Turbulence in head _at_r282676.

From: David Wolfskill <david_at_catwhisker.org>
Date: Sun, 10 May 2015 08:19:59 -0700
As noted yesterday, my laptop panicked trying to boot head/i386
_at_r282676, but seemed OK withe head/amd64.

That turns out to have been a bit optimistic: today, while performing a
src update on the laptop from head/amd64 from r282676 to r282719, the
laptop locked up.  While I was able to reproduce the overall symptoms, I
don't know how good the match was, as I'm not sure exactly where in the
processing the machine was each of the 3 times.  (After that, I gave up,
and booted the previous day's kernel (_at_r282623); that permitted a
complete build of sources _at_r282719.)

And my build machine (which is only i386) didn't have the panic (as it
hasn't any HDA sound), but while it was running head/i386 _at_r282676,
builoding head/i386 _at_r282719, I found it sitting at a "db> " prompt.

This appears to be a kassert_panic() in head/i386 _at_r282676.

I have a crash dump and a text excerpt; here are excerpts from that
excerpt:

Sun May 10 08:05:58 PDT 2015

FreeBSD freebeast.catwhisker.org 11.0-CURRENT FreeBSD 11.0-CURRENT #1829  r282676M/282676:1100073: Sat May  9 07:34:18 PDT 2015     root_at_freebeast.catwhisker.org:/common/S4/obj/usr/src/sys/GENERIC  i386

panic: object 0xc9dbb750 ref_count = 1
...
Unread portion of the kernel message buffer:
panic: object 0xc9dbb750 ref_count = 1
cpuid = 1
KDB: stack backtrace:
db_trace_self_wrapper(c11db478,0,c11b0e6c,202,f4e0e740,...) at db_trace_self_wrapper+0x2a/frame 0xf4e0e710
kdb_backtrace(c13a164b,1,c1216514,f4e0e7dc,1,...) at kdb_backtrace+0x2d/frame 0xf4e0e778
vpanic(c1216514,f4e0e7dc,c1216514,f4e0e7dc,f4e0e7dc,...) at vpanic+0x117/frame 0xf4e0e7ac
kassert_panic(c1216514,c9dbb750,1,c1f558c0,f4e0e828,...) at kassert_panic+0xe9/frame 0xf4e0e7d0
vm_object_zdtor(c9dbb750,9c,0,8,10,...) at vm_object_zdtor+0x75/frame 0xf4e0e7e8
uma_zfree_arg(c1f558c0,c9dbb750,0) at uma_zfree_arg+0x61/frame 0xf4e0e828
vm_object_destroy(c9dbb750,0,c1218fa3,ef,f4e0e884,...) at vm_object_destroy+0x75/frame 0xf4e0e840
vnode_pager_alloc(c9dad470,1015,0,0,0,...) at vnode_pager_alloc+0x68/frame 0xf4e0e880
vnode_create_vobject(c9dad470,1015,0,c890d000,c14730b4,...) at vnode_create_vobject+0x1f8/frame 0xf4e0e93c
ufs_open(f4e0e9d0,c75f4c40,c84a0400,0,d3,...) at ufs_open+0x70/frame 0xf4e0e95c
VOP_OPEN_APV(c1472a90,f4e0e9d0,100,c6d83178,f4e0e9f4,...) at VOP_OPEN_APV+0xfe/frame 0xf4e0e988
vn_open_vnode(c9dad470,1,c88d1700,c890d000,c7b16b60,...) at vn_open_vnode+0x1e5/frame 0xf4e0ea00
vn_open_cred(f4e0eb40,f4e0ebcc,0,0,c88d1700,c7b16b60) at vn_open_cred+0x32a/frame 0xf4e0ead0
vn_open(f4e0eb40,f4e0ebcc,0,c7b16b60,2adcfdd4,...) at vn_open+0x3d/frame 0xf4e0eaf8
kern_openat(c890d000,ffffff9c,2adcfdd4,0,0,0) at kern_openat+0x2ec/frame 0xf4e0ebf0
sys_openat(c890d000,f4e0eca8,c11cfcd9,4,c105e827,...) at sys_openat+0x3a/frame 0xf4e0ec18
syscall(f4e0ece8) at syscall+0x33b/frame 0xf4e0ecdc
Xint0x80_syscall() at Xint0x80_syscall+0x21/frame 0xf4e0ecdc
--- syscall (499, FreeBSD ELF32, sys_openat), eip = 0xa1298ff, esp = 0xbfbfa910, ebp = 0xbfbfa928 ---
KDB: enter: panic

Reading symbols from /boot/kernel/tmpfs.ko.symbols...done.
Loaded symbols for /boot/kernel/tmpfs.ko.symbols
#0  doadump (textdump=0) at pcpu.h:205
205     pcpu.h: No such file or directory.
        in pcpu.h
(kgdb) #0  doadump (textdump=0) at pcpu.h:205
#1  0xc05311f1 in db_dump (dummy=-1061584035, dummy2=0, dummy3=-1, 
    dummy4=0xf4e0e4bc "") at /usr/src/sys/ddb/db_command.c:533
#2  0xc0530d9f in db_command (cmd_table=<value optimized out>)
    at /usr/src/sys/ddb/db_command.c:440
#3  0xc05309e0 in db_command_loop () at /usr/src/sys/ddb/db_command.c:493
#4  0xc053337b in db_trap (code=<value optimized out>)
    at /usr/src/sys/ddb/db_main.c:251
#5  0xc0b98ac7 in kdb_trap (tf=<value optimized out>)
    at /usr/src/sys/kern/subr_kdb.c:654
#6  0xc10568ff in trap (frame=<value optimized out>)
    at /usr/src/sys/i386/i386/trap.c:693
#7  0xc10427fc in calltrap () at /usr/src/sys/i386/i386/exception.s:169
#8  0xc0b9835d in kdb_enter (why=0xc11d6ba9 "panic", 
    msg=<value optimized out>) at cpufunc.h:60
#9  0xc0b5a1b7 in vpanic (fmt=<value optimized out>, ap=<value optimized out>)
    at /usr/src/sys/kern/kern_shutdown.c:737
#10 0xc0b5a079 in kassert_panic (fmt=<value optimized out>)
    at /usr/src/sys/kern/kern_shutdown.c:634
#11 0xc0e1ea45 in vm_object_zdtor (mem=0xc9dbb750, size=156, arg=0x0)
    at /usr/src/sys/vm/vm_object.c:169
#12 0xc0e0a691 in uma_zfree_arg (zone=0xc1f558c0, item=<value optimized out>, 
    udata=0x10) at /usr/src/sys/vm/uma_core.c:2723
#13 0xc0e20195 in vm_object_destroy (object=0xc9dbb750) at uma.h:364
#14 0xc0e326d8 in vnode_pager_alloc (handle=0xc9dad470, size=4117, 
    prot=0 '\0', offset=0, cred=0xc88d1700)
    at /usr/src/sys/vm/vnode_pager.c:240
#15 0xc0e330d8 in vnode_create_vobject (vp=0xc9dad470, 
    isize=<value optimized out>, td=0xc890d000)
    at /usr/src/sys/vm/vnode_pager.c:144
#16 0xc0dfd510 in ufs_open (ap=<value optimized out>)
    at /usr/src/sys/ufs/ufs/ufs_vnops.c:284
#17 0xc10849de in VOP_OPEN_APV (vop=<value optimized out>, a=0xf4e0e9d0)
    at vnode_if.c:467
#18 0xc0c23bb5 in vn_open_vnode (vp=0xc9dad470, fmode=<value optimized out>, 
    cred=<value optimized out>, fp=<value optimized out>) at vnode_if.h:196
#19 0xc0c237da in vn_open_cred (ndp=0xf4e0eb40, flagp=<value optimized out>, 
    vn_open_flags=<value optimized out>, fp=<value optimized out>)
    at /usr/src/sys/kern/vfs_vnops.c:264
#20 0xc0c2349d in vn_open (ndp=0xf4e0eb40, flagp=0xf4e0ebcc, cmode=0, 
    fp=0xc7b16b60) at /usr/src/sys/kern/vfs_vnops.c:166
#21 0xc0c1b9fc in kern_openat (td=0xc890d000, fd=0, path=0x0, 
    pathseg=<value optimized out>, flags=<value optimized out>, 
    mode=<value optimized out>) at /usr/src/sys/kern/vfs_syscalls.c:1090
#22 0xc0c1bd7a in sys_openat (td=0xc890d000, uap=0xf4e0eca8)
    at /usr/src/sys/kern/vfs_syscalls.c:1038
#23 0xc105760b in syscall (frame=<value optimized out>) at subr_syscall.c:133
#24 0xc1042891 in Xint0x80_syscall ()
    at /usr/src/sys/i386/i386/exception.s:269
#25 0x00000033 in ?? ()
Previous frame inner to this frame (corrupt stack?)
Current language:  auto; currently minimal
(kgdb) 
....

I can make the dumps, as well as a verbose dmesg.boot, available.

Peace,
david
-- 
David H. Wolfskill				david_at_catwhisker.org
Those who murder in the name of God or prophet are blasphemous cowards.

See http://www.catwhisker.org/~david/publickey.gpg for my public key.

Received on Sun May 10 2015 - 13:20:08 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:40:57 UTC