Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 27 Sep 2009 10:35:19 -0700
From:      David Wolfskill <david@catwhisker.org>
To:        stable@freebsd.org
Subject:   6.4-STABLE @r197533: iwi(4) implicated in page fault while in kernel mode
Message-ID:  <20090927173519.GC51983@albert.catwhisker.org>

next in thread | raw e-mail | index | archive | help

--lCAWRPmW1mITcIfM
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

See <http://www.catwhisker.org/~david/FreeBSD/core.txt.9>; for more
details.  Here's the first part of it:

g1-89.catwhisker.org dumped core - see ./vmcore.9

Sun Sep 27 10:24:20 PDT 2009

FreeBSD g1-89.catwhisker.org 6.4-STABLE FreeBSD 6.4-STABLE #695 r197533: Su=
n Sep 27 04:22:07 PDT 2009     root@g1-88.catwhisker.org:/common/S1/obj/usr=
/src/sys/CANARY  i386

panic: page fault

GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain condition=
s.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd"...

Unread portion of the kernel message buffer:
kernel trap 12 with interrupts disabled

Fatal trap 12: page fault while in kernel mode
fault virtual address   =3D 0x78
fault code              =3D supervisor read, page not present
instruction pointer     =3D 0x20:0xc06ad115
stack pointer           =3D 0x28:0xe4528aa0
frame pointer           =3D 0x28:0xe4528aa4
code segment            =3D base 0x0, limit 0xfffff, type 0x1b
                        =3D DPL 0, pres 1, def32 1, gran 1
processor eflags        =3D resume, IOPL =3D 0
current process         =3D 8027 (ifconfig)
trap number             =3D 12
panic: page fault
Uptime: 3h11m29s
Dumping 767 MB (2 chunks)
  chunk 0: 1MB (159 pages) ... ok
  chunk 1: 767MB (196322 pages) 751 735 719 703 687 671 655 639 623 607 591=
 575 559 543 527 511 495 479 463 447 431 415 399 383 367 351 335 319 303 28=
7 271 255 239 223 207 191 175 159 143 127 111 95 79 63 47 31 15

Reading symbols from /boot/kernel/linux.ko...done.
Loaded symbols for /boot/kernel/linux.ko
Reading symbols from /boot/kernel/if_iwi.ko...done.
Loaded symbols for /boot/kernel/if_iwi.ko
Reading symbols from /boot/kernel/firmware.ko...done.
Loaded symbols for /boot/kernel/firmware.ko
Reading symbols from /boot/kernel/acpi.ko...done.
Loaded symbols for /boot/kernel/acpi.ko
Reading symbols from /boot/kernel/linprocfs.ko...done.
Loaded symbols for /boot/kernel/linprocfs.ko
Reading symbols from /boot/modules/iwi_bss.ko...done.
Loaded symbols for /boot/modules/iwi_bss.ko
Reading symbols from /usr/local/modules/rtc.ko...done.
Loaded symbols for /usr/local/modules/rtc.ko
Reading symbols from /boot/kernel/radeon.ko...done.
Loaded symbols for /boot/kernel/radeon.ko
Reading symbols from /boot/kernel/drm.ko...done.
Loaded symbols for /boot/kernel/drm.ko
#0  doadump () at pcpu.h:165
165     pcpu.h: No such file or directory.
        in pcpu.h
(kgdb) #0  doadump () at pcpu.h:165
#1  0xc068c1e6 in boot (howto=3D260) at /usr/src/sys/kern/kern_shutdown.c:4=
10
#2  0xc068c47c in panic (fmt=3D0xc0957dd5 "%s")
    at /usr/src/sys/kern/kern_shutdown.c:566
#3  0xc08fd5a4 in trap_fatal (frame=3D0xe4528a60, eva=3D120)
    at /usr/src/sys/i386/i386/trap.c:838
#4  0xc08fcd42 in trap (frame=3D
      {tf_fs =3D 333447176, tf_es =3D 40, tf_ds =3D 780009512, tf_edi =3D -=
992778212, tf_esi =3D -985385088, tf_ebp =3D -464352604, tf_isp =3D -464352=
628, tf_ebx =3D -994579200, tf_edx =3D 0, tf_ecx =3D 4, tf_eax =3D -9853850=
56, tf_trapno =3D 12, tf_err =3D 0, tf_eip =3D -1066741483, tf_cs =3D 32, t=
f_eflags =3D 65538, tf_esp =3D -985385088, tf_ss =3D -464352568}) at /usr/s=
rc/sys/i386/i386/trap.c:270
#5  0xc08ea1da in calltrap () at /usr/src/sys/i386/i386/exception.s:139
#6  0xc06ad115 in turnstile_setowner (ts=3D0xc4b7ed00, owner=3D0x4)
    at /usr/src/sys/kern/subr_turnstile.c:456
#7  0xc06ad472 in turnstile_wait (lock=3D0xc554557c, owner=3D0x4, queue=3D0)
    at /usr/src/sys/kern/subr_turnstile.c:661
#8  0xc0683082 in _mtx_lock_sleep (m=3D0xc554557c, tid=3D3309582208, opts=
=3D0,=20
    file=3D0x0, line=3D0) at /usr/src/sys/kern/kern_mutex.c:579
#9  0xc070a618 in rtrequest1 (req=3D1, info=3D0xe4528b60, ret_nrt=3D0xe4528=
b54)
    at /usr/src/sys/net/route.c:792
#10 0xc070b0ff in rtinit (ifa=3D0xc5545500, cmd=3D1, flags=3D1)
    at /usr/src/sys/net/route.c:1201
#11 0xc0727b41 in in_addprefix (target=3D0xc5545500, flags=3D1)
    at /usr/src/sys/netinet/in.c:851
#12 0xc0727a6d in in_ifinit (ifp=3D0xc4922000, ia=3D0xc5545500, sin=3D0x4, =
scrub=3D0)
    at /usr/src/sys/netinet/in.c:778
#13 0xc0726d68 in in_control (so=3D0xc543bde8, cmd=3D1, data=3D0xc54911c0 "=
iwi0",=20
    ifp=3D0xc4922000, td=3D0xc5443780) at /usr/src/sys/netinet/in.c:440
#14 0xc06fb2b8 in ifioctl (so=3D0xc543bde8, cmd=3D2151704858,=20
    data=3D0xc54911c0 "iwi0", td=3D0xc5443780) at /usr/src/sys/net/if.c:1612
#15 0xc06b4e7b in soo_ioctl (fp=3D0xc54437a0, cmd=3D2151704858, data=3D0xc5=
4911c0,=20
    active_cred=3D0xc47d8d80, td=3D0xc5443780)
    at /usr/src/sys/kern/sys_socket.c:214
#16 0xc06af31d in ioctl (td=3D0xc5443780, uap=3D0xe4528d04) at file.h:265
#17 0xc08fd8bb in syscall (frame=3D
      {tf_fs =3D 59, tf_es =3D 59, tf_ds =3D 59, tf_edi =3D 134570944, tf_e=
si =3D 134580448, tf_ebp =3D -1077941288, tf_isp =3D -464351900, tf_ebx =3D=
 -2143262438, tf_edx =3D 134583233, tf_ecx =3D 134570944, tf_eax =3D 54, tf=
_trapno =3D 12, tf_err =3D 2, tf_eip =3D 869574699, tf_cs =3D 51, tf_eflags=
 =3D 646, tf_esp =3D -1077943412, tf_ss =3D 59})
    at /usr/src/sys/i386/i386/trap.c:984
#18 0xc08ea22f in Xint0x80_syscall () at /usr/src/sys/i386/i386/exception.s=
:200
#19 0x00000033 in ?? ()
Previous frame inner to this frame (corrupt stack?)
(kgdb)=20


The access point was a little less than a meter away from the laptop
when that happened.

I'm preserving a copy of that environment on slice 2.

I'll be happy to test things, but note that this is not a common
occurrence; I have no confidence that I can re-create it.

Peace,
david
--=20
David H. Wolfskill				david@catwhisker.org
Depriving a girl or boy of an opportunity for education is evil.

See http://www.catwhisker.org/~david/publickey.gpg for my public key.

--lCAWRPmW1mITcIfM
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.13 (FreeBSD)

iEYEARECAAYFAkq/olcACgkQmprOCmdXAD24xgCeJLa8b1BXn7ZhrfC2IdHPVzMw
8b4An056ZkppwA8xiHZ5rpCeDo49OThu
=aou/
-----END PGP SIGNATURE-----

--lCAWRPmW1mITcIfM--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20090927173519.GC51983>