr *) 0x0 isipv6 =3D 0 #8 0xc055a661 in tcp_timer_rexmt (xtp=3D0xc1bddac8) so =3D (struct socket *) 0xc1b5fb20 len =3D 878 recwin =3D 65535 sendwin =3D -1049506988 off =3D 0 flags =3D 24 error =3D 0 m =3D (struct mbuf *) 0xc171cb00 ip =3D (struct ip *) 0xc171cb40 th =3D (struct tcphdr *) 0xc171cb54 opt =3D "p\fD=D5=BEeM=C0\000=F3f=C0T\201=B5=C1\000\000\000\000\200\= fD=D5=EDfM=C0\203\000\000\0 00=A3dM=C0\200=B4\\=C1" ipoptlen =3D 0 optlen =3D 0 hdrlen =3D 40 idle =3D 0 sendalot =3D 0 i =3D -1068669610 sack_rxmit =3D 0 sack_bytes_rxmt =3D 0 p =3D (struct sackhole *) 0x0 ip6 =3D (struct ip6_hdr *) 0x0 isipv6 =3D 0 #8 0xc055a661 in tcp_timer_rexmt (xtp=3D0xc1bddac8) at /usr/src/sys/netinet/tcp_timer.c:579 tp =3D (struct tcpcb *) 0xc1bddac8 rexmt =3D 0 headlocked =3D 0 inp =3D (struct inpcb *) 0xc1814a8c #9 0xc04d12cf in softclock (dummy=3D0x0) at /usr/src/sys/kern/kern_timeout.c:290 c_func =3D (void (*)(void *)) 0xc055a2f4 c_arg =3D (void *) 0xc1bddac8 c_mtx =3D (struct mtx *) 0x0 c_flags =3D 22 c =3D (struct callout *) 0x0 bucket =3D (struct callout_tailq *) 0xcbb66670 curticks =3D 3891132 steps =3D 0 depth =3D 1 mpcalls =3D 1 mtxcalls =3D 0 gcalls =3D 0 wakeup_cookie =3D 0 #10 0xc04b0e41 in ithread_loop (arg=3D0xc1581480) at /usr/src/sys/kern/kern_intr.c:547 ithd =3D (struct ithd *) 0xc1581480 ih =3D (struct intrhand *) 0xc157b2c0 c =3D (struct callout *) 0x0 bucket =3D (struct callout_tailq *) 0xcbb66670 curticks =3D 3891132 steps =3D 0 depth =3D 1 mpcalls =3D 1 mtxcalls =3D 0 gcalls =3D 0 wakeup_cookie =3D 0 #10 0xc04b0e41 in ithread_loop (arg=3D0xc1581480) at /usr/src/sys/kern/kern_intr.c:547 ithd =3D (struct ithd *) 0xc1581480 ih =3D (struct intrhand *) 0xc157b2c0 ---Type to continue, or q to quit--- td =3D (struct thread *) 0xc15cb480 p =3D (struct proc *) 0xc15ca830 count =3D 0 warned =3D 0 #11 0xc04b00c8 in fork_exit (callout=3D0xc04b0ce8 , arg=3D0xc1581480, frame=3D0xd5440d38) at /usr/src/sys/kern/kern_fork.c:= 789 p =3D (struct proc *) 0xc15ca830 td =3D (struct thread *) 0x0 #12 0xc05ebe2c in fork_trampoline () at /usr/src/sys/i386/i386/exception.s:= 208 No locals. On 23 Dec 2005 09:49:58 -0500, Lowell Gilbert wrote: > Abhi writes: > > > I'm experiencing kernel panics with 6.0 Release. I did a fresh > > install of 6.0 Release after playing with some linux distros and > > Freebsd 5.4 Release. The only problem i had was due to faulty RAM. I > > replaced the RAM and had no problems. But for somedays my system has > > started to panic randomly. All the crash dumps i got show something > > wrong in the file pcpu.h at line 165. > > That just means it's dumping core. You need to look a little > deeper for why it's doing so. > > > I'm ttaching my custom kernel configuration file and one crash dump i > > got with kgdb. I hope someone can tell me why this's happening, and if > > this's freebsd problem or hardware problem. > > In this case, it's smashing its own stack while doing a bcopy() > (or some related function). If that's not consistent, this > probably *is* a hardware problem. If it's dependable, then maybe > not. Try to track down commonalities in what the system is doing > when it panics. If possible. > -- If Karl, instead of writing a lot about Capital, had made a lot of Capital, it would have been much better. -- Karl Marx's Mother