From owner-freebsd-current Fri Sep 13 10:40:11 2002 Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 3D98F37B400 for ; Fri, 13 Sep 2002 10:40:05 -0700 (PDT) Received: from mail.speakeasy.net (mail15.speakeasy.net [216.254.0.215]) by mx1.FreeBSD.org (Postfix) with ESMTP id 80AB343E6E for ; Fri, 13 Sep 2002 10:40:04 -0700 (PDT) (envelope-from jhb@FreeBSD.org) Received: (qmail 32458 invoked from network); 13 Sep 2002 17:40:03 -0000 Received: from unknown (HELO server.baldwin.cx) ([216.27.160.63]) (envelope-sender ) by mail15.speakeasy.net (qmail-ldap-1.03) with DES-CBC3-SHA encrypted SMTP for ; 13 Sep 2002 17:40:03 -0000 Received: from laptop.baldwin.cx (gw1.twc.weather.com [216.133.140.1]) by server.baldwin.cx (8.12.5/8.12.5) with ESMTP id g8DHe2Bv043164; Fri, 13 Sep 2002 13:40:02 -0400 (EDT) (envelope-from jhb@FreeBSD.org) Message-ID: X-Mailer: XFMail 1.5.2 on FreeBSD X-Priority: 3 (Normal) Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 8bit MIME-Version: 1.0 In-Reply-To: <20020913192330.U3162-100000@levais.imp.ch> Date: Fri, 13 Sep 2002 13:40:02 -0400 (EDT) From: John Baldwin To: Martin Blapp Subject: RE: kernel trap 12, pagefault (KSE problems ?) Cc: julian@FreeBSD.org, current@FreeBSD.org Sender: owner-freebsd-current@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On 13-Sep-2002 Martin Blapp wrote: > > Hi, > >> So we dereferenced a pointer at 0x2000018. However, we did it at 0xc0337a39 >> which isn't in the backtrace (I think gdb eats a frame, backtraces in ddb are >> better). Can you do 'l *0xc0337a39' to get the line of the actual panic? > > (kgdb) l *0xc0337a39 > 0xc0337a39 is in inodedep_lookup (/usr/src/sys/ufs/ffs/ffs_softdep.c:1015). > 1010 #endif > 1011 firsttry = 1; > 1012 inodedephd = INODEDEP_HASH(fs, inum); > 1013 top: > 1014 LIST_FOREACH(inodedep, inodedephd, id_hash) > 1015 if (inum == inodedep->id_ino && fs == inodedep->id_fs) > 1016 break; > 1017 if (inodedep) { > 1018 *inodedeppp = inodedep; > 1019 return (1); Ok, here's your problem. I'm betting that your inodedep is 0x20000. I'm guessing somehow the list of inodedep's has been corrupted. I doubt this is some kind of PG_G or some such bug, but probably a software bug. Perhaps an inodedep has been free'd but there are still stale references to it? -- John Baldwin <>< http://www.FreeBSD.org/~jhb/ "Power Users Use the Power to Serve!" - http://www.FreeBSD.org/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message