From nobody@FreeBSD.org  Mon Aug 26 13:35:46 2002
Return-Path: <nobody@FreeBSD.org>
Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 6699037B400
	for <freebsd-gnats-submit@FreeBSD.org>; Mon, 26 Aug 2002 13:35:46 -0700 (PDT)
Received: from www.freebsd.org (www.FreeBSD.org [216.136.204.117])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 2872B43E42
	for <freebsd-gnats-submit@FreeBSD.org>; Mon, 26 Aug 2002 13:35:46 -0700 (PDT)
	(envelope-from nobody@FreeBSD.org)
Received: from www.freebsd.org (localhost [127.0.0.1])
	by www.freebsd.org (8.12.4/8.12.4) with ESMTP id g7QKZeOT057706
	for <freebsd-gnats-submit@FreeBSD.org>; Mon, 26 Aug 2002 13:35:40 -0700 (PDT)
	(envelope-from nobody@www.freebsd.org)
Received: (from nobody@localhost)
	by www.freebsd.org (8.12.4/8.12.4/Submit) id g7QKZewY057704;
	Mon, 26 Aug 2002 13:35:40 -0700 (PDT)
Message-Id: <200208262035.g7QKZewY057704@www.freebsd.org>
Date: Mon, 26 Aug 2002 13:35:40 -0700 (PDT)
From: Arnvid Karstad <arnvid@karstad.org>
To: freebsd-gnats-submit@FreeBSD.org
Subject: System crashes with 
X-Send-Pr-Version: www-1.0

>Number:         42046
>Category:       i386
>Synopsis:       System crashes with
>Confidential:   no
>Severity:       critical
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Mon Aug 26 13:40:05 PDT 2002
>Closed-Date:    Wed Jul 14 22:46:50 GMT 2004
>Last-Modified:  Wed Jul 14 22:46:50 GMT 2004
>Originator:     Arnvid Karstad
>Release:        RELENG_4_6
>Organization:
ISD - Norway
>Environment:
FreeBSD 4.6.2 (RELENG_4_6) upgraded from local cvsup-mirror sync'ed the 23rd of August 2002. Now down graded to RELENG_4 (FreeBSD 4.6-STABLE)
>Description:
We were testing FreeBSD 4.6.2 on one of our sandbox machines that was
previously running FBSD4.5. After the cvs and additional make's the
machine now seems to be at tad unstable..

When disk i/o start to run of.. for instance during find / -name *~ it
just dumps out one nice error msg like this: 

Fatal trap 12: page fault while in kernel mode
fault virtual address 	= 0x0
fault code     		= supervisor write, page not present
instruction pointer code = 0x8:0xc0215293
stack pointer		= 0x10:0xfef98c40
frame pointer		= 0x10:0xfef98c74
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, def32 1, gran 1
processor enabled	= interupt enabled, resume, IOPL = 0
current proccess	= 142 (cvs)
interupt mask		= bio
trap number		= 12
panic: Page fault

syncing disk....... lotsa numbers.. then rebooots

I've tested the ram and disks extensively with IBM diagnostics tool, and
didn't find anythig wrong there. (It's an IBM xSeries 342 server btw)

>How-To-Repeat:
cd /usr/ports/security/tripwire && make install (during configuration and file search/hash creation)
or 
find / -name *~
>Fix:
Downgrade to RELENG_4 :(

>Release-Note:
>Audit-Trail:

From: Giorgos Keramidas <keramida@FreeBSD.org>
To: Arnvid Karstad <arnvid@karstad.org>
Cc: bug-followup@FreeBSD.org
Subject: Re: i386/42046: System crashes with
Date: Tue, 27 Aug 2002 00:29:38 +0300

 On 2002-08-26 13:35 +0000, Arnvid Karstad wrote:
 > When disk i/o start to run of.. for instance during find / -name *~
 > it just dumps out one nice error msg like this:
 
 Can you try and build a kernel with debugging symbols in it, and
 obtain a crash dump?

From: Arnvid Karstad <arnvid@karstad.org>
To: Giorgos Keramidas <keramida@FreeBSD.org>
Cc: bug-followup@FreeBSD.org
Subject: Re: i386/42046: System crashes
Date: Tue, 27 Aug 2002 01:16:40 +0200

 On Tue, 27 Aug 2002 00:44:13 +0300 - Giorgos Keramidas <keramida@FreeBSD.org> wrote:
 
 > Not really.  A crash dump and a kernel stack trace when the problem
 > shows its ugly teeth is usually very helpful in tracking the bug.
 
 > Please reply to this message with the crash dump, keeping the same
 > Subject line, and Cc: it to bug-followup@FreeBSD.org when you have
 > one.  Oh, and thanks for a quick reply...
 
 I have to thank you for the quick reply really ;)
 
 My kernel allready had the DEBUG=-g so I added the options DDB. And
 prepared the system. 
 
 after a few mins with find / -name *~ and ls -laR it crashed again..
 
 the dbd said.. "Stopped at generic_bzero+0xf repe stosl  %es  (%edi)
 
 the trace showed before the generic_bzero .. ffs_vget and ufs_lookup..
 
 I wasn't too sure about what to do there so I accidently wrote next..
 which was a bad thing.. :(
 
 
 
 
 Mvh/Best regards,
 
 Arnvid L. Karstad
 
 

From: Arnvid Karstad <arnvid@karstad.org>
To: Giorgos Keramidas <keramida@FreeBSD.org>
Cc: bug-followup@FreeBSD.org
Subject: Re: i386/42046: System crashes
Date: Tue, 27 Aug 2002 01:37:18 +0200

 Heh,
 
 panic worked...
 
 oot@irc:/home/crash# gdb -k kernel.0 vmcore.0     =20
 GNU gdb 4.18 (FreeBSD)
 Copyright 1998 Free Software Foundation, Inc.
 GDB is free software, covered by the GNU General Public License, and you ar=
 e
 welcome to change it and/or distribute copies of it under certain condition=
 s.
 Type "show copying" to see the conditions.
 There is absolutely no warranty for GDB.  Type "show warranty" for details.
 This GDB was configured as "i386-unknown-freebsd"...(no debugging symbols f=
 ound)...
 IdlePTD at phsyical address 0x00315000
 initial pcb at physical address 0x0028a000
 panicstr: from debugger
 panic messages:
 ---
 Fatal trap 12: page fault while in kernel mode
 fault virtual address   =3D 0x0
 fault code              =3D supervisor write, page not present
 instruction pointer     =3D 0x8:0xc021c207
 stack pointer           =3D 0x10:0xff3f6c7c
 frame pointer           =3D 0x10:0xff3f6cb0
 code segment            =3D base 0x0, limit 0xfffff, type 0x1b
                         =3D DPL 0, pres 1, def32 1, gran 1
 processor eflags        =3D interrupt enabled, resume, IOPL =3D 0
 current process         =3D 138 (find)
 interrupt mask          =3D bio=20
 panic: from debugger
 panic: from debugger
 Uptime: 6m28s
 
 dumping to dev #da/0x20001, offset 2590568
 dump 1279 1278 1277 1276 1275 1274 1273 1272 1271 1270 1269 1268 1267 1266 =
 1265 1264 1263 1262 1261 1260 1259 1258 1257 1256 1255 1254 1253 1252 1251 =
 1250 1249 1248 1247 1246 1245 1244 1243 1242 1241 1240 1239 1238 1237 1236 =
 1235 1234 1233 1232 1231 1230 1229 1228 1227 1226 1225 1224 1223 1222 1221 =
 1220 1219 1218 1217 1216 1215 1214 1213 1212 1211 1210 1209 1208 1207 1206 =
 1205 1204 1203 1202 1201 1200 1199 1198 1197 1196 1195 1194 1193 1192 1191 =
 1190 1189 1188 1187 1186 1185 1184 1183 1182 1181 1180 1179 1178 1177 1176 =
 1175 1174 1173 1172 1171 1170 1169 1168 1167 1166 1165 1164 1163 1162 1161 =
 1160 1159 1158 1157 1156 1155 1154 1153 1152 1151 1150 1149 1148 1147 1146 =
 1145 1144 1143 1142 1141 1140 1139 1138 1137 1136 1135 1134 1133 1132 1131 =
 1130 1129 1128 1127 1126 1125 1124 1123 1122 1121 1120 1119 1118 1117 1116 =
 1115 1114 1113 1112 1111 1110 1109 1108 1107 1106 1105 1104 1103 1102 1101 =
 1100 1099 1098 1097 1096 1095 1094 1093 1092 1091 1090 1089 1088 1087 1086 =
 1085 1084 1083 1082 1081 1080 1079 1078 1077 1076 1075 1074 1073 1072 1071 =
 1070 1069 1068 1067 1066 1065 1064 1063 1062 1061 1060 1059 1058 1057 1056 =
 1055 1054 1053 1052 1051 1050 1049 1048 1047 1046 1045 1044 1043 1042 1041 =
 1040 1039 1038 1037 1036 1035 1034 1033 1032 1031 1030 1029 1028 1027 1026 =
 1025 1024 1023 1022 1021 1020 1019 1018 1017 1016 1015 1014 1013 1012 1011 =
 1010 1009 1008 1007 1006 1005 1004 1003 1002 1001 1000 999 998 997 996 995 =
 994 993 992 991 990 989 988 987 986 985 984 983 982 981 980 979 978 977 976=
  975 974 973 972 971 970 969 968 967 966 965 964 963 962 961 960 959 958 95=
 7 956 955 954 953 952 951 950 949 948 947 946 945 944 943 942 941 940 939 9=
 38 937 936 935 934 933 932 931 930 929 928 927 926 925 924 923 922 921 920 =
 919 918 917 916 915 914 913 912 911 910 909 908 907 906 905 904 903 902 901=
  900 899 898 897 896 895 894 893 892 891 890 889 888 887 886 885 884 883 88=
 2 881 880 879 878 877 876 875 874 873 872 871 870 869 868 867 866 865 864 8=
 63 862 861 860 859 858 857 856 855 854 853 852 851 850 849 848 847 846 845 =
 844 843 842 841 840 839 838 837 836 835 834 833 832 831 830 829 828 827 826=
  825 824 823 822 821 820 819 818 817 816 815 814 813 812 811 810 809 808 80=
 7 806 805 804 803 802 801 800 799 798 797 796 795 794 793 792 791 790 789 7=
 88 787 786 785 784 783 782 781 780 779 778 777 776 775 774 773 772 771 770 =
 769 768 767 766 765 764 763 762 761 760 759 758 757 756 755 754 753 752 751=
  750 749 748 747 746 745 744 743 742 741 740 739 738 737 736 735 734 733 73=
 2 731 730 729 728 727 726 725 724 723 722 721 720 719 718 717 716 715 714 7=
 13 712 711 710 709 708 707 706 705 704 703 702 701 700 699 698 697 696 695 =
 694 693 692 691 690 689 688 687 686 685 684 683 682 681 680 679 678 677 676=
  675 674 673 672 671 670 669 668 667 666 665 664 663 662 661 660 659 658 65=
 7 656 655 654 653 652 651 650 649 648 647 646 645 644 643 642 641 640 639 6=
 38 637 636 635 634 633 632 631 630 629 628 627 626 625 624 623 622 621 620 =
 619 618 617 616 615 614 613 612 611 610 609 608 607 606 605 604 603 602 601=
  600 599 598 597 596 595 594 593 592 591 590 589 588 587 586 585 584 583 58=
 2 581 580 579 578 577 576 575 574 573 572 571 570 569 568 567 566 565 564 5=
 63 562 561 560 559 558 557 556 555 554 553 552 551 550 549 548 547 546 545 =
 544 543 542 541 540 539 538 537 536 535 534 533 532 531 530 529 528 527 526=
  525 524 523 522 521 520 519 518 517 516 515 514 513 512 511 510 509 508 50=
 7 506 505 504 503 502 501 500 499 498 497 496 495 494 493 492 491 490 489 4=
 88 487 486 485 484 483 482 481 480 479 478 477 476 475 474 473 472 471 470 =
 469 468 467 466 465 464 463 462 461 460 459 458 457 456 455 454 453 452 451=
  450 449 448 447 446 445 444 443 442 441 440 439 438 437 436 435 434 433 43=
 2 431 430 429 428 427 426 425 424 423 422 421 420 419 418 417 416 415 414 4=
 13 412 411 410 409 408 407 406 405 404 403 402 401 400 399 398 397 396 395 =
 394 393 392 391 390 389 388 387 386 385 384 383 382 381 380 379 378 377 376=
  375 374 373 372 371 370 369 368 367 366 365 364 363 362 361 360 359 358 35=
 7 356 355 354 353 352 351 350 349 348 347 346 345 344 343 342 341 340 339 3=
 38 337 336 335 334 333 332 331 330 329 328 327 326 325 324 323 322 321 320 =
 319 318 317 316 315 314 313 312 311 310 309 308 307 306 305 304 303 302 301=
  300 299 298 297 296 295 294 293 292 291 290 289 288 287 286 285 284 283 28=
 2 281 280 279 278 277 276 275 274 273 272 271 270 269 268 267 266 265 264 2=
 63 262 261 260 259 258 257 256 255 254 253 252 251 250 249 248 247 246 245 =
 244 243 242 241 240 239 238 237 236 235 234 233 232 231 230 229 228 227 226=
  225 224 223 222 221 220 219 218 217 216 215 214 213 212 211 210 209 208 20=
 7 206 205 204 203 202 201 200 199 198 197 196 195 194 193 192 191 190 189 1=
 88 187 186 185 184 183 182 181 180 179 178 177 176 175 174 173 172 171 170 =
 169 168 167 166 165 164 163 162 161 160 159 158 157 156 155 154 153 152 151=
  150 149 148 147 146 145 144 143 142 141 140 139 138 137 136 135 134 133 13=
 2 131 130 129 128 127 126 125 124 123 122 121 120 119 118 117 116 115 114 1=
 13 112 111 110 109 108 107 106 105 104 103 102 101 100 99 98 97 96 95 94 93=
  92 91 90 89 88 87 86 85 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70 69 68=
  67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43=
  42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18=
  17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0=20
 ---
 #0  0xc015cca2 in dumpsys ()
 (kgdb)=20
 
 #0  0xc015cca2 in dumpsys ()
 (kgdb) where
 #0  0xc015cca2 in dumpsys ()
 #1  0xc015ca6c in boot ()
 #2  0xc015ceb9 in panic ()
 #3  0xc012ea65 in db_panic ()
 #4  0xc012ea03 in db_command ()
 #5  0xc012eaca in db_command_loop ()
 #6  0xc0130c9b in db_trap ()
 #7  0xc0210378 in kdb_trap ()
 #8  0xc021d700 in trap_fatal ()
 #9  0xc021d3c1 in trap_pfault ()
 #10 0xc021cf53 in trap ()
 #11 0xc021c207 in generic_bzero ()
 #12 0xc01e1534 in ffs_vget ()
 #13 0xc01e42d7 in ufs_lookup ()
 #14 0xc01e8c2d in ufs_vnoperate ()
 #15 0xc018637e in vfs_cache_lookup ()
 #16 0xc01e8c2d in ufs_vnoperate ()
 #17 0xc018935d in lookup ()
 #18 0xc0188e48 in namei ()
 #19 0xc018ec19 in stat ()
 #20 0xc021d99d in syscall2 ()
 #21 0xc0211285 in Xint0x80_syscall ()
 #22 0x280a1178 in ?? ()
 #23 0x280a0d5a in ?? ()
 #24 0x80496e6 in ?? ()
 #25 0x804b5ec in ?? ()
 #26 0x8049395 in ?? ()
 (kgdb)=20
 (kgdb) up 11
 #11 0xc021c207 in generic_bzero ()
 
 uhm now what? ;)
 
 
 Mvh/Best regards,
 
 Arnvid L. Karstad
 
 

From: Arnvid Karstad <arnvid@karstad.org>
To: Giorgos Keramidas <keramida@FreeBSD.org>
Cc: bug-followup@FreeBSD.org
Subject: Re: i386/42046: System crashes
Date: Tue, 27 Aug 2002 10:24:05 +0200

 root@irc:/home/crash# gdb -k kernel.debug  vmcore.1 =20
 GNU gdb 4.18 (FreeBSD)
 Copyright 1998 Free Software Foundation, Inc.
 GDB is free software, covered by the GNU General Public License, and you ar=
 e
 welcome to change it and/or distribute copies of it under certain condition=
 s.
 Type "show copying" to see the conditions.
 There is absolutely no warranty for GDB.  Type "show warranty" for details.
 This GDB was configured as "i386-unknown-freebsd"...
 IdlePTD at phsyical address 0x00315000
 initial pcb at physical address 0x0028a000
 panicstr: from debugger
 panic messages:
 ---
 Fatal trap 12: page fault while in kernel mode
 fault virtual address   =3D 0x0
 fault code              =3D supervisor write, page not present
 instruction pointer     =3D 0x8:0xc021c207
 stack pointer           =3D 0x10:0xff01ac7c
 frame pointer           =3D 0x10:0xff01acb0
 code segment            =3D base 0x0, limit 0xfffff, type 0x1b
                         =3D DPL 0, pres 1, def32 1, gran 1
 processor eflags        =3D interrupt enabled, resume, IOPL =3D 0
 current process         =3D 348 (find)
 interrupt mask          =3D bio=20
 panic: from debugger
 panic: from debugger
 Uptime: 8h31m50s
 
 dumping to dev #da/0x20001, offset 2590568
 dump 1279 1278 1277 1276 1275 1274 1273 1272 1271 1270 1269 1268 1267 1266 =
 1265 1264 1263 1262 1261 1260 1259 1258 1257 1256 1255 1254 1253 1252 1251 =
 1250 1249 1248 1247 1246 1245 1244 1243 1242 1241 1240 1239 1238 1237 1236 =
 1235 1234 1233 1232 1231 1230 1229 1228 1227 1226 1225 1224 1223 1222 1221 =
 1220 1219 1218 1217 1216 1215 1214 1213 1212 1211 1210 1209 1208 1207 1206 =
 1205 1204 1203 1202 1201 1200 1199 1198 1197 1196 1195 1194 1193 1192 1191 =
 1190 1189 1188 1187 1186 1185 1184 1183 1182 1181 1180 1179 1178 1177 1176 =
 1175 1174 1173 1172 1171 1170 1169 1168 1167 1166 1165 1164 1163 1162 1161 =
 1160 1159 1158 1157 1156 1155 1154 1153 1152 1151 1150 1149 1148 1147 1146 =
 1145 1144 1143 1142 1141 1140 1139 1138 1137 1136 1135 1134 1133 1132 1131 =
 1130 1129 1128 1127 1126 1125 1124 1123 1122 1121 1120 1119 1118 1117 1116 =
 1115 1114 1113 1112 1111 1110 1109 1108 1107 1106 1105 1104 1103 1102 1101 =
 1100 1099 1098 1097 1096 1095 1094 1093 1092 1091 1090 1089 1088 1087 1086 =
 1085 1084 1083 1082 1081 1080 1079 1078 1077 1076 1075 1074 1073 1072 1071 =
 1070 1069 1068 1067 1066 1065 1064 1063 1062 1061 1060 1059 1058 1057 1056 =
 1055 1054 1053 1052 1051 1050 1049 1048 1047 1046 1045 1044 1043 1042 1041 =
 1040 1039 1038 1037 1036 1035 1034 1033 1032 1031 1030 1029 1028 1027 1026 =
 1025 1024 1023 1022 1021 1020 1019 1018 1017 1016 1015 1014 1013 1012 1011 =
 1010 1009 1008 1007 1006 1005 1004 1003 1002 1001 1000 999 998 997 996 995 =
 994 993 992 991 990 989 988 987 986 985 984 983 982 981 980 979 978 977 976=
  975 974 973 972 971 970 969 968 967 966 965 964 963 962 961 960 959 958 95=
 7 956 955 954 953 952 951 950 949 948 947 946 945 944 943 942 941 940 939 9=
 38 937 936 935 934 933 932 931 930 929 928 927 926 925 924 923 922 921 920 =
 919 918 917 916 915 914 913 912 911 910 909 908 907 906 905 904 903 902 901=
  900 899 898 897 896 895 894 893 892 891 890 889 888 887 886 885 884 883 88=
 2 881 880 879 878 877 876 875 874 873 872 871 870 869 868 867 866 865 864 8=
 63 862 861 860 859 858 857 856 855 854 853 852 851 850 849 848 847 846 845 =
 844 843 842 841 840 839 838 837 836 835 834 833 832 831 830 829 828 827 826=
  825 824 823 822 821 820 819 818 817 816 815 814 813 812 811 810 809 808 80=
 7 806 805 804 803 802 801 800 799 798 797 796 795 794 793 792 791 790 789 7=
 88 787 786 785 784 783 782 781 780 779 778 777 776 775 774 773 772 771 770 =
 769 768 767 766 765 764 763 762 761 760 759 758 757 756 755 754 753 752 751=
  750 749 748 747 746 745 744 743 742 741 740 739 738 737 736 735 734 733 73=
 2 731 730 729 728 727 726 725 724 723 722 721 720 719 718 717 716 715 714 7=
 13 712 711 710 709 708 707 706 705 704 703 702 701 700 699 698 697 696 695 =
 694 693 692 691 690 689 688 687 686 685 684 683 682 681 680 679 678 677 676=
  675 674 673 672 671 670 669 668 667 666 665 664 663 662 661 660 659 658 65=
 7 656 655 654 653 652 651 650 649 648 647 646 645 644 643 642 641 640 639 6=
 38 637 636 635 634 633 632 631 630 629 628 627 626 625 624 623 622 621 620 =
 619 618 617 616 615 614 613 612 611 610 609 608 607 606 605 604 603 602 601=
  600 599 598 597 596 595 594 593 592 591 590 589 588 587 586 585 584 583 58=
 2 581 580 579 578 577 576 575 574 573 572 571 570 569 568 567 566 565 564 5=
 63 562 561 560 559 558 557 556 555 554 553 552 551 550 549 548 547 546 545 =
 544 543 542 541 540 539 538 537 536 535 534 533 532 531 530 529 528 527 526=
  525 524 523 522 521 520 519 518 517 516 515 514 513 512 511 510 509 508 50=
 7 506 505 504 503 502 501 500 499 498 497 496 495 494 493 492 491 490 489 4=
 88 487 486 485 484 483 482 481 480 479 478 477 476 475 474 473 472 471 470 =
 469 468 467 466 465 464 463 462 461 460 459 458 457 456 455 454 453 452 451=
  450 449 448 447 446 445 444 443 442 441 440 439 438 437 436 435 434 433 43=
 2 431 430 429 428 427 426 425 424 423 422 421 420 419 418 417 416 415 414 4=
 13 412 411 410 409 408 407 406 405 404 403 402 401 400 399 398 397 396 395 =
 394 393 392 391 390 389 388 387 386 385 384 383 382 381 380 379 378 377 376=
  375 374 373 372 371 370 369 368 367 366 365 364 363 362 361 360 359 358 35=
 7 356 355 354 353 352 351 350 349 348 347 346 345 344 343 342 341 340 339 3=
 38 337 336 335 334 333 332 331 330 329 328 327 326 325 324 323 322 321 320 =
 319 318 317 316 315 314 313 312 311 310 309 308 307 306 305 304 303 302 301=
  300 299 298 297 296 295 294 293 292 291 290 289 288 287 286 285 284 283 28=
 2 281 280 279 278 277 276 275 274 273 272 271 270 269 268 267 266 265 264 2=
 63 262 261 260 259 258 257 256 255 254 253 252 251 250 249 248 247 246 245 =
 244 243 242 241 240 239 238 237 236 235 234 233 232 231 230 229 228 227 226=
  225 224 223 222 221 220 219 218 217 216 215 214 213 212 211 210 209 208 20=
 7 206 205 204 203 202 201 200 199 198 197 196 195 194 193 192 191 190 189 1=
 88 187 186 185 184 183 182 181 180 179 178 177 176 175 174 173 172 171 170 =
 169 168 167 166 165 164 163 162 161 160 159 158 157 156 155 154 153 152 151=
  150 149 148 147 146 145 144 143 142 141 140 139 138 137 136 135 134 133 13=
 2 131 130 129 128 127 126 125 124 123 122 121 120 119 118 117 116 115 114 1=
 13 112 111 110 109 108 107 106 105 104 103 102 101 100 99 98 97 96 95 94 93=
  92 91 90 89 88 87 86 85 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70 69 68=
  67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43=
  42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18=
  17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0=20
 ---
 #0  dumpsys () at /usr/src/sys/kern/kern_shutdown.c:487
 487             if (dumping++) {
 (kgdb) where
 #0  dumpsys () at /usr/src/sys/kern/kern_shutdown.c:487
 #1  0xc015ca6c in boot (howto=3D260) at /usr/src/sys/kern/kern_shutdown.c:3=
 16
 #2  0xc015ceb9 in panic (fmt=3D0xc0236da4 "from debugger") at /usr/src/sys/=
 kern/kern_shutdown.c:595
 #3  0xc012ea65 in db_panic (addr=3D-1071529465, have_addr=3D0, count=3D-1, =
 modif=3D0xff01aae8 "") at /usr/src/sys/ddb/db_command.c:435
 #4  0xc012ea03 in db_command (last_cmdp=3D0xc0269b98, cmd_table=3D0xc02699d=
 8, aux_cmd_tablep=3D0xc0285578)
     at /usr/src/sys/ddb/db_command.c:333
 #5  0xc012eaca in db_command_loop () at /usr/src/sys/ddb/db_command.c:457
 #6  0xc0130c9b in db_trap (type=3D12, code=3D0) at /usr/src/sys/ddb/db_trap.=
 c:71
 #7  0xc0210378 in kdb_trap (type=3D12, code=3D0, regs=3D0xff01ac3c) at /usr=
 /src/sys/i386/i386/db_interface.c:158
 #8  0xc021d700 in trap_fatal (frame=3D0xff01ac3c, eva=3D0) at /usr/src/sys/=
 i386/i386/trap.c:961
 #9  0xc021d3c1 in trap_pfault (frame=3D0xff01ac3c, usermode=3D0, eva=3D0) a=
 t /usr/src/sys/i386/i386/trap.c:859
 #10 0xc021cf53 in trap (frame=3D{tf_fs =3D 16, tf_es =3D -637534192, tf_ds =
 =3D -221052912, tf_edi =3D 0, tf_esi =3D -619887872,=20
       tf_ebp =3D -16667472, tf_isp =3D -16667544, tf_ebx =3D 0, tf_edx =3D =
 0, tf_ecx =3D 42, tf_eax =3D 0, tf_trapno =3D 12, tf_err =3D 2,=20
       tf_eip =3D -1071529465, tf_cs =3D 8, tf_eflags =3D 66050, tf_esp =3D =
 -221036064, tf_ss =3D -1072127810})
     at /usr/src/sys/i386/i386/trap.c:458
 #11 0xc021c207 in generic_bzero ()
 #12 0xc01e1534 in ffs_vget (mp=3D0xda1bfe00, ino=3D356949, vpp=3D0xff01ad60=
 ) at /usr/src/sys/ufs/ffs/ffs_vfsops.c:1109
 #13 0xc01e42d7 in ufs_lookup (ap=3D0xff01adb8) at /usr/src/sys/ufs/ufs/ufs_=
 lookup.c:611
 #14 0xc01e8c2d in ufs_vnoperate (ap=3D0xff01adb8) at /usr/src/sys/ufs/ufs/u=
 fs_vnops.c:2422
 #15 0xc018637e in vfs_cache_lookup (ap=3D0xff01ae10) at vnode_if.h:77
 #16 0xc01e8c2d in ufs_vnoperate (ap=3D0xff01ae10) at /usr/src/sys/ufs/ufs/u=
 fs_vnops.c:2422
 #17 0xc018935d in lookup (ndp=3D0xff01ae8c) at vnode_if.h:52
 #18 0xc0188e48 in namei (ndp=3D0xff01ae8c) at /usr/src/sys/kern/vfs_lookup.=
 c:153
 #19 0xc018ecb9 in lstat (p=3D0xf2d341e0, uap=3D0xff01af80) at /usr/src/sys/=
 kern/vfs_syscalls.c:1823
 #20 0xc021d99d in syscall2 (frame=3D{tf_fs =3D 134545455, tf_es =3D 1345454=
 55, tf_ds =3D -1078001617, tf_edi =3D 134562304,=20
       tf_esi =3D 134562376, tf_ebp =3D -1077937392, tf_isp =3D -16666668, t=
 f_ebx =3D 672084388, tf_edx =3D 4, tf_ecx =3D 134562368,=20
       tf_eax =3D 190, tf_trapno =3D 12, tf_err =3D 2, tf_eip =3D 671764108,=
  tf_cs =3D 31, tf_eflags =3D 663, tf_esp =3D -1077937532, tf_ss =3D 47})
     at /usr/src/sys/i386/i386/trap.c:1167
 #21 0xc0211285 in Xint0x80_syscall ()
 #22 0x280a14dd in ?? ()
 #23 0x280a0d5a in ?? ()
 #24 0x80496e6 in ?? ()
 #25 0x804b5ec in ?? ()
 #26 0x8049395 in ?? ()
 (kgdb)=20
 (kgdb) up 11
 #11 0xc021c207 in generic_bzero ()
 (kgdb) up 1
 #12 0xc01e1534 in ffs_vget (mp=3D0xda1bfe00, ino=3D356949, vpp=3D0xff01ad60=
 ) at /usr/src/sys/ufs/ffs/ffs_vfsops.c:1109
 1109            error =3D getnewvnode(VT_UFS, mp, ffs_vnodeop_p, &vp);
 (kgdb) p &vp
 $1 =3D (struct vnode **) 0xff01acec
 (kgdb) p ffs_vnodeop_p
 $2 =3D (vop_t **) 0xd9fec000
 (kgdb) p mp
 $3 =3D (struct mount *) 0xda1bfe00
 (kgdb) p VT_UFS
 $4 =3D VT_UFS
 (kgdb)=20
 (kgdb) down 1
 #11 0xc021c207 in generic_bzero ()
 (kgdb) up 2
 #13 0xc01e42d7 in ufs_lookup (ap=3D0xff01adb8) at /usr/src/sys/ufs/ufs/ufs_=
 lookup.c:611
 611                     error =3D VFS_VGET(vdp->v_mount, dp->i_ino, &tdp);
 (kgdb) up 1
 #14 0xc01e8c2d in ufs_vnoperate (ap=3D0xff01adb8) at /usr/src/sys/ufs/ufs/u=
 fs_vnops.c:2422
 2422            return (VOCALL(ufs_vnodeop_p, ap->a_desc->vdesc_offset, ap)=
 );
 (kgdb) up 1
 #15 0xc018637e in vfs_cache_lookup (ap=3D0xff01ae10) at vnode_if.h:77
 77              rc =3D VCALL(dvp, VOFFSET(vop_cachedlookup), &a);
 (kgdb) up 1
 #16 0xc01e8c2d in ufs_vnoperate (ap=3D0xff01ae10) at /usr/src/sys/ufs/ufs/u=
 fs_vnops.c:2422
 2422            return (VOCALL(ufs_vnodeop_p, ap->a_desc->vdesc_offset, ap)=
 );
 
 
 Mvh/Best regards,
 
 Arnvid L. Karstad
 
 

From: Arnvid Karstad <arnvid@karstad.org>
To: bug-followup@FreeBSD.org
Cc:  
Subject: Re: i386/42046: System crashes
Date: Tue, 27 Aug 2002 15:44:11 +0200

 more info..
 
 uname -a:
 
 FreeBSD irc 4.6.2-RELEASE FreeBSD 4.6.2-RELEASE #2: Tue Aug 27 10:34:20 CEST 2002     root@irc:/usr/obj/usr/src/sys/ISD  i386
 
 dmesg:
 
 Copyright (c) 1992-2002 The FreeBSD Project.
 Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
         The Regents of the University of California. All rights reserved.
 FreeBSD 4.6.2-RELEASE #2: Tue Aug 27 10:34:20 CEST 2002
     root@irc.isd.no:/usr/obj/usr/src/sys/ISD
 Timecounter "i8254"  frequency 1193182 Hz
 CPU: Pentium III/Pentium III Xeon/Celeron (1258.22-MHz 686-class CPU)
   Origin = "GenuineIntel"  Id = 0x6b1  Stepping = 1
   Features=0x383fbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR,SSE>
 real memory  = 1342091264 (1310636K bytes)
 avail memory = 1301774336 (1271264K bytes)
 Preloaded elf kernel "kernel" at 0xc02f6000.
 Pentium Pro MTRR support enabled
 npx0: <math processor> on motherboard
 npx0: INT 16 interface
 pcib1: <ServerWorks host to PCI bridge> on motherboard
 pci1: <PCI bus> on pcib1
 fxp0: <Intel Pro 10/100B/100+ Ethernet> port 0x2000-0x203f mem 0xeffc0000-0xeffdffff,0xeffff000-0xefffffff irq 15 at device 7.0 on pci1
 fxp0: Ethernet address 00:02:55:47:7a:48
 inphy0: <i82555 10/100 media interface> on miibus0
 inphy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
 pcib0: <ServerWorks host to PCI bridge> on motherboard
 pci0: <PCI bus> on pcib0
 pci0: <S3 Savage 4 graphics accelerator> at 6.0
 isab0: <ServerWorks IB6566 PCI to ISA bridge> at device 15.0 on pci0
 isa0: <ISA bus> on isab0
 pci0: <Unknown PCI ATA controller> at 15.1
 pci0: <OHCI USB controller> at 15.2 irq 11
 pcib2: <ServerWorks host to PCI bridge> on motherboard
 pci2: <PCI bus> on pcib2
 ahc0: <Adaptec aic7899 Ultra160 SCSI adapter> port 0x2100-0x21ff mem 0xedfff000-0xedffffff irq 9 at device 9.0 on pci2
 aic7899: Ultra160 Wide Channel A, SCSI Id=7, 32/253 SCBs
 ahc1: <Adaptec aic7899 Ultra160 SCSI adapter> port 0x2200-0x22ff mem 0xedffe000-0xedffefff irq 10 at device 9.1 on pci2
 aic7899: Ultra160 Wide Channel B, SCSI Id=7, 32/253 SCBs
 pcib3: <ServerWorks host to PCI bridge> on motherboard
 pci3: <PCI bus> on pcib3
 orm0: <Option ROMs> at iomem 0xc0000-0xcafff,0xcb000-0xcf7ff on isa0
 fdc0: <NEC 72065B or clone> at port 0x3f0-0x3f5,0x3f7 irq 6 drq 2 on isa0
 fdc0: FIFO enabled, 8 bytes threshold
 fd0: <1440-KB 3.5" drive> on fdc0 drive 0
 atkbdc0: <Keyboard controller (i8042)> at port 0x60,0x64 on isa0
 atkbd0: <AT Keyboard> flags 0x1 irq 1 on atkbdc0
 kbd0 at atkbd0
 psm0: failed to get data.
 psm0: <PS/2 Mouse> irq 12 on atkbdc0
 psm0: model Generic PS/2 mouse, device ID 0
 vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
 sc0: <System console> at flags 0x100 on isa0
 sc0: VGA <16 virtual consoles, flags=0x300>
 sio0 at port 0x3f8-0x3ff irq 4 flags 0x10 on isa0
 sio0: type 16550A
 sio1 at port 0x2f8-0x2ff irq 3 flags 0x10 on isa0
 sio1: type 16550A
 IP packet filtering initialized, divert disabled, rule-based forwarding disabled, default to accept, logging limited to 100 packets/entry by default
 DUMMYNET initialized (011031)
 IPsec: Initialized Security Association Processing.
 Waiting 5 seconds for SCSI devices to settle
 pass1 at ahc1 bus 0 target 8 lun 0
 pass1: <IBM YGLv3 S2 0> Fixed Processor SCSI-2 device
 pass1: 3.300MB/s transfers
 da0 at ahc1 bus 0 target 0 lun 0
 da0: <IBM-ESXS ST318305LC    !# B244> Fixed Direct Access SCSI-3 device
 da0: 160.000MB/s transfers (80.000MHz, offset 63, 16bit), Tagged Queueing Enabled
 da0: 17357MB (35548320 512 byte sectors: 255H 63S/T 2212C)
 Mounting root from ufs:/dev/da0s1a
 fxp0: promiscuous mode enabled
 

From: Arnvid Karstad <arnvid@karstad.org>
To: Giorgos Keramidas <keramida@ceid.upatras.gr>
Cc: bug-followup@FreeBSD.org
Subject: Re: i386/42046: System crashes
Date: Tue, 27 Aug 2002 17:27:48 +0200

 Dunno how good this is but...
 
 adding this 
 
 options         INVARIANTS
 options         INVARIANT_SUPPORT
 
 to the kernel config fixes the problem it seems.. haven't been able to
 reproduce this with that enabled... going too try remove them again and
 put on UFS_DIRHASH instead
 
 
 
 Mvh/Best regards,
 
 Arnvid L. Karstad
 
 

From: Arnvid Karstad <arnvid@karstad.org>
To: bug-followup@FreeBSD.org
Cc:  
Subject: Re: i386/42046: System crashes
Date: Tue, 27 Aug 2002 17:41:01 +0200

