Fatal trap 12: page fault while in kernel mode

[Christian Brueffer]

Hi,

got the following trap on an i386 SMP system running with recent RELENG_6
sources.  The system was doing copies from/to geli encrypted disks,
using hifn(4) hardware crypto.

Core and debug kernel are available, but the trace appears to be
corrupted.

- Christian


Fatal trap 12: page fault while in kernel mode
cpuid = 1; apic id = 01
fault virtual address   = 0xc43cb554
fault code              = supervisor write, page not present
instruction pointer     = 0x20:0xc07854fe
stack pointer           = 0x28:0xd44c1c34
frame pointer           = 0x28:0xd44c1c5c
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, def32 1, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 32 (irq19: hifn0)
[thread pid 32 tid 100033 ]
Stopped at      generic_bcopy+0x1a:     repe movsl
(%esi),%es:(%edi)
db> tr
generic_bcopy(c4ebe118,ff0,10,c43cb554,c4ebe0a0) at generic_bcopy+0x1a
hifn_callback(c351e800,c3d2e000,0,868,0) at hifn_callback+0x333
hifn_intr(c351e800,d44c1cd8,c05a0e8d,c084a8a0,1) at hifn_intr+0x2a7
ithread_execute_handlers(c33f1a3c,c3345400,c07d243c,30f,c3310780) at
ithread_execute_handlers+0x128
ithread_loop(c35260f0,d44c1d38,c07d220e,31d,dfffffff) at
ithread_loop+0x84
fork_exit(c0590a00,c35260f0,d44c1d38) at fork_exit+0xc1
fork_trampoline() at fork_trampoline+0x8
--- trap 0x1, eip = 0, esp = 0xd44c1d6c, ebp = 0 ---



Fatal trap 12: page fault while in kernel mode
cpuid = 1; apic id = 01
fault virtual address   = 0xc43cb554
fault code              = supervisor write, page not present
instruction pointer     = 0x20:0xc07854fe
stack pointer           = 0x28:0xd44c1c34
frame pointer           = 0x28:0xd44c1c5c
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, def32 1, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 32 (irq19: hifn0)
Dumping 511 MB (2 chunks)
  chunk 0: 1MB (159 pages) ... ok
  chunk 1: 511MB (130796 pages) 495 479 463 447 431 415 399 383 367 351
335 319 303 287 271 255 239 223 207 191 175 159 143 127 111 95 79 63 47
31 15

#0  doadump () at pcpu.h:165
165     pcpu.h: No such file or directory.
        in pcpu.h
(kgdb) bt
#0  doadump () at pcpu.h:165
#1  0xc048f326 in db_fncall (dummy1=0, dummy2=0, dummy3=1999, dummy4=0xd44c1a14 "`\027\204À\f")
    at /data/build/STABLE/src/sys/ddb/db_command.c:492
#2  0xc048f0a2 in db_command (last_cmdp=0xc0840e64, cmd_table=0x0, aux_cmd_tablep=0xc07fbbc0, 
    aux_cmd_tablep_end=0xc07fbbc4) at /data/build/STABLE/src/sys/ddb/db_command.c:350
#3  0xc048f1b5 in db_command_loop () at /data/build/STABLE/src/sys/ddb/db_command.c:458
#4  0xc04913a5 in db_trap (type=12, code=0) at /data/build/STABLE/src/sys/ddb/db_main.c:221
#5  0xc05cb1be in kdb_trap (type=0, code=0, tf=0xd44c1bf4)
    at /data/build/STABLE/src/sys/kern/subr_kdb.c:473
#6  0xc0787e1b in trap_fatal (frame=0xd44c1bf4, eva=0)
    at /data/build/STABLE/src/sys/i386/i386/trap.c:827
#7  0xc0787ac2 in trap_pfault (frame=0xd44c1bf4, usermode=0, eva=3292312916)
    at /data/build/STABLE/src/sys/i386/i386/trap.c:744
#8  0xc078766d in trap (frame=
      {tf_fs = 8, tf_es = 40, tf_ds = 40, tf_edi = -1002654380, tf_esi =
-991182864, tf_ebp = -733209508, tf_isp = -733209568, tf_ebx = 16,
tf_edx = 4080, tf_ecx = 4, tf_eax = -11471516, tf_trapno = 12, tf_err =
2, tf_eip = -1065855746, tf_cs = 32, tf_eflags = 66066, tf_esp = 16,
tf_ss = -991174344}) at /data/build/STABLE/src/sys/i386/i386/trap.c:434
#9  0xc07713da in calltrap () at
/data/build/STABLE/src/sys/i386/i386/exception.s:139
#10 0xc07854fe in generic_bcopy () at
/data/build/STABLE/src/sys/i386/i386/support.s:489
Previous frame inner to this frame (corrupt stack?)


-- 
Christian Brueffer	chris at unixpages.org	brueffer at FreeBSD.org
GPG Key:	 http://people.freebsd.org/~brueffer/brueffer.key.asc
GPG Fingerprint: A5C8 2099 19FF AACA F41B  B29B 6C76 178C A0ED 982D
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-stable/attachments/20060521/d6ffc375/attachment.pgp