Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 23 Mar 2007 14:25:44 +0200
From:      Gregory Edigarov <greg@bestnet.kharkov.ua>
To:        freebsd-stable@freebsd.org
Subject:   100% repeatable crashes on 6.2-RELEASE-p3
Message-ID:  <4603C748.9060202@bestnet.kharkov.ua>

next in thread | raw e-mail | index | archive | help
Hello,

I've got these repeatable crashes  with:

klon# uname -a
FreeBSD klon.klsp.kharkov.ua 6.2-RELEASE-p3 FreeBSD 6.2-RELEASE-p3 #7: 
Fri Mar 23 11:26:01 EET 2007     
root@klon.klsp.kharkov.ua:/usr/obj/usr/src/sys/KLON  i386

the system is running quagga and l2tpd built from the yesterday's ports.
I noticed that this panics are usually happen when  third ppp interface 
going up.
what can I do?
Below is the complete back trace.

klon# cd /usr/obj/usr/src/sys/KLON/
klon# kgdb kernel.debug /var/crash/vmcore.0
kgdb: kvm_nlist(_stopped_cpus):
kgdb: kvm_nlist(_stoppcbs):
[GDB will not be able to debug user-mode threads: 
/usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"]
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain 
conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd".
Ready to go.  Enter 'tr' to connect to the remote target
with /dev/cuad0, 'tr /dev/cuad1' to connect to a different port
or 'trf portno' to connect to the remote target with the firewire
interface.  portno defaults to 5556.

Type 'getsyms' after connection to load kld symbols.

If you're debugging a local system, you can use 'kldsyms' instead
to load the kld symbols.  That's a less obnoxious interface.

Unread portion of the kernel message buffer:

Fatal trap 12: page fault while in kernel mode
fault virtual address   = 0xffffff80
fault code              = supervisor write, page not present
instruction pointer     = 0x20:0xc050d011
stack pointer           = 0x28:0xcc76fa6c
frame pointer           = 0x28:0xcc76fa78
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, def32 1, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 302 (ripd)
trap number             = 12
panic: page fault
Uptime: 1h18m47s
Dumping 254 MB (2 chunks)
  chunk 0: 1MB (159 pages) ... ok
  chunk 1: 254MB (64960 pages) 238 222 206 190 174 158 142 126 110 94 78 
62 46 30 14

#0  doadump () at pcpu.h:165
165             __asm __volatile("movl %%fs:0,%0" : "=r" (td));
(kgdb) bktr
Undefined command: "bktr".  Try "help".
(kgdb) backtrace
#0  doadump () at pcpu.h:165
During symbol reading, Incomplete CFI data; unspecified registers at 
0xc04d87b5.
#1  0xc04d8c96 in boot (howto=0x104) at 
/usr/src/sys/kern/kern_shutdown.c:409
#2  0xc04d8f2c in panic (fmt=0xc06496b4 "%s") at 
/usr/src/sys/kern/kern_shutdown.c:565
#3  0xc062a874 in trap_fatal (frame=0xcc76fa2c, eva=0xffffff80) at 
/usr/src/sys/i386/i386/trap.c:837
#4  0xc062a5db in trap_pfault (frame=0xcc76fa2c, usermode=0x0, 
eva=0xffffff80) at /usr/src/sys/i386/i386/trap.c:745
#5  0xc062a219 in trap (frame=
      {tf_fs = 0xc04e0008, tf_es = 0xc1da0028, tf_ds = 0xc2420028, 
tf_edi = 0xc1e7296c, tf_esi = 0xc1d9c438, tf_ebp = 0xcc76fa78, tf_isp = 
0xcc76fa58, tf_ebx = 0xc22ec900, tf_edx = 0xc22ec900, tf_ecx = 
0xffffff80, tf_eax = 0xc239c800, tf_trapno = 0xc, tf_err = 0x2, tf_eip = 
0xc050d011, tf_cs = 0x20, tf_eflags = 0x10202, tf_esp = 0xc1d9c438, 
tf_ss = 0xc1e728f6}) at /usr/src/sys/i386/i386/trap.c:435
#6  0xc06188ea in calltrap () at /usr/src/sys/i386/i386/exception.s:139
#7  0xc050d011 in putc (chr=0x20, clistp=0xc1d9c438) at 
/usr/src/sys/kern/tty_subr.c:399
#8  0xc055233b in pppasyncstart (sc=0xc24e5200) at 
/usr/src/sys/net/ppp_tty.c:601
#9  0xc054bf2e in pppoutput (ifp=0xc1ed0000, m0=0xc245d600, 
dst=0xcc76fb18, rtp=0x0) at /usr/src/sys/net/if_ppp.c:961
#10 0xc0564494 in ip_output (m=0xc245d600, opt=0xc1ed0000, 
ro=0xcc76fb14, flags=0x20, imo=0xc239d680, inp=0xc1fef924)
    at /usr/src/sys/netinet/ip_output.c:777
#11 0xc0574e07 in udp_output (inp=0xc1fef924, m=0xc245d600, 
addr=0xc23a43c0, control=0x20, td=0xc1e36d80)
    at /usr/src/sys/netinet/udp_usrreq.c:913
#12 0xc05757ae in udp_send (so=0xc239c800, flags=0x0, m=0xc2425b00, 
addr=0xc23a43c0, control=0x0, td=0xc1e36d80)
    at /usr/src/sys/netinet/udp_usrreq.c:1090
#13 0xc0511d8b in sosend (so=0xc23b29bc, addr=0xc23a43c0, 
uio=0xcc76fc40, top=0xc2425b00, control=0x0, flags=0x0,
    td=0xc1e36d80) at /usr/src/sys/kern/uipc_socket.c:836
#14 0xc0517729 in kern_sendit (td=0xc1e36d80, s=0x9, mp=0xcc76fcbc, 
flags=0x0, control=0x0, segflg=3258566656)
    at /usr/src/sys/kern/uipc_syscalls.c:772
#15 0xc05175e3 in sendit (td=0xc1e36d80, s=0x9, mp=0xcc76fcbc, 
flags=0x0) at /usr/src/sys/kern/uipc_syscalls.c:712
#16 0xc05178d1 in sendto (td=0xc1e36d80, uap=0xc22ec900) at 
/usr/src/sys/kern/uipc_syscalls.c:830
#17 0xc062ab8b in syscall (frame=
      {tf_fs = 0x3b, tf_es = 0x3b, tf_ds = 0xbfbf003b, tf_edi = 0x9, 
tf_esi = 0xbfbfeb60, tf_ebp = 0xbfbfeb88, tf_isp = 0xcc76fd64, tf_ebx = 
0x80a9a20, tf_edx = 0xc000000, tf_ecx = 0xc, tf_eax = 0x85, tf_trapno = 
0x0, tf_err = 0x2, tf_eip = 0x281a8f43, tf_cs = 0x33, tf_eflags = 0x296, 
tf_esp = 0xbfbfeafc, tf_ss = 0x3b}) at /usr/src/sys/i386/i386/trap.c:983
#18 0xc061893f in Xint0x80_syscall () at 
/usr/src/sys/i386/i386/exception.s:200
#19 0x00000033 in ?? ()
Previous frame inner to this frame (corrupt stack?)
(kgdb)
#0  doadump () at pcpu.h:165
#1  0xc04d8c96 in boot (howto=0x104) at 
/usr/src/sys/kern/kern_shutdown.c:409
#2  0xc04d8f2c in panic (fmt=0xc06496b4 "%s") at 
/usr/src/sys/kern/kern_shutdown.c:565
#3  0xc062a874 in trap_fatal (frame=0xcc76fa2c, eva=0xffffff80) at 
/usr/src/sys/i386/i386/trap.c:837
#4  0xc062a5db in trap_pfault (frame=0xcc76fa2c, usermode=0x0, 
eva=0xffffff80) at /usr/src/sys/i386/i386/trap.c:745
#5  0xc062a219 in trap (frame=
      {tf_fs = 0xc04e0008, tf_es = 0xc1da0028, tf_ds = 0xc2420028, 
tf_edi = 0xc1e7296c, tf_esi = 0xc1d9c438, tf_ebp = 0xcc76fa78, tf_isp = 
0xcc76fa58, tf_ebx = 0xc22ec900, tf_edx = 0xc22ec900, tf_ecx = 
0xffffff80, tf_eax = 0xc239c800, tf_trapno = 0xc, tf_err = 0x2, tf_eip = 
0xc050d011, tf_cs = 0x20, tf_eflags = 0x10202, tf_esp = 0xc1d9c438, 
tf_ss = 0xc1e728f6}) at /usr/src/sys/i386/i386/trap.c:435
#6  0xc06188ea in calltrap () at /usr/src/sys/i386/i386/exception.s:139
#7  0xc050d011 in putc (chr=0x20, clistp=0xc1d9c438) at 
/usr/src/sys/kern/tty_subr.c:399
#8  0xc055233b in pppasyncstart (sc=0xc24e5200) at 
/usr/src/sys/net/ppp_tty.c:601
#9  0xc054bf2e in pppoutput (ifp=0xc1ed0000, m0=0xc245d600, 
dst=0xcc76fb18, rtp=0x0) at /usr/src/sys/net/if_ppp.c:961
#10 0xc0564494 in ip_output (m=0xc245d600, opt=0xc1ed0000, 
ro=0xcc76fb14, flags=0x20, imo=0xc239d680, inp=0xc1fef924)
    at /usr/src/sys/netinet/ip_output.c:777
#11 0xc0574e07 in udp_output (inp=0xc1fef924, m=0xc245d600, 
addr=0xc23a43c0, control=0x20, td=0xc1e36d80)
    at /usr/src/sys/netinet/udp_usrreq.c:913
#12 0xc05757ae in udp_send (so=0xc239c800, flags=0x0, m=0xc2425b00, 
addr=0xc23a43c0, control=0x0, td=0xc1e36d80)
    at /usr/src/sys/netinet/udp_usrreq.c:1090
#13 0xc0511d8b in sosend (so=0xc23b29bc, addr=0xc23a43c0, 
uio=0xcc76fc40, top=0xc2425b00, control=0x0, flags=0x0,
    td=0xc1e36d80) at /usr/src/sys/kern/uipc_socket.c:836
#14 0xc0517729 in kern_sendit (td=0xc1e36d80, s=0x9, mp=0xcc76fcbc, 
flags=0x0, control=0x0, segflg=3258566656)
    at /usr/src/sys/kern/uipc_syscalls.c:772
#15 0xc05175e3 in sendit (td=0xc1e36d80, s=0x9, mp=0xcc76fcbc, 
flags=0x0) at /usr/src/sys/kern/uipc_syscalls.c:712
#16 0xc05178d1 in sendto (td=0xc1e36d80, uap=0xc22ec900) at 
/usr/src/sys/kern/uipc_syscalls.c:830
#17 0xc062ab8b in syscall (frame=
      {tf_fs = 0x3b, tf_es = 0x3b, tf_ds = 0xbfbf003b, tf_edi = 0x9, 
tf_esi = 0xbfbfeb60, tf_ebp = 0xbfbfeb88, tf_isp = 0xcc76fd64, tf_ebx = 
0x80a9a20, tf_edx = 0xc000000, tf_ecx = 0xc, tf_eax = 0x85, tf_trapno = 
0x0, tf_err = 0x2, tf_eip = 0x281a8f43, tf_cs = 0x33, tf_eflags = 0x296, 
tf_esp = 0xbfbfeafc, tf_ss = 0x3b}) at /usr/src/sys/i386/i386/trap.c:983
#18 0xc061893f in Xint0x80_syscall () at 
/usr/src/sys/i386/i386/exception.s:200
#19 0x00000033 in ?? ()
(kgdb)


--
With best regards,
    Gregory Edigarov




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4603C748.9060202>