From owner-freebsd-bugs@FreeBSD.ORG Tue Oct 25 17:00:33 2005 Return-Path: X-Original-To: freebsd-bugs@hub.freebsd.org Delivered-To: freebsd-bugs@hub.freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 3F7EE16A41F for ; Tue, 25 Oct 2005 17:00:33 +0000 (GMT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id F0C9A43D48 for ; Tue, 25 Oct 2005 17:00:32 +0000 (GMT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.13.3/8.13.3) with ESMTP id j9PH0W7X021292 for ; Tue, 25 Oct 2005 17:00:32 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.13.3/8.13.1/Submit) id j9PH0Wwu021290; Tue, 25 Oct 2005 17:00:32 GMT (envelope-from gnats) Date: Tue, 25 Oct 2005 17:00:32 GMT Message-Id: <200510251700.j9PH0Wwu021290@freefall.freebsd.org> To: freebsd-bugs@FreeBSD.org From: "Desjardins, Kristian" Cc: Subject: Re: kern/87791: Kernel crash when running df X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: "Desjardins, Kristian" List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 25 Oct 2005 17:00:33 -0000 The following reply was made to PR kern/87791; it has been noted by GNATS. From: "Desjardins, Kristian" To: "'bug-followup@FreeBSD.org'" Cc: Subject: Re: kern/87791: Kernel crash when running df Date: Tue, 25 Oct 2005 12:59:26 -0400 /cdrom was mounted, ran sysinstall to look at packages, quit, and then did a ls /cdrom and it panic'd. -------------------- test-a# kgdb /boot/kernel/kernel.debug /var/crash/vmcore.1 [GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so: Undefined symb ol "ps_pglobal_lookup"] GNU gdb 6.1.1 [FreeBSD] Copyright 2004 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "i386-marcel-freebsd". Unread portion of the kernel message buffer: Fatal trap 12: page fault while in kernel mode fault virtual address = 0x0 fault code = supervisor read, page not present instruction pointer = 0x20:0xc05ff472 stack pointer = 0x28:0xcca12ad4 frame pointer = 0x28:0xcca12ae8 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, def32 1, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 4572 (ls) trap number = 12 panic: page fault Uptime: 1d4h53m56s Dumping 255 MB (2 chunks) chunk 0: 1MB (160 pages) ... ok chunk 1: 255MB (65182 pages) 239 223 207 191 175 159 143 127 111 95 79 63 47 31 15 #0 doadump () at pcpu.h:165 165 pcpu.h: No such file or directory. in pcpu.h (kgdb) list *0xc05ff472 0xc05ff472 is in g_io_request (/usr/src/sys/geom/geom_io.c:259). 254 KASSERT(bp->bio_length % cp->provider->sectorsize == 0, 255 ("wrong length %jd for sectorsize %u", 256 bp->bio_length, cp->provider->sectorsize)); 257 } 258 259 g_trace(G_T_BIO, "bio_request(%p) from %p(%s) to %p(%s) cmd %d", 260 bp, cp, cp->geom->name, pp, pp->name, bp->bio_cmd); 261 262 bp->bio_from = cp; 263 bp->bio_to = pp; (kgdb) backtrace #0 doadump () at pcpu.h:165 #1 0xc0637806 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:399 #2 0xc0637a9c in panic (fmt=0xc084d766 "%s") at /usr/src/sys/kern/kern_shutdown.c:555 #3 0xc0806e60 in trap_fatal (frame=0xcca12a94, eva=0) at /usr/src/sys/i386/i386/trap.c:831 #4 0xc0806bcb in trap_pfault (frame=0xcca12a94, usermode=0, eva=0) at /usr/src/sys/i386/i386/trap.c:742 #5 0xc0806809 in trap (frame= {tf_fs = -1052114936, tf_es = 40, tf_ds = 40, tf_edi = -1043043520, tf_esi = 0, tf_e bp = -861852952, tf_isp = -861852992, tf_ebx = -1049503812, tf_edx = 2048, tf_ecx = 0, tf_ eax = 1, tf_trapno = 12, tf_err = 0, tf_eip = -1067453326, tf_cs = 32, tf_eflags = 66182, tf_esp = 1, tf_ss = 0}) at /usr/src/sys/i386/i386/trap.c:432 #6 0xc07f600a in calltrap () at /usr/src/sys/i386/i386/exception.s:139 #7 0xc05ff472 in g_io_request (bp=0xc171d7bc, cp=0xc1d46b40) at /usr/src/sys/geom/geom_io.c:259 #8 0xc06019bd in g_vfs_strategy (bo=0x1, bp=0xc664cff0) at /usr/src/sys/geom/geom_vfs.c:106 #9 0xc06098fd in cd9660_strategy (ap=0x1) at /usr/src/sys/isofs/cd9660/cd9660_vnops.c:755 #10 0xc0816c79 in VOP_STRATEGY_APV (vop=0xc08bc420, a=0xcca12b3c) at vnode_if.c:1796 #11 0xc06813fc in bufstrategy (bo=0xc21fad80, bp=0x1) at vnode_if.h:928 #12 0xc067bd91 in breadn (vp=0xc21facc0, blkno=0, size=2048, rablkno=0x0, rabsize=0x0, cnt=0, cred=0x0, bpp=0x1) at buf.h:415 #13 0xc067bcd4 in bread (vp=0xc21facc0, blkno=0, size=2048, cred=0x0, bpp=0xcca12bc8) at /usr/src/sys/kern/vfs_bio.c:719 #14 0xc0606209 in cd9660_blkatoff (vp=0x800, offset=0, res=0x0, bpp=0xcca12c28) at /usr/src/sys/isofs/cd9660/cd9660_lookup.c:406 #15 0xc06093d6 in cd9660_readdir (ap=0xcca12c90) at /usr/src/sys/isofs/cd9660/cd9660_vnops.c:513 #16 0xc0816984 in VOP_READDIR_APV (vop=0x1, a=0x800) at vnode_if.c:1427 #17 0xc06963e7 in getdirentries (td=0xc1608780, uap=0xcca12d04) at vnode_if.h:746 #18 0xc0807177 in syscall (frame= {tf_fs = 59, tf_es = 59, tf_ds = 59, tf_edi = 134557696, tf_esi = 2, tf_ebp = -10779 42968, tf_isp = -861852316, tf_ebx = 672687332, tf_edx = 0, tf_ecx = 0, tf_eax = 196, tf_t rapno = 12, tf_err = 2, tf_eip = 672160371, tf_cs = 51, tf_eflags = 582, tf_esp = -1077943 012, tf_ss = 59}) at /usr/src/sys/i386/i386/trap.c:976 #19 0xc07f605f in Xint0x80_syscall () at /usr/src/sys/i386/i386/exception.s:200 #20 0x00000033 in ?? () Previous frame inner to this frame (corrupt stack?)