 Even more info..
 
 root@irc:/home/crash#  vmstat -imsz vmcore.0 
 Memory statistics by bucket size
 Size   In Use   Free   Requests  HighWater  Couldfree
   16      474     38       1203    1280          0
   32      210    302     177931     640          0
   64   195582   6402    2659888     320        146
  128     2304   1728     202918     160        381
  256   185165   5155     985441      80        108
  512       55      9        366      40          0
   1K       84     20        478      20          8
   2K      550   2992      38092      10      22820
   4K       25      1         62       5          0
   8K        1      0         11       5          0
  16K       13      0         13       5          0
  32K        4      0          4       5          0
 256K        6      0          6       5          0
 512K        2      0          2       5          0
 
 Memory usage type by bucket size
 Size  Type(s)
   16  uc_devlist, p1003.1b, key mgmt, Ip6Fw/Ip6Acct, routetbl, ether_multi,
           vnodes, mount, pcb, soname, rman, bus, sysctloid, sysctl, kld, temp,
           devbuf, atexit, proc-args
   32  atkbddev, dirrem, mkdir, diradd, freefile, freefrag, indirdep,
           bmsafemap, newblk, in_multi, routetbl, ether_multi, ifaddr, BPF,
           vnodes, pcb, soname, taskqueue, SWAP, eventhandler, bus, sysctl,
           uidinfo, subproc, pgrp, kld, temp, devbuf, proc-args, sigio
   64  isadev, allocindir, allocdirect, pagedep, in6_multi, routetbl,
           ether_multi, ifaddr, BPF, vnodes, vfscache, pcb, rman, eventhandler,
           bus, sysctloid, subproc, session, ip6ndp, temp, devbuf, lockf,
           proc-args, file
  128  ZONE, dev_t, freeblks, inodedep, routetbl, BPF, vnodes, mount,
           vfscache, timecounter, soname, ttys, bus, uidinfo, cred, kld, ip6ndp,
           temp, devbuf, zombie, proc-args
  256  file desc, FFS node, newblk, Ip6Fw/Ip6Acct, IpFw/IpAcct, routetbl,
           stf, faith, ifaddr, vnodes, ttys, bus, subproc, temp, devbuf,
           proc-args, kqueue
  512  file desc, UFS mount, key mgmt, ifaddr, mount, BIO buffer, ptys, msg,
           ioctlops, bus, proc, ip6ndp, temp, devbuf
   1K  file desc, uc_devlist, Export Host, sem, ioctlops, bus, temp, devbuf,
           kqueue
   2K  file desc, UFS mount, ifaddr, BIO buffer, ioctlops, bus, devbuf
   4K  memdesc, UFS mount, sem, msg, ioctlops, temp, devbuf
   8K  syncache, bus
  16K  shm, msg, temp, devbuf
  32K  pagedep, BPF, devbuf
 256K  mbuf, VM pgdata, UFS ihash, inodedep, pcb
 512K  vfscache, SWAP
 
 Memory statistics by type                          Type  Kern
         Type  InUse MemUse HighUse  Limit Requests Limit Limit Size(s)
      atkbddev     2     1K      1K102400K        2    0     0  32
     file desc    43    27K     31K102400K      266    0     0  256,512,1K,2K
    uc_devlist    12     2K      2K102400K       12    0     0  16,1K
       memdesc     1     4K      4K102400K        1    0     0  4K
          mbuf     1   192K    192K102400K        1    0     0  256K
        isadev     7     1K      1K102400K        7    0     0  64
          ZONE    13     2K      2K102400K       13    0     0  128
     VM pgdata     1   256K    256K102400K        1    0     0  256K
         dev_t   655    82K     82K102400K      655    0     0  128
     UFS mount    12    26K     26K102400K       12    0     0  512,2K,4K
     UFS ihash     1   256K    256K102400K        1    0     0  256K
      FFS node185028 46257K  47542K102400K   984982    0     0  256
        dirrem     0     0K      3K102400K    39239    0     0  32
         mkdir     0     0K      1K102400K    38372    0     0  32
        diradd     0     0K      4K102400K    39318    0     0  32
      freefile     0     0K      3K102400K    38876    0     0  32
      freeblks     0     0K     11K102400K    19692    0     0  128
      freefrag     0     0K      1K102400K        3    0     0  32
    allocindir     0     0K      1K102400K        7    0     0  64
      indirdep     0     0K      1K102400K        2    0     0  32
   allocdirect     0     0K      9K102400K    19847    0     0  64
     bmsafemap     0     0K      1K102400K      385    0     0  32
        newblk     1     1K      1K102400K    19855    0     0  32,256
      inodedep     1   256K    514K102400K    58635    0     0  128,256K
       pagedep     1    32K    111K102400K    38686    0     0  64,32K
      p1003.1b     1     1K      1K102400K        1    0     0  16
      key mgmt    27    10K     11K102400K      131    0     0  16,512
 Ip6Fw/Ip6Acct     2     1K      1K102400K        2    0     0  16,256
     in6_multi     6     1K      1K102400K        6    0     0  64
      syncache     1     8K      8K102400K        1    0     0  8K
   IpFw/IpAcct     1     1K      1K102400K        1    0     0  256
   Export Host     1     1K      1K102400K        1    0     0  1K
      in_multi     2     1K      1K102400K        2    0     0  32
      routetbl    48     7K      7K102400K       72    0     0  16,32,64,128,256
           stf     1     1K      1K102400K        1    0     0  256
         faith     1     1K      1K102400K        1    0     0  256
   ether_multi    28     2K      2K102400K       28    0     0  16,32,64
        ifaddr    25     8K      8K102400K       25    0     0  32,64,256,512,2K
           BPF     8    65K     65K102400K        8    0     0  32,64,128,32K
        vnodes    17     4K      5K102400K      209    0     0  16,32,64,128,256
         mount     5     3K      3K102400K        7    0     0  16,128,512
      vfscache196164 12834K  13189K102400K  1128116    0     0  64,128,512K
    BIO buffer   529  1058K   7040K102400K    38071    0     0  512,2K
   timecounter     5     1K      1K102400K        5    0     0  128
           pcb     9   513K    513K102400K       22    0     0  16,32,64,256K
        soname     4     1K      1K102400K      146    0     0  16,32,128
          ptys     5     3K      3K102400K        5    0     0  512
          ttys   526    67K     67K102400K     1189    0     0  128,256
           shm     1    12K     12K102400K        1    0     0  16K
           sem     3     6K      6K102400K        3    0     0  1K,4K
           msg     4    25K     25K102400K        4    0     0  512,4K,16K
          rman    49     3K      3K102400K      390    0     0  16,64
      ioctlops     0     0K      4K102400K       18    0     0  512,1K,2K,4K
     taskqueue     1     1K      1K102400K        1    0     0  32
          SWAP     2  1097K   1097K102400K        2    0     0  32,512K
  eventhandler    15     1K      1K102400K       15    0     0  32,64
           bus   344    29K     29K102400K      673    0     0  16,32,64,128,256,512,1K,2K,8K
     sysctloid    10     1K      1K102400K       10    0     0  16,64
        sysctl     0     0K      1K102400K       40    0     0  16,32
       uidinfo     5     1K      1K102400K       13    0     0  32,128
          cred    19     3K      3K102400K   115737    0     0  128
       subproc    84     8K      9K102400K      425    0     0  32,64,256
          proc     2     1K      1K102400K        2    0     0  512
       session    20     2K      2K102400K       24    0     0  64
          pgrp    25     1K      1K102400K       65    0     0  32
           kld     4     1K      1K102400K       35    0     0  16,32,128
        ip6ndp     3     1K      1K102400K        4    0     0  64,128,512
          temp   142    23K     53K102400K     2154    0     0  16,32,64,128,256,512,1K,4K,16K
        devbuf   441   358K    359K102400K      984    0     0  16,32,64,128,256,512,1K,2K,4K,16K,32K
         lockf     1     1K      1K102400K        3    0     0  64
        atexit     1     1K      1K102400K        1    0     0  16
        zombie     0     0K      1K102400K      168    0     0  128
     proc-args    29     2K      2K102400K      176    0     0  16,32,64,128,256
        kqueue     8     8K      9K102400K       20    0     0  256,1K
         sigio     1     1K      1K102400K        1    0     0  32
          file    66     5K      5K102400K  1478526    0     0  64
 
 Memory Totals:  In Use    Free    Requests
                 63549K   7928K     4066415
 
 ITEM            SIZE     LIMIT    USED    FREE  REQUESTS
 
 PIPE:            160,        0,     12,     90,       78
 SWAPMETA:        160,   321118,      0,      0,        0
 unpcb:           160,        0,      6,     44,       22
 ripcb:           192,     1064,      0,     21,        1
 syncache:        160,    15359,      0,     51,        4
 tcpcb:           544,     1064,      7,      8,        7
 udpcb:           192,     1064,      2,     40,       33
 socket:          192,     1064,     15,     27,       64
 KNOTE:            64,        0,      0,    128,       12
 VNODE:           192,        0, 190175,     95,   190175
 NAMEI:          1024,        0,      0,     16,  4074012
 VMSPACE:         192,        0,     29,     35,      197
 PROC:            416,        0,     34,     64,      202
 DP fakepg:        64,        0,      0,      0,        0
 PV ENTRY:         28,   761700,  38432, 289218,    88624
 MAP ENTRY:        48,        0,    482,    241,     6112
 KMAP ENTRY:       48,    80407,    127,    171,    23662
 MAP:             108,        0,      7,      3,        7
 VM OBJECT:        96,        0, 181186,   9414,   228351
 
    519194 cpu context switches
    676074 device interrupts
    152786 software interrupts
     15526 traps
  12982048 system calls
         5 kernel threads created
       192  fork() calls
         5 vfork() calls
         0 rfork() calls
         0 swap pager pageins
         0 swap pager pages paged in
         0 swap pager pageouts
         0 swap pager pages paged out
       361 vnode pager pageins
      2491 vnode pager pages paged in
         0 vnode pager pageouts
         0 vnode pager pages paged out
         6 page daemon wakeups
     51137 pages examined by the page daemon
       252 pages reactivated
      3902 copy-on-write faults
         0 copy-on-write optimized faults
      6704 zero fill pages zeroed
      6602 zero fill pages prezeroed
         6 intransit blocking page faults
     36230 total VM faults taken
         0 pages affected by kernel thread creation
     13404 pages affected by  fork()
       291 pages affected by vfork()
         0 pages affected by rfork()
     66928 pages freed
         0 pages freed by daemon
      5593 pages freed by exiting processes
      2617 pages active
    249875 pages inactive
      9811 pages in VM cache
     53510 pages wired down
      5305 pages free
      4096 bytes per page
   5088679 total name lookups
           cache hits (75% pos + 0% neg) system 4% per-directory
           deletions 0%, falsehits 0%, toolong 0%
 interrupt                   total       rate
 fxp0 irq15                  82106         59
 ahc0 irq9                      15          0
 ahc1 irq10                 279814        203
 fdc0 irq6                       2          0
 atkbd0 irq1                     1          0
 clk irq0                   137792         99
 rtc irq8                   176387        128
 Total                      676117        490
 root@irc:/home/crash# 

From: Arnvid Karstad <arnvid@karstad.org>
To: Giorgos Keramidas <keramida@ceid.upatras.gr>
Cc: bug-followup@FreeBSD.org
Subject: Re: i386/42046: System crashes
Date: Tue, 27 Aug 2002 20:51:21 +0200

 Hello,
 
 We've now going to downgrade the system again in a few hrs time. The
 system is now too unstable to be used and we are going back down to
 RELENG_4. If anyone of the FreeBSD team needs anymore info from us
 please say so soon ;)
 
 Best regards,
 
 Arnvid Karstad

From: Arnvid Karstad <arnvid@karstad.org>
To: Giorgos Keramidas <keramida@ceid.upatras.gr>
Cc: bug-followup@FreeBSD.org
Subject: Re: i386/42046: System crashes
Date: Wed, 28 Aug 2002 12:04:46 +0200

 #7  0xc020c16c in ffs_vget (mp=0xda1ae600, ino=317611, vpp=0xff01fd58) at /usr/src/sys/ufs/ffs/ffs_vfsops.c:1109
 1109            error = getnewvnode(VT_UFS, mp, ffs_vnodeop_p, &vp);
 (kgdb) list
 1104             */
 1105            MALLOC(ip, struct inode *, sizeof(struct inode),
 1106                ump->um_malloctype, M_WAITOK);
 1107
 1108            /* Allocate a new vnode/inode. */
 1109            error = getnewvnode(VT_UFS, mp, ffs_vnodeop_p, &vp);
 1110            if (error) {
 1111                    if (ffs_inode_hash_lock < 0)
 1112                            wakeup(&ffs_inode_hash_lock);
 1113                    ffs_inode_hash_lock = 0;
 (kgdb) p &vp
 $2 = (struct vnode **) 0xff01fcec
 (kgdb) p ffs_vnodeop_p
 $3 = (vop_t **) 0xda091400
 (kgdb) p mp
 $4 = (struct mount *) 0xda1ae600
 (kgdb) p VT_UFS
 $5 = VT_UFS
 (kgdb) p error
 $6 = -613265920
 
 uhm  Why would getnewvnode actually give a negative number like that..
 
 
 Mvh/Best regards,
 
 Arnvid L. Karstad
 
 

From: Arnvid Karstad <arnvid@karstad.org>
To: Giorgos Keramidas <keramida@ceid.upatras.gr>
Cc: bug-followup@FreeBSD.org
Subject: Re: i386/42046: System crashes
Date: Wed, 28 Aug 2002 13:38:46 +0200

 n/m the last mail about error = .. it's of coz uninitialized ..
 
 But..
 
 We tested with a GENERIC compiled kernel now (just removed the unneeded
 hw options).. and it crashed even faster than before
 
 root@irc:~# more /usr/src/sys/i386/conf/ISD2
 machine         i386
 cpu             I686_CPU
 ident           ISD2
 maxusers        0
 
 #makeoptions    DEBUG=-g                #Build kernel with gdb(1) debug symbols
 
 options         INET                    #InterNETworking
 options         INET6                   #IPv6 communications protocols
 options         FFS                     #Berkeley Fast Filesystem
 options         FFS_ROOT                #FFS usable as root device [keep this!]
 options         SOFTUPDATES             #Enable FFS soft updates support
 options         UFS_DIRHASH             #Improve performance on big directories
 options         MSDOSFS                 #MSDOS Filesystem
 options         CD9660                  #ISO 9660 Filesystem
 options         CD9660_ROOT             #CD-ROM usable as root, CD9660 required
 options         PROCFS                  #Process filesystem
 options         COMPAT_43               #Compatible with BSD 4.3 [KEEP THIS!]
 options         SCSI_DELAY=5000         #Delay (in ms) before probing SCSI
 options         USERCONFIG              #boot -c editor
 options         VISUAL_USERCONFIG       #visual boot -c editor
 options         KTRACE                  #ktrace(1) support
 options         SYSVSHM                 #SYSV-style shared memory
 options         SYSVMSG                 #SYSV-style message queues
 options         SYSVSEM                 #SYSV-style semaphores
 options         P1003_1B                #Posix P1003_1B real-time extensions
 options         _KPOSIX_PRIORITY_SCHEDULING
 options         ICMP_BANDLIM            #Rate limit bad replies
 options         KBD_INSTALL_CDEV        # install a CDEV entry in /dev
 
 # To make an SMP kernel, the next two are needed
 #options        SMP                     # Symmetric MultiProcessor Kernel
 #options        APIC_IO                 # Symmetric (APIC) I/O
 
 device          isa
 device          pci
 
 device          fdc0    at isa? port IO_FD1 irq 6 drq 2
 device          fd0     at fdc0 drive 0
 
 # ATA and ATAPI devices
 device          ata0    at isa? port IO_WD1 irq 14
 device          ata1    at isa? port IO_WD2 irq 15
 device          ata
 device          atapicd                 # ATAPI CDROM drives
 device          atapifd                 # ATAPI floppy drives
 options         ATA_STATIC_ID           #Static device numbering
 
 # SCSI Controllers
 #device         ahb             # EISA AHA1742 family
 device          ahc             # AHA2940 and onboard AIC7xxx devices
 
 # SCSI peripherals
 device          scbus           # SCSI bus (required)
 device          da              # Direct Access (disks)
 device          cd              # CD
 device          pass            # Passthrough device (direct SCSI access)
 
 # RAID controllers
 device          aac             # Adaptec FSA RAID, Dell PERC2/PERC3
 device          aacp            # SCSI passthrough for aac (requires CAM)
 
 # atkbdc0 controls both the keyboard and the PS/2 mouse
 device          atkbdc0 at isa? port IO_KBD
 device          atkbd0  at atkbdc? irq 1 flags 0x1
 device          psm0    at atkbdc? irq 12
 
 device          vga0    at isa?
 
 # splash screen/screen saver
 pseudo-device   splash
 
 # syscons is the default console driver, resembling an SCO console
 device          sc0     at isa? flags 0x100
 
 # Floating point support - do not disable.
 device          npx0    at nexus? port IO_NPX irq 13
 
 # Power management support (see LINT for more options)
 device          apm0    at nexus? disable flags 0x20 # Advanced Power Management
 
 # Serial (COM) ports
 device          sio0    at isa? port IO_COM1 flags 0x10 irq 4
 device          sio1    at isa? port IO_COM2 irq 3
 
 # Parallel port
 #device         ppc0    at isa? irq 7
 #device         ppbus           # Parallel port bus (required)
 #device         lpt             # Printer
 #device         plip            # TCP/IP over parallel
 #device         ppi             # Parallel port interface device
 #device         vpo             # Requires scbus and da
 
 
 # PCI Ethernet NICs.
 device          txp             # 3Com 3cR990 (``Typhoon'')
 device          vx              # 3Com 3c590, 3c595 (``Vortex'')
 
 # PCI Ethernet NICs that use the common MII bus controller code.
 # NOTE: Be sure to keep the 'device miibus' line in order to use these NICs!
 device          miibus          # MII bus support
 device          fxp             # Intel EtherExpress PRO/100B (82557, 82558)
 device          xl              # 3Com 3c90x (``Boomerang'', ``Cyclone'')
 
 # Pseudo devices - the number indicates how many units to allocate.
 pseudo-device   loop            # Network loopback
 pseudo-device   ether           # Ethernet support
 pseudo-device   tun             # Packet tunnel.
 pseudo-device   pty             # Pseudo-ttys (telnet etc)
 pseudo-device   gif             # IPv6 and IPv4 tunneling
 pseudo-device   faith   1       # IPv6-to-IPv4 relaying (translation)
 
 # The `bpf' pseudo-device enables the Berkeley Packet Filter.
 # Be aware of the administrative consequences of enabling this!
 pseudo-device   bpf             #Berkeley packet filter
 
 root@irc:~#
 

From: Arnvid Karstad <arnvid@karstad.org>
To: Giorgos Keramidas <keramida@ceid.upatras.gr>
Cc: bug-followup@FreeBSD.org
Subject: Re: i386/42046: System crashes
Date: Wed, 28 Aug 2002 20:31:06 +0200

 ---
 Fatal trap 12: page fault while in kernel mode
 fault virtual address   = 0x18
 fault code              = supervisor write, page not present
 instruction pointer     = 0x8:0xc021d1cd
 stack pointer           = 0x10:0xfefc9c60
 frame pointer           = 0x10:0xfefc9c64
 code segment            = base 0x0, limit 0xfffff, type 0x1b
                         = DPL 0, pres 1, def32 1, gran 1
 processor eflags        = interrupt enabled, resume, IOPL = 0
 current process         = 131 (find)
 interrupt mask          = none
 trap number             = 12
 
 
 ---
 
 This kinda got a bit worse now... after a bit of testing .. it seems
 this local user doable... meaning any user being able to log in can do
 this as an denial of service attack... no user will even be logged...
 
 the crash dump from the latest test
 #0  0xc015ff86 in dumpsys ()
 #1  0xc015fd50 in boot ()
 #2  0xc016019d in panic ()
 #3  0xc0249b94 in trap_fatal ()
 #4  0xc0249829 in trap_pfault ()
 #5  0xc02493bb in trap ()
 #6  0xc021d1cd in _vm_object_allocate ()
 #7  0xc021d360 in vm_object_allocate ()
 #8  0xc0222eb1 in vnode_pager_alloc ()
 #9  0xc018bc41 in vop_stdcreatevobject ()
 #10 0xc018b8f5 in vop_defaultop ()
 #11 0xc0213acd in ufs_vnoperate ()
 #12 0xc018fbf2 in vfs_object_create ()
 #13 0xc018c769 in namei ()
 #14 0xc0195301 in vn_open ()
 #15 0xc0191314 in open ()
 #16 0xc0249e05 in syscall2 ()
 #17 0xc023d6b5 in Xint0x80_syscall ()
 
 
 Help?
 
 

From: Martin Blapp <mb@imp.ch>
To: Arnvid Karstad <arnvid@karstad.org>
Cc: <freebsd-gnats-submit@FreeBSD.org>
Subject: Re: i386/42046: System crashes with
Date: Wed, 8 Jan 2003 08:33:34 +0100 (CET)

 Hi Arnvid,
 
 I had very similar crashes as you had after a update to CURRENT,
 means 5.0.
 
 It turned out to be bad RAM. Please don't use IBM memtest tools,
 try out http://www.memtest86.com/
 
 Let the test run for 24 hours.
 
 hope this helps you.
 
 Martin
 
 Martin Blapp, <mb@imp.ch> <mbr@FreeBSD.org>
 ------------------------------------------------------------------
 ImproWare AG, UNIXSP & ISP, Zurlindenstrasse 29, 4133 Pratteln, CH
 Phone: +41 061 826 93 00: +41 61 826 93 01
 PGP: <finger -l mbr@freebsd.org>
 PGP Fingerprint: B434 53FC C87C FE7B 0A18 B84C 8686 EF22 D300 551E
 ------------------------------------------------------------------
 
State-Changed-From-To: open->closed 
State-Changed-By: dannyboy 
State-Changed-When: Wed Jul 14 22:45:45 GMT 2004 
State-Changed-Why:  
Hardware problem suspected, and feedback timeout.  If this 
remains a problem in 4.10 and you have ruled out bad hardware, 
e-mail me and I will reopen. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=42046 
>Unformatted:
