Skip site navigation (1)Skip section navigation (2)
From:      "=?ISO-8859-2?Q?Pawe=B3_Ma=B3achowski?=" <pawmal@unia.3lo.lublin.pl>
To:        freebsd-bugs@FreeBSD.org
Subject:   Re: kern/42260: 4.6-STABLE kernel panic, fxp related 
Message-ID:  <20020903133919Z2089927-6197%2B6@mx1.lublin.pl>
In-Reply-To: <20020902181857Z1856405-31468%2B9@mx1.lublin.pl>
References:  <200209011609.aa11674@salmon.maths.tcd.ie>

next in thread | previous in thread | raw e-mail | index | archive | help
On 2 Sep 02, at 20:19, Paweł Małachowski wrote:

> OK, I'm working hard -> vmcore.23 reached. ;)

I was testing so hurd, that not only my problematic machine
with 4.6-STABLE, as described in kern/42260, crashed, but
my router running 4.6.2-RELEASE (27 August build, configuration
described in kern/42030) also crashed... :E
Once with acquire_lock() [1], once with xl_newbuf(). It's hurd for me
to reproduce it so I'm not opening the new problem. I provide this
here cause it's a curiosity. ;)

[1] Note, there were no special HDD activity. I was uploading files
    over FTP to /dev/null on this machine...


please be patient while loaded modules are resolved
gdbmods using kernel: /usr/src/sys/compile/PM-UX-AUTO/kernel.debug
gdbmods using core:   vmcore.2
GNU gdb 4.18 (FreeBSD)
Copyright 1998 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-unknown-freebsd"...
IdlePTD at phsyical address 0x00524000
initial pcb at physical address 0x0045d340
panicstr: page fault
panic messages:
---
Fatal trap 12: page fault while in kernel mode
fault virtual address   = 0x93919c42
fault code              = supervisor read, page not present
instruction pointer     = 0x8:0xc02f5ccc
stack pointer           = 0x10:0xcddf8da4
frame pointer           = 0x10:0xcddf8db0
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, def32 1, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 152 (trafd)
interrupt mask          = net tty
trap number             = 12
panic: page fault

syncing disks... 8
done
Uptime: 4d8h37m30s

dumping to dev #ad/0x30001, offset 1573024
dump ata0: resetting devices .. done
// cut dump numbers//
---
#0  dumpsys () at ../../kern/kern_shutdown.c:487
487             if (dumping++) {
#0  dumpsys () at ../../kern/kern_shutdown.c:487
#1  0xc01fb2c3 in boot (howto=256) at ../../kern/kern_shutdown.c:316
#2  0xc01fb6e8 in poweroff_wait (junk=0xc03eb12c, howto=-1069634481)
    at ../../kern/kern_shutdown.c:595
#3  0xc0379d92 in trap_fatal (frame=0xcddf8d64, eva=2475793474)
    at ../../i386/i386/trap.c:966
#4  0xc0379a65 in trap_pfault (frame=0xcddf8d64, usermode=0, eva=2475793474)
    at ../../i386/i386/trap.c:859
#5  0xc0379623 in trap (frame={tf_fs = -841023472, tf_es = -1071448048,
      tf_ds = -1050935280, tf_edi = -1057830656, tf_esi = 6687744,
      tf_ebp = -840987216, tf_isp = -840987248, tf_ebx = -1057830656,
      tf_edx = -1058799616, tf_ecx = -1819173822, tf_eax = 1725873,
      tf_trapno = 12, tf_err = 0, tf_eip = -1070637876, tf_cs = 8,
      tf_eflags = 66055, tf_esp = -1055333120, tf_ss = -1050930556})
    at ../../i386/i386/trap.c:458
#6  0xc02f5ccc in xl_newbuf (sc=0xc15c1000, c=0xc15c1284) at ../../pci/if_xl.c:1727
#7  0xc02f5e82 in xl_rxeof (sc=0xc15c1000) at ../../pci/if_xl.c:1826
#8  0xc02f65a4 in xl_intr (arg=0xc15c1000) at ../../pci/if_xl.c:2061
#9  0xc03845f9 in intr_mux (arg=0xc0e350a0) at ../../i386/isa/intr_machdep.c:582
#10 0xc036c642 in vec10 ()
#11 0xc02f3e72 in xl_miibus_readreg (dev=0xc15ae780, phy=24, reg=0)
    at ../../pci/if_xl.c:561
#12 0xc01c0ac8 in MIIBUS_READREG (dev=0xc15ae780, phy=24, reg=0) at miibus_if.c:27
#13 0xc01ba627 in miibus_readreg (dev=0xc15b7800, phy=24, reg=0)
    at ../../dev/mii/mii.c:196
#14 0xc01c0ac8 in MIIBUS_READREG (dev=0xc15b7800, phy=24, reg=0) at miibus_if.c:27
#15 0xc01baed1 in ukphy_status (phy=0xc15aa280) at ../../dev/mii/ukphy_subr.c:83
#16 0xc01bd025 in exphy_service (sc=0xc15aa280, mii=0xc15aa2c0, cmd=1)
    at ../../dev/mii/exphy.c:295
#17 0xc01ba7a5 in mii_tick (mii=0xc15aa2c0) at ../../dev/mii/mii.c:311
#18 0xc02f676b in xl_stats_update (xsc=0xc15b0000) at ../../pci/if_xl.c:2139
#19 0xc0201145 in softclock () at ../../kern/kern_timeout.c:131
#20 0xc036c553 in doreti_swi ()
---Type <return> to continue, or q <return> to quit---
#21 0x8049c91 in ?? ()
#22 0x8049edf in ?? ()
#23 0x804a5e6 in ?? ()
#24 0x804b530 in ?? ()
#25 0x280786b9 in ?? ()
#26 0x2807832f in ?? ()
#27 0x80498b6 in ?? ()
#28 0x804926d in ?? ()
(kgdb) up 6
#6  0xc02f5ccc in xl_newbuf (sc=0xc15c1000, c=0xc15c1284) at ../../pci/if_xl.c:1727
1727            MCLGET(m_new, M_DONTWAIT);
(kgdb) list
1722
1723            MGETHDR(m_new, M_DONTWAIT, MT_DATA);
1724            if (m_new == NULL)
1725                    return(ENOBUFS);
1726
1727            MCLGET(m_new, M_DONTWAIT);
1728            if (!(m_new->m_flags & M_EXT)) {
1729                    m_freem(m_new);
1730                    return(ENOBUFS);
1731            }

>netstat -in -N /usr/src/sys/compile/PM-UX-AUTO/kernel.debug -M vmcore.2 | grep xl1 | head -1
xl1   1500  <Link#3>    00:10:5a:f0:96:77 220410168  2380 170338963     0     0




Fatal trap 12: page fault while in kernel mode
fault virtual address   = 0x30
fault code              = supervisor read, page not present
instruction pointer     = 0x8:0xc030d72c
stack pointer           = 0x10:0xc0475864
frame pointer           = 0x10:0xc047586c
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, def32 1, gran 1
processor eflags        = nested task, resume, IOPL = 0
current process         = Idle
interrupt mask          = net tty bio cam
trap number             = 12
panic: page fault
Uptime: 2d12h54m20s

dumping to dev #ad/0x30001, offset 1573024
dump ata0: resetting devices .. done
// cut dump numbers//
---
#0  dumpsys () at ../../kern/kern_shutdown.c:487
487             if (dumping++) {
(kgdb) bt
#0  dumpsys () at ../../kern/kern_shutdown.c:487
#1  0xc01fb2c3 in boot (howto=260) at ../../kern/kern_shutdown.c:316
#2  0xc01fb6e8 in poweroff_wait (junk=0xc03eb12c, howto=-1069634481)
    at ../../kern/kern_shutdown.c:595
#3  0xc0379d92 in trap_fatal (frame=0xc0475824, eva=48)
    at ../../i386/i386/trap.c:966
#4  0xc0379a65 in trap_pfault (frame=0xc0475824, usermode=0, eva=48)
    at ../../i386/i386/trap.c:859
#5  0xc0379623 in trap (frame={tf_fs = -1071513576, tf_es = -65520,
      tf_ds = -1069088752, tf_edi = 0, tf_esi = -1050072832, tf_ebp = -1069066132,
      tf_isp = -1069066160, tf_ebx = -1069381444, tf_edx = 6866944,
      tf_ecx = -851684992, tf_eax = 0, tf_trapno = 12, tf_err = 0,
      tf_eip = -1070541012, tf_cs = 8, tf_eflags = 82054, tf_esp = -1050072832,
      tf_ss = -1050072832}) at ../../i386/i386/trap.c:458
#6  0xc030d72c in acquire_lock (lk=0xc04288bc) at ../../ufs/ffs/ffs_softdep.c:266
#7  0xc031182c in softdep_update_inodeblock (ip=0xc1692900, bp=0xc68d2688,
    waitfor=0) at ../../ufs/ffs/ffs_softdep.c:3813
#8  0xc030c821 in ffs_update (vp=0xcd3c5180, waitfor=0)
    at ../../ufs/ffs/ffs_inode.c:106
#9  0xc0314bea in ffs_sync (mp=0xc1679800, waitfor=2, cred=0xc0e3c400,
    p=0xc0476ce0) at ../../ufs/ffs/ffs_vfsops.c:1025
#10 0xc022aa9b in sync (p=0xc0476ce0, uap=0x0) at ../../kern/vfs_syscalls.c:576
#11 0xc01fb05e in boot (howto=256) at ../../kern/kern_shutdown.c:235
#12 0xc01fb6e8 in poweroff_wait (junk=0xc03eabc3, howto=-1069633165)
    at ../../kern/kern_shutdown.c:595
#13 0xc0379de7 in dblfault_handler () at ../../i386/i386/trap.c:996
(kgdb) up 6
#6  0xc030d72c in acquire_lock (lk=0xc04288bc) at ../../ufs/ffs/ffs_softdep.c:266
266             lk->lkt_held = CURPROC->p_pid;
(kgdb) list
261                             panic("softdep_lock: locking against myself");
262                     else
263                             panic("softdep_lock: lock held by %d", holder);
264             }
265             lk->lkt_spl = splbio();
266             lk->lkt_held = CURPROC->p_pid;
267             lockcnt++;
268     }
269
270     static void

>netstat -in -N /usr/src/sys/compile/PM-UX-AUTO/kernel.debug  -M vmcore.3| grep xl1 | head -1
xl1   1500  <Link#3>    00:10:5a:f0:96:77 116356066  1552 98632301     0     0





PM

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-bugs" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020903133919Z2089927-6197%2B6>