amd64/134978: g_up pmap amd64 panic

[G.Def]

>Number:         134978
>Category:       amd64
>Synopsis:       g_up pmap amd64 panic
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-amd64
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Wed May 27 09:30:00 UTC 2009
>Closed-Date:
>Last-Modified:
>Originator:     G.Def
>Release:        FreeBSD 8.0-CURRENT
>Organization:
>Environment:
FreeBSD test.w.env 8.0-CURRENT FreeBSD 8.0-CURRENT #16: Wed May 27 09:35:07 CEST 2009     root at test.w.env:/usr/obj/usr/src/sys/CURRENT  amd64
>Description:
Random panics.

kgdb:

GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "amd64-marcel-freebsd"...

Unread portion of the kernel message buffer:


Fatal trap 12: page fault while in kernel mode
cpuid = 0; apic id = 00
fault virtual address	= 0xffff804000000000
fault code		= supervisor read data, page not present
instruction pointer	= 0x20:0xffffffff806e136e
stack pointer	        = 0x28:0xffffff8000049a80
frame pointer	        = 0x28:0xffffff8000049a90
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags	= interrupt enabled, resume, IOPL = 0
current process		= 3 (g_up)
trap number		= 12
panic: page fault
cpuid = 0
Uptime: 1h12m24s
Physical memory: 2035 MB
Dumping 1372 MB: 1357 1341 1325 1309 1293 1277 1261 1245 1229 1213 1197 1181 1165 1149 1133 1117 1101 1085 1069 1053 1037 1021 1005 989 973 957 941 925 909 893 877 861 845 829 813 797 781 765 749 733 717 701 685 669 653 637 621 605 589 573 557 541 525 509 493 477 461 445 429 413 397 381 365 349 333 317 301 285 269 253 237 221 205 189 173 157 141 125 109 93 77 61 45 29 13

Reading symbols from /boot/kernel/zfs.ko...Reading symbols from /boot/kernel/zfs.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/zfs.ko
Reading symbols from /boot/kernel/opensolaris.ko...Reading symbols from /boot/kernel/opensolaris.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/opensolaris.ko
#0  doadump () at pcpu.h:223
223	pcpu.h: Nie ma takiego pliku/katalogu.
	in pcpu.h
(kgdb) list *0xffffffff806e136e
0xffffffff806e136e is in pmap_kextract (/usr/src/sys/amd64/amd64/pmap.c:1027).
1022		vm_paddr_t pa;
1023	
1024		if (va >= DMAP_MIN_ADDRESS && va < DMAP_MAX_ADDRESS) {
1025			pa = DMAP_TO_PHYS(va);
1026		} else {
1027			pde = *vtopde(va);
1028			if (pde & PG_PS) {
1029				pa = (pde & PG_PS_FRAME) | (va & PDRMASK);
1030			} else {
1031				/*
(kgdb) backtrace
#0  doadump () at pcpu.h:223
#1  0xffffffff8041b749 in boot (howto=260)
    at /usr/src/sys/kern/kern_shutdown.c:420
#2  0xffffffff8041bb7c in panic (fmt=0xffffffff80793c2a "%s")
    at /usr/src/sys/kern/kern_shutdown.c:576
#3  0xffffffff806f5e48 in trap_fatal (frame=0xffffff0001319390, eva=Variable "eva" is not available.
)
    at /usr/src/sys/amd64/amd64/trap.c:852
#4  0xffffffff806f6214 in trap_pfault (frame=0xffffff80000499d0, usermode=0)
    at /usr/src/sys/amd64/amd64/trap.c:768
#5  0xffffffff806f6b03 in trap (frame=0xffffff80000499d0)
    at /usr/src/sys/amd64/amd64/trap.c:494
#6  0xffffffff806d12c3 in calltrap ()
    at /usr/src/sys/amd64/amd64/exception.S:223
#7  0xffffffff806e136e in pmap_kextract (va=0)
    at /usr/src/sys/amd64/amd64/pmap.c:1027
#8  0xffffffff806cf60e in bus_dmamap_load (dmat=0xffffff0001704280, 
    map=0xffffff0001704200, buf=0x0, buflen=65536, 
    callback=0xffffffff802131a0 <ata_dmasetprd>, 
    callback_arg=0xffffff8000049b40, flags=1)
    at /usr/src/sys/amd64/amd64/busdma_machdep.c:611
#9  0xffffffff80213678 in ata_dmaload (request=0xffffff001d29ed68, addr=0x0, 
    entries=0xffffff8000049b8c) at /usr/src/sys/dev/ata/ata-dma.c:298
#10 0xffffffff8020d8b0 in ata_begin_transaction (request=0xffffff001d29ed68)
---Type <return> to continue, or q <return> to quit--- 
    at /usr/src/sys/dev/ata/ata-lowlevel.c:139
#11 0xffffffff8020f7bc in ata_start (dev=0xffffff00014ea900)
    at /usr/src/sys/dev/ata/ata-queue.c:212
#12 0xffffffff803a684c in g_io_schedule_up (tp=Variable "tp" is not available.
)
    at /usr/src/sys/geom/geom_io.c:576
#13 0xffffffff803a6c08 in g_up_procbody () at /usr/src/sys/geom/geom_kern.c:95
#14 0xffffffff803f7117 in fork_exit (
    callout=0xffffffff803a6bb0 <g_up_procbody>, arg=0x0, 
    frame=0xffffff8000049c90) at /usr/src/sys/kern/kern_fork.c:830
#15 0xffffffff806d174e in fork_trampoline ()
    at /usr/src/sys/amd64/amd64/exception.S:552
#16 0x0000000000000000 in ?? ()




>How-To-Repeat:

>Fix:


>Release-Note:
>Audit-Trail:
>Unformatted: