help with GPF on 5.4-STABLE

[Doug White]

Lets prune this down:

On Thu, 19 May 2005, Sean McNeil wrote:

> I'm not sure what information to provide from my crash dump.  I tried to
> burn a CD with my
>
> 'TOSHIBA ' 'CD/DVDW SD-R5372' 'TU31' Removable CD-ROM
>
> via. nautilus CD burner and I get a kernel panic:
>
> May 19 19:41:23 server kernel: Fatal trap 9: general protection fault while in kernel mode
> May 19 19:41:23 server kernel: instruction pointer      = 0x8:0xffffffff801f4d99May 19 19:41:23 server kernel: stack pointer            = 0x10:0xffffffffb1d7ab80
> May 19 19:41:23 server kernel: frame pointer            = 0x10:0xffffff0000c3b000
> May 19 19:41:23 server kernel: code segment             = base 0x0, limit 0xfffff, type 0x1b
> May 19 19:41:23 server kernel: = DPL 0, pres 1, long 1, def32 0, gran 1
> May 19 19:41:23 server kernel: processor eflags = interrupt enabled, resume, IOPL = 0
> May 19 19:41:23 server kernel: current process          = 5 (thread taskq)
> May 19 19:41:23 server kernel: trap number              = 9
> May 19 19:41:23 server kernel: panic: general protection fault
>
> What can I do to get the proper info to the developers? using kgdb, I
> checked the threads (pids) and stack.

['info threads' isn't too useful here...]

kern.timeout.c line 530 is

530         mtx_unlock_spin(&callout_lock);

I'm not sure what in there would generate a GPF.  Load up a debugging
version of the kernel that generated this error into gdb (add "makeoptions
DEBUG=-g" to your kernel config & rebuild if you don't have one, and you
don't need to load in the crashdump), and enter

disass 0xffffffffb1d7ab80

It'll disassemble whatever function it is in. Search the addresses on the
left for the matching line and paste it and a handful to both sides into
your reply.  That will help us narrow things down by seeing what
instruction faulted and searching for conditions that cause that fault.

> The traceback on the core dump looks terrible, though:
>
> #0  doadump () at pcpu.h:167
> No locals.
> #1  0x0000000000000000 in ?? ()
> No symbol table info available.
> #2  0xffffffff80314507 in boot (howto=260)
>     at /usr/src/sys/kern/kern_shutdown.c:410
> 	first_buf_printf = 1
> #3  0xffffffff80314c66 in panic (fmt=0xffffff007b73c000 "\xb8\030u{")
>     at /usr/src/sys/kern/kern_shutdown.c:566
> 	bootopt = 260
> 	newpanic = 0
> 	ap = {{gp_offset = 16, fp_offset = 48,
>     overflow_arg_area = 0xffffffffb1d7aa40,
>     reg_save_area = 0xffffffffb1d7a970}}
> 	buf = "general protection fault", '\0' <repeats 231 times>
> #4  0xffffffff8048b032 in trap_fatal (frame=0xffffff007b73c000,
>     eva=18446742976269195448) at /usr/src/sys/amd64/amd64/trap.c:639
> 	code = 2071183360
> 	type = 9
> 	ss = 16
> 	esp = 0
> 	softseg = {ssd_base = 0, ssd_limit = 1048575, ssd_type = 27,
>   ssd_dpl = 0, ssd_p = 1, ssd_long = 1, ssd_def32 = 0, ssd_gran = 1}
> #5  0xffffffff8048b4ac in trap (frame=
>       {tf_rdi = -1097452552680, tf_rsi = 1, tf_rdx = 80, tf_rcx = 32,
> tf_r8 = -1097440356168, tf_r9 = -1097440312640, tf_rax =
> 1407858069538464, tf_rbx = -1097452552680, tf_rbp = -1099498803200,
> tf_r10 = -2140369864, tf_r11 = 0, tf_r12 = 4, tf_r13 = 1, tf_r14 =
> -1099499747832, tf_r15 = 1, tf_trapno = 9, tf_addr = 0, tf_flags =
> -2144193190, tf_err = 0, tf_rip = -2145432167, tf_cs = 8, tf_rflags =
> 66054, tf_rsp = -1311265904, tf_ss = 16})
> at /usr/src/sys/amd64/amd64/trap.c:458
> 	p = (struct proc *) 0xffffff007b7518b8
> 	sticks = 0
> 	i = 0
> 	ucode = 0
> 	type = 0
> 	code = 0
> #6  0xffffffff8047af0b in calltrap ()
>     at /usr/src/sys/amd64/amd64/exception.S:171
> No locals.
> #7  0xffffff007abafe18 in ?? ()
> No symbol table info available.
> #8  0x0000000000000001 in ?? ()
> No symbol table info available.
> #9  0x0000000000000050 in ?? ()
> No symbol table info available.
> #10 0x0000000000000020 in ?? ()
> No symbol table info available.
> #11 0xffffff007b7518b8 in ?? ()
> No symbol table info available.
> #12 0xffffff007b75c2c0 in ?? ()
> No symbol table info available.
> #13 0x00050070802106a0 in ?? ()
> No symbol table info available.
> #14 0xffffff007abafe18 in ?? ()
> No symbol table info available.
> #15 0xffffff0000c3b000 in ?? ()
> No symbol table info available.
> #16 0xffffffff806c8c38 in runq ()
> No symbol table info available.
> #17 0x0000000000000000 in ?? ()
> No symbol table info available.
> #18 0x0000000000000004 in ?? ()
> No symbol table info available.
> #19 0x0000000000000001 in ?? ()
> No symbol table info available.
> #20 0xffffff0000b54608 in ?? ()
> No symbol table info available.
> #21 0x0000000000000001 in ?? ()
> No symbol table info available.
> #22 0x0000000000000009 in ?? ()
> No symbol table info available.
> #23 0x0000000000000000 in ?? ()
> No symbol table info available.
> #24 0xffffffff8032355a in _callout_stop_safe (c=0xffffff007abafe18,
> safe=4)
>     at /usr/src/sys/kern/kern_timeout.c:530
> 	use_mtx = 1
> #25 0x0000000000000010 in ?? ()
> No symbol table info available.
> #26 0xffffff007b73c000 in ?? ()
> No symbol table info available.
> #27 0xffffffff8031bfd6 in msleep (ident=0x1, mtx=0xffffff0000b54608,
>     priority=92, wmesg=0xffffffff80337d20 "eH\2134%", timo=0)
>     at /usr/src/sys/kern/kern_synch.c:228
> 	_giantcnt = 8
> 	sq = (struct sleepqueue *) 0xffffff007abaff18
> 	catch = -256
> 	rval = -1311265904
> 	sig = 11879936
> 	flags = 0
> #28 0xffffffff803382a8 in taskqueue_thread_loop (arg=0x0)
>     at /usr/src/sys/kern/subr_taskqueue.c:237
> 	tq = (struct taskqueue *) 0xffffff0000b54600
> #29 0xffffffff802fbfbc in fork_exit (
>     callout=0xffffffff80338270 <taskqueue_thread_loop>,
>     arg=0xffffffff806cc030, frame=0xffffffffb1d7ac50)
>     at /usr/src/sys/kern/kern_fork.c:791
> 	p = (struct proc *) 0xffffff007b7518b8
> #30 0xffffffff8047b10e in fork_trampoline ()
>     at /usr/src/sys/amd64/amd64/exception.S:296
> No locals.

-- 
Doug White                    |  FreeBSD: The Power to Serve
dwhite at gumbysoft.com          |  www.FreeBSD.org