Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 14 Apr 2009 02:17:48 -0400
From:      Joe Marcus Clarke <marcus@FreeBSD.org>
To:        current <current@FreeBSD.org>
Subject:   Panic in vfs_cache on i386
Message-ID:  <1239689868.1304.209.camel@shumai.marcuscom.com>

next in thread | raw e-mail | index | archive | help

--=-36vNX9ydDqAEkfhsNEe0
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

I'm seeing this panic on my -CURRENT i386 Tinderbox machine (using
looped back NFS).  The backtrace does not point to a line number in
vfs_cache.c, and I can't figure out how atomic_cmpset_int is being
called, so I'm confused as to exactly what is causing this.  Any clues?

FreeBSD fugu.marcuscom.com 8.0-CURRENT FreeBSD 8.0-CURRENT #20: Mon Apr 13 =
17:21:39 EDT 2009     gnome@fugu.marcuscom.com:/space/obj/usr/src/sys/FUGU =
 i386

Fatal trap 12: page fault while in kernel mode
cpuid =3D 1; apic id =3D 01
fault virtual address	=3D 0x84
fault code		=3D supervisor write, page not present
instruction pointer	=3D 0x20:0x80670cf0
stack pointer	        =3D 0x28:0xb9d59974
frame pointer	        =3D 0x28:0xb9d599a0
code segment		=3D base 0x0, limit 0xfffff, type 0x1b
			=3D DPL 0, pres 1, def32 1, gran 1
processor eflags	=3D interrupt enabled, resume, IOPL =3D 0
current process		=3D 82240 (sh)
panic: from debugger
cpuid =3D 1


#0  doadump () at pcpu.h:246
#1  0x804958c9 in db_fncall (dummy1=3D1, dummy2=3D0, dummy3=3D-2137255936, =
dummy4=3D0xb9d59708 "\200=EF=BF=BD=EF=BF=BD\204") at /usr/src/sys/ddb/db_co=
mmand.c:548
#2  0x80495cc1 in db_command (last_cmdp=3D0x8094251c, cmd_table=3D0x0, dopa=
ger=3D1) at /usr/src/sys/ddb/db_command.c:445
#3  0x80495e1a in db_command_loop () at /usr/src/sys/ddb/db_command.c:498
#4  0x80497c5d in db_trap (type=3D12, code=3D0) at /usr/src/sys/ddb/db_main=
.c:229
#5  0x80629ef6 in kdb_trap (type=3D12, code=3D0, tf=3D0xb9d59934) at /usr/s=
rc/sys/kern/subr_kdb.c:534
#6  0x808666ef in trap_fatal (frame=3D0xb9d59934, eva=3D132) at /usr/src/sy=
s/i386/i386/trap.c:917
#7  0x80866990 in trap_pfault (frame=3D0xb9d59934, usermode=3D0, eva=3D132)=
 at /usr/src/sys/i386/i386/trap.c:839
#8  0x80867362 in trap (frame=3D0xb9d59934) at /usr/src/sys/i386/i386/trap.=
c:521
#9  0x8084b93b in calltrap () at /usr/src/sys/i386/i386/exception.s:165
#10 0x80670cf0 in cache_lookup (dvp=3D0x8a55a10c, vpp=3D0xb9d59b78, cnp=3D0=
xb9d59b8c) at atomic.h:153
#11 0x80670f93 in vfs_cache_lookup (ap=3D0xb9d59a40) at /usr/src/sys/kern/v=
fs_cache.c:869
#12 0x808736e6 in VOP_LOOKUP_APV (vop=3D0x8092a680, a=3D0xb9d59a40) at vnod=
e_if.c:123
#13 0x80678351 in lookup (ndp=3D0xb9d59b60) at vnode_if.h:54
#14 0x806792ab in namei (ndp=3D0xb9d59b60) at /usr/src/sys/kern/vfs_lookup.=
c:256
#15 0x8068893b in kern_statat_vnhook (td=3D0x86085000, flag=3D0, fd=3D-100,=
 path=3D0x33f02400 <Address 0x33f02400 out of bounds>, pathseg=3DUIO_USERSP=
ACE, sbp=3D0xb9d59c18, hook=3D0) at /usr/src/sys/kern/vfs_syscalls.c:2356
#16 0x80688aac in kern_statat (td=3D0x86085000, flag=3D0, fd=3D-100, path=
=3D0x33f02400 <Address 0x33f02400 out of bounds>, pathseg=3DUIO_USERSPACE, =
sbp=3D0xb9d59c18) at /usr/src/sys/kern/vfs_syscalls.c:2337
#17 0x80688bf6 in kern_stat (td=3D0x86085000, path=3D0x33f02400 <Address 0x=
33f02400 out of bounds>, pathseg=3DUIO_USERSPACE, sbp=3D0xb9d59c18) at /usr=
/src/sys/kern/vfs_syscalls.c:2329
#18 0x80688c9f in stat (td=3D0x86085000, uap=3D0xb9d59cf8) at /usr/src/sys/=
kern/vfs_syscalls.c:2298
#19 0x80866cd5 in syscall (frame=3D0xb9d59d38) at /usr/src/sys/i386/i386/tr=
ap.c:1066
#20 0x8084b9a0 in Xint0x80_syscall () at /usr/src/sys/i386/i386/exception.s=
:261
#21 0x00000033 in ?? ()
Previous frame inner to this frame (corrupt stack?)

print *dvp
$6 =3D {v_type =3D VDIR, v_tag =3D 0x808c518a "ufs", v_op =3D 0x8092a160,=20
  v_data =3D 0x8a1f707c, v_mount =3D 0x8531b500, v_nmntvnodes =3D {
    tqe_next =3D 0x8a554754, tqe_prev =3D 0x8a55a65c}, v_un =3D {vu_mount =
=3D 0x0,=20
    vu_socket =3D 0x0, vu_cdev =3D 0x0, vu_fifoinfo =3D 0x0, vu_yield =3D 0=
},=20
  v_hashlist =3D {le_next =3D 0x8600d324, le_prev =3D 0x8503b170},=20
  v_hash =3D 10739825, v_cache_src =3D {lh_first =3D 0x0}, v_cache_dst =3D =
{
    tqh_first =3D 0x0, tqh_last =3D 0x8a55a13c}, v_cache_dd =3D 0x86770120,=
=20
  v_cstart =3D 0, v_lasta =3D 0, v_lastw =3D 0, v_clen =3D 0, v_lock =3D {l=
ock_object =3D {
      lo_name =3D 0x808c518a "ufs", lo_flags =3D 91947009, lo_data =3D 0,=20
      lo_witness =3D 0x0}, lk_lock =3D 1, lk_timo =3D 51, lk_pri =3D 80},=20
  v_interlock =3D {lock_object =3D {lo_name =3D 0x808d15c1 "vnode interlock=
",=20
      lo_flags =3D 16973824, lo_data =3D 0, lo_witness =3D 0x0}, mtx_lock =
=3D 4},=20
  v_vnlock =3D 0x8a55a164, v_holdcnt =3D 3, v_usecount =3D 3, v_iflag =3D 0=
,=20
  v_vflag =3D 0, v_writecount =3D 0, v_freelist =3D {tqe_next =3D 0x0,=20
    tqe_prev =3D 0x0}, v_bufobj =3D {bo_mtx =3D {lock_object =3D {
        lo_name =3D 0x808d15d1 "bufobj interlock", lo_flags =3D 16973824,=20
        lo_data =3D 0, lo_witness =3D 0x0}, mtx_lock =3D 4}, bo_clean =3D {=
bv_hd =3D {
        tqh_first =3D 0x0, tqh_last =3D 0x8a55a1c8}, bv_root =3D 0x0, bv_cn=
t =3D 0},=20
    bo_dirty =3D {bv_hd =3D {tqh_first =3D 0x0, tqh_last =3D 0x8a55a1d8},=20
      bv_root =3D 0x0, bv_cnt =3D 0}, bo_numoutput =3D 0, bo_flag =3D 0,=20
    bo_ops =3D 0x8091ab80, bo_bsize =3D 16384, bo_object =3D 0x8a6c245c,=20
    bo_synclist =3D {le_next =3D 0x0, le_prev =3D 0x0}, bo_private =3D 0x8a=
55a10c,=20
    __bo_vnode =3D 0x8a55a10c}, v_pollinfo =3D 0x0, v_label =3D 0x0, v_lock=
f =3D 0x0}

print *vpp
$7 =3D (struct vnode *) 0x0

print *cnp
$9 =3D {cn_nameiop =3D 0, cn_flags =3D 83943748, cn_thread =3D 0x86085000,=20
  cn_cred =3D 0x85ad4d00, cn_lkflags =3D 2097152, cn_pnbuf =3D 0x8acf6400 "=
..",=20
  cn_nameptr =3D 0x8acf6400 "..", cn_namelen =3D 2, cn_consume =3D 0}

Joe

--=20
Joe Marcus Clarke
FreeBSD GNOME Team      ::      gnome@FreeBSD.org
FreeNode / #freebsd-gnome
http://www.FreeBSD.org/gnome

--=-36vNX9ydDqAEkfhsNEe0
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: This is a digitally signed message part

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (FreeBSD)

iEYEABECAAYFAknkKosACgkQb2iPiv4Uz4dDDACfeH9fIxGOlLGE5bUUel7Tu9kb
358AoK/9/9jEzKCrkFeYfJgiliS1XSkE
=5hLk
-----END PGP SIGNATURE-----

--=-36vNX9ydDqAEkfhsNEe0--




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1239689868.1304.209.camel>