From owner-freebsd-current@FreeBSD.ORG Thu Nov 10 16:41:07 2005 Return-Path: X-Original-To: current@freebsd.org Delivered-To: freebsd-current@FreeBSD.ORG Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 7BDEE16A41F for ; Thu, 10 Nov 2005 16:41:07 +0000 (GMT) (envelope-from mcsi@mcsi.pp.ru) Received: from portpc-design.spb.ru (portpc-design.spb.ru [81.176.64.110]) by mx1.FreeBSD.org (Postfix) with ESMTP id BE3A843D48 for ; Thu, 10 Nov 2005 16:41:06 +0000 (GMT) (envelope-from mcsi@mcsi.pp.ru) Received: from [85.140.139.77] (ppp85-140-139-77.pppoe.mtu-net.ru [85.140.139.77]) (authenticated bits=0) by portpc-design.spb.ru (8.13.5/8.13.5) with ESMTP id jAAGf21H042322 for ; Thu, 10 Nov 2005 19:41:02 +0300 (MSK) (envelope-from mcsi@mcsi.pp.ru) Message-ID: <43737817.8030300@mcsi.pp.ru> Date: Thu, 10 Nov 2005 19:40:55 +0300 From: Maxim Maximov User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.7.12) Gecko/20051109 X-Accept-Language: ru, en-us, en MIME-Version: 1.0 To: current@freebsd.org Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit X-Virus-Scanned: ClamAV version 0.87.1, clamav-milter version 0.87 on 81.176.64.226 X-Virus-Status: Clean Cc: Subject: CURRENT panics sometimes X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 Nov 2005 16:41:07 -0000 Hi. 1 boot of 3 I got similar panics in softclock(). kernel trap 12 with interrupts disabled Fatal trap 12: page fault while in kernel mode cpuid = 0; apic id = 00 fault virtual address = 0x218 fault code = supervisor read, page not present instruction pointer = 0x20:0xc06aa6ae stack pointer = 0x28:0xd4710cac frame pointer = 0x28:0xd4710cd4 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, def32 1, gran 1 processor eflags = resume, IOPL = 0 current process = 13 (swi4: clock sio) The trace is: softclock(0) ... +0x86 ithread_execute_handlers ithread_loop fork_exit form_trampoline softclock+0x86 is here (marked with an arrow) /* * softticks may be modified by hard clock, so cache * it while we work on a given bucket. */ curticks = softticks; bucket = &callwheel[curticks & callwheelmask]; c = TAILQ_FIRST(bucket); while (c) { depth++; ---> if (c->c_time != curticks) { c = TAILQ_NEXT(c, c_links.tqe); ++steps; Debugging shows that 'c' has the value of 0x210. Which is incorrect for sure. 'c_time' has an offset of 0x8, giving us fault virtual address. I'm using NDIS. It seems, that panic happens on first packet NDIS tries to send. This is when 'ntpdate' is being run at boot stage. As I said, I can reproduce it by rebooting a few times. Can anyone give a clue where to look in DDB further to help to resolve this problem? -- Maxim Maximov