Date: 20 Mar 2001 09:18:51 +0100 From: Dag-Erling Smorgrav <des@thinksec.com> To: current@freebsd.org Subject: trap in vm_fault Message-ID: <xzpwv9kq2dw.fsf@aes.thinksec.com>
next in thread | raw e-mail | index | archive | help
Got this on sunday on my laptop (400 MHz PII running a week-old
-CURRENT):
root@aes /var/crash# gdb -k
GNU gdb 4.18
Copyright 1998 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain condition=
s.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for details.
This GDB was configured as "i386-unknown-freebsd".
(kgdb) source ~des/kgdb
(kgdb) kernel 0
IdlePTD 3809280
initial pcb at 30a860
panicstr: page fault
panic messages:
---
Fatal trap 12: page fault while in kernel mode
fault virtual address =3D 0x3a
fault code =3D supervisor write, page not present
instruction pointer =3D 0x8:0xc022e5a4
stack pointer =3D 0x10:0xc7be6dc8
frame pointer =3D 0x10:0xc7be6e68
code segment =3D base 0x0, limit 0xfffff, type 0x1b
=3D DPL 0, pres 1, def32 1, gran 1
processor eflags =3D interrupt enabled, resume, IOPL =3D 3
current process =3D 18 (irq15: ata1)
trap number =3D 12
panic: page fault
syncing disks... 4 4 1 1
done
Uptime: 22h16m43s
dumping to dev ad0b, offset 262528
dump ata0: resetting devices .. done
127 126 125 124 123 122 121 120 119 118 117 116 115 114 113 112 111 110 109=
108 107 106 105 104 103 102 101 100 99 98 97 96 95 94 93 92 91 90 89 88 87=
86 85 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70 69 68 67 66 65 64 63 62=
61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37=
36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12=
11 10 9 8 7 6 5 4 3 2 1 0
---
#0 dumpsys () at ../../kern/kern_shutdown.c:478
478 if (dumping++) {
(kgdb) where
#0 dumpsys () at ../../kern/kern_shutdown.c:478
#1 0xc0195bfc in boot (howto=3D256) at ../../kern/kern_shutdown.c:321
#2 0xc0195fd1 in panic (fmt=3D0xc02b4def "page fault")
at ../../kern/kern_shutdown.c:571
#3 0xc026a2ef in trap_fatal (frame=3D0xc7be6d88, eva=3D58)
at ../../i386/i386/trap.c:987
#4 0xc026a025 in trap_pfault (frame=3D0xc7be6d88, usermode=3D0, eva=3D58)
at ../../i386/i386/trap.c:901
#5 0xc0269404 in trap (frame=3D{tf_fs =3D -948174824, tf_es =3D -107059608=
0,
tf_ds =3D 16, tf_edi =3D -1070531764, tf_esi =3D -948131488,
tf_ebp =3D -943821208, tf_isp =3D -943821388, tf_ebx =3D 0, tf_edx =
=3D 1,
tf_ecx =3D -943821292, tf_eax =3D 0, tf_trapno =3D 12, tf_err =3D 2,
tf_eip =3D -1071454812, tf_cs =3D 8, tf_eflags =3D 78466, tf_esp =3D =
-948131488,
tf_ss =3D -948131488}) at ../../i386/i386/trap.c:448
#6 0xc022e5a4 in vm_fault (map=3D0xc030fb4c, vaddr=3D3332689920,
fault_type=3D2 '\002', fault_flags=3D0) at ../../vm/vm_object.h:188
#7 0xc0269fcd in trap_pfault (frame=3D0xc7be6ed8, usermode=3D0, eva=3D3332=
689920)
at ../../i386/i386/trap.c:888
#8 0xc0269404 in trap (frame=3D{tf_fs =3D 24, tf_es =3D -1071054832, tf_ds=
=3D 16,
tf_edi =3D -962277376, tf_esi =3D -1062592768, tf_ebp =3D -943821008,
tf_isp =3D -943821052, tf_ebx =3D -1057541376, tf_edx =3D 368, tf_ecx=
=3D 512,
tf_eax =3D -1062618816, tf_trapno =3D 12, tf_err =3D 2, tf_eip =3D -1=
072504984,
tf_cs =3D 8, tf_eflags =3D 78406, tf_esp =3D -1057541376, tf_ss =3D -=
1062575520})
at ../../i386/i386/trap.c:448
#9 0xc012df68 in atapi_read (request=3D0xc0f73300, length=3D2352)
at machine/cpufunc.h:227
#10 0xc012d99b in atapi_interrupt (request=3D0xc0f73300)
at ../../dev/ata/atapi-all.c:408
#11 0xc0122b97 in ata_intr (data=3D0xc0aa1f00) at ../../dev/ata/ata-all.c:5=
42
#12 0xc01868a0 in ithread_loop (arg=3D0xc0aa1e80) at ../../kern/kern_intr.c=
:516
#13 0xc01850f2 in fork_exit (callout=3D0xc0186478 <ithread_loop>,
arg=3D0xc0aa1e80, frame=3D0xc7be6fa8) at ../../kern/kern_fork.c:734
(kgdb) up 6
#6 0xc022e5a4 in vm_fault (map=3D0xc030fb4c, vaddr=3D3332689920,
fault_type=3D2 '\002', fault_flags=3D0) at ../../vm/vm_object.h:188
188 {
(kgdb) l
183 atomic_clear_short(&object->flags, bits);
184 }
185
186 static __inline void
187 vm_object_pip_add(vm_object_t object, short i)
188 {
189 atomic_add_short(&object->paging_in_progress, i);
190 }
191
192 static __inline void
(kgdb)
DES
--=20
Dag-Erling Sm=F8rgrav - des@thinksec.com
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?xzpwv9kq2dw.fsf>