i386/95151: Fatal trap 12: page fault while in kernel mode

[henry]

>Number:         95151
>Category:       i386
>Synopsis:       Fatal trap 12: page fault while in kernel mode
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    freebsd-i386
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Fri Mar 31 10:20:16 GMT 2006
>Closed-Date:
>Last-Modified:
>Originator:     henry
>Release:        6.0
>Organization:
>Environment:
FreeBSD cfs.parkridge.org 6.0-RELEASE FreeBSD 6.0-RELEASE #0: 
Sat Mar 25 23:22:54 EST 2006     
root at cfs.parkridge.org:/usr/src/sys/i386/compile/MYKERNEL  i386
>Description:
[GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"]
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd".

Unread portion of the kernel message buffer:
drm0: <SiS 630> port 0xa800-0xa87f mem 0xf0000000-0xf7ffffff,0xe9800000-0xe981ffff irq 11 at device 0.0 on pci1
info: [drm] AGP at 0xec000000 64MB
info: [drm] Initialized sis 1.1.0 20030826 on minor 0
kernel trap 12 with interrupts disabled


Fatal trap 12: page fault while in kernel mode
fault virtual address	= 0x74
fault code		= supervisor read, page not present
instruction pointer	= 0x20:0xc0657d4d
stack pointer	        = 0x28:0xcbb21a5c
frame pointer	        = 0x28:0xcbb21a60
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, def32 1, gran 1
processor eflags	= resume, IOPL = 3
current process		= 489 (Xorg)
trap number		= 12
panic: page fault
Uptime: 41s
Dumping 111 MB (2 chunks)
  chunk 0: 1MB (159 pages) ... ok
  chunk 1: 111MB (28412 pages) 96 80 64 48 32 16

#0  doadump () at pcpu.h:165
165		__asm __volatile("movl %%fs:0,%0" : "=r" (td));
(kgdb) bt
#0  doadump () at pcpu.h:165
#1  0xc0638202 in boot (howto=260) at ../../../kern/kern_shutdown.c:399
#2  0xc0638498 in panic (fmt=0xc084e5a2 "%s")
    at ../../../kern/kern_shutdown.c:555
#3  0xc0807c30 in trap_fatal (frame=0xcbb21a1c, eva=116)
    at ../../../i386/i386/trap.c:831
#4  0xc08073d2 in trap (frame=
      {tf_fs = -1066991608, tf_es = -1018757080, tf_ds = 40, tf_edi = -1053330432, tf_esi = -1053083392, tf_ebp = -877520288, tf_isp = -877520312, tf_ebx = -1053097216, tf_edx = -1053097216, tf_ecx = 0, tf_eax = -1053083360, tf_trapno = 12, tf_err = 0, tf_eip = -1067090611, tf_cs = 32, tf_eflags = 77827, tf_esp = -1053083392, tf_ss = -877520252}) at ../../../i386/i386/trap.c:267
#5  0xc07f6dca in calltrap () at ../../../i386/i386/exception.s:139
#6  0xc0657d4d in turnstile_setowner (ts=0xc13b0300, owner=0x0)
    at ../../../kern/subr_turnstile.c:417
#7  0xc0658044 in turnstile_wait (lock=0xc13774a0, owner=0x0)
    at ../../../kern/subr_turnstile.c:576
#8  0xc062fa6c in _mtx_lock_sleep (m=0xc13774a0, tid=3241883904, opts=0, 
    file=0xc17cc874 "/usr/src/sys/modules/drm/drm/../../../dev/drm/drm_vm.c", 
    line=54) at ../../../kern/kern_mutex.c:553
#9  0xc062f8d0 in _mtx_lock_flags (m=0x0, opts=0, 
    file=0xc17cc874 "/usr/src/sys/modules/drm/drm/../../../dev/drm/drm_vm.c", 
    line=54) at ../../../kern/kern_mutex.c:274
#10 0xc17cb2b7 in ?? ()
#11 0xc13774a0 in ?? ()
#12 0x00000000 in ?? ()
#13 0xc17cc874 in ?? ()
#14 0x00000036 in ?? ()
#15 0xc13774e8 in ?? ()
#16 0xc1757900 in ?? ()
#17 0xc17d1000 in ?? ()
#18 0xc17cdc80 in ?? ()
#19 0xcbb21b00 in ?? ()
#20 0xc061010b in giant_mmap (dev=0xc13774a0, offset=3246198784, 
    paddr=0xcbb21b28, nprot=3) at ../../../kern/kern_conf.c:349
Previous frame identical to this frame (corrupt stack?)
(kgdb) quit

>How-To-Repeat:
'X -config xorg.conf.new'
>Fix:

>Release-Note:
>Audit-Trail:
>Unformatted: