[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

kernel/3758: panic: uvm_fault_unwire_locked: unwiring non-wired memory when ntpd (4.2.0) exits.

>Number:         3758
>Category:       kernel
>Synopsis:       panic: uvm_fault_unwire_locked: unwiring non-wired memory when ntpd (4.2.0) exits.
>Confidential:   yes
>Severity:       non-critical
>Priority:       medium
>Responsible:    bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Tue Apr 27 07:50:01 GMT 2004
>Closed-Date:
>Last-Modified:
>Originator:     Darren Tucker <dtucker@zip.com.au>
>Release:        3.5
>Organization:
net
>Environment:
	System      : OpenBSD 3.5
	Architecture: OpenBSD.i386
	Machine     : i386
>Description:

I fiddled ntp-4.2.0 to build on 3.5-stable.  I got it to build but
I'm seeing a 100% repeatable panic when ntpd exits.  Initially this
was with a self-built 3.5-stable kernel, but it also occurs with a
-current snapshot kernel from ftp.

I tried reducing the test case it to a minimum, I ended up just
bringing the system single-user and running ntpd, it still panicked.

boot> boot -s
booting hd0a:/bsd: 4713076+843932 [58+215536+192923]=0x5b0874
entry point at 0x100120

[ using 408932 bytes of bsd ELF symbol table ]
Copyright (c) 1982, 1986, 1989, 1991, 1993
        The Regents of the University of California.  All rights reserved.
Copyright (c) 1995-2004 OpenBSD. All rights reserved.  http://www.OpenBSD.org

OpenBSD 3.5-current (GENERIC) #45: Tue Apr 20 15:13:55 MDT 2004
    deraadt@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel Pentium II ("GenuineIntel" 686-class, 512KB L2 cache) 398 MHz
cpu0: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR
real mem  = 66695168 (65132K)
avail mem = 53596160 (52340K)
using 839 buffers containing 3436544 bytes (3356K) of memory
mainbus0 (root)
bios0 at mainbus0: AT/286+(e4) BIOS, date 06/30/98, BIOS32 rev. 0 @ 0xec700
pcibios0 at bios0: rev. 2.1 @ 0xec700/0x3900
pcibios0: PCI IRQ Routing Table rev. 1.0 @ 0xf7440/112 (5 entries)
pcibios0: PCI Interrupt Router at 000:20:0 ("Intel 82371AB PIIX4 ISA" rev 0x00)
pcibios0: PCI bus #1 is the last bus
bios0: ROM list: 0xc0000/0x8000 0xe0000/0x8000!
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 "Intel 82443BX AGP" rev 0x02
ppb0 at pci0 dev 1 function 0 "Intel 82443BX AGP" rev 0x02
pci1 at ppb0 bus 1
vga1 at pci1 dev 0 function 0 "ATI Rage Pro" rev 0x5c
wsdisplay0 at vga1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
fxp0 at pci0 dev 10 function 0 "Intel 82557" rev 0x05: irq 11, address 00:08:c7:57:87:ba
inphy0 at fxp0 phy 1: i82555 10/100 media interface, rev. 0
eso0 at pci0 dev 13 function 0 "ESS SOLO-1 AudioDrive" rev 0x01: ES1946, irq 11
eso0: mapping Audio 1 DMA using VC I/O space at 0x2060
audio0 at eso0
opl0 at eso0: model OPL3
midi0 at opl0: <ESO Yamaha OPL3>
pcib0 at pci0 dev 20 function 0 "Intel 82371AB PIIX4 ISA" rev 0x02
pciide0 at pci0 dev 20 function 1 "Intel 82371AB IDE" rev 0x01: DMA, channel 0 wired to compatibility, channel 1 wired to compatibility
wd0 at pciide0 channel 0 drive 0: <WDC WD300BB-00AUA1>
wd0: 16-sector PIO, LBA, 28629MB, 58633344 sectors
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 2
pciide0: channel 1 disabled (no drives)
uhci0 at pci0 dev 20 function 2 "Intel 82371AB USB" rev 0x01: irq 11
usb0 at uhci0: USB revision 1.0
uhub0 at usb0
uhub0: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
"Intel 82371AB Power Mgmt" rev 0x02 at pci0 dev 20 function 3 not configured
isa0 at pcib0
isadma0 at isa0
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
kbc: aux echo error 2
kbc: cmd word write error
sb0 at isa0 port 0x220/24 irq 5 drq 1: dsp v3.01
midi1 at sb0: <SB MIDI UART>
audio1 at sb0
opl1 at sb0: model OPL3
midi2 at opl1: <SB Yamaha OPL3>
pcppi0 at isa0 port 0x61
midi3 at pcppi0: <PC speaker>
sysbeep0 at pcppi0
lpt0 at isa0 port 0x378/4 irq 7
npx0 at isa0 port 0xf0/16: using exception 16
pccom0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
pccom0: console
pccom1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo
fdc0 at isa0 port 0x3f0/6 irq 6 drq 2
fd0 at fdc0 drive 0: 1.44MB 80 cyl, 2 head, 18 sec
pcic0 at isa0 port 0x3e0/2 iomem 0xd0000/65536
pcic0 controller 0: <Vadem VG469> has sockets A and B
pcmcia0 at pcic0 controller 0 socket 0
wi0 at pcmcia0 function 0 "Lucent Technologies, WaveLAN/IEEE, Version 01.01" port 0x400/64: irq 9
wi0: Firmware 8.72 variant 1, address 00:02:2d:8f:9a:70
pcmcia1 at pcic0 controller 0 socket 1
pcic0: irq 10, polling enabled
biomask 4840 netmask 4a40 ttymask 4ec2
pctr: 686-class user-level performance counters enabled
mtrr: Pentium Pro MTRR support
dkcsum: wd0 matched BIOS disk 80
root on wd0a
rootdev=0x0 rrootdev=0x300 rawdev=0x302
Enter pathname of shell or RETURN for sh:
# mount /usr
# cd /root/ntp/ntp-4.2.0
# ntpd/ntpd
# panic: uvm_fault_unwire_locked: unwiring non-wired memory
Stopped at      Debugger+0x4:   leave
RUN AT LEAST 'trace' AND 'ps' AND INCLUDE OUTPUT WHEN REPORTING THIS PANIC!
DO NOT EVEN BOTHER REPORTING THIS WITHOUT INCLUDING THAT INFORMATION!
ddb> trace
Debugger(3c0e1000,d6e7573c,d6e75c0c,3c0e1000,d6e7573c) at Debugger+0x4
panic(d04a6060,3c0e1000,d6e54e8c,d02c4f0f,0) at panic+0x87
uvm_fault_unwire_locked(d6e4e27c,3c0e1000,3c0e2000,2000) at uvm_fault_unwire_locked+0xb9
uvm_unmap_remove(d6e4e27c,0,cfbfe000,d6e54f10) at uvm_unmap_remove+0x110
uvmspace_free(d6e4e27c,13a,d6e54f44,d01d1256,d6e72284) at uvmspace_free+0xc1
uvm_exit(d6e72284,4,d6e54f84,d01c6e01,d6e72284,14,0,0) at uvm_exit+0x1c
reaper(0,0,d06b3e88,d01004c3,d6e4b280) at reaper+0x5e
start_reaper(d6e4b280) at start_reaper+0xb
Bad frame pointer: 0xd06b3e88
ddb> ps
   PID   PPID   PGRP    UID  S       FLAGS  WAIT       COMMAND
  9146      1   9146      0  3      0x4086  ttyin      sh
    12      0      0      0  3    0x100204  pcicev     pcic0,0,1
    11      0      0      0  3    0x100204  pcicev     pcic0,0,0
    10      0      0      0  3    0x100204  usbtsk     usbtask
     9      0      0      0  3    0x100204  usbevt     usb0
     8      0      0      0  3    0x100204  kmalloc    kmthread
     7      0      0      0  3    0x100204  crypto_wa  crypto
     6      0      0      0  3    0x100204  aiodoned   aiodoned
     5      0      0      0  3    0x100204  syncer     update
     4      0      0      0  3    0x100204  cleaner    cleaner
*    3      0      0      0  2    0x100204             reaper
     2      0      0      0  3    0x100204  pgdaemon   pagedaemon
     1      0      1      0  2      0x4084             init
     0     -1      0      0  3     0x80204  scheduler  swapper
 12075      1  12075      0  6      0x2004             ntpd
ddb>

>How-To-Repeat:
	Download+unpack ftp://ftp.udel.edu/pub/ntp/ntp4/ntp-4.2.0.tar.gz
	Apply http://www.zip.com.au/~dtucker/patches/ntp-4.2.0-openbsd.patch
	cd ntp-4.2.0 && ./configure && make
	Run ntpd/ntpd
>Fix:
	Don't do that :-).  Use older ntpd.


>Release-Note:
>Audit-Trail:
>Unformatted: