Date: Mon, 1 Sep 2008 05:20:04 GMT From: Pekka Savola <pekkas@netcore.fi> To: freebsd-net@FreeBSD.org Subject: kern/121298: [panic] Fatal trap 12: page fault while in kernel mode (em0 taskq) Message-ID: <200809010520.m815K4sd009466@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
The following reply was made to PR kern/121298; it has been noted by GNATS.
From: Pekka Savola <pekkas@netcore.fi>
To: bug-followup@freebsd.org
Cc:
Subject: kern/121298: [panic] Fatal trap 12: page fault while in kernel mode
(em0 taskq)
Date: Mon, 1 Sep 2008 08:14:42 +0300 (EEST)
FYI,
I got hit by this (at least it seems identical) as well pretty soon
after I enabled SMP on this box. With UP kernel, I have not seen such
core dumps. This is 7.1-PRERELEASE (Cvsup of RELENG_7 as of Aug 31
2008). Polling is not compiled in the kernel.
The device has:
options=9b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM>
It's either of these (actually I'm not sure which one. probably the
former):
02:0c.1 Ethernet controller: Intel Corporation 82546EB Gigabit
Ethernet Controller (Copper) (rev 01)
Subsystem: Intel Corporation PRO/1000 MT Dual Port Server Adapter
Flags: bus master, 66MHz, medium devsel, latency 64, IRQ 28
Memory at dfdc0000 (64-bit, non-prefetchable)
I/O ports at ec80
Capabilities: [dc] Power Management version 2
Capabilities: [e4] PCI-X non-bridge device
Capabilities: [f0] Message Signalled Interrupts: Mask- 64bit+ Queue=0/0 Enable-
06:07.0 Ethernet controller: Intel Corporation 82541GI Gigabit
Ethernet Controller (rev 05)
Subsystem: Dell Unknown device 016d
Flags: bus master, 66MHz, medium devsel, latency 32, IRQ 48
Memory at dfae0000 (32-bit, non-prefetchable)
I/O ports at dcc0
Capabilities: [dc] Power Management version 2
Capabilities: [e4] PCI-X non-bridge device
==============
Unread portion of the kernel message buffer:
<110>ipfw: 20 Deny TCP [2001:0:d5c7:a2ca:2cfe:116b:2b6a:554d]:55056 [2001:0:4137:9e50:2894:3b42:b7b4:d119]:44889 in via stf0
TPTE at 0xbfca027c IS ZERO @ VA 2809f000
pakernel trap 12 with interrupts disabled
Fatal trap 12: page fault while in kernel mode
cpuid = 0; apic id = 00
fault virtual address = 0x14
fault code = supervisor read, page not present
instruction pointer = 0x20:0xc05c17de
stack pointer = 0x28:0xe53cea08
frame pointer = 0x28:0xe53cea28
code segment = base 0x0, limit 0xfffff, type 0x1b
= DPL 0, pres 1, def32 1, gran 1
processor eflags = resume, IOPL = 0
current process = 21 (em2 taskq)
trap number = 12
panic: page fault
cpuid = 0
Uptime: 3h59m45s
Physical memory: 2039 MB
Dumping 174 MB: 159 143 127 111 95 79 63 47 31 15
#0 doadump () at pcpu.h:196
196 __asm __volatile("movl %%fs:0,%0" : "=r" (td));
(kgdb) bt
#0 doadump () at pcpu.h:196
#1 0xc058cc57 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:418
#2 0xc058cf19 in panic (fmt=Variable "fmt" is not available.
) at /usr/src/sys/kern/kern_shutdown.c:572
#3 0xc073b9bc in trap_fatal (frame=0xe53ce9c8, eva=20) at /usr/src/sys/i386/i386/trap.c:939
#4 0xc073c30f in trap (frame=0xe53ce9c8) at /usr/src/sys/i386/i386/trap.c:320
#5 0xc072204b in calltrap () at /usr/src/sys/i386/i386/exception.s:159
#6 0xc05c17de in propagate_priority (td=0xc555fd20) at /usr/src/sys/kern/subr_turnstile.c:272
#7 0xc05c2618 in turnstile_wait (ts=0xc4d0e5a0, owner=0xc555fd20, queue=Variable "queue" is not available.
) at /usr/src/sys/kern/subr_turnstile.c:739
#8 0xc057fe1e in _mtx_lock_sleep (m=0xc080c7bc, tid=3302831200, opts=0, file=0x0, line=0)
at /usr/src/sys/kern/kern_mutex.c:420
#9 0xc0738002 in pmap_enter (pmap=0xc081ade0, va=3369541632, m=0xc1a11728, prot=7 '\a', wired=1)
at /usr/src/sys/i386/i386/pmap.c:2345
#10 0xc06db888 in kmem_malloc (map=0xc107108c, size=4096, flags=257) at /usr/src/sys/vm/vm_kern.c:416
#11 0xc06d1ba7 in page_alloc (zone=0xc10601e0, bytes=4096, pflag=0xe53ceb5f "\002", wait=257)
at /usr/src/sys/vm/uma_core.c:959
#12 0xc06d0e5c in slab_zalloc (zone=0xc10601e0, wait=257) at /usr/src/sys/vm/uma_core.c:822
#13 0xc06d1344 in uma_zone_slab (zone=0xc10601e0, flags=1) at /usr/src/sys/vm/uma_core.c:2014
#14 0xc06d440a in uma_zalloc_arg (zone=0xc10601e0, udata=0xe53cec04, flags=1) at /usr/src/sys/vm/uma_core.c:2115
#15 0xc049781c in em_get_buf (adapter=0xc4dac000, i=122) at mbuf.h:469
#16 0xc049abf9 in em_rxeof (adapter=0xc4dac000, count=99) at /usr/src/sys/dev/e1000/if_em.c:4420
#17 0xc049b717 in em_handle_rxtx (context=0xc4dac000, pending=1) at /usr/src/sys/dev/e1000/if_em.c:1676
#18 0xc05c0185 in taskqueue_run (queue=0xc4dc2a80) at /usr/src/sys/kern/subr_taskqueue.c:282
#19 0xc05c038b in taskqueue_thread_loop (arg=0xc4dac370) at /usr/src/sys/kern/subr_taskqueue.c:401
#20 0xc0569ab9 in fork_exit (callout=0xc05c02d0 <taskqueue_thread_loop>, arg=0xc4dac370, frame=0xe53ced38)
at /usr/src/sys/kern/kern_fork.c:804
#21 0xc07220c0 in fork_trampoline () at /usr/src/sys/i386/i386/exception.s:264
(kgdb) up 17
#17 0xc049b717 in em_handle_rxtx (context=0xc4dac000, pending=1) at /usr/src/sys/dev/e1000/if_em.c:1676
1676 if (em_rxeof(adapter, adapter->rx_process_limit) != 0)
(kgdb) up 16
#16 0xc049abf9 in em_rxeof (adapter=0xc4dac000, count=99) at /usr/src/sys/dev/e1000/if_em.c:4420
4420 if (em_get_buf(adapter, i) != 0) {
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200809010520.m815K4sd009466>