From owner-freebsd-current@FreeBSD.ORG Fri Jun 17 23:08:01 2005 Return-Path: X-Original-To: current@freebsd.org Delivered-To: freebsd-current@FreeBSD.ORG Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id D57D716A41C; Fri, 17 Jun 2005 23:08:01 +0000 (GMT) (envelope-from kris@obsecurity.org) Received: from obsecurity.dyndns.org (CPE0050040655c8-CM00111ae02aac.cpe.net.cable.rogers.com [69.194.102.232]) by mx1.FreeBSD.org (Postfix) with ESMTP id 8D3BD43D1F; Fri, 17 Jun 2005 23:08:01 +0000 (GMT) (envelope-from kris@obsecurity.org) Received: by obsecurity.dyndns.org (Postfix, from userid 1000) id B379451259; Fri, 17 Jun 2005 19:08:00 -0400 (EDT) Date: Fri, 17 Jun 2005 19:08:00 -0400 From: Kris Kennaway To: John Baldwin Message-ID: <20050617230800.GA72019@xor.obsecurity.org> References: <20050510223636.GA49927@xor.obsecurity.org> <20050529175056.GA99318@xor.obsecurity.org> <200506171434.49008.jhb@FreeBSD.org> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="cNdxnHkX5QqsyA0e" Content-Disposition: inline In-Reply-To: <200506171434.49008.jhb@FreeBSD.org> User-Agent: Mutt/1.4.2.1i Cc: amd64@freebsd.org, freebsd-current@freebsd.org, current@freebsd.org, Kris Kennaway Subject: Re: Fatal trap 12 in exec_copyout_strings() X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 17 Jun 2005 23:08:02 -0000 --cNdxnHkX5QqsyA0e Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Fri, Jun 17, 2005 at 02:34:47PM -0400, John Baldwin wrote: > On Sunday 29 May 2005 01:50 pm, Kris Kennaway wrote: > > On Tue, May 10, 2005 at 03:36:36PM -0700, Kris Kennaway wrote: > > > Got this on a dual amd64 with 8GB RAM running 6.0 from last week: > > > > > > Fatal trap 12: page fault while in kernel mode > > > cpuid =3D 1; apic id =3D 01 > > > fault virtual address =3D 0xffffffffa9cdc000 > > > fault code =3D supervisor read, page not present > > > instruction pointer =3D 0x8:0xffffffff8037759f > > > stack pointer =3D 0x10:0xffffffffba1637d0 > > > frame pointer =3D 0x10:0xffffffffba163820 > > > code segment =3D base 0x0, limit 0xfffff, type 0x1b > > > =3D DPL 0, pres 1, long 1, def32 0, gran 1 > > > processor eflags =3D interrupt enabled, resume, IOPL =3D 0 > > > current process =3D 52247 (sh) > > > [thread pid 52247 tid 100149 ] > > > Stopped at exec_copyout_strings+0x12f: > > > db> wh > > > Tracing pid 52247 tid 100149 td 0xffffff016e5724c0 > > > exec_copyout_strings() at exec_copyout_strings+0x12f > > > do_execve() at do_execve+0x39a > > > kern_execve() at kern_execve+0xab > > > execve() at execve+0x49 > > > syscall() at syscall+0x382 > > > Xfast_syscall() at Xfast_syscall+0xa8 > > > --- syscall (59, FreeBSD ELF64, execve), rip =3D 0x80090622c, rsp =3D > > > 0x7fffffffe058, rbp =3D 0xffffffff --- db> > > > > I've got this panic twice more since. >=20 > Do you have a kernel.debug? Can you do 'list *exec_copyout_strings+0x12f= '? I=20 > think I've seen reports of the linux32_exec_copyout_strings() having a=20 > similar fault as well on amd64. If (when) it happens again I'll do this (unfortunately I can't dump on this machine, though). Thanks for the response. Kris --cNdxnHkX5QqsyA0e Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (FreeBSD) iD8DBQFCs1fQWry0BWjoQKURAvZtAJ4uI7edNhqHxiLhSVNGmWW3R1/mQwCfcLYJ kfKV8J73pOcy7oIXm0SHd1M= =XMEj -----END PGP SIGNATURE----- --cNdxnHkX5QqsyA0e--