kern/121234: vm_fault: fault on nofault

[Dmitry Andrianov]

>Number:         121234
>Category:       kern
>Synopsis:       vm_fault: fault on nofault
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Fri Feb 29 20:30:04 UTC 2008
>Closed-Date:
>Last-Modified:
>Originator:     Dmitry Andrianov
>Release:        FreeBSD 7.0-RELEASE
>Organization:
79.120.123.5
>Environment:
FreeBSD zingel.dubki.ru 7.0-RELEASE FreeBSD 7.0-RELEASE #0: Mon Feb 25 21:37:58 EET 2008     admin666 at zingel.dubki.ru:/usr/obj/usr/src/sys/BEASTIE-RELEASE  i386

>Description:
Helo.

After the start of the firefox-devel there is such situation:

Feb 29 22:50:57 zingel savecore: reboot after panic: vm_fault: fault on nofault entry, addr: edb20000
Feb 29 22:50:57 zingel savecore: writing core to vmcore.0

%kgdb /boot/kernel/kernel /var/crash/vmcore.0
[GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"]
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd".
Cannot access memory at address 0xc1842fe4
(kgdb) where
#0  doadump () at pcpu.h:195
#1  0xc059f8b7 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:409
#2  0xc059fb79 in panic (fmt=Variable "fmt" is not available.
) at /usr/src/sys/kern/kern_shutdown.c:563
#3  0xc07eea08 in vm_fault (map=0xc1871000, vaddr=3987865600, fault_type=1 '\001', fault_flags=0) at /usr/src/sys/vm/vm_fault.c:275
#4  0xc086169e in trap_pfault (frame=0xed4f6b90, usermode=0, eva=3987865600) at /usr/src/sys/i386/i386/trap.c:801
#5  0xc08620ac in trap (frame=0xed4f6b90) at /usr/src/sys/i386/i386/trap.c:490
#6  0xc084802b in calltrap () at /usr/src/sys/i386/i386/exception.s:139
#7  0xc085f106 in generic_bcopy () at /usr/src/sys/i386/i386/support.s:498
Previous frame inner to this frame (corrupt stack?)

If you need additional information (dmesg, vcore, KERNCONF...), will specify and I to you will give it.
Will you specify, please, how from it to avoid?


Thank you.
>How-To-Repeat:

>Fix:


>Release-Note:
>Audit-Trail:
>Unformatted: