John Stalker
2006-Aug-06 13:29 UTC
Frequent panics on Dell Latitude D610 running 6.1-STABLE GENERIC
I am experiencing frequent panics on a new Dell Latitude D610 running
a generic 6-STABLE kernel. They are not exactly repeatable, but they
always occur in one of two situations: running shutdown as root in an
xterm or exiting from a window manager (WindowMaker or Blackbox) to
a display manager (xdm or wdm). Included below are output from uname,
kldstat, dmesg and kgdb. Any help would be greatly appreciated,
including suggestions about how to further diagnose the problem.
Script started on Sun Aug 6 15:22:46 2006
# uname -a
FreeBSD shrek 6.1-STABLE FreeBSD 6.1-STABLE #0: Mon Jul 31 21:26:54 IST 2006
root@shrek:/usr/obj/usr/src/sys/GENERIC i386
# kldstat
Id Refs Address Size Name
1 20 0xc0400000 6e1138 kernel
2 1 0xc0ae2000 5f7c snd_ich.ko
3 2 0xc0ae8000 22614 sound.ko
4 2 0xc0b0b000 cc58 if_ndis.ko
5 3 0xc0b18000 176e8 ndis.ko
6 1 0xc0b30000 84a48 BCMWL5_SYS.ko
7 1 0xc0bb5000 5acc4 acpi.ko
8 1 0xc6ca8000 3000 daemon_saver.ko
9 1 0xc6e9e000 1e000 radeon.ko
10 1 0xc6ebc000 e000 drm.ko
# dmesg
Copyright (c) 1992-2006 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
The Regents of the University of California. All rights reserved.
FreeBSD 6.1-STABLE #0: Mon Jul 31 21:26:54 IST 2006
root@shrek:/usr/obj/usr/src/sys/GENERIC
ACPI APIC Table: <DELL CPi R >
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: Intel(R) Pentium(R) M processor 2.00GHz (1995.01-MHz 686-class CPU)
Origin = "GenuineIntel" Id = 0x6d8 Stepping = 8
Features=0xafe9fbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,TM,PBE>
Features2=0x180<EST,TM2>
AMD Features=0x100000<NX>
real memory = 2147291136 (2047 MB)
avail memory = 2092167168 (1995 MB)
ioapic0: Changing APIC ID to 1
ioapic0 <Version 2.0> irqs 0-23 on motherboard
kbd1 at kbdmux0
ath_hal: 0.9.17.2 (AR5210, AR5211, AR5212, RF5111, RF5112, RF2413, RF5413)
acpi0: <DELL CPi R > on motherboard
Timecounter "ACPI-fast" frequency 3579545 Hz quality 1000
acpi_timer0: <24-bit timer at 3.579545MHz> port 0x1008-0x100b on acpi0
cpu0: <ACPI CPU> on acpi0
acpi_throttle0: <ACPI CPU Throttling> on cpu0
acpi_acad0: <AC Adapter> on acpi0
battery0: <ACPI Control Method Battery> on acpi0
battery1: <ACPI Control Method Battery> on acpi0
acpi_lid0: <Control Method Lid Switch> on acpi0
acpi_button0: <Power Button> on acpi0
acpi_button1: <Sleep Button> on acpi0
pcib0: <ACPI Host-PCI bridge> port 0xcf8-0xcff on acpi0
pci0: <ACPI PCI bus> on pcib0
pcib1: <ACPI PCI-PCI bridge> at device 1.0 on pci0
pci1: <ACPI PCI bus> on pcib1
pci1: <display, VGA> at device 0.0 (no driver attached)
pcib2: <ACPI PCI-PCI bridge> at device 28.0 on pci0
pci2: <ACPI PCI bus> on pcib2
bge0: <Broadcom BCM5751 Gigabit Ethernet, ASIC rev. 0x4001> mem
0xdfcf0000-0xdfcfffff irq 16 at device 0.0 on pci2
miibus0: <MII bus> on bge0
brgphy0: <BCM5750 10/100/1000baseTX PHY> on miibus0
brgphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseTX,
1000baseTX-FDX, auto
bge0: Ethernet address: 00:15:c5:14:bc:5d
uhci0: <Intel 82801FB/FR/FW/FRW (ICH6) USB controller USB-A> port
0xbf80-0xbf9f irq 16 at device 29.0 on pci0
uhci0: [GIANT-LOCKED]
usb0: <Intel 82801FB/FR/FW/FRW (ICH6) USB controller USB-A> on uhci0
usb0: USB revision 1.0
uhub0: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
uhci1: <Intel 82801FB/FR/FW/FRW (ICH6) USB controller USB-B> port
0xbf60-0xbf7f irq 17 at device 29.1 on pci0
uhci1: [GIANT-LOCKED]
usb1: <Intel 82801FB/FR/FW/FRW (ICH6) USB controller USB-B> on uhci1
usb1: USB revision 1.0
uhub1: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub1: 2 ports with 2 removable, self powered
uhci2: <Intel 82801FB/FR/FW/FRW (ICH6) USB controller USB-C> port
0xbf40-0xbf5f irq 18 at device 29.2 on pci0
uhci2: [GIANT-LOCKED]
usb2: <Intel 82801FB/FR/FW/FRW (ICH6) USB controller USB-C> on uhci2
usb2: USB revision 1.0
uhub2: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub2: 2 ports with 2 removable, self powered
uhci3: <Intel 82801FB/FR/FW/FRW (ICH6) USB controller USB-D> port
0xbf20-0xbf3f irq 19 at device 29.3 on pci0
uhci3: [GIANT-LOCKED]
usb3: <Intel 82801FB/FR/FW/FRW (ICH6) USB controller USB-D> on uhci3
usb3: USB revision 1.0
uhub3: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub3: 2 ports with 2 removable, self powered
ehci0: <Intel 82801FB (ICH6) USB 2.0 controller> mem 0xffa80800-0xffa80bff
irq 16 at device 29.7 on pci0
ehci0: [GIANT-LOCKED]
usb4: EHCI version 1.0
usb4: companion controllers, 2 ports each: usb0 usb1 usb2 usb3
usb4: <Intel 82801FB (ICH6) USB 2.0 controller> on ehci0
usb4: USB revision 2.0
uhub4: Intel EHCI root hub, class 9/0, rev 2.00/1.00, addr 1
uhub4: 8 ports with 8 removable, self powered
pcib3: <ACPI PCI-PCI bridge> at device 30.0 on pci0
pci3: <ACPI PCI bus> on pcib3
cbb0: <PCI-CardBus Bridge> at device 1.0 on pci3
cardbus0: <CardBus bus> on cbb0
pccard0: <16-bit PCCard bus> on cbb0
pci3: <simple comms> at device 1.5 (no driver attached)
ndis0: <Dell TrueMobile 1400 Dual Band WLAN Mini-PCI Card> mem
0xdfbfe000-0xdfbfffff irq 17 at device 3.0 on pci3
ndis0: NDIS API version: 5.1
ndis0: Ethernet address: 00:14:a5:4b:c3:d3
pcm0: <Intel ICH6 (82801FB)> port 0xed00-0xedff,0xec40-0xec7f mem
0xdffffe00-0xdfffffff,0xdffffd00-0xdffffdff irq 16 at device 30.2 on pci0
pcm0: <SigmaTel STAC9750/51 AC97 Codec>
pci0: <simple comms, generic modem> at device 30.3 (no driver attached)
isab0: <PCI-ISA bridge> at device 31.0 on pci0
isa0: <ISA bus> on isab0
atapci0: <Intel ICH6 SATA150 controller> port
0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xbfa0-0xbfaf irq 17 at device 31.2 on pci0
atapci0: failed to enable memory mapping!
ata0: <ATA channel 0> on atapci0
ata1: <ATA channel 1> on atapci0
acpi_tz0: <Thermal Zone> on acpi0
atkbdc0: <Keyboard controller (i8042)> port 0x60,0x64,0x62,0x66 irq 1 on
acpi0
atkbd0: <AT Keyboard> irq 1 on atkbdc0
kbd0 at atkbd0
atkbd0: [GIANT-LOCKED]
psm0: <PS/2 Mouse> irq 12 on atkbdc0
psm0: [GIANT-LOCKED]
psm0: model GlidePoint, device ID 0
sio0: <16550A-compatible COM port> port 0x3f8-0x3ff irq 4 flags 0x10 on
acpi0
sio0: type 16550A
ppc0: <ECP parallel printer port> port 0x378-0x37f,0x778-0x77b irq 7 drq 1
on acpi0
ppc0: SMC-like chipset (ECP/EPP/PS2/NIBBLE) in COMPATIBLE mode
ppc0: FIFO with 16/16/8 bytes threshold
ppbus0: <Parallel port bus> on ppc0
plip0: <PLIP network interface> on ppbus0
lpt0: <Printer> on ppbus0
lpt0: Interrupt-driven port
ppi0: <Parallel I/O> on ppbus0
pmtimer0 on isa0
orm0: <ISA Option ROM> at iomem 0xc0000-0xcffff on isa0
sc0: <System console> at flags 0x100 on isa0
sc0: VGA <16 virtual consoles, flags=0x300>
sio1: configured irq 3 not in bitmap of probed irqs 0
sio1: port may not be enabled
vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
Timecounter "TSC" frequency 1995013954 Hz quality 800
Timecounters tick every 1.000 msec
ad0: 57231MB <Seagate ST96023A 8.01> at ata0-master UDMA100
acd0: DVDR <TSSTcorp DVD+/-RW TS-L532B/DE04> at ata1-master UDMA33
Trying to mount root from ufs:/dev/ad0s3a
WARNING: / was not properly dismounted
ndis0: link state changed to UP
drm0: <ATI Radeon Mobility X300 M22> port 0xde00-0xdeff mem
0xd0000000-0xd7ffffff,0xdfdf0000-0xdfdfffff irq 16 at device 0.0 on pci1
info: [drm] Initialized radeon 1.24.0 20060225
info: [drm] Setting GART location based on old memory map
info: [drm] Loading R300 Microcode
info: [drm] writeback test succeeded in 1 usecs
# kgdb kernel.debug /var/crash/vmcore.0
[GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so:
Undefined symbol "ps_pglobal_lookup"]
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for
details.
This GDB was configured as "i386-marcel-freebsd".
Unread portion of the kernel message buffer:
info: [drm] Setting GART location based on old memory map
info: [drm] Loading R300 Microcode
info: [drm] writeback test succeeded in 1 usecs
Fatal trap 12: page fault while in kernel mode
fault virtual address = 0xe946dd90
fault code = supervisor write, page not present
instruction pointer = 0x20:0xc0873f26
stack pointer = 0x28:0xe700dc2c
frame pointer = 0x28:0xe700dc54
code segment = base 0x0, limit 0xfffff, type 0x1b
= DPL 0, pres 1, def32 1, gran 1
processor eflags = interrupt enabled, resume, IOPL = 0
current process = 1191 (sh)
trap number = 12
panic: page fault
Uptime: 8m7s
Dumping 2047 MB (2 chunks)
chunk 0: 1MB (159 pages) ... ok
chunk 1: 2047MB (523985 pages) 2031 2015 1999 1983 1967 1951 1935 1919 1903
1887 1871 1855 1839 1823 1807 1791 1775 1759 1743 1727 1711 1695 1679 1663 1647
1631 1615 1599 1583 1567 1551 1535 1519 1503 1487 1471 1455 1439 1423 1407 1391
1375 1359 1343 1327 1311 1295 1279 1263 1247 1231 1215 1199 1183 1167 1151 1135
1119 1103 1087 1071 1055 1039 1023 1007 991 975 959 943 927 911 895 879 863 847
831 815 799 783 767 751 735 719 703 687 671 655 639 623 607 591 575 559 543 527
511 495 479 463 447 431 415 399 383 367 351 335 319 303 287 271 255 239 223 207
191 175 159 143 127 111 95 79 63 47 31 15
#0 doadump () at pcpu.h:165
165 __asm __volatile("movl %%fs:0,%0" : "=r" (td));
(kgdb) where
#0 doadump () at pcpu.h:165
#1 0xc0666d7a in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:409
#2 0xc0667010 in panic (fmt=0xc08cbc5d "%s")
at /usr/src/sys/kern/kern_shutdown.c:565
#3 0xc0876264 in trap_fatal (frame=0xe700dbec, eva=3913735568)
at /usr/src/sys/i386/i386/trap.c:836
#4 0xc0875fcb in trap_pfault (frame=0xe700dbec, usermode=0, eva=3913735568)
at /usr/src/sys/i386/i386/trap.c:744
#5 0xc0875c09 in trap (frame {tf_fs = -1026490360, tf_es = -1026490328,
tf_ds = -1026490328, tf_edi = -381231728, tf_esi = -419373680, tf_ebp =
-419373996, tf_isp = -419374056, tf_ebx = -381231728, tf_edx = -957628416,
tf_ecx = 156, tf_eax = 38141952, tf_trapno = 12, tf_err = 2, tf_eip =
-1064878298, tf_cs = 32, tf_eflags = 66054, tf_esp = -957632512, tf_ss =
-963273728}) at /usr/src/sys/i386/i386/trap.c:434
#6 0xc08643ca in calltrap () at /usr/src/sys/i386/i386/exception.s:139
#7 0xc0873f26 in generic_bcopy () at /usr/src/sys/i386/i386/support.s:489
Previous frame inner to this frame (corrupt stack?)
(kgdb) quit
# ^D
Script done on Sun Aug 6 15:24:59 2006
--
John Stalker
University of Dublin, Trinity College
School of Mathematics
John Stalker
2006-Aug-06 17:44 UTC
Frequent panics on Dell Latitude D610 running 6.1-STABLE GENERIC
> I am experiencing frequent panics on a new Dell Latitude D610 running > a generic 6-STABLE kernel. They are not exactly repeatable, but they > always occur in one of two situations: running shutdown as root in an > xterm or exiting from a window manager (WindowMaker or Blackbox) to > a display manager (xdm or wdm). Included below are output from uname, > kldstat, dmesg and kgdb. Any help would be greatly appreciated, > including suggestions about how to further diagnose the problem.I am not much wiser, but I have a few more backtraces. I tried removing various modules and changing various config options to see if they have any effect. It is impossible to be certain, since the panic is not completely reproducible, but I think the culprit is drm.ko. Any idea how I can confirm or refute this suspicion? Here are the backtraces, for what they're worth. Script started on Sun Aug 6 19:24:34 2006 # for i in 0 1 2 3 4 ; do echo where | kgdb kernel.debug /var/crash/vmcore.$i ; done [GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"] GNU gdb 6.1.1 [FreeBSD] Copyright 2004 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "i386-marcel-freebsd". Unread portion of the kernel message buffer: info: [drm] Setting GART location based on old memory map info: [drm] Loading R300 Microcode info: [drm] writeback test succeeded in 1 usecs Fatal trap 12: page fault while in kernel mode fault virtual address = 0xe946dd90 fault code = supervisor write, page not present instruction pointer = 0x20:0xc0873f26 stack pointer = 0x28:0xe700dc2c frame pointer = 0x28:0xe700dc54 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, def32 1, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 1191 (sh) trap number = 12 panic: page fault Uptime: 8m7s Dumping 2047 MB (2 chunks) chunk 0: 1MB (159 pages) ... ok chunk 1: 2047MB (523985 pages) 2031 2015 1999 1983 1967 1951 1935 1919 1903 1887 1871 1855 1839 1823 1807 1791 1775 1759 1743 1727 1711 1695 1679 1663 1647 1631 1615 1599 1583 1567 1551 1535 1519 1503 1487 1471 1455 1439 1423 1407 1391 1375 1359 1343 1327 1311 1295 1279 1263 1247 1231 1215 1199 1183 1167 1151 1135 1119 1103 1087 1071 1055 1039 1023 1007 991 975 959 943 927 911 895 879 863 847 831 815 799 783 767 751 735 719 703 687 671 655 639 623 607 591 575 559 543 527 511 495 479 463 447 431 415 399 383 367 351 335 319 303 287 271 255 239 223 207 191 175 159 143 127 111 95 79 63 47 31 15 #0 doadump () at pcpu.h:165 165 __asm __volatile("movl %%fs:0,%0" : "=r" (td)); (kgdb) #0 doadump () at pcpu.h:165 #1 0xc0666d7a in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:409 #2 0xc0667010 in panic (fmt=0xc08cbc5d "%s") at /usr/src/sys/kern/kern_shutdown.c:565 #3 0xc0876264 in trap_fatal (frame=0xe700dbec, eva=3913735568) at /usr/src/sys/i386/i386/trap.c:836 #4 0xc0875fcb in trap_pfault (frame=0xe700dbec, usermode=0, eva=3913735568) at /usr/src/sys/i386/i386/trap.c:744 #5 0xc0875c09 in trap (frame {tf_fs = -1026490360, tf_es = -1026490328, tf_ds = -1026490328, tf_edi = -381231728, tf_esi = -419373680, tf_ebp = -419373996, tf_isp = -419374056, tf_ebx = -381231728, tf_edx = -957628416, tf_ecx = 156, tf_eax = 38141952, tf_trapno = 12, tf_err = 2, tf_eip = -1064878298, tf_cs = 32, tf_eflags = 66054, tf_esp = -957632512, tf_ss = -963273728}) at /usr/src/sys/i386/i386/trap.c:434 ---Type <return> to continue, or q <return> to quit---#6 0xc08643ca in calltrap () at /usr/src/sys/i386/i386/exception.s:139 #7 0xc0873f26 in generic_bcopy () at /usr/src/sys/i386/i386/support.s:489 Previous frame inner to this frame (corrupt stack?) (kgdb) [GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"] GNU gdb 6.1.1 [FreeBSD] Copyright 2004 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "i386-marcel-freebsd". Unread portion of the kernel message buffer: info: [drm] Setting GART location based on old memory map info: [drm] Loading R300 Microcode info: [drm] writeback test succeeded in 1 usecs Fatal trap 12: page fault while in kernel mode fault virtual address = 0xe9437d90 fault code = supervisor write, page not present instruction pointer = 0x20:0xc0873f26 stack pointer = 0x28:0xe93ebc2c frame pointer = 0x28:0xe93ebc54 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, def32 1, gran 1 processor eflags = interrupt enabled, resume, IOPL = 3 current process = 562 (Xorg) trap number = 12 panic: page fault Uptime: 48s Dumping 2047 MB (2 chunks) chunk 0: 1MB (159 pages) ... ok chunk 1: 2047MB (523985 pages) 2031 2015 1999 1983 1967 1951 1935 1919 1903 1887 1871 1855 1839 1823 1807 1791 1775 1759 1743 1727 1711 1695 1679 1663 1647 1631 1615 1599 1583 1567 1551 1535 1519 1503 1487 1471 1455 1439 1423 1407 1391 1375 1359 1343 1327 1311 1295 1279 1263 1247 1231 1215 1199 1183 1167 1151 1135 1119 1103 1087 1071 1055 1039 1023 1007 991 975 959 943 927 911 895 879 863 847 831 815 799 783 767 751 735 719 703 687 671 655 639 623 607 591 575 559 543 527 511 495 479 463 447 431 415 399 383 367 351 335 319 303 287 271 255 239 223 207 191 175 159 143 127 111 95 79 63 47 31 15 #0 doadump () at pcpu.h:165 165 __asm __volatile("movl %%fs:0,%0" : "=r" (td)); (kgdb) #0 doadump () at pcpu.h:165 #1 0xc0666d7a in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:409 #2 0xc0667010 in panic (fmt=0xc08cbc5d "%s") at /usr/src/sys/kern/kern_shutdown.c:565 #3 0xc0876264 in trap_fatal (frame=0xe93ebbec, eva=3913514384) at /usr/src/sys/i386/i386/trap.c:836 #4 0xc0875fcb in trap_pfault (frame=0xe93ebbec, usermode=0, eva=3913514384) at /usr/src/sys/i386/i386/trap.c:744 #5 0xc0875c09 in trap (frame {tf_fs = -1023803384, tf_es = -1052508120, tf_ds = 40, tf_edi = -381452912, tf_esi = -381764208, tf_ebp = -381764524, tf_isp = -381764584, tf_ebx = -381452912, tf_edx = -948456704, tf_ecx = 156, tf_eax = 311296, tf_trapno = 12, tf_err = 2, tf_eip = -1064878298, tf_cs = 32, tf_eflags = 2175494, tf_esp = -958609884, tf_ss = -958603904}) at /usr/src/sys/i386/i386/trap.c:434 ---Type <return> to continue, or q <return> to quit---#6 0xc08643ca in calltrap () at /usr/src/sys/i386/i386/exception.s:139 #7 0xc0873f26 in generic_bcopy () at /usr/src/sys/i386/i386/support.s:489 Previous frame inner to this frame (corrupt stack?) (kgdb) [GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"] GNU gdb 6.1.1 [FreeBSD] Copyright 2004 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "i386-marcel-freebsd". Unread portion of the kernel message buffer: kernel trap 12 with interrupts disabled Fatal trap 12: page fault while in kernel mode fault virtual address = 0xe943dd90 fault code = supervisor read, page not present instruction pointer = 0x20:0xc087483f stack pointer = 0x28:0xe93dcc84 frame pointer = 0x28:0xe93dcc9c code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, def32 1, gran 1 processor eflags = resume, IOPL = 3 current process = 563 (Xorg) trap number = 12 panic: page fault Uptime: 13m21s Dumping 2047 MB (2 chunks) chunk 0: 1MB (159 pages) ... ok chunk 1: 2047MB (523985 pages) 2031 2015 1999 1983 1967 1951 1935 1919 1903 1887 1871 1855 1839 1823 1807 1791 1775 1759 1743 1727 1711 1695 1679 1663 1647 1631 1615 1599 1583 1567 1551 1535 1519 1503 1487 1471 1455 1439 1423 1407 1391 1375 1359 1343 1327 1311 1295 1279 1263 1247 1231 1215 1199 1183 1167 1151 1135 1119 1103 1087 1071 1055 1039 1023 1007 991 975 959 943 927 911 895 879 863 847 831 815 799 783 767 751 735 719 703 687 671 655 639 623 607 591 575 559 543 527 511 495 479 463 447 431 415 399 383 367 351 335 319 303 287 271 255 239 223 207 191 175 159 143 127 111 95 79 63 47 31 15 #0 doadump () at pcpu.h:165 165 __asm __volatile("movl %%fs:0,%0" : "=r" (td)); (kgdb) #0 doadump () at pcpu.h:165 #1 0xc0666d7a in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:409 #2 0xc0667010 in panic (fmt=0xc08cbc5d "%s") at /usr/src/sys/kern/kern_shutdown.c:565 #3 0xc0876264 in trap_fatal (frame=0xe93dcc44, eva=3913538960) at /usr/src/sys/i386/i386/trap.c:836 #4 0xc0875a02 in trap (frame {tf_fs = -1066991608, tf_es = -958398424, tf_ds = -1063518168, tf_edi = -958351872, tf_esi = 0, tf_ebp = -381825892, tf_isp = -381825936, tf_ebx = -948296192, tf_edx = -381428336, tf_ecx = -948296192, tf_eax = 0, tf_trapno = 12, tf_err = 0, tf_eip = -1064875969, tf_cs = 32, tf_eflags = 2174983, tf_esp = -1066958129, tf_ss = -958351872}) at /usr/src/sys/i386/i386/trap.c:269 #5 0xc08643ca in calltrap () at /usr/src/sys/i386/i386/exception.s:139 #6 0xc087483f in cpu_switch () at /usr/src/sys/i386/i386/swtch.s:161 Previous frame inner to this frame (corrupt stack?) (kgdb) [GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"] GNU gdb 6.1.1 [FreeBSD] Copyright 2004 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "i386-marcel-freebsd". Unread portion of the kernel message buffer: Fatal trap 12: page fault while in kernel mode fault virtual address = 0xe9489080 fault code = supervisor read, page not present instruction pointer = 0x20:0xc0870b7c stack pointer = 0x28:0xe93e2a50 frame pointer = 0x28:0xe93e2a50 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, def32 1, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 612 (wdm) trap number = 12 panic: page fault Uptime: 4m40s Dumping 2047 MB (2 chunks) chunk 0: 1MB (159 pages) ... ok chunk 1: 2047MB (523985 pages) 2031 2015 1999 1983 1967 1951 1935 1919 1903 1887 1871 1855 1839 1823 1807 1791 1775 1759 1743 1727 1711 1695 1679 1663 1647 1631 1615 1599 1583 1567 1551 1535 1519 1503 1487 1471 1455 1439 1423 1407 1391 1375 1359 1343 1327 1311 1295 1279 1263 1247 1231 1215 1199 1183 1167 1151 1135 1119 1103 1087 1071 1055 1039 1023 1007 991 975 959 943 927 911 895 879 863 847 831 815 799 783 767 751 735 719 703 687 671 655 639 623 607 591 575 559 543 527 511 495 479 463 447 431 415 399 383 367 351 335 319 303 287 271 255 239 223 207 191 175 159 143 127 111 95 79 63 47 31 15 #0 doadump () at pcpu.h:165 165 __asm __volatile("movl %%fs:0,%0" : "=r" (td)); (kgdb) #0 doadump () at pcpu.h:165 #1 0xc0666d7a in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:409 #2 0xc0667010 in panic (fmt=0xc08cbc5d "%s") at /usr/src/sys/kern/kern_shutdown.c:565 #3 0xc0876264 in trap_fatal (frame=0xe93e2a10, eva=3913846912) at /usr/src/sys/i386/i386/trap.c:836 #4 0xc0875fcb in trap_pfault (frame=0xe93e2a10, usermode=0, eva=3913846912) at /usr/src/sys/i386/i386/trap.c:744 #5 0xc0875c09 in trap (frame {tf_fs = 8, tf_es = -1022951384, tf_ds = -958529496, tf_edi = -1023605816, tf_esi = -1014281336, tf_ebp = -381801904, tf_isp = -381801924, tf_ebx = -1014281360, tf_edx = 32, tf_ecx = -948281152, tf_eax = -381120512, tf_trapno = 12, tf_err = 0, tf_eip = -1064891524, tf_cs = 32, tf_eflags = 590354, tf_esp = -381801876, tf_ss = -1064882185}) at /usr/src/sys/i386/i386/trap.c:434 ---Type <return> to continue, or q <return> to quit---#6 0xc08643ca in calltrap () at /usr/src/sys/i386/i386/exception.s:139 #7 0xc0870b7c in pmap_unuse_pt (pmap=0xc77a60c0, va=32) at /usr/src/sys/i386/i386/pmap.c:1018 #8 0xc0872ff7 in pmap_remove_pages (pmap=0xc77a60c0, sva=0, eva=3217031168) at /usr/src/sys/i386/i386/pmap.c:2615 #9 0xc064d9ef in exec_new_vmspace (imgp=0xe93e2be8, sv=0xc09a2080) at vm_map.h:251 #10 0xc0638ef3 in exec_elf32_imgact (imgp=0xe93e2be8) at /usr/src/sys/kern/imgact_elf.c:668 #11 0xc064c91e in do_execve (td=0xc6dea900, args=0xe93e2cb4, mac_p=0x0) at /usr/src/sys/kern/kern_exec.c:417 #12 0xc064c628 in kern_execve (td=0xc6dea900, args=0xe93e2cb4, mac_p=0x0) at /usr/src/sys/kern/kern_exec.c:258 #13 0xc064c532 in execve (td=0xc6dea900, uap=0xe9489000) at /usr/src/sys/kern/kern_exec.c:186 #14 0xc087657b in syscall (frame {tf_fs = 59, tf_es = 59, tf_ds = 59, tf_edi = 134725744, tf_esi = -1077941976, tf_ebp = -1077942008, tf_isp = -381801116, tf_ebx = 0, tf_edx = -1, tf_ecx = 9, tf_eax = 59, tf_trapno = 12, tf_err = 2, tf_eip = 674973131, tf_cs = 51, tf_eflags = 642, tf_esp = -1077943076, tf_ss = 59}) at /usr/src/sys/i386/i386/trap.c:981 #15 0xc086441f in Xint0x80_syscall () at /usr/src/sys/i386/i386/exception.s:200 #16 0x00000033 in ?? () Previous frame inner to this frame (corrupt stack?) (kgdb) [GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"] GNU gdb 6.1.1 [FreeBSD] Copyright 2004 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "i386-marcel-freebsd". Unread portion of the kernel message buffer: <118>X connection to :0.0 broken (explicit kill or server shutdown). <118>X connection to :0.0 broken (explicit kill or server shutdown). <118>X connection to :0.0 broken (explicit kill or server shutdown). <118>X connection to :0.0 broken (explicit kill or server shutdown). <118>X connection to :0.0 broken (explicit kill or server shutdown). <118>X connection to :0.0 broken (explicit kill or server shutdown). <118>X connection to :0.0 broken (explicit kill or server shutdown). <118>X