From owner-freebsd-stable@FreeBSD.ORG Thu Dec 19 17:27:56 2013 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 24F27DED for ; Thu, 19 Dec 2013 17:27:56 +0000 (UTC) Received: from nm36-vm6.bullet.mail.bf1.yahoo.com (nm36-vm6.bullet.mail.bf1.yahoo.com [72.30.238.142]) by mx1.freebsd.org (Postfix) with SMTP id B33B41588 for ; Thu, 19 Dec 2013 17:27:55 +0000 (UTC) Received: from [98.139.212.149] by nm36.bullet.mail.bf1.yahoo.com with NNFMP; 19 Dec 2013 17:25:21 -0000 Received: from [98.139.211.192] by tm6.bullet.mail.bf1.yahoo.com with NNFMP; 19 Dec 2013 17:25:21 -0000 Received: from [127.0.0.1] by smtp201.mail.bf1.yahoo.com with NNFMP; 19 Dec 2013 17:25:21 -0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1387473921; bh=xumPYLHtv6RunJzA236O1IY/wQM2yTdSXuxvqwnnNQY=; h=X-Yahoo-Newman-Id:X-Yahoo-Newman-Property:X-YMail-OSG:X-Yahoo-SMTP:X-Rocket-Received:Subject:From:Reply-To:To:Cc:In-Reply-To:References:Content-Type:Date:Message-ID:Mime-Version:X-Mailer:Content-Transfer-Encoding; b=bFB5eT3QALmhyqYJ7OatUjqnQNQrgG9quxxn0Shqof0RcnzAwp4aG7yD0AYdwuehhPils6rskGurObu+vDP1CMYLhnRshrbX5C3jqf4LTr2oaWpMRo3qRJUoK6L6K2XwHOGS4FToxNO9odeZApk6OCxLF4I/cfJWwhRaZexTO4Y= X-Yahoo-Newman-Id: 926998.96550.bm@smtp201.mail.bf1.yahoo.com X-Yahoo-Newman-Property: ymail-3 X-YMail-OSG: znPS3qYVM1kcDay60zSNUXsDSyAVBj.xTPR9E5vngSLi8xw o5Z.Goqyuf1g_NNkuEpenB3beq.q5BJWoUHvvucx6C1bv3pNCbTR51u8BN8i h3Cdc5HDI2Cboci7e8FVPU3xWz5eKKwPmQ9PfJPC9S0tt8E0Vk4IXFPwV1s3 cz7IHntuSHiJHk.aPrU8n2mm0jY4hp_dOUWxu7OJqGTLeQRLaQRJjFVwtwRs t8iAxQWk9VL9P_KTRbp4UgwxWP7xVCbAW08x9IQ6O5XAi76DWTxbPb6QjLYH 0JMfEQkpQTIcCsvHnws6xglixc8Awzruk4XYsIYo69PuNRTB7vw.XEFZjdSh 27XVtyCaZS1UOqgXJ5vKg5ugtXRDtMxQp7.uLMVl7y1B3TSW7pbfocPSRbYG ehBilmNbFcoD2KhQs2Q7HQJV_LECQIUzulfXqzgJx.Ejm3eh5sPOSfnGbQl9 LRcPtx8r_IPuTQNeci7HU7goLPmNZuWIegVvYW6NR_13dyPWZc54i8Iwfu4v KVBcU.sH_D0Avt0YiEZ.tRg9A5V1zySqcfpwe3tg921X3MPnjRLHaMI9QoR_ bCfFcaVf_U.QRfavzxCClgFQqQC8E6iBiVtVj_vDiyD.ezKAV4dmwwI29Ovn iFer7K41qcbTNGONMlUnzQc7.uG4l.dDr_nJ63aj4rg-- X-Yahoo-SMTP: u5BKR6OswBC_iZJVfGRoMkTIpc8pEA4- X-Rocket-Received: from [10.73.160.242] (sean_bruno@209.131.62.116 with plain [98.139.211.125]) by smtp201.mail.bf1.yahoo.com with SMTP; 19 Dec 2013 09:25:21 -0800 PST Subject: Re: 10.0 BETA 3 with redports kernel panic From: Sean Bruno To: Konstantin Belousov In-Reply-To: <1387285472.2372.2.camel@powernoodle.corp.yahoo.com> References: <1384029731.1819.7.camel@powernoodle.corp.yahoo.com> <20131109205030.GF59496@kib.kiev.ua> <1387217065.1407.3.camel@powernoodle.corp.yahoo.com> <1387219558.1407.6.camel@powernoodle.corp.yahoo.com> <20131217120019.GD59496@kib.kiev.ua> <1387285472.2372.2.camel@powernoodle.corp.yahoo.com> Content-Type: text/plain; charset="us-ascii" Date: Thu, 19 Dec 2013 09:25:15 -0800 Message-ID: <1387473915.2494.0.camel@powernoodle.corp.yahoo.com> Mime-Version: 1.0 X-Mailer: Evolution 2.32.1 FreeBSD GNOME Team Port Content-Transfer-Encoding: 7bit Cc: "freebsd-stable@freebsd.org" X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list Reply-To: sbruno@freebsd.org List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 19 Dec 2013 17:27:56 -0000 On Tue, 2013-12-17 at 05:04 -0800, Sean Bruno wrote: > On Tue, 2013-12-17 at 14:00 +0200, Konstantin Belousov wrote: > > On Mon, Dec 16, 2013 at 10:45:58AM -0800, Sean Bruno wrote: > > > On Mon, 2013-12-16 at 10:04 -0800, Sean Bruno wrote: > > > > > What is the source line for memrw+0x195 ? > > > > > > > > My apologies for the delay on this. Its been frustrating getting a > > > > crashdump on these machines due to their very large tmpfs usage. > > > > Currently, I am dumping a crash of 13+GB to a third HD that we had > > > > installed for this purpose. > > > > > > > > The machines are still running RC3 of 10.0r. > > > > > > > > I will attempt to get the requested information shortly. > > > > > > > > sean > > > > > > > > > > > > > > I've updated http://people.freebsd.org/~sbruno/redbuild_panic.txt > > > > > > It looks like its dying in uiomove() ? > > > > I believe I already posted the following patch, with no feedback. > > > > diff --git a/sys/amd64/amd64/mem.c b/sys/amd64/amd64/mem.c > > index abbbb21..e371499 100644 > > --- a/sys/amd64/amd64/mem.c > > +++ b/sys/amd64/amd64/mem.c > > @@ -98,7 +98,11 @@ memrw(struct cdev *dev, struct uio *uio, int flags) > > kmemphys: > > o = v & PAGE_MASK; > > c = min(uio->uio_resid, (u_int)(PAGE_SIZE - o)); > > - error = uiomove((void *)PHYS_TO_DMAP(v), (int)c, uio); > > + v = PHYS_TO_DMAP(v); > > + if (v < DMAP_MIN_ADDRESS || v >= DMAP_MAX_ADDRESS || > > + pmap_kextract(v) == 0) > > + return (EFAULT); > > + error = uiomove((void *)v, (int)c, uio); > > continue; > > } > > else if (dev2unit(dev) == CDEV_MINOR_KMEM) { > > Will begin testing immediately > > sean Huh ... both machines panic'd this morning. It'll take 30 minutes or so to get a crash dump, but it looks like its still in the same place. db> whe Tracing pid 489 tid 101801 td 0xfffff80322946490 kdb_enter() at kdb_enter+0x3e/frame 0xfffffe1839d26220 panic() at panic+0x175/frame 0xfffffe1839d262a0 vm_fault_hold() at vm_fault_hold+0x14ed/frame 0xfffffe1839d26500 vm_fault() at vm_fault+0x77/frame 0xfffffe1839d26540 trap_pfault() at trap_pfault+0x19b/frame 0xfffffe1839d265f0 trap() at trap+0x5e6/frame 0xfffffe1839d26810 calltrap() at calltrap+0x8/frame 0xfffffe1839d26810 --- trap 0xc, rip = 0xffffffff80cae47b, rsp = 0xfffffe1839d268d0, rbp = 0xfffffe1839d26920 --- copyout() at copyout+0x3b/frame 0xfffffe1839d26920 memrw() at memrw+0x1b6/frame 0xfffffe1839d26960 giant_read() at giant_read+0x7a/frame 0xfffffe1839d269a0 devfs_read_f() at devfs_read_f+0xea/frame 0xfffffe1839d26a00 dofileread() at dofileread+0x7b/frame 0xfffffe1839d26a40 kern_readv() at kern_readv+0x65/frame 0xfffffe1839d26a90 sys_read() at sys_read+0x63/frame 0xfffffe1839d26ae0 amd64_syscall() at amd64_syscall+0x357/frame 0xfffffe1839d26bf0 Xfast_syscall() at Xfast_syscall+0xfb/frame 0xfffffe1839d26bf0 --- syscall (3, FreeBSD ELF64, sys_read), rip = 0x800b750aa, rsp = 0x7fffffffd068, rbp = 0x7fffffffd0b0 --- db> call doadump