From owner-freebsd-current@FreeBSD.ORG Fri Jul 4 18:04:37 2003 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id CA2ED37B401; Fri, 4 Jul 2003 18:04:37 -0700 (PDT) Received: from obsecurity.dyndns.org (adsl-64-169-104-32.dsl.lsan03.pacbell.net [64.169.104.32]) by mx1.FreeBSD.org (Postfix) with ESMTP id 9C9BD43F3F; Fri, 4 Jul 2003 18:04:36 -0700 (PDT) (envelope-from kris@obsecurity.org) Received: from rot13.obsecurity.org (rot13.obsecurity.org [10.0.0.5]) by obsecurity.dyndns.org (Postfix) with ESMTP id EA41866CFA; Fri, 4 Jul 2003 18:04:31 -0700 (PDT) Received: by rot13.obsecurity.org (Postfix, from userid 1000) id 7BC01B4D; Fri, 4 Jul 2003 18:04:31 -0700 (PDT) Date: Fri, 4 Jul 2003 18:04:31 -0700 From: Kris Kennaway To: John Baldwin Message-ID: <20030705010431.GA1813@rot13.obsecurity.org> References: <20030703004550.GA83661@rot13.obsecurity.org> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="ReaqsoxgOBHFXBhH" Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.4.1i cc: smp@FreeBSD.org cc: current@FreeBSD.org cc: Kris Kennaway Subject: Re: Panic at boot time on SMP X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 05 Jul 2003 01:04:38 -0000 --ReaqsoxgOBHFXBhH Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Thu, Jul 03, 2003 at 10:34:34AM -0400, John Baldwin wrote: > > Fatal trap 12: page fault while in kernel mode > > cpuid =3D 0; lapic.id =3D 01000000 > > fault virtual address =3D 0xdf119fec > > fault code =3D supervisor write, page not present > > instruction pointer =3D 0x8:0xc030b254 > > stack pointer =3D 0x10:0xc0467b48 > > frame pointer =3D 0x10:0xc0467b48 > > code segment =3D base 0x0, limit 0xfffff, type 0x1b > > =3D DPL 0, pres 1, def32 1, gran 1 > > processor eflags =3D interrupt enabled, resume, IOPL =3D 0 > > current process =3D 0 (swapper) > > kernel: type 12 trap, code=3D0 > > Stopped at cpu_thread_setup+0x24: movl $0,0x24c(%ecx) > > db> trace > > cpu_thread_setup(c21ab000,0,c033b1d4,be,0) at cpu_thread_setup+0x24 >=20 > void > cpu_thread_setup(struct thread *td) > { >=20 > td->td_pcb =3D > (struct pcb *)(td->td_kstack + KSTACK_PAGES * PAGE_SIZE) - 1; > td->td_frame =3D (struct trapframe *)((caddr_t)td->td_pcb - 16) -= 1; > td->td_pcb->pcb_ext =3D NULL;=20 > } >=20 > On my laptop, cpu_thread_setup+0x24 is the line that sets td->td_pcb->pcb= _ext > to NULL. It would seem that td_pcb is hosered. You could perhaps add > some printf's to dump the value of td_kstack and make sure it is a sane > value? td->td_kstack =3D 0xdf112000 Kris --ReaqsoxgOBHFXBhH Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.2 (FreeBSD) iD8DBQE/BiQeWry0BWjoQKURAtPyAKDKUUpaqZAiPRUKFV0BGYqJtjjC/QCg+n3D uenY+9KXCOXeGCaZd4OZ6AQ= =x1bI -----END PGP SIGNATURE----- --ReaqsoxgOBHFXBhH--