From owner-freebsd-bugs Fri Feb 7 6: 0:27 2003 Delivered-To: freebsd-bugs@hub.freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 827A837B401 for ; Fri, 7 Feb 2003 06:00:24 -0800 (PST) Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id 93EBD43FA3 for ; Fri, 7 Feb 2003 06:00:23 -0800 (PST) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.12.6/8.12.6) with ESMTP id h17E0NNS015779 for ; Fri, 7 Feb 2003 06:00:23 -0800 (PST) (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.12.6/8.12.6/Submit) id h17E0NhH015778; Fri, 7 Feb 2003 06:00:23 -0800 (PST) Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id AA0F537B401 for ; Fri, 7 Feb 2003 05:52:42 -0800 (PST) Received: from hub.org (hub.org [64.49.215.141]) by mx1.FreeBSD.org (Postfix) with ESMTP id 2973343FA3 for ; Fri, 7 Feb 2003 05:52:42 -0800 (PST) (envelope-from scrappy@hub.org) Received: by hub.org (Postfix, from userid 1002) id 41CAE8A2FDF; Fri, 7 Feb 2003 09:52:32 -0400 (AST) Message-Id: <20030207135232.41CAE8A2FDF@hub.org> Date: Fri, 7 Feb 2003 09:52:32 -0400 (AST) From: "Marc G.Fournier" Reply-To: "Marc G.Fournier" To: FreeBSD-gnats-submit@FreeBSD.org X-Send-Pr-Version: 3.113 Subject: kern/48039: Fatal trap 12: page fault while in kernel mode Sender: owner-freebsd-bugs@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org >Number: 48039 >Category: kern >Synopsis: Fatal trap 12: page fault while in kernel mode >Confidential: no >Severity: critical >Priority: high >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Fri Feb 07 06:00:22 PST 2003 >Closed-Date: >Last-Modified: >Originator: Marc G. Fournier >Release: FreeBSD 4.7-STABLE i386 >Organization: Hub.Org Networking Services (http://www.hub.org) >Environment: System: FreeBSD jupiter.hub.org 4.7-STABLE FreeBSD 4.7-STABLE #24: Thu Feb 6 13:48:43 CST 2003 root@jupiter.hub.org:/usr/obj/usr/src/sys/kernel i386 >Description: SMP 2 cpus IdlePTD at phsyical address 0x002bb000 initial pcb at physical address 0x00236ee0 panicstr: page fault panic messages: --- Fatal trap 12: page fault while in kernel mode mp_lock = 00000002; cpuid = 0; lapic.id = 00000000 fault virtual address = 0xc fault code = supervisor read, page not present instruction pointer = 0x8:0xc01b1aef stack pointer = 0x10:0xf58b0dbc frame pointer = 0x10:0xf58b0dc4 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, def32 1, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 96638 (cron) interrupt mask = none <- SMP: XXX trap number = 12 panic: page fault mp_lock = 00000002; cpuid = 0; lapic.id = 00000000 boot() called on cpu#0 ..... (kgdb) where #0 0xc95a2256 in ?? () #1 0xc013fb78 in boot (howto=256) at /usr/src/sys/kern/kern_shutdown.c:223 #2 0xc014029d in panic (fmt=0xc02136d9 "%s") at /usr/src/sys/kern/kern_shutdown.c:595 #3 0xc01e6e9d in trap_fatal (frame=0xf58b0d7c, eva=12) at /usr/src/sys/i386/i386/trap.c:974 #4 0xc01e6b09 in trap_pfault (frame=0xf58b0d7c, usermode=0, eva=12) at /usr/src/sys/i386/i386/trap.c:867 #5 0xc01e6663 in trap (frame={tf_fs = -175439848, tf_es = -1071972336, tf_ds = -1071448048, tf_edi = -169869312, tf_esi = -175436296, tf_ebp = -175436348, tf_isp = -175436376, tf_ebx = -1071398996, tf_edx = -454736464, tf_ecx = -169869312, tf_eax = 0, tf_trapno = 12, tf_err = 0, tf_eip = -1071965457, tf_cs = 8, tf_eflags = 66055, tf_esp = -169869312, tf_ss = -169852928}) at /usr/src/sys/i386/i386/trap.c:466 #6 0xc01b1aef in vm_map_lookup_entry (map=0xc023bfac, address=4125097984, entry=0xf58b0df8) at /usr/src/sys/vm/vm_map.c:476 #7 0xc01b33b2 in vm_map_delete (map=0xc023bfac, start=4125097984, end=4125114368) at /usr/src/sys/vm/vm_map.c:2080 #8 0xc01b35ca in vm_map_remove (map=0xc023bfac, start=4125097984, end=4125114368) at /usr/src/sys/vm/vm_map.c:2198 #9 0xc01b1161 in kmem_free (map=0xc023bfac, addr=4125097984, size=16384) at /usr/src/sys/vm/vm_kern.c:233 #10 0xc01513a8 in pipe_free_kmem (cpipe=0xfbd17280) at /usr/src/sys/kern/sys_pipe.c:1166 #11 0xc015151e in pipeclose (cpipe=0xfbd17280) at /usr/src/sys/kern/sys_pipe.c:1222 #12 0xc015136d in pipe_close (fp=0xc96aefc0, p=0xf50e48a0) at /usr/src/sys/kern/sys_pipe.c:1153 #13 0xc0135887 in fdrop (fp=0xc96aefc0, p=0xf50e48a0) at /usr/src/sys/sys/file.h:218 #14 0xc01357cf in closef (fp=0xc96aefc0, p=0xf50e48a0) at /usr/src/sys/kern/kern_descrip.c:1279 #15 0xc0134bd1 in close (p=0xf50e48a0, uap=0xf58b0f80) at /usr/src/sys/kern/kern_descrip.c:581 #16 0xc01e71d9 in syscall2 (frame={tf_fs = 47, tf_es = 47, tf_ds = 47, tf_edi = 0, tf_esi = 672186944, tf_ebp = -1077938468, tf_isp = -175435820, tf_ebx = 672111748, tf_edx = 0, tf_ecx = 0, tf_eax = 6, tf_trapno = 7, tf_err = 2, tf_eip = 672065104, tf_cs = 31, tf_eflags = 647, tf_esp = -1077938512, tf_ss = 47}) at /usr/src/sys/i386/i386/trap.c:1175 #17 0xc01d451b in Xint0x80_syscall () #18 0x280dc74b in ?? () #19 0x804b12b in ?? () #20 0x804a798 in ?? () #21 0x804b2ce in ?? () #22 0x804a001 in ?? () #23 0x8049b30 in ?? () #24 0x80498f5 in ?? () (kgdb) up 5 #5 0xc01e6663 in trap (frame={tf_fs = -175439848, tf_es = -1071972336, tf_ds = -1071448048, tf_edi = -169869312, tf_esi = -175436296, tf_ebp = -175436348, tf_isp = -175436376, tf_ebx = -1071398996, tf_edx = -454736464, tf_ecx = -169869312, tf_eax = 0, tf_trapno = 12, tf_err = 0, tf_eip = -1071965457, tf_cs = 8, tf_eflags = 66055, tf_esp = -169869312, tf_ss = -169852928}) at /usr/src/sys/i386/i386/trap.c:466 466 (void) trap_pfault(&frame, FALSE, eva); (kgdb) frame frame->tf_ebp frame->tf_eip #0 vm_map_lookup_entry (map=0xc023bfac, address=4125097984, entry=0xf58b0df8) at /usr/src/sys/vm/vm_map.c:462 462 if (cur->end > address) { (kgdb) list 457 /* 458 * Search linearly 459 */ 460 461 while (cur != last) { 462 if (cur->end > address) { 463 if (address >= cur->start) { 464 /* 465 * Save this lookup for future hints, and 466 * return >How-To-Repeat: >Fix: >Release-Note: >Audit-Trail: >Unformatted: To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-bugs" in the body of the message