From nobody@FreeBSD.org  Wed Aug  7 04:12:05 2002
Return-Path: <nobody@FreeBSD.org>
Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 1BC3237B400
	for <freebsd-gnats-submit@FreeBSD.org>; Wed,  7 Aug 2002 04:12:05 -0700 (PDT)
Received: from www.freebsd.org (www.FreeBSD.org [216.136.204.117])
	by mx1.FreeBSD.org (Postfix) with ESMTP id BFBA143E72
	for <freebsd-gnats-submit@FreeBSD.org>; Wed,  7 Aug 2002 04:12:04 -0700 (PDT)
	(envelope-from nobody@FreeBSD.org)
Received: from www.freebsd.org (localhost [127.0.0.1])
	by www.freebsd.org (8.12.4/8.12.4) with ESMTP id g77BC4OT042986
	for <freebsd-gnats-submit@FreeBSD.org>; Wed, 7 Aug 2002 04:12:04 -0700 (PDT)
	(envelope-from nobody@www.freebsd.org)
Received: (from nobody@localhost)
	by www.freebsd.org (8.12.4/8.12.4/Submit) id g77BC4UK042985;
	Wed, 7 Aug 2002 04:12:04 -0700 (PDT)
Message-Id: <200208071112.g77BC4UK042985@www.freebsd.org>
Date: Wed, 7 Aug 2002 04:12:04 -0700 (PDT)
From: Kris Anderson <msmouse@kittymail.com>
To: freebsd-gnats-submit@FreeBSD.org
Subject: kernal panics
X-Send-Pr-Version: www-1.0

>Number:         41402
>Category:       kern
>Synopsis:       [panic] kernel panics in pmap_insert_entry
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Wed Aug 07 04:20:01 PDT 2002
>Closed-Date:    Sat Mar 01 20:07:27 UTC 2008
>Last-Modified:  Sat Mar 01 20:07:27 UTC 2008
>Originator:     Kris Anderson
>Release:        FreeBSD 4.6 Stable
>Organization:
>Environment:
FreeBSD <hostname and address withheld> 4.6-STABLE FreeBSD 4.6-STABLE #0: Sun Jul 28 12:36:02 PDT 2002     <name and address witheld>:/usr/src/sys/compile/MOUSE_IV_MP_BUG  i386
  
>Description:
SMP kernel panics with pretty much the same thing. Under 3.5 this particular problem did not rear its ungly head.

I am running a dual pentium 200 with 96megs of RAM on a Tyan Tomcat motherboard. Two 4 gig ide HD, Riva TNT 3d graphics blaster, sound blaster 16 sound card.  Oddly enough, when I play MP3 on the dual processing kernal it use to just hang. I would then have to reset the system. But now, it seems sound plays just fine, well the few times I've tried it. 
Here is some debug information. If you would like more information let me know and I would be more than happy to get it. Just be sure to tell me how the information is to be gotten and I'll get it.

SMP 2 cpus
IdlePTD at phsyical address 0x003e3000
initial pcb at physical address 0x00335dc0
panicstr: page fault
panic messages:
---
Fatal trap 12: page fault while in kernel mode
mp_lock = 01000002; cpuid = 1; lapic.id = 01000000
fault virtual address   = 0x805c5a08
fault code              = supervisor write, page not present
instruction pointer     = 0x8:0xc02a2c14
stack pointer           = 0x10:0xc946fe28
frame pointer           = 0x10:0xc946fe38
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, def32 1, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 1496 (sh)
interrupt mask          = net tty bio cam  <- SMP: XXX
trap number             = 12
panic: page fault
mp_lock = 01000002; cpuid = 1; lapic.id = 01000000
boot() called on cpu#1

syncing disks... 69 8 5 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 
0xc304f674 1: dev:#ad/0x20006, flags:21001024, blkno:4933216, lblkno:0
0xc3045c20 2: dev:#ad/0x20004, flags:01001024, blkno:4480, lblkno:0
0xc30324e0 3: dev:#ad/0x20006, flags:21001024, blkno:4882496, lblkno:0
0xc2ffe82c 4: dev:#ad/0x20004, flags:01011024, blkno:6996, lblkno:0
giving up on 4 buffers
Uptime: 33m1s

dumping to dev #ad/0x20001, offset 165952
dump ata0: resetting devices .. done
ad0: timeout waiting for DRQ - resetting
ata0: resetting devices .. done
96 95 94 93 92 91 90 89 88 87 86 85 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70 69 68 67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 
---
#0  dumpsys () at ../../kern/kern_shutdown.c:487
487             if (dumping++) {
------------
mptable output
------------
===============================================================================

MPTable, version 2.0.15

-------------------------------------------------------------------------------

MP Floating Pointer Structure:

  location:                     BIOS
  physical address:             0x000f0c80
  signature:                    '_MP_'
  length:                       16 bytes
  version:                      1.1
  checksum:                     0xf4
  mode:                         Virtual Wire

-------------------------------------------------------------------------------

MP Config Table Header:

  physical address:             0x000f0c94
  signature:                    'PCMP'
  base table length:            292
  version:                      1.1
  checksum:                     0xa5
  OEM ID:                       'OEM00000'
  Product ID:                   'PROD00000000'
  OEM table pointer:            0x00000000
  OEM table size:               0
  entry count:                  28
  local APIC address:           0xfee00000
  extended table length:        0
  extended table checksum:      0

-------------------------------------------------------------------------------

MP Config Base Table Entries:

--
Processors:     APIC ID Version State           Family  Model   Step    Flags
                 0       0x11    BSP, usable     5       2       1       0x07bf
                 1       0x11    AP, usable      5       2       1       0x07bf
--
Bus:            Bus ID  Type
                 0       ISA   
                 1       PCI   
--
I/O APICs:      APIC ID Version State           Address
                 2       0x11    usable          0xfec00000
--
I/O Ints:       Type    Polarity    Trigger     Bus ID   IRQ    APIC ID PIN#
                ExtINT   conforms    conforms        0     0          2    0
                INT      conforms    conforms        0     1          2    1
                INT      conforms    conforms        0     0          2    2
                INT      conforms    conforms        0     3          2    3
                INT      conforms    conforms        0     4          2    4
                INT      conforms    conforms        0     5          2    5
                INT      conforms    conforms        0     6          2    6
                INT      conforms    conforms        0     7          2    7
                INT      conforms    conforms        0     8          2    8
                INT      conforms    conforms        0     9          2    9
                INT      conforms    conforms        0    10          2   10
                INT      conforms    conforms        0    11          2   11
                INT      conforms    conforms        0    12          2   12
                INT      conforms    conforms        0    13          2   13
                INT      conforms    conforms        0    14          2   14
                INT      conforms    conforms        0    15          2   15
                INT     active-lo       level        1  20:A          2   16
                INT     active-lo       level        1  19:A          2   17
                INT     active-lo       level        1  18:A          2   18
                INT     active-lo       level        1  17:A          2   19
                SMI      conforms    conforms        0     0          2   23
--
Local Ints:     Type    Polarity    Trigger     Bus ID   IRQ    APIC ID PIN#
                ExtINT  active-hi        edge        0     0        255    0
                NMI     active-hi        edge        0     0        255    1

===============================================================================


>How-To-Repeat:
Boot my system and wait. Seriously. Hard telling when the kernel will panic. This particular time it was in making a ports package. Under a single CPU kernal the problem does not occur.
>Fix:
      
>Release-Note:
>Audit-Trail:

From: Nate Lawson <nate@root.org>
To: freebsd-gnats-submit@FreeBSD.org, msmouse@kittymail.com
Cc:  
Subject: Re: kern/41402: kernal panics
Date: Thu, 15 Aug 2002 16:48:15 -0700 (PDT)

 If possible, please send us the output of "bt" at the gdb prompt.
 
 -Nate
 
State-Changed-From-To: open->feedback 
State-Changed-By: johan 
State-Changed-When: Fri Aug 23 10:00:24 PDT 2002 
State-Changed-Why:  
Asked for bt output from gdb. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=41402 

From: Johan Karlsson <johan@freebsd.org>
To: Bug followup <bug-followup@freebsd.org>
Cc:  
Subject: Fwd: Re: kern/41402: kernal panics
Date: Fri, 23 Aug 2002 22:06:29 +0200

 Adding to audit-trail.
 
 ----- Forwarded message from K Anderson <msmouse@kittymail.com> -----
 
 From: "K Anderson" <msmouse@kittymail.com>
 To: <johan@FreeBSD.org>
 Subject: Re: kern/41402: kernal panics
 Date: Fri, 23 Aug 2002 11:52:32 -0800
 
 I don't know if Nate sent you the information but here you go. :)
 
 Oh. I had mucked a few things up so I had to make a new debug kernel and wait for a new panic. Here's the stuff. Oh, and the other night /var got wiped out but I think I still have the crash and stuff that goes along with this output I'm sending you.
 
 Hope that helps and thanks for the great help.
 If you need anything else let me know. Also, you might need to give me the steps to do what ever it is you need I'm no hacker of freebsd. Just a person who wants to get off of Windows.
 ----------Reason for panic-----------
 SMP 2 cpus
 IdlePTD at phsyical address 0x003e4000
 initial pcb at physical address 0x00336800
 panicstr: page fault
 panic messages:
 ---
 Fatal trap 12: page fault while in kernel mode
 mp_lock = 00000002; cpuid = 0; lapic.id = 00000000
 fault virtual address   = 0x86d88bd8
 fault code              = supervisor write, page not present
 instruction pointer     = 0x8:0xc02a31b4
 stack pointer           = 0x10:0xc94bee28
 frame pointer           = 0x10:0xc94bee38
 code segment            = base 0x0, limit 0xfffff, type 0x1b
                         = DPL 0, pres 1, def32 1, gran 1
 processor eflags        = interrupt enabled, resume, IOPL = 0
 current process         = 4273 (sh)
 interrupt mask          = net tty bio cam  <- SMP: XXX
 trap number             = 12
 panic: page fault
 mp_lock = 00000002; cpuid = 0; lapic.id = 00000000
 boot() called on cpu#0
 
 syncing disks... 53 4 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 
 0xc3052cec 1: dev:#ad/0x20006, flags:01011024, blkno:2969280, lblkno:0
 0xc3033d84 2: dev:#ad/0x20006, flags:01011024, blkno:2978404, lblkno:0
 0xc3031e64 3: dev:#ad/0x20006, flags:01011024, blkno:3017332, lblkno:0
 giving up on 3 buffers
 Uptime: 30m45s
 
 dumping to dev #ad/0x20001, offset 165952
 dump ata0: resetting devices .. done
 ad0: timeout waiting for DRQ - resetting
 ata0: resetting devices .. done
 96 95 94 93 92 91 90 89 88 87 86 85 84 83 82 81 80 79 78 77 76 75 74
 73 72 71 70
  69 68 67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47
 46 45 44 4
 3 42 41 40 [CTRL-C to abort] 39 38 [CTRL-C to abort] [CTRL-C to
 abort] [CTRL-C t
 o abort] 37 [CTRL-C to abort] 36 [CTRL-C to abort] 35 34 [CTRL-C to
 abort] 33 [C
 TRL-C to abort] 32 [CTRL-C to abort] 31 [CTRL-C to abort] 30 29 28 27
 26 25 24 2
 3 22 21 20 19 18 17 16 15 14 13 12 [CTRL-C to abort] [CTRL-C to
 abort] [CTRL-C t
 o abort] 11 10 9 8 7 6 [CTRL-C to abort] [CTRL-C to abort] [CTRL-C to
 abort] 5 4
  3 2 1 
 ---
 #0  dumpsys () at ../../kern/kern_shutdown.c:487
 487             if (dumping++) {
 
 --------End panic---------
 
 ----------gbd with bt------
 #0  dumpsys () at ../../kern/kern_shutdown.c:487
 #1  0xc015d05f in boot (howto=256) at ../../kern/kern_shutdown.c:316
 #2  0xc015d4b8 in poweroff_wait (junk=0xc02efcd9, howto=-1070663761)
     at ../../kern/kern_shutdown.c:595
 #3  0xc02a6dcc in trap_fatal (frame=0xc94bede8, eva=2262338520)
     at ../../i386/i386/trap.c:974
 #4  0xc02a6a5d in trap_pfault (frame=0xc94bede8, usermode=0,
 eva=2262338520)
     at ../../i386/i386/trap.c:867
 #5  0xc02a65fb in trap (frame={tf_fs = 24, tf_es = 16, tf_ds = 16, 
       tf_edi = 135008256, tf_esi = -1067937824, tf_ebp = -917770696, 
       tf_isp = -917770732, tf_ebx = -918626900, tf_edx = -1067427532, 
       tf_ecx = 1, tf_eax = -2032628776, tf_trapno = 12, tf_err = 2, 
       tf_eip = -1070976588, tf_cs = 8, tf_eflags = 66118, tf_esp =
 135008256, 
       tf_ss = -1068428804}) at ../../i386/i386/trap.c:466
 #6  0xc02a31b4 in pmap_insert_entry (pmap=0xc93eddac, va=135008256, 
     mpte=0xc05111fc, m=0xc0588fe0) at ../../i386/i386/pmap.c:1641
 #7  0xc02a428c in pmap_copy (dst_pmap=0xc93eddac,
 src_pmap=0xc93edfec, 
     dst_addr=135008256, len=24576, src_addr=135008256)
     at ../../i386/i386/pmap.c:2692
 #8  0xc023f803 in vm_map_copy_entry (src_map=0xc93edf80,
 dst_map=0xc93edd40, 
     src_entry=0xc9440000, dst_entry=0xc944d6f0) at
 ../../vm/vm_map.c:2158
 #9  0xc023fa0b in vmspace_fork (vm1=0xc93edf80) at
 ../../vm/vm_map.c:2276
 #10 0xc023ca72 in vm_fork (p1=0xc9384ee0, p2=0xc9384a00, flags=20)
     at ../../vm/vm_glue.c:232
 #11 0xc0156593 in fork1 (p1=0xc9384ee0, flags=20, procp=0xc94bef20)
     at ../../kern/kern_fork.c:488
 #12 0xc0155d4a in fork (p=0xc9384ee0, uap=0xc94bef80)
     at ../../kern/kern_fork.c:100
 #13 0xc02a7119 in syscall2 (frame={tf_fs = 47, tf_es = 47, tf_ds =
 47, 
       tf_edi = 135021568, tf_esi = 135271264, tf_ebp = -1077941928, 
       tf_isp = -917770284, tf_ebx = 0, tf_edx = 135271264, tf_ecx =
 3, 
       tf_eax = 2, tf_trapno = 12, tf_err = 2, tf_eip = 134671020,
 tf_cs = 31, 
       tf_eflags = 514, tf_esp = -1077941972, tf_ss = 47})
     at ../../i386/i386/trap.c:1175
 #14 0xc0291bfb in Xint0x80_syscall ()
 #15 0x804af27 in ?? ()
 #16 0x804ab0a in ?? ()
 #17 0x804a9b7 in ?? ()
 #18 0x804a974 in ?? ()
 #19 0x804bb87 in ?? ()
 #20 0x804ac00 in ?? ()
 #21 0x804aaa1 in ?? ()
 #22 0x804ab5a in ?? ()
 #23 0x804ab5a in ?? ()
 #24 0x804ab5a in ?? ()
 #25 0x804add3 in ?? ()
 #26 0x804ab81 in ?? ()
 #27 0x804ab5a in ?? ()
 #28 0x804aa3d in ?? ()
 #29 0x804aa3d in ?? ()
 #30 0x804aa3d in ?? ()
 #31 0x804aa3d in ?? ()
 #32 0x804aa3d in ?? ()
 #33 0x804aa3d in ?? ()
 #34 0x804aa3d in ?? ()
 #35 0x804aa3d in ?? ()
 #36 0x804aa3d in ?? ()
 #37 0x804aa3d in ?? ()
 #38 0x804aa3d in ?? ()
 #39 0x804aa3d in ?? ()
 #40 0x804aa3d in ?? ()
 #41 0x804ab5a in ?? ()
 #42 0x804ab5a in ?? ()
 #43 0x804aeb7 in ?? ()
 #44 0x804ab8e in ?? ()
 #45 0x804ab5a in ?? ()
 #46 0x804aa3d in ?? ()
 #47 0x804aa3d in ?? ()
 #48 0x804aa3d in ?? ()
 #49 0x804aa3d in ?? ()
 #50 0x804aeb7 in ?? ()
 #51 0x804ab8e in ?? ()
 #52 0x804ab5a in ?? ()
 #53 0x804aa3d in ?? ()
 #54 0x804aa3d in ?? ()
 #55 0x804aa3d in ?? ()
 #56 0x804ab5a in ?? ()
 #57 0x805234a in ?? ()
 #58 0x80522b6 in ?? ()
 #59 0x8048135 in ?? ()
 
 ---------end gdb with bt---
 #0  dumpsys () at ../../kern/kern_shutdown.c:487
 #1  0xc015d05f in boot (howto=256) at ../../kern/kern_shutdown.c:316
 #2  0xc015d4b8 in poweroff_wait (junk=0xc02efcd9, howto=-1070663761)
     at ../../kern/kern_shutdown.c:595
 #3  0xc02a6dcc in trap_fatal (frame=0xc94bede8, eva=2262338520)
     at ../../i386/i386/trap.c:974
 #4  0xc02a6a5d in trap_pfault (frame=0xc94bede8, usermode=0,
 eva=2262338520)
     at ../../i386/i386/trap.c:867
 #5  0xc02a65fb in trap (frame={tf_fs = 24, tf_es = 16, tf_ds = 16, 
       tf_edi = 135008256, tf_esi = -1067937824, tf_ebp = -917770696, 
       tf_isp = -917770732, tf_ebx = -918626900, tf_edx = -1067427532, 
       tf_ecx = 1, tf_eax = -2032628776, tf_trapno = 12, tf_err = 2, 
       tf_eip = -1070976588, tf_cs = 8, tf_eflags = 66118, tf_esp =
 135008256, 
       tf_ss = -1068428804}) at ../../i386/i386/trap.c:466
 #6  0xc02a31b4 in pmap_insert_entry (pmap=0xc93eddac, va=135008256, 
     mpte=0xc05111fc, m=0xc0588fe0) at ../../i386/i386/pmap.c:1641
 #7  0xc02a428c in pmap_copy (dst_pmap=0xc93eddac,
 src_pmap=0xc93edfec, 
     dst_addr=135008256, len=24576, src_addr=135008256)
     at ../../i386/i386/pmap.c:2692
 #8  0xc023f803 in vm_map_copy_entry (src_map=0xc93edf80,
 dst_map=0xc93edd40, 
     src_entry=0xc9440000, dst_entry=0xc944d6f0) at
 ../../vm/vm_map.c:2158
 #9  0xc023fa0b in vmspace_fork (vm1=0xc93edf80) at
 ../../vm/vm_map.c:2276
 #10 0xc023ca72 in vm_fork (p1=0xc9384ee0, p2=0xc9384a00, flags=20)
 ---Type <return> to continue, or q <return> to quit--- 
     at ../../vm/vm_glue.c:232
 #11 0xc0156593 in fork1 (p1=0xc9384ee0, flags=20, procp=0xc94bef20)
     at ../../kern/kern_fork.c:488
 #12 0xc0155d4a in fork (p=0xc9384ee0, uap=0xc94bef80)
     at ../../kern/kern_fork.c:100
 #13 0xc02a7119 in syscall2 (frame={tf_fs = 47, tf_es = 47, tf_ds =
 47, 
       tf_edi = 135021568, tf_esi = 135271264, tf_ebp = -1077941928, 
       tf_isp = -917770284, tf_ebx = 0, tf_edx = 135271264, tf_ecx =
 3, 
       tf_eax = 2, tf_trapno = 12, tf_err = 2, tf_eip = 134671020,
 tf_cs = 31, 
       tf_eflags = 514, tf_esp = -1077941972, tf_ss = 47})
     at ../../i386/i386/trap.c:1175
 #14 0xc0291bfb in Xint0x80_syscall ()
 #15 0x804af27 in ?? ()
 #16 0x804ab0a in ?? ()
 #17 0x804a9b7 in ?? ()
 <line 17 seems to repeat with the hex number incremented by a given
 qty>
 ---------gdb with where----
 
 
 ----- Original Message -----
 From: Johan Karlsson <johan@FreeBSD.org>
 Date: Fri, 23 Aug 2002 10:01:04 -0700 (PDT)
 To: msmouse@kittymail.com, johan@FreeBSD.org, freebsd-bugs@FreeBSD.org
 Subject: Re: kern/41402: kernal panics 
 
 Synopsis: kernal panics
 
 State-Changed-From-To: open->feedback
 State-Changed-By: johan
 State-Changed-When: Fri Aug 23 10:00:24 PDT 2002
 State-Changed-Why: 
 	Asked for bt output from gdb.
 
 http://www.freebsd.org/cgi/query-pr.cgi?pr=41402
 
 
 -- 
 _______________________________________________
 Get your free email from www.kittymail.com
 
 Powered by Outblaze
 
 ----- End forwarded message -----
 
 -- 
 Johan Karlsson		mailto:johan@FreeBSD.org
State-Changed-From-To: feedback->open 
State-Changed-By: johan 
State-Changed-When: Fri Aug 23 13:11:56 PDT 2002 
State-Changed-Why:  
Got the backtrace, thanks. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=41402 

From: "K Anderson" <msmouse@kittymail.com>
To: <nate@root.org>
Cc:  
Subject: Re: kern/41402: kernal panics
Date: Sat, 17 Aug 2002 00:12:50 -0800

 Hmmm, I tried that and was getting no results. Even less than what I sent you previously. So what I did, since mucking a few things up, was make a new debug kernel with matching vmcores and such. I think that the vmcore got off some how as I was getting rather weird messages when I tried various things when something didn't look right.
 
 If I get any more panics and it looks like they are different I'll send them off to you.
 
 Hope that helps.
 ----------Reason for panic-----------
 SMP 2 cpus
 IdlePTD at phsyical address 0x003e4000
 initial pcb at physical address 0x00336800
 panicstr: page fault
 panic messages:
 ---
 Fatal trap 12: page fault while in kernel mode
 mp_lock = 00000002; cpuid = 0; lapic.id = 00000000
 fault virtual address   = 0x86d88bd8
 fault code              = supervisor write, page not present
 instruction pointer     = 0x8:0xc02a31b4
 stack pointer           = 0x10:0xc94bee28
 frame pointer           = 0x10:0xc94bee38
 code segment            = base 0x0, limit 0xfffff, type 0x1b
                         = DPL 0, pres 1, def32 1, gran 1
 processor eflags        = interrupt enabled, resume, IOPL = 0
 current process         = 4273 (sh)
 interrupt mask          = net tty bio cam  <- SMP: XXX
 trap number             = 12
 panic: page fault
 mp_lock = 00000002; cpuid = 0; lapic.id = 00000000
 boot() called on cpu#0
 
 syncing disks... 53 4 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 
 0xc3052cec 1: dev:#ad/0x20006, flags:01011024, blkno:2969280, lblkno:0
 0xc3033d84 2: dev:#ad/0x20006, flags:01011024, blkno:2978404, lblkno:0
 0xc3031e64 3: dev:#ad/0x20006, flags:01011024, blkno:3017332, lblkno:0
 giving up on 3 buffers
 Uptime: 30m45s
 
 dumping to dev #ad/0x20001, offset 165952
 dump ata0: resetting devices .. done
 ad0: timeout waiting for DRQ - resetting
 ata0: resetting devices .. done
 96 95 94 93 92 91 90 89 88 87 86 85 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70
  69 68 67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 4
 3 42 41 40 [CTRL-C to abort] 39 38 [CTRL-C to abort] [CTRL-C to abort] [CTRL-C t
 o abort] 37 [CTRL-C to abort] 36 [CTRL-C to abort] 35 34 [CTRL-C to abort] 33 [C
 TRL-C to abort] 32 [CTRL-C to abort] 31 [CTRL-C to abort] 30 29 28 27 26 25 24 2
 3 22 21 20 19 18 17 16 15 14 13 12 [CTRL-C to abort] [CTRL-C to abort] [CTRL-C t
 o abort] 11 10 9 8 7 6 [CTRL-C to abort] [CTRL-C to abort] [CTRL-C to abort] 5 4
  3 2 1 
 ---
 #0  dumpsys () at ../../kern/kern_shutdown.c:487
 487             if (dumping++) {
 
 --------End panic---------
 
 ----------gbd with bt------
 #0  dumpsys () at ../../kern/kern_shutdown.c:487
 #1  0xc015d05f in boot (howto=256) at ../../kern/kern_shutdown.c:316
 #2  0xc015d4b8 in poweroff_wait (junk=0xc02efcd9, howto=-1070663761)
     at ../../kern/kern_shutdown.c:595
 #3  0xc02a6dcc in trap_fatal (frame=0xc94bede8, eva=2262338520)
     at ../../i386/i386/trap.c:974
 #4  0xc02a6a5d in trap_pfault (frame=0xc94bede8, usermode=0, eva=2262338520)
     at ../../i386/i386/trap.c:867
 #5  0xc02a65fb in trap (frame={tf_fs = 24, tf_es = 16, tf_ds = 16, 
       tf_edi = 135008256, tf_esi = -1067937824, tf_ebp = -917770696, 
       tf_isp = -917770732, tf_ebx = -918626900, tf_edx = -1067427532, 
       tf_ecx = 1, tf_eax = -2032628776, tf_trapno = 12, tf_err = 2, 
       tf_eip = -1070976588, tf_cs = 8, tf_eflags = 66118, tf_esp = 135008256, 
       tf_ss = -1068428804}) at ../../i386/i386/trap.c:466
 #6  0xc02a31b4 in pmap_insert_entry (pmap=0xc93eddac, va=135008256, 
     mpte=0xc05111fc, m=0xc0588fe0) at ../../i386/i386/pmap.c:1641
 #7  0xc02a428c in pmap_copy (dst_pmap=0xc93eddac, src_pmap=0xc93edfec, 
     dst_addr=135008256, len=24576, src_addr=135008256)
     at ../../i386/i386/pmap.c:2692
 #8  0xc023f803 in vm_map_copy_entry (src_map=0xc93edf80, dst_map=0xc93edd40, 
     src_entry=0xc9440000, dst_entry=0xc944d6f0) at ../../vm/vm_map.c:2158
 #9  0xc023fa0b in vmspace_fork (vm1=0xc93edf80) at ../../vm/vm_map.c:2276
 #10 0xc023ca72 in vm_fork (p1=0xc9384ee0, p2=0xc9384a00, flags=20)
     at ../../vm/vm_glue.c:232
 #11 0xc0156593 in fork1 (p1=0xc9384ee0, flags=20, procp=0xc94bef20)
     at ../../kern/kern_fork.c:488
 #12 0xc0155d4a in fork (p=0xc9384ee0, uap=0xc94bef80)
     at ../../kern/kern_fork.c:100
 #13 0xc02a7119 in syscall2 (frame={tf_fs = 47, tf_es = 47, tf_ds = 47, 
       tf_edi = 135021568, tf_esi = 135271264, tf_ebp = -1077941928, 
       tf_isp = -917770284, tf_ebx = 0, tf_edx = 135271264, tf_ecx = 3, 
       tf_eax = 2, tf_trapno = 12, tf_err = 2, tf_eip = 134671020, tf_cs = 31, 
       tf_eflags = 514, tf_esp = -1077941972, tf_ss = 47})
     at ../../i386/i386/trap.c:1175
 #14 0xc0291bfb in Xint0x80_syscall ()
 #15 0x804af27 in ?? ()
 #16 0x804ab0a in ?? ()
 #17 0x804a9b7 in ?? ()
 #18 0x804a974 in ?? ()
 #19 0x804bb87 in ?? ()
 #20 0x804ac00 in ?? ()
 #21 0x804aaa1 in ?? ()
 #22 0x804ab5a in ?? ()
 #23 0x804ab5a in ?? ()
 #24 0x804ab5a in ?? ()
 #25 0x804add3 in ?? ()
 #26 0x804ab81 in ?? ()
 #27 0x804ab5a in ?? ()
 #28 0x804aa3d in ?? ()
 #29 0x804aa3d in ?? ()
 #30 0x804aa3d in ?? ()
 #31 0x804aa3d in ?? ()
 #32 0x804aa3d in ?? ()
 #33 0x804aa3d in ?? ()
 #34 0x804aa3d in ?? ()
 #35 0x804aa3d in ?? ()
 #36 0x804aa3d in ?? ()
 #37 0x804aa3d in ?? ()
 #38 0x804aa3d in ?? ()
 #39 0x804aa3d in ?? ()
 #40 0x804aa3d in ?? ()
 #41 0x804ab5a in ?? ()
 #42 0x804ab5a in ?? ()
 #43 0x804aeb7 in ?? ()
 #44 0x804ab8e in ?? ()
 #45 0x804ab5a in ?? ()
 #46 0x804aa3d in ?? ()
 #47 0x804aa3d in ?? ()
 #48 0x804aa3d in ?? ()
 #49 0x804aa3d in ?? ()
 #50 0x804aeb7 in ?? ()
 #51 0x804ab8e in ?? ()
 #52 0x804ab5a in ?? ()
 #53 0x804aa3d in ?? ()
 #54 0x804aa3d in ?? ()
 #55 0x804aa3d in ?? ()
 #56 0x804ab5a in ?? ()
 #57 0x805234a in ?? ()
 #58 0x80522b6 in ?? ()
 #59 0x8048135 in ?? ()
 
 ---------end gdb with bt---
 #0  dumpsys () at ../../kern/kern_shutdown.c:487
 #1  0xc015d05f in boot (howto=256) at ../../kern/kern_shutdown.c:316
 #2  0xc015d4b8 in poweroff_wait (junk=0xc02efcd9, howto=-1070663761)
     at ../../kern/kern_shutdown.c:595
 #3  0xc02a6dcc in trap_fatal (frame=0xc94bede8, eva=2262338520)
     at ../../i386/i386/trap.c:974
 #4  0xc02a6a5d in trap_pfault (frame=0xc94bede8, usermode=0, eva=2262338520)
     at ../../i386/i386/trap.c:867
 #5  0xc02a65fb in trap (frame={tf_fs = 24, tf_es = 16, tf_ds = 16, 
       tf_edi = 135008256, tf_esi = -1067937824, tf_ebp = -917770696, 
       tf_isp = -917770732, tf_ebx = -918626900, tf_edx = -1067427532, 
       tf_ecx = 1, tf_eax = -2032628776, tf_trapno = 12, tf_err = 2, 
       tf_eip = -1070976588, tf_cs = 8, tf_eflags = 66118, tf_esp = 135008256, 
       tf_ss = -1068428804}) at ../../i386/i386/trap.c:466
 #6  0xc02a31b4 in pmap_insert_entry (pmap=0xc93eddac, va=135008256, 
     mpte=0xc05111fc, m=0xc0588fe0) at ../../i386/i386/pmap.c:1641
 #7  0xc02a428c in pmap_copy (dst_pmap=0xc93eddac, src_pmap=0xc93edfec, 
     dst_addr=135008256, len=24576, src_addr=135008256)
     at ../../i386/i386/pmap.c:2692
 #8  0xc023f803 in vm_map_copy_entry (src_map=0xc93edf80, dst_map=0xc93edd40, 
     src_entry=0xc9440000, dst_entry=0xc944d6f0) at ../../vm/vm_map.c:2158
 #9  0xc023fa0b in vmspace_fork (vm1=0xc93edf80) at ../../vm/vm_map.c:2276
 #10 0xc023ca72 in vm_fork (p1=0xc9384ee0, p2=0xc9384a00, flags=20)
 ---Type <return> to continue, or q <return> to quit--- 
     at ../../vm/vm_glue.c:232
 #11 0xc0156593 in fork1 (p1=0xc9384ee0, flags=20, procp=0xc94bef20)
     at ../../kern/kern_fork.c:488
 #12 0xc0155d4a in fork (p=0xc9384ee0, uap=0xc94bef80)
     at ../../kern/kern_fork.c:100
 #13 0xc02a7119 in syscall2 (frame={tf_fs = 47, tf_es = 47, tf_ds = 47, 
       tf_edi = 135021568, tf_esi = 135271264, tf_ebp = -1077941928, 
       tf_isp = -917770284, tf_ebx = 0, tf_edx = 135271264, tf_ecx = 3, 
       tf_eax = 2, tf_trapno = 12, tf_err = 2, tf_eip = 134671020, tf_cs = 31, 
       tf_eflags = 514, tf_esp = -1077941972, tf_ss = 47})
     at ../../i386/i386/trap.c:1175
 #14 0xc0291bfb in Xint0x80_syscall ()
 #15 0x804af27 in ?? ()
 #16 0x804ab0a in ?? ()
 #17 0x804a9b7 in ?? ()
 <line 17 seems to repeat with the hex number incremented by a given qty>
 ---------gdb with where----
 ---------end gdb where-----
 ----- Original Message -----
 From: Nate Lawson <nate@root.org>
 Date: Fri, 16 Aug 2002 12:29:24 -0700 (PDT)
 To: K Anderson <msmouse@kittymail.com>
 Subject: Re: kern/41402: kernal panics
 
 
 > If you have kernel.debug then do gdb -k kernel.debug vmcore.0 and then
 > bt.  This will get symbols from the debug kernel instead of the stripped
 > kernel.  That's all you have to do.
 > 
 > -Nate
 > 
 > 
 > 
 
 -- 
 _______________________________________________
 Get your free email from www.kittymail.com
 
 Powered by Outblaze
 

From: Nate Lawson <nate@root.org>
To: freebsd-gnats-submit@freebsd.org
Cc:  
Subject: Re: kern/41402: kernal panics (fwd)
Date: Fri, 11 Oct 2002 18:38:16 -0700 (PDT)

 Date: Sat, 17 Aug 2002 00:12:50 -0800
 From: K Anderson <msmouse@kittymail.com>
 To: nate@root.org
 Subject: Re: kern/41402: kernal panics
 
 Hmmm, I tried that and was getting no results. Even less than what I sent you previously. So what I did, since mucking a few things up, was make a new debug kernel with matching vmcores and such. I think that the vmcore got off some how as I was getting rather weird messages when I tried various things when something didn't look right.
 
 If I get any more panics and it looks like they are different I'll send them off to you.
 
 Hope that helps.
 ----------Reason for panic-----------
 SMP 2 cpus
 IdlePTD at phsyical address 0x003e4000
 initial pcb at physical address 0x00336800
 panicstr: page fault
 panic messages:
 ---
 Fatal trap 12: page fault while in kernel mode
 mp_lock = 00000002; cpuid = 0; lapic.id = 00000000
 fault virtual address   = 0x86d88bd8
 fault code              = supervisor write, page not present
 instruction pointer     = 0x8:0xc02a31b4
 stack pointer           = 0x10:0xc94bee28
 frame pointer           = 0x10:0xc94bee38
 code segment            = base 0x0, limit 0xfffff, type 0x1b
                         = DPL 0, pres 1, def32 1, gran 1
 processor eflags        = interrupt enabled, resume, IOPL = 0
 current process         = 4273 (sh)
 interrupt mask          = net tty bio cam  <- SMP: XXX
 trap number             = 12
 panic: page fault
 mp_lock = 00000002; cpuid = 0; lapic.id = 00000000
 boot() called on cpu#0
 
 syncing disks... 53 4 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 
 0xc3052cec 1: dev:#ad/0x20006, flags:01011024, blkno:2969280, lblkno:0
 0xc3033d84 2: dev:#ad/0x20006, flags:01011024, blkno:2978404, lblkno:0
 0xc3031e64 3: dev:#ad/0x20006, flags:01011024, blkno:3017332, lblkno:0
 giving up on 3 buffers
 Uptime: 30m45s
 
 dumping to dev #ad/0x20001, offset 165952
 dump ata0: resetting devices .. done
 ad0: timeout waiting for DRQ - resetting
 ata0: resetting devices .. done
 96 95 94 93 92 91 90 89 88 87 86 85 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70
  69 68 67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 4
 3 42 41 40 [CTRL-C to abort] 39 38 [CTRL-C to abort] [CTRL-C to abort] [CTRL-C t
 o abort] 37 [CTRL-C to abort] 36 [CTRL-C to abort] 35 34 [CTRL-C to abort] 33 [C
 TRL-C to abort] 32 [CTRL-C to abort] 31 [CTRL-C to abort] 30 29 28 27 26 25 24 2
 3 22 21 20 19 18 17 16 15 14 13 12 [CTRL-C to abort] [CTRL-C to abort] [CTRL-C t
 o abort] 11 10 9 8 7 6 [CTRL-C to abort] [CTRL-C to abort] [CTRL-C to abort] 5 4
  3 2 1 
 ---
 #0  dumpsys () at ../../kern/kern_shutdown.c:487
 487             if (dumping++) {
 
 --------End panic---------
 
 ----------gbd with bt------
 #0  dumpsys () at ../../kern/kern_shutdown.c:487
 #1  0xc015d05f in boot (howto=256) at ../../kern/kern_shutdown.c:316
 #2  0xc015d4b8 in poweroff_wait (junk=0xc02efcd9, howto=-1070663761)
     at ../../kern/kern_shutdown.c:595
 #3  0xc02a6dcc in trap_fatal (frame=0xc94bede8, eva=2262338520)
     at ../../i386/i386/trap.c:974
 #4  0xc02a6a5d in trap_pfault (frame=0xc94bede8, usermode=0, eva=2262338520)
     at ../../i386/i386/trap.c:867
 #5  0xc02a65fb in trap (frame={tf_fs = 24, tf_es = 16, tf_ds = 16, 
       tf_edi = 135008256, tf_esi = -1067937824, tf_ebp = -917770696, 
       tf_isp = -917770732, tf_ebx = -918626900, tf_edx = -1067427532, 
       tf_ecx = 1, tf_eax = -2032628776, tf_trapno = 12, tf_err = 2, 
       tf_eip = -1070976588, tf_cs = 8, tf_eflags = 66118, tf_esp = 135008256, 
       tf_ss = -1068428804}) at ../../i386/i386/trap.c:466
 #6  0xc02a31b4 in pmap_insert_entry (pmap=0xc93eddac, va=135008256, 
     mpte=0xc05111fc, m=0xc0588fe0) at ../../i386/i386/pmap.c:1641
 #7  0xc02a428c in pmap_copy (dst_pmap=0xc93eddac, src_pmap=0xc93edfec, 
     dst_addr=135008256, len=24576, src_addr=135008256)
     at ../../i386/i386/pmap.c:2692
 #8  0xc023f803 in vm_map_copy_entry (src_map=0xc93edf80, dst_map=0xc93edd40, 
     src_entry=0xc9440000, dst_entry=0xc944d6f0) at ../../vm/vm_map.c:2158
 #9  0xc023fa0b in vmspace_fork (vm1=0xc93edf80) at ../../vm/vm_map.c:2276
 #10 0xc023ca72 in vm_fork (p1=0xc9384ee0, p2=0xc9384a00, flags=20)
     at ../../vm/vm_glue.c:232
 #11 0xc0156593 in fork1 (p1=0xc9384ee0, flags=20, procp=0xc94bef20)
     at ../../kern/kern_fork.c:488
 #12 0xc0155d4a in fork (p=0xc9384ee0, uap=0xc94bef80)
     at ../../kern/kern_fork.c:100
 #13 0xc02a7119 in syscall2 (frame={tf_fs = 47, tf_es = 47, tf_ds = 47, 
       tf_edi = 135021568, tf_esi = 135271264, tf_ebp = -1077941928, 
       tf_isp = -917770284, tf_ebx = 0, tf_edx = 135271264, tf_ecx = 3, 
       tf_eax = 2, tf_trapno = 12, tf_err = 2, tf_eip = 134671020, tf_cs = 31, 
       tf_eflags = 514, tf_esp = -1077941972, tf_ss = 47})
     at ../../i386/i386/trap.c:1175
 #14 0xc0291bfb in Xint0x80_syscall ()
 #15 0x804af27 in ?? ()
 #16 0x804ab0a in ?? ()
 #17 0x804a9b7 in ?? ()
 #18 0x804a974 in ?? ()
 #19 0x804bb87 in ?? ()
 #20 0x804ac00 in ?? ()
 #21 0x804aaa1 in ?? ()
 #22 0x804ab5a in ?? ()
 #23 0x804ab5a in ?? ()
 #24 0x804ab5a in ?? ()
 #25 0x804add3 in ?? ()
 #26 0x804ab81 in ?? ()
 #27 0x804ab5a in ?? ()
 #28 0x804aa3d in ?? ()
 #29 0x804aa3d in ?? ()
 #30 0x804aa3d in ?? ()
 #31 0x804aa3d in ?? ()
 #32 0x804aa3d in ?? ()
 #33 0x804aa3d in ?? ()
 #34 0x804aa3d in ?? ()
 #35 0x804aa3d in ?? ()
 #36 0x804aa3d in ?? ()
 #37 0x804aa3d in ?? ()
 #38 0x804aa3d in ?? ()
 #39 0x804aa3d in ?? ()
 #40 0x804aa3d in ?? ()
 #41 0x804ab5a in ?? ()
 #42 0x804ab5a in ?? ()
 #43 0x804aeb7 in ?? ()
 #44 0x804ab8e in ?? ()
 #45 0x804ab5a in ?? ()
 #46 0x804aa3d in ?? ()
 #47 0x804aa3d in ?? ()
 #48 0x804aa3d in ?? ()
 #49 0x804aa3d in ?? ()
 #50 0x804aeb7 in ?? ()
 #51 0x804ab8e in ?? ()
 #52 0x804ab5a in ?? ()
 #53 0x804aa3d in ?? ()
 #54 0x804aa3d in ?? ()
 #55 0x804aa3d in ?? ()
 #56 0x804ab5a in ?? ()
 #57 0x805234a in ?? ()
 #58 0x80522b6 in ?? ()
 #59 0x8048135 in ?? ()
 
 ---------end gdb with bt---
 #0  dumpsys () at ../../kern/kern_shutdown.c:487
 #1  0xc015d05f in boot (howto=256) at ../../kern/kern_shutdown.c:316
 #2  0xc015d4b8 in poweroff_wait (junk=0xc02efcd9, howto=-1070663761)
     at ../../kern/kern_shutdown.c:595
 #3  0xc02a6dcc in trap_fatal (frame=0xc94bede8, eva=2262338520)
     at ../../i386/i386/trap.c:974
 #4  0xc02a6a5d in trap_pfault (frame=0xc94bede8, usermode=0, eva=2262338520)
     at ../../i386/i386/trap.c:867
 #5  0xc02a65fb in trap (frame={tf_fs = 24, tf_es = 16, tf_ds = 16, 
       tf_edi = 135008256, tf_esi = -1067937824, tf_ebp = -917770696, 
       tf_isp = -917770732, tf_ebx = -918626900, tf_edx = -1067427532, 
       tf_ecx = 1, tf_eax = -2032628776, tf_trapno = 12, tf_err = 2, 
       tf_eip = -1070976588, tf_cs = 8, tf_eflags = 66118, tf_esp = 135008256, 
       tf_ss = -1068428804}) at ../../i386/i386/trap.c:466
 #6  0xc02a31b4 in pmap_insert_entry (pmap=0xc93eddac, va=135008256, 
     mpte=0xc05111fc, m=0xc0588fe0) at ../../i386/i386/pmap.c:1641
 #7  0xc02a428c in pmap_copy (dst_pmap=0xc93eddac, src_pmap=0xc93edfec, 
     dst_addr=135008256, len=24576, src_addr=135008256)
     at ../../i386/i386/pmap.c:2692
 #8  0xc023f803 in vm_map_copy_entry (src_map=0xc93edf80, dst_map=0xc93edd40, 
     src_entry=0xc9440000, dst_entry=0xc944d6f0) at ../../vm/vm_map.c:2158
 #9  0xc023fa0b in vmspace_fork (vm1=0xc93edf80) at ../../vm/vm_map.c:2276
 #10 0xc023ca72 in vm_fork (p1=0xc9384ee0, p2=0xc9384a00, flags=20)
 ---Type <return> to continue, or q <return> to quit--- 
     at ../../vm/vm_glue.c:232
 #11 0xc0156593 in fork1 (p1=0xc9384ee0, flags=20, procp=0xc94bef20)
     at ../../kern/kern_fork.c:488
 #12 0xc0155d4a in fork (p=0xc9384ee0, uap=0xc94bef80)
     at ../../kern/kern_fork.c:100
 #13 0xc02a7119 in syscall2 (frame={tf_fs = 47, tf_es = 47, tf_ds = 47, 
       tf_edi = 135021568, tf_esi = 135271264, tf_ebp = -1077941928, 
       tf_isp = -917770284, tf_ebx = 0, tf_edx = 135271264, tf_ecx = 3, 
       tf_eax = 2, tf_trapno = 12, tf_err = 2, tf_eip = 134671020, tf_cs = 31, 
       tf_eflags = 514, tf_esp = -1077941972, tf_ss = 47})
     at ../../i386/i386/trap.c:1175
 #14 0xc0291bfb in Xint0x80_syscall ()
 #15 0x804af27 in ?? ()
 #16 0x804ab0a in ?? ()
 #17 0x804a9b7 in ?? ()
 <line 17 seems to repeat with the hex number incremented by a given qty>
 ---------gdb with where----
 ---------end gdb where-----
 ----- Original Message -----
 From: Nate Lawson <nate@root.org>
 Date: Fri, 16 Aug 2002 12:29:24 -0700 (PDT)
 To: K Anderson <msmouse@kittymail.com>
 Subject: Re: kern/41402: kernal panics
 
 
 > If you have kernel.debug then do gdb -k kernel.debug vmcore.0 and then
 > bt.  This will get symbols from the debug kernel instead of the stripped
 > kernel.  That's all you have to do.
 > 
 > -Nate
 > 
 > 
 > 
 
 -- 
 _______________________________________________
 Get your free email from www.kittymail.com
 
 Powered by Outblaze
 
State-Changed-From-To: open->feedback 
State-Changed-By: kmacy 
State-Changed-When: Thu Nov 15 22:39:26 UTC 2007 
State-Changed-Why:  

Followed up with Kris to see if it still applies. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=41402 
State-Changed-From-To: feedback->closed 
State-Changed-By: linimon 
State-Changed-When: Sat Mar 1 20:06:32 UTC 2008 
State-Changed-Why:  
Feedback timeout (> 3 months). 

http://www.freebsd.org/cgi/query-pr.cgi?pr=41402 
>Unformatted:
