Re: Panic in kern_access

On Mon, Sep 14, 2009 at 08:24:49PM +0200, Mel Flynn wrote:
> Hi,
> 
> below some crash info. However, since kib_at_ made some fixes that seem
> to relate to this, I shall rebuild my kernel with new sources.
No my fixes were related to the issue, AFAIR.

> 
> At the time I was building various ports in a jail and asleep, so no other 
> contributing factors.
> 
> panic: free: address 0xc62e0e00(0xc62e0000) has not been allocated.
> 
> #0  doadump () at pcpu.h:246
> 246   pcpu.h: No such file or directory.
>    in pcpu.h
> (kgdb) #0  doadump () at pcpu.h:246
> #1  0xc0642b57 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:416
> #2  0xc0642e49 in panic (fmt=Variable "fmt" is not available.
> ) at /usr/src/sys/kern/kern_shutdown.c:579
> #3  0xc062fcfe in free (addr=0x0, mtp=0xc091c330)
>     at /usr/src/sys/kern/kern_malloc.c:444
> #4  0xc063b018 in crfree (cr=0xc795ea80) at /usr/src/sys/kern/kern_prot.c:1840
I want to see the output of
p/x cr
and
p/x cr->cr_groups
from the frame 4.

> #5  0xc06d1ea2 in kern_accessat (td=0xcd5ea6c0, fd=-100,
>     path=0x2808d000 <Address 0x2808d000 out of bounds>,
>     pathseg=UIO_USERSPACE, flags=0, mode=0)
>     at /usr/src/sys/kern/vfs_syscalls.c:2145
> #6  0xc06d1f56 in kern_access (td=0xcd5ea6c0,
>     path=0x2808d000 <Address 0x2808d000 out of bounds>,
>     pathseg=UIO_USERSPACE, mode=0) at /usr/src/sys/kern/vfs_syscalls.c:2104
> #7  0xc06d1f89 in access (td=0xcd5ea6c0, uap=0xf9129cf8)
>     at /usr/src/sys/kern/vfs_syscalls.c:2079
> #8  0xc086fff5 in syscall (frame=0xf9129d38)
>     at /usr/src/sys/i386/i386/trap.c:1073
> #9  0xc0853a50 in Xint0x80_syscall ()
>     at /usr/src/sys/i386/i386/exception.s:261
> #10 0x00000033 in ?? ()
> Previous frame inner to this frame (corrupt stack?)
> 
> 8.0-BETA4 FreeBSD 8.0-BETA4 #14 r196875M. vmcore available if needed and I can 
> rollback sources to r196875 for proper source refs, in case r197041 does not 
> address this crash.

It does not.