Bug 138661

Summary: [panic][re] Kernel Panic after typing "reboot"
Product: Base System Reporter: vladislav V. Prodan <universite>
Component: amd64Assignee: freebsd-amd64 (Nobody) <amd64>
Status: Closed FIXED    
Severity: Affects Only Me    
Priority: Normal    
Version: 8.0-BETA4   
Hardware: Any   
OS: Any   

Description vladislav V. Prodan 2009-09-09 14:20:01 UTC 
Fatal trap 12: page fault while in kernel mode
cpuid = 0; apic id = 00
fault virtual address   = 0x9
fault code              = supervisor write data, page not present
instruction pointer     = 0x20:0xffffffff804dc1c4
stack pointer           = 0x28:0xffffff800008c930
frame pointer           = 0x28:0xffffff800008c9b0
code segment            = base rx0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 12 (swi5: +)
trap number             = 12
panic: page fault
cpuid = 0
Uptime: 7m44s
Physical memory: 6098 MB
Dumping 1351 MB: 1336 1320 1304 1288 1272 1256 1240 1224 1208 1192 1176 1160 1144 1128 1112 1096 1080 1064 1048 1032 1016 1000 984 968 952 936 920 904 888 872 856 840 824 808 792 776 760 744 728 712 696 680 664 648 632 616 600 584 568 552 536 520 504 488 472 456 440 424 408 392 376 360 344 328 312 296 280 264 248 232 216 200 184 168 152 136 120 104 88 72 56 40 24 8

Reading symbols from /boot/kernel/zfs.ko...Reading symbols from /boot/kernel/zfs.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/zfs.ko
Reading symbols from /boot/kernel/opensolaris.ko...Reading symbols from /boot/kernel/opensolaris.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/opensolaris.ko
Reading symbols from /boot/kernel/linux.ko...Reading symbols from /boot/kernel/linux.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/linux.ko
Reading symbols from /boot/kernel/accf_http.ko...Reading symbols from /boot/kernel/accf_http.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/accf_http.ko
#0  doadump () at pcpu.h:223
223     pcpu.h:  No such file or directory.
        in pcpu.h
(kgdb) up
#1  0xffffffff803a5219 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:416
416                     doadump();
(kgdb) up
#2  0xffffffff803a566c in panic (fmt=Variable "fmt" is not available.
) at /usr/src/sys/kern/kern_shutdown.c:579
579             boot(bootopt);
(kgdb) up
#3  0xffffffff8065e30d in trap_fatal (frame=0xc, eva=Variable "eva" is not available.
) at /usr/src/sys/amd64/amd64/trap.c:852
852                     panic("%s", trap_msg[type]);
(kgdb) up
#4  0xffffffff8065e6f4 in trap_pfault (frame=0xffffff800008c880, usermode=0)
    at /usr/src/sys/amd64/amd64/trap.c:768
768                     trap_fatal(frame, eva);
(kgdb) up
#5  0xffffffff8065f13f in trap (frame=0xffffff800008c880) at /usr/src/sys/amd64/amd64/trap.c:494
494                             (void) trap_pfault(frame, FALSE);
(kgdb) up
#6  0xffffffff80645463 in calltrap () at /usr/src/sys/amd64/amd64/exception.S:224
224             call    trap
Current language:  auto; currently asm

How-To-Repeat: send the machine to reboot
Comment 1 vladislav V. Prodan 2009-09-09 14:41:32 UTC 
(kgdb) bt
#0  doadump () at pcpu.h:223
#1  0xffffffff803a5219 in boot (howto=260) at 
/usr/src/sys/kern/kern_shutdown.c:416
#2  0xffffffff803a566c in panic (fmt=Variable "fmt" is not available.
) at /usr/src/sys/kern/kern_shutdown.c:579
#3  0xffffffff8065e30d in trap_fatal (frame=0xc, eva=Variable "eva" is 
not available.
) at /usr/src/sys/amd64/amd64/trap.c:852
#4  0xffffffff8065e6f4 in trap_pfault (frame=0xffffff800008c880, usermode=0)
     at /usr/src/sys/amd64/amd64/trap.c:768
#5  0xffffffff8065f13f in trap (frame=0xffffff800008c880) at 
/usr/src/sys/amd64/amd64/trap.c:494
#6  0xffffffff80645463 in calltrap () at 
/usr/src/sys/amd64/amd64/exception.S:224
#7  0xffffffff804dc1c4 in X_ip_mforward (ip=Variable "ip" is not available.
) at /usr/src/sys/netinet/ip_mroute.c:1389
#8  0xffffffff804d949d in ip_input (m=0xffffff010a1ca300) at 
/usr/src/sys/netinet/ip_input.c:667
#9  0xffffffff80470a6e in netisr_dispatch_src (proto=1, source=Variable 
"source" is not available.
) at /usr/src/sys/net/netisr.c:917
#10 0xffffffff8045746d in ether_demux (ifp=0xffffff00014fc000, 
m=0xffffff010a1ca300)
     at /usr/src/sys/net/if_ethersubr.c:895
#11 0xffffffff804578c0 in ether_input (ifp=0xffffff00014fc000, 
m=0xffffff010a1ca300)
     at /usr/src/sys/net/if_ethersubr.c:754
#12 0xffffffff802a324e in re_rxeof (sc=0xffffff80002a8000, rx_npktsp=0x0)
     at /usr/src/sys/dev/re/if_re.c:1987
#13 0xffffffff802a4db2 in re_int_task (arg=Variable "arg" is not available.
) at /usr/src/sys/dev/re/if_re.c:2201
#14 0xffffffff803e0b22 in taskqueue_run (queue=0xffffff000147f100)
     at /usr/src/sys/kern/subr_taskqueue.c:239
#15 0xffffffff8037f380 in intr_event_execute_handlers (p=Variable "p" is 
not available.
) at /usr/src/sys/kern/kern_intr.c:1165
#16 0xffffffff803808fe in ithread_loop (arg=0xffffff00013921c0)
     at /usr/src/sys/kern/kern_intr.c:1178
#17 0xffffffff8037d387 in fork_exit (callout=0xffffffff80380870 
<ithread_loop>,
     arg=0xffffff00013921c0, frame=0xffffff800008cc80) at 
/usr/src/sys/kern/kern_fork.c:843
#18 0xffffffff8064593e in fork_trampoline () at 
/usr/src/sys/amd64/amd64/exception.S:561
#19 0x0000000000000000 in ?? ()
#20 0x0000000000000000 in ?? ()
#21 0x0000000000000001 in ?? ()
#22 0x0000000000000000 in ?? ()
#23 0x0000000000000000 in ?? ()
#24 0x0000000000000000 in ?? ()
#25 0x0000000000000000 in ?? ()
#26 0x0000000000000000 in ?? ()
#27 0x0000000000000000 in ?? ()
#28 0x0000000000000000 in ?? ()
#29 0x0000000000000000 in ?? ()
#30 0x0000000000000000 in ?? ()
#31 0x0000000000000000 in ?? ()
#32 0x0000000000000000 in ?? ()
#33 0x0000000000000000 in ?? ()
#34 0x0000000000000000 in ?? ()
#35 0x0000000000000000 in ?? ()
#36 0x0000000000000000 in ?? ()
#37 0x0000000000000000 in ?? ()
#38 0x0000000000000000 in ?? ()
#39 0x0000000000000000 in ?? ()
#40 0x0000000000000000 in ?? ()
#41 0x0000000000000000 in ?? ()
#42 0x0000000000000000 in ?? ()
#43 0x0000000000c6d000 in ?? ()
#44 0x000000000000000b in ?? ()
#45 0xffffffff808cf500 in affinity ()
#46 0xffffffff808cf500 in affinity ()
#47 0xffffff0001486720 in ?? ()
#48 0xffffff800008c090 in ?? ()
#49 0xffffff800008c048 in ?? ()
#50 0xffffff0001484720 in ?? ()
#51 0xffffffff803c8159 in sched_switch (td=0xffffff00013921c0, 
newtd=0xffffffff80380870, flags=Variable "flags" is not available.
)
     at /usr/src/sys/kern/sched_ule.c:1858
Previous frame inner to this frame (corrupt stack?)
Comment 2 John Baldwin freebsd_committer freebsd_triage 2009-09-09 18:40:36 UTC 
Can you get a full stack trace?  (bt, where, etc.)  You stopped just before 
the useful bits.

-- 
John Baldwin
Comment 3 Mark Linimon freebsd_committer freebsd_triage 2009-09-09 19:29:40 UTC 
State Changed
From-To: open->feedback

Note that feedback was requested.
Comment 4 vladislav V. Prodan 2009-09-09 20:18:49 UTC 
(kgdb) bt
#0  doadump () at pcpu.h:223
#1  0xffffffff803a5219 in boot (howto=260) at 
/usr/src/sys/kern/kern_shutdown.c:416
#2  0xffffffff803a566c in panic (fmt=Variable "fmt" is not available.
) at /usr/src/sys/kern/kern_shutdown.c:579
#3  0xffffffff8065e30d in trap_fatal (frame=0xc, eva=Variable "eva" is 
not available.
) at /usr/src/sys/amd64/amd64/trap.c:852
#4  0xffffffff8065e6f4 in trap_pfault (frame=0xffffff800008c880, usermode=0)
     at /usr/src/sys/amd64/amd64/trap.c:768
#5  0xffffffff8065f13f in trap (frame=0xffffff800008c880) at 
/usr/src/sys/amd64/amd64/trap.c:494
#6  0xffffffff80645463 in calltrap () at 
/usr/src/sys/amd64/amd64/exception.S:224
#7  0xffffffff804dc1c4 in X_ip_mforward (ip=Variable "ip" is not available.
) at /usr/src/sys/netinet/ip_mroute.c:1389
#8  0xffffffff804d949d in ip_input (m=0xffffff010a1ca300) at 
/usr/src/sys/netinet/ip_input.c:667
#9  0xffffffff80470a6e in netisr_dispatch_src (proto=1, source=Variable 
"source" is not available.
) at /usr/src/sys/net/netisr.c:917
#10 0xffffffff8045746d in ether_demux (ifp=0xffffff00014fc000, 
m=0xffffff010a1ca300)
     at /usr/src/sys/net/if_ethersubr.c:895
#11 0xffffffff804578c0 in ether_input (ifp=0xffffff00014fc000, 
m=0xffffff010a1ca300)
     at /usr/src/sys/net/if_ethersubr.c:754
#12 0xffffffff802a324e in re_rxeof (sc=0xffffff80002a8000, 
rx_npktsp=0x0) at /usr/src/sys/dev/re/if_re.c:1987
#13 0xffffffff802a4db2 in re_int_task (arg=Variable "arg" is not available.
) at /usr/src/sys/dev/re/if_re.c:2201
#14 0xffffffff803e0b22 in taskqueue_run (queue=0xffffff000147f100) at 
/usr/src/sys/kern/subr_taskqueue.c:239
#15 0xffffffff8037f380 in intr_event_execute_handlers (p=Variable "p" is 
not available.
) at /usr/src/sys/kern/kern_intr.c:1165
#16 0xffffffff803808fe in ithread_loop (arg=0xffffff00013921c0) at 
/usr/src/sys/kern/kern_intr.c:1178
#17 0xffffffff8037d387 in fork_exit (callout=0xffffffff80380870 
<ithread_loop>, arg=0xffffff00013921c0,
     frame=0xffffff800008cc80) at /usr/src/sys/kern/kern_fork.c:843
#18 0xffffffff8064593e in fork_trampoline () at 
/usr/src/sys/amd64/amd64/exception.S:561
#19 0x0000000000000000 in ?? ()
#20 0x0000000000000000 in ?? ()
#21 0x0000000000000001 in ?? ()
#22 0x0000000000000000 in ?? ()
#23 0x0000000000000000 in ?? ()
#24 0x0000000000000000 in ?? ()
#25 0x0000000000000000 in ?? ()
#26 0x0000000000000000 in ?? ()
---Type <return> to continue, or q <return> to quit---
#27 0x0000000000000000 in ?? ()
#28 0x0000000000000000 in ?? ()
#29 0x0000000000000000 in ?? ()
#30 0x0000000000000000 in ?? ()
#31 0x0000000000000000 in ?? ()
#32 0x0000000000000000 in ?? ()
#33 0x0000000000000000 in ?? ()
#34 0x0000000000000000 in ?? ()
#35 0x0000000000000000 in ?? ()
#36 0x0000000000000000 in ?? ()
#37 0x0000000000000000 in ?? ()
#38 0x0000000000000000 in ?? ()
#39 0x0000000000000000 in ?? ()
#40 0x0000000000000000 in ?? ()
#41 0x0000000000000000 in ?? ()
#42 0x0000000000000000 in ?? ()
#43 0x0000000000c6d000 in ?? ()
#44 0x000000000000000b in ?? ()
#45 0xffffffff808cf500 in affinity ()
#46 0xffffffff808cf500 in affinity ()
#47 0xffffff0001486720 in ?? ()
#48 0xffffff800008c090 in ?? ()
#49 0xffffff800008c048 in ?? ()
#50 0xffffff0001484720 in ?? ()
#51 0xffffffff803c8159 in sched_switch (td=0xffffff00013921c0, 
newtd=0xffffffff80380870, flags=Variable "flags" is not available.
)
     at /usr/src/sys/kern/sched_ule.c:1858
Previous frame inner to this frame (corrupt stack?)
Comment 5 Andriy Gapon freebsd_committer freebsd_triage 2010-12-05 12:44:20 UTC 
Is this still an issue?
Looks like a possible problem with re driver.  Probably worth discussing on net@
mailing list.

-- 
Andriy Gapon
Comment 6 Andriy Gapon freebsd_committer freebsd_triage 2010-12-05 19:49:04 UTC 
State Changed
From-To: feedback->closed

It seems that the problem doesn't happen with the latest code.