>Number:         11034
>Category:       kern
>Synopsis:       panic: pmap_ptptage_steal: failed
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Mon Sep 18 04:04:00 PDT 2000
>Closed-Date:
>Last-Modified:
>Originator:     Jarle Greipsland
>Release:        2000-09-17
>Organization:
RUNIT as
>Environment:
System: NetBSD honey.runit.no 1.5E NetBSD 1.5E (HONEY-$Revision: 1.130 $) #0: Sun Sep 17 16:13:50 CEST 2000     jarle@honey.runit.no:/usr/src/sys/arch/alpha/compile/HONEY alpha

>Description:
The panic occured while I was stress testing an LFS on a ccd.

panic: pmap_ptptage_steal: failed
Stopped in bonnie at    cpu_Debugger+0x4:       ret     zero,(ra)

db# trace 
cpu_Debugger() at cpu_Debugger+0x4
panic() at panic+0xfc
pmap_ptpage_steal() at pmap_ptpage_steal+0x2c4
pmap_ptpage_alloc() at pmap_ptpage_alloc+0x4c
pmap_enter() at pmap_enter+0x3b4
uvm_fault() at uvm_fault+0x718
trap() at trap+0x390
XentMM() at XentMM+0x20
--- memory management fault (from ipl 0) ---
--- user mode ---

The processes running was basically: 3 instances of 'bonnie -s 1024', 1
'tar xf' and 2 'rm -rf'.  Add a top and a systat as well as a couple of
ssh/xterm processes.

Unfortunately I could not produce a kernel dump on this one.
dumping to dev 4,1 offset 787183
dump panic: wddump: polled command has been queued

dmesg output:
>How-To-Repeat:
Unknown.
	
>Fix:
	
Unknown.
>Release-Note:
>Audit-Trail:
>Unformatted:
 >>>boot
 (boot dqa0.0.0.11.0 -flags a)
 block 0 of dqa0.0.0.11.0 is a valid boot block
 reading 14 blocks from dqa0.0.0.11.0
 bootstrap code read in
 base = 180000, image_start = 0, image_bytes = 1c00
 initializing HWRPB at 2000
 initializing page table at 172000
 initializing machine state
 setting affinity to the primary CPU
 jumping to bootstrap code
 
 NetBSD/Alpha 1.4 FFS Primary Bootstrap
 Jumping to entry point...
 
 NetBSD/alpha 1.4 Secondary Bootstrap, Revision 1.10
 (ross@netbsd.org, May 8 11:34:00 PDT 1999)
 
 VMS PAL rev: 0x1000900010114
 OSF PAL rev: 0x1000800020116
 Switch to OSF PAL code succeeded.
 
 Boot flags: a
 
 Loading netbsd...
 3102056+311040 [85+176640+95541]
 
 Entering netbsd at 0xfffffc00003010b0...
 [ using 273168 bytes of netbsd ELF symbol table ]
 Copyright (c) 1996, 1997, 1998, 1999, 2000
     The NetBSD Foundation, Inc.  All rights reserved.
 Copyright (c) 1982, 1986, 1989, 1991, 1993
     The Regents of the University of California.  All rights reserved.
 
 NetBSD 1.5E (HONEY-$Revision: 1.130 $) #0: Sun Sep 17 16:13:50 CEST 2000
     jarle@honey.runit.no:/usr/src/sys/arch/alpha/compile/HONEY
 Digital AlphaPC 164 500 MHz, s/n 
 8192 byte page size, 1 processor.
 total memory = 128 MB
 (2472 KB reserved for PROM, 125 MB used by NetBSD)
 avail memory = 112 MB
 using 816 buffers containing 6528 KB of memory
 mainbus0 (root)
 cpu0 at mainbus0: ID 0 (primary), 21164A-2
 cpu0: Architecture extensions: 1<BWX>
 cia0 at mainbus0: DECchip 2117x Core Logic Chipset (ALCOR/ALCOR2), pass 3
 cia0: extended capabilities: 21<DWEN,BWEN>
 cia0: using BWX for PCI config access
 pci0 at cia0 bus 0
 pci0: i/o space, memory space enabled, rd/line, rd/mult, wr/inv ok
 isp0 at pci0 dev 5 function 0
 isp0: interrupting at eb164 irq 2
 isp0: Ultra Mode Capable
 isp0: Board Revision 1040B, loaded F/W Revision 4.65.0
 isp0: Last F/W revision was 4.65.0
 isp0: 243 max I/O commands supported
 isp0: driver initiated bus reset of bus 0
 scsibus0 at isp0: 16 targets, 8 luns per target
 ncr0 at pci0 dev 7 function 0: ncr 53c860 fast20 scsi
 ncr0: interrupting at eb164 irq 1
 ncr0: minsync=12, maxsync=137, maxoffs=8, 16 dwords burst, normal dma fifo
 ncr0: single-ended, open drain IRQ driver
 ncr0: restart (scsi reset).
 scsibus1 at ncr0: 8 targets, 8 luns per target
 sio0 at pci0 dev 8 function 0: Intel 82378ZB System I/O (SIO) (rev. 0x43)
 tlp0 at pci0 dev 9 function 0: DECchip 21140 Ethernet, pass 1.2
 tlp0: interrupting at eb164 irq 3
 tlp0: DEC DE500-XA, Ethernet address 00:00:f8:30:94:81
 tlp0: 10baseT, 100baseTX, 100baseTX-FDX, 10baseT-FDX
 pciide0 at pci0 dev 11 function 0: CMD Technology PCI0646 (rev. 0x01)
 pciide0: bus-master DMA support present
 pciide0: primary channel wired to compatibility mode
 wd0 at pciide0 channel 0 drive 0: <IBM-DJNA-370910>
 wd0: drive supports 16-sector pio transfers, lba addressing
 wd0: 8693 MB, 16383 cyl, 16 head, 63 sec, 512 bytes/sect x 17803440 sectors
 wd0: 32-bit data port
 wd0: drive supports PIO mode 4, DMA mode 2, Ultra-DMA mode 4
 pciide0: primary channel interrupting at isa irq 14
 wd0(pciide0:0:0): using PIO mode 4, DMA mode 2 (using DMA data transfers)
 pciide0: secondary channel wired to compatibility mode
 pciide0: secondary channel ignored (disabled)
 isa0 at sio0
 com0 at isa0 port 0x3f8-0x3ff irq 4: ns16550a, working fifo
 com0: console
 com1 at isa0 port 0x2f8-0x2ff irq 3: ns16550a, working fifo
 lpt0 at isa0 port 0x3bc-0x3bf irq 7
 pcppi0 at isa0 port 0x61
 spkr0 at pcppi0
 isabeep0 at pcppi0
 fdc0 at isa0 port 0x3f0-0x3f7 irq 6 drq 2
 fd0 at fdc0 drive 0: 1.44MB, 80 cyl, 2 head, 18 sec
 mcclock0 at isa0 port 0x70-0x71: mc146818 or compatible
 scsibus0: waiting 2 seconds for devices to settle...
 isp0: Bus 0 Target 0 Async Mode 
 sd0 at scsibus0 target 0 lun 0: <IBM, DDRS-39130W, S97B> SCSI2 0/direct fixed
 isp0: Bus 0 Target 0 at 20MHz Max Offset 8, 16 bit wide, Tagged Queueing Enabled
 sd0: 8715 MB, 8387 cyl, 10 head, 212 sec, 512 bytes/sect x 17850000 sectors
 isp0: Bus 0 Target 0 at 20MHz Max Offset 8, 16 bit wide, Tagged Queueing Enabled
 isp0: Bus 0 Target 0 at 20MHz Max Offset 8, 16 bit wide, Tagged Queueing Enabled
 isp0: Bus 0 Target 0 at 20MHz Max Offset 8, 16 bit wide, Tagged Queueing Enabled
 isp0: Bus 0 Target 0 at 20MHz Max Offset 8, 16 bit wide, Tagged Queueing Enabled
 isp0: Bus 0 Target 0 at 20MHz Max Offset 8, 16 bit wide, Tagged Queueing Enabled
 isp0: Bus 0 Target 0 at 20MHz Max Offset 8, 16 bit wide, Tagged Queueing Enabled
 isp0: Bus 0 Target 0 at 20MHz Max Offset 8, 16 bit wide, Tagged Queueing Enabled
 scsibus1: waiting 2 seconds for devices to settle...
 sd1 at scsibus1 target 0 lun 0: <DEC, RZ29B    (C) DEC, 0016> SCSI2 0/direct fixed
 sd1(ncr0:0:0): 10.0 MB/s (100 ns, offset 8)
 sd1: 4091 MB, 3708 cyl, 20 head, 113 sec, 512 bytes/sect x 8380080 sectors
 sd2 at scsibus1 target 2 lun 0: <DEC, RZ29B    (C) DEC, 0009> SCSI2 0/direct fixed
 sd2(ncr0:2:0): 10.0 MB/s (100 ns, offset 8)
 sd2: 4091 MB, 3708 cyl, 20 head, 113 sec, 512 bytes/sect x 8380080 sectors
 sd3 at scsibus1 target 4 lun 0: <DEC, RZ29B    (C) DEC, 0014> SCSI2 0/direct fixed
 sd3(ncr0:4:0): 10.0 MB/s (100 ns, offset 8)
 sd3: 4091 MB, 3708 cyl, 20 head, 113 sec, 512 bytes/sect x 8380080 sectors
 IPsec: Initialized Security Association Processing.
 root on wd0a dumps on wd0b
 root file system type: ffs