panic: vm_fault: fault on nofault entry

From: Jun Kuriyama <kuriyama_at_imgsrc.co.jp>
Date: Tue, 18 Nov 2003 09:21:47 +0900
Hmm, I'm not sure where the actual panic is caused.  This is
yesterday's kernel (about 16 hours ago).


-----
% gdb -k kernel.debug /work/crash/vmcore.5 
GNU gdb 5.2.1 (FreeBSD)
Copyright 2002 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-undermydesk-freebsd"...
panic: vm_fault: fault on nofault entry, addr: d84a5000
panic messages:
---
Syntax error: Unterminated quoted string
---
Reading symbols from /boot/kernel/mga.ko...done.
Loaded symbols for /boot/kernel/mga.ko
#0  doadump () at ../../../kern/kern_shutdown.c:240
240             dumping++;
(kgdb) bt
#0  doadump () at ../../../kern/kern_shutdown.c:240
#1  0xc055f60b in boot (howto=260) at ../../../kern/kern_shutdown.c:372
#2  0xc055fa0d in panic () at ../../../kern/kern_shutdown.c:550
#3  0xc046f5c2 in db_panic () at ../../../ddb/db_command.c:450
#4  0xc046f522 in db_command (last_cmdp=0xc07d2160, cmd_table=0x0, 
    aux_cmd_tablep=0xc0784140, aux_cmd_tablep_end=0xc0784144)
    at ../../../ddb/db_command.c:346
#5  0xc046f665 in db_command_loop () at ../../../ddb/db_command.c:472
#6  0xc0472665 in db_trap (type=3, code=0) at ../../../ddb/db_trap.c:73
#7  0xc06f8b2c in kdb_trap (type=3, code=0, regs=0xed17657c)
    at ../../../i386/i386/db_interface.c:171
#8  0xc070e218 in trap (frame=
      {tf_fs = -1065484264, tf_es = -765460464, tf_ds = 16, tf_edi = -1065912277, tf_esi = 1, tf_ebp = -317233720, tf_isp = -317233752, tf_ebx = 0, tf_edx = 0, tf_ecx = 1, tf_eax = 18, tf_trapno = 3, tf_err = 0, tf_eip = -1066430923, tf_cs = 8, tf_eflags = 642, tf_esp = -1065894006, tf_ss = -1066016728})
    at ../../../i386/i386/trap.c:580
#9  0xc06fa578 in calltrap () at {standard input}:94
#10 0xc055f9a6 in panic (
    fmt=0xc077782b "vm_fault: fault on nofault entry, addr: %lx")
    at ../../../kern/kern_shutdown.c:534
#11 0xc06b0aee in vm_fault (map=0xc1031000, vaddr=3628748800, 
    fault_type=1 '\001', fault_flags=0) at ../../../vm/vm_fault.c:891
#12 0xc070e462 in trap_pfault (frame=0xed17679c, usermode=0, eva=3628748800)
    at ../../../i386/i386/trap.c:723
#13 0xc070e093 in trap (frame=
      {tf_fs = -317259752, tf_es = -1068171248, tf_ds = -1065222128, tf_edi = -825817600, tf_esi = -666218496, tf_ebp = -317233168, tf_isp = -317233208, tf_ebx = -877446136, tf_edx = -666218496, tf_ecx = 64, tf_eax = 0, tf_trapno = 12, tf_err = 0, tf_eip = -1066823996, tf_cs = 8, tf_eflags = 66182, tf_esp = -825817600, tf_ss = 16}) at ../../../i386/i386/trap.c:420
#14 0xc06fa578 in calltrap () at {standard input}:94
#15 0xc069bea2 in ffs_vget (mp=0xd121dc00, ino=3469149696, flags=2, 
    vpp=0xed1768e0) at ../../../ufs/ffs/ffs_vfsops.c:1333
#16 0xc0680f40 in ffs_valloc (pvp=0xcbf07a28, mode=33152, cred=0xd1bdec00, 
    vpp=0xed1768e0) at ../../../ufs/ffs/ffs_alloc.c:861
#17 0xc06aa759 in ufs_makeinode (mode=33152, dvp=0xcbf07a28, vpp=0xed176bec, 
    cnp=0xed176c00) at ../../../ufs/ufs/ufs_vnops.c:2358
#18 0xc06a6cf9 in ufs_create (ap=0xed176a68)
    at ../../../ufs/ufs/ufs_vnops.c:199
#19 0xc06aae68 in ufs_vnoperate (ap=0x0) at ../../../ufs/ufs/ufs_vnops.c:2793
#20 0xc05c648e in vn_open_cred (ndp=0xed176bd8, flagp=0xed176cd8, cmode=384, 
    cred=0xd1bdec00, fdidx=0) at vnode_if.h:118
#21 0xc05c62e3 in vn_open (ndp=0x0, flagp=0x0, cmode=0, fdidx=0)
    at ../../../kern/vfs_vnops.c:93
#22 0xc05bf7be in kern_open (td=0xd2606780, path=0x0, pathseg=UIO_USERSPACE, 
    flags=514, mode=384) at ../../../kern/vfs_syscalls.c:963
#23 0xc05bf6e0 in open (td=0x0, uap=0x0) at ../../../kern/vfs_syscalls.c:933
#24 0xc070ebc0 in syscall (frame=
      {tf_fs = 47, tf_es = 47, tf_ds = 47, tf_edi = 3, tf_esi = -1077941360, tf_ebp = -1077941128, tf_isp = -317231756, tf_ebx = -1077941352, tf_edx = -1, tf_ecx = 2, tf_eax = 5, tf_trapno = 12, tf_err = 2, tf_eip = 671916207, tf_cs = 31, tf_eflags = 518, tf_esp = -1077941396, tf_ss = 47})
    at ../../../i386/i386/trap.c:1010
#25 0xc06fa5cd in Xint0x80_syscall () at {standard input}:136
---Can't read userspace from dump, or kernel process---

(kgdb) up 15
#15 0xc069bea2 in ffs_vget (mp=0xd121dc00, ino=3469149696, flags=2, 
    vpp=0xed1768e0) at ../../../ufs/ffs/ffs_vfsops.c:1333
1333            ffs_load_inode(bp, ip, fs, ino);
(kgdb) list
1328            }
1329            if (ip->i_ump->um_fstype == UFS1)
1330                    ip->i_din1 = uma_zalloc(uma_ufs1, M_WAITOK);
1331            else
1332                    ip->i_din2 = uma_zalloc(uma_ufs2, M_WAITOK);
1333            ffs_load_inode(bp, ip, fs, ino);
1334            if (DOINGSOFTDEP(vp))
1335                    softdep_load_inodeblock(ip);
1336            else
1337                    ip->i_effnlink = ip->i_nlink;
(kgdb) down
#14 0xc06fa578 in calltrap () at {standard input}:94
94      {standard input}: No such file or directory.
        in {standard input}
Current language:  auto; currently asm
(kgdb) list
89      in {standard input}
(kgdb) up
#15 0xc069bea2 in ffs_vget (mp=0xd121dc00, ino=3469149696, flags=2, 
    vpp=0xed1768e0) at ../../../ufs/ffs/ffs_vfsops.c:1333
1333            ffs_load_inode(bp, ip, fs, ino);
Current language:  auto; currently c
(kgdb) p bp
$1 = (struct buf *) 0xd4ba34b0
(kgdb) p ip
$2 = (struct inode *) 0xcbb33c08
(kgdb) p fs
$3 = (struct fs *) 0xc99f7800
(kgdb) p ino
$4 = 3469149696
(kgdb) p *bp
$5 = {b_io = {bio_cmd = 2, bio_dev = 0xd23d1d00, bio_disk = 0x0, 
    bio_offset = 28672, bio_bcount = 4096, bio_data = 0xd84a4000 "", 
    bio_flags = 4, bio_error = 0, bio_resid = 0, 
    bio_done = 0xc05aca10 <bufdonebio>, bio_driver1 = 0x0, bio_driver2 = 0x0, 
    bio_caller1 = 0x0, bio_caller2 = 0xd4ba34b0, bio_queue = {tqe_next = 0x0, 
      tqe_prev = 0x0}, bio_attribute = 0x0, bio_from = 0x0, bio_to = 0x0, 
    bio_length = 0, bio_completed = 0, bio_children = 294, bio_inbed = 0, 
    bio_parent = 0x0, bio_t0 = {sec = 0, frac = 0}, bio_task = 0, 
    bio_task_arg = 0x0, bio_pblkno = 0}, b_op = 0xc07b6848, 
  b_magic = 280038160, b_iodone = 0, b_blkno = 56, b_offset = 28672, 
  b_vnbufs = {tqe_next = 0xd4a5c4d0, tqe_prev = 0xd4c63674}, 
  b_left = 0xd4c635d0, b_right = 0xd4a5c4d0, b_vflags = 0, b_freelist = {
    tqe_next = 0xd4c635d0, tqe_prev = 0xd4b6da08}, b_qindex = 0, 
  b_flags = 537002144, b_xflags = 1 '\001', b_lock = {
    lk_interlock = 0xc07e5d30, lk_flags = 1024, lk_sharecount = 0, 
    lk_waitcount = 0, lk_exclusivecount = 1, lk_prio = 80, 
    lk_wmesg = 0xc07646ac "getblk", lk_timo = 0, lk_lockholder = 0xd2606780, 
    lk_newlock = 0x0}, b_bufsize = 4096, b_runningbufspace = 0, 
  b_kvabase = 0xd84a4000 "", b_kvasize = 16384, b_lblkno = 56, 
  b_vp = 0xcb680514, b_object = 0xcc5cf528, b_dirtyoff = 0, b_dirtyend = 0, 
  b_rcred = 0x0, b_wcred = 0x0, b_saveaddr = 0xd84a4000, b_pager = {
    pg_reqpage = 0}, b_cluster = {cluster_head = {tqh_first = 0xd4a5c4d0, 
      tqh_last = 0xd4c64d50}, cluster_entry = {tqe_next = 0xd4a5c4d0, 
      tqe_prev = 0xd4c64d50}}, b_pages = {0xc21086f8, 0x0 <repeats 31 times>}, 
  b_npages = 1, b_dep = {lh_first = 0x0}}
(kgdb) p *ip
$6 = {i_hash = {le_next = 0x0, le_prev = 0xc844b0e4}, i_nextsnap = {
    tqe_next = 0x0, tqe_prev = 0x0}, i_vnode = 0xcd465a28, i_ump = 0xd23e8600, 
  i_flag = 32, i_dev = 0xd23d1d00, i_number = 16, i_effnlink = 0, 
  i_fs = 0xc99f7800, i_dquot = {0x0, 0x0}, i_modrev = 0, i_lockf = 0x0, 
  i_count = 0, i_endoff = 0, i_diroff = 0, i_offset = 0, i_ino = 0, 
  i_reclen = 0, i_un = {dirhash = 0x0, snapblklist = 0x0}, i_ea_area = 0x0, 
  i_ea_len = 0, i_ea_error = 0, i_mode = 0, i_nlink = 0, i_size = 0, 
  i_flags = 0, i_gen = 0, i_uid = 0, i_gid = 0, dinode_u = {din1 = 0xcec70600, 
    din2 = 0xcec70600}}
(kgdb) p *fs
$7 = {fs_firstfield = 0, fs_unused_1 = 0, fs_sblkno = 32, fs_cblkno = 48, 
  fs_iblkno = 56, fs_dblkno = 96, fs_old_cgoffset = 0, fs_old_cgmask = -1, 
  fs_old_time = 1069112008, fs_old_size = 8640, fs_old_dsize = 8351, 
  fs_ncg = 4, fs_bsize = 4096, fs_fsize = 512, fs_frag = 8, fs_minfree = 0, 
  fs_old_rotdelay = 0, fs_old_rps = 60, fs_bmask = -4096, fs_fmask = -512, 
  fs_bshift = 12, fs_fshift = 9, fs_maxcontig = 32, fs_maxbpg = 512, 
  fs_fragshift = 3, fs_fsbtodb = 0, fs_sbsize = 1536, fs_spare1 = {0, 0}, 
  fs_nindir = 1024, fs_inopb = 32, fs_old_nspf = 1, fs_optim = 1, 
  fs_old_npsect = 2168, fs_old_interleave = 1, fs_old_trackskew = 0, fs_id = {
    1069112008, -1022875143}, fs_old_csaddr = 96, fs_cssize = 512, 
  fs_cgsize = 1024, fs_spare2 = 0, fs_old_nsect = 2168, fs_old_spc = 2168, 
  fs_old_ncyl = 4, fs_old_cpg = 1, fs_ipg = 160, fs_fpg = 2168, 
  fs_old_cstotal = {cs_ndir = 2, cs_nbfree = 1041, cs_nifree = 636, 
    cs_nffree = 21}, fs_fmod = 1 '\001', fs_clean = 0 '\0', fs_ronly = 0 '\0', 
  fs_old_flags = -128 '\200', fs_fsmnt = "/mnt", '\0' <repeats 463 times>, 
  fs_volname = '\0' <repeats 31 times>, fs_swuid = 0, fs_pad = 0, 
  fs_cgrotor = 0, fs_ocsp = {0x0 <repeats 28 times>}, 
  fs_contigdirs = 0xc8e3ae10 "", fs_csp = 0xc8e3ac00, 
  fs_maxcluster = 0xc8e3ae00, fs_active = 0x0, fs_old_cpc = 0, 
  fs_maxbsize = 4096, fs_sparecon64 = {0 <repeats 17 times>}, 
  fs_sblockloc = 65536, fs_cstotal = {cs_ndir = 10, cs_nbfree = 1031, 
    cs_nifree = 612, cs_nffree = 23, cs_numclusters = 0, cs_spare = {0, 0, 
      0}}, fs_time = 1069112008, fs_size = 8640, fs_dsize = 8351, 
  fs_csaddr = 96, fs_pendingblocks = 0, fs_pendinginodes = 0, fs_snapinum = {
    0 <repeats 20 times>}, fs_avgfilesize = 16384, fs_avgfpdir = 64, 
  fs_save_cgsize = 0, fs_sparecon32 = {0 <repeats 26 times>}, fs_flags = 0, 
  fs_contigsumsize = 16, fs_maxsymlinklen = 60, fs_old_inodefmt = 2, 
  fs_maxfilesize = 4402345721855, fs_qbmask = 4095, fs_qfmask = 511, 
  fs_state = 0, fs_old_postblformat = 1, fs_old_nrpos = 1, fs_spare5 = {0, 0}, 
  fs_magic = 424935705}


-- 
Jun Kuriyama <kuriyama_at_imgsrc.co.jp> // IMG SRC, Inc.
             <kuriyama_at_FreeBSD.org> // FreeBSD Project
Received on Mon Nov 17 2003 - 15:21:53 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:37:29 UTC