From owner-freebsd-bugs Fri Aug 9 23:59:12 2002 Delivered-To: freebsd-bugs@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 6247837B400; Fri, 9 Aug 2002 23:59:09 -0700 (PDT) Received: from wantadilla.lemis.com (wantadilla.lemis.com [192.109.197.80]) by mx1.FreeBSD.org (Postfix) with ESMTP id 0206A43E42; Fri, 9 Aug 2002 23:59:07 -0700 (PDT) (envelope-from grog@lemis.com) Received: by wantadilla.lemis.com (Postfix, from userid 1004) id 602868123B; Sat, 10 Aug 2002 16:29:04 +0930 (CST) Date: Sat, 10 Aug 2002 16:29:04 +0930 From: Greg 'groggy' Lehey To: Jens Schweikhardt Cc: freebsd-bugs@FreeBSD.org Subject: Re: kern/27985: Recent -STABLE crashes when accessing dc device Message-ID: <20020810065904.GL88093@wantadilla.lemis.com> References: <200208091938.g79JcqV7056943@freefall.freebsd.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <200208091938.g79JcqV7056943@freefall.freebsd.org> User-Agent: Mutt/1.3.99i Organization: The FreeBSD Project Phone: +61-8-8388-8286 Fax: +61-8-8388-8725 Mobile: +61-418-838-708 WWW-Home-Page: http://www.FreeBSD.org/ X-PGP-Fingerprint: 9A1B 8202 BCCE B846 F92F 09AC 22E6 F290 507A 4223 Sender: owner-freebsd-bugs@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Friday, 9 August 2002 at 12:38:52 -0700, Jens Schweikhardt wrote: > Synopsis: Recent -STABLE crashes when accessing dc device > > State-Changed-From-To: open->feedback > State-Changed-By: schweikh > State-Changed-When: Fri Aug 9 12:37:24 PDT 2002 > State-Changed-Why: > Greg, does this still happen with a recent -stable? > > http://www.freebsd.org/cgi/query-pr.cgi?pr=27985 Yes. I've just built a new world with sources from this morning, along with a GENERIC kernel, and it still happens: (kgdb) bt #0 dumpsys () at ../../kern/kern_shutdown.c:487 #1 0xc01e8e1b in boot (howto=256) at ../../kern/kern_shutdown.c:316 #2 0xc01e9240 in poweroff_wait (junk=0xc03c660c, howto=-1069784785) at ../../kern/kern_shutdown.c:595 #3 0xc03582ce in trap_fatal (frame=0xc8f3ed4c, eva=8) at ../../i386/i386/trap.c:974 #4 0xc0357fa1 in trap_pfault (frame=0xc8f3ed4c, usermode=0, eva=8) at ../../i386/i386/trap.c:867 #5 0xc0357b5f in trap (frame={tf_fs = -923598832, tf_es = -1071644656, tf_ds = -1069285360, tf_edi = -1057323008, tf_esi = -1057323072, tf_ebp = -923538024, tf_isp = -923538056, tf_ebx = 0, tf_edx = 54272, tf_ecx = 2051, tf_eax = -1068628408, tf_trapno = 12, tf_err = 0, tf_eip = -1068628393, tf_cs = 8, tf_eflags = 66182, tf_esp = -1057323072, tf_ss = -1057323008}) at ../../i386/i386/trap.c:466 #6 0xc04e0657 in ?? () #7 0xc01a87a9 in mii_pollstat (mii=0xc0fa8800) at ../../dev/mii/mii.c:328 #8 0xc02d5682 in xl_ifmedia_sts (ifp=0xc0fac000, ifmr=0xc8f3eea8) at ../../pci/if_xl.c:2767 #9 0xc022f449 in ifmedia_ioctl (ifp=0xc0fac000, ifr=0xc8f3eea8, ifm=0xc0fa8800, cmd=3223873848) at ../../net/if_media.c:281 #10 0xc02d58f7 in xl_ioctl (ifp=0xc0fac000, command=3223873848, data=0xc8f3eea8 "xl0") at ../../pci/if_xl.c:2845 #11 0xc022c23a in ifioctl (so=0xc851a400, cmd=3223873848, data=0xc8f3eea8 "xl0", p=0xc7f1c380) at ../../net/if.c:1136 #12 0xc01fb20e in soo_ioctl (fp=0xc10e9b40, cmd=3223873848, data=0xc8f3eea8 "xl0", p=0xc7f1c380) at ../../kern/sys_socket.c:143 #13 0xc01f825e in ioctl (p=0xc7f1c380, uap=0xc8f3ef80) at ../../sys/file.h:177 #14 0xc035857d in syscall2 (frame={tf_fs = 47, tf_es = 47, tf_ds = 47, tf_edi = -1077940452, tf_esi = 134682084, tf_ebp = -1077940452, tf_isp = -923537452, tf_ebx = -1077940492, tf_edx = 0, tf_ecx = -1077940476, tf_eax = 54, tf_trapno = 12, tf_err = 2, tf_eip = 134536524, tf_cs = 31, tf_eflags = 663, tf_esp = -1077940560, tf_ss = 47}) at ../../i386/i386/trap.c:1175 #15 0xc0349685 in Xint0x80_syscall () #16 0x8049780 in ?? () #17 0x80487c5 in ?? () #18 0x8048135 in ?? () (kgdb) f 7 #7 0xc01a87a9 in mii_pollstat (mii=0xc0fa8800) at ../../dev/mii/mii.c:328 328 (void) (*child->mii_service)(child, mii, MII_POLLSTAT); (kgdb) p *child Cannot access memory at address 0x67049a. (kgdb) p *mii $3 = { mii_media = { ifm_mask = 0xc0fa9300, ifm_media = 0x0, ifm_cur = 0xc0fa881c, ifm_list = { lh_first = 0x18 }, ifm_change = 0, ifm_status = 0xc04e0648 }, mii_ifp = 0xc0fa8800, mii_phys = { lh_first = 0x0 }, mii_instance = 0x1, mii_media_status = 0x6, mii_media_active = 0x0, mii_readreg = 0, mii_writereg = 0, mii_statchg = 0 } The 0 in mii->mii_phys->lh_first looks suspicious, but I don't have time to track it down. Greg -- See complete headers for address and phone numbers To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-bugs" in the body of the message