kern/121294: kernel panic pcpu.h or 0x00000000 in ?? ()

[Kirill]

>Number:         121294
>Category:       kern
>Synopsis:       kernel panic pcpu.h or 0x00000000 in ?? ()
>Confidential:   no
>Severity:       critical
>Priority:       high
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sun Mar 02 17:20:02 UTC 2008
>Closed-Date:
>Last-Modified:
>Originator:     Kirill
>Release:        FreeBSD 7.0-PRERELEASE
>Organization:
Local Network 1000 computers with vpn (mpd)
>Environment:
FreeBSD main.deeptown.net 7.0-PRERELEASE FreeBSD 7.0-PRERELEASE #10: Fri Feb 22 22:18:52 EET 2008
  root at main.deeptown.net:/usr/obj/usr/src/sys/main  i386
>Description:
Casually panic. It can be two times a day or one time a week.
main# kgdb -v kernel.debug /var/crash/vmcore.0
kgdb: core file: /var/crash/vmcore.0
kgdb: kernel image: kernel.debug
kgdb: kvm_nlist(_stopped_cpus):
kgdb: kvm_nlist(_stoppcbs):
[GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"]
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd".
Cannot access memory at address 0x0
(kgdb) list
1       /*-
2        * Copyright (c) 1991 Regents of the University of California.
3        * All rights reserved.
4        * Copyright (c) 1994 John S. Dyson
5        * All rights reserved.
6        * Copyright (c) 1994 David Greenman
7        * All rights reserved.
8        * Copyright (c) 2005 Alan L. Cox <alc at cs.rice.edu>
9        * All rights reserved.
10       *
(kgdb) backtrace
#0  0x00000000 in ?? ()

main# kgdb -v kernel.debug /var/crash/vmcore.1
kgdb: core file: /var/crash/vmcore.1
kgdb: kernel image: kernel.debug
kgdb: kvm_nlist(_stopped_cpus):
kgdb: kvm_nlist(_stoppcbs):
[GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so: Undefined symbol "ps_pgl
obal_lookup"]
GNU gdb 6.1.1 [FreeBSD]
main# kgdb -v kernel.debug /var/crash/vmcore.1
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd".

Unread portion of the kernel message buffer:
panic: vm_fault: fault on nofault entry, addr: e53d1000
Uptime: 9h59m28s
Physical memory: 2029 MB
Dumping 299 MB: 284 268 252 236 220 204 188 172 156 140 124 108 92 76 60 44 28 12

#0  doadump () at pcpu.h:195
195             __asm __volatile("movl %%fs:0,%0" : "=r" (td));
(kgdb) list
190     static __inline struct thread *
191     __curthread(void)
192     {
193             struct thread *td;
194
195             __asm __volatile("movl %%fs:0,%0" : "=r" (td));
196             return (td);
197     }
198     #define curthread               (__curthread())
199
(kgdb) backtrace
#0  doadump () at pcpu.h:195
#1  0xc04e4d24 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:409
#2  0xc04e4eed in panic (fmt=Variable "fmt" is not available.
) at /usr/src/sys/kern/kern_shutdown.c:563
#3  0xc0626238 in vm_fault (map=0xc1054000, vaddr=3845984256, fault_type=1 '\001', fault_flags=0)
    at /usr/src/sys/vm/vm_fault.c:275
#4  0xc066955b in trap_pfault (frame=0xe53d3bdc, usermode=0, eva=3845984256)
    at /usr/src/sys/i386/i386/trap.c:801
#5  0xc0669e96 in trap (frame=0xe53d3bdc) at /usr/src/sys/i386/i386/trap.c:490
#6  0xc06550cb in calltrap () at /usr/src/sys/i386/i386/exception.s:139
#7  0xc0667852 in generic_bcopy () at /usr/src/sys/i386/i386/support.s:498
Previous frame inner to this frame (corrupt stack?)
>How-To-Repeat:
I don't know how to repeat the problem. Nothing important in syslog except.
panic addr always the same

Mar  2 02:59:04 main kernel: panic: vm_fault: fault on nofault entry, addr: e53d1000
Mar  2 02:59:04 main kernel: Uptime: 7d3h9m50s
Mar  2 02:59:04 main kernel: Physical memory: 2029 MB
Mar  2 02:59:04 main kernel: Dumping 307 MB: 292 276 260 244 228 212 196 180 164 148 132 116 100 84
68 52 36 20 4
Mar  2 02:59:04 main kernel: Dump complete
Mar  2 02:59:04 main kernel: Automatic reboot in 15 seconds - press a key on the console to abort

>Fix:


>Release-Note:
>Audit-Trail:
>Unformatted: