From owner-freebsd-stable@FreeBSD.ORG  Fri Jan 18 16:48:12 2008
Return-Path: <owner-freebsd-stable@FreeBSD.ORG>
Delivered-To: freebsd-stable@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 409CD16A418;
	Fri, 18 Jan 2008 16:48:12 +0000 (UTC)
	(envelope-from petefrench@ticketswitch.com)
Received: from angel.ticketswitch.com (angel.ticketswitch.com
	[IPv6:2002:57e0:1d4e::1])
	by mx1.freebsd.org (Postfix) with ESMTP id DFAAA13C467;
	Fri, 18 Jan 2008 16:48:11 +0000 (UTC)
	(envelope-from petefrench@ticketswitch.com)
Received: from [10.50.50.2] (helo=smaug.rattatosk)
	by angel.ticketswitch.com with esmtps (TLSv1:AES256-SHA:256)
	(Exim 4.67 (FreeBSD)) (envelope-from <petefrench@ticketswitch.com>)
	id 1JFuO3-000Eaj-CU; Fri, 18 Jan 2008 16:48:11 +0000
Received: from dilbert.rattatosk ([10.50.50.6] helo=dilbert.ticketswitch.com)
	by smaug.rattatosk with esmtp (Exim 4.67 (FreeBSD))
	(envelope-from <petefrench@ticketswitch.com>)
	id 1JFuO3-000Dcw-AW; Fri, 18 Jan 2008 16:48:11 +0000
Received: from petefrench by dilbert.ticketswitch.com with local (Exim 4.68
	(FreeBSD)) (envelope-from <petefrench@ticketswitch.com>)
	id 1JFuO2-0000PF-KE; Fri, 18 Jan 2008 16:48:10 +0000
To: jhb@freebsd.org
In-Reply-To: <200801181003.24092.jhb@freebsd.org>
Message-Id: <E1JFuO2-0000PF-KE@dilbert.ticketswitch.com>
From: Pete French <petefrench@ticketswitch.com>
Date: Fri, 18 Jan 2008 16:48:10 +0000
Cc: freebsd-stable@freebsd.org
Subject: Re: panic: vm_fault: fault on nofualt entry, addr: 81423000
X-BeenThere: freebsd-stable@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Production branch of FreeBSD source code <freebsd-stable.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>, 
	<mailto:freebsd-stable-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-stable>
List-Post: <mailto:freebsd-stable@freebsd.org>
List-Help: <mailto:freebsd-stable-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 18 Jan 2008 16:48:12 -0000

> So it appears to be dying here:
>
> (gdb) l *madt_probe+0x119
> 0xc06e7c69 is in madt_probe (/usr/src/sys/i386/acpica/madt.c:241).
> 236                     if (xsdt == NULL) {
> 237                             if (bootverbose)
> 238                                     printf("MADT: Failed to map XSDT\n");
> 239                             return (ENXIO);
> 240                     }
> 241                     count = (xsdt->Length - sizeof(ACPI_TABLE_HEADER)) /
> 242                         sizeof(UINT64);
> 243                     for (i = 0; i < count; i++)
> 244                             if (madt_probe_table(xsdt->TableOffsetEntry[i]))
> 245                                     break;
>
> where it reads 'xsdt->Length'.  xsdt was just mapped into a temporary part of
> KVA (used for kernel dumps) a few lines earlier:

O.K., that is interesting, because my source code doesnt look like thiat,
mine uses 'xsdt->Header.Length' instead of 'xsdt->Length' - is that
code above from 7.0 ?

> You can try adding some printfs to see what the values of 'rsdp->XsdtPhysicalAddress' and
> 'xsdt' after the call to madt_map_table() are.  Actually, try this perhaps:

Thanks for the patch - it didn;t help matters unfortunately, but I am
adding some printfs on xsdt itself and also rsdp->XsdtPhysicalAddress to
see what we get.

Will build a new kernel and let you know.

cheers,

-pete.