Bug 122058

 I use FreeBSD as SOFT-router with: ipfw for firewall and ipnat for nat.

It is just kernel panic at any time, also without big load of the router.

My kernel specific options for ipfw (without IPDIVERT was the same picture).
options         HZ=4000
options         IPFIREWALL
options         IPFIREWALL_DEFAULT_TO_ACCEPT
options         IPFIREWALL_VERBOSE
options         IPFIREWALL_VERBOSE_LIMIT=100
options         IPFIREWALL_FORWARD
options         IPDIVERT
device          vlan

I have also 2 same server with configuration:
 - motherboard P5K-VM Asus
 - CPU Core(TM)2 Duo CPU     E6850  @ 3.00GHz (3005.57-MHz 686-class CPU)

First server have 1Gb memory with bus 800, second 2Gb with bus 1066.

First server works great and without any problems. Second servers have kernel panic 10 time per evening.

[GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"]
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd".

Unread portion of the kernel message buffer:


Fatal trap 12: page fault while in kernel mode
cpuid = 0; apic id = 00
fault virtual address   = 0x4
fault code              = supervisor read, page not present
instruction pointer     = 0x20:0xc52a392b
stack pointer           = 0x28:0xe5301864
frame pointer           = 0x28:0xe53018e0
code segment            = base rx0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, def32 1, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 22 (em1 taskq)
trap number             = 12
panic: page fault
cpuid = 0
Uptime: 3h33m47s
Physical memory: 2029 MB
Dumping 231 MB: 216 200 184 168 152 136 120 104 88 72 56 40 24 8

#0  doadump () at pcpu.h:195
195     pcpu.h: No such file or directory.
        in pcpu.h
(kgdb)

(kgdb) backtrace
#0  doadump () at pcpu.h:195
#1  0xc0518a87 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:409
#2  0xc0518d49 in panic (fmt=Variable "fmt" is not available.
) at /usr/src/sys/kern/kern_shutdown.c:563
#3  0xc0744bac in trap_fatal (frame=0xe5301824, eva=4) at /usr/src/sys/i386/i386/trap.c:899
#4  0xc0744e10 in trap_pfault (frame=0xe5301824, usermode=0, eva=4) at /usr/src/sys/i386/i386/trap.c:812
#5  0xc0745792 in trap (frame=0xe5301824) at /usr/src/sys/i386/i386/trap.c:490
#6  0xc072c11b in calltrap () at /usr/src/sys/i386/i386/exception.s:139
#7  0xc52a392b in ?? ()
Previous frame inner to this frame (corrupt stack?)
(kgdb)

Dump header from device /dev/ad6s1b
  Architecture: i386
  Architecture Version: 2
  Dump Length: 243109888B (231 MB)
  Blocksize: 512
  Dumptime: Mon Mar 24 17:51:56 2008
  Hostname: as4.kievnet.com
  Magic: FreeBSD Kernel Dump
  Version String: FreeBSD 7.0-RELEASE #2: Sun Mar 23 23:35:08 EET 2008
    root@as4.kievnet.com:/usr/obj/usr/src/sys/AS4
  Panic String: page fault
  Dump Parity: 1125837881
  Bounds: 9
  Dump Status: good

kldstat
Id Refs Address    Size     Name
 1    4 0xc0400000 499aa8   kernel
 2    1 0xc089a000 6a32c    acpi.ko
 3    1 0xc4073000 36000    ipl.ko

Fix: 

change DDR2-1066 to something early manufactured
How-To-Repeat: 
 Use 1066-memory DDR2 memory chips instead with lower bus.