Re: Project Evil: The Evil Continues

Bill,

I am using the True Mobile 1400 a/b/g,  (bcm 4309 i believe) and can 
make it panic. I am not exactly sure what is causing it, but if a large 
amount of text comes over ssh (the only way that I have reproduced it 
since adding saving dumps) such as untaring a large tar or 'du /' after 
about 40-80 rows of output sent through ssh it panics. Not sure exactly 
what to call it.

Here is a backtrace. If you need more information then this let me know.

Fatal trap 12: page fault while in kernel mode
fault virtual address    = 0x20
fault code        = supervisor write, page not present
instruction pointer    = 0x8:0xc09b393b
stack pointer            = 0x10:0xd89e3a48
frame pointer            = 0x10:0xd89e3a70
code segment        = base 0x0, limit 0xfffff, type 0x1b
            = DPL 0, pres 1, def32 1, gran 1
processor eflags    = interrupt enabled, resume, IOPL = 0
current process        = 32 (ndis swi)
trap number        = 12
panic: page fault

syncing disks, buffers remaining... panic: bremfree: removing a buffer 
not on a queue
Uptime: 3m16s
Dumping 511 MB
 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 256 272 288 304 
320 336 352 368 384 400 416 432 448 464 480 496
---

warning: cannot find file for module nvidia.ko

Error while mapping shared library sections:
nvidia.ko: No such file or directory.
Error while reading shared library symbols:
nvidia.ko: No such file or directory.
Reading symbols from 
/usr/obj/usr/src/sys/IRRADIATE/modules/usr/src/sys/modules/linux/linux.ko.debug...done.
Loaded symbols for 
/usr/obj/usr/src/sys/IRRADIATE/modules/usr/src/sys/modules/linux/linux.ko.debug
Reading symbols from /boot/kernel/ndis.ko...done.
Loaded symbols for /boot/kernel/ndis.ko
Reading symbols from /boot/kernel/if_ndis.ko...done.
Loaded symbols for /boot/kernel/if_ndis.ko
Reading symbols from 
/usr/obj/usr/src/sys/IRRADIATE/modules/usr/src/sys/modules/acpi/acpi.ko.debug...done.
Loaded symbols for 
/usr/obj/usr/src/sys/IRRADIATE/modules/usr/src/sys/modules/acpi/acpi.ko.debug
Reading symbols from /boot/kernel/logo_saver.ko...done.
Loaded symbols for /boot/kernel/logo_saver.ko
#0  doadump () at /usr/src/sys/kern/kern_shutdown.c:240
/usr/src/sys/kern/kern_shutdown.c:240:6803:beg:0xc0526aab
(gdb) bt
#0  doadump () at /usr/src/sys/kern/kern_shutdown.c:240
#1  0xc0527134 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:372
#2  0xc05274d8 in panic () at /usr/src/sys/kern/kern_shutdown.c:550
#3  0xc0570a71 in bremfreel (bp=0xced22cb0) at 
/usr/src/sys/kern/vfs_bio.c:647
#4  0xc057097b in bremfree (bp=0x0) at /usr/src/sys/kern/vfs_bio.c:629
#5  0xc05752ce in getblk (vp=0xc507f000, blkno=-186380, size=16384, 
slpflag=0, slptimeo=0, flags=0) at /usr/src/sys/kern/vfs_bio.c:2468
#6  0xc0570b42 in breadn (vp=0xc507f000, blkno=0, size=0, rablkno=0x0, 
rabsize=0x0, cnt=0, cred=0x0, bpp=0x0) at /usr/src/sys/kern/vfs_bio.c:700
#7  0xc0570aec in bread (vp=0x0, blkno=0, size=0, cred=0x0, bpp=0x0) at 
/usr/src/sys/kern/vfs_bio.c:682
#8  0xc0608963 in ffs_balloc_ufs2 (vp=0xc507f000, startoffset=0, 
size=16384, cred=0xc1d06e80, flags=131072, bpp=0xd89e36f8) at 
/usr/src/sys/ufs/ffs/ffs_balloc.c:706
#9  0xc06119f0 in ffs_copyonwrite (devvp=0xc4a50000, bp=0xcec58a00) at 
/usr/src/sys/ufs/ffs/ffs_snapshot.c:1992
#10 0xc04e7ae2 in spec_xstrategy (vp=0xc4a50000, bp=0xcec58a00) at 
/usr/src/sys/fs/specfs/spec_vnops.c:474
#11 0xc04e7bdb in spec_specstrategy (ap=0x0) at 
/usr/src/sys/fs/specfs/spec_vnops.c:534
#12 0xc04e6cf8 in spec_vnoperate (ap=0x0) at 
/usr/src/sys/fs/specfs/spec_vnops.c:122
#13 0xc0571354 in bwrite (bp=0xcec58a00) at vnode_if.h:1141
#14 0xc057392d in vfs_bio_awrite (bp=0xcec58a00) at 
/usr/src/sys/kern/vfs_bio.c:1715
#15 0xc057cc2c in vop_stdfsync (ap=0xd89e3894) at 
/usr/src/sys/kern/vfs_default.c:738
#16 0xc04e7950 in spec_fsync (ap=0xd89e3894) at 
/usr/src/sys/fs/specfs/spec_vnops.c:422
#17 0xc04e6cf8 in spec_vnoperate (ap=0x0) at 
/usr/src/sys/fs/specfs/spec_vnops.c:122
#18 0xc061e4b1 in ffs_sync (mp=0xc491bc00, waitfor=2, cred=0xc1d06e80, 
td=0xc0710660) at vnode_if.h:627
#19 0xc058a0ae in sync (td=0xc0710660, uap=0x0) at 
/usr/src/sys/kern/vfs_syscalls.c:141
#20 0xc0526c43 in boot (howto=256) at /usr/src/sys/kern/kern_shutdown.c:281
#21 0xc05274d8 in panic () at /usr/src/sys/kern/kern_shutdown.c:550
#22 0xc067f63c in trap_fatal (frame=0xd89e3a08, eva=0) at 
/usr/src/sys/i386/i386/trap.c:821
#23 0xc067f302 in trap_pfault (frame=0xd89e3a08, usermode=0, eva=32) at 
/usr/src/sys/i386/i386/trap.c:735
#24 0xc067ee9d in trap (frame={tf_fs = 24, tf_es = 16, tf_ds = 
-995360752, tf_edi = 0, tf_esi = -995332332, tf_ebp = -660718992, tf_isp 
= -660719052, tf_ebx = -995639080, tf_edx = -999135680, tf_ecx = 
-998762200, tf_eax = 1, tf_trapno = 12, tf_err = 2, tf_eip = 
-1063569093, tf_cs = 8, tf_eflags = 66118, tf_esp = -1073741670, tf_ss = 
-995639296}) at /usr/src/sys/i386/i386/trap.c:420
#25 0xc0670d08 in calltrap () at {standard input}:94
#26 0xc09c5185 in drv_data () from /boot/kernel/if_ndis.ko
#27 0xc09b4445 in drv_data () from /boot/kernel/if_ndis.ko
---Can't read userspace from dump, or kernel process---

(gdb) up 22
#22 0xc067f63c in trap_fatal (frame=0xd89e3a08, eva=0) at 
/usr/src/sys/i386/i386/trap.c:821
/usr/src/sys/i386/i386/trap.c:821:21338:beg:0xc067f63c
(gdb) up
#23 0xc067f302 in trap_pfault (frame=0xd89e3a08, usermode=0, eva=32) at 
/usr/src/sys/i386/i386/trap.c:735
/usr/src/sys/i386/i386/trap.c:735:18792:beg:0xc067f302
(gdb) up
#24 0xc067ee9d in trap (frame={tf_fs = 24, tf_es = 16, tf_ds = 
-995360752, tf_edi = 0, tf_esi = -995332332, tf_ebp = -660718992, tf_isp 
= -660719052, tf_ebx = -995639080, tf_edx = -999135680, tf_ecx = 
-998762200, tf_eax = 1, tf_trapno = 12, tf_err = 2, tf_eip = 
-1063569093, tf_cs = 8, tf_eflags = 66118, tf_esp = -1073741670, tf_ss = 
-995639296}) at /usr/src/sys/i386/i386/trap.c:420
/usr/src/sys/i386/i386/trap.c:420:11234:beg:0xc067ee9d
(gdb) Quit

-- 
Matthew Will <mwill_at_spingen.com>
Spingen Solutions