From nobody@FreeBSD.org Sun Dec 25 23:42:31 2011 Return-Path: Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 4A30C106566B for ; Sun, 25 Dec 2011 23:42:31 +0000 (UTC) (envelope-from nobody@FreeBSD.org) Received: from red.freebsd.org (red.freebsd.org [IPv6:2001:4f8:fff6::22]) by mx1.freebsd.org (Postfix) with ESMTP id 389628FC0A for ; Sun, 25 Dec 2011 23:42:31 +0000 (UTC) Received: from red.freebsd.org (localhost [127.0.0.1]) by red.freebsd.org (8.14.4/8.14.4) with ESMTP id pBPNgU94033523 for ; Sun, 25 Dec 2011 23:42:30 GMT (envelope-from nobody@red.freebsd.org) Received: (from nobody@localhost) by red.freebsd.org (8.14.4/8.14.4/Submit) id pBPNgUFg033522; Sun, 25 Dec 2011 23:42:30 GMT (envelope-from nobody) Message-Id: <201112252342.pBPNgUFg033522@red.freebsd.org> Date: Sun, 25 Dec 2011 23:42:30 GMT From: Rory Arms To: freebsd-gnats-submit@FreeBSD.org Subject: panic: vm_fault: fault on nofault entry, addr: c2781000 X-Send-Pr-Version: www-3.1 X-GNATS-Notify: >Number: 163618 >Category: kern >Synopsis: panic: vm_fault: fault on nofault entry, addr: c2781000 >Confidential: no >Severity: serious >Priority: low >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Sun Dec 25 23:50:08 UTC 2011 >Closed-Date: >Last-Modified: >Originator: Rory Arms >Release: 7.4-RELEASE >Organization: >Environment: FreeBSD Tserver 7.4-RELEASE FreeBSD 7.4-RELEASE #3: Fri Mar 4 07:23:32 EST 2011 root@Tserver:/mnt/da0d/obj/usr/src/sys/TSERVER i386 >Description: Tserver[/boot/kernel] 0> sudo kgdb kernel /usr/local/crash/vmcore.0GNU gdb 6.1.1 [FreeBSD] Copyright 2004 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "i386-marcel-freebsd"... Unread portion of the kernel message buffer: panic: vm_fault: fault on nofault entry, addr: c2781000 cpuid = 0 Uptime: 78d10h16m47s (da0:ahc0:0:6:0): SYNCHRONIZE CACHE(10). CDB: 35 0 0 0 0 0 0 0 0 0 (da0:ahc0:0:6:0): Sense Error Code 0xe0 at block no. -423037557 (decimal) Physical memory: 1015 MB Dumping 256 MB: 241 225 209 193 177 161 145 129ath0: device timeout 113 97 81 65 49 33 17 1 Reading symbols from /boot/kernel/if_bridge.ko...Reading symbols from /boot/kernel/if_bridge.ko.symbols...done. done. Loaded symbols for /boot/kernel/if_bridge.ko Reading symbols from /boot/kernel/bridgestp.ko...Reading symbols from /boot/kernel/bridgestp.ko.symbols...done. done. Loaded symbols for /boot/kernel/bridgestp.ko Reading symbols from /boot/kernel/green_saver.ko...Reading symbols from /boot/kernel/green_saver.ko.symbols...done. done. Loaded symbols for /boot/kernel/green_saver.ko #0 doadump () at pcpu.h:197 197 pcpu.h: No such file or directory. in pcpu.h (kgdb) bt #0 doadump () at pcpu.h:197 #1 0xc05e3836 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:421 #2 0xc05e3b1c in panic (fmt=Variable "fmt" is not available. ) at /usr/src/sys/kern/kern_shutdown.c:576 #3 0xc082bc08 in vm_fault (map=0xc1171000, vaddr=3262648320, fault_type=2 '\002', fault_flags=0) at /usr/src/sys/vm/vm_fault.c:277 #4 0xc08852e4 in trap_pfault (frame=0xe68bfa5c, usermode=0, eva=3262650572) at /usr/src/sys/i386/i386/trap.c:852 #5 0xc0885d72 in trap (frame=0xe68bfa5c) at /usr/src/sys/i386/i386/trap.c:541 #6 0xc086922b in calltrap () at /usr/src/sys/i386/i386/exception.s:166 #7 0xc087d7ed in pmap_insert_entry (pmap=Variable "pmap" is not available. ) at /usr/src/sys/i386/i386/pmap.c:2446 #8 0xc08828e8 in pmap_enter (pmap=0xc655b540, va=696795136, access=2 '\002', m=Variable "m" is not available. ) at /usr/src/sys/i386/i386/pmap.c:3371 #9 0xc082d595 in vm_fault (map=0xc655b4b0, vaddr=696795136, fault_type=2 '\002', fault_flags=8) at /usr/src/sys/vm/vm_fault.c:894 #10 0xc0885237 in trap_pfault (frame=0xe68bfd38, usermode=1, eva=696795152) at /usr/src/sys/i386/i386/trap.c:840 #11 0xc0885c0a in trap (frame=0xe68bfd38) at /usr/src/sys/i386/i386/trap.c:406 #12 0xc086922b in calltrap () at /usr/src/sys/i386/i386/exception.s:166 #13 0x28cef2c1 in ?? () Previous frame inner to this frame (corrupt stack?) (kgdb) print panicstr $1 = 0xc097a9a0 "vm_fault: fault on nofault entry, addr: c2781000" (kgdb) All the panics I have seem to be related to some interaction between if_bridge and ath(4), as I usually see ath(4) or fxp(1) (the two interfaces bridged) resets in the logs, leading up to the panic >How-To-Repeat: not repeatable >Fix: >Release-Note: >Audit-Trail: >Unformatted: