Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 12 Oct 2008 00:54:34 +0200
From:      "barbara" <barbara.xxx1975@libero.it>
To:        "freebsd-stable" <freebsd-stable@FreeBSD.org>
Subject:   6.4-PRELEASE sporadically panicking with fatal trap 12
Message-ID:  <K8LJMY$9245023C3F366D7A0AAC90FFC104DAAE@libero.it>

next in thread | raw e-mail | index | archive | help
Hello,
I'm running 6.4-PRELEASE, last built on 2008-10-05 with /usr/src updated =
on the same day.
I had a panic that looks to me very similiar to the one described here (h=
ence the subject): 
http://lists.freebsd.org/pipermail/freebsd-stable/2008-September/045405.h=
tml

What caught my curiosity is the message:
	
	Unread portion of the kernel message buffer:

	acd0: WARNING - TEST_UNIT_READY read data overrun 18>0

	kernel trap 12 with interrupts disabled

I don't have atapicam built in the kernel and it wasn't loaded, and I'm p=
retty sure no media was inserted in my dvdrw unit since the last boot.
The other report has a similar message too (acd1: WARNING - READ_TOC read=
 data overrun 18>12)


Here's the backtrace:

# kgdb kernel.debug /var/crash/vmcore.2
GNU gdb 6.1.1 [FreeBSD]

Copyright 2004 Free Software Foundation, Inc.

GDB is free software, covered by the GNU General Public License, and you =
are

welcome to change it and/or distribute copies of it under certain conditi=
ons.

Type "show copying" to see the conditions.

There is absolutely no warranty for GDB.  Type "show warranty" for detail=
s.

This GDB was configured as "i386-marcel-freebsd"...



Unread portion of the kernel message buffer:

acd0: WARNING - TEST_UNIT_READY read data overrun 18>0

kernel trap 12 with interrupts disabled





Fatal trap 12: page fault while in kernel mode

cpuid =3D 0; apic id =3D 00

fault virtual address	=3D 0x104

fault code		=3D supervisor read, page not present

instruction pointer	=3D 0x20:0xc05419e5

stack pointer	        =3D 0x28:0xe5928c00

frame pointer	        =3D 0x28:0xe5928c18

code segment		=3D base 0x0, limit 0xfffff, type 0x1b

			=3D DPL 0, pres 1, def32 1, gran 1

processor eflags	=3D resume, IOPL =3D 0

current process		=3D 17 (swi6: task queue)

trap number		=3D 12

panic: page fault

cpuid =3D 0

Uptime: 22h2m3s

Physical memory: 2031 MB

Dumping 287 MB: 272 256 240 224 208 192 176 160 144 128 112 96 80 64 48 3=
2 16



Reading symbols from /boot/kernel/linux.ko...done.

Loaded symbols for /boot/kernel/linux.ko

Reading symbols from /boot/modules/nvidia.ko...done.

Loaded symbols for /boot/modules/nvidia.ko

Reading symbols from /boot/kernel/acpi.ko...done.

Loaded symbols for /boot/kernel/acpi.ko

Reading symbols from /boot/kernel/linprocfs.ko...done.

Loaded symbols for /boot/kernel/linprocfs.ko

Reading symbols from /boot/kernel/logo_saver.ko...done.

Loaded symbols for /boot/kernel/logo_saver.ko

Reading symbols from /boot/kernel/smbfs.ko...done.

Loaded symbols for /boot/kernel/smbfs.ko

Reading symbols from /boot/kernel/libiconv.ko...done.

Loaded symbols for /boot/kernel/libiconv.ko

Reading symbols from /boot/kernel/libmchain.ko...done.

Loaded symbols for /boot/kernel/libmchain.ko

#0  doadump () at pcpu.h:165

165		__asm __volatile("movl %%fs:0,%0" : "=3Dr" (td));

(kgdb) list *0xc05419e5

0xc05419e5 is in _mtx_lock_sleep (/usr/src/sys/kern/kern_mutex.c:548).

543			 * If the current owner of the lock is executing on another

544			 * CPU, spin instead of blocking.

545			 */

546			owner =3D (struct thread *)(v & MTX_FLAGMASK);

547	#ifdef ADAPTIVE_GIANT

548			if (TD_IS_RUNNING(owner)) {

549	#else

550			if (m !=3D &Giant && TD_IS_RUNNING(owner)) {

551	#endif

552				turnstile_release(&m->mtx_object);
(kgdb)

(kgdb) bt full

#0  doadump () at pcpu.h:165

No locals.

#1  0xc054d419 in boot (howto=3D260) at /usr/src/sys/kern/kern_shutdown.c=
:410

	first_buf_printf =3D 1

#2  0xc054d7e6 in panic (fmt=3D0xc0736da9 "%s") at /usr/src/sys/kern/kern=
_shutdown.c:566

	td =3D (struct thread *) 0xc6bf0300

	bootopt =3D 260

	newpanic =3D 0

	ap =3D 0xc6bf0300 "`=F8=9F=C6=E0=DA=9F=C6"

	buf =3D "page fault", '\0' <repeats 245 times>

#3  0xc071822c in trap_fatal (frame=3D0xe5928bc0, eva=3D0) at /usr/src/sy=
s/i386/i386/trap.c:838

	code =3D 40

	ss =3D 40

	esp =3D 0

	type =3D 12

	softseg =3D {ssd_base =3D 0, ssd_limit =3D 1048575, ssd_type =3D 27, ssd=
_dpl =3D 0, ssd_p =3D 1, ssd_xx =3D 0, ssd_xx1 =3D 0, ssd_def32 =3D 1, ss=
d_gran =3D 1}

	msg =3D 0x0

#4  0xc07178e4 in trap (frame=3D

      {tf_fs =3D 8, tf_es =3D 40, tf_ds =3D 40, tf_edi =3D -960560384, tf=
_esi =3D 4, tf_ebp =3D -443380712, tf_isp =3D -443380756, tf_ebx =3D -937=
328156, tf_edx =3D 6, tf_ecx =3D 4, tf_eax =3D 1, tf_trapno =3D 12, tf_er=
r =3D 0, tf_eip =3D -1068230171, tf_cs =3D 32, tf_eflags =3D 65538, tf_es=
p =3D -937328156, tf_ss =3D 0})

    at /usr/src/sys/i386/i386/trap.c:270

	td =3D (struct thread *) 0xc6bf0300

	p =3D (struct proc *) 0xc6bef860

	sticks =3D 4999

	type =3D 12

	i =3D 0

	ucode =3D 0

	code =3D 0

	eva =3D 260

#5  0xc06ffaaa in calltrap () at /usr/src/sys/i386/i386/exception.s:139

No locals.

#6  0xc05419e5 in _mtx_lock_sleep (m=3D0xc82181e4, tid=3D3334406912, opts=
=3D0, file=3D0x0, line=3D0) at /usr/src/sys/kern/kern_mutex.c:546

	owner =3D (volatile struct thread *) 0x4

	v =3D 6

#7  0xc054c6b9 in _sema_post (sema=3D0xc82181e4, file=3D0x0, line=3D0) at=
 /usr/src/sys/kern/kern_sema.c:79

No locals.

#8  0xc04705e3 in ata_completed (context=3D0xc8218198, dummy=3D1) at /usr=
/src/sys/dev/ata/ata-queue.c:481

	request =3D (struct ata_request *) 0xc8218198

	ch =3D (struct ata_channel *) 0xc6cd6a00

	atadev =3D (struct ata_device *) 0xc6ddcc00

	composite =3D (struct ata_composite *) 0x0

#9  0xc05757dd in taskqueue_run (queue=3D0xc6c8a000) at /usr/src/sys/kern=
/subr_taskqueue.c:257

	task =3D (struct task *) 0xc821823c

	owned =3D 0

	pending =3D 1

#10 0xc0575af3 in taskqueue_swi_run (dummy=3D0x0) at /usr/src/sys/kern/su=
br_taskqueue.c:299

No locals.

#11 0xc052fbcb in ithread_execute_handlers (p=3D0xc6bef860, ie=3D0xc6c44e=
80) at /usr/src/sys/kern/kern_intr.c:682

	ih =3D (struct intr_handler *) 0xc6cc5080

	ihn =3D (struct intr_handler *) 0x0

#12 0xc052fd27 in ithread_loop (arg=3D0xc6c62550) at /usr/src/sys/kern/ke=
rn_intr.c:766

	intr_event =3D (struct intr_thread *) 0xc6c62550

	ie =3D (struct intr_event *) 0xc6c44e80

	td =3D (struct thread *) 0xc6bf0300

	p =3D (struct proc *) 0xc6bef860

#13 0xc052e4b0 in fork_exit (callout=3D0xc052fcc0 <ithread_loop>, arg=3D0=
x1, frame=3D0x1) at /usr/src/sys/kern/kern_fork.c:788

	p =3D (struct proc *) 0xc6bef860

	td =3D (struct thread *) 0x6

#14 0xc06ffb0c in fork_trampoline () at /usr/src/sys/i386/i386/exception.=
s:208

No locals.
(kgdb)
(kgdb) thread apply all bt



Thread 175 (Thread 100290):

#0  sched_switch (td=3D0xc7172000, newtd=3D0xc6bea780, flags=3D1) at /usr=
/src/sys/kern/sched_4bsd.c:959

#1  0xc0555eef in mi_switch (flags=3D1, newtd=3D0x0) at /usr/src/sys/kern=
/kern_synch.c:420

#2  0xc0573ff9 in sleepq_switch (wchan=3D0x0) at /usr/src/sys/kern/subr_s=
leepqueue.c:464

#3  0xc05741a1 in sleepq_wait_sig (wchan=3D0xc6d20010) at /usr/src/sys/ke=
rn/subr_sleepqueue.c:560

#4  0xc055592e in msleep (ident=3D0xc6d20010, mtx=3D0x0, priority=3D345, =
wmesg=3D0x0, timo=3D0) at /usr/src/sys/kern/kern_synch.c:209

#5  0xc058aeb9 in ttysleep (tp=3D0xc6d20000, chan=3D0x0, pri=3D0, wmesg=3D=
0x0, timo=3D0) at /usr/src/sys/kern/tty.c:2786

#6  0xc0589348 in ttread (tp=3D0xc6d20000, uio=3D0xec85fcb0, flag=3D0) at=
 /usr/src/sys/kern/tty.c:1888

#7  0xc058e55e in ptsread (dev=3D0x0, uio=3D0x0, flag=3D0) at linedisc.h:=
100

#8  0xc05155ef in giant_read (dev=3D0xc7c74200, uio=3D0x0, ioflag=3D0) at=
 /usr/src/sys/kern/kern_conf.c:346

#9  0xc04ea669 in devfs_read_f (fp=3D0xc7d70d80, uio=3D0xec85fcb0, cred=3D=
0xc85fd200, flags=3D0, td=3D0xc7172000) at /usr/src/sys/fs/devfs/devfs_vn=
ops.c:872

#10 0xc0578f0c in dofileread (td=3D0xc7172000, fd=3D0, fp=3D0xc7d70d80, a=
uio=3D0xec85fcb0, offset=3DUnhandled dwarf expression opcode 0x93

) at file.h:241

#11 0xc0578d20 in kern_readv (td=3D0xc7172000, fd=3D16, auio=3D0x0) at /u=
sr/src/sys/kern/sys_generic.c:192

#12 0xc0578bdf in read (td=3D0x0, uap=3D0x0) at /usr/src/sys/kern/sys_gen=
eric.c:116

#13 0xc0718633 in syscall (frame=3D

      {tf_fs =3D 59, tf_es =3D 59, tf_ds =3D 59, tf_edi =3D -1077942016, =
tf_esi =3D 1, tf_ebp =3D -1077942056, tf_isp =3D -326763164, tf_ebx =3D -=
1077941876, tf_edx =3D 0, tf_ecx =3D 0, tf_eax =3D 3, tf_trapno =3D 0, tf=
_err =3D 2, tf_eip =3D 673128727, tf_cs =3D 51, tf_eflags =3D 582, tf_esp=
 =3D -1077942084, tf_ss =3D 59})

    at /usr/src/sys/i386/i386/trap.c:984

#14 0xc06ffaff in Xint0x80_syscall () at /usr/src/sys/i386/i386/exception=
.s:200

#15 0x00000033 in ?? ()

Previous frame inner to this frame (corrupt stack?)

165		__asm __volatile("movl %%fs:0,%0" : "=3Dr" (td));


(kgdb) quit





Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?K8LJMY$9245023C3F366D7A0AAC90FFC104DAAE>