panic in em, net, uma

2010-11-27 Thread Pawel Worach
FreeBSD vmware guest 8.1-RELEASE i386 PAE with open-vm-tools-nox11-313025_1 
installed.

Fatal trap 12: page fault while in kernel mode
cpuid = 0; apic id = 00
fault virtual address   = 0xc9aaea44
fault code  = supervisor read, page not present
instruction pointer = 0x20:0xc080d29a
stack pointer   = 0x28:0xc8d61aa0
frame pointer   = 0x28:0xc8d61ad0
code segment= base 0x0, limit 0xf, type 0x1b
= DPL 0, pres 1, def32 1, gran 1
processor eflags= interrupt enabled, resume, IOPL = 0
current process = 0 (em0 taskq)
trap number = 12
panic: page fault
cpuid = 0
Uptime: 1d1h49m3s
Physical memory: 4082 MB
Dumping 318 MB: 303 287 271 255 239 223 207 191 175 159 143 127 111 95 79 63 47 
31 15

(kgdb) bt
#0  doadump () at pcpu.h:246
#1  0xc05b4d07 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:416
#2  0xc05b4f69 in panic (fmt=Variable "fmt" is not available.
) at /usr/src/sys/kern/kern_shutdown.c:590
#3  0xc0879b8c in trap_fatal (frame=0xc8d61a60, eva=3383421508)
at /usr/src/sys/i386/i386/trap.c:938
#4  0xc087a4b0 in trap (frame=0xc8d61a60) at /usr/src/sys/i386/i386/trap.c:328
#5  0xc085ae1b in calltrap () at /usr/src/sys/i386/i386/exception.s:165
#6  0xc080d29a in uma_zfree_arg (zone=0xc127a000, item=0xc9b63a00, udata=0x0)
at /usr/src/sys/vm/uma_core.c:2559
#7  0xc060ae33 in mb_free_ext (m=0xc9b63a00) at uma.h:333
#8  0xc060b4c1 in m_freem (mb=0x0) at mbuf.h:562
#9  0xc06ad1c1 in arpintr (m=0xc9b63a00) at /usr/src/sys/netinet/if_ether.c:826
#10 0xc066c2a9 in netisr_dispatch_src (proto=7, source=0, m=0xc9b63a00)
at /usr/src/sys/net/netisr.c:917
#11 0xc066c540 in netisr_dispatch (proto=7, m=0xc9b63a00)
at /usr/src/sys/net/netisr.c:1004
#12 0xc06624b1 in ether_demux (ifp=0xc90bc400, m=0xc9b63a00)
at /usr/src/sys/net/if_ethersubr.c:901
#13 0xc0662a03 in ether_input (ifp=0xc90bc400, m=0xc9b63a00)
at /usr/src/sys/net/if_ethersubr.c:760
#14 0xc03a7e3a in lem_handle_rxtx (context=0xc90d7000, pending=1)
at /usr/src/sys/dev/e1000/if_lem.c:3616
#15 0xc05eec02 in taskqueue_run (queue=0xc90af3c0)
at /usr/src/sys/kern/subr_taskqueue.c:239
#16 0xc05eee0d in taskqueue_thread_loop (arg=0xc90db5a8)
at /usr/src/sys/kern/subr_taskqueue.c:360
#17 0xc058a061 in fork_exit (callout=0xc05eed50 , 
arg=0xc90db5a8, frame=0xc8d61d38) at /usr/src/sys/kern/kern_fork.c:844
#18 0xc085ae90 in fork_trampoline () at /usr/src/sys/i386/i386/exception.s:270

-- 
Pawel

___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "freebsd-stable-unsubscr...@freebsd.org"


panic: page fault in kern_kevent

2006-07-16 Thread Pawel Worach

Under moderate kqueue load I caught the following:

Fatal trap 12: page fault while in kernel mode
fault virtual address   = 0x0
fault code  = supervisor read, page not present
instruction pointer = 0x20:0x0
stack pointer   = 0x28:0xe745db78
frame pointer   = 0x28:0xe745dbb8
code segment= base 0x0, limit 0xf, type 0x1b
= DPL 0, pres 1, def32 1, gran 1
processor eflags= interrupt enabled, resume, IOPL = 0
current process = 582 (squid)
trap number = 12
panic: page fault
KDB: stack backtrace:
kdb_backtrace(c065b33b,c06a4780,c065344e,e745da80,100) at kdb_backtrace+0x2e
panic(c065344e,c066df69,c49c0dd0,1,1) at panic+0xb7
trap_fatal(e745db38,0,1,0,c05239e2) at trap_fatal+0x33e
trap_pfault(e745db38,0,0,e745db38,0) at trap_pfault+0x242
trap(c05e0008,c7310028,28,0,4) at trap+0x350
calltrap() at calltrap+0x5
--- trap 0xc, eip = 0, esp = 0xe745db78, ebp = 0xe745dbb8 ---
MAXCPU(c4b20500,e745dbe8,c65c3300,1,c0c38000) at 0
kern_kevent(c65c3300,3,5,80,e745dcbc) at kern_kevent+0xf8
kevent(c65c3300,e745dd04,18,16,c65c3300) at kevent+0x7a
syscall(821003b,3b,822003b,48106cf0,bfbfeec8) at syscall+0x380
Xint0x80_syscall() at Xint0x80_syscall+0x1f
--- syscall (363, FreeBSD ELF32, kevent), eip = 0x4821ccfb, esp = 
0xbfbfedfc, ebp = 0xbfbfee48 ---

Uptime: 3d15h16m7s
Dumping 1023 MB (2 chunks)
  chunk 0: 1MB (159 pages) ... ok
  chunk 1: 1023MB (261884 pages) 1008 992 976 960 944 928 912 896 880 
864 848 832 816 800 784 768 752 736 720 704 688 672 656 640 624 608 592 
576 560 544 528 512 496 480 464 448 432 416 400 384 368 352 336 320 304 
288 272 256 240 224 208 192 176 160 144 128 112 96 80 64 48 32 16


(kgdb) bt
#0  doadump () at pcpu.h:165
#1  0xc04c261c in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:409
#2  0xc04c299d in panic (fmt=0xc065344e "%s")
at /usr/src/sys/kern/kern_shutdown.c:565
#3  0xc0637f7e in trap_fatal (frame=0xe745db38, eva=0)
at /usr/src/sys/i386/i386/trap.c:836
#4  0xc0637c12 in trap_pfault (frame=0xe745db38, usermode=0, eva=0)
at /usr/src/sys/i386/i386/trap.c:744
#5  0xc0637780 in trap (frame=
  {tf_fs = -1067581432, tf_es = -953090008, tf_ds = 40, tf_edi = 0, 
tf_esi = 4, tf_ebp = -414852168, tf_isp = -414852252, tf_ebx = 4, tf_edx 
= -953052640, tf_ecx = -1066925280, tf_eax = -1066924800, tf_trapno = 
12, tf_err = 0, tf_eip = 0, tf_cs = 32, tf_eflags = 66118, tf_esp = 
-1068903001, tf_ss = -953052640})

at /usr/src/sys/i386/i386/trap.c:434
#6  0xc062498a in calltrap () at /usr/src/sys/i386/i386/exception.s:139
#7  0x in ?? ()
Previous frame inner to this frame (corrupt stack?)
(kgdb) l *kern_kevent+0xf8
0xc049c6d8 is in kern_kevent (/usr/src/sys/kern/kern_event.c:637).
632 goto done;
633 changes = keva;
634 for (i = 0; i < n; i++) {
635 kevp = &changes[i];
636 kevp->flags &= ~EV_SYSFLAGS;
637 error = kqueue_register(kq, kevp, td, 1);
638 if (error) {
639 if (nevents != 0) {
640 kevp->flags = EV_ERROR;
641 kevp->data = error;

System is i386 UP running FreeBSD 6.1-STABLE #0: Sun Jul  9 01:11:16 
CEST 2006


--
Pawel
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


6.1-PRE hang with sysctl and sched_ule

2006-04-02 Thread Pawel Worach
Hi,

Got this interesting hang on a two way (two physical cpus with htt
disabled by machdep.hyperthreading_allowed) smp box during boot. Any
ideas?

Kernel config is pretty much SMP with most drivers cut and KDB, DDB
and BREAK_TO_DEBUGGER added. Sources are from this morning.
I can only reproduce this with the ULE scheduler, switching to 4BSD
makes the problem go away.

KDB: enter: Line break on console
[thread pid 27 tid 100017 ]
Stopped at  kdb_enter+0x30: leave
db> show msgbuf
msgbufp = 0xc0c3afe4
magic = 63062, size = 32740, r= 0, w = 4955, ptr = 0xc0c33000, cksum= 386982
Copyright (c) 1992-2006 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
The Regents of the University of California. All rights reserved.
FreeBSD 6.1-PRERELEASE #0: Sun Apr  2 14:40:58 CEST 2006
[EMAIL PROTECTED]:/usr/obj/usr/src/sys/PROXY-SMP
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: Intel(R) Xeon(TM) CPU 3.60GHz (3600.15-MHz 686-class CPU)
  Origin = "GenuineIntel"  Id = 0xf43  Stepping = 3
  
Features=0xbfebfbff
  Features2=0x659d>
  AMD Features=0x2000
  Hyperthreading: 2 logical CPUs
real memory  = 2147270656 (2047 MB)
avail memory = 2099769344 (2002 MB)
ACPI APIC Table: 
FreeBSD/SMP: Multiprocessor System Detected: 4 CPUs
  cpu0 (BSP): APIC ID:  0
  cpu1 (AP): APIC ID:  1
  cpu2 (AP): APIC ID:  6
  cpu3 (AP): APIC ID:  7
ioapic4  irqs 96-119 on motherboard
ioapic3  irqs 72-95 on motherboard
ioapic2  irqs 48-71 on motherboard
ioapic1  irqs 24-47 on motherboard
ioapic0  irqs 0-23 on motherboard
kbd1 at kbdmux0
npx0: [FAST]
npx0:  on motherboard
npx0: INT 16 interface
acpi0:  on motherboard
acpi_bus_number: can't get _ADR
acpi_bus_number: can't get _ADR
acpi0: Power Button (fixed)
acpi_bus_number: can't get _ADR
acpi_bus_number: can't get _ADR
Timecounter "ACPI-fast" frequency 3579545 Hz quality 1000
acpi_timer0: <24-bit timer at 3.579545MHz> port 0x588-0x58b on acpi0
cpu0:  on acpi0
acpi_perf0:  on cpu0
cpu1:  on acpi0
cpu2:  on acpi0
cpu3:  on acpi0
pcib0:  on acpi0
pci0:  on pcib0
pci0:  at device 0.1 (no driver attached)
pcib1:  at device 2.0 on pci0
pci2:  on pcib1
pcib2:  at device 0.0 on pci2
pci3:  on pcib2
pcib3:  at device 0.2 on pci2
pci4:  on pcib3
pcib4:  at device 4.0 on pci0
pci5:  on pcib4
bge0:  mem 0xdeff-0xdef
f irq 16 at device 0.0 on pci5
miibus0:  on bge0
brgphy0:  on miibus0
brgphy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseTX, 1000baseTX
-FDX, auto
bge0: Ethernet address: 00:14:5e:2a:8a:d6
pcib5:  at device 5.0 on pci0
pci6:  on pcib5
bge1:  mem 0xdcff-0xdcf
f irq 16 at device 0.0 on pci6
miibus1:  on bge1
brgphy1:  on miibus1
brgphy1:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseTX, 1000baseTX
-FDX, auto
bge1: Ethernet address: 00:14:5e:2a:8a:d7
pcib6:  at device 6.0 on pci0
pci7:  on pcib6
pcib7:  at device 0.0 on pci7
pci8:  on pcib7
ips0:  mem 0xdafff000-0xdaff irq 38 at device 14.
0 on pci8
pcib8:  at device 0.2 on pci7
pci9:  on pcib8
pci0:  at device 8.0 (no driver attached)
pci0:  at device 29.0 (no driver attached)
pci0:  at device 29.1 (no driver attached)
pci0:  at device 29.7 (no driver attached)
pcib9:  at device 30.0 on pci0
pci1:  on pcib9
pci1:  at device 6.0 (no driver attached)
isab0:  at device 31.0 on pci0
isa0:  on isab0
pci0:  at device 31.1 (no driver attached)
pci0:  at device 31.3 (no driver attached)
atkbdc0:  port 0x64,0x60 irq 1 on acpi0
atkbd0:  irq 1 on atkbdc0
atkbd: unable to set the command byte.
kbd0 at atkbd0
atkbd0: [GIANT-LOCKED]
sio0: <16550A-compatible COM port> port 0x3f8-0x3ff irq 4 flags 0x10 on acpi0
sio0: type 16550A, console
orm0:  at iomem 0xc-0xcafff,0xcb000-0xce7ff on isa0
sc0:  at flags 0x100 on isa0
sc0: VGA <16 virtual consoles, flags=0x100>
sio1: configured irq 3 not in bitmap of probed irqs 0
sio1: port may not be enabled
vga0:  at port 0x3c0-0x3df iomem 0xa-0xb on isa0
Timecounters tick every 1.000 msec
ips0: logical drives: 1
ips0: Logical Drive 0: RAID1 sectors: 143372288, state OK
ipsd0:  on ips0
ipsd0: Logical Drive  (70006MB)
SMP: AP CPU #3 Launched!
SMP: AP CPU #1 Launched!
SMP: AP CPU #2 Launched!
Trying to mount root from ufs:/dev/ipsd0s1a
<118>Loading configuration files.
<118>kernel dumps on /dev/ipsd0s1b
<118>Entropy harvesting:
<118> interrupts
<118> ethernet
<118> point_to_point
KDB: enter: Line break on console

db> bt
Tracing pid 27 tid 100017 td 0xc5fbb960
kdb_enter(c06725fd,c5fbb960,1,c5fbb960,c60adc00) at kdb_enter+0x30
siointr1(c60adc00,c04e99e2,c5fbb960,c6013624,e4db0c0c) at siointr1+0xd1
siointr(c60adc00,c06b0710,c62aa794,0,c5fbb960) at siointr+0x76
intr_execute_handlers(c5fb04b4,e4db0c4c,e4db0ca4,c0626833,35) at intr_execute_ha
ndlers+0xfa
lapic_handle_intr(35) at lapic_handle_intr+0x3b
Xapic_isr1() at Xapic_isr1+0x33
--- interrupt, eip = 0xc04c933d, esp = 0xe4db0c90, ebp = 0xe4db0ca4 ---
_mtx_lock_sleep(c06ad2c0,c5fbb960,0,0,0) at _mtx_lock_sleep+0xb4
ithread_execute_handlers(c6013624,c6090e80,0