From owner-freebsd-current@FreeBSD.ORG Mon Nov 1 22:18:19 2004 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 7AF0016A4D4 for ; Mon, 1 Nov 2004 22:18:19 +0000 (GMT) Received: from mail5.speakeasy.net (mail5.speakeasy.net [216.254.0.205]) by mx1.FreeBSD.org (Postfix) with ESMTP id 0E8D243D39 for ; Mon, 1 Nov 2004 22:18:19 +0000 (GMT) (envelope-from jhb@FreeBSD.org) Received: (qmail 13672 invoked from network); 1 Nov 2004 22:18:18 -0000 Received: from dsl027-160-063.atl1.dsl.speakeasy.net (HELO server.baldwin.cx) ([216.27.160.63]) (envelope-sender ) encrypted SMTP for ; 1 Nov 2004 22:18:18 -0000 Received: from [10.50.41.235] (gw1.twc.weather.com [216.133.140.1]) (authenticated bits=0) by server.baldwin.cx (8.12.11/8.12.11) with ESMTP id iA1MIBOB062933; Mon, 1 Nov 2004 17:18:14 -0500 (EST) (envelope-from jhb@FreeBSD.org) From: John Baldwin To: freebsd-current@FreeBSD.org Date: Mon, 1 Nov 2004 17:38:47 -0500 User-Agent: KMail/1.6.2 References: <20041031.164710.55654061.imp@bsdimp.com> In-Reply-To: <20041031.164710.55654061.imp@bsdimp.com> MIME-Version: 1.0 Content-Disposition: inline Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <200411011738.47830.jhb@FreeBSD.org> X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on server.baldwin.cx cc: current@FreeBSD.org cc: "M. Warner Losh" Subject: Re: Panic on boot on my Samsung Sens Pro 500 X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 01 Nov 2004 22:18:19 -0000 On Sunday 31 October 2004 06:47 pm, M. Warner Losh wrote: > # This is RELENG_5 > > GDB: no debug ports present > KDB: debugger backends: ddb > KDB: current backend: ddb > SMAP type=01 base=0000000000000000 len=000000000009fc00 > SMAP type=02 base=000000000009fc00 len=0000000000000400 > SMAP type=02 base=00000000000e77e2 len=00000000000071d0 > SMAP type=02 base=00000000000f20a8 len=000000000000df58 > SMAP type=01 base=0000000000100000 len=0000000001700000 > SMAP type=02 base=00000000ffff20a8 len=000000000000df58 > Copyright (c) 1992-2004 The FreeBSD Project. > Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 > The Regents of the University of California. All rights reserved. > FreeBSD 5.3-STABLE #1: Sun Oct 31 14:42:40 MST 2004 > > imp@paco-paco.village.org:/paco/imp/FreeBSD/5x/src/sys/i386/compile/GENERIC > kernel trap 12 with interrupts disabled > > > Fatal trap 12: page fault while in kernel mode > fault virtual address = 0x1c > fault code = supervisor read, page not present > instruction pointer = 0x8:0xc0761974 > stack pointer = 0x10:0xc0c21ba4 > frame pointer = 0x10:0xc0c21c70 > code segment = base 0x0, limit 0xfffff, type 0x1b > = DPL 0, pres 1, def32 1, gran 1 > processor eflags = interrupt enabled, resume, IOPL = 0 > current process = 0 () > [thread 0] > Stopped at vm_fault+0x1b0: cmpxchgl %ecx,0x1c(%edx) > db> trace > vm_fault(c103a000,c0f75000,1,0,c08dc560) at vm_fault+0x1b0 > trap_pfault(c0c21cd8,0,c0f750f4) at trap_pfault+0x19f > trap(18,10,10,c1044420,c1045780) at trap+0x315 > calltrap() at calltrap+0x5 > --- trap 0xc, eip = 0xc0f750f4, esp = 0xc0c21d18, ebp = 0xc0c21d44 --- > end(c1044420,102,c0843640,c08b48f0,c26000) at 0xc0f750f4 > uma_prealloc(c1044420,800,c0c21d84,c07655e4,c10b3000) at uma_prealloc+0x64 > pmap_init(c10b3000,fffff000,c10b3000,c0c21d98,c05eb4c2) at pmap_init+0x67 > vm_mem_init(0,c1ec00,c1e000,0,c043fb65) at vm_mem_init+0x38 > mi_startup() at mi_startup+0x96 > begin() at begin+0x2c > db> > > uma_prealloc + 100 (0x64) looks like: > > 0xc077733a : push %edi > 0xc077733b : call 0xc0774c78 > 0xc0777340 : mov %eax,%ecx > > 0xc0f750f4 is outside of the text area (so I suspect that our stalk > walker is a little hozed :-(. Also of interest is that I couldn't > boot on the video console, but had to boot over serial to even get > this far. > > This seems to correspond to: > while (slabs > 0) { > --> slab = slab_zalloc(zone, M_WAITOK); > LIST_INSERT_HEAD(&keg->uk_free_slab, slab, us_link); > slabs--; > > } > > But without more specific information about the zalloc, it is hard to > know what to do. The crash is 100% repeatable. > > Same kernel boots fine on my Dell Inspiron 3000, so it can't be the > kernel being corrupt. The same disk boots before and after on the > i3k (the disk was cloned from the i3k disk...) > > Ideas? I have similar problems on my ultra60 with any kernels other than GENERIC. I have no idea, but this leads me to believe it is a bug in MI code somewhere. -- John Baldwin <>< http://www.FreeBSD.org/~jhb/ "Power Users Use the Power to Serve" = http://www.FreeBSD.org