kern/113823: [panic] Fatal trap 12: page fault while in kernel mode

Kenneth Vestergaard Schmidt kvs at
Tue Jun 26 10:00:14 UTC 2007

The following reply was made to PR kern/113823; it has been noted by GNATS.

From: Kenneth Vestergaard Schmidt <kvs at>
To: bug-followup at, dan at
Subject: Re: kern/113823: [panic] Fatal trap 12: page fault while in kernel mode
Date: Tue, 26 Jun 2007 11:31:21 +0200

 We're experiencing the same problems, too, on a lot of our Sun Fire
 x2100 (AMD64) servers.
 We've experienced it on web-servers (mostly just Apache and postfix),
 and machines with 5-10 jails, running Apache, MySQL, postfix, and the
 The problem has appeared on everything from 6.2-RELEASE to 6.2-p5.
 machine amd64
 options SMP
 options COMPAT_IA32
 using em(4), gmirror and pf(4).
 It seems kern/111458 is related, too.
 We have boxes to spare, if anything needs testing, but I haven't found a
 way to reproduce it yet, besides just waiting. It might be related to
 load, or number of processes, but I have no hard evidence.
 Unread portion of the kernel message buffer:
 frame pointer           =3D 0x10:0x4
 code segment            =3D base 0x0, limit 0xfffff, type 0x1b
                         =3D DPL 0, pres 1, long 1, def32 0, gran 1
 processor eflags        =3D resume, IOPL =3D 0
 current process         =3D 9 (thread taskq)
 trap number             =3D 12
 panic: page fault
 cpuid =3D 1
 Uptime: 24d7h45m5s
 Physical memory: 504 MB
 Dumping 154 MB: 139 123 107 91 75 59 43 27 11
 #0  doadump () at pcpu.h:172
 172     pcpu.h: No such file or directory.
         in pcpu.h
 (kgdb) bt
 #0  doadump () at pcpu.h:172
 #1  0x0000000000000004 in ?? ()
 #2  0xffffffff80280b77 in boot (howto=3D260) at /usr/dana/src/freebsd6/src/=
 #3  0xffffffff80281211 in panic (fmt=3D0xffffff001ed41980 "\b=AA=D5\036")
     at /usr/dana/src/freebsd6/src/sys/kern/kern_shutdown.c:565
 #4  0xffffffff803cb6ef in trap_fatal (frame=3D0xffffff001ed41980, eva=3D184=
     at /usr/dana/src/freebsd6/src/sys/amd64/amd64/trap.c:660
 #5  0xffffffff803cbc16 in trap (frame=3D
       {tf_rdi =3D 19, tf_rsi =3D -1098994411136, tf_rdx =3D 6, tf_rcx =3D 3=
 221225730, tf_r8 =3D -1796719344, tf_r9 =3D -1099004634760, tf_rax =3D 1, t=
 f_rbx =3D -1099413515464, tf_rbp =3D 4, tf_r10 =3D -2141530056, tf_r11 =3D =
 0, tf_r12 =3D -1098994411136, tf_r13 =3D 4, tf_r14 =3D 1, tf_r15 =3D 20, tf=
 _trapno =3D 12, tf_addr =3D 396, tf_flags =3D -1099413515464, tf_err =3D 0,=
  tf_rip =3D -2144901513, tf_cs =3D 8, tf_rflags =3D 65538, tf_rsp =3D -1796=
 719760, tf_ss =3D 16}) at /usr/dana/src/freebsd6/src/sys/amd64/amd64/trap.c=
 #6  0xffffffff803b6ebb in calltrap () at /usr/dana/src/freebsd6/src/sys/amd=
 #7  0xffffffff80276677 in _mtx_lock_sleep (m=3D0xffffff0005d91338, tid=3D18=
 446742974715140480, opts=3D6,=20
     file=3D0xc0000102 <Address 0xc0000102 out of bounds>, line=3D-179671934=
     at /usr/dana/src/freebsd6/src/sys/kern/kern_mutex.c:546
 #8  0xffffffff802d589d in unp_gc (arg=3D0x13, pending=3D517216640)
     at /usr/dana/src/freebsd6/src/sys/kern/uipc_usrreq.c:1714
 #9  0xffffffff802a8045 in taskqueue_run (queue=3D0xffffff00007d5c00)
     at /usr/dana/src/freebsd6/src/sys/kern/subr_taskqueue.c:257
 #10 0xffffffff802a8d95 in taskqueue_thread_loop (arg=3D0x13)
     at /usr/dana/src/freebsd6/src/sys/kern/subr_taskqueue.c:376
 #11 0xffffffff80267bf7 in fork_exit (callout=3D0xffffffff802a8d10 <taskqueu=
     arg=3D0xffffffff805b4e70, frame=3D0xffffffff94e83c50)
     at /usr/dana/src/freebsd6/src/sys/kern/kern_fork.c:821
 #12 0xffffffff803b721e in fork_trampoline ()
     at /usr/dana/src/freebsd6/src/sys/amd64/amd64/exception.S:394
 Kenneth Schmidt

More information about the freebsd-bugs mailing list