From owner-freebsd-stable@FreeBSD.ORG Wed Oct 1 19:35:21 2003 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id CCD5416A4B3 for ; Wed, 1 Oct 2003 19:35:21 -0700 (PDT) Received: from ares.cs.Virginia.EDU (mail.cs.Virginia.EDU [128.143.137.19]) by mx1.FreeBSD.org (Postfix) with ESMTP id 8656543FB1 for ; Wed, 1 Oct 2003 19:35:20 -0700 (PDT) (envelope-from adw5p@cs.virginia.edu) Received: from mamba.cs.Virginia.EDU (mamba.cs.Virginia.EDU [128.143.137.15]) id h922ZJ0o016575 for ; Wed, 1 Oct 2003 22:35:19 -0400 (EDT) Received: (from adw5p@localhost) by mamba.cs.Virginia.EDU (8.11.6+Sun/8.9.2) id h922ZJr21244 for stable@freebsd.org; Wed, 1 Oct 2003 22:35:19 -0400 (EDT) Date: Wed, 1 Oct 2003 22:35:19 -0400 From: Anthony Wood To: stable@freebsd.org Message-ID: <20031002023519.GA21200@mamba.cs.Virginia.EDU> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Subject: 4.9 RC1 (i386) mplayer induced panic X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Oct 2003 02:35:22 -0000 All: I cvsup'ed earlier this evening and am still able to reproduce this panic at will. Command line, panic backtrace, dmesg, ldd output, and mplayer version follow. If more information is needed, just let me know. % mplayer foo.mov [a quicktime file] [plays for awhile, and then panics] # gdb -k -s /usr/obj/usr/src/sys/LICHEN/kernel.debug -e /var/crash/kernel.2 -c /var/crash/vmcore.2 GNU gdb 4.18 (FreeBSD) Copyright 1998 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "i386-unknown-freebsd"... IdlePTD at phsyical address 0x00435000 initial pcb at physical address 0x00381580 panicstr: page fault panic messages: --- Fatal trap 12: page fault while in kernel mode fault virtual address = 0x36 fault code = supervisor write, page not present instruction pointer = 0x8:0xc02566fa stack pointer = 0x10:0xc032d388 frame pointer = 0x10:0xc032d428 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, def32 1, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = Idle interrupt mask = net tty bio cam trap number = 12 panic: page fault syncing disks... Fatal trap 12: page fault while in kernel mode fault virtual address = 0x30 fault code = supervisor read, page not present instruction pointer = 0x8:0xc0243c40 stack pointer = 0x10:0xc032d174 frame pointer = 0x10:0xc032d17c code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, def32 1, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = Idle interrupt mask = net tty bio cam trap number = 12 panic: page fault Uptime: 8m15s dumping to dev #ad/0x20001, offset 524416 dump ata0: resetting devices .. done 511 510 509 508 507 506 505 504 503 502 501 500 499 498 497 [...] 18 17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0 --- #0 dumpsys () at /usr/src/sys/kern/kern_shutdown.c:487 487 if (dumping++) { (kgdb) where full #0 dumpsys () at /usr/src/sys/kern/kern_shutdown.c:487 error = 0 #1 0xc0171ddb in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:316 howto = 260 #2 0xc0172200 in poweroff_wait (junk=0xc032454c, howto=-1070448561) at /usr/src/sys/kern/kern_shutdown.c:595 fmt = 0xc032454c "%s" bootopt = 260 buf = "page fault", '\000' #3 0xc02d0976 in trap_fatal (frame=0xc032d134, eva=48) at /usr/src/sys/i386/i386/trap.c:974 frame = (struct trapframe *) 0x104 code = -1070447284 type = 12 ss = -1070447284 esp = 0 softseg = {ssd_base = 0, ssd_limit = 1048575, ssd_type = 27, ssd_dpl = 0, ssd_p = 1, ssd_xx = 5, ssd_xx1 = 0, ssd_def32 = 1, ssd_gran = 1} #4 0xc02d0649 in trap_pfault (frame=0xc032d134, usermode=0, eva=48) at /usr/src/sys/i386/i386/trap.c:867 va = 0 vm = (struct vmspace *) 0x0 map = 0xc rv = 0 ftype = 0 '\000' p = (struct proc *) 0x0 #5 0xc02d0233 in trap (frame={tf_fs = 16, tf_es = 16, tf_ds = 16, tf_edi = 0, tf_esi = -1036583680, tf_ebp = -1070411396, tf_isp = -1070411424, tf_ebx = -1070260740, tf_edx = 6865984, tf_ecx = -618392704, tf_eax = 0, tf_trapno = 12, tf_err = 0, tf_eip = -1071367104, tf_cs = 8, tf_eflags = 2163334, tf_esp = -1036583680, tf_ss = -1036583680}) at /usr/src/sys/i386/i386/trap.c:466 p = (struct proc *) 0x0 sticks = 18446744072637479814 i = 0 ucode = 0 type = 12 code = 0 eva = 48 #6 0xc0243c40 in acquire_lock (lk=0xc0351dfc) at /usr/src/sys/ufs/ffs/ffs_softdep.c:266 lk = (struct lockit *) 0xffffffff holder = -1036583680 #7 0xc0247d40 in softdep_update_inodeblock (ip=0xc236fd00, bp=0xcc8e2f2c, waitfor=0) at /usr/src/sys/ufs/ffs/ffs_softdep.c:3813 ip = (struct inode *) 0xc236fd00 inodedep = (struct inodedep *) 0xc039b3e0 wk = (struct worklist *) 0xc236fd00 gotit = -1036583680 #8 0xc0242d75 in ffs_update (vp=0xdb241380, waitfor=0) at /usr/src/sys/ufs/ffs/ffs_inode.c:106 fs = (struct fs *) 0xc2356800 bp = (struct buf *) 0xcc8e2f2c ip = (struct inode *) 0xc236fd00 error = 0 #9 0xc024c775 in ffs_fsync (ap=0xc032d228) at /usr/src/sys/ufs/ffs/ffs_vnops.c:273 vp = (struct vnode *) 0xdb241380 bp = (struct buf *) 0x0 nbp = (struct buf *) 0xc032d23c s = -1 error = 0 wait = 0 passes = 4 skipmeta = 0 lbn = 36 #10 0xc024b04b in ffs_sync (mp=0xc230e600, waitfor=2, cred=0xc145e900, p=0xc039b3e0) at vnode_if.h:558 a = {a_desc = 0xc032db40, a_vp = 0xdb241380, a_cred = 0xc145e900, a_waitfor = 2, a_p = 0xc039b3e0} vp = (struct vnode *) 0xdb241380 cred = (struct ucred *) 0xc145e900 waitfor = 2 p = (struct proc *) 0xc039b3e0 p = (struct proc *) 0xc039b3e0 nvp = (struct vnode *) 0xdb240f00 vp = (struct vnode *) 0xdb241380 ip = (struct inode *) 0x0 ump = (struct ufsmount *) 0xc230e400 fs = (struct fs *) 0xc2356800 error = 0 allerror = 0 #11 0xc01a2823 in sync (p=0xc039b3e0, uap=0x0) at /usr/src/sys/kern/vfs_syscalls.c:577 p = (struct proc *) 0xc039b3e0 mp = (struct mount *) 0xc230e600 nmp = (struct mount *) 0x0 asyncflag = 0 #12 0xc0171b76 in boot (howto=256) at /usr/src/sys/kern/kern_shutdown.c:235 bp = (struct buf *) 0x0 iter = 5 nbusy = -1070447284 pbusy = -1070411092 howto = 256 #13 0xc0172200 in poweroff_wait (junk=0xc032454c, howto=-1070448561) at /usr/src/sys/kern/kern_shutdown.c:595 fmt = 0xc032454c "%s" bootopt = 256 buf = "page fault", '\000' #14 0xc02d0976 in trap_fatal (frame=0xc032d348, eva=54) at /usr/src/sys/i386/i386/trap.c:974 frame = (struct trapframe *) 0x100 code = -1070447284 type = 12 ss = -1070447284 esp = 0 softseg = {ssd_base = 0, ssd_limit = 1048575, ssd_type = 27, ssd_dpl = 0, ssd_p = 1, ssd_xx = 0, ssd_xx1 = 3, ssd_def32 = 1, ssd_gran = 1} #15 0xc02d0649 in trap_pfault (frame=0xc032d348, usermode=0, eva=54) at /usr/src/sys/i386/i386/trap.c:867 va = 0 vm = (struct vmspace *) 0x0 map = 0xc rv = 0 ftype = 0 '\000' p = (struct proc *) 0x0 #16 0xc02d0233 in trap (frame={tf_fs = 16, tf_es = 16, tf_ds = 16, tf_edi = -778522624, tf_esi = -1070027476, tf_ebp = -1070410712, tf_isp = -1070410892, tf_ebx = 0, tf_edx = 0, tf_ecx = -1070411001, tf_eax = 1, tf_trapno = 12, tf_err = 2, tf_eip = -1071290630, tf_cs = 8, tf_eflags = 2163334, tf_esp = 0, tf_ss = -1070027476}) at /usr/src/sys/i386/i386/trap.c:466 p = (struct proc *) 0x0 sticks = 13851009206265949694 i = 0 ucode = 0 type = 12 code = 0 eva = 54 #17 0xc02566fa in vm_fault (map=0xc038ad2c, vaddr=3516444672, fault_type=2 '\002', fault_flags=0) at /usr/src/sys/vm/vm_object.h:189 object = 0x0 fault_type = 2 '\002' prot = 7 '\a' result = -1 wired = 0 map_generation = 1 next_object = 0xffffffff marray = {0xc21fc000, 0xc032d43c, 0xc032d418, 0xc0235f94, 0xc21fc000, 0xc02362b9, 0x400000, 0xc032d43c, 0xc21fc000, 0x18, 0x400000, 0x0, 0xc032d444, 0xc02364aa, 0xc21fc000, 0xc032d43c} hardfault = 0 faultcount = -1 fs = {m = 0xcdc07000, object = 0xcdc0b000, pindex = 3256860672, first_m = 0xc21fc000, first_object = 0x0, first_pindex = 4688, map = 0xc038ab7c, entry = 0xc038a750, lookup_still_valid = 24, vp = 0x0} #18 0xc02d05f6 in trap_pfault (frame=0xc032d49c, usermode=0, eva=3516445284) at /usr/src/sys/i386/i386/trap.c:856 va = 3516444672 vm = (struct vmspace *) 0x0 map = 0xc038ad2c rv = 0 ftype = 2 '\002' p = (struct proc *) 0x0 #19 0xc02d0233 in trap (frame={tf_fs = 16, tf_es = 16, tf_ds = 16, tf_edi = 4194304, tf_esi = -1, tf_ebp = -1070410528, tf_isp = -1070410552, tf_ebx = -616643520, tf_edx = -778522016, tf_ecx = -1, tf_eax = -616644768, tf_trapno = 12, tf_err = 2, tf_eip = -1072212870, tf_cs = 8, tf_eflags = 2163334, tf_esp = -616643520, tf_ss = -1070410508}) at /usr/src/sys/i386/i386/trap.c:466 p = (struct proc *) 0x0 sticks = 4294968380 i = 0 ucode = 0 type = 12 code = 0 eva = 3516445284 #20 0xc017547a in unsleep (p=0xdb3ec440) at /usr/src/sys/kern/kern_synch.c:710 p = (struct proc *) 0xffffffff s = 0 #21 0xc01757f6 in setrunnable (p=0xdb3ec440) at /usr/src/sys/kern/kern_synch.c:903 p = (struct proc *) 0xdb3ec440 s = -1 #22 0xc017543d in endtsleep (arg=0xdb3ec440) at /usr/src/sys/kern/kern_synch.c:691 p = (struct proc *) 0xdb3ec440 s = 4194304 #23 0xc0177e59 in softclock () at /usr/src/sys/kern/kern_timeout.c:131 c_func = (void (*)()) 0xc017541c c_arg = (void *) 0xdb3ec440 c = (struct callout *) 0x0 bucket = (struct callout_tailq *) 0xcc893b50 s = 4194304 curticks = 49574 steps = -616643520 #24 0xc02c3763 in doreti_swi () No symbol table info available. (kgdb) quit # dmesg Copyright (c) 1992-2003 The FreeBSD Project. Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 The Regents of the University of California. All rights reserved. FreeBSD 4.9-RC #0: Wed Oct 1 14:42:48 EDT 2003 root@lichen.forest.org:/usr/obj/usr/src/sys/LICHEN Timecounter "i8254" frequency 1193182 Hz CPU: AMD Athlon(tm) processor (1197.37-MHz 686-class CPU) Origin = "AuthenticAMD" Id = 0x642 Stepping = 2 Features=0x183f9ff AMD Features=0xc0440000 real memory = 536805376 (524224K bytes) avail memory = 518094848 (505952K bytes) Preloaded elf kernel "kernel" at 0xc0416000. VESA: v3.0, 32768k memory, flags:0x1, mode table:0xc039ab22 (1000022) VESA: WinFast VGA BIOS. Pentium Pro MTRR support enabled md0: Malloc disk Using $PIR table, 10 entries at 0xc00fded0 npx0: on motherboard npx0: INT 16 interface pcib0: on motherboard pci0: on pcib0 agp0: mem 0xd8000000-0xdbffffff at device 0.0 on pci0 pcib1: at device 1.0 on pci0 pci1: on pcib1 pci1: at 0.0 irq 9 isab0: at device 7.0 on pci0 isa0: on isab0 atapci0: port 0xd000-0xd00f at device 7.1 on pci0 atapci0: Correcting VIA config for southbridge data corruption bug ata0: at 0x1f0 irq 14 on atapci0 ata1: at 0x170 irq 15 on atapci0 uhci0: port 0xd400-0xd41f irq 10 at device 7.2 on pci0 usb0: on uhci0 usb0: USB revision 1.0 uhub0: VIA UHCI root hub, class 9/0, rev 1.00/1.00, addr 1 uhub0: 2 ports with 2 removable, self powered uhci1: port 0xd800-0xd81f irq 10 at device 7.3 on pci0 usb1: on uhci1 usb1: USB revision 1.0 uhub1: VIA UHCI root hub, class 9/0, rev 1.00/1.00, addr 1 uhub1: 2 ports with 2 removable, self powered pci0: (vendor=0x1106, dev=0x3057) at 7.4 xl0: <3Com 3c905C-TX Fast Etherlink XL> port 0xdc00-0xdc7f mem 0xe2000000-0xe200007f irq 11 at device 11.0 on pci0 xl0: Ethernet address: 00:01:03:d0:e9:f6 miibus0: on xl0 ukphy0: on miibus0 ukphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto xl1: <3Com 3c900-COMBO Etherlink XL> port 0xe000-0xe03f irq 10 at device 12.0 on pci0 xl1: Ethernet address: 00:60:97:2d:be:4e xl1: selecting 10baseT transceiver, half duplex pci0: at 13.0 irq 9 pcm0: port 0xe400-0xe4ff irq 11 at device 15.0 on pci0 orm0: