i386/121534: FreeBSD Release 6.3 Kernel Trap 12:

[Eric Kingston]

>Number:         121534
>Category:       i386
>Synopsis:       FreeBSD Release 6.3 Kernel Trap 12:
>Confidential:   no
>Severity:       critical
>Priority:       high
>Responsible:    freebsd-i386
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sun Mar 09 16:00:02 UTC 2008
>Closed-Date:
>Last-Modified:
>Originator:     Eric Kingston
>Release:        FreeBSD 6.3 Stable
>Organization:
Standard Industries
>Environment:
FreeBSD srecows.esreco.net 6.3-STABLE FreeBSD 6.3-STABLE #7: Sun Mar  2 17:11:00 MST 2008     ericnk at srecows.esreco.net:/usr/obj/usr/src/sys/SRECOWS  i386

>Description:
Ever since upgrading to FreeBSD Release and then stable 6.3, I have been getting periodic kernel panics (fatal trap 12) and reboots.  It seems there may be a few bugs that need to be sorted out before this release can be called stable.  Following is a kernel dump backtrace.....

[GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"]
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd".
Reading symbols from /boot/kernel/accf_http.ko...done.
Loaded symbols for /boot/kernel/accf_http.ko
Reading symbols from /boot/kernel/acpi.ko...done.
Loaded symbols for /boot/kernel/acpi.ko
Reading symbols from /boot/kernel/ipl.ko...done.
Loaded symbols for /boot/kernel/ipl.ko
Reading symbols from /boot/kernel/linux.ko...done.
Loaded symbols for /boot/kernel/linux.ko

Unread portion of the kernel message buffer:



Fatal trap 12: page fault while in kernel mode
fault virtual address   = 0x4
fault code              = supervisor read, page not present
instruction pointer     = 0x20:0xc39900e7
stack pointer           = 0x28:0xd4669a78
frame pointer           = 0x28:0xd4669af4
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, def32 1, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 13 (swi1: net)
trap number             = 12
panic: page fault
Uptime: 23m19s
Dumping 511 MB (2 chunks)
  chunk 0: 1MB (159 pages) ... ok
  chunk 1: 511MB (130796 pages) 495 479 463 447 431 415 399 383 367 351 335 319 303 287 271 255 239 223 207 191 175 159 143 127 111 95 79 63 47 31 15

#0  doadump () at pcpu.h:165
165             __asm __volatile("movl %%fs:0,%0" : "=r" (td));
(kgdb) bt
#0  doadump () at pcpu.h:165
#1  0xc06b47ae in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:409
#2  0xc06b4a74 in panic (fmt=0xc0967433 "%s")
    at /usr/src/sys/kern/kern_shutdown.c:565
#3  0xc0920e2e in trap_fatal (frame=0xd4669a38, eva=4)
    at /usr/src/sys/i386/i386/trap.c:838
#4  0xc0920b5f in trap_pfault (frame=0xd4669a38, usermode=0, eva=4)
    at /usr/src/sys/i386/i386/trap.c:745
#5  0xc0920759 in trap (frame=
      {tf_fs = 8, tf_es = 40, tf_ds = -731512792, tf_edi = 167772395, tf_esi = 0, tf_ebp = -731473164, tf_isp = -731473308, tf_ebx = -1013001728, tf_edx = 6, tf_ecx = -1011326464, tf_eax = 0, tf_trapno = 12, tf_err = 0, tf_eip = -1013382937, tf_cs = 32, tf_eflags = 590406, tf_esp = 0, tf_ss = 401427908})
    at /usr/src/sys/i386/i386/trap.c:435
#6  0xc090d38a in calltrap () at /usr/src/sys/i386/i386/exception.s:139
#7  0xc39900e7 in nat_new () from /boot/kernel/ipl.ko
#8  0xc39907de in fr_checknatin () from /boot/kernel/ipl.ko
#9  0xc39a5155 in fr_check () from /boot/kernel/ipl.ko
#10 0xc39a0985 in fr_check_wrapper () from /boot/kernel/ipl.ko
#11 0xc072fe47 in pfil_run_hooks (ph=0xc0a8eb40, mp=0xd4669ca8,
    ifp=0xc37d1800, dir=1, inp=0x0) at /usr/src/sys/net/pfil.c:139
#12 0xc07555f9 in ip_input (m=0xc3b03d00)
#13 0xc072e9bf in netisr_processqueue (ni=0xc0a8e118)
    at /usr/src/sys/net/netisr.c:236
#14 0xc072ebba in swi_net (dummy=0x0) at /usr/src/sys/net/netisr.c:349
#15 0xc069df6d in ithread_execute_handlers (p=0xc3692648, ie=0xc36cf280)
    at /usr/src/sys/kern/kern_intr.c:682
#16 0xc069e088 in ithread_loop (arg=0xc36746d0)
    at /usr/src/sys/kern/kern_intr.c:766
#17 0xc069cef4 in fork_exit (callout=0xc069e034 <ithread_loop>,
    arg=0xc36746d0, frame=0xd4669d38) at /usr/src/sys/kern/kern_fork.c:788
#18 0xc090d3ec in fork_trampoline () at /usr/src/sys/i386/i386/exception.s:208

>How-To-Repeat:
It seems to happen when there is heavy network traffic on one or both NIC's.

>Fix:


>Release-Note:
>Audit-Trail:
>Unformatted: