Not doing anything special, just browsing in Firefox. I've had a
couple of different panics, but all have this weird owner=0x4. The
panic is in ata; maybe because I boot from da disks, my system
(usually) manages to stay up for a while before panicing... not in
this crash however. I have the core available for further debugging
if necessary.
Thanks,
Peter
# sudo kgdb kernel.debug /work/vmcore.3
kgdb: kvm_nlist(_stopped_cpus):
kgdb: kvm_nlist(_stoppcbs):
[GDB will not be able to debug user-mode threads:
/usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"]
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for
details.
This GDB was configured as "i386-marcel-freebsd".
Unread portion of the kernel message buffer:
acd0: WARNING - PREVENT_ALLOW read data overrun 18>0
kernel trap 12 with interrupts disabled
Fatal trap 12: page fault while in kernel mode
fault virtual address = 0x78
fault code = supervisor read, page not present
instruction pointer = 0x20:0xc055027d
stack pointer = 0x28:0xe3967be0
frame pointer = 0x28:0xe3967be4
code segment = base 0x0, limit 0xfffff, type 0x1b
= DPL 0, pres 1, def32 1, gran 1
processor eflags = resume, IOPL = 0
current process = 16 (swi6: task queue)
trap number = 12
panic: page fault
Uptime: 4m50s
Dumping 1023 MB (2 chunks)
chunk 0: 1MB (159 pages) ... ok
chunk 1: 1023MB (261868 pages) 1007 991 975 959 943 927 911 895 879
863 847 831 815 799 783 767 751 735 719 703 687 671 655 639 623 607
591 575 559 543 527 511 495 479 463 447 431 415 399 383 367 351 335
319 303 287 271 255 239 223 207 191 175 159 143 127 111 95 79 63 47 31
15
#0 doadump () at pcpu.h:165
165 __asm __volatile("movl %%fs:0,%0" : "=r"
(td));
(kgdb) bt
#0 doadump () at pcpu.h:165
#1 0xc0529294 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:409
#2 0xc05295c6 in panic (fmt=0xc06f9eb1 "%s")
at /usr/src/sys/kern/kern_shutdown.c:565
#3 0xc06de87c in trap_fatal (frame=0xe3967ba0, eva=0)
at /usr/src/sys/i386/i386/trap.c:837
#4 0xc06ddf54 in trap (frame {tf_fs = 8, tf_es = 40, tf_ds = 40, tf_edi =
-987230208, tf_esi
= -991219328, tf_ebp = -476677148, tf_isp = -476677172, tf_ebx -991291328,
tf_edx = -991219328, tf_ecx = 4, tf_eax = 4, tf_trapno 12, tf_err = 0, tf_eip =
-1068170627, tf_cs = 32, tf_eflags = 589831,
tf_esp = -991219328, tf_ss = -476677112})
at /usr/src/sys/i386/i386/trap.c:270
#5 0xc06c93ba in calltrap () at /usr/src/sys/i386/i386/exception.s:139
#6 0xc055027d in turnstile_setowner (ts=0xc4ea1840, owner=0x4)
at /usr/src/sys/kern/subr_turnstile.c:434
#7 0xc05505da in turnstile_wait (lock=0xc528104c, owner=0x4)
at /usr/src/sys/kern/subr_turnstile.c:593
#8 0xc051e974 in _mtx_lock_sleep (m=0xc528104c, tid=3303747968, opts=0,
file=0x0, line=0) at /usr/src/sys/kern/kern_mutex.c:579
#9 0xc05285f8 in _sema_post (sema=0xc528104c, file=0x0, line=0)
at /usr/src/sys/kern/kern_sema.c:79
#10 0xc0488b11 in ata_completed (context=0xc5281000, dummy=1)
at /usr/src/sys/dev/ata/ata-queue.c:481
#11 0xc054ee3d in taskqueue_run (queue=0xc4ef0e00)
at /usr/src/sys/kern/subr_taskqueue.c:257
#12 0xc054f0d3 in taskqueue_swi_run (dummy=0x0)
at /usr/src/sys/kern/subr_taskqueue.c:299
#13 0xc050f5fc in ithread_execute_handlers (p=0xc4eb1a78, ie=0xc4ef0d80)
at /usr/src/sys/kern/kern_intr.c:682
#14 0xc050f756 in ithread_loop (arg=0xc4f25590)
at /usr/src/sys/kern/kern_intr.c:765
#15 0xc050e13f in fork_exit (callout=0xc050f6f0 <ithread_loop>, arg=0x4,
frame=0x4) at /usr/src/sys/kern/kern_fork.c:830
#16 0xc06c941c in fork_trampoline () at /usr/src/sys/i386/i386/exception.s:208
(kgdb) list *0xc055027d
0xc055027d is in turnstile_setowner (/usr/src/sys/kern/subr_turnstile.c:435).
430
431 mtx_assert(&td_contested_lock, MA_OWNED);
432 MPASS(owner->td_proc->p_magic == P_MAGIC);
433 MPASS(ts->ts_owner == NULL);
434 ts->ts_owner = owner;
435 LIST_INSERT_HEAD(&owner->td_contested, ts, ts_link);
436 }
437
438 /*
439 * Malloc a turnstile for a new thread, initialize it and return it.
(kgdb) up 8
#8 0xc051e974 in _mtx_lock_sleep (m=0xc528104c, tid=3303747968, opts=0,
file=0x0, line=0) at /usr/src/sys/kern/kern_mutex.c:579
579 turnstile_wait(&m->mtx_object, mtx_owner(m));
(kgdb) list
574 #endif
575
576 /*
577 * Block on the turnstile.
578 */
579 turnstile_wait(&m->mtx_object, mtx_owner(m));
580 }
581
582 #ifdef KTR
583 if (cont_logged) {
(kgdb) print *m
$1 = {mtx_object = {lo_class = 0xc073a044,
lo_name = 0xc06ff5f2 "ATA request done",
lo_type = 0xc0709820 "sema backing lock", lo_flags = 262144,
lo_list = {
tqe_next = 0x0, tqe_prev = 0x0}, lo_witness = 0x0}, mtx_lock = 6,
mtx_recurse = 0}
(kgdb)
# dmesg
Copyright (c) 1992-2007 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
The Regents of the University of California. All rights reserved.
FreeBSD is a registered trademark of The FreeBSD Foundation.
FreeBSD 6.2-STABLE #2: Sat Aug 11 22:55:00 PDT 2007
root@XXX.XXX.XXX:/work/obj/usr/src/sys/WORKSTATION
ACPI APIC Table: <ASUS A7M266-D>
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: AMD Athlon(TM) MP 1800+ (1533.40-MHz 686-class CPU)
Origin = "AuthenticAMD" Id = 0x662 Stepping = 2
Features=0x383fbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR,SSE>
AMD Features=0xc0480800<SYSCALL,MP,MMX+,3DNow+,3DNow>
real memory = 1073659904 (1023 MB)
avail memory = 1037479936 (989 MB)
ioapic0 <Version 1.1> irqs 0-23 on motherboard
kbd1 at kbdmux0
acpi0: <ASUS A7M266-D> on motherboard
acpi0: Power Button (fixed)
acpi0: Sleep Button (fixed)
Timecounter "ACPI-fast" frequency 3579545 Hz quality 1000
acpi_timer0: <24-bit timer at 3.579545MHz> port 0xe408-0xe40b on acpi0
cpu0: <ACPI CPU> on acpi0
acpi_button0: <Power Button> on acpi0
pcib0: <ACPI Host-PCI bridge> port 0xcf8-0xcff on acpi0
pci0: <ACPI PCI bus> on pcib0
pcib1: <ACPI PCI-PCI bridge> at device 1.0 on pci0
pci1: <ACPI PCI bus> on pcib1
nvidia0: <GeForce 6800> mem
0xe6000000-0xe6ffffff,0xe8000000-0xefffffff,0xe5000000-0xe5ffffff irq
16 at device 5.0 on pci1
nvidia0: [GIANT-LOCKED]
isab0: <PCI-ISA bridge> at device 7.0 on pci0
isa0: <ISA bus> on isab0
atapci0: <AMD 768 UDMA100 controller> port
0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xd800-0xd80f at device 7.1 on
pci0
ata0: <ATA channel 0> on atapci0
ata1: <ATA channel 1> on atapci0
pci0: <bridge> at device 7.3 (no driver attached)
em0: <Intel(R) PRO/1000 Network Connection Version - 6.2.9> port
0xd400-0xd43f mem 0xe4800000-0xe481ffff,0xe4000000-0xe403ffff irq 20
at device 8.0 on pci0
em0: Ethernet address: 00:04:23:b5:a8:07
ahc0: <Adaptec 29160 Ultra160 SCSI adapter> port 0xd000-0xd0ff mem
0xe3800000-0xe3800fff irq 21 at device 9.0 on pci0
ahc0: [GIANT-LOCKED]
aic7892: Ultra160 Wide Channel A, SCSI Id=7, 32/253 SCBs
pcib2: <ACPI PCI-PCI bridge> at device 16.0 on pci0
pci2: <ACPI PCI bus> on pcib2
pci2: <multimedia, audio> at device 4.0 (no driver attached)
fwohci0: <VIA Fire II (VT6306)> port 0xb400-0xb47f mem
0xe2800000-0xe28007ff irq 18 at device 5.0 on pci2
fwohci0: OHCI version 1.0 (ROM=1)
fwohci0: No. of Isochronous channels is 8.
fwohci0: EUI64 00:01:08:00:37:00:b4:9e
fwohci0: Phy 1394a available S400, 3 ports.
fwohci0: Link S400, max_rec 2048 bytes.
firewire0: <IEEE1394(FireWire) bus> on fwohci0
sbp0: <SBP-2/SCSI over FireWire> on firewire0
fwe0: <Ethernet over FireWire> on firewire0
if_fwe0: Fake Ethernet address: 02:01:08:00:b4:9e
fwe0: Ethernet address: 02:01:08:00:b4:9e
fwe0: if_start running deferred for Giant
fwohci0: Initiate bus reset
fwohci0: BUS reset
fwohci0: node_id=0xc000ffc0, gen=1, CYCLEMASTER mode
firewire0: 1 nodes, maxhop <= 0, cable IRM = 0 (me)
firewire0: bus manager 0 (me)
pcm0: <Creative EMU10K1> port 0xb000-0xb01f irq 17 at device 6.0 on pci2
pcm0: <TriTech TR28602 AC97 Codec>
fdc0: <floppy drive controller> port 0x3f2-0x3f5,0x3f7 irq 6 drq 2 on
acpi0
fdc0: [FAST]
fd0: <1440-KB 3.5" drive> on fdc0 drive 0
ppc0: <ECP parallel printer port> port 0x378-0x37f,0x778-0x77f irq 7
drq 3 on acpi0
ppc0: SMC-like chipset (ECP/EPP/PS2/NIBBLE) in COMPATIBLE mode
ppc0: FIFO with 16/16/9 bytes threshold
ppbus0: <Parallel port bus> on ppc0
lpt0: <Printer> on ppbus0
lpt0: Interrupt-driven port
ppi0: <Parallel I/O> on ppbus0
sio0: <16550A-compatible COM port> port 0x3f8-0x3ff irq 4 flags 0x10 on
acpi0
sio0: type 16550A
sio1: <16550A-compatible COM port> port 0x2f8-0x2ff irq 3 on acpi0
sio1: type 16550A
atkbdc0: <Keyboard controller (i8042)> port 0x60,0x64 irq 1 on acpi0
atkbd0: <AT Keyboard> irq 1 on atkbdc0
kbd0 at atkbd0
atkbd0: [GIANT-LOCKED]
psm0: <PS/2 Mouse> irq 12 on atkbdc0
psm0: [GIANT-LOCKED]
psm0: model IntelliMouse Explorer, device ID 4
pmtimer0 on isa0
orm0: <ISA Option ROM> at iomem 0xc0000-0xce7ff on isa0
sc0: <System console> at flags 0x100 on isa0
sc0: VGA <16 virtual consoles, flags=0x300>
vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
Timecounter "TSC" frequency 1533400777 Hz quality 800
Timecounters tick every 1.000 msec
Waiting 5 seconds for SCSI devices to settle
acd0: DVDR <PLEXTOR DVDR PX-708A/1.08> at ata0-master UDMA33
sa0 at ahc0 bus 0 target 4 lun 0
sa0: <SONY SDT-9000 0200> Removable Sequential Access SCSI-2 device
sa0: 10.000MB/s transfers (10.000MHz, offset 15)
da0 at ahc0 bus 0 target 0 lun 0
da0: <SEAGATE ST336607LW 0007> Fixed Direct Access SCSI-3 device
da0: 160.000MB/s transfers (80.000MHz, offset 63, 16bit), Tagged
Queueing Enabled
da0: 35003MB (71687372 512 byte sectors: 255H 63S/T 4462C)
da1 at ahc0 bus 0 target 1 lun 0
da1: <SEAGATE ST318451LW 0003> Fixed Direct Access SCSI-3 device
da1: 160.000MB/s transfers (80.000MHz, offset 63, 16bit), Tagged
Queueing Enabled
da1: 17501MB (35843671 512 byte sectors: 255H 63S/T 2231C)
da2 at ahc0 bus 0 target 5 lun 0
da2: <IOMEGA ZIP 100 J.03> Removable Direct Access SCSI-2 device
da2: 3.300MB/s transfers
da2: 96MB (196608 512 byte sectors: 64H 32S/T 96C)
cd0 at ahc0 bus 0 target 3 lun 0
cd0: <PLEXTOR CD-ROM PX-32TS 1.01> Removable CD-ROM SCSI-2 device
cd0: 20.000MB/s transfers (20.000MHz, offset 15)
cd0: Attempt to query device size failed: NOT READY, Medium not present
Trying to mount root from ufs:/dev/da0s2a
fuse4bsd: version 0.3.0, FUSE ABI 7.8