From nobody@FreeBSD.org  Sun Jan 27 01:02:38 2008
Return-Path: <nobody@FreeBSD.org>
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id CFE2B16A421
	for <freebsd-gnats-submit@FreeBSD.org>; Sun, 27 Jan 2008 01:02:38 +0000 (UTC)
	(envelope-from nobody@FreeBSD.org)
Received: from www.freebsd.org (www.freebsd.org [IPv6:2001:4f8:fff6::21])
	by mx1.freebsd.org (Postfix) with ESMTP id B735213C468
	for <freebsd-gnats-submit@FreeBSD.org>; Sun, 27 Jan 2008 01:02:38 +0000 (UTC)
	(envelope-from nobody@FreeBSD.org)
Received: from www.freebsd.org (localhost [127.0.0.1])
	by www.freebsd.org (8.14.2/8.14.2) with ESMTP id m0R10vpC049063
	for <freebsd-gnats-submit@FreeBSD.org>; Sun, 27 Jan 2008 01:00:57 GMT
	(envelope-from nobody@www.freebsd.org)
Received: (from nobody@localhost)
	by www.freebsd.org (8.14.2/8.14.1/Submit) id m0R10vDM049062;
	Sun, 27 Jan 2008 01:00:57 GMT
	(envelope-from nobody)
Message-Id: <200801270100.m0R10vDM049062@www.freebsd.org>
Date: Sun, 27 Jan 2008 01:00:57 GMT
From: kevin brintnall <kbrint@rufus.net>
To: freebsd-gnats-submit@FreeBSD.org
Subject: kernel panic in "sis" driver (page fault while in kernel mode)
X-Send-Pr-Version: www-3.1
X-GNATS-Notify:

>Number:         120026
>Category:       kern
>Synopsis:       [sis] [panic] kernel panic in sis(4) (page fault while in kernel mode)
>Confidential:   no
>Severity:       serious
>Priority:       low
>Responsible:    freebsd-bugs
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sun Jan 27 01:10:01 UTC 2008
>Closed-Date:    Wed Feb 13 09:51:12 UTC 2008
>Last-Modified:  Wed Feb 13 09:51:12 UTC 2008
>Originator:     kevin brintnall
>Release:        6.3-RELEASE
>Organization:
>Environment:
FreeBSD maguro.rufus.net 6.3-RELEASE FreeBSD 6.3-RELEASE #0: Sun Jan 20 13:03:27 CST 2008    root@maguro.rufus.net:/usr/obj/usr/src/sys/RUFUS


>Description:
I've been experiencing regular kernel panics on 6.3-RELEASE machine.
This machine was previously stable under 6.2-RELEASE.
The crashes are always in the sis0 driver.

The first crash I was able to capture looked like this:

Fatal trap 12: page fault while in kernel mode
cpuid = 0; apic id = 00
fault virtual address   = 0xbfe7a7e8
fault code              = supervisor read, page not present
instruction pointer     = 0x20:0xc07f8a16
stack pointer           = 0x28:0xe6704c20
frame pointer           = 0x28:0xe6704c68
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, def32 1, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 31 (irq19: sis0)
trap number             = 12
panic: page fault
cpuid = 0
Uptime: 59m55s
Dumping 3007 MB (2 chunks)
  chunk 0: 1MB (159 pages) ... ok
  chunk 1: 3007MB (769776 pages) 2991 2975 2959 2943 2927 2911 2895 2879 2863 2847 2831 2815 2799 2783 2767 2751 2735 2719 2703 2687 2671 2655 2639 2623 2607 2591 2575 2559 2543 2527 2511 2495 2479 2463 2447 2431 2415 2399 2383 2367 2351 2335 2319 2303 2287 2271 2255 2239 2223 2207 2191 2175 2159 2143 2127 2111 2095 2079 2063 2047 2031 2015 1999 1983 1967 1951 1935 1919 1903 1887 1871 1855 1839 1823 1807 1791 1775 1759 1743 1727 1711 1695 1679 1663 1647 1631 1615 1599 1583 1567 1551 1535 1519 1503 1487 1471 1455 1439 1423 1407 1391 1375 1359 1343 1327 13crash-1 

The subsequent two captures looked like this:

Fatal trap 12: page fault while in kernel mode
cpuid = 0; apic id = 00
fault virtual address   = 0x40
fault code              = supervisor read, page not present
instruction pointer     = 0x20:0xc07f9bec
stack pointer           = 0x28:0xe6704c9c
frame pointer           = 0x28:0xe6704ca4
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, def32 1, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 31 (irq19: sis0)
trap number             = 12
panic: page fault
cpuid = 0
GEOM_MIRROR: Device gm1: rebuilding provider ad0s1 stopped.
Uptime: 20m51s
Dumping 3007 MB (2 chunks)
  chunk 0: 1MB (159 pages) ... ok
  chunk 1: 3007MB (769776 pages) 2991 2975 2959 2943 2927 2911 2895 2879 2863 2847 2831 2815 2799 2783 2767 2751 2735 2719 2703 2687 2671 2655 2639 2623 2607 2591 2575 2559 2543 2527 2511 2495 2479 2463 2447 2431 2415 2399 2383 2367 2351 2335 2319 2303 2287 2271 2255 2239 2223 2207 2191 2175 2159 2143 2127 2111 2095 2079 2063 2047 2031 2015 1999 1983 1967 1951 1935 1919 1903 1887 1871 1855 1839 1823 1807 1791 1775 1759 1743 1727 1711 1695 1679 1663 1647 1631 1615 1599 1583 1567 1551 1535 1519 1503 1487 1471 1455 1439 1423 1407 1391 1375 1359 1343 1327 1311 1295 1279 1263 1247 1231 1215 1199 1183 1167 1151 1135 1119 1103 1087 1071 1055 1039 1023 1007 991 975 959 943 927 911 895 879 863 847 831 815 799 783 767 751 735 719 703 687 671 655 639 623 607 591 575 559 543 527 511 495 479 463 447 431 415 399 383 367 351 335 319 303 287 271 255 239 223 207 191 175 159 143 127 111 95 79 63 47 31 15 ... ok

The final crash was different...  It hung the machine completely.
I'm not sure if the hang was related to the crash, or whether it
was background_fsck hanging the machine.  I've had some problems
with background_fsck in the past.

sis0: discard frame w/o packet header
panic: vm_fault: fault on nofault entry, addr: e3f7a000
cpuid = 0
GEOM_MIRROR: Device gm1: rebuilding provider ad0s1 stopped.
Uptime: 5m42s
Dumping 3007 MB (2 chunks)
  chunk 0: 1MB (159 pages) ... ok
  chunk 1: 3007MB (769776 pages)sis0: watchdog timeout
sis0: watchdog timeout
sis0: watchdog timeout
sis0: watchdog timeout
sis0: watchdog timeout
sis0: watchdog timeout

Although I have had several dumps to $dumpdev, savecore has
never been able to retrieve any of them!!  So, i can't provide a
backtrace at this time.  I'm attempting to deduce why savecore
never produces anything..

savecore: error reading last dump header at offset 4296851456 in /dev/ad0s2b: Input/output error

This is the full boot:

/boot/kernel/acpi.ko text=0x46704 data=0x2440+0x1b8c syms=[0x4+0x8050+0x4+0xaec0]
Copyright (c) 1992-2008 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
        The Regents of the University of California. All rights reserved.
FreeBSD is a registered trademark of The FreeBSD Foundation.
FreeBSD 6.3-RELEASE #0: Sun Jan 20 13:03:27 CST 2008
    root@maguro.rufus.net:/usr/obj/usr/src/sys/RUFUS
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: Intel(R) Pentium(R) 4 CPU 2.80GHz (2796.35-MHz 686-class CPU)
  Origin = "GenuineIntel"  Id = 0xf29  Stepping = 9
  Features=0xbfebfbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE>
  Features2=0x4400<CNXT-ID,xTPR>
  Logical CPUs per core: 2
real memory  = 3154051072 (3007 MB)
avail memory = 3085287424 (2942 MB)
ACPI APIC Table: <AMIINT SiS740XX>
FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs
 cpu0 (BSP): APIC ID:  0
 cpu1 (AP): APIC ID:  1
ioapic0 <Version 1.1> irqs 0-23 on motherboard
kbd1 at kbdmux0
acpi0: <AMIINT SiS740XX> on motherboard
acpi0: Power Button (fixed)
Timecounter "ACPI-fast" frequency 3579545 Hz quality 1000
acpi_timer0: <24-bit timer at 3.579545MHz> port 0x808-0x80b on acpi0
cpu0: <ACPI CPU> on acpi0
cpu1: <ACPI CPU> on acpi0
acpi_button0: <Power Button> on acpi0
pcib0: <ACPI Host-PCI bridge> port 0xcf8-0xcff on acpi0
pci0: <ACPI PCI bus> on pcib0
agp0: <SiS 661 host to AGP bridge> mem 0xe0000000-0xe3ffffff at device 0.0 on pci0
pcib1: <PCI-PCI bridge> at device 1.0 on pci0
pci1: <PCI bus> on pcib1
pci1: <display, VGA> at device 0.0 (no driver attached)
isab0: <PCI-ISA bridge> at device 2.0 on pci0
isa0: <ISA bus> on isab0
atapci0: <SiS 962/963 UDMA133 controller> port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xff00-0xff0f at device 2.5 on pci0
ata0: <ATA channel 0> on atapci0
ata1: <ATA channel 1> on atapci0
pci0: <multimedia, audio> at device 2.7 (no driver attached)
ohci0: <SiS 5571 USB controller> mem 0xcfff9000-0xcfff9fff irq 20 at device 3.0 on pci0
ohci0: [GIANT-LOCKED]
usb0: OHCI version 1.0, legacy support
usb0: <SiS 5571 USB controller> on ohci0
usb0: USB revision 1.0
uhub0: SiS OHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub0: 3 ports with 3 removable, self powered
ohci1: <SiS 5571 USB controller> mem 0xcfffa000-0xcfffafff irq 21 at device 3.1 on pci0
ohci1: [GIANT-LOCKED]
usb1: OHCI version 1.0, legacy support
usb1: <SiS 5571 USB controller> on ohci1
usb1: USB revision 1.0
uhub1: SiS OHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub1: 3 ports with 3 removable, self powered
ehci0: <EHCI (generic) USB 2.0 controller> mem 0xcfffb000-0xcfffbfff irq 23 at device 3.2 on pci0
ehci0: [GIANT-LOCKED]
usb2: EHCI version 1.0
usb2: companion controllers, 3 ports each: usb0 usb1
usb2: <EHCI (generic) USB 2.0 controller> on ehci0
usb2: USB revision 2.0
uhub2: SiS EHCI root hub, class 9/0, rev 2.00/1.00, addr 1
uhub2: 6 ports with 6 removable, self powered
sis0: <SiS 900 10/100BaseTX> port 0xd400-0xd4ff mem 0xcfff8000-0xcfff8fff irq 19 at device 4.0 on pci0
miibus0: <MII bus> on sis0
rlphy0: <RTL8201L 10/100 media interface> on miibus0
rlphy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
sis0: Ethernet address: 00:0b:6a:59:ff:67
fdc0: <floppy drive controller> port 0x3f2-0x3f3,0x3f4-0x3f5,0x3f7 irq 6 drq 2 on acpi0
fdc0: [FAST]
sio0: <16550A-compatible COM port> port 0x3f8-0x3ff irq 4 flags 0x10 on acpi0
sio0: type 16550A, console
pmtimer0 on isa0
orm0: <ISA Option ROM> at iomem 0xc0000-0xcbfff on isa0
sc0: <System console> at flags 0x100 on isa0
sc0: VGA <16 virtual consoles, flags=0x100>
vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
atkbdc0: <Keyboard controller (i8042)> at port 0x60,0x64 on isa0
atkbd0: <AT Keyboard> irq 1 on atkbdc0
kbd0 at atkbd0
atkbd0: [GIANT-LOCKED]
sio1: configured irq 3 not in bitmap of probed irqs 0
sio1: port may not be enabled
Timecounters tick every 1.000 msec
ad0: 114440MB <WDC WD1200JB-75CRA0 16.06V16> at ata0-master UDMA100
ad2: 114473MB <WDC WD1200JB-00REA0 20.00K20> at ata1-master UDMA100
SMP: AP CPU #1 Launched!
GEOM_MIRROR: Device gm1 created (id=1450529221).
GEOM_MIRROR: Device gm1: provider ad0s1 detected.
GEOM_MIRROR: Device gm1: provider ad2s1 detected.
GEOM_MIRROR: Device gm1: provider ad2s1 activated.
GEOM_MIRROR: Device gm1: provider mirror/gm1 launched.
GEOM_MIRROR: Device gm1: rebuilding provider ad0s1.
Trying to mount root from ufs:/dev/mirror/gm1a
WARNING: / was not properly dismounted
Loading configuration files.
kernel dumps on /dev/ad0s2b
Entropy harvesting: interrupts ethernet point_to_point kickstart.
swapon: adding /dev/ad0s2b as swap device
swapon: adding /dev/ad2s2b as swap device
Starting file system checks:
/dev/mirror/gm1a: 2010 files, 41571 used, 212244 free (2924 frags, 26165 blocks, 1.2% fragmentation)
/dev/mirror/gm1f: 22506 files, 3949371 used, 44943764 free (7292 frags, 5617059 blocks, 0.0% fragmentation)
.. lots of fsck
Mounting local file systems:.
Setting hostname: maguro.rufus.net.
kern.ipc.shm_use_phys: 0 -> 1
machdep.hyperthreading_allowed: 0 -> 1
kern.ipc.maxsockbuf: 262144 -> 16777216
net.inet.tcp.sendspace: 32768 -> 262144
net.inet.tcp.recvspace: 65536 -> 262144
net.inet.udp.recvspace: 41600 -> 2097152
net.inet.udp.maxdgram: 9216 -> 65535
lo0: flags=8049<UP,LOOPBACK,RUNNsING,MULTICAST> mitu 16384
s       inet 127.0.0.1 0netmask 0xff0000:00 
 sis0: flags=8843l<UP,BROADCAST,RUiNNING,SIMPLEX,MUnLTICAST> mtu 150k0
        options=8<VL AN_MTU>
        inet 2s09.240.71.9 netmtask 0xfffffff8 baroadcast 209.240t.71.15
        ether 0e0:0b:6a:59:ff:67 
        media: Etherncet autoselect (1h00baseTX <full-dauplex>)
        statusn: active
ged to UP
Starting pflog.
pflog0: promiscuous mode enabled
Enabling pf.
Jan 26 17:29:54 pflogd[311]: [priv]: msg PRIV_OPEN_LOG received
pf enabled
add net default: gateway 209.240.71.14
Additional routing options:.
Starting devd.
hw.acpi.cpu.cx_lowest: C1
sysctl: hw.acpi.cpu.cx_lowest: Invalid argument
Additional TCP options:.
Mounting NFS file systems:.
ELF ldconfig path: /lib /usr/lib /usr/lib/compat /usr/X11R6/lib /usr/local/lib /usr/local/lib/compat/pkg /usr/local/lib/apache2 /usr/local/lib/compat/pkg /usr/local/lib/graphviz /usr/local/lib/jabberd /usr/local/lib/pth /usr/local/lib/zsh /usr/local/lib/apache2 /usr/local/lib/compat/pkg /usr/local/lib/graphviz /usr/local/lib/jabberd /usr/local/lib/pth /usr/local/lib/zsh
a.out ldconfig path: /usr/lib/aout /usr/lib/compat/aout
Creating and/or trimming log files:.
Starting syslogd.
Checking for core dump on /dev/ad0s2b...
savecore: error reading last dump header at offset 4296851456 in /dev/ad0s2b: Input/output error
savecore: no dumps found
Jan 26 17:29:56 maguro savecore: error reading last dump header at offset 4296851456 in /dev/ad0s2b: Input/output error
Initial i386 initialization:.
Additional ABI support:.
Starting named.
Clearing /tmp (X related).
Starting socks5.
Starting local daemons:.
Updating motd.
Mounting late file systems:.
Starting ntpd.
Jan 26 17:30:00 maguro ntpd[615]: no IPv6 interfaces found
postfix/postfix-script: starting the Postfix mail system
Configuring syscons: blanktime.
Starting sshd.
Starting cron.
Local package initialization:.
Sat Jan 26 17:30:03 CST 2008

FreeBSD/i386 (maguro.rufus.net) (ttyd0)

login: Jan 26 17:32:10 maguro savecore: error reading last dump header at offset 4296851456 in /dev/ad0s2b: Input/output error
Jan 26 17:32:31 maguro savecore: error reading last dump header at offset 4296851456 in /dev/ad0s2b: Input/output error


>How-To-Repeat:
The panic occurs most often when the system is under high load.
"/usr/src# make cleandir" can cause the problem.  Also, it is more
likely to happen during gmirror re-builds (which are common due to 
all the crashes).

However, it has also crashed a couple times under low load.
>Fix:


>Release-Note:
>Audit-Trail:

From: Volker <volker@vwsoft.com>
To: bug-followup@FreeBSD.org, kbrint@rufus.net
Cc:  
Subject: Re: kern/120026: [sis] [panic] kernel panic in sis(4) (page fault
 while in kernel mode)
Date: Tue, 12 Feb 2008 22:45:26 +0100

 Kevin,
 
 please provide a backtrace from the panic.
 
 Also output of `devinfo -rv' might help diagnosing your problem.
 
 Thanks!
State-Changed-From-To: open->feedback 
State-Changed-By: linimon 
State-Changed-When: Tue Feb 12 22:59:13 UTC 2008 
State-Changed-Why:  
Note that submitter has been asked for feedback. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=120026 

From: kevin brintnall <kbrint@rufus.net>
To: Volker <volker@vwsoft.com>
Cc: bug-followup@FreeBSD.org
Subject: Re: kern/120026: [sis] [panic] kernel panic in sis(4) (page fault
	while in kernel mode)
Date: Tue, 12 Feb 2008 17:36:10 -0600

 On Tue, Feb 12, 2008 at 10:45:26PM +0100, Volker wrote:
 > Kevin,
 > 
 > please provide a backtrace from the panic.
 > 
 > Also output of `devinfo -rv' might help diagnosing your problem.
 
 Volker,
 
 I cannot make the machine dump core, so I can't find a trace back.
 savecore always complains that it can't read the dump.
 
 I reverted to a normal SMP kernel and I can't make it crash.  I'm not sure
 how to proceed..  If you'd like to close this, then I can re-open it if
 I'm able to reproduce.
 
 -- 
  kevin brintnall =~ /kbrint@rufus.net/
 
 -----------------------------------------------------------------
 
 nexus0
   legacy0
   npx0
   acpi0
       Interrupt request lines:
           9
       I/O ports:
           0x10-0x1f
           0x22-0x3f
           0x44-0x5f
           0x62-0x63
           0x65-0x6f
           0x72-0x7f
           0x80
           0x84-0x86
           0x88
           0x8c-0x8e
           0x90-0x9f
           0xa2-0xbf
           0xe0-0xef
           0x295-0x296
           0x4d0-0x4d1
           0x800-0x87f
           0x880-0x8ff
           0xc00-0xc1f
       I/O memory addresses:
           0xfee00000-0xfee00fff
     cpu0 pnpinfo _HID=none _UID=0 at handle=\_PR_.CPU1
     cpu1 pnpinfo _HID=none _UID=0 at handle=\_PR_.CPU2
     acpi_button0 pnpinfo _HID=PNP0C0C _UID=0 at handle=\_SB_.PWRB
     pcib0 pnpinfo _HID=PNP0A03 _UID=0 at handle=\_SB_.PCI0
       pci0
         agp0 pnpinfo vendor=0x1039 device=0x0661 subvendor=0x1849 subdevice=0x0661 class=0x060000 at slot=0 function=0
             I/O memory addresses:
                 0xe0000000-0xe3ffffff
         pcib1 pnpinfo vendor=0x1039 device=0x0003 subvendor=0x0000 subdevice=0x0000 class=0x060400 at slot=1 function=0
           pci1
             unknown pnpinfo vendor=0x1039 device=0x6330 subvendor=0x1849 subdevice=0x6330 class=0x030000 at slot=0 function=0
                 I/O ports:
                     0xbc00-0xbc7f
                 I/O memory addresses:
                     0xc0000000-0xc7ffffff
                     0xcfee0000-0xcfefffff
         isab0 pnpinfo vendor=0x1039 device=0x0008 subvendor=0x0000 subdevice=0x0000 class=0x060100 at slot=2 function=0 handle=\_SB_.PCI0.SBRG
           isa0
             adv0
             aha0
             aic0
             atkbdc0
                 I/O ports:
                     0x60
                     0x64
               atkbd0
                   Interrupt request lines:
                       1
               psm0
             bt0
             cs0
             ed0
             fe0
             ie0
             lnc0
             sc0
             sio1
             sio2
             sio3
             sn0
             vga0
                 I/O ports:
                     0x3c0-0x3df
                 I/O memory addresses:
                     0xa0000-0xbffff
             vt0
             orm0
                 I/O memory addresses:
                     0xc0000-0xcbfff
             pmtimer0
         atapci0 pnpinfo vendor=0x1039 device=0x5513 subvendor=0x1849 subdevice=0x5513 class=0x010180 at slot=2 function=5 handle=\_SB_.PCI0.IDEC
             I/O ports:
                 0x170-0x177
                 0x1f0-0x1f7
                 0x376
                 0x3f6
                 0xff00-0xff0f
           ata0
               Interrupt request lines:
                   14
             ad0
               subdisk0
           ata1
               Interrupt request lines:
                   15
             ad2
               subdisk2
         unknown pnpinfo vendor=0x1039 device=0x7012 subvendor=0x1849 subdevice=0x7012 class=0x040100 at slot=2 function=7 handle=\_SB_.PCI0.AUD_
             I/O ports:
                 0xd800-0xd87f
                 0xdc00-0xdcff
         ohci0 pnpinfo vendor=0x1039 device=0x7001 subvendor=0x1849 subdevice=0x7001 class=0x0c0310 at slot=3 function=0 handle=\_SB_.PCI0.USB1
             Interrupt request lines:
                 20
             I/O memory addresses:
                 0xcfff9000-0xcfff9fff
           usb0
             uhub0
         ohci1 pnpinfo vendor=0x1039 device=0x7001 subvendor=0x1849 subdevice=0x7001 class=0x0c0310 at slot=3 function=1 handle=\_SB_.PCI0.USB2
             Interrupt request lines:
                 21
             I/O memory addresses:
                 0xcfffa000-0xcfffafff
           usb1
             uhub1
         ehci0 pnpinfo vendor=0x1039 device=0x7002 subvendor=0x1849 subdevice=0x7002 class=0x0c0320 at slot=3 function=2 handle=\_SB_.PCI0.EHCI
             Interrupt request lines:
                 23
             I/O memory addresses:
                 0xcfffb000-0xcfffbfff
           usb2
             uhub2
         sis0 pnpinfo vendor=0x1039 device=0x0900 subvendor=0x1849 subdevice=0x0900 class=0x020000 at slot=4 function=0 handle=\_SB_.PCI0.LAN_
             Interrupt request lines:
                 19
             I/O ports:
                 0xd400-0xd4ff
             I/O memory addresses:
                 0xcfff8000-0xcfff8fff
           miibus0
             rlphy0 pnpinfo oui=0x20 model=0x20 rev=0x1 at phyno=1
     acpi_sysresource0 pnpinfo _HID=PNP0C02 _UID=0 at handle=\_SB_.PCI0.SBRG.SYSR
     atpic0 pnpinfo _HID=PNP0000 _UID=0 at handle=\_SB_.PCI0.SBRG.PIC_
     atdma0 pnpinfo _HID=PNP0200 _UID=0 at handle=\_SB_.PCI0.SBRG.DMAD
     attimer0 pnpinfo _HID=PNP0100 _UID=0 at handle=\_SB_.PCI0.SBRG.TMR_
     attimer1 pnpinfo _HID=PNP0B00 _UID=0 at handle=\_SB_.PCI0.SBRG.RTC_
     unknown pnpinfo _HID=PNP0800 _UID=0 at handle=\_SB_.PCI0.SBRG.SPKR
     npxisa0 pnpinfo _HID=PNP0C04 _UID=0 at handle=\_SB_.PCI0.SBRG.COPR
     unknown pnpinfo _HID=PNP0F03 _UID=0 at handle=\_SB_.PCI0.SBRG.PS2M
     unknown pnpinfo _HID=PNP0303 _UID=0 at handle=\_SB_.PCI0.SBRG.PS2K
     fdc0 pnpinfo _HID=PNP0700 _UID=0 at handle=\_SB_.PCI0.SBRG.FDC0
         Interrupt request lines:
             6
         DMA request lines:
             2
         I/O ports:
             0x3f2-0x3f3
             0x3f4-0x3f5
             0x3f7
       fd0
       fd1
     sio0 pnpinfo _HID=PNP0501 _UID=1 at handle=\_SB_.PCI0.SBRG.UAR1
         Interrupt request lines:
             4
         I/O ports:
             0x3f8-0x3ff
     unknown pnpinfo _HID=PNP0501 _UID=2 at handle=\_SB_.PCI0.SBRG.UAR2
     unknown pnpinfo _HID=PNP0510 _UID=0 at handle=\_SB_.PCI0.SBRG.IRDA
     unknown pnpinfo _HID=PNP0400 _UID=0 at handle=\_SB_.PCI0.SBRG.LPT_
     ppc0 pnpinfo _HID=PNP0401 _UID=0 at handle=\_SB_.PCI0.SBRG.ECP_
         Interrupt request lines:
             7
         DMA request lines:
             0
         I/O ports:
             0x378-0x37f
       ppbus0
         plip0
         lpt0
         ppi0
     unknown pnpinfo _HID=PNPB02F _UID=0 at handle=\_SB_.PCI0.SBRG.GAME
     unknown pnpinfo _HID=PNPB006 _UID=0 at handle=\_SB_.PCI0.SBRG.MIDI
     unknown pnpinfo _HID=none _UID=0 at handle=\_SB_.PCI0.SBRG.URP1
     unknown pnpinfo _HID=none _UID=0 at handle=\_SB_.PCI0.SBRG.URP2
     unknown pnpinfo _HID=none _UID=0 at handle=\_SB_.PCI0.SBRG.FDDP
     unknown pnpinfo _HID=none _UID=0 at handle=\_SB_.PCI0.SBRG.LPTP
     unknown pnpinfo _HID=none _UID=0 at handle=\_SB_.PCI0.IDEC.IDE0
     unknown pnpinfo _HID=none _UID=0 at handle=\_SB_.PCI0.IDEC.IDE0.DRV0
     unknown pnpinfo _HID=none _UID=0 at handle=\_SB_.PCI0.IDEC.IDE0.DRV1
     unknown pnpinfo _HID=none _UID=0 at handle=\_SB_.PCI0.IDEC.IDE1
     unknown pnpinfo _HID=none _UID=0 at handle=\_SB_.PCI0.IDEC.IDE1.DRV0
     unknown pnpinfo _HID=none _UID=0 at handle=\_SB_.PCI0.IDEC.IDE1.DRV1
     unknown pnpinfo _HID=none _UID=0 at handle=\_SB_.PCI0.MDM_
     pci_link0 pnpinfo _HID=PNP0C0F _UID=1 at handle=\_SB_.LNKA
     pci_link1 pnpinfo _HID=PNP0C0F _UID=2 at handle=\_SB_.LNKB
     pci_link2 pnpinfo _HID=PNP0C0F _UID=3 at handle=\_SB_.LNKC
     pci_link3 pnpinfo _HID=PNP0C0F _UID=4 at handle=\_SB_.LNKD
     pci_link4 pnpinfo _HID=PNP0C0F _UID=5 at handle=\_SB_.LNKE
     pci_link5 pnpinfo _HID=PNP0C0F _UID=6 at handle=\_SB_.LNKF
     pci_link6 pnpinfo _HID=PNP0C0F _UID=7 at handle=\_SB_.LNKG
     pci_link7 pnpinfo _HID=PNP0C0F _UID=8 at handle=\_SB_.LNKH
     unknown pnpinfo _HID=PNP0C01 _UID=0 at handle=\_SB_.MEM_
     acpi_timer0 pnpinfo unknown at unknown
         ACPI I/O ports:
             0x808-0x80b

From: Volker <volker@vwsoft.com>
To: kevin brintnall <kbrint@rufus.net>
Cc: bug-followup@FreeBSD.org
Subject: Re: kern/120026: [sis] [panic] kernel panic in sis(4) (page fault
 while in kernel mode)
Date: Wed, 13 Feb 2008 01:03:27 +0100

 On 02/13/08 00:36, kevin brintnall wrote:
 > Volker,
 > 
 > I cannot make the machine dump core, so I can't find a trace back.
 > savecore always complains that it can't read the dump.
 > 
 > I reverted to a normal SMP kernel and I can't make it crash.  I'm not sure
 > how to proceed..  If you'd like to close this, then I can re-open it if
 > I'm able to reproduce.
 
 Kevin,
 
 sure, you can have that PR closed and request a GNATS hat to re-open
 this PR if you see this problem again.
 
 I haven't noticed you're running a hand crafted kernel. Can you
 provide kernel config? If plain GENERIC works but your modified kernel
 crashes, there must be something wrong in the kernel config.
 
 For the savecore issue: I'm wondering if your swap space on either
 swap device is too small?

From: kevin brintnall <kbrint@rufus.net>
To: Volker <volker@vwsoft.com>
Cc: bug-followup@FreeBSD.org
Subject: Re: kern/120026: [sis] [panic] kernel panic in sis(4) (page fault
	while in kernel mode)
Date: Tue, 12 Feb 2008 18:33:07 -0600

 --J2SCkAp4GZ/dPZZf
 Content-Type: text/plain; charset=us-ascii
 Content-Disposition: inline
 
 On Wed, Feb 13, 2008 at 01:03:27AM +0100, Volker wrote:
 > sure, you can have that PR closed and request a GNATS hat to re-open
 > this PR if you see this problem again.
 > 
 > I haven't noticed you're running a hand crafted kernel. Can you
 > provide kernel config? If plain GENERIC works but your modified kernel
 > crashes, there must be something wrong in the kernel config.
 
 I had added some SYSV SHM changes (for PostgreSQL), as well as compiled in
 ALTQ+PF.  It ran for a very very long time under 6.2 without issue.
 Config is attached.
 
 > For the savecore issue: I'm wondering if your swap space on either
 > swap device is too small?
 
 No.  I re-partitioned to attempt to catch a crash (after finding out that
 you can't savecore to a gmirror).  It shows this after crash:
 
 savecore: error reading last dump header at offset 4296851456 in /dev/ad0s2b: Input/output error
 
 -- 
  kevin brintnall =~ /kbrint@rufus.net/
 
 --J2SCkAp4GZ/dPZZf
 Content-Type: text/plain; charset=us-ascii
 Content-Disposition: attachment; filename=RUFUS
 
 #
 # GENERIC -- Generic kernel configuration file for FreeBSD/i386
 #
 # For more information on this file, please read the handbook section on
 # Kernel Configuration Files:
 #
 #    http://www.FreeBSD.org/doc/en_US.ISO8859-1/books/handbook/kernelconfig-config.html
 #
 # The handbook is also available locally in /usr/share/doc/handbook
 # if you've installed the doc distribution, otherwise always see the
 # FreeBSD World Wide Web server (http://www.FreeBSD.org/) for the
 # latest information.
 #
 # An exhaustive list of options and more detailed explanations of the
 # device lines is also present in the ../../conf/NOTES and NOTES files.
 # If you are in doubt as to the purpose or necessity of a line, check first
 # in NOTES.
 #
 # $FreeBSD: src/sys/i386/conf/GENERIC,v 1.429.2.7.2.2 2006/05/01 00:15:12 scottl Exp $
 
 machine		i386
 cpu		I486_CPU
 cpu		I586_CPU
 cpu		I686_CPU
 ident		SMP-GENERIC
 
 options		SMP
 
 ###################################
 ## maximum process size
 
 options		MAXDSIZ="(1536*1024*1024)"	# Hard maximum limit
 options		MAXSSIZ="(512*1024*1024)"	# Maximum stack limit
 #options	DFLDSIZ="(256*1024*1024)"	# Default limit
 
 # To statically compile in device wiring instead of /boot/device.hints
 #hints		"GENERIC.hints"		# Default places to look for devices.
 
 #makeoptions	DEBUG=-g		# Build kernel with gdb(1) debug symbols
 
 #options 	SCHED_ULE		# ULE scheduler
 options 	SCHED_4BSD		# 4BSD scheduler
 options 	PREEMPTION		# Enable kernel thread preemption
 options 	INET			# InterNETworking
 #options 	INET6			# IPv6 communications protocols
 options 	FFS			# Berkeley Fast Filesystem
 options 	SOFTUPDATES		# Enable FFS soft updates support
 options 	UFS_ACL			# Support for access control lists
 options 	UFS_DIRHASH		# Improve performance on big directories
 options 	MD_ROOT			# MD is a potential root device
 options 	NFSCLIENT		# Network Filesystem Client
 options 	NFSSERVER		# Network Filesystem Server
 #options 	NFS_ROOT		# NFS usable as /, requires NFSCLIENT
 options 	MSDOSFS			# MSDOS Filesystem
 options 	CD9660			# ISO 9660 Filesystem
 options 	PROCFS			# Process filesystem (requires PSEUDOFS)
 options 	PSEUDOFS		# Pseudo-filesystem framework
 options 	GEOM_GPT		# GUID Partition Tables.
 options 	COMPAT_43		# Compatible with BSD 4.3 [KEEP THIS!]
 options 	COMPAT_FREEBSD4		# Compatible with FreeBSD4
 options 	COMPAT_FREEBSD5		# Compatible with FreeBSD5
 options 	SCSI_DELAY=5000		# Delay (in ms) before probing SCSI
 options 	KTRACE			# ktrace(1) support
 
 #################################################################
 # sysV shared memory
 
 options 	SYSVSHM			# SYSV-style shared memory
 options 	SYSVMSG			# SYSV-style message queues
 options 	SYSVSEM			# SYSV-style semaphores
 
 options		SHMMAXPGS=16384		# postgresql doc has 65536
 options		SEMMNI=40
 options		SEMMNS=240
 options		SEMUME=40
 options		SEMMNU=120
 
 #################################################################
 
 options 	_KPOSIX_PRIORITY_SCHEDULING # POSIX P1003_1B real-time extensions
 options 	KBD_INSTALL_CDEV	# install a CDEV entry in /dev
 options 	ADAPTIVE_GIANT		# Giant mutex is adaptive.
 
 device		apic			# I/O APIC
 
 # Bus support.
 #device		eisa
 device		pci
 
 # Floppy drives
 device		fdc
 
 # ATA and ATAPI devices
 device		ata
 device		atadisk		# ATA disk drives
 device		ataraid		# ATA RAID drives
 device		atapicd		# ATAPI CDROM drives
 device		atapifd		# ATAPI floppy drives
 #device		atapist		# ATAPI tape drives
 options 	ATA_STATIC_ID	# Static device numbering
 
 # SCSI Controllers
 device		ahc		# AHA2940 and onboard AIC7xxx devices
 device		ahd		# AHA39320/29320 and onboard AIC79xx devices
 device		amd		# AMD 53C974 (Tekram DC-390(T))
 device		isp		# Qlogic family
 #device 	ispfw		# Firmware for QLogic HBAs- normally a module
 device		mpt		# LSI-Logic MPT-Fusion
 #device		ncr		# NCR/Symbios Logic
 device		sym		# NCR/Symbios Logic (newer chipsets + those of `ncr')
 device		trm		# Tekram DC395U/UW/F DC315U adapters
 
 device		adv		# Advansys SCSI adapters
 device		adw		# Advansys wide SCSI adapters
 
 device		ncv		# NCR 53C500
 device		nsp		# Workbit Ninja SCSI-3
 device		stg		# TMC 18C30/18C50
 
 # SCSI peripherals
 device		scbus		# SCSI bus (required for SCSI)
 device		ch		# SCSI media changers
 device		da		# Direct Access (disks)
 device		sa		# Sequential Access (tape etc)
 device		cd		# CD
 device		pass		# Passthrough device (direct SCSI access)
 device		ses		# SCSI Environmental Services (and SAF-TE)
 
 # RAID controllers interfaced to the SCSI subsystem
 device		amr		# AMI MegaRAID
 device		arcmsr		# Areca SATA II RAID
 device		asr		# DPT SmartRAID V, VI and Adaptec SCSI RAID
 device		ciss		# Compaq Smart RAID 5*
 device		dpt		# DPT Smartcache III, IV - See NOTES for options
 device		hptmv		# Highpoint RocketRAID 182x
 device		rr232x		# Highpoint RocketRAID 232x
 device		iir		# Intel Integrated RAID
 device		ips		# IBM (Adaptec) ServeRAID
 device		mly		# Mylex AcceleRAID/eXtremeRAID
 device		twa		# 3ware 9000 series PATA/SATA RAID
 
 # RAID controllers
 device		aac		# Adaptec FSA RAID
 device		aacp		# SCSI passthrough for aac (requires CAM)
 device		ida		# Compaq Smart RAID
 device		mfi		# LSI MegaRAID SAS
 device		mlx		# Mylex DAC960 family
 device		pst		# Promise Supertrak SX6000
 device		twe		# 3ware ATA RAID
 
 # atkbdc0 controls both the keyboard and the PS/2 mouse
 device		atkbdc		# AT keyboard controller
 device		atkbd		# AT keyboard
 device		psm		# PS/2 mouse
 
 device		kbdmux		# keyboard multiplexer
 
 device		vga		# VGA video card driver
 
 #device		splash		# Splash screen and screen saver support
 
 # syscons is the default console driver, resembling an SCO console
 device		sc
 
 device		agp		# support several AGP chipsets
 
 # Add suspend/resume support for the i8254.
 device		pmtimer
 
 # Serial (COM) ports
 device		sio		# 8250, 16[45]50 based serial ports
 
 # PCI Ethernet NICs.
 device		de		# DEC/Intel DC21x4x (``Tulip'')
 device		em		# Intel PRO/1000 adapter Gigabit Ethernet Card
 device		ixgb		# Intel PRO/10GbE Ethernet Card
 device		txp		# 3Com 3cR990 (``Typhoon'')
 device		vx		# 3Com 3c590, 3c595 (``Vortex'')
 
 # PCI Ethernet NICs that use the common MII bus controller code.
 # NOTE: Be sure to keep the 'device miibus' line in order to use these NICs!
 device		miibus		# MII bus support
 device		bce		# Broadcom BCM5706/BCM5708 Gigabit Ethernet
 device		bfe		# Broadcom BCM440x 10/100 Ethernet
 device		bge		# Broadcom BCM570xx Gigabit Ethernet
 device		dc		# DEC/Intel 21143 and various workalikes
 device		fxp		# Intel EtherExpress PRO/100B (82557, 82558)
 device		lge		# Level 1 LXT1001 gigabit Ethernet
 device		nge		# NatSemi DP83820 gigabit Ethernet
 device		nve		# nVidia nForce MCP on-board Ethernet Networking
 device		pcn		# AMD Am79C97x PCI 10/100(precedence over 'lnc')
 device		re		# RealTek 8139C+/8169/8169S/8110S
 device		rl		# RealTek 8129/8139
 device		sf		# Adaptec AIC-6915 (``Starfire'')
 device		sis		# Silicon Integrated Systems SiS 900/SiS 7016
 device		sk		# SysKonnect SK-984x & SK-982x gigabit Ethernet
 device		ste		# Sundance ST201 (D-Link DFE-550TX)
 device		ti		# Alteon Networks Tigon I/II gigabit Ethernet
 device		tl		# Texas Instruments ThunderLAN
 device		tx		# SMC EtherPower II (83c170 ``EPIC'')
 device		vge		# VIA VT612x gigabit Ethernet
 device		vr		# VIA Rhine, Rhine II
 device		wb		# Winbond W89C840F
 device		xl		# 3Com 3c90x (``Boomerang'', ``Cyclone'')
 
 # Pseudo devices.
 device		loop		# Network loopback
 device		random		# Entropy device
 device		ether		# Ethernet support
 #device		sl		# Kernel SLIP
 #device		ppp		# Kernel PPP
 device		tun		# Packet tunnel.
 device		pty		# Pseudo-ttys (telnet etc)
 device		md		# Memory "disks"
 device		gif		# IPv6 and IPv4 tunneling
 device		faith		# IPv6-to-IPv4 relaying (translation)
 
 # The `bpf' device enables the Berkeley Packet Filter.
 # Be aware of the administrative consequences of enabling this!
 # Note that 'bpf' is required for DHCP.
 device		bpf		# Berkeley packet filter
 
 #################################################################
 ## pf+altq support
 
 device		pf
 options		ALTQ
 options		ALTQ_CBQ
 options		ALTQ_RED
 options		ALTQ_RIO
 options		ALTQ_HFSC
 options		ALTQ_CDNR
 options		ALTQ_PRIQ
 
 #################################################################
 
 # USB support
 device		uhci		# UHCI PCI->USB interface
 device		ohci		# OHCI PCI->USB interface
 device		ehci		# EHCI PCI->USB interface (USB 2.0)
 device		usb		# USB Bus (required)
 #device		udbp		# USB Double Bulk Pipe devices
 device		ugen		# Generic
 device		uhid		# "Human Interface Devices"
 device		ukbd		# Keyboard
 device		ulpt		# Printer
 device		umass		# Disks/Mass storage - Requires scbus and da
 device		ums		# Mouse
 
 # FireWire support
 device		firewire	# FireWire bus code
 device		sbp		# SCSI over FireWire (Requires scbus and da)
 device		fwe		# Ethernet over FireWire (non-standard!)
 
 --J2SCkAp4GZ/dPZZf--
State-Changed-From-To: feedback->closed 
State-Changed-By: linimon 
State-Changed-When: Wed Feb 13 09:50:28 UTC 2008 
State-Changed-Why:  
Closed at submitter's request.  We can re-open it later if needed. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=120026 
>Unformatted:
