Project

General

Profile

Bug #1034

panic with b148 hment_remove() missing in hash table

Added by Richard PALO over 8 years ago. Updated over 2 years ago.

Status:
Closed
Priority:
Normal
Assignee:
-
Category:
-
Target version:
-
Start date:
2011-05-14
Due date:
% Done:

0%

Estimated time:
Difficulty:
Medium
Tags:
panic

Description

Panic during firefox session

core dump available upon request...

# isainfo -v
32-bit i386 applications
    ahf sse fxsr amd_3dnowx amd_3dnow amd_mmx mmx cmov sep cx8 tsc fpu
# mdb -k 0
Loading modules: [ unix genunix specfs dtrace mac cpu.generic uppc pcplusmp scsi_vhci zfs ip hook neti sockfs arp usba fctl stmf stmf_sbd random crypto md fcp smbsrv nfs fcip lofs ufs logindmux ptm sppp nsmb ipc sd ]
> $c
vpanic(fe8f027c, fcab0af0, eac1ebb8, 2ea, 44af, d47abbd0)
hment_remove+0x12a(fcab0af0, eac1ebb8, 2ea, 0)
hat_pte_unmap+0x175(eac1ebb8, 2ea, 10, 21184067, 0, 0)
hat_unload_callback+0x159(e1ff2900, b9600000, 100000, 10, 0, 0)
segvn_unmap+0x197(eb22d890, b9600000, 100000, fe81c382)
as_free+0x119(d3c03ea8, e0e77b68, d47abe28, fe970f0e)
relvm+0xc7()
proc_exit+0x50d(2, b, e0e77b68, e95eee80)
exit+0x11(2, b, 0, fe9f194e)
psig+0x5bd()
post_syscall+0x3cf(0, d4776700, fe800cc7, 1)
syscall_exit+0x47(d4776700, 0, d4776700)
sys_call+0x176()
> ::panicinfo
             cpu        0
          thread d4776700
         message hment_remove() missing in hash table pp=fcab0af0, ht=eac1ebb8,entry=0x2ea hash index=0x44af
              gs fec401b0
              fs fec40000
              es fec40160
              ds fec40160
             edi        0
             esi    55dac
             ebp d47abb88
             esp d47abb6c
             ebx fcab0af0
             edx d4807198
             ecx d47abbcc
             eax d47abb94
          trapno        0
             err        0
             eip fe859a80
              cs fec40158
          eflags      286
            uesp        0
              ss fec40160
             gdt fe7fe00002cf
             idt fe7fd00007ff
             ldt        0
            task      150
             cr0 8005003b
             cr2 cbdfd890
             cr3  31b1000
             cr4      6d8
>  ::ps
S    PID   PPID   PGID    SID    UID      FLAGS     ADDR NAME
R      0      0      0      0      0 0x00000001 fec22298 sched
R    299      0      0      0      0 0x00020001 dd3d21c8 zpool-dpool
R      3      0      0      0      0 0x00020001 d19080d8 fsflush
R      2      0      0      0      0 0x00020001 d1908bc8 pageout
R      1      0      0      0      0 0x4a004000 d19096b8 init
R   4142      1   4141   4141    101 0x4a004000 d18f3660 gam_server
R   4121      1   1528   1528    101 0x4a014000 d18f4c40 thunderbird
R   4134   4121   1528   1528    101 0x4a014000 d18f6220 run-mozilla.sh
R   4138   4134   1528   1528    101 0x4a004000 d18f5730 thunderbird-bin
R   4026      1   1528   1528    101 0x4a004000 e0e77078 rhythmbox
R   1699      1   1528   1528    101 0xca004002 e0e77b68 firefox-bin
Z   1708   1699   1528   1528    101 0x4a004002 d26ba208 plugin-container
R   1695      1   1556   1556    101 0x4a004000 e0e7a728 gvfsd-metadata
R   1685      1   1556   1556    101 0x4a004000 df652c30 notification-dae
R   1652      1   1650   1650    101 0x42000000 d26b6b58 iiimx
R   1675   1652   1675   1675    101 0x4a004000 df651650 iiim-xbe
R   1674   1652   1674   1674    101 0x4a034000 e0e7b218 iiim-panel
R   1653   1652   1653   1653    101 0x4a004000 df650b60 iiimd
R   1672      1   1631   1631    101 0x4a004000 e0e78658 clock-applet
R   1670      1   1631   1631    101 0x4a004000 e0e79148 gnome-netstatus-
R   1687   1670   1631   1631      0 0x5a006000 df652140 gnome-netstatus-
R   1668      1   1631   1631    101 0x4a004000 e0e79c38 osstat
R   1666      1   1631   1631    101 0x4a004000 df650070 notification-are
R   1664      1   1631   1631    101 0x4a004000 df654210 mixer_applet2
R   1642      1   1556   1556    101 0x4a004000 d26b7648 gvfsd-trash
R   1637      1   1631   1631    101 0x4a004000 d26b9718 trashapplet
R   1635      1   1631   1631    101 0x4a004000 e124f060 wnck-applet
R   1631      1   1631   1631    101 0x4a004000 e1251130 bonobo-activatio
R   1627      1   1556   1556    101 0x4a004000 da4d66c8 gvfs-hal-volume-
R   1620      1   1620   1620    101 0x42000000 e048ab30 gnome-settings-d
R   1623      1   1556   1556    101 0x4a004000 e125d1f8 gvfsd
R   1619      1   1528   1528    101 0x42000000 dd3d5be0 gnome-keyring-da
R   1612      1   1556   1556    101 0x4a004000 e125b128 gconfd-2
R   1555      1   1528   1528    101 0x42000000 e04841e8 dbus-launch
R   1556      1   1556   1556    101 0x42000000 dd3c9b20 dbus-daemon
R   1490      1   1487   1487     50 0x42000000 dd3cbbf0 dbus-launch
R   1449      1   1447   1447      0 0x5a004000 e048a040 gdm-binary
R   1451   1449   1447   1447      0 0x4a004000 dd3cf608 gdm-simple-slave
R   1519   1451   1447   1447      0 0x5a004000 e048fb28 gdm-session-work
R   1528   1519   1528   1528    101 0x4a004000 e0491bf8 gnome-session
R   1648   1528   1528   1528    101 0x4a004000 df653720 nwam-manager
R   1646   1528   1528   1528    101 0x5a016000 d26b6068 xscreensaver
R   1644   1528   1528   1528    101 0x4a004000 e124fb50 updatemanagernot
R   1643   1528   1528   1528    101 0x4a004000 d26b8138 isapython2.6
R   1633   1528   1528   1528    101 0x4a004000 e1250640 desktop-print-ma
R   1640   1633   1528   1528    101 0x4a004000 d26b8c28 isapython2.6
R   1632   1528   1528   1528    101 0x4a004000 e1251c20 gnome-power-mana
R   1629   1528   1528   1528    101 0x4a004000 e0e68b40 avant-window-nav
R   1628   1528   1528   1528    101 0x4a004000 e1252710 nautilus
R   1625   1528   1528   1528    101 0x4a004000 e0490618 gnome-panel
R   1624   1528   1528   1528    101 0x4a004000 dd3c9030 metacity
R   1599   1528   1599   1599    101 0x42000000 e0480b38 gpg-agent
R   1598   1528   1598   1598    101 0x42000000 e048f038 ssh-agent
R   1452   1451   1452   1452    101 0x5a004000 e0e6c1f0 Xorg
R    961      1    961    961      0 0x42000000 e125a638 fmd
R   1047      1   1035   1035      0 0x42020000 e0e6a120 rad
R   1044      1   1038   1038      0 0x4a004000 e048b620 intrd
R    705      1    705    705      0 0x42000000 e1259058 smbd
R    997      1    552    552     90 0x4a004000 e0e68050 postgres
R   1178    997   1178   1178     90 0x42000000 e04836f8 postgres
R   1177    997   1177   1177     90 0x42000000 da4d45f8 postgres
R   1176    997   1176   1176     90 0x42000000 e0491108 postgres
R   1175    997   1175   1175     90 0x42000000 e1253200 postgres
R    965      1    965    965      0 0x52010000 e1259b48 sendmail
R    928      1    928    928     25 0x52010000 e0481628 sendmail
R    906      1    905    905      0 0x42000000 e125c708 sshd
R    753      1    706    706      0 0x42000000 e125bc18 smbiod-svc
R    686      1    686    686      0 0x42000000 e0e6b700 syslogd
R    638      1    638    638      1 0x42000000 e0e69630 idmapd
R    622      1    622    622      0 0x42000000 e0480048 inetd
R    628      1    628    628      0 0x42000000 e048d6f0 utmpd
R    597      1    568    568     52 0x4a014000 e0482c08 coherence
R    601      1    601    601      0 0x42000000 e048cc00 automountd
R    602    601    601    601      0 0x42000000 da4d3018 automountd
R    590      1    590    590      1 0x42000000 e04926e8 rpcbind
R    587      1    539    539     70 0x42014000 e048e1e0 mysqld_safe
R    933    587    539    539     70 0x4a004000 dd3ce028 mysqld
R    574      1    574    574      0 0x42000000 dd3ceb18 in.ndpd
R    560      1    559    559      0 0x42000000 dd3d4600 rmvolmgr
R    525      1    523    523      0 0x42000000 dd3ca610 console-kit-daem
R    534      1    534    534      0 0x42010000 e04931d8 cron
R    494      1    494    494      0 0x42000000 da4d71b8 hald
R    495    494    494    494      0 0x4a004000 da4d5bd8 hald-runner
R   4032    495    494    494      0 0x4a004000 dd3d50f0 hald-addon-stora
R    499    495    494    494      0 0x4a004000 dd3cc6e0 hald-addon-acpi
R    498    495    494    494      0 0x4a004000 d19075e8 hald-addon-cpufr
R    496    495    494    494      0 0x4a004000 dd3d3b10 hald-addon-netwo
R    349      1    349    349      0 0x4a004000 dd3d66d0 cupsd
R    451      1    451    451      0 0x42000000 d4d945f0 nscd
R    341      1    341    341      0 0x42000000 dd3d71c0 devfsadm
R    302      1    302    302      0 0x42000000 dd3d0be8 picld
R    292      1    292    292      0 0x42000000 dd3d16d8 dbus-daemon
R    198      1    198    198      0 0x42000000 dd3d00f8 syseventd
R    274      1    273    273      0 0x42000000 d4d966c0 ntpd
R    266      1    266    266      0 0x42000000 dd3d3020 powerd
R    203      1    203    203      0 0x42000000 dd3cd1d0 zonestatd
R    147      1    145    145      0 0x42000000 da4d50e8 pfexecd
R    122      1    122    122      1 0x42000000 d4d93010 kcfd
R     99      1     98     98      0 0x42020000 da4d3b08 dhcpagent
R     78      1     77     77      0 0x42000000 d4d93b00 nwamd
R     48      1     47     47     17 0x42020000 d4d95bd0 netcfgd
R     45      1     45     45     16 0x42000000 d4d971b0 ipmgmtd
R     43      1     43     43     15 0x52000000 d4d950e0 dlmgmtd
R     11      1     11     11      0 0x42000000 d1906008 svc.configd
R      9      1      9      9      0 0x42000000 d1906af8 svc.startd
R    647      9    647    647      0 0x4a004000 e048c110 ttymon
R    636      9      9      9      0 0x4a004000 e0e6ac10 pkg.depotd
R    605      9    605    605      0 0x4a014000 e0482118 sac
R    693    605    605    605      0 0x4a014000 dd3cb100 ttymon
R      5      0      0      0      0 0x00020001 d190a1a8 zpool-rpool

History

#1

Updated by Richard PALO over 8 years ago

another crash (I wasn't even there, was out in the garden)

# mdb -k 1
Loading modules: [ unix genunix specfs dtrace mac cpu.generic uppc pcplusmp scsi_vhci zfs ip hook neti sockfs arp usba fctl stmf stmf_sbd lofs random smbsrv nfs fcip ufs logindmux ptm sppp ipc ]
> $c
vpanic(fe8efe8c, 7afe3067, 0, dd5d82b0, 306, 0)
hat_pte_unmap+0x1fc(dd5d82b0, 306, 10, 7afe3067, 0, 0)
hat_unload_callback+0x159(d5b42cc0, bf300000, 100000, 10, 0, 0)
segvn_unmap+0x197(d4d49f08, bf300000, 100000, fe81c382)
as_free+0x119(e13ea3d8, d5074720, d628ae28, fe970f0e)
relvm+0xc7()
proc_exit+0x50d(2, b, d5074720, df70b880)
exit+0x11(2, b, 0, fe9f194e)
psig+0x5bd()
post_syscall+0x3cf(0, e691bb80, fe800cc7, 3)
syscall_exit+0x47(e691bb80, 0, e691bb80)
sys_call+0x176()
> ::panicinfo
             cpu        0
          thread e691bb80
         message no page_t, not NOCONSIST: old_pte=0x7afe3067 ht=dd5d82b0 entry=0x306 pte_ptr=0
              gs fec401b0
              fs fec40000
              es fec40160
              ds fec40160
             edi        0
             esi        0
             ebp d628ac08
             esp d628abec
             ebx 7afe3067
             edx fc000038
             ecx e691bb80
             eax d628ac14
          trapno        0
             err        0
             eip fe859a80
              cs fec40158
          eflags      282
            uesp        0
              ss fec40160
             gdt fe7fe00002cf
             idt fe7fd00007ff
             ldt        0
            task      150
             cr0 8005003b
             cr2 ce30a1b0
             cr3  31b1000
             cr4      6d8
> 

#2

Updated by Julian Wiesener over 8 years ago

  • Status changed from New to Feedback
  • Assignee set to Julian Wiesener

Random panics are most likely caused by bad memory (ECC less memory will not show up as broken in fmadm). Please run am memtest.

#3

Updated by Richard PALO over 8 years ago

Ran memtest86+ and Windows Memory Diagnostic from UBCD 5.0.3
no problems indicated.

#4

Updated by Julian Wiesener over 8 years ago

  • Tags changed from needs-triage to panic

seems there are problems with some specific hardware, i got similar reports. However, so far we didn't got a reproducible testcase. I assumme that there is an driver that corrupts kmem. Did the problem persist on your system? If so, try to compare ::msgbuf from different crash dumps. Plaese also try to run in 32bit mode and see if the problem persists.

#5

Updated by Julian Wiesener about 8 years ago

  • Status changed from Feedback to Closed
  • Assignee deleted (Julian Wiesener)

still not enogh information to get an quallified bug report from it.

#6

Updated by Denis Kozadaev over 2 years ago

> ::panicinfo
             cpu                2
          thread ffffff32ee847b40
         message hment_remove() missing in hash table pp=ffffff0033b17360, ht=ffffff0d66f92a40,entry=0xbe hash index=0x120e
             rdi fffffffffb92f6b8
             rsi ffffff004575a960
             rdx ffffff0d66f92a40
             rcx               be
              r8             120e
              r9    ffffffffff000
             rax ffffff004575a980
             rbx ffffff0033b17360
             rbp ffffff004575a9c0
             r10                1
             r11         ffffffff
             r12 ffffff0d66f92a40
             r13               be
             r14             1070
             r15            2d230
          fsbase                0
          gsbase ffffff0d10b20a80
              ds               4b
              es               4b
              fs                0
              gs              1c3
          trapno                0
             err                0
             rip fffffffffb861e60
              cs               30
          rflags              286
             rsp ffffff004575a958
              ss               38
          gdt_hi                0
          gdt_lo         a00001ef
          idt_hi                0
          idt_lo         90000fff
             ldt                0
            task               70
             cr0         80050033     
             cr2         fee5fb00
             cr3          c000000
             cr4              6f8
> $C
ffffff004575a9c0 vpanic()
ffffff004575aa80 0xfffffffffb823842()
ffffff004575ab10 hat_pte_unmap+0x159(ffffff0d66f92a40, be, 10, 6e2d4b025, 0, 0)
ffffff004575ac80 hat_unload_callback+0xeb(ffffff0d83f3b070, 8050000, acf000, 10, ffffff004575acf0)
ffffff004575ad60 segvn_unmap+0x5bf(ffffff0d50d60980, 8050000, acf000)
ffffff004575adc0 as_free+0xc7(ffffff337e670750)
ffffff004575adf0 relvm+0x220()
ffffff004575ae80 proc_exit+0x464(1, 0)
ffffff004575aea0 exit+0x15(1, 0)
ffffff004575aec0 rexit+0x18(0)
ffffff004575af10 sys_syscall32+0xff()
> 

The dump is available here: http://witch.tambov.ru/illumos/vmdump.0
for about 3 GB.

Also available in: Atom PDF