Date: Thu, 25 Oct 2007 14:24:51 -0500 (CDT) From: Doug Poland <doug@polands.org> To: FreeBSD-gnats-submit@FreeBSD.org Subject: kern/117513: Fatal trap 12: page fault while in kernel mode Message-ID: <200710251924.l9PJOpj0084503@ammon.polands.org> Resent-Message-ID: <200710252030.l9PKU2Vq063735@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 117513 >Category: kern >Synopsis: Fatal trap 12: page fault while in kernel mode >Confidential: no >Severity: serious >Priority: medium >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Thu Oct 25 20:30:02 UTC 2007 >Closed-Date: >Last-Modified: >Originator: Doug Poland >Release: FreeBSD 7.0-BETA1 i386 >Organization: >Environment: System: FreeBSD omnihp-rj45.polands.org 7.0-BETA1 FreeBSD 7.0-BETA1 #0: Sun Oct 21 21:29:36 CDT 2007 dpoland@omnihp-rj45.polands.org:/usr/obj/usr/src/sys/GENERIC-ULE i386 machine: Compaq nx7400 Atheros PCCARD Wifi os: 7.0-BETA1 #0 i386 running off external WD USB hard disk kernel conf: ident GENERIC-ULE include GENERIC nooptions SCHED_4BSD # 4BSD scheduler options SCHED_ULE # ULE scheduler dmesg: Copyright (c) 1992-2007 The FreeBSD Project. Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 The Regents of the University of California. All rights reserved. FreeBSD is a registered trademark of The FreeBSD Foundation. FreeBSD 7.0-BETA1 #0: Sun Oct 21 21:29:36 CDT 2007 dpoland@omnihp-rj45.polands.org:/usr/obj/usr/src/sys/GENERIC-ULE link_elf: symbol _mtx_assert undefined KLD file if_wpi.ko - could not finalize loading Timecounter "i8254" frequency 1193182 Hz quality 0 CPU: Genuine Intel(R) CPU T2400 @ 1.83GHz (1828.76-MHz 686-class CPU) Origin = "GenuineIntel" Id = 0x6e8 Stepping = 8 Features=0xbfe9fbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE> Features2=0xc1a9<SSE3,MON,VMX,EST,TM2,xTPR,PDCM> Cores per package: 2 real memory = 3615293440 (3447 MB) avail memory = 3533848576 (3370 MB) ACPI APIC Table: <HP 30A2 > FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs cpu0 (BSP): APIC ID: 0 cpu1 (AP): APIC ID: 1 ioapic0: Changing APIC ID to 1 ioapic0 <Version 2.0> irqs 0-23 on motherboard kbd1 at kbdmux0 ath_hal: 0.9.20.3 (AR5210, AR5211, AR5212, RF5111, RF5112, RF2413, RF5413) acpi0: <HPQOEM SLIC-MPC> on motherboard acpi0: [ITHREAD] acpi0: Power Button (fixed) acpi0: reservation of 0, a0000 (3) failed acpi0: reservation of 100000, d7700000 (3) failed Timecounter "ACPI-fast" frequency 3579545 Hz quality 1000 acpi_timer0: <24-bit timer at 3.579545MHz> port 0x1008-0x100b on acpi0 acpi_ec0: <Embedded Controller: GPE 0x16> port 0x62,0x66 on acpi0 acpi_hpet0: <High Precision Event Timer> iomem 0xfed00000-0xfed003ff on acpi0 Timecounter "HPET" frequency 14318180 Hz quality 900 cpu0: <ACPI CPU> on acpi0 est0: <Enhanced SpeedStep Frequency Control> on cpu0 p4tcc0: <CPU Frequency Thermal Control> on cpu0 cpu1: <ACPI CPU> on acpi0 est1: <Enhanced SpeedStep Frequency Control> on cpu1 p4tcc1: <CPU Frequency Thermal Control> on cpu1 pcib0: <ACPI Host-PCI bridge> port 0xcf8-0xcff on acpi0 pci0: <ACPI PCI bus> on pcib0 vgapci0: <VGA-compatible display> port 0x4000-0x4007 mem 0xf4400000-0xf447ffff,0xe0000000-0xefffffff,0xf4480000-0xf44bffff irq 16 at device 2.0 on pci0 agp0: <Intel 82945GM (945GM GMCH) SVGA controller> on vgapci0 agp0: detected 7932k stolen memory agp0: aperture size is 256M vgapci1: <VGA-compatible display> mem 0xf4500000-0xf457ffff at device 2.1 on pci0 pcm0: <Intel 82801G High Definition Audio Controller> mem 0xf4580000-0xf4583fff irq 16 at device 27.0 on pci0 pcm0: [ITHREAD] pcib1: <ACPI PCI-PCI bridge> irq 16 at device 28.0 on pci0 pci8: <ACPI PCI bus> on pcib1 pcib2: <ACPI PCI-PCI bridge> irq 17 at device 28.1 on pci0 pci16: <ACPI PCI bus> on pcib2 pci16: <network> at device 0.0 (no driver attached) pcib3: <ACPI PCI-PCI bridge> irq 19 at device 28.3 on pci0 pci32: <ACPI PCI bus> on pcib3 uhci0: <UHCI (generic) USB controller> port 0x4020-0x403f irq 20 at device 29.0 on pci0 uhci0: [GIANT-LOCKED] uhci0: [ITHREAD] usb0: <UHCI (generic) USB controller> on uhci0 usb0: USB revision 1.0 uhub0: <Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1> on usb0 uhub0: 2 ports with 2 removable, self powered uhci1: <UHCI (generic) USB controller> port 0x4040-0x405f irq 17 at device 29.1 on pci0 uhci1: [GIANT-LOCKED] uhci1: [ITHREAD] usb1: <UHCI (generic) USB controller> on uhci1 usb1: USB revision 1.0 uhub1: <Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1> on usb1 uhub1: 2 ports with 2 removable, self powered uhci2: <UHCI (generic) USB controller> port 0x4060-0x407f irq 18 at device 29.2 on pci0 uhci2: [GIANT-LOCKED] uhci2: [ITHREAD] usb2: <UHCI (generic) USB controller> on uhci2 usb2: USB revision 1.0 uhub2: <Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1> on usb2 uhub2: 2 ports with 2 removable, self powered uhci3: <UHCI (generic) USB controller> port 0x4080-0x409f irq 19 at device 29.3 on pci0 uhci3: [GIANT-LOCKED] uhci3: [ITHREAD] usb3: <UHCI (generic) USB controller> on uhci3 usb3: USB revision 1.0 uhub3: <Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1> on usb3 uhub3: 2 ports with 2 removable, self powered ehci0: <Intel 82801GB/R (ICH7) USB 2.0 controller> mem 0xf4584000-0xf45843ff irq 20 at device 29.7 on pci0 ehci0: [GIANT-LOCKED] ehci0: [ITHREAD] usb4: EHCI version 1.0 usb4: companion controllers, 2 ports each: usb0 usb1 usb2 usb3 usb4: <Intel 82801GB/R (ICH7) USB 2.0 controller> on ehci0 usb4: USB revision 2.0 uhub4: <Intel EHCI root hub, class 9/0, rev 2.00/1.00, addr 1> on usb4 uhub4: 8 ports with 8 removable, self powered uhub5: <vendor 0x04b4 product 0x6560, class 9/0, rev 2.00/0.08, addr 2> on uhub4 uhub5: multiple transaction translators uhub5: 4 ports with 4 removable, self powered uhid0: <Apple Inc. iPhone, class 0/0, rev 2.00/0.01, addr 3> on uhub5 umass0: <Western Digital External HDD, class 0/0, rev 2.00/1.02, addr 4> on uhub5 ums0: <Logitech Optical USB Mouse, class 0/0, rev 2.00/3.40, addr 5> on uhub5 ums0: 3 buttons and Z dir. pcib4: <ACPI PCI-PCI bridge> at device 30.0 on pci0 pci2: <ACPI PCI bus> on pcib4 cbb0: <PCI-CardBus Bridge> mem 0xf4100000-0xf4100fff irq 18 at device 6.0 on pci2 cardbus0: <CardBus bus> on cbb0 pccard0: <16-bit PCCard bus> on cbb0 cbb0: [ITHREAD] fwohci0: <1394 Open Host Controller Interface> mem 0xf4101000-0xf41017ff,0xf4104000-0xf4107fff irq 19 at device 6.1 on pci2 fwohci0: [FILTER] fwohci0: OHCI version 1.10 (ROM=0) fwohci0: No. of Isochronous channels is 4. fwohci0: EUI64 00:02:3f:99:29:f5:23:0c fwohci0: Phy 1394a available S400, 3 ports. fwohci0: Link S400, max_rec 2048 bytes. firewire0: <IEEE1394(FireWire) bus> on fwohci0 fwe0: <Ethernet over FireWire> on firewire0 if_fwe0: Fake Ethernet address: 02:02:3f:f5:23:0c fwe0: Ethernet address: 02:02:3f:f5:23:0c fwip0: <IP over FireWire> on firewire0 fwip0: Firewire address: 00:02:3f:99:29:f5:23:0c @ 0xfffe00000000, S400, maxrec 2048 sbp0: <SBP-2/SCSI over FireWire> on firewire0 dcons_crom0: <dcons configuration ROM> on firewire0 dcons_crom0: bus_addr 0xd38e4000 fwohci0: Initiate bus reset fwohci0: BUS reset fwohci0: node_id=0xc000ffc0, gen=2, CYCLEMASTER mode bfe0: <Broadcom BCM4401-B0 Fast Ethernet> mem 0xf4108000-0xf4109fff irq 16 at device 14.0 on pci2 miibus0: <MII bus> on bfe0 bmtphy0: <BCM4401 10/100baseTX PHY> PHY 1 on miibus0 bmtphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto bfe0: using obsoleted if_watchdog interface bfe0: Ethernet address: 00:15:60:ca:3b:2c bfe0: [ITHREAD] isab0: <PCI-ISA bridge> at device 31.0 on pci0 isa0: <ISA bus> on isab0 atapci0: <Intel ICH7 UDMA100 controller> port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0x40a0-0x40af irq 16 at device 31.1 on pci0 ata0: <ATA channel 0> on atapci0 ata0: [ITHREAD] ata1: <ATA channel 1> on atapci0 ata1: [ITHREAD] atapci1: <Intel ICH7M SATA300 controller> port 0x13f0-0x13f7,0x15f4-0x15f7,0x1370-0x1377,0x1574-0x1577,0x40d0-0x40df mem 0xf4585000-0xf45853ff irq 17 at device 31.2 on pci0 atapci1: [ITHREAD] atapci1: AHCI Version 01.10 controller with 4 ports detected ata2: <ATA channel 0> on atapci1 ata2: [ITHREAD] ata3: <ATA channel 1> on atapci1 ata3: port not implemented ata3: [ITHREAD] ata4: <ATA channel 2> on atapci1 ata4: port not implemented ata4: [ITHREAD] ata5: <ATA channel 3> on atapci1 ata5: port not implemented ata5: [ITHREAD] battery0: <ACPI Control Method Battery> on acpi0 battery1: <ACPI Control Method Battery> on acpi0 acpi_acad0: <AC Adapter> on acpi0 acpi_button0: <Sleep Button> on acpi0 acpi_lid0: <Control Method Lid Switch> on acpi0 acpi_tz0: <Thermal Zone> on acpi0 acpi_tz0: _CRT value is absurd, ignored (256.0C) acpi_tz1: <Thermal Zone> on acpi0 acpi_tz2: <Thermal Zone> on acpi0 acpi_tz3: <Thermal Zone> on acpi0 acpi_tz4: <Thermal Zone> on acpi0 atkbdc0: <Keyboard controller (i8042)> port 0x60,0x64 irq 1 on acpi0 atkbd0: <AT Keyboard> irq 1 on atkbdc0 kbd0 at atkbd0 atkbd0: [GIANT-LOCKED] atkbd0: [ITHREAD] psm0: <PS/2 Mouse> irq 12 on atkbdc0 psm0: [GIANT-LOCKED] psm0: [ITHREAD] psm0: model IntelliMouse, device ID 3 pmtimer0 on isa0 orm0: <ISA Option ROM> at iomem 0xc0000-0xcffff pnpid ORM0000 on isa0 ppc0: <Parallel port> at port 0x378-0x37f irq 7 on isa0 ppc0: SMC-like chipset (ECP/EPP/PS2/NIBBLE) in COMPATIBLE mode ppc0: FIFO with 16/16/8 bytes threshold ppbus0: <Parallel port bus> on ppc0 plip0: <PLIP network interface> on ppbus0 lpt0: <Printer> on ppbus0 lpt0: Interrupt-driven port ppi0: <Parallel I/O> on ppbus0 ppc0: [GIANT-LOCKED] ppc0: [ITHREAD] sc0: <System console> at flags 0x100 on isa0 sc0: VGA <16 virtual consoles, flags=0x300> sio0: configured irq 4 not in bitmap of probed irqs 0 sio0: port may not be enabled sio0: configured irq 4 not in bitmap of probed irqs 0 sio0: port may not be enabled sio0 at port 0x3f8-0x3ff irq 4 flags 0x10 on isa0 sio0: type 8250 or not responding sio0: [FILTER] sio1: configured irq 3 not in bitmap of probed irqs 0 sio1: port may not be enabled vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0 ugen0: <Broadcom Corp HP Integrated Module, class 224/1, rev 2.00/1.00, addr 2> on uhub0 Timecounters tick every 1.000 msec firewire0: 1 nodes, maxhop <= 0, cable IRM = 0 (me) firewire0: bus manager 0 (me) fwohci0: phy int acd0: DVDR <MATSHITADVD-RAM UJ-840S/1.11> at ata0-master PIO4 ath0: <Atheros 5212> mem 0xf4110000-0xf411ffff irq 18 at device 0.0 on cardbus0 ath0: [ITHREAD] ath0: using obsoleted if_watchdog interface ath0: Ethernet address: 00:09:5b:c5:04:45 ath0: mac 5.6 phy 4.1 radio 4.6 acpi_tz0: _CRT value is absurd, ignored (256.0C) ad4: 76319MB <FUJITSU MHV2080BH 892C> at ata2-master SATA150 pcm0: <HDA Codec: Analog Devices AD1981HD> pcm0: <HDA Driver Revision: 20071020_0048> GEOM_LABEL: Label for provider ad4s2 is msdosfs/ . SMP: AP CPU #1 Launched! da0 at umass-sim0 bus 0 target 0 lun 0 da0: <WD 1200BEVExternal 1.02> Fixed Direct Access SCSI-0 device da0: 40.000MB/s transfers da0: 114473MB (234441648 512 byte sectors: 255H 63S/T 14593C) GEOM_LABEL: Label for provider da0s2 is ntfs/WDPASSPORT. Trying to mount root from ufs:/dev/da0s1a WARNING: /tmp was not properly dismounted rc.conf: allscreens_flags="MODE_353" amd_enable="YES" amd_flags="-a /.amd_mnt -c 120 -w 20 -l syslog /host /etc/amd.map" background_dhclient="YES" battmond_enable="YES" bsdstats_enable="NO" hostname="omnihp-rj45.polands.org" #ifconfig_ath0="WPA DHCP" ifconfig_ath0="ssid Imagination DHCP" ifconfig_bfe0="NONE" ifconfig_lnc0="NONE" keyrate="fast" local_startup="/usr/local/etc/rc.d" moused_enable="YES" # Run the mouse daemon. moused_type="auto" # See man page for rc.conf(5) for available settings. ntpd_enable="YES" rpc_lockd_enable="YES" rpc_statd_enable="YES" sendmail_enable="NO" sshd_enable="YES" # Enable sshd usbd_enable="YES" #mdconfig_md0="-t swap -s 2G" tmpmfs="YES" tmpsize="2048m" tmpsize="1536m" varmfs="NO" varsize="512m" populate_var="YES" Other settings: No firewall or tcpwrappers Running applications: To the best of my memory, the following applications were running: Xorg 7.3 Firefox 2.0.8 Thunderbird 2.0.0.6 Java 1.6.0 Netbeans 6 tilda 0.9.4_1 pidgin 2.2.1_2 screen 4.0.3 several ssh clients >Description: Kernel panic, was typing in Netbeans 6 and the system panicked kbdb w/backtrace: !4997 kgdb kernel.debug /var/crash/vmcore.0 [GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"] GNU gdb 6.1.1 [FreeBSD] Copyright 2004 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "i386-marcel-freebsd". Unread portion of the kernel message buffer: Fatal trap 12: page fault while in kernel mode cpuid = 1; apic id = 01 fault virtual address = 0x9006004 fault code = supervisor read, page not present instruction pointer = 0x20:0xc079c961 stack pointer = 0x28:0xe74a7bcc frame pointer = 0x28:0xe74a7be0 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, def32 1, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 46 (ath0 taskq) trap number = 12 panic: page fault cpuid = 1 Uptime: 4h9m30s Physical memory: 3435 MB Dumping 214 MB: 199 183 167 151 135 119 103 87 71 55 39 23 7 #0 doadump () at pcpu.h:195 195 __asm __volatile("movl %%fs:0,%0" : "=r" (td)); (kgdb) list *0xc079c961 0xc079c961 is in mb_free_ext (/usr/src/sys/kern/uipc_mbuf.c:226). 221 * check if the header is embedded in the cluster 222 */ 223 skipmbuf = (m->m_flags & M_NOFREE); 224 225 /* Free attached storage if this mbuf is the only reference to it. */ 226 if (*(m->m_ext.ref_cnt) == 1 || 227 atomic_fetchadd_int(m->m_ext.ref_cnt, -1) == 1) { 228 switch (m->m_ext.ext_type) { 229 case EXT_PACKET: /* The packet zone is special. */ 230 if (*(m->m_ext.ref_cnt) == 0) (kgdb) backtrace #0 doadump () at pcpu.h:195 #1 0xc074fed7 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:409 #2 0xc0750199 in panic (fmt=Variable "fmt" is not available. ) at /usr/src/sys/kern/kern_shutdown.c:563 #3 0xc0a1485c in trap_fatal (frame=0xe74a7b8c, eva=151019524) at /usr/src/sys/i386/i386/trap.c:872 #4 0xc0a14ae0 in trap_pfault (frame=0xe74a7b8c, usermode=0, eva=151019524) at /usr/src/sys/i386/i386/trap.c:785 #5 0xc0a15455 in trap (frame=0xe74a7b8c) at /usr/src/sys/i386/i386/trap.c:463 #6 0xc09fb46b in calltrap () at /usr/src/sys/i386/i386/exception.s:139 #7 0xc079c961 in mb_free_ext (m=0xc7151e00) at /usr/src/sys/kern/uipc_mbuf.c:226 #8 0xc079cfc1 in m_freem (mb=0x0) at mbuf.h:510 #9 0xc051e39e in ath_rxbuf_init (sc=0xc6e95000, bf=0xc6e9cc94) at /usr/src/sys/dev/ath/if_ath.c:3257 #10 0xc052595d in ath_rx_proc (arg=0xc6e95000, npending=1) at /usr/src/sys/dev/ath/if_ath.c:3711 #11 0xc07809c5 in taskqueue_run (queue=0xc6dd8300) at /usr/src/sys/kern/subr_taskqueue.c:255 #12 0xc0780bcb in taskqueue_thread_loop (arg=0xc6e96664) at /usr/src/sys/kern/subr_taskqueue.c:374 #13 0xc07304b9 in fork_exit (callout=0xc0780b10 <taskqueue_thread_loop>, arg=0xc6e96664, frame=0xe74a7d38) at /usr/src/sys/kern/kern_fork.c:796 #14 0xc09fb4e0 in fork_trampoline () at /usr/src/sys/i386/i386/exception.s:205 (kgdb) >How-To-Repeat: Have not been able to repeat >Fix: None >Release-Note: >Audit-Trail: >Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200710251924.l9PJOpj0084503>