From owner-freebsd-bugs@FreeBSD.ORG Fri Jan 29 19:10:10 2010 Return-Path: Delivered-To: freebsd-bugs@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id D9597106568B for ; Fri, 29 Jan 2010 19:10:10 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 432838FC1B for ; Fri, 29 Jan 2010 19:10:10 +0000 (UTC) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.3/8.14.3) with ESMTP id o0TJAAQ6096106 for ; Fri, 29 Jan 2010 19:10:10 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.3/8.14.3/Submit) id o0TJAAi0096105; Fri, 29 Jan 2010 19:10:10 GMT (envelope-from gnats) Resent-Date: Fri, 29 Jan 2010 19:10:10 GMT Resent-Message-Id: <201001291910.o0TJAAi0096105@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, Erik Klavon Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 269C51065670 for ; Fri, 29 Jan 2010 19:02:40 +0000 (UTC) (envelope-from nobody@FreeBSD.org) Received: from www.freebsd.org (www.freebsd.org [IPv6:2001:4f8:fff6::21]) by mx1.freebsd.org (Postfix) with ESMTP id 150868FC25 for ; Fri, 29 Jan 2010 19:02:40 +0000 (UTC) Received: from www.freebsd.org (localhost [127.0.0.1]) by www.freebsd.org (8.14.3/8.14.3) with ESMTP id o0TJ2d8T079105 for ; Fri, 29 Jan 2010 19:02:39 GMT (envelope-from nobody@www.freebsd.org) Received: (from nobody@localhost) by www.freebsd.org (8.14.3/8.14.3/Submit) id o0TJ2dPu079104; Fri, 29 Jan 2010 19:02:39 GMT (envelope-from nobody) Message-Id: <201001291902.o0TJ2dPu079104@www.freebsd.org> Date: Fri, 29 Jan 2010 19:02:39 GMT From: Erik Klavon To: freebsd-gnats-submit@FreeBSD.org X-Send-Pr-Version: www-3.1 Cc: Subject: kern/143349: kernel panic: vm_page_free: freeing busy page X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 29 Jan 2010 19:10:11 -0000 >Number: 143349 >Category: kern >Synopsis: kernel panic: vm_page_free: freeing busy page >Confidential: no >Severity: serious >Priority: low >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Fri Jan 29 19:10:09 UTC 2010 >Closed-Date: >Last-Modified: >Originator: Erik Klavon >Release: 8.0p1 >Organization: University of California, Berkeley >Environment: FreeBSD doecev1cp.net.berkeley.edu 8.0-RELEASE-p1 FreeBSD 8.0-RELEASE-p1 #4: Mon Jan 4 15:25:35 PST 2010 root@master1cp.net.berkeley.edu:/usr/obj/usr/src/sys/WIRELESS amd64 >Description: A kernel panic occurred today on a machine with an uptime of about 5 days. Console output including a stack trace is below. I was not able to obtain a core dump after this panic. The machine froze when I attempted to generate a code dump and had to be power cycled. The machine acts as a NAT device and was carrying user traffic at the time of the panic. I have conducted load tests of an identical machine in a test environment and I have not been able to reproduce this kernel panic. We've been running 8.0p1 in this set up on multiple machines for a couple of months. This is the first kernel panic of this type we've seen. Jan 28 15:08:58 doecev1cp dhcpd: send_packet: Host is down Jan 28 15:09:08 doecev1cp last message repeated 4 times Jan 28 15:25:48 doecev1cp dhcpd: send_packet: Host is down Jan 28 15:58:45 doecev1cp dhcpd: send_packet: Host is down Jan 28 16:39:30 doecev1cp dhcpd: send_packet: Host is down Jan 28 18:59:33 doecev1cp kernel: arp: unknown hardware address format (0x0000) Jan 28 18:59:33 doecev1cp kernel: arp: unknown hardware address format (0x0000) vm_page_free: pindex(246), busy(96), VPO_BUSY(0), hold(0) panic: vm_page_free: freeing busy page cpuid = 1 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0x2a panic() at panic+0x182 vm_page_free_toq() at vm_page_free_toq+0x1f3 vm_object_terminate() at vm_object_terminate+0x6b vm_object_deallocate() at vm_object_deallocate+0x44c _vm_map_unlock() at _vm_map_unlock+0x70 vm_map_remove() at vm_map_remove+0x5f vmspace_exit() at vmspace_exit+0xc4 exit1() at exit1+0x361 sys_exit() at sys_exit+0xe syscall() at syscall+0x246 Xfast_syscall() at Xfast_syscall+0xe1 --- syscall (1, FreeBSD ELF64, sys_exit), rip = 0x80111e21c, rsp = 0x7fffffffe888, rbp = 0x7fffffffe91c --- KDB: enter: panic [thread pid 20050 tid 103053 ] Stopped at kdb_enter+0x3d: movq $0,0x6bdb80(%rip) kernel configuration follows. include GENERIC ident WIRELESS options KDB options DDB options KDB_TRACE options BREAK_TO_DEBUGGER options IPSEC options IPSEC_FILTERTUNNEL device crypto options DEVICE_POLLING options IPFIREWALL options IPFIREWALL_VERBOSE options IPFIREWALL_VERBOSE_LIMIT=100 options IPFIREWALL_FORWARD options DUMMYNET options IPDIVERT options HZ=2500 device carp dmesg output follows. Copyright (c) 1992-2009 The FreeBSD Project. Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 The Regents of the University of California. All rights reserved. FreeBSD is a registered trademark of The FreeBSD Foundation. FreeBSD 8.0-RELEASE-p1 #4: Mon Jan 4 15:25:35 PST 2010 root@master1cp.net.berkeley.edu:/usr/obj/usr/src/sys/WIRELESS Timecounter "i8254" frequency 1193182 Hz quality 0 CPU: AMD Opteron(tm) Processor 252 (2589.84-MHz K8-class CPU) Origin = "AuthenticAMD" Id = 0x20f51 Stepping = 1 Features=0x78bfbff Features2=0x1 AMD Features=0xe2500800 AMD Features2=0x1 real memory = 4294967296 (4096 MB) avail memory = 4065366016 (3877 MB) ACPI APIC Table: FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs FreeBSD/SMP: 2 package(s) x 1 core(s) cpu0 (BSP): APIC ID: 0 cpu1 (AP): APIC ID: 1 MADT: Forcing active-low polarity and level trigger for SCI ioapic0 irqs 0-23 on motherboard ioapic1 irqs 24-27 on motherboard ioapic2 irqs 28-31 on motherboard kbd1 at kbdmux0 cryptosoft0: on motherboard acpi0: on motherboard acpi0: [ITHREAD] acpi0: Power Button (fixed) acpi0: reservation of 0, a0000 (3) failed acpi0: reservation of 100000, fbf00000 (3) failed Timecounter "ACPI-fast" frequency 3579545 Hz quality 1000 acpi_timer0: <24-bit timer at 3.579545MHz> port 0x1008-0x100b on acpi0 pcib0: port 0xcf8-0xcff on acpi0 pci0: on pcib0 pcib1: at device 6.0 on pci0 pci3: on pcib1 ohci0: mem 0xfeafc000-0xfeafcfff irq 19 at device 0.0 on pci3 ohci0: [ITHREAD] usbus0: on ohci0 ohci1: mem 0xfeafd000-0xfeafdfff irq 19 at device 0.1 on pci3 ohci1: [ITHREAD] usbus1: on ohci1 atapci0: port 0xbc00-0xbc07,0xb880-0xb883,0xb800-0xb807,0xac00-0xac03,0xa880-0xa88f mem 0xfeafec00-0xfeafefff irq 19 at device 5.0 on pci3 atapci0: [ITHREAD] ata2: on atapci0 ata2: [ITHREAD] ata3: on atapci0 ata3: [ITHREAD] ata4: on atapci0 ata4: [ITHREAD] ata5: on atapci0 ata5: [ITHREAD] vgapci0: port 0xb000-0xb0ff mem 0xfd000000-0xfdffffff,0xfeaff000-0xfeafffff irq 18 at device 6.0 on pci3 fxp0: port 0xa800-0xa83f mem 0xfeafb000-0xfeafbfff,0xfeaa0000-0xfeabffff irq 18 at device 8.0 on pci3 miibus0: on fxp0 inphy0: PHY 1 on miibus0 inphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto fxp0: Ethernet address: 00:e0:81:32:00:b2 fxp0: [ITHREAD] isab0: at device 7.0 on pci0 isa0: on isab0 atapci1: port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xffa0-0xffaf at device 7.1 on pci0 ata0: on atapci1 ata0: [ITHREAD] ata1: on atapci1 ata1: [ITHREAD] pci0: at device 7.2 (no driver attached) pci0: at device 7.3 (no driver attached) pcib2: at device 10.0 on pci0 pci2: on pcib2 pci2: at device 6.0 (no driver attached) pci2: at device 6.1 (no driver attached) bge0: mem 0xfc8b0000-0xfc8bffff,0xfc8a0000-0xfc8affff irq 24 at device 9.0 on pci2 miibus1: on bge0 brgphy0: PHY 1 on miibus1 brgphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-FDX, auto bge0: Ethernet address: 00:e0:81:32:00:24 bge0: [ITHREAD] bge1: mem 0xfc8e0000-0xfc8effff,0xfc8d0000-0xfc8dffff irq 25 at device 9.1 on pci2 miibus2: on bge1 brgphy1: PHY 1 on miibus2 brgphy1: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-FDX, auto bge1: Ethernet address: 00:e0:81:32:00:25 bge1: [ITHREAD] pcib3: at device 11.0 on pci0 pci1: on pcib3 acpi_button0: on acpi0 atrtc0: port 0x70-0x71 on acpi0 uart0: <16550 or compatible> port 0x3f8-0x3ff irq 4 flags 0x10 on acpi0 uart0: [FILTER] uart0: console (9600,n,8,1) uart1: <16550 or compatible> port 0x2f8-0x2ff irq 3 on acpi0 uart1: [FILTER] ACPI Warning: \\_SB_.PCI0.SBRG.FDC_._FDE: Return type mismatch - found Package, expected Buffer 20090521 nspredef-1051 fdc0: port 0x3f0-0x3f5,0x3f7 irq 6 drq 2 on acpi0 fdc0: [FILTER] fd0: <1440-KB 3.5" drive> on fdc0 drive 0 acpi_hpet0: iomem 0xfec01000-0xfec013ff irq 0,8 on acpi0 Timecounter "HPET" frequency 14318180 Hz quality 900 cpu0: on acpi0 acpi_throttle0: on cpu0 powernow0: on cpu0 cpu1: on acpi0 powernow1: on cpu1 orm0: at iomem 0xc0000-0xc7fff,0xc8000-0xcc7ff,0xcc800-0xcdfff,0xce000-0xcf7ff,0xcf800-0xd07ff on isa0 sc0: at flags 0x100 on isa0 sc0: VGA <16 virtual consoles, flags=0x300> vga0: at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0 atkbdc0: at port 0x60,0x64 on isa0 atkbd0: irq 1 on atkbdc0 kbd0 at atkbd0 atkbd0: [GIANT-LOCKED] atkbd0: [ITHREAD] ppc0: cannot reserve I/O port range Timecounters tick every 1.200 msec IPsec: Initialized Security Association Processing. ipfw2 (+ipv6) initialized, divert enabled, nat loadable, rule-based forwarding enabled, default to deny, logging disabled usbus0: 12Mbps Full Speed USB v1.0 usbus1: 12Mbps Full Speed USB v1.0 acd0: CDROM at ata0-master UDMA33 ad4: 76319MB at ata2-master SATA150 ugen0.1: at usbus0 uhub0: on usbus0 ugen1.1: at usbus1 uhub1: on usbus1 ad6: 76319MB at ata3-master SATA150 SMP: AP CPU #1 Launched! uhub0: 3 ports with 3 removable, self powered uhub1: 3 ports with 3 removable, self powered GEOM_MIRROR: Device mirror/gm0 launched (1/2). GEOM_MIRROR: Device gm0: rebuilding provider ad4. GEOM: mirror/gm0s1: geometry does not match label (16h,63s != 255h,63s). Trying to mount root from ufs:/dev/mirror/gm0s1a WARNING: / was not properly dismounted WARNING: /tmp was not properly dismounted WARNING: /usr was not properly dismounted WARNING: /var was not properly dismounted /var: mount pending error: blocks 36 files 0 bridge1950: Ethernet address: 06:58:81:d4:6d:19 bridge1951: Ethernet address: be:4f:78:ea:18:a6 bridge1952: Ethernet address: 86:c7:de:33:f6:ee bge1: 2 link states coalesced WARNING: attempt to domain_add(netgraph) after domainfinalize() >How-To-Repeat: Unknown. >Fix: >Release-Note: >Audit-Trail: >Unformatted: