From owner-freebsd-current@FreeBSD.ORG Sat Feb 14 14:30:59 2004 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 8C3CF16A4CE; Sat, 14 Feb 2004 14:30:59 -0800 (PST) Received: from troutmask.apl.washington.edu (troutmask.apl.washington.edu [128.208.78.105]) by mx1.FreeBSD.org (Postfix) with ESMTP id 76CE843D1F; Sat, 14 Feb 2004 14:30:59 -0800 (PST) (envelope-from sgk@troutmask.apl.washington.edu) Received: from troutmask.apl.washington.edu (localhost [127.0.0.1]) i1EMUuTA051046; Sat, 14 Feb 2004 14:30:56 -0800 (PST) (envelope-from sgk@troutmask.apl.washington.edu) Received: (from sgk@localhost)i1EMUt28051045; Sat, 14 Feb 2004 14:30:55 -0800 (PST) (envelope-from sgk) Date: Sat, 14 Feb 2004 14:30:55 -0800 From: Steve Kargl To: "Simon L. Nielsen" Message-ID: <20040214223055.GA50966@troutmask.apl.washington.edu> References: <20040214192736.C23696@news1.macomnet.ru> <20040214203557.GE888@arthur.nitro.dk> <402E874D.8080909@DeepCore.dk> <20040214204918.GF888@arthur.nitro.dk> <402E8A19.70808@DeepCore.dk> <20040214214411.GA726@arthur.nitro.dk> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20040214214411.GA726@arthur.nitro.dk> User-Agent: Mutt/1.4.1i cc: current@freebsd.org cc: S?ren Schmidt cc: sos@freebsd.org Subject: Re: Sony V505BX ATA panic X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 14 Feb 2004 22:30:59 -0000 On Sat, Feb 14, 2004 at 10:44:13PM +0100, Simon L. Nielsen wrote: > acd0: Medium: CD-R 120mm data disc > Memory modified after free 0xc4667200(508) val=1000100 @ 0xc4667200 > > > Fatal trap 12: page fault while in kernel mode > fault virtual address = 0x1000120 > fault code = supervisor read, page not present > instruction pointer = 0x8:0xc06627c2 > stack pointer = 0x10:0xc0c21ba4 > frame pointer = 0x10:0xc0c21bc0 > code segment = base 0x0, limit 0xfffff, type 0x1b > = DPL 0, pres 1, def32 1, gran 1 > processor eflags = interrupt enabled, resume, IOPL = 0 > current process = 0 (swapper) > kernel: type 12 trap, code=0 > Stopped at mtrash_ctor+0x3a: movl 0x20(%eax),%eax > db> trace > mtrash_ctor(c4667200,200,0) at mtrash_ctor+0x3a I reported a similar crash several days ago. http://lists.freebsd.org/pipermail/freebsd-current/2004-February/020580.html My backtrace is different, I get the same "Memory modified after free" message and a mtrash_ctor panic. I've tracked the problem down to (see thread): Via trial and error, I have determined that the above panic is caused by ACPI and ATAng. This is a Dell 4150 laptop. I can build a working kernel with sources checked out via cvsup with date=2004.01.30.19.00.00. If I use a date of 2004.01.30.20.00.00, I retrieve only revision 1.203 of ata-all.c and revision 1.19 of ata-queue.c. No other files are changed in sys/ and the resulting kernel produces the above panic. Finally, if I set hint.acpi.0.disabled="1" in /boot/loader.conf. The kernel that previously panicked will boot fine. -- Steve