From owner-freebsd-current  Tue May 16 14:33:18 1995
Return-Path: current-owner
Received: (from majordom@localhost)
          by freefall.cdrom.com (8.6.10/8.6.6) id OAA21817
          for current-outgoing; Tue, 16 May 1995 14:33:18 -0700
Received: from alpha.xerox.com (alpha.Xerox.COM [13.1.64.93])
          by freefall.cdrom.com (8.6.10/8.6.6) with SMTP id OAA21803
          for <current@freebsd.org>; Tue, 16 May 1995 14:33:16 -0700
Received: from crevenia.parc.xerox.com ([13.2.116.11]) by alpha.xerox.com with SMTP id <14406(2)>; Tue, 16 May 1995 14:32:37 PDT
Received: by crevenia.parc.xerox.com id <49859>; Tue, 16 May 1995 14:32:32 -0700
From: Bill Fenner <fenner@parc.xerox.com>
To: current@FreeBSD.org
Subject: "savecore" causes panic
Message-Id: <95May16.143232pdt.49859@crevenia.parc.xerox.com>
Date: Tue, 16 May 1995 14:32:26 PDT
Sender: current-owner@FreeBSD.org
Precedence: bulk

I have an old '486 with 32 megs of memory and a new AHA1542FC, running
SNAP-950412.  I panicked and dumped core and wanted to check out the
core dump.  There are two devices on the SCSI bus:

aha0 is a 154xCF-2.01-VE.0: enabling mailbox and residuals
aha0: reading board settings, dma=5 int=11  (bus speed defaulted)
aha0 at 0x330-0x333 irq 11 drq 5 on isa
(aha0:0:0): "QUANTUM P105S 910-10-94x A.3" is a type 0 fixed SCSI 1
sd0(aha0:0:0): Direct-Access 100MB (205075 512 byte sectors)
(aha0:1:0): "CDC 94171-9 0045" is a type 0 fixed SCSI 1
sd1(aha0:1:0): Direct-Access 312MB (640584 512 byte sectors)


Swap (aka dump) was on sd0b, I was trying to savecore to /home/fenner, which
is on sd1f.

The first time I tried, I got a few messages like

May 16 13:51:08 baobab /kernel: aha0: DMA beyond end Of ISA
May 16 13:51:09 baobab /kernel: sd1: oops not queued
May 16 13:51:09 baobab /kernel: biodone: buffer already done
May 16 13:51:10 baobab /kernel: aha0: DMA beyond end Of ISA
May 16 13:51:11 baobab /kernel: sd1: oops not queued
May 16 13:51:11 baobab /kernel: biodone: buffer already done

and presumably panicked, although since I have ddb configured and was
running X, I couldn't tell.  The second time, I ran fron the console,
and didn't get any of the DMA errors, but did get:

panic: vm_bounce_page_free: invalid bounce buffer

(manually copied traceback follows)
_vm_bounce_page_free(37f000,1) at _vm_bounce_page_free+0x50
_vm_bounce_free(f26d0b50) at _vm_bounce_free+0xa0
_biodone(f26d0b50,f0a22000,f08b0980,1,f0a22000) at _biodone+0x7f
_scsi_done()
_aha_done()
_ahaintr()

I would offer to provide a core file, but that might be difficult =)

Any suggestions?  (Hopefully it won't swap before I get this core file off
of there.. mebbe I should just debug with the core file in swap space...)

Note that I can "dd if=/dev/sd0b of=/home/fenner/corefile" just fine, but
savecore very quickly causes this panic.

  Bill