-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Just had the following happen on a FreeBSD 6.2-PRERELEASE #7: Sun Dec 17
01:28:52 AST 2006 system ... amd64, HP Proliant, 6G of RAM ... have core if
there is information that I can provide out of it ...
Fatal trap 12: page fault while in kernel mode
cpuid = 0; apic id = 00
fault virtual address = 0x18c
fault code = supervisor read, page not present
instruction pointer = 0x8:0xffffffff801f9053
stack pointer = 0x10:0xffffffffb5c78b30
frame pointer = 0x10:0xffffffffb5c78b60
code segment = base 0x0, limit 0xfffff, type 0x1b
= DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags = resume, IOPL = 0
current process = 5 (thread taskq)
trap number = 12
panic: page fault
cpuid = 0
Uptime: 8d22h25m40s
(kgdb) where
#0 doadump () at pcpu.h:172
#1 0xffffffff80203955 in boot (howto=260) at
/usr/src/sys/kern/kern_shutdown.c:409
#2 0xffffffff80204065 in panic (fmt=0xffffff019b667720
"X\223f\233\001???\020?c\233\001???") at
/usr/src/sys/kern/kern_shutdown.c:565
#3 0xffffffff803287a6 in trap_fatal (frame=0xc, eva=18446742981100074784) at
/usr/src/sys/amd64/amd64/trap.c:660
#4 0xffffffff80328cd8 in trap (frame {tf_rdi = 112, tf_rsi =
-1092609476832, tf_rdx = 6, tf_rcx = 3221225730,
tf_r8 = -1245213424, tf_r9 = -1092609476832, tf_rax = 1, tf_rbx =
- -1096874331952, tf_rbp = -1245213856, tf_r10 = -2142258536, tf_r11 = 0, tf_r12
= 4, tf_r13 = -1092609476832, tf_r14 = 4, tf_r15 = 1, tf_trapno = 12, tf_addr =
396, tf_flags = -2145197496, tf_err = 0, tf_rip = -2145415085, tf_cs = 8,
tf_rflags = 65538, tf_rsp = -1245213888, tf_ss = 16}) at
/usr/src/sys/amd64/amd64/trap.c:238
#5 0xffffffff80313c6b in calltrap () at
/usr/src/sys/amd64/amd64/exception.S:168
#6 0xffffffff801f9053 in _mtx_lock_sleep (m=0xffffff009d31f0d0,
tid=18446742981100074784, opts=6, file=0xc0000102 <Address 0xc0000102 out of
bounds>, line=-1245213424) at /usr/src/sys/kern/kern_mutex.c:546
#7 0xffffffff8025b1ac in unp_gc (arg=0x70, pending=-1687783648) at
/usr/src/sys/kern/uipc_usrreq.c:1714
#8 0xffffffff8022c314 in taskqueue_run (queue=0xffffff0000844800) at
/usr/src/sys/kern/subr_taskqueue.c:257
#9 0xffffffff8022d0e7 in taskqueue_thread_loop (arg=0x70) at
/usr/src/sys/kern/subr_taskqueue.c:376
#10 0xffffffff801e7b76 in fork_exit (callout=0xffffffff8022d060
<taskqueue_thread_loop>, arg=0xffffffff805030d0, frame=0xffffffffb5c78c50)
at
/usr/src/sys/kern/kern_fork.c:821
#11 0xffffffff80313fce in fork_trampoline () at
/usr/src/sys/amd64/amd64/exception.S:394
#12 0x0000000000000000 in ?? ()
#13 0x0000000000000000 in ?? ()
#14 0x0000000000000001 in ?? ()
#15 0x0000000000000000 in ?? ()
#16 0x0000000000000000 in ?? ()
#17 0x0000000000000000 in ?? ()
#18 0x0000000000000000 in ?? ()
#19 0x0000000000000000 in ?? ()
#20 0x0000000000000000 in ?? ()
#21 0x0000000000000000 in ?? ()
#22 0x0000000000000000 in ?? ()
#23 0x0000000000000000 in ?? ()
#24 0x0000000000000000 in ?? ()
#25 0x0000000000000000 in ?? ()
#26 0x0000000000000000 in ?? ()
#27 0x0000000000000000 in ?? ()
#28 0x0000000000000000 in ?? ()
#29 0x0000000000000000 in ?? ()
#30 0x0000000000000000 in ?? ()
#31 0x0000000000000000 in ?? ()
#32 0x0000000000000000 in ?? ()
#33 0x0000000000000000 in ?? ()
#34 0x0000000000000000 in ?? ()
#35 0x0000000000000000 in ?? ()
#36 0x0000000000000000 in ?? ()
#37 0x0000000000000000 in ?? ()
#38 0x0000000000000000 in ?? ()
#39 0x0000000000000000 in ?? ()
#40 0x0000000000000000 in ?? ()
#41 0x0000000000000000 in ?? ()
#42 0x0000000000000000 in ?? ()
#43 0x0000000000000000 in ?? ()
#44 0x00000000006bc000 in ?? ()
#45 0xffffffff805054c0 in turnstile_chains ()
#46 0x0000000000000001 in ?? ()
#47 0xffffff019b669358 in ?? ()
#48 0xffffff008d5bc720 in ?? ()
#49 0xffffffffb5c78aa0 in ?? ()
#50 0xffffffffb5c78a78 in ?? ()
#51 0xffffff019b667720 in ?? ()
#52 0xffffffff8021a69f in sched_switch (td=0xffffffff805030d0,
newtd=0xffffffff8022d060, flags=0) at /usr/src/sys/kern/sched_4bsd.c:973
Previous frame inner to this frame (corrupt stack?)
- ----
Marc G. Fournier Hub.Org Networking Services (http://www.hub.org)
Email . scrappy@hub.org MSN . scrappy@hub.org
Yahoo . yscrappy Skype: hub.org ICQ . 7615664
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (FreeBSD)
iD8DBQFFn02U4QvfyHIvDvMRArpcAJ9O14aZsWCJ97wQeLKvxKd9DW6bTQCfWSMm
nm/uEw6zK2jBPXN6/0OTC34=4IGH
-----END PGP SIGNATURE-----
On Sat, 6 Jan 2007, Marc G. Fournier wrote:> Just had the following happen on a FreeBSD 6.2-PRERELEASE #7: Sun Dec 17 > 01:28:52 AST 2006 system ... amd64, HP Proliant, 6G of RAM ... have core if > there is information that I can provide out of it ... > > Fatal trap 12: page fault while in kernel mode > cpuid = 0; apic id = 00 > fault virtual address = 0x18c > fault code = supervisor read, page not present > instruction pointer = 0x8:0xffffffff801f9053 > stack pointer = 0x10:0xffffffffb5c78b30 > frame pointer = 0x10:0xffffffffb5c78b60 > code segment = base 0x0, limit 0xfffff, type 0x1b > = DPL 0, pres 1, long 1, def32 0, gran 1 > processor eflags = resume, IOPL = 0 > current process = 5 (thread taskq) > trap number = 12 > panic: page fault > cpuid = 0 > Uptime: 8d22h25m40s > > (kgdb) where > #0 doadump () at pcpu.h:172 > #1 0xffffffff80203955 in boot (howto=260) at > /usr/src/sys/kern/kern_shutdown.c:409 > #2 0xffffffff80204065 in panic (fmt=0xffffff019b667720 > "X\223f\233\001???\020?c\233\001???") at > /usr/src/sys/kern/kern_shutdown.c:565 > #3 0xffffffff803287a6 in trap_fatal (frame=0xc, eva=18446742981100074784) at > /usr/src/sys/amd64/amd64/trap.c:660 > #4 0xffffffff80328cd8 in trap (frame> {tf_rdi = 112, tf_rsi = -1092609476832, tf_rdx = 6, tf_rcx = 3221225730, > tf_r8 = -1245213424, tf_r9 = -1092609476832, tf_rax = 1, tf_rbx > - -1096874331952, tf_rbp = -1245213856, tf_r10 = -2142258536, tf_r11 = 0, tf_r12 > = 4, tf_r13 = -1092609476832, tf_r14 = 4, tf_r15 = 1, tf_trapno = 12, tf_addr > 396, tf_flags = -2145197496, tf_err = 0, tf_rip = -2145415085, tf_cs = 8, > tf_rflags = 65538, tf_rsp = -1245213888, tf_ss = 16}) at > /usr/src/sys/amd64/amd64/trap.c:238 > #5 0xffffffff80313c6b in calltrap () at > /usr/src/sys/amd64/amd64/exception.S:168 > #6 0xffffffff801f9053 in _mtx_lock_sleep (m=0xffffff009d31f0d0, > tid=18446742981100074784, opts=6, file=0xc0000102 <Address 0xc0000102 out of > bounds>, line=-1245213424) at /usr/src/sys/kern/kern_mutex.c:546 > #7 0xffffffff8025b1ac in unp_gc (arg=0x70, pending=-1687783648) at > /usr/src/sys/kern/uipc_usrreq.c:1714 > #8 0xffffffff8022c314 in taskqueue_run (queue=0xffffff0000844800) at > /usr/src/sys/kern/subr_taskqueue.c:257 > #9 0xffffffff8022d0e7 in taskqueue_thread_loop (arg=0x70) at > /usr/src/sys/kern/subr_taskqueue.c:376 > #10 0xffffffff801e7b76 in fork_exit (callout=0xffffffff8022d060 > <taskqueue_thread_loop>, arg=0xffffffff805030d0, frame=0xffffffffb5c78c50) at > /usr/src/sys/kern/kern_fork.c:821 > #11 0xffffffff80313fce in fork_trampoline () at > /usr/src/sys/amd64/amd64/exception.S:394This is a NULL pointer dereference in the UNIX domain socket code. John Baldwin recently committed a fix for a bug with these symptoms to 7-CURRENT, with an MFC planned in the near future. The fix won't make 6.2-RELEASE, but assuming it tests out well over the next few weeks, we will cut an errata patch/announcement for it. I believe you can pull down his 6-STABLE version at: http://people.FreeBSD.org/~jhb/patches/unp_gc.patch This same patch is currently in texting on mx1.FreeBSD.org. (John CC'd) Robert N M Watson Computer Laboratory University of Cambridge