From owner-freebsd-bugs@FreeBSD.ORG Mon May 4 07:40:06 2009 Return-Path: Delivered-To: freebsd-bugs@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 4BB521065673 for ; Mon, 4 May 2009 07:40:05 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id B51EF8FC14 for ; Mon, 4 May 2009 07:40:05 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.3/8.14.3) with ESMTP id n447e5xH041529 for ; Mon, 4 May 2009 07:40:05 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.3/8.14.3/Submit) id n447e5vS041528; Mon, 4 May 2009 07:40:05 GMT (envelope-from gnats) Resent-Date: Mon, 4 May 2009 07:40:05 GMT Resent-Message-Id: <200905040740.n447e5vS041528@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, barbara Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 77006106566B for ; Mon, 4 May 2009 07:38:44 +0000 (UTC) (envelope-from nobody@FreeBSD.org) Received: from www.freebsd.org (www.freebsd.org [IPv6:2001:4f8:fff6::21]) by mx1.freebsd.org (Postfix) with ESMTP id 5A00C8FC0C for ; Mon, 4 May 2009 07:38:44 +0000 (UTC) (envelope-from nobody@FreeBSD.org) Received: from www.freebsd.org (localhost [127.0.0.1]) by www.freebsd.org (8.14.3/8.14.3) with ESMTP id n447chUc065965 for ; Mon, 4 May 2009 07:38:43 GMT (envelope-from nobody@www.freebsd.org) Received: (from nobody@localhost) by www.freebsd.org (8.14.3/8.14.3/Submit) id n447chYS065956; Mon, 4 May 2009 07:38:43 GMT (envelope-from nobody) Message-Id: <200905040738.n447chYS065956@www.freebsd.org> Date: Mon, 4 May 2009 07:38:43 GMT From: barbara To: freebsd-gnats-submit@FreeBSD.org X-Send-Pr-Version: www-3.1 Cc: Subject: misc/134200: Fatal trap 12: page fault while in kernel mode X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 04 May 2009 07:40:06 -0000 >Number: 134200 >Category: misc >Synopsis: Fatal trap 12: page fault while in kernel mode >Confidential: no >Severity: non-critical >Priority: low >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Mon May 04 07:40:05 UTC 2009 >Closed-Date: >Last-Modified: >Originator: barbara >Release: 7.2-PRERELEASE >Organization: >Environment: FreeBSD satanasso.local.net 7.2-PRERELEASE FreeBSD 7.2-PRERELEASE #0: Sun Apr 26 11:34:59 CEST 2009 root@satanasso.local.net:/usr/obj/usr/src/sys/SATANASSO i386 >Description: # kgdb /boot/kernel/kernel vmcore.10 .. Unread portion of the kernel message buffer: Fatal trap 12: page fault while in kernel mode cpuid = 1; apic id = 01 fault virtual address = 0xaaaaab4 fault code = supervisor write, page not present instruction pointer = 0x20:0xc07d2c78 stack pointer = 0x28:0xc57e4900 frame pointer = 0x28:0xc57e4914 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, def32 1, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 19885 (sh) trap number = 12 panic: page fault cpuid = 1 Uptime: 1d17h8m52s Physical memory: 2031 MB Dumping 273 MB: 258 242 226 210 194 178 162 146 130 114 98 82 66 50 34 18 2 Reading symbols from /boot/kernel/linux.ko...Reading symbols from /boot/kernel/linux.ko.symbols...done. done. Loaded symbols for /boot/kernel/linux.ko Reading symbols from /boot/modules/nvidia.ko...done. Loaded symbols for /boot/modules/nvidia.ko Reading symbols from /boot/kernel/acpi.ko...Reading symbols from /boot/kernel/acpi.ko.symbols...done. done. Loaded symbols for /boot/kernel/acpi.ko Reading symbols from /boot/kernel/linprocfs.ko...Reading symbols from /boot/kernel/linprocfs.ko.symbols...done. done. Loaded symbols for /boot/kernel/linprocfs.ko Reading symbols from /boot/kernel/logo_saver.ko...Reading symbols from /boot/kernel/logo_saver.ko.symbols...done. done. Loaded symbols for /boot/kernel/logo_saver.ko Reading symbols from /boot/kernel/aio.ko...Reading symbols from /boot/kernel/aio.ko.symbols...done. done. Loaded symbols for /boot/kernel/aio.ko Reading symbols from /boot/modules/kqemu.ko...done. Loaded symbols for /boot/modules/kqemu.ko #0 doadump () at pcpu.h:196 196 pcpu.h: No such file or directory. in pcpu.h (kgdb) bt #0 doadump () at pcpu.h:196 #1 0xc0597f17 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:418 #2 0xc05981ec in panic (fmt=Variable "fmt" is not available. ) at /usr/src/sys/kern/kern_shutdown.c:574 #3 0xc07daccc in trap_fatal (frame=0xc57e48c0, eva=178956980) at /usr/src/sys/i386/i386/trap.c:939 #4 0xc07daf30 in trap_pfault (frame=0xc57e48c0, usermode=0, eva=178956980) at /usr/src/sys/i386/i386/trap.c:852 #5 0xc07db8f9 in trap (frame=0xc57e48c0) at /usr/src/sys/i386/i386/trap.c:530 #6 0xc07c0c8b in calltrap () at /usr/src/sys/i386/i386/exception.s:159 #7 0xc07d2c78 in free_pv_entry (pmap=0xc72a1528, pv=Variable "pv" is not available. ) at /usr/src/sys/i386/i386/pmap.c:1973 #8 0xc07d2dd3 in pmap_pvh_free (pvh=0xc2ff1300, pmap=0xc72a1528, va=Variable "va" is not available. ) at /usr/src/sys/i386/i386/pmap.c:2175 #9 0xc07d2dfa in pmap_remove_entry (pmap=Variable "pmap" is not available. ) at /usr/src/sys/i386/i386/pmap.c:2184 #10 0xc07d4f4c in pmap_remove_pte (pmap=0xc72a1528, ptq=0x10, va=671502336, free=0xc57e4980) at /usr/src/sys/i386/i386/pmap.c:2471 #11 0xc07d6b47 in pmap_remove (pmap=0xc72a1528, sva=671502336, eva=671645696) at /usr/src/sys/i386/i386/pmap.c:2597 #12 0xc078bb1c in vm_map_delete (map=0xc72a149c, start=0, end=3217031168) at /usr/src/sys/vm/vm_map.c:2400 #13 0xc078bd55 in vm_map_remove (map=0xc72a149c, start=0, end=Variable "end" is not available. ) at /usr/src/sys/vm/vm_map.c:2427 #14 0xc056ea00 in exec_new_vmspace (imgp=0xc57e4be0, sv=0xc087dd80) at /usr/src/sys/kern/kern_exec.c:962 #15 0xc055567f in exec_elf32_imgact (imgp=0xc57e4be0) at /usr/src/sys/kern/imgact_elf.c:702 #16 0xc056ee44 in kern_execve (td=0xc6b7aaf0, args=0xc57e4c5c, mac_p=0x0) at /usr/src/sys/kern/kern_exec.c:433 #17 0xc056fdfc in execve (td=0xc6b7aaf0, uap=0xc57e4cfc) at /usr/src/sys/kern/kern_exec.c:202 #18 0xc07db295 in syscall (frame=0xc57e4d38) at /usr/src/sys/i386/i386/trap.c:1090 #19 0xc07c0cf0 in Xint0x80_syscall () at /usr/src/sys/i386/i386/exception.s:255 #20 0x00000033 in ?? () Previous frame inner to this frame (corrupt stack?) (kgdb) frame 7 #7 0xc07d2c78 in free_pv_entry (pmap=0xc72a1528, pv=Variable "pv" is not available. ) at /usr/src/sys/i386/i386/pmap.c:1973 1973 pc->pc_map[field] |= 1ul << bit; (kgdb) list 1968 pv_entry_count--; 1969 pc = pv_to_chunk(pv); 1970 idx = pv - &pc->pc_pventry[0]; 1971 field = idx / 32; 1972 bit = idx % 32; 1973 pc->pc_map[field] |= 1ul << bit; 1974 /* move to head of list */ 1975 TAILQ_REMOVE(&pmap->pm_pvchunk, pc, pc_list); 1976 for (idx = 0; idx < _NPCM; idx++) 1977 if (pc->pc_map[idx] != pc_freemask[idx]) { >How-To-Repeat: >Fix: >Release-Note: >Audit-Trail: >Unformatted: