GCC 3.3 bug or hardware failure?

[Andreas Vögele <voegelas_(_at_)_gmx_(_dot_)_net>]

Hi,

Since I upgraded an old i386 notebook from an OpenBSD-current release  
built with GCC 2.95 to a release built with GCC 3.3 the system crashes  
when it swaps.  I'm not sure whether this problem exhibits a compiler  
bug or if the swap partition got corrupted on the same day.  But as  
long as the system does not swap everything works fine.  I've read  
crash(8) and looked at the error messages but I'm not sure how to  
continue. Has anyone else experienced crashes after upgrading from GCC  
2.95 to GCC 3.3?

The computer, which is a Toshiba Satellite Pro 480 with 84 MB RAM and  
two 3Com PCMCIA ethernet cards, has 170 MB of swap space.  I'm pretty  
sure that the swap space is not exhausted when the system crashes.  The  
notebook is used as a small server running Exim, DHCP, NTP, Kerberos,  
OpenLDAP and Samba.  During normal operation the system rarely requires  
swap space.  But it regularly crashes in the night when the cron jobs  
are running.

This is the output in /var/run/dmesg.boot after a system crash:

uvm_fault(0xd2dc5950, 0x0, 0, 1) -> e
fatal page fault in supervisor mode
trap type 6 code 0 eip d02f464b cs 8 eflags 10206 cr2 11c cpl 80
panic: trap type 6, code=0, pc=d02f464b
Starting stack trace...
panic(0,d2dd22a0,d7938d70,0,d2dd22a0) at panic+0x71
panic(d04ec0b4,6,0,d02f464b,d0842f04) at panic+0x71
trap() at trap+0x12e
--- trap (number 6) ---
uvm_pagelookup(d2e25434,13f000,0,d7938e98) at uvm_pagelookup+0x3f
uvm_vnp_terminate(d2e25434,13c000,0,d7938e98,d7938e90) at  
uvm_vnp_terminate+0xa9
3
uvm_fault(d2dc5950,1c13f000,0,1,e) at uvm_fault+0x2f5
trap() at trap+0x259
--- trap (number 6) ---
0x1c13f3cc:
End of stack trace.
syncing disks... 3 3 done

I've built a GENERIC kernel with debugging symbols.  Here's the gdb  
output:

(gdb) where
#0  0x00001000 in ?? ()
#1  0xd03427f0 in wdsize () at /usr/src/sys/dev/ata/wd.c:1068
#2  0xd0320a52 in boot (howto=256)
    at /usr/src/sys/arch/i386/i386/machdep.c:2238
#3  0xd02050f4 in panic (fmt=0xd04ec0b4 "trap type %d, code=%x, pc=%x")
    at /usr/src/sys/kern/subr_prf.c:224
#4  0xd0328de2 in trap (frame=
      {tf_fs = 88, tf_gs = 16, tf_es = 16, tf_ds = 16, tf_edi = 0,  
tf_esi = 1306624, tf_ebp = -678195760, tf_ebx = 256, tf_edx = 128,  
tf_ecx = -678195560, tf_eax = -756919244, tf_trapno = 6, tf_err = 0,  
tf_eip = -802208181, tf_cs = 8, tf_eflags = 66054, tf_esp = 0, tf_ss =  
-678195528, tf_vm86_es = 0, tf_vm86_ds = 1306624, tf_vm86_fs = 0,  
tf_vm86_gs = 3}) at /usr/src/sys/arch/i386/i386/trap.c:268
#5  0xd0100eb6 in calltrap ()
#6  0x00000058 in ?? ()
[...]
#19 0xd02f464b in uvm_pagelookup (obj=0xd2e25434, off=1306624)
    at uvm_page_i.h:138
#20 0xd02fb0b7 in uvn_get (uobj=0xd2e25434, offset=0, pps=0xd7938e98,
    npagesp=0xd7938e90, centeridx=3, access_type=1, advice=0, flags=64)
    at /usr/src/sys/uvm/uvm_vnode.c:1348
#21 0xd02ebfd1 in uvm_fault (orig_map=0x0, vaddr=0, fault_type=0,
    access_type=1) at /usr/src/sys/uvm/uvm_fault.c:927
#22 0xd0328f0d in trap (frame=
      {tf_fs = 39, tf_gs = 39, tf_es = 39, tf_ds = 39, tf_edi =  
-809581268, tf_esi = 1007337584, tf_ebp = -809581688, tf_ebx =  
-809581600, tf_edx = 1007194168, tf_ecx = 0, tf_eax = -809581816,  
tf_trapno = 6, tf_err = 4, tf_eip = 471069644, tf_cs = 31, tf_eflags =  
66054, tf_esp = -809581844, tf_ss = 39, tf_vm86_es = 0, tf_vm86_ds = 0,  
tf_vm86_fs = 0, tf_vm86_gs = 0})
    at /usr/src/sys/arch/i386/i386/trap.c:510
#23 0xd0100eb6 in calltrap ()
#24 0x00000027 in ?? ()

Finally, the dmesg output of the notebook:

OpenBSD 3.6-current (GENERIC.GDB) #0: Sun Jan 30 20:16:33 CET 2005
     
root_(_at_)_hermes_(_dot_)_voegele_(_dot_)_dyndns_(_dot_)_org:/usr/src/sys/arch/i386/compile/ 
GENERIC.GDB
cpu0: Intel Pentium/MMX ("GenuineIntel" 586-class) 133 MHz
cpu0: FPU,V86,DE,PSE,TSC,MSR,MCE,CX8,MMX
cpu0: F00F bug workaround installed
real mem  = 83599360 (81640K)
avail mem = 69177344 (67556K)
using 1046 buffers containing 4284416 bytes (4184K) of memory
mainbus0 (root)
bios0 at mainbus0: AT/286+(63) BIOS, date 11/26/98, BIOS32 rev. 0 @  
0xfe95b
apm0 at bios0: Power Management spec V1.2
apm0: battery life expectancy 98%
apm0: AC on, battery charge high, estimated 2:00 hours
pcibios0 at bios0: rev 2.1 @ 0xf0000/0x10000
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xf97e0/80 (3 entries)
pcibios0: no compatible PCI ICU found: ICU vendor 0xffff product 0xffff
pcibios0: Warning, unable to fix up PCI interrupt routing
pcibios0: PCI bus #0 is the last bus
WARNING: can't reserve area for I/O APIC.
WARNING: can't reserve area for Local APIC.
bios0: ROM list: 0xe4000/0x9c00
cpu0 at mainbus0
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 "Toshiba PCI" rev 0x27
vga1 at pci0 dev 4 function 0 "Chips and Technologies 65554" rev 0xc2
wsdisplay0 at vga1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
ohci0 at pci0 dev 11 function 0 "NEC USB" rev 0x01: irq 11, version 1.0
usb0 at ohci0: USB revision 1.0
uhub0 at usb0
uhub0: NEC OHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
isa0 at mainbus0
isadma0 at isa0
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0 (mux 1 ignored for console): console keyboard, using  
wsdisplay0
pms0 at pckbc0 (aux slot)
pckbc0: using irq 12 for aux slot
wsmouse0 at pms0 mux 0
wdc0 at isa0 port 0x1f0/8 irq 14
wd0 at wdc0 channel 0 drive 0: <TOSHIBA MK1017GAP>
wd0: 16-sector PIO, LBA, 9590MB, 19640880 sectors
wd0(wdc0:0:0): using BIOS timings
wdc1 at isa0 port 0x170/8 irq 15
atapiscsi0 at wdc1 channel 0 drive 0
scsibus0 at atapiscsi0: 2 targets
cd0 at scsibus0 targ 0 lun 0: <TOSHIBA, CD-ROM XM-1502BN, 1001> SCSI0  
5/cdrom re
movable
cd0(wdc1:0:0): using BIOS timings
sb0 at isa0 port 0x220/24 irq 5 drq 1: dsp v3.01
midi0 at sb0: <SB MIDI UART>
audio0 at sb0
opl0 at sb0: model OPL3
midi1 at opl0: <SB Yamaha OPL3>
wss0 at isa0 port 0x530/8 irq 10 drq 0: CS4231 or AD1845 (vers 4)
audio1 at wss0
pcppi0 at isa0 port 0x61
midi2 at pcppi0: <PC speaker>
sysbeep0 at pcppi0
lpt0 at isa0 port 0x378/4 irq 7
npx0 at isa0 port 0xf0/16: using exception 16
pccom0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
fdc0 at isa0 port 0x3f0/6 irq 6 drq 2
pcic0 at isa0 port 0x3e0/2 iomem 0xd0000/65536
pcic0 controller 0: <Intel 82365SL rev 1> has sockets A and B
pcmcia0 at pcic0 controller 0 socket 0
ep1 at pcmcia0 function 0 "3Com Corporation, 3C589D, TP/BNC LAN Card  
Ver. 2a" po
rt 0x340/16, irq 3: address 00:60:08:88:bd:3e, utp/aui/bnc (default utp)
pcmcia1 at pcic0 controller 0 socket 1
ep2 at pcmcia1 function 0 "3Com Corporation, 3C589D, TP/BNC LAN Card  
Ver. 2a" po
rt 0x350/16, irq 9: address 00:60:97:8e:84:57, utp/aui/bnc (default utp)
pcic0: no irq, polling enabled
biomask e945 netmask eb4d ttymask fbcf
pctr: 586-class performance counters and user-level cycle counter  
enabled
dkcsum: wd0 matched BIOS disk 80
root on wd0a
rootdev=0x0 rrootdev=0x300 rawdev=0x302