Bug 142108

Summary: Panics with FreeBSD 8.0-STABLE and 8.1-RELEASE-p6: vm_fault: fault on nofault entry, addr: c32a4000
Product: Base System Reporter: Alekseev Sergey <varnie29a>
Component: i386Assignee: freebsd-i386 (Nobody) <i386>
Status: Open ---    
Severity: Affects Some People CC: grahamperrin
Priority: --- Keywords: crash
Version: Unspecified   
Hardware: Any   
OS: Any   

Description Alekseev Sergey 2009-12-28 19:10:01 UTC
good day.

my FreeBSD 8.0 box works quite well but meanwhile ago i've begun getting
kernel panics several times per week. i've tested with "memtest" my memory
stick (Corsair 1GB) and it looked well.

i have several generated core dumps and here's one of them:
///////////////////////////////////////////////////////////////////////////////
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd"...

Unread portion of the kernel message buffer:
panic: vm_fault: fault on nofault entry, addr: c32a4000
cpuid = 0
Uptime: 1h32m14s
Physical memory: 999 MB
Dumping 200 MB: 185 169 153 137 121 105 89 73 57 41 25 9

Reading symbols from /boot/kernel/snd_emu10k1.ko...Reading symbols from /boot/kernel/snd_emu10k1.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/snd_emu10k1.ko
Reading symbols from /boot/kernel/sound.ko...Reading symbols from /boot/kernel/sound.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/sound.ko
Reading symbols from /boot/kernel/coretemp.ko...Reading symbols from /boot/kernel/coretemp.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/coretemp.ko
Reading symbols from /boot/modules/nvidia.ko...done.
Loaded symbols for /boot/modules/nvidia.ko
Reading symbols from /boot/kernel/linux.ko...Reading symbols from /boot/kernel/linux.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/linux.ko
#0  doadump () at pcpu.h:246
246		__asm __volatile("movl %%fs:0,%0" : "=r" (td));
(kgdb) bt
#0  doadump () at pcpu.h:246
#1  0xc087cf67 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:416
#2  0xc087d259 in panic (fmt=) at /usr/src/sys/kern/kern_shutdown.c:579
#3  0xc0ad4637 in vm_fault (map=0xc2090000, vaddr=3274326016, 
    fault_type=1 '\001', fault_flags=0) at /usr/src/sys/vm/vm_fault.c:283
#4  0xc0bae86e in trap_pfault (frame=0xe74aaa3c, usermode=0, eva=3274328160)
    at /usr/src/sys/i386/i386/trap.c:835
#5  0xc0baf2b5 in trap (frame=0xe74aaa3c) at /usr/src/sys/i386/i386/trap.c:528
#6  0xc0b91aab in calltrap () at /usr/src/sys/i386/i386/exception.s:165
#7  0xc0aec40a in vm_reserv_alloc_page (object=0xc207c220, pindex=2321)
    at /usr/src/sys/vm/vm_reserv.c:320
#8  0xc0ae5d0e in vm_page_alloc (object=0xc207c220, pindex=2321, req=64)
    at /usr/src/sys/vm/vm_page.c:1081
#9  0xc0ad4bc1 in vm_fault (map=0xc4d55658, vaddr=735662080, 
    fault_type=2 '\002', fault_flags=) at /usr/src/sys/vm/vm_fault.c:427
#10 0xc0bae7bb in trap_pfault (frame=0xe74aad38, usermode=1, eva=735665568)
    at /usr/src/sys/i386/i386/trap.c:823
#11 0xc0baf129 in trap (frame=0xe74aad38) at /usr/src/sys/i386/i386/trap.c:396
#12 0xc0b91aab in calltrap () at /usr/src/sys/i386/i386/exception.s:165
#13 0x2833cb10 in ?? ()
(kgdb) bt full
#0  doadump () at pcpu.h:246
No locals.
#1  0xc087cf67 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:416
	_giantcnt = (kgdb) quit"
///////////////////////////////////////////////////////////////////////////////

if you need more detailed info about my FreeBSD box, please let me know.

How-To-Repeat: it repeats randomly
Comment 1 Gyver Def 2010-04-28 11:30:19 UTC
Hi,

Problem still exists on "FreeBSD 8.0-STABLE #18: Tue Apr 27 09:50:34  
CEST 2010". I have multiple dumps if that will help.

panic: vm_fault: fault on nofault entry, addr: 8125d000
cpuid = 0
Uptime: 3h27m9s
Physical memory: 3059 MB
Dumping 551 MB: 536 520 504 488 472 456 440 424 408 392 376 360 344  
328 312 296 280 264 248 232 216 200 184 168 152 136 120 104 88 72 56  
40 24 8
Dump complete
Automatic reboot in 15 seconds - press a key on the console to abort
interrupt                   total
irq14: ata0                        80771
irq15: ata1                        81807
irq18: uhci2+                     946495
irq21: xl0                      16676034
irq22: skc0 em0                 17611761
irq23: em1 xl1+                    83388
cpu0: timer                     24887686
cpu1: timer                     24887214
Total                    85255157
panic: watchdog timeout
cpuid = 0
Uptime: 3h27m24s
Physical memory: 3059 MB
Dumping 551 MB: 536 520 504 488 472 456 440 424 408 392 376 360 344  
328 312 296 280 264 248 232 216 200 184 168 152 136 120 104 88 72 56  
40 24 8

Reading symbols from /boot/kernel/zfs.ko...Reading symbols from /boot/ 
kernel/zfs.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/zfs.ko
Reading symbols from /boot/kernel/opensolaris.ko...Reading symbols  
from /boot/kernel/opensolaris.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/opensolaris.ko
#0  doadump () at pcpu.h:246
246<--->pcpu.h: No such file or directory.
<------>in pcpu.h
(kgdb) #0  doadump () at pcpu.h:246
#1  0x80674c33 in boot (howto=260) at /usr/src/sys/kern/ 
kern_shutdown.c:416
#2  0x80674f16 in panic (fmt=Variable "fmt" is not available.
) at /usr/src/sys/kern/kern_shutdown.c:579
#3  0x8063129e in hardclock (usermode=-1, pc=2157072626)
     at /usr/src/sys/kern/kern_clock.c:765
#4  0x8090d9df in lapic_handle_timer (frame=0x865d3844)
     at /usr/src/sys/i386/i386/local_apic.c:791
#5  0x8090664f in Xtimerint () at apic_vector.s:108
#6  0x809250f2 in DELAY (n=100000) at cpufunc.h:331
#7  0x806742bd in shutdown_panic (junk=0x0, howto=260)
     at /usr/src/sys/kern/kern_shutdown.c:464
#8  0x80674cb4 in boot (howto=260) at /usr/src/sys/kern/ 
kern_shutdown.c:419
#9  0x80674f16 in panic (fmt=Variable "fmt" is not available.
) at /usr/src/sys/kern/kern_shutdown.c:579
#10 0x808aa091 in vm_fault (map=0x8168a000, vaddr=2166738944,.
     fault_type=1 '\001', fault_flags=0) at /usr/src/sys/vm/vm_fault.c: 
283
#11 0x80920f14 in trap_pfault (frame=0x865d3b58, usermode=0,  
eva=2166742016)
     at /usr/src/sys/i386/i386/trap.c:840
#12 0x8092186a in trap (frame=0x865d3b58) at /usr/src/sys/i386/i386/ 
trap.c:533
#13 0x8090606b in calltrap () at /usr/src/sys/i386/i386/exception.s:165
#14 0x809050eb in bus_dmamap_load_mbuf_sg (dmat=0x86addd00,  
map=0x80a56d20,.
     m0=0x957fa000, segs=0x865d3c0c, nsegs=0x865d3c14, flags=1) at  
pmap.h:300
#15 0x8052d241 in lem_get_buf (adapter=0x86aef000, i=229)
     at /usr/src/sys/dev/e1000/if_lem.c:3137
#16 0x80530017 in lem_rxeof (adapter=0x86aef000, count=99)
     at /usr/src/sys/dev/e1000/if_lem.c:3525
#17 0x805305bd in lem_handle_rxtx (context=0x86aef000, pending=1)
     at /usr/src/sys/dev/e1000/if_lem.c:1353
#18 0x806ac5ba in taskqueue_run (queue=0x86a7ed80)
     at /usr/src/sys/kern/subr_taskqueue.c:239
#19 0x806ac7ab in taskqueue_thread_loop (arg=0x86af35a8)
     at /usr/src/sys/kern/subr_taskqueue.c:360
#20 0x8064af59 in fork_exit (callout=0x806ac6ee  
<taskqueue_thread_loop>,.
     arg=0x86af35a8, frame=0x865d3d38) at /usr/src/sys/kern/ 
kern_fork.c:843
#21 0x809060e0 in fork_trampoline () at /usr/src/sys/i386/i386/ 
exception.s:270

Best regards,
GD
Comment 2 Devin Teske freebsd_committer freebsd_triage 2013-03-13 21:05:58 UTC
Got this recently.

However, was unable to get a crash-dump (panic'd on crash-dump). Panic text is
as follows:

panic: vm_fault: fault on nofault entry, addr: ddbb7xxx
cupid = 0
Uptime: 31d0h51m43s
Physical memory: 2626 MB
Dumping 198 MB:panic: bufwrite: buffer is not busy???
cupid - 9
Uptime: 31d0h51m44s
Automatic reboot in 15 seconds - press a key on the console to abort

Any ideas?
-- 
Devin

_____________
The information contained in this message is proprietary and/or confidential. If you are not the intended recipient, please: (i) delete the message and all copies; (ii) do not disclose, distribute or use the message in any manner; and (iii) notify the sender immediately. In addition, please be aware that any message addressed to our domain is subject to archiving and review by persons other than the intended recipient. Thank you.
Comment 3 Devin Teske freebsd_committer freebsd_triage 2013-03-13 22:01:19 UTC
Forgot to mention, that this was on 8.1-RELEASE-p6.
-- 
Devin

_____________
The information contained in this message is proprietary and/or confidential. If you are not the intended recipient, please: (i) delete the message and all copies; (ii) do not disclose, distribute or use the message in any manner; and (iii) notify the sender immediately. In addition, please be aware that any message addressed to our domain is subject to archiving and review by persons other than the intended recipient. Thank you.
Comment 4 Eitan Adler freebsd_committer freebsd_triage 2017-12-31 07:59:54 UTC
For bugs matching the following criteria:

Status: In Progress Changed: (is less than) 2014-06-01

Reset to default assignee and clear in-progress tags.

Mail being skipped
Comment 5 Graham Perrin freebsd_committer freebsd_triage 2022-10-17 12:18:13 UTC
Keyword: 

    crash

– in lieu of summary line prefix: 

    [panic]

* bulk change for the keyword
* summary lines may be edited manually (not in bulk). 

Keyword descriptions and search interface: 

    <https://bugs.freebsd.org/bugzilla/describekeywords.cgi>
Comment 6 Graham Perrin freebsd_committer freebsd_triage 2023-06-24 13:38:14 UTC
(In reply to Devin Teske from comment #2)

Thanks, is this reproducible in 2023 with an active branch of the OS?