From owner-freebsd-stable@FreeBSD.ORG Tue Apr 12 16:04:38 2005 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 8890D16A4CE for ; Tue, 12 Apr 2005 16:04:38 +0000 (GMT) Received: from carver.gumbysoft.com (carver.gumbysoft.com [66.220.23.50]) by mx1.FreeBSD.org (Postfix) with ESMTP id 6B93243D54 for ; Tue, 12 Apr 2005 16:04:38 +0000 (GMT) (envelope-from dwhite@gumbysoft.com) Received: by carver.gumbysoft.com (Postfix, from userid 1000) id 5B07672DE4; Tue, 12 Apr 2005 09:04:38 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by carver.gumbysoft.com (Postfix) with ESMTP id 561C972DDF; Tue, 12 Apr 2005 09:04:38 -0700 (PDT) Date: Tue, 12 Apr 2005 09:04:38 -0700 (PDT) From: Doug White To: Kirill Ponomarew In-Reply-To: <20050410070638.GB38785@voodoo.oberon.net> Message-ID: <20050412090310.Q2178@carver.gumbysoft.com> References: <20050406084615.GF15165@voodoo.oberon.net> <20050410070638.GB38785@voodoo.oberon.net> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII cc: freebsd-stable@FreeBSD.org Subject: Re: 4.11R panics X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Apr 2005 16:04:38 -0000 On Sun, 10 Apr 2005, Kirill Ponomarew wrote: > On Fri, Apr 08, 2005 at 10:14:17AM -0700, Doug White wrote: > > > Fatal trap 12: page fault while in kernel mode > > > fault virtual address = 0x20202020 > > > > Hm, something ran into a bunch of ASCII spaces.. > > > > Can you jump to frame #6 and print *kbp? It appears the kernel malloc > > bucket list is corrupted, so I'm curious just how badly that struct is > > spammed. > > #0 dumpsys () at /usr/src/sys/kern/kern_shutdown.c:487 > 487 if (dumping++) { > (kgdb) up 6 > #6 0xc0193533 in malloc (size=324, type=0xc030d780, flags=9) > at /usr/src/sys/kern/kern_malloc.c:243 > 243 va = kbp->kb_next; > (kgdb) print *kbp > $1 = {kb_next = 0x20202020
, > kb_last = 0xcc8fa000 "", kb_calls = 5704, kb_total = 448, kb_elmpercl = 8, > kb_totalfree = 13, kb_highwat = 40, kb_couldfree = 0} Not very, apparently. Dunno what to say ... I'd guess something coughed up a bad address to a DMA op or something and it just happened to land there. If you can reproduce this with any sort of regularity there might be a bug, although that seems unlikely since that code hasn't changed in years and this is the first such report I've seen of this :) -- Doug White | FreeBSD: The Power to Serve dwhite@gumbysoft.com | www.FreeBSD.org