From owner-freebsd-stable@FreeBSD.ORG Sun Nov 5 16:47:04 2006 Return-Path: X-Original-To: stable@freebsd.org Delivered-To: freebsd-stable@FreeBSD.ORG Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 492C316A417 for ; Sun, 5 Nov 2006 16:47:04 +0000 (UTC) (envelope-from grafan@gmail.com) Received: from nz-out-0102.google.com (nz-out-0102.google.com [64.233.162.198]) by mx1.FreeBSD.org (Postfix) with ESMTP id A4D0543D67 for ; Sun, 5 Nov 2006 16:47:02 +0000 (GMT) (envelope-from grafan@gmail.com) Received: by nz-out-0102.google.com with SMTP id o37so560285nzf for ; Sun, 05 Nov 2006 08:47:02 -0800 (PST) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition; b=S8G1UCLKTcP6SfPUN2myDjHYWBjcJ9p9xz92IKAzCttxQKKWfz0CgtACUt4qAaPJRjWdVym91HGJMZ40bqti0PQy/8QsPeB5sZYNZ4uXnElnXQULJRr/OkuF4NYl+Spv6VS7nV6praq5gBJOs3zIoQBn2LgzvkgOYYOPvL2eqPw= Received: by 10.64.201.15 with SMTP id y15mr4036380qbf.1162745221319; Sun, 05 Nov 2006 08:47:01 -0800 (PST) Received: by 10.65.220.18 with HTTP; Sun, 5 Nov 2006 08:47:01 -0800 (PST) Message-ID: <6eb82e0611050847i54d16638x89c428c9dffcc106@mail.gmail.com> Date: Mon, 6 Nov 2006 00:47:01 +0800 From: "Rong-en Fan" To: stable@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline Cc: Subject: panic when portupgrade in jail (devfs related?) X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 05 Nov 2006 16:47:04 -0000 Hi, I'm running RELENG_6 as of yesterday on a amd64 box. This host has one jail running, and everytime when I try to run portupgrade inside the jail. It panics. INVARIANTS does not catch anything. I don't think this happens on RELENG_6 two months ago. The panic messages and backtrace are shown: Fatal trap 12: page fault while in kernel mode cpuid = 1; apic id = 01 fault virtual address = 0xfffffffe75b851b0 fault code = supervisor read, page not present instruction pointer = 0x8:0xffffffff80231118 stack pointer = 0x10:0xffffffffb40a5860 frame pointer = 0x10:0xffffffffb40a5880 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, long 1, def32 0, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 60200 (script) [thread pid 60200 tid 100268 ] Stopped at ptcclose+0x19: movq linesw(,%rdx,8),%rax db> bt Tracing pid 60200 tid 100268 td 0xffffff006c4ec720 ptcclose() at ptcclose+0x19 giant_close() at giant_close+0x5f devfs_close() at devfs_close+0x28f VOP_CLOSE_APV() at VOP_CLOSE_APV+0x6e vn_close() at vn_close+0x90 vn_closefile() at vn_closefile+0x88 fdrop_locked() at fdrop_locked+0xa5 closef() at closef+0x35f close() at close+0x173 syscall() at syscall+0x4a1 Xfast_syscall() at Xfast_syscall+0xa8 --- syscall (6, FreeBSD ELF64, close), rip = 0x800807f9c, rsp = 0x7fffffffdfa8, rbp = 0 --- I put the box back to production. If anyone needs more information, I can reproduce this panic and gather them in ddb. BTW, I used 'call doadump' in ddb, but after rebooting, savecore complains there is no dump? Regards, Rong-En Fan