kern/121774: 6.3 kernel panic in swi1: net

[Edwin Groothuis]

>Number:         121774
>Category:       kern
>Synopsis:       6.3 kernel panic in swi1: net
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Mon Mar 17 03:40:02 UTC 2008
>Closed-Date:
>Last-Modified:
>Originator:     Edwin Groothuis
>Release:        FreeBSD 6.3-RELEASE i386
>Organization:
>Environment:

FreeBSD natgw.barnet.com.au 6.3-RELEASE-p1 FreeBSD 6.3-RELEASE-p1 #1: Fri Mar 14 21:25:44 EST 2008     root at natgw.barnet.com.au:/usr/src/sys/amd64/compile/natgw  amd64

After this weeks upgrade to 6.3-RELEASE-p1 with an SMP kernel config +
options         IPFIREWALL
options         IPFIREWALL_VERBOSE
options         IPFIREWALL_VERBOSE_LIMIT=100
options         IPFIREWALL_DEFAULT_TO_ACCEPT
options         IPFIREWALL_FORWARD

>Description:

Fatal trap 12: page fault while in kernel mode
cpuid = 0; apic id = 00
fault virtual address   = 0x4
fault code              = supervisor read data, page not present
instruction pointer     = 0x8:0xffffffffa7b83547
stack pointer           = 0x10:0xffffffffa5683690
frame pointer           = 0x10:0xffffffffa5683790
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 12 (swi1: net)
trap number             = 12
panic: page fault
cpuid = 0
Uptime: 32m25s
Dumping 1023 MB (2 chunks)


(kgdb) bt
#0  0xffffffff8043644d in doadump ()
#1  0xffffffff80436474 in doadump ()
#2  0x0000000000000004 in ?? ()
#3  0xffffffff80436a77 in boot ()
#4  0x0000000000000019 in ?? ()
#5  0x0000000033ca70c0 in ?? ()
#6  0xffffff003dbb5be0 in ?? ()
#7  0x0000000000000104 in ?? ()
#8  0x0000000000000000 in ?? ()
#9  0xffffff003dbb5be0 in ?? ()
#10 0xffffff003dbb4358 in ?? ()
#11 0xffffffff80437111 in panic ()
#12 0x0000003000000010 in ?? ()
#13 0xffffffffa5683500 in ?? ()
#14 0xffffffffa5683430 in ?? ()
#15 0xffffffffa5683500 in ?? ()
#16 0xffffffffa5683440 in ?? ()
#17 0xffffffff807b490a in __func__.0 ()
#18 0x0000000000000001 in ?? ()
#19 0x0000000000102948 in ?? ()
#20 0x00000000000ffe00 in ?? ()
#21 0x000000000000000a in ?? ()
#22 0x00000000000ffe00 in ?? ()
---Type <return> to continue, or q <return> to quit--- 
#23 0x000000000000000a in ?? ()
#24 0xffffffff809cb020 in thread0 ()
#25 0xffffffff809cb020 in thread0 ()
#26 0x0000000000000000 in ?? ()
#27 0xffffff003db8eb00 in ?? ()
#28 0x00000000287b75b4 in ?? ()
#29 0x00000000a568000a in ?? ()
#30 0xffffff0000d99000 in ?? ()
#31 0xffffff0030746600 in ?? ()
#32 0x0000000000000096 in ?? ()
#33 0x0000000000000096 in ?? ()
#34 0xffffffff85ec9000 in ?? ()
#35 0xffffffff8026ba2b in bge_start_locked ()
#36 0xffffffffa5680006 in ?? ()
#37 0xffffffffa5683570 in ?? ()
#38 0x000000000000000c in ?? ()
#39 0xffffff003dbb5be0 in ?? ()
#40 0x000000000000000c in ?? ()
#41 0xffffffff806bcc8f in trap_fatal ()
#42 0x0000000000000000 in ?? ()
#43 0x00000000000fffff in ?? ()
#44 0x000000003074659b in ?? ()
#45 0xffffff003dbb4358 in ?? ()
---Type <return> to continue, or q <return> to quit---
#46 0x0000000000000000 in ?? ()
#47 0xffffffffa5683d10 in ?? ()
#48 0x0000000000000001 in ?? ()
#49 0x0000000000000000 in ?? ()
#50 0x0000000000000001 in ?? ()
#51 0xffffffff806bd00c in trap_pfault ()
#52 0x0000000000000004 in ?? ()
#53 0xffffff003dbb5be0 in ?? ()
#54 0x0000000000000000 in ?? ()
#55 0x0000000000000003 in ?? ()
#56 0xffffff003dbb5be0 in ?? ()
#57 0x0000000000000000 in ?? ()
#58 0x0000000000000000 in ?? ()
#59 0x0000000000000000 in ?? ()
#60 0xffffff003dbb4358 in ?? ()
#61 0xffffffff806bd2c3 in trap ()
#62 0x0000000100000001 in ?? ()
#63 0xffffff003033a600 in ?? ()
#64 0xffffffffa5683790 in ?? ()
#65 0x00000000ca53b2f2 in ?? ()
#66 0x0000000000000000 in ?? ()
#67 0xffffffffa5683840 in ?? ()
#68 0x0000000000000000 in ?? ()
---Type <return> to continue, or q <return> to quit--- 
#69 0xffffffff806a433b in calltrap ()
Previous frame identical to this frame (corrupt stack?)


I will resubmit it with a kernel with debugging symbols present.

>How-To-Repeat:
>Fix:


>Release-Note:
>Audit-Trail:
>Unformatted: