Date: Wed, 1 Oct 2003 22:35:19 -0400 From: Anthony Wood <wood@virginia.edu> To: stable@freebsd.org Subject: 4.9 RC1 (i386) mplayer induced panic Message-ID: <20031002023519.GA21200@mamba.cs.Virginia.EDU>
next in thread | raw e-mail | index | archive | help
All:
I cvsup'ed earlier this evening and am still able to reproduce this
panic at will. Command line, panic backtrace, dmesg, ldd output,
and mplayer version follow. If more information is needed, just let
me know.
% mplayer foo.mov [a quicktime file]
[plays for awhile, and then panics]
# gdb -k -s /usr/obj/usr/src/sys/LICHEN/kernel.debug -e /var/crash/kernel.2 -c /var/crash/vmcore.2
GNU gdb 4.18 (FreeBSD)
Copyright 1998 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for details.
This GDB was configured as "i386-unknown-freebsd"...
IdlePTD at phsyical address 0x00435000
initial pcb at physical address 0x00381580
panicstr: page fault
panic messages:
---
Fatal trap 12: page fault while in kernel mode
fault virtual address = 0x36
fault code = supervisor write, page not present
instruction pointer = 0x8:0xc02566fa
stack pointer = 0x10:0xc032d388
frame pointer = 0x10:0xc032d428
code segment = base 0x0, limit 0xfffff, type 0x1b
= DPL 0, pres 1, def32 1, gran 1
processor eflags = interrupt enabled, resume, IOPL = 0
current process = Idle
interrupt mask = net tty bio cam
trap number = 12
panic: page fault
syncing disks...
Fatal trap 12: page fault while in kernel mode
fault virtual address = 0x30
fault code = supervisor read, page not present
instruction pointer = 0x8:0xc0243c40
stack pointer = 0x10:0xc032d174
frame pointer = 0x10:0xc032d17c
code segment = base 0x0, limit 0xfffff, type 0x1b
= DPL 0, pres 1, def32 1, gran 1
processor eflags = interrupt enabled, resume, IOPL = 0
current process = Idle
interrupt mask = net tty bio cam
trap number = 12
panic: page fault
Uptime: 8m15s
dumping to dev #ad/0x20001, offset 524416
dump ata0: resetting devices .. done
511 510 509 508 507 506 505 504 503 502 501 500 499 498 497
[...] 18 17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0
---
#0 dumpsys () at /usr/src/sys/kern/kern_shutdown.c:487
487 if (dumping++) {
(kgdb) where full
#0 dumpsys () at /usr/src/sys/kern/kern_shutdown.c:487
error = 0
#1 0xc0171ddb in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:316
howto = 260
#2 0xc0172200 in poweroff_wait (junk=0xc032454c, howto=-1070448561)
at /usr/src/sys/kern/kern_shutdown.c:595
fmt = 0xc032454c "%s"
bootopt = 260
buf = "page fault", '\000' <repeats 245 times>
#3 0xc02d0976 in trap_fatal (frame=0xc032d134, eva=48) at /usr/src/sys/i386/i386/trap.c:974
frame = (struct trapframe *) 0x104
code = -1070447284
type = 12
ss = -1070447284
esp = 0
softseg = {ssd_base = 0, ssd_limit = 1048575, ssd_type = 27, ssd_dpl = 0, ssd_p = 1,
ssd_xx = 5, ssd_xx1 = 0, ssd_def32 = 1, ssd_gran = 1}
#4 0xc02d0649 in trap_pfault (frame=0xc032d134, usermode=0, eva=48)
at /usr/src/sys/i386/i386/trap.c:867
va = 0
vm = (struct vmspace *) 0x0
map = 0xc
rv = 0
ftype = 0 '\000'
p = (struct proc *) 0x0
#5 0xc02d0233 in trap (frame={tf_fs = 16, tf_es = 16, tf_ds = 16, tf_edi = 0, tf_esi = -1036583680,
tf_ebp = -1070411396, tf_isp = -1070411424, tf_ebx = -1070260740, tf_edx = 6865984,
tf_ecx = -618392704, tf_eax = 0, tf_trapno = 12, tf_err = 0, tf_eip = -1071367104, tf_cs = 8,
tf_eflags = 2163334, tf_esp = -1036583680, tf_ss = -1036583680})
at /usr/src/sys/i386/i386/trap.c:466
p = (struct proc *) 0x0
sticks = 18446744072637479814
i = 0
ucode = 0
type = 12
code = 0
eva = 48
#6 0xc0243c40 in acquire_lock (lk=0xc0351dfc) at /usr/src/sys/ufs/ffs/ffs_softdep.c:266
lk = (struct lockit *) 0xffffffff
holder = -1036583680
#7 0xc0247d40 in softdep_update_inodeblock (ip=0xc236fd00, bp=0xcc8e2f2c, waitfor=0)
at /usr/src/sys/ufs/ffs/ffs_softdep.c:3813
ip = (struct inode *) 0xc236fd00
inodedep = (struct inodedep *) 0xc039b3e0
wk = (struct worklist *) 0xc236fd00
gotit = -1036583680
#8 0xc0242d75 in ffs_update (vp=0xdb241380, waitfor=0) at /usr/src/sys/ufs/ffs/ffs_inode.c:106
fs = (struct fs *) 0xc2356800
bp = (struct buf *) 0xcc8e2f2c
ip = (struct inode *) 0xc236fd00
error = 0
#9 0xc024c775 in ffs_fsync (ap=0xc032d228) at /usr/src/sys/ufs/ffs/ffs_vnops.c:273
vp = (struct vnode *) 0xdb241380
bp = (struct buf *) 0x0
nbp = (struct buf *) 0xc032d23c
s = -1
error = 0
wait = 0
passes = 4
skipmeta = 0
lbn = 36
#10 0xc024b04b in ffs_sync (mp=0xc230e600, waitfor=2, cred=0xc145e900, p=0xc039b3e0) at vnode_if.h:558
a = {a_desc = 0xc032db40, a_vp = 0xdb241380, a_cred = 0xc145e900, a_waitfor = 2,
a_p = 0xc039b3e0}
vp = (struct vnode *) 0xdb241380
cred = (struct ucred *) 0xc145e900
waitfor = 2
p = (struct proc *) 0xc039b3e0
p = (struct proc *) 0xc039b3e0
nvp = (struct vnode *) 0xdb240f00
vp = (struct vnode *) 0xdb241380
ip = (struct inode *) 0x0
ump = (struct ufsmount *) 0xc230e400
fs = (struct fs *) 0xc2356800
error = 0
allerror = 0
#11 0xc01a2823 in sync (p=0xc039b3e0, uap=0x0) at /usr/src/sys/kern/vfs_syscalls.c:577
p = (struct proc *) 0xc039b3e0
mp = (struct mount *) 0xc230e600
nmp = (struct mount *) 0x0
asyncflag = 0
#12 0xc0171b76 in boot (howto=256) at /usr/src/sys/kern/kern_shutdown.c:235
bp = (struct buf *) 0x0
iter = 5
nbusy = -1070447284
pbusy = -1070411092
howto = 256
#13 0xc0172200 in poweroff_wait (junk=0xc032454c, howto=-1070448561)
at /usr/src/sys/kern/kern_shutdown.c:595
fmt = 0xc032454c "%s"
bootopt = 256
buf = "page fault", '\000' <repeats 245 times>
#14 0xc02d0976 in trap_fatal (frame=0xc032d348, eva=54) at /usr/src/sys/i386/i386/trap.c:974
frame = (struct trapframe *) 0x100
code = -1070447284
type = 12
ss = -1070447284
esp = 0
softseg = {ssd_base = 0, ssd_limit = 1048575, ssd_type = 27, ssd_dpl = 0, ssd_p = 1,
ssd_xx = 0, ssd_xx1 = 3, ssd_def32 = 1, ssd_gran = 1}
#15 0xc02d0649 in trap_pfault (frame=0xc032d348, usermode=0, eva=54)
at /usr/src/sys/i386/i386/trap.c:867
va = 0
vm = (struct vmspace *) 0x0
map = 0xc
rv = 0
ftype = 0 '\000'
p = (struct proc *) 0x0
#16 0xc02d0233 in trap (frame={tf_fs = 16, tf_es = 16, tf_ds = 16, tf_edi = -778522624,
tf_esi = -1070027476, tf_ebp = -1070410712, tf_isp = -1070410892, tf_ebx = 0, tf_edx = 0,
tf_ecx = -1070411001, tf_eax = 1, tf_trapno = 12, tf_err = 2, tf_eip = -1071290630, tf_cs = 8,
tf_eflags = 2163334, tf_esp = 0, tf_ss = -1070027476}) at /usr/src/sys/i386/i386/trap.c:466
p = (struct proc *) 0x0
sticks = 13851009206265949694
i = 0
ucode = 0
type = 12
code = 0
eva = 54
#17 0xc02566fa in vm_fault (map=0xc038ad2c, vaddr=3516444672, fault_type=2 '\002', fault_flags=0)
at /usr/src/sys/vm/vm_object.h:189
object = 0x0
fault_type = 2 '\002'
prot = 7 '\a'
result = -1
wired = 0
map_generation = 1
next_object = 0xffffffff
marray = {0xc21fc000, 0xc032d43c, 0xc032d418, 0xc0235f94, 0xc21fc000, 0xc02362b9, 0x400000,
0xc032d43c, 0xc21fc000, 0x18, 0x400000, 0x0, 0xc032d444, 0xc02364aa, 0xc21fc000, 0xc032d43c}
hardfault = 0
faultcount = -1
fs = {m = 0xcdc07000, object = 0xcdc0b000, pindex = 3256860672, first_m = 0xc21fc000,
first_object = 0x0, first_pindex = 4688, map = 0xc038ab7c, entry = 0xc038a750,
lookup_still_valid = 24, vp = 0x0}
#18 0xc02d05f6 in trap_pfault (frame=0xc032d49c, usermode=0, eva=3516445284)
at /usr/src/sys/i386/i386/trap.c:856
va = 3516444672
vm = (struct vmspace *) 0x0
map = 0xc038ad2c
rv = 0
ftype = 2 '\002'
p = (struct proc *) 0x0
#19 0xc02d0233 in trap (frame={tf_fs = 16, tf_es = 16, tf_ds = 16, tf_edi = 4194304, tf_esi = -1,
tf_ebp = -1070410528, tf_isp = -1070410552, tf_ebx = -616643520, tf_edx = -778522016,
tf_ecx = -1, tf_eax = -616644768, tf_trapno = 12, tf_err = 2, tf_eip = -1072212870, tf_cs = 8,
tf_eflags = 2163334, tf_esp = -616643520, tf_ss = -1070410508})
at /usr/src/sys/i386/i386/trap.c:466
p = (struct proc *) 0x0
sticks = 4294968380
i = 0
ucode = 0
type = 12
code = 0
eva = 3516445284
#20 0xc017547a in unsleep (p=0xdb3ec440) at /usr/src/sys/kern/kern_synch.c:710
p = (struct proc *) 0xffffffff
s = 0
#21 0xc01757f6 in setrunnable (p=0xdb3ec440) at /usr/src/sys/kern/kern_synch.c:903
p = (struct proc *) 0xdb3ec440
s = -1
#22 0xc017543d in endtsleep (arg=0xdb3ec440) at /usr/src/sys/kern/kern_synch.c:691
p = (struct proc *) 0xdb3ec440
s = 4194304
#23 0xc0177e59 in softclock () at /usr/src/sys/kern/kern_timeout.c:131
c_func = (void (*)()) 0xc017541c <endtsleep>
c_arg = (void *) 0xdb3ec440
c = (struct callout *) 0x0
bucket = (struct callout_tailq *) 0xcc893b50
s = 4194304
curticks = 49574
steps = -616643520
#24 0xc02c3763 in doreti_swi ()
No symbol table info available.
(kgdb) quit
# dmesg
Copyright (c) 1992-2003 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
The Regents of the University of California. All rights reserved.
FreeBSD 4.9-RC #0: Wed Oct 1 14:42:48 EDT 2003
root@lichen.forest.org:/usr/obj/usr/src/sys/LICHEN
Timecounter "i8254" frequency 1193182 Hz
CPU: AMD Athlon(tm) processor (1197.37-MHz 686-class CPU)
Origin = "AuthenticAMD" Id = 0x642 Stepping = 2
Features=0x183f9ff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR>
AMD Features=0xc0440000<RSVD,AMIE,DSP,3DNow!>
real memory = 536805376 (524224K bytes)
avail memory = 518094848 (505952K bytes)
Preloaded elf kernel "kernel" at 0xc0416000.
VESA: v3.0, 32768k memory, flags:0x1, mode table:0xc039ab22 (1000022)
VESA: WinFast VGA BIOS.
Pentium Pro MTRR support enabled
md0: Malloc disk
Using $PIR table, 10 entries at 0xc00fded0
npx0: <math processor> on motherboard
npx0: INT 16 interface
pcib0: <Host to PCI bridge> on motherboard
pci0: <PCI bus> on pcib0
agp0: <VIA 82C8363 (Apollo KT133A) host to PCI bridge> mem 0xd8000000-0xdbffffff at device 0.0 on pci0
pcib1: <VIA 8363 (Apollo KT133) PCI-PCI (AGP) bridge> at device 1.0 on pci0
pci1: <PCI bus> on pcib1
pci1: <NVidia GeForce2 GTS graphics accelerator> at 0.0 irq 9
isab0: <VIA 82C686 PCI-ISA bridge> at device 7.0 on pci0
isa0: <ISA bus> on isab0
atapci0: <VIA 82C686 ATA100 controller> port 0xd000-0xd00f at device 7.1 on pci0
atapci0: Correcting VIA config for southbridge data corruption bug
ata0: at 0x1f0 irq 14 on atapci0
ata1: at 0x170 irq 15 on atapci0
uhci0: <VIA 83C572 USB controller> port 0xd400-0xd41f irq 10 at device 7.2 on pci0
usb0: <VIA 83C572 USB controller> on uhci0
usb0: USB revision 1.0
uhub0: VIA UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
uhci1: <VIA 83C572 USB controller> port 0xd800-0xd81f irq 10 at device 7.3 on pci0
usb1: <VIA 83C572 USB controller> on uhci1
usb1: USB revision 1.0
uhub1: VIA UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub1: 2 ports with 2 removable, self powered
pci0: <unknown card> (vendor=0x1106, dev=0x3057) at 7.4
xl0: <3Com 3c905C-TX Fast Etherlink XL> port 0xdc00-0xdc7f mem 0xe2000000-0xe200007f irq 11 at device 11.0 on pci0
xl0: Ethernet address: 00:01:03:d0:e9:f6
miibus0: <MII bus> on xl0
ukphy0: <Generic IEEE 802.3u media interface> on miibus0
ukphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
xl1: <3Com 3c900-COMBO Etherlink XL> port 0xe000-0xe03f irq 10 at device 12.0 on pci0
xl1: Ethernet address: 00:60:97:2d:be:4e
xl1: selecting 10baseT transceiver, half duplex
pci0: <Matrox MGA 1024SG/1064SG/1164SG graphics accelerator> at 13.0 irq 9
pcm0: <CMedia CMI8738> port 0xe400-0xe4ff irq 11 at device 15.0 on pci0
orm0: <Option ROM> at iomem 0xc0000-0xcbfff on isa0
pmtimer0 on isa0
fdc0: <NEC 72065B or clone> at port 0x3f0-0x3f5,0x3f7 irq 6 drq 2 on isa0
fdc0: FIFO enabled, 8 bytes threshold
fd0: <1440-KB 3.5" drive> on fdc0 drive 0
atkbdc0: <Keyboard controller (i8042)> at port 0x60,0x64 on isa0
atkbd0: <AT Keyboard> flags 0x1 irq 1 on atkbdc0
kbd0 at atkbd0
psm0: <PS/2 Mouse> irq 12 on atkbdc0
psm0: model IntelliMouse, device ID 3
vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
sc0: <System console> at flags 0x100 on isa0
sc0: VGA <16 virtual consoles, flags=0x300>
sio0 at port 0x3f8-0x3ff irq 4 flags 0x10 on isa0
sio0: type 16550A
sio1 at port 0x2f8-0x2ff irq 3 on isa0
sio1: type 16550A
ppc0: <Parallel port> at port 0x378-0x37f irq 7 on isa0
ppc0: Generic chipset (EPP/NIBBLE) in COMPATIBLE mode
ppi0: <Parallel I/O> on ppbus0
plip0: <PLIP network interface> on ppbus0
lpt0: <Printer> on ppbus0
lpt0: Interrupt-driven port
ad0: 39205MB <Maxtor 6E040L0> [79656/16/63] at ata0-master UDMA100
ad1: 19623MB <IC35L020AVER07-0> [39870/16/63] at ata0-slave UDMA100
acd0: DVD-ROM <Pioneer DVD-ROM ATAPIModel DVD-120S> at ata1-master UDMA66
acd1: CD-RW <LITE-ON LTR-52246S> at ata1-slave UDMA33
Mounting root from ufs:/dev/ad0s1a
cd0 at ata1 bus 0 target 0 lun 0
cd0: <PIONEER DVD-ROM DVD-120S 1.01> Removable CD-ROM SCSI-0 device
cd0: 66.000MB/s transfers
cd0: Attempt to query device size failed: NOT READY, Medium not present
cd1 at ata1 bus 0 target 1 lun 0
cd1: <LITE-ON LTR-52246S 6S0D> Removable CD-ROM SCSI-0 device
cd1: 33.000MB/s transfers
cd1: Attempt to query device size failed: NOT READY, Medium not present
WARNING: / was not properly dismounted
# ldd /usr/local/bin/mplayer
/usr/local/bin/mplayer:
libmad.so.1 => /usr/local/lib/libmad.so.1 (0x2832c000)
libvorbis.so.2 => /usr/local/lib/libvorbis.so.2 (0x28343000)
libogg.so.4 => /usr/local/lib/libogg.so.4 (0x28363000)
libxvidcore.so.2 => /usr/local/lib/libxvidcore.so.2 (0x28367000)
libpng.so.5 => /usr/local/lib/libpng.so.5 (0x283e1000)
libz.so.2 => /usr/lib/libz.so.2 (0x28404000)
libjpeg.so.9 => /usr/local/lib/libjpeg.so.9 (0x28411000)
libxmms.so.4 => /usr/X11R6/lib/libxmms.so.4 (0x2842f000)
libfreetype.so.9 => /usr/local/lib/libfreetype.so.9 (0x2843f000)
libncurses.so.5 => /usr/lib/libncurses.so.5 (0x2849f000)
libcdda_interface.so.0 => /usr/local/lib/libcdda_interface.so.0 (0x284e0000)
libcdda_paranoia.so.0 => /usr/local/lib/libcdda_paranoia.so.0 (0x284ee000)
libungif.so.5 => /usr/local/lib/libungif.so.5 (0x284f6000)
libgtk12.so.2 => /usr/X11R6/lib/libgtk12.so.2 (0x284fe000)
libgdk12.so.2 => /usr/X11R6/lib/libgdk12.so.2 (0x28626000)
libgmodule12.so.3 => /usr/local/lib/libgmodule12.so.3 (0x2865a000)
libglib12.so.3 => /usr/local/lib/libglib12.so.3 (0x2865d000)
libintl.so.5 => /usr/local/lib/libintl.so.5 (0x2867f000)
libXi.so.6 => /usr/X11R6/lib/libXi.so.6 (0x28688000)
libXext.so.6 => /usr/X11R6/lib/libXext.so.6 (0x28690000)
libX11.so.6 => /usr/X11R6/lib/libX11.so.6 (0x2869e000)
libm.so.2 => /usr/lib/libm.so.2 (0x2875a000)
libaa.so.1 => /usr/local/lib/libaa.so.1 (0x28775000)
libGL.so.1 => /usr/X11R6/lib/libGL.so.1 (0x2878b000)
libXv.so.1 => /usr/X11R6/lib/libXv.so.1 (0x287e9000)
libSDL-1.1.so.5 => /usr/local/lib/libSDL-1.1.so.5 (0x287ee000)
libvgagl.so.1 => /usr/local/lib/libvgagl.so.1 (0x28842000)
libvga.so.1 => /usr/local/lib/libvga.so.1 (0x28850000)
libartsc.so.0 => /usr/local/lib/libartsc.so.0 (0x288a8000)
libesd.so.2 => /usr/local/lib/libesd.so.2 (0x288ae000)
libaudiofile.so.0 => /usr/local/lib/libaudiofile.so.0 (0x288b6000)
libiconv.so.3 => /usr/local/lib/libiconv.so.3 (0x288d7000)
libc_r.so.4 => /usr/lib/libc_r.so.4 (0x289c5000)
libc.so.4 => /usr/lib/libc.so.4 (0x28a7b000)
libgthread12.so.3 => /usr/local/lib/libgthread12.so.3 (0x28b14000)
libcam.so.2 => /usr/lib/libcam.so.2 (0x28b17000)
libXThrStub.so.6 => /usr/X11R6/lib/libXThrStub.so.6 (0x28b26000)
libusbhid.so.0 => /usr/lib/libusbhid.so.0 (0x28b28000)
libgnugetopt.so.1 => /usr/local/lib/libgnugetopt.so.1 (0x28b2c000)
% mplayer -v
MPlayer 0.92-2.95.4 (C) 2000-2003 MPlayer Team
CPU: Advanced Micro Devices Athlon TB Thunderbird (Family: 6, Stepping: 2)
Detected cache-line size is 64 bytes
CPUflags: MMX: 1 MMX2: 1 3DNow: 1 3DNow2: 1 SSE: 0 SSE2: 0
[...]
Anthony
--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20031002023519.GA21200>