connection to :0.0 broken (explicit kill or server shutdown). <118>X connection to :0.0 broken (explicit kill or server shutdown). <118>X connection to :0.0 broken (explicit kill or server shutdown). <118>X connection to :0.0 broken (explicit kill or server shutdown). <118>X connection to :0.0 broken (explicit kill or server shutdown). <118>X connection to :0.0 broken (explicit kill or server shutdown). <118>X connection to :0.0 broken (explicit kill or server shutdown). <118>X connection to :0.0 broken (explicit kill or server shutdown). <118>X connection to :0.0 broken (explicit kill or server shutdown). <118>X connection to :0.0 broken (explicit kill or server shutdown). <118>X connection to :0.0 broken (explicit kill or server shutdown). <118>X connection to :0.0 broken (explicit kill or server shutdown). <118>X connection to :0.0 broken (explicit kill or server shutdown). <118>X connection to :0.0 broken (explicit kill or server shutdown). <118>X connection to :0.0 broken (explicit kill or server shutdown). <118>blackbox: managing screen 0 using TrueColor visual 0x23, depth 16 <118>X connection to :0.0 broken (explicit kill or server shutdown). <118>X connection to :0.0 broken (explicit kill or server shutdown). <118>blackbox: managing screen 0 using TrueColor visual 0x23, depth 16 <118>X connection to :0.0 broken (explicit kill or server shutdown). <118>X connection to :0.0 broken (explicit kill or server shutdown). <118>blackbox: managing screen 0 using TrueColor visual 0x23, depth 16 <118>X connection to :0.0 broken (explicit kill or server shutdown). <118>X connection to :0.0 broken (explicit kill or server shutdown). <118>blackbox: managing screen 0 using TrueColor visual 0x23, depth 16 <118>X connection to :0.0 broken (explicit kill or server shutdown). <118>X connection to :0.0 broken (explicit kill or server shutdown). <118>blackbox: managing screen 0 using TrueColor visual 0x23, depth 16 <118>X connection to :0.0 broken (explicit kill or server shutdown). <118>X connection to :0.0 broken (explicit kill or server shutdown). <118>blackbox: managing screen 0 using TrueColor visual 0x23, depth 16 <118>X connection to :0.0 broken (explicit kill or server shutdown). <118>X connection to :0.0 broken (explicit kill or server shutdown). <118>blackbox: managing screen 0 using TrueColor visual 0x23, depth 16 <118>X connection to :0.0 broken (explicit kill or server shutdown). <118>X connection to :0.0 broken (explicit kill or server shutdown). <118>blackbox: managing screen 0 using TrueColor visual 0x23, depth 16 <118>X connection to :0.0 broken (explicit kill or server shutdown). <118>X connection to :0.0 broken (explicit kill or server shutdown). <118>blackbox: managing screen 0 using TrueColor visual 0x23, depth 16 <118>X connection to :0.0 broken (explicit kill or server shutdown). <118>X connection to :0.0 broken (explicit kill or server shutdown). <118>blackbox: managing screen 0 using TrueColor visual 0x23, depth 16 <118>X connection to :0.0 broken (explicit kill or server shutdown). <118>X connection to :0.0 broken (explicit kill or server shutdown). <118>blackbox: managing screen 0 using TrueColor visual 0x23, depth 16 <118>X connection to :0.0 broken (explicit kill or server shutdown). <118>X connection to :0.0 broken (explicit kill or server shutdown). <118>blackbox: managing screen 0 using TrueColor visual 0x23, depth 16 <118>X connection to :0.0 broken (explicit kill or server shutdown). <118>X connection to :0.0 broken (explicit kill or server shutdown). <118>blackbox: managing screen 0 using TrueColor visual 0x23, depth 16 <118>X connection to :0.0 broken (explicit kill or server shutdown). <118>X connection to :0.0 broken (explicit kill or server shutdown). <118>blackbox: managing screen 0 using TrueColor visual 0x23, depth 16 <118>X connection to :0.0 broken (explicit kill or server shutdown). <118>X connection to :0.0 broken (explicit kill or server shutdown). <118>blackbox: managing screen 0 using TrueColor visual 0x23, depth 16 <118>X connection to :0.0 broken (explicit kill or server shutdown). <118>X connection to :0.0 broken (explicit kill or server shutdown). <118>blackbox: managing screen 0 using TrueColor visual 0x23, depth 16 <118>X connection to :0.0 broken (explicit kill or server shutdown). <118>blackbox: managing screen 0 using TrueColor visual 0x23, depth 16 <118>X connection to :0.0 broken (explicit kill or server shutdown). <118>blackbox: managing screen 0 using TrueColor visual 0x23, depth 16 Fatal trap 12: page fault while in kernel mode fault virtual address = 0xe90aa080 fault code = supervisor read, page not present instruction pointer = 0x20:0xc0870f4f stack pointer = 0x28:0xe8d4bbd0 frame pointer = 0x28:0xe8d4bbdc code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, def32 1, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 20314 (sh) trap number = 12 panic: page fault Uptime: 1h58m44s Dumping 2047 MB (2 chunks) chunk 0: 1MB (159 pages) ... ok chunk 1: 2047MB (523985 pages) 2031 2015 1999 1983 1967 1951 1935 1919 1903 1887 1871 1855 1839 1823 1807 1791 1775 1759 1743 1727 1711 1695 1679 1663 1647 1631 1615 1599 1583 1567 1551 1535 1519 1503 1487 1471 1455 1439 1423 1407 1391 1375 1359 1343 1327 1311 1295 1279 1263 1247 1231 1215 1199 1183 1167 1151 1135 1119 1103 1087 1071 1055 1039 1023 1007 991 975 959 943 927 911 895 879 863 847 831 815 799 783 767 751 735 719 703 687 671 655 639 623 607 591 575 559 543 527 511 495 479 463 447 431 415 399 383 367 351 335 319 303 287 271 255 239 223 207 191 175 159 143 127 111 95 79 63 47 31 15 #0 doadump () at pcpu.h:165 165 __asm __volatile("movl %%fs:0,%0" : "=r" (td)); (kgdb) #0 doadump () at pcpu.h:165 #1 0xc0666d7a in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:409 #2 0xc0667010 in panic (fmt=0xc08cbc5d "%s") at /usr/src/sys/kern/kern_shutdown.c:565 #3 0xc0876264 in trap_fatal (frame=0xe8d4bb90, eva=3909787776) at /usr/src/sys/i386/i386/trap.c:836 #4 0xc0875fcb in trap_pfault (frame=0xe8d4bb90, usermode=0, eva=3909787776) at /usr/src/sys/i386/i386/trap.c:744 #5 0xc0875c09 in trap (frame {tf_fs = -1066663928, tf_es = -388759512, tf_ds = -388759512, tf_edi = 1, tf_esi = -919924544, tf_ebp = -388711460, tf_isp = -388711492, tf_ebx = 32, tf_edx = -1037975880, tf_ecx = 134619136, tf_eax = -385179648, tf_trapno = 12, tf_err = 0, tf_eip = -1064890545, tf_cs = 32, tf_eflags = 66050, tf_esp = 134512640, tf_ss = 1673049125}) at /usr/src/sys/i386/i386/trap.c:434 ---Type <return> to continue, or q <return> to quit---#6 0xc08643ca in calltrap () at /usr/src/sys/i386/i386/exception.s:139 #7 0xc0870f4f in pmap_allocpte (pmap=0xc92b10c0, va=3909787648, flags=1) at /usr/src/sys/i386/i386/pmap.c:1188 #8 0xc087291d in pmap_copy (dst_pmap=0xc92b10c0, src_pmap=0xc6ed4310, dst_addr=134512640, len=106496, src_addr=134512640) at /usr/src/sys/i386/i386/pmap.c:2359 #9 0xc07d6f14 in vm_map_copy_entry (src_map=0xc6ed4250, dst_map=0xc92b1000, src_entry=0xc69f250c, dst_entry=0xc69a8b6c) at /usr/src/sys/vm/vm_map.c:2499 #10 0xc07d720e in vmspace_fork (vm1=0xc6ed4250) at /usr/src/sys/vm/vm_map.c:2654 #11 0xc07d2e4b in vm_forkproc (td=0xc6ad6480, p2=0xc935b000, td2=0xc930f480, flags=20) at /usr/src/sys/vm/vm_glue.c:540 #12 0xc0650d6b in fork1 (td=0xc6ad6480, flags=20, pages=0, procp=0xe8d4bcd4) at /usr/src/sys/kern/kern_fork.c:659 #13 0xc064fb24 in fork (td=0xc6ad6480, uap=0xe8d4bd04) at /usr/src/sys/kern/kern_fork.c:96 #14 0xc087657b in syscall (frame {tf_fs = 59, tf_es = 59, tf_ds = 59, tf_edi = 0, tf_esi = 134643712, tf_ebp = -1077941272, tf_isp = -388711068, tf_ebx = 134643712, tf_edx = 0, tf_ecx = -1, tf_eax = 2, tf_trapno = 12, tf_err = 2, tf_eip = 672392747, tf_cs = 51, tf_eflags = 582, tf_esp = -1077941300, tf_ss = 59}) at /usr/src/sys/i386/i386/trap.c:981 ---Type <return> to continue, or q <return> to quit---#15 0xc086441f in Xint0x80_syscall () at /usr/src/sys/i386/i386/exception.s:200 #16 0x00000033 in ?? () Previous frame inner to this frame (corrupt stack?) (kgdb) # ^D Script done on Sun Aug 6 19:25:13 2006 -- John Stalker University of Dublin, Trinity College School of Mathematics
[LoN]Kamikaze
2006-Aug-06 18:13 UTC
Frequent panics on Dell Latitude D610 running 6.1-STABLE GENERIC
John Stalker wrote:> I am not much wiser, but I have a few more backtraces. I tried removing > various modules and changing various config options to see if they have > any effect. It is impossible to be certain, since the panic is not > completely reproducible, but I think the culprit is drm.ko. Any idea > how I can confirm or refute this suspicion?Deactivate DRI to see weather your problems disappear.