From nobody@FreeBSD.org  Sun Mar  2 17:17:09 2008
Return-Path: <nobody@FreeBSD.org>
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 86147106566B
	for <freebsd-gnats-submit@FreeBSD.org>; Sun,  2 Mar 2008 17:17:09 +0000 (UTC)
	(envelope-from nobody@FreeBSD.org)
Received: from www.freebsd.org (www.freebsd.org [IPv6:2001:4f8:fff6::21])
	by mx1.freebsd.org (Postfix) with ESMTP id 685C38FC13
	for <freebsd-gnats-submit@FreeBSD.org>; Sun,  2 Mar 2008 17:17:09 +0000 (UTC)
	(envelope-from nobody@FreeBSD.org)
Received: from www.freebsd.org (localhost [127.0.0.1])
	by www.freebsd.org (8.14.2/8.14.2) with ESMTP id m22HEDg2025869
	for <freebsd-gnats-submit@FreeBSD.org>; Sun, 2 Mar 2008 17:14:13 GMT
	(envelope-from nobody@www.freebsd.org)
Received: (from nobody@localhost)
	by www.freebsd.org (8.14.2/8.14.1/Submit) id m22HEDUq025868;
	Sun, 2 Mar 2008 17:14:13 GMT
	(envelope-from nobody)
Message-Id: <200803021714.m22HEDUq025868@www.freebsd.org>
Date: Sun, 2 Mar 2008 17:14:13 GMT
From: Kirill <kirill@niky.net.ua>
To: freebsd-gnats-submit@FreeBSD.org
Subject: kernel panic pcpu.h or 0x00000000 in ?? ()
X-Send-Pr-Version: www-3.1
X-GNATS-Notify:

>Number:         121294
>Category:       kern
>Synopsis:       [panic] kernel panic pcpu.h or 0x00000000 in ?? ()
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    jh
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sun Mar 02 17:20:02 UTC 2008
>Closed-Date:    Wed Nov 24 19:31:55 UTC 2010
>Last-Modified:  Wed Nov 24 19:31:55 UTC 2010
>Originator:     Kirill
>Release:        FreeBSD 7.0-PRERELEASE
>Organization:
Local Network 1000 computers with vpn (mpd)
>Environment:
FreeBSD main.deeptown.net 7.0-PRERELEASE FreeBSD 7.0-PRERELEASE #10: Fri Feb 22 22:18:52 EET 2008
  root@main.deeptown.net:/usr/obj/usr/src/sys/main  i386
>Description:
Casually panic. It can be two times a day or one time a week.
main# kgdb -v kernel.debug /var/crash/vmcore.0
kgdb: core file: /var/crash/vmcore.0
kgdb: kernel image: kernel.debug
kgdb: kvm_nlist(_stopped_cpus):
kgdb: kvm_nlist(_stoppcbs):
[GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"]
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd".
Cannot access memory at address 0x0
(kgdb) list
1       /*-
2        * Copyright (c) 1991 Regents of the University of California.
3        * All rights reserved.
4        * Copyright (c) 1994 John S. Dyson
5        * All rights reserved.
6        * Copyright (c) 1994 David Greenman
7        * All rights reserved.
8        * Copyright (c) 2005 Alan L. Cox <alc@cs.rice.edu>
9        * All rights reserved.
10       *
(kgdb) backtrace
#0  0x00000000 in ?? ()

main# kgdb -v kernel.debug /var/crash/vmcore.1
kgdb: core file: /var/crash/vmcore.1
kgdb: kernel image: kernel.debug
kgdb: kvm_nlist(_stopped_cpus):
kgdb: kvm_nlist(_stoppcbs):
[GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so: Undefined symbol "ps_pgl
obal_lookup"]
GNU gdb 6.1.1 [FreeBSD]
main# kgdb -v kernel.debug /var/crash/vmcore.1
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd".

Unread portion of the kernel message buffer:
panic: vm_fault: fault on nofault entry, addr: e53d1000
Uptime: 9h59m28s
Physical memory: 2029 MB
Dumping 299 MB: 284 268 252 236 220 204 188 172 156 140 124 108 92 76 60 44 28 12

#0  doadump () at pcpu.h:195
195             __asm __volatile("movl %%fs:0,%0" : "=r" (td));
(kgdb) list
190     static __inline struct thread *
191     __curthread(void)
192     {
193             struct thread *td;
194
195             __asm __volatile("movl %%fs:0,%0" : "=r" (td));
196             return (td);
197     }
198     #define curthread               (__curthread())
199
(kgdb) backtrace
#0  doadump () at pcpu.h:195
#1  0xc04e4d24 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:409
#2  0xc04e4eed in panic (fmt=Variable "fmt" is not available.
) at /usr/src/sys/kern/kern_shutdown.c:563
#3  0xc0626238 in vm_fault (map=0xc1054000, vaddr=3845984256, fault_type=1 '\001', fault_flags=0)
    at /usr/src/sys/vm/vm_fault.c:275
#4  0xc066955b in trap_pfault (frame=0xe53d3bdc, usermode=0, eva=3845984256)
    at /usr/src/sys/i386/i386/trap.c:801
#5  0xc0669e96 in trap (frame=0xe53d3bdc) at /usr/src/sys/i386/i386/trap.c:490
#6  0xc06550cb in calltrap () at /usr/src/sys/i386/i386/exception.s:139
#7  0xc0667852 in generic_bcopy () at /usr/src/sys/i386/i386/support.s:498
Previous frame inner to this frame (corrupt stack?)
>How-To-Repeat:
I don't know how to repeat the problem. Nothing important in syslog except.
panic addr always the same

Mar  2 02:59:04 main kernel: panic: vm_fault: fault on nofault entry, addr: e53d1000
Mar  2 02:59:04 main kernel: Uptime: 7d3h9m50s
Mar  2 02:59:04 main kernel: Physical memory: 2029 MB
Mar  2 02:59:04 main kernel: Dumping 307 MB: 292 276 260 244 228 212 196 180 164 148 132 116 100 84
68 52 36 20 4
Mar  2 02:59:04 main kernel: Dump complete
Mar  2 02:59:04 main kernel: Automatic reboot in 15 seconds - press a key on the console to abort

>Fix:


>Release-Note:
>Audit-Trail:

From: Kai Wang <kaiwang27@gmail.com>
To: bug-followup@freebsd.org
Cc:  
Subject: Re: kern/121294: kernel panic pcpu.h or 0x00000000 in ?? ()
Date: Mon, 3 Mar 2008 06:41:33 +0100

 On Sun, Mar 02, 2008 at 05:14:13PM +0000, Kirill wrote:
 > Casually panic. It can be two times a day or one time a week.
 
 Same here, my box (7.0-PRE) crashed once the day before yesterday, twice
 yesterday.
 
 plan0# kgdb -v kernel.debug /var/crash/vmcore.1
 kgdb: core file: /var/crash/vmcore.1
 kgdb: kernel image: kernel.debug
 [GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"]
 GNU gdb 6.1.1 [FreeBSD]
 Copyright 2004 Free Software Foundation, Inc.
 GDB is free software, covered by the GNU General Public License, and you are
 welcome to change it and/or distribute copies of it under certain conditions.
 Type "show copying" to see the conditions.
 There is absolutely no warranty for GDB.  Type "show warranty" for details.
 This GDB was configured as "i386-marcel-freebsd".
 
 Unread portion of the kernel message buffer:
 Cannot access memory at address 0x839858db
 (kgdb) bt
 #0  0x00000000 in ?? ()
 (kgdb) list
 1       /*-
 2        * Copyright (c) 1991 Regents of the University of California.
 3        * All rights reserved.
 4        * Copyright (c) 1994 John S. Dyson
 5        * All rights reserved.
 6        * Copyright (c) 1994 David Greenman
 7        * All rights reserved.
 8        * Copyright (c) 2005 Alan L. Cox <alc@cs.rice.edu>
 9        * All rights reserved.
 10       *
 (kgdb)

From: "kirill" <kirill@niky.net.ua>
To: <bug-followup@FreeBSD.org>,
	<kirill@niky.net.ua>
Cc:  
Subject: Re: kern/121294: [panic] kernel panic pcpu.h or 0x00000000 in ?? ()
Date: Mon, 3 Mar 2008 20:02:31 +0200

 This is a multi-part message in MIME format.
 
 ------=_NextPart_000_0002_01C87D69.83F66420
 Content-Type: text/plain;
 	charset="koi8-r"
 Content-Transfer-Encoding: quoted-printable
 
 I'm update system to FreeBSD main.deeptown.net 7.0-STABLE FreeBSD =
 7.0-STABLE #11: Sun Mar  2 23:57:52 EET 2008     root@m
 ain.deeptown.net:/usr/obj/usr/src/sys/main  i386
 also panic. :(
 
 Mar  3 19:25:56 main kernel: panic: vm_fault: fault on nofault entry, =
 addr: e53d1000
 Mar  3 19:25:56 main kernel: Uptime: 10h39m21s
 Mar  3 19:25:56 main kernel: Physical memory: 2029 MB
 Mar  3 19:25:56 main kernel: Dumping 231 MB: 216 200 184 168 152 136 120 =
 104 88 72 56 40 24 8
 Mar  3 19:25:56 main kernel: Dump complete
 
 main# cd /usr/obj/usr/src/sys/main/
 main# kgdb -v kernel.debug /var/crash/vmcore.0
 kgdb: core file: /var/crash/vmcore.0
 kgdb: kernel image: kernel.debug
 [GDB will not be able to debug user-mode threads: =
 /usr/lib/libthread_db.so: Undefined symbol "ps_pgl
 obal_lookup"]
 GNU gdb 6.1.1 [FreeBSD]
 Copyright 2004 Free Software Foundation, Inc.
 GDB is free software, covered by the GNU General Public License, and you =
 are
 welcome to change it and/or distribute copies of it under certain =
 conditions.
 Type "show copying" to see the conditions.
 There is absolutely no warranty for GDB.  Type "show warranty" for =
 details.
 This GDB was configured as "i386-marcel-freebsd".
 There is no member named pathname.
 (kgdb) list
 1       /*-
 2        * Copyright (c) 1986, 1988, 1991, 1993
 3        *      The Regents of the University of California.  All rights =
 reserved.
 4        * (c) UNIX System Laboratories, Inc.
 5        * All or some portions of this file are derived from material =
 licensed
 6        * to the University of California by American Telephone and =
 Telegraph
 7        * Co. or Unix System Laboratories, Inc. and are reproduced =
 herein with
 8        * the permission of UNIX System Laboratories, Inc.
 9        *
 10       * Redistribution and use in source and binary forms, with or =
 without
 (kgdb) bt
 #0  doadump () at pcpu.h:195
 #1  0xc04eafc3 in boot (howto=3D260) at =
 /usr/src/sys/kern/kern_shutdown.c:409
 #2  0xc04eb19f in panic (fmt=3DVariable "fmt" is not available.
 ) at /usr/src/sys/kern/kern_shutdown.c:563
 #3  0xc06396a8 in vm_fault (map=3D0xc1054000, vaddr=3D3845984256, =
 fault_type=3D1 '\001', fault_flags=3D0)
     at /usr/src/sys/vm/vm_fault.c:275
 #4  0xc067f8fc in trap_pfault (frame=3D0xe53d3bdc, usermode=3D0, =
 eva=3D3845984256)
     at /usr/src/sys/i386/i386/trap.c:801
 #5  0xc0680269 in trap (frame=3D0xe53d3bdc) at =
 /usr/src/sys/i386/i386/trap.c:490
 #6  0xc066a3cb in calltrap () at /usr/src/sys/i386/i386/exception.s:139
 #7  0xc067da06 in generic_bcopy () at =
 /usr/src/sys/i386/i386/support.s:498
 Previous frame inner to this frame (corrupt stack?)
 (kgdb)
 
 ------=_NextPart_000_0002_01C87D69.83F66420--
 

From: "kirill" <kirill@niky.net.ua>
To: <bug-followup@FreeBSD.org>
Cc:  
Subject: Re: kern/121294: [panic] kernel panic pcpu.h or 0x00000000 in ?? ()
Date: Fri, 14 Mar 2008 12:26:58 +0200

 As I remember, I only set pooling for all network interfaces and system 
 uptime now is up 10 days, 16:57.
 What can I do to help FreeBSD and solve the problem? 
 
State-Changed-From-To: open->feedback 
State-Changed-By: vwe 
State-Changed-When: Tue Apr 8 22:25:34 UTC 2008 
State-Changed-Why:  

7.0-PRE is outdated 
can you please check if you can recreate the problem with a very recent 
7-STABLE version? 

http://www.freebsd.org/cgi/query-pr.cgi?pr=121294 

From: Kevin Downey <hiredman@thelastcitadel.com>
To: bug-followup@FreeBSD.org, kirill@niky.net.ua
Cc:  
Subject: Re: kern/121294: [panic] kernel panic pcpu.h or 0x00000000 in ?? ()
Date: Thu, 08 May 2008 23:15:09 -0700

 FreeBSD eskarina.nexus.lan 7.0-STABLE FreeBSD 7.0-STABLE #8: Thu May  8
 01:04:43 PDT 2008     root@eskarina.nexus.lan:/usr/obj/usr/src/sys/ES
 i386
 
 I am not sure if this is the same problem or if the crashdump
 resemblances are merely superficial.
 
  
 Fatal trap 12: page fault while in kernel mode
 cpuid = 1; apic id = 01
 fault virtual address	= 0x4
 fault code		= supervisor read, page not present
 instruction pointer	= 0x20:0xc05967eb
 stack pointer	        = 0x28:0xf6591aa4
 frame pointer	        = 0x28:0xf6591adc
 code segment		= base 0x0, limit 0xfffff, type 0x1b
 			= DPL 0, pres 1, def32 1, gran 1
 processor eflags	= interrupt enabled, resume, IOPL = 0
 current process		= 7079 (top)
 trap number		= 12
 panic: page fault
 cpuid = 1
 Uptime: 5h10m6s
 Physical memory: 2013 MB
 Dumping 212 MB: 197 181 165 149 133 117 101 85 69 53 37 21 5
 
 #0  doadump () at pcpu.h:195
 195		__asm __volatile("movl %%fs:0,%0" : "=r" (td));
 (kgdb) where
 #0  doadump () at pcpu.h:195
 #1  0xc054e308 in boot (howto=260)
 at /usr/src/sys/kern/kern_shutdown.c:418
 #2  0xc054e5db in panic (fmt=Variable "fmt" is not available.
 ) at /usr/src/sys/kern/kern_shutdown.c:572
 #3  0xc06f4bb4 in trap_fatal (frame=0xf6591a64, eva=4)
 at /usr/src/sys/i386/i386/trap.c:899
 #4  0xc06f4e04 in trap_pfault (frame=0xf6591a64, usermode=0, eva=4)
 at /usr/src/sys/i386/i386/trap.c:812
 #5  0xc06f5736 in trap (frame=0xf6591a64)
 at /usr/src/sys/i386/i386/trap.c:490
 #6  0xc06dd04b in calltrap () at /usr/src/sys/i386/i386/exception.s:139
 #7  0xc05967eb in b_to_q (src=0xf6591b29 "1\033[11;61H4.17\033[12;51H1
 \033[12;58H4 14.70\033[13;22H51\033[13;44HCPU0  \033[13;58H1 13.09
 \033[1�Zv�", amount=1, clistp=0xcfaa9c38)
 at /usr/src/sys/kern/tty_subr.c:104
 #8  0xc0591997 in ttwrite (tp=0xcfaa9c00, uio=0xf6591c60, flag=0)
 at /usr/src/sys/kern/tty.c:2182
 #9  0xc05956ff in ptswrite (dev=0xd11cb500, uio=0xf6591c60, flag=0) at
 linedisc.h:107
 #10 0xc0519c85 in giant_write (dev=0xd11cb500, uio=0xf6591c60, ioflag=0)
 at /usr/src/sys/kern/kern_conf.c:437
 #11 0xc04f5c03 in devfs_write_f (fp=0xd1236750, uio=0xf6591c60,
 cred=0xd023ed00, flags=0, td=0xd110eaa0)
 at /usr/src/sys/fs/devfs/devfs_vnops.c:1307
 #12 0xc0581e15 in dofilewrite (td=0xd110eaa0, fd=1, fp=0xd1236750,
 auio=0xf6591c60, offset=-1, flags=0) at file.h:254
 #13 0xc05820b1 in kern_writev (td=0xd110eaa0, fd=1, auio=0xf6591c60)
 at /usr/src/sys/kern/sys_generic.c:401
 #14 0xc058211d in write (td=0xd110eaa0, uap=0xf6591cfc)
 at /usr/src/sys/kern/sys_generic.c:317
 #15 0xc06f512c in syscall (frame=0xf6591d38)
 at /usr/src/sys/i386/i386/trap.c:1035
 #16 0xc06dd0b0 in Xint0x80_syscall ()
 at /usr/src/sys/i386/i386/exception.s:196
 #17 0x00000033 in ?? ()
 Previous frame inner to this frame (corrupt stack?)
 
 
State-Changed-From-To: feedback->open 
State-Changed-By: jh 
State-Changed-When: Wed Nov 24 18:01:59 UTC 2010 
State-Changed-Why:  
Back to open. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=121294 
State-Changed-From-To: open->feedback 
State-Changed-By: jh 
State-Changed-When: Wed Nov 24 18:02:36 UTC 2010 
State-Changed-Why:  
Can you still reproduce this on 8.1 or later? 


Responsible-Changed-From-To: freebsd-bugs->jh 
Responsible-Changed-By: jh 
Responsible-Changed-When: Wed Nov 24 18:02:36 UTC 2010 
Responsible-Changed-Why:  
Track. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=121294 
State-Changed-From-To: feedback->closed 
State-Changed-By: jh 
State-Changed-When: Wed Nov 24 19:31:54 UTC 2010 
State-Changed-Why:  
Submitter hasn't experienced panics after upgrade to 7.3. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=121294 
>Unformatted:
