From owner-freebsd-stable@FreeBSD.ORG Tue Jul 31 08:07:32 2007 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id EF39316A468 for ; Tue, 31 Jul 2007 08:07:32 +0000 (UTC) (envelope-from jason@wiz.biz) Received: from wx-out-0506.google.com (wx-out-0506.google.com [66.249.82.227]) by mx1.freebsd.org (Postfix) with ESMTP id BA8AD13C4B6 for ; Tue, 31 Jul 2007 08:07:32 +0000 (UTC) (envelope-from jason@wiz.biz) Received: by wx-out-0506.google.com with SMTP id i29so1472575wxd for ; Tue, 31 Jul 2007 01:07:32 -0700 (PDT) Received: by 10.70.66.18 with SMTP id o18mr11425023wxa.1185867766955; Tue, 31 Jul 2007 00:42:46 -0700 (PDT) Received: by 10.70.59.8 with HTTP; Tue, 31 Jul 2007 00:42:46 -0700 (PDT) Message-ID: <79d79bc80707310042v3ff70552vb4a13a3fee0afe4f@mail.gmail.com> Date: Tue, 31 Jul 2007 16:42:46 +0900 From: "Jason D'Ambrosio" To: freebsd-stable@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Content-Disposition: inline Subject: Dell DRAC/4 virtual floppy panics on -STABLE X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 31 Jul 2007 08:07:33 -0000 Dear FreeBSD hackers: My latest shipment of 1U Dell servers came with DRAC/4 remote management cards. The servers were installed in the datacenter, and have been running -stable for quite some time, without any trouble at all, until now... Recently I utilitzed the the DRAC card's handy capability of uploading a floppy image and had it emulate the physical media to the system. After I was finished, I disconnected from the web interface of the DRAC, which cleared the floppy image from memory. A few days later the server was rebooted and it got stuck in a panic/reboot loop... Here is the relevant dmesg: afd0: 7222034444288MB at ata2-master PIO3 ... afd0: FAILURE - TEST_UNIT_READY RESERVED asc=0x00 ascq=0x00 panic: kmem_malloc(-1059844096): kmem_map too small: 3837952 total allocated What it appears is happening is that the absence of an uploaded floppy image in the DRAC is causing it to report an insanely bogus media size to the OS. As a result, the kernel's floppy driver is attempting to allocate an obviously overflowed-integer worth of memory, which is causing the kmem_alloc() panic... Of course, after disabling the virtual media feature in the DRAC's firmware, the kernel was able to boot properly once again. Perhaps the simplest solution would be to implement a sanity check in the floppy/cdrom driver's code, or kmem_malloc() ? -- jason (at) wiz.biz wiz technologies k.k.