kern/117513: Fatal trap 12: page fault while in kernel mode
Doug Poland
doug at polands.org
Thu Oct 25 13:30:03 PDT 2007
>Number: 117513
>Category: kern
>Synopsis: Fatal trap 12: page fault while in kernel mode
>Confidential: no
>Severity: serious
>Priority: medium
>Responsible: freebsd-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: sw-bug
>Submitter-Id: current-users
>Arrival-Date: Thu Oct 25 20:30:02 UTC 2007
>Closed-Date:
>Last-Modified:
>Originator: Doug Poland
>Release: FreeBSD 7.0-BETA1 i386
>Organization:
>Environment:
System: FreeBSD omnihp-rj45.polands.org 7.0-BETA1 FreeBSD 7.0-BETA1 #0: Sun Oct 21 21:29:36 CDT 2007 dpoland at omnihp-rj45.polands.org:/usr/obj/usr/src/sys/GENERIC-ULE i386
machine: Compaq nx7400
Atheros PCCARD Wifi
os: 7.0-BETA1 #0 i386
running off external WD USB hard disk
kernel conf:
ident GENERIC-ULE
include GENERIC
nooptions SCHED_4BSD # 4BSD scheduler
options SCHED_ULE # ULE scheduler
dmesg:
Copyright (c) 1992-2007 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
The Regents of the University of California. All rights reserved.
FreeBSD is a registered trademark of The FreeBSD Foundation.
FreeBSD 7.0-BETA1 #0: Sun Oct 21 21:29:36 CDT 2007
dpoland at omnihp-rj45.polands.org:/usr/obj/usr/src/sys/GENERIC-ULE
link_elf: symbol _mtx_assert undefined
KLD file if_wpi.ko - could not finalize loading
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: Genuine Intel(R) CPU T2400 @ 1.83GHz (1828.76-MHz 686-class CPU)
Origin = "GenuineIntel" Id = 0x6e8 Stepping = 8
Features=0xbfe9fbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE>
Features2=0xc1a9<SSE3,MON,VMX,EST,TM2,xTPR,PDCM>
Cores per package: 2
real memory = 3615293440 (3447 MB)
avail memory = 3533848576 (3370 MB)
ACPI APIC Table: <HP 30A2 >
FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs
cpu0 (BSP): APIC ID: 0
cpu1 (AP): APIC ID: 1
ioapic0: Changing APIC ID to 1
ioapic0 <Version 2.0> irqs 0-23 on motherboard
kbd1 at kbdmux0
ath_hal: 0.9.20.3 (AR5210, AR5211, AR5212, RF5111, RF5112, RF2413, RF5413)
acpi0: <HPQOEM SLIC-MPC> on motherboard
acpi0: [ITHREAD]
acpi0: Power Button (fixed)
acpi0: reservation of 0, a0000 (3) failed
acpi0: reservation of 100000, d7700000 (3) failed
Timecounter "ACPI-fast" frequency 3579545 Hz quality 1000
acpi_timer0: <24-bit timer at 3.579545MHz> port 0x1008-0x100b on acpi0
acpi_ec0: <Embedded Controller: GPE 0x16> port 0x62,0x66 on acpi0
acpi_hpet0: <High Precision Event Timer> iomem 0xfed00000-0xfed003ff on acpi0
Timecounter "HPET" frequency 14318180 Hz quality 900
cpu0: <ACPI CPU> on acpi0
est0: <Enhanced SpeedStep Frequency Control> on cpu0
p4tcc0: <CPU Frequency Thermal Control> on cpu0
cpu1: <ACPI CPU> on acpi0
est1: <Enhanced SpeedStep Frequency Control> on cpu1
p4tcc1: <CPU Frequency Thermal Control> on cpu1
pcib0: <ACPI Host-PCI bridge> port 0xcf8-0xcff on acpi0
pci0: <ACPI PCI bus> on pcib0
vgapci0: <VGA-compatible display> port 0x4000-0x4007 mem 0xf4400000-0xf447ffff,0xe0000000-0xefffffff,0xf4480000-0xf44bffff irq 16 at device 2.0 on pci0
agp0: <Intel 82945GM (945GM GMCH) SVGA controller> on vgapci0
agp0: detected 7932k stolen memory
agp0: aperture size is 256M
vgapci1: <VGA-compatible display> mem 0xf4500000-0xf457ffff at device 2.1 on pci0
pcm0: <Intel 82801G High Definition Audio Controller> mem 0xf4580000-0xf4583fff irq 16 at device 27.0 on pci0
pcm0: [ITHREAD]
pcib1: <ACPI PCI-PCI bridge> irq 16 at device 28.0 on pci0
pci8: <ACPI PCI bus> on pcib1
pcib2: <ACPI PCI-PCI bridge> irq 17 at device 28.1 on pci0
pci16: <ACPI PCI bus> on pcib2
pci16: <network> at device 0.0 (no driver attached)
pcib3: <ACPI PCI-PCI bridge> irq 19 at device 28.3 on pci0
pci32: <ACPI PCI bus> on pcib3
uhci0: <UHCI (generic) USB controller> port 0x4020-0x403f irq 20 at device 29.0 on pci0
uhci0: [GIANT-LOCKED]
uhci0: [ITHREAD]
usb0: <UHCI (generic) USB controller> on uhci0
usb0: USB revision 1.0
uhub0: <Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1> on usb0
uhub0: 2 ports with 2 removable, self powered
uhci1: <UHCI (generic) USB controller> port 0x4040-0x405f irq 17 at device 29.1 on pci0
uhci1: [GIANT-LOCKED]
uhci1: [ITHREAD]
usb1: <UHCI (generic) USB controller> on uhci1
usb1: USB revision 1.0
uhub1: <Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1> on usb1
uhub1: 2 ports with 2 removable, self powered
uhci2: <UHCI (generic) USB controller> port 0x4060-0x407f irq 18 at device 29.2 on pci0
uhci2: [GIANT-LOCKED]
uhci2: [ITHREAD]
usb2: <UHCI (generic) USB controller> on uhci2
usb2: USB revision 1.0
uhub2: <Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1> on usb2
uhub2: 2 ports with 2 removable, self powered
uhci3: <UHCI (generic) USB controller> port 0x4080-0x409f irq 19 at device 29.3 on pci0
uhci3: [GIANT-LOCKED]
uhci3: [ITHREAD]
usb3: <UHCI (generic) USB controller> on uhci3
usb3: USB revision 1.0
uhub3: <Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1> on usb3
uhub3: 2 ports with 2 removable, self powered
ehci0: <Intel 82801GB/R (ICH7) USB 2.0 controller> mem 0xf4584000-0xf45843ff irq 20 at device 29.7 on pci0
ehci0: [GIANT-LOCKED]
ehci0: [ITHREAD]
usb4: EHCI version 1.0
usb4: companion controllers, 2 ports each: usb0 usb1 usb2 usb3
usb4: <Intel 82801GB/R (ICH7) USB 2.0 controller> on ehci0
usb4: USB revision 2.0
uhub4: <Intel EHCI root hub, class 9/0, rev 2.00/1.00, addr 1> on usb4
uhub4: 8 ports with 8 removable, self powered
uhub5: <vendor 0x04b4 product 0x6560, class 9/0, rev 2.00/0.08, addr 2> on uhub4
uhub5: multiple transaction translators
uhub5: 4 ports with 4 removable, self powered
uhid0: <Apple Inc. iPhone, class 0/0, rev 2.00/0.01, addr 3> on uhub5
umass0: <Western Digital External HDD, class 0/0, rev 2.00/1.02, addr 4> on uhub5
ums0: <Logitech Optical USB Mouse, class 0/0, rev 2.00/3.40, addr 5> on uhub5
ums0: 3 buttons and Z dir.
pcib4: <ACPI PCI-PCI bridge> at device 30.0 on pci0
pci2: <ACPI PCI bus> on pcib4
cbb0: <PCI-CardBus Bridge> mem 0xf4100000-0xf4100fff irq 18 at device 6.0 on pci2
cardbus0: <CardBus bus> on cbb0
pccard0: <16-bit PCCard bus> on cbb0
cbb0: [ITHREAD]
fwohci0: <1394 Open Host Controller Interface> mem 0xf4101000-0xf41017ff,0xf4104000-0xf4107fff irq 19 at device 6.1 on pci2
fwohci0: [FILTER]
fwohci0: OHCI version 1.10 (ROM=0)
fwohci0: No. of Isochronous channels is 4.
fwohci0: EUI64 00:02:3f:99:29:f5:23:0c
fwohci0: Phy 1394a available S400, 3 ports.
fwohci0: Link S400, max_rec 2048 bytes.
firewire0: <IEEE1394(FireWire) bus> on fwohci0
fwe0: <Ethernet over FireWire> on firewire0
if_fwe0: Fake Ethernet address: 02:02:3f:f5:23:0c
fwe0: Ethernet address: 02:02:3f:f5:23:0c
fwip0: <IP over FireWire> on firewire0
fwip0: Firewire address: 00:02:3f:99:29:f5:23:0c @ 0xfffe00000000, S400, maxrec 2048
sbp0: <SBP-2/SCSI over FireWire> on firewire0
dcons_crom0: <dcons configuration ROM> on firewire0
dcons_crom0: bus_addr 0xd38e4000
fwohci0: Initiate bus reset
fwohci0: BUS reset
fwohci0: node_id=0xc000ffc0, gen=2, CYCLEMASTER mode
bfe0: <Broadcom BCM4401-B0 Fast Ethernet> mem 0xf4108000-0xf4109fff irq 16 at device 14.0 on pci2
miibus0: <MII bus> on bfe0
bmtphy0: <BCM4401 10/100baseTX PHY> PHY 1 on miibus0
bmtphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
bfe0: using obsoleted if_watchdog interface
bfe0: Ethernet address: 00:15:60:ca:3b:2c
bfe0: [ITHREAD]
isab0: <PCI-ISA bridge> at device 31.0 on pci0
isa0: <ISA bus> on isab0
atapci0: <Intel ICH7 UDMA100 controller> port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0x40a0-0x40af irq 16 at device 31.1 on pci0
ata0: <ATA channel 0> on atapci0
ata0: [ITHREAD]
ata1: <ATA channel 1> on atapci0
ata1: [ITHREAD]
atapci1: <Intel ICH7M SATA300 controller> port 0x13f0-0x13f7,0x15f4-0x15f7,0x1370-0x1377,0x1574-0x1577,0x40d0-0x40df mem 0xf4585000-0xf45853ff irq 17 at device 31.2 on pci0
atapci1: [ITHREAD]
atapci1: AHCI Version 01.10 controller with 4 ports detected
ata2: <ATA channel 0> on atapci1
ata2: [ITHREAD]
ata3: <ATA channel 1> on atapci1
ata3: port not implemented
ata3: [ITHREAD]
ata4: <ATA channel 2> on atapci1
ata4: port not implemented
ata4: [ITHREAD]
ata5: <ATA channel 3> on atapci1
ata5: port not implemented
ata5: [ITHREAD]
battery0: <ACPI Control Method Battery> on acpi0
battery1: <ACPI Control Method Battery> on acpi0
acpi_acad0: <AC Adapter> on acpi0
acpi_button0: <Sleep Button> on acpi0
acpi_lid0: <Control Method Lid Switch> on acpi0
acpi_tz0: <Thermal Zone> on acpi0
acpi_tz0: _CRT value is absurd, ignored (256.0C)
acpi_tz1: <Thermal Zone> on acpi0
acpi_tz2: <Thermal Zone> on acpi0
acpi_tz3: <Thermal Zone> on acpi0
acpi_tz4: <Thermal Zone> on acpi0
atkbdc0: <Keyboard controller (i8042)> port 0x60,0x64 irq 1 on acpi0
atkbd0: <AT Keyboard> irq 1 on atkbdc0
kbd0 at atkbd0
atkbd0: [GIANT-LOCKED]
atkbd0: [ITHREAD]
psm0: <PS/2 Mouse> irq 12 on atkbdc0
psm0: [GIANT-LOCKED]
psm0: [ITHREAD]
psm0: model IntelliMouse, device ID 3
pmtimer0 on isa0
orm0: <ISA Option ROM> at iomem 0xc0000-0xcffff pnpid ORM0000 on isa0
ppc0: <Parallel port> at port 0x378-0x37f irq 7 on isa0
ppc0: SMC-like chipset (ECP/EPP/PS2/NIBBLE) in COMPATIBLE mode
ppc0: FIFO with 16/16/8 bytes threshold
ppbus0: <Parallel port bus> on ppc0
plip0: <PLIP network interface> on ppbus0
lpt0: <Printer> on ppbus0
lpt0: Interrupt-driven port
ppi0: <Parallel I/O> on ppbus0
ppc0: [GIANT-LOCKED]
ppc0: [ITHREAD]
sc0: <System console> at flags 0x100 on isa0
sc0: VGA <16 virtual consoles, flags=0x300>
sio0: configured irq 4 not in bitmap of probed irqs 0
sio0: port may not be enabled
sio0: configured irq 4 not in bitmap of probed irqs 0
sio0: port may not be enabled
sio0 at port 0x3f8-0x3ff irq 4 flags 0x10 on isa0
sio0: type 8250 or not responding
sio0: [FILTER]
sio1: configured irq 3 not in bitmap of probed irqs 0
sio1: port may not be enabled
vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
ugen0: <Broadcom Corp HP Integrated Module, class 224/1, rev 2.00/1.00, addr 2> on uhub0
Timecounters tick every 1.000 msec
firewire0: 1 nodes, maxhop <= 0, cable IRM = 0 (me)
firewire0: bus manager 0 (me)
fwohci0: phy int
acd0: DVDR <MATSHITADVD-RAM UJ-840S/1.11> at ata0-master PIO4
ath0: <Atheros 5212> mem 0xf4110000-0xf411ffff irq 18 at device 0.0 on cardbus0
ath0: [ITHREAD]
ath0: using obsoleted if_watchdog interface
ath0: Ethernet address: 00:09:5b:c5:04:45
ath0: mac 5.6 phy 4.1 radio 4.6
acpi_tz0: _CRT value is absurd, ignored (256.0C)
ad4: 76319MB <FUJITSU MHV2080BH 892C> at ata2-master SATA150
pcm0: <HDA Codec: Analog Devices AD1981HD>
pcm0: <HDA Driver Revision: 20071020_0048>
GEOM_LABEL: Label for provider ad4s2 is msdosfs/ .
SMP: AP CPU #1 Launched!
da0 at umass-sim0 bus 0 target 0 lun 0
da0: <WD 1200BEVExternal 1.02> Fixed Direct Access SCSI-0 device
da0: 40.000MB/s transfers
da0: 114473MB (234441648 512 byte sectors: 255H 63S/T 14593C)
GEOM_LABEL: Label for provider da0s2 is ntfs/WDPASSPORT.
Trying to mount root from ufs:/dev/da0s1a
WARNING: /tmp was not properly dismounted
rc.conf:
allscreens_flags="MODE_353"
amd_enable="YES"
amd_flags="-a /.amd_mnt -c 120 -w 20 -l syslog /host /etc/amd.map"
background_dhclient="YES"
battmond_enable="YES"
bsdstats_enable="NO"
hostname="omnihp-rj45.polands.org"
#ifconfig_ath0="WPA DHCP"
ifconfig_ath0="ssid Imagination DHCP"
ifconfig_bfe0="NONE"
ifconfig_lnc0="NONE"
keyrate="fast"
local_startup="/usr/local/etc/rc.d"
moused_enable="YES" # Run the mouse daemon.
moused_type="auto" # See man page for rc.conf(5) for available settings.
ntpd_enable="YES"
rpc_lockd_enable="YES"
rpc_statd_enable="YES"
sendmail_enable="NO"
sshd_enable="YES" # Enable sshd
usbd_enable="YES"
#mdconfig_md0="-t swap -s 2G"
tmpmfs="YES"
tmpsize="2048m"
tmpsize="1536m"
varmfs="NO"
varsize="512m"
populate_var="YES"
Other settings:
No firewall or tcpwrappers
Running applications:
To the best of my memory, the following applications were running:
Xorg 7.3
Firefox 2.0.8
Thunderbird 2.0.0.6
Java 1.6.0
Netbeans 6
tilda 0.9.4_1
pidgin 2.2.1_2
screen 4.0.3
several ssh clients
>Description:
Kernel panic, was typing in Netbeans 6 and the system panicked
kbdb w/backtrace:
!4997
kgdb kernel.debug /var/crash/vmcore.0
[GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"]
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd".
Unread portion of the kernel message buffer:
Fatal trap 12: page fault while in kernel mode
cpuid = 1; apic id = 01
fault virtual address = 0x9006004
fault code = supervisor read, page not present
instruction pointer = 0x20:0xc079c961
stack pointer = 0x28:0xe74a7bcc
frame pointer = 0x28:0xe74a7be0
code segment = base 0x0, limit 0xfffff, type 0x1b
= DPL 0, pres 1, def32 1, gran 1
processor eflags = interrupt enabled, resume, IOPL = 0
current process = 46 (ath0 taskq)
trap number = 12
panic: page fault
cpuid = 1
Uptime: 4h9m30s
Physical memory: 3435 MB
Dumping 214 MB: 199 183 167 151 135 119 103 87 71 55 39 23 7
#0 doadump () at pcpu.h:195
195 __asm __volatile("movl %%fs:0,%0" : "=r" (td));
(kgdb) list *0xc079c961
0xc079c961 is in mb_free_ext (/usr/src/sys/kern/uipc_mbuf.c:226).
221 * check if the header is embedded in the cluster
222 */
223 skipmbuf = (m->m_flags & M_NOFREE);
224
225 /* Free attached storage if this mbuf is the only reference to it. */
226 if (*(m->m_ext.ref_cnt) == 1 ||
227 atomic_fetchadd_int(m->m_ext.ref_cnt, -1) == 1) {
228 switch (m->m_ext.ext_type) {
229 case EXT_PACKET: /* The packet zone is special. */
230 if (*(m->m_ext.ref_cnt) == 0)
(kgdb) backtrace
#0 doadump () at pcpu.h:195
#1 0xc074fed7 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:409
#2 0xc0750199 in panic (fmt=Variable "fmt" is not available.
) at /usr/src/sys/kern/kern_shutdown.c:563
#3 0xc0a1485c in trap_fatal (frame=0xe74a7b8c, eva=151019524) at /usr/src/sys/i386/i386/trap.c:872
#4 0xc0a14ae0 in trap_pfault (frame=0xe74a7b8c, usermode=0, eva=151019524) at /usr/src/sys/i386/i386/trap.c:785
#5 0xc0a15455 in trap (frame=0xe74a7b8c) at /usr/src/sys/i386/i386/trap.c:463
#6 0xc09fb46b in calltrap () at /usr/src/sys/i386/i386/exception.s:139
#7 0xc079c961 in mb_free_ext (m=0xc7151e00) at /usr/src/sys/kern/uipc_mbuf.c:226
#8 0xc079cfc1 in m_freem (mb=0x0) at mbuf.h:510
#9 0xc051e39e in ath_rxbuf_init (sc=0xc6e95000, bf=0xc6e9cc94) at /usr/src/sys/dev/ath/if_ath.c:3257
#10 0xc052595d in ath_rx_proc (arg=0xc6e95000, npending=1) at /usr/src/sys/dev/ath/if_ath.c:3711
#11 0xc07809c5 in taskqueue_run (queue=0xc6dd8300) at /usr/src/sys/kern/subr_taskqueue.c:255
#12 0xc0780bcb in taskqueue_thread_loop (arg=0xc6e96664) at /usr/src/sys/kern/subr_taskqueue.c:374
#13 0xc07304b9 in fork_exit (callout=0xc0780b10 <taskqueue_thread_loop>, arg=0xc6e96664, frame=0xe74a7d38) at /usr/src/sys/kern/kern_fork.c:796
#14 0xc09fb4e0 in fork_trampoline () at /usr/src/sys/i386/i386/exception.s:205
(kgdb)
>How-To-Repeat:
Have not been able to repeat
>Fix:
None
>Release-Note:
>Audit-Trail:
>Unformatted:
More information about the freebsd-bugs
mailing list