From nobody@FreeBSD.org  Mon Nov  6 12:38:20 2006
Return-Path: <nobody@FreeBSD.org>
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 327A916A633
	for <freebsd-gnats-submit@FreeBSD.org>; Mon,  6 Nov 2006 12:38:20 +0000 (UTC)
	(envelope-from nobody@FreeBSD.org)
Received: from www.freebsd.org (www.freebsd.org [216.136.204.117])
	by mx1.FreeBSD.org (Postfix) with ESMTP id A106743D9E
	for <freebsd-gnats-submit@FreeBSD.org>; Mon,  6 Nov 2006 12:37:37 +0000 (GMT)
	(envelope-from nobody@FreeBSD.org)
Received: from www.freebsd.org (localhost [127.0.0.1])
	by www.freebsd.org (8.13.1/8.13.1) with ESMTP id kA6CbNY5063664
	for <freebsd-gnats-submit@FreeBSD.org>; Mon, 6 Nov 2006 12:37:23 GMT
	(envelope-from nobody@www.freebsd.org)
Received: (from nobody@localhost)
	by www.freebsd.org (8.13.1/8.13.1/Submit) id kA6CbNEX063662;
	Mon, 6 Nov 2006 12:37:23 GMT
	(envelope-from nobody)
Message-Id: <200611061237.kA6CbNEX063662@www.freebsd.org>
Date: Mon, 6 Nov 2006 12:37:23 GMT
From: Jonathan Hall<jdhall@glam.ac.uk>
To: freebsd-gnats-submit@FreeBSD.org
Subject: Fatal trap 12: page fault while in kernel mode on mail gateway running Exim and Spamassassin
X-Send-Pr-Version: www-3.0

>Number:         105208
>Category:       kern
>Synopsis:       Fatal trap 12: page fault while in kernel mode on mail gateway running Exim and Spamassassin
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    freebsd-bugs
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Mon Nov 06 12:40:21 GMT 2006
>Closed-Date:    Tue Mar 27 04:11:39 GMT 2007
>Last-Modified:  Tue Mar 27 04:11:39 GMT 2007
>Originator:     Jonathan Hall
>Release:        FreeBSD 6.1-RELEASE
>Organization:
University of Glamorgan
>Environment:
FreeBSD mta1.glam.ac.uk 6.1-RELEASE FreeBSD 6.1-RELEASE #0: Mon Oct 23 08:20:17 BST 2006     jdhall@mta1.glam.ac.uk:/usr/src/sys/i386/compile/GENERIC  i386
>Description:
I have three identical hardware platforms based on Supermicro X5DE8-GG motherboards, dual Xeon 2.6GHz, on-board AIC-7902 SCSI and 2GB ram. Each system has been installed with FreeBSD 6.1-RELEASE. Exim 4.63 and Spamassassin 3.1.4 have been installed from source, not ports. The systems are used as inbound e-mail/spam scanning gateways.

Periodically, usually between 2 and 10 days of uptime, each of the boxes crashes with a "Fatal trap 12: page fault while in kernel mode" error. The crashes have occured using a custom SMP kernel (unused device drivers removed), a GENERIC-SMP kernel and a GENERIC kernel.

Crash message from custom SMP kernel:-

Fatal trap 12: page fault while in kernel mode
cpuid = 1; apic id = 06
fault virtual address   = 0x5c
fault code              = supervisor read, page not present
instruction pointer     = 0x20:0xc0578f90
stack pointer           = 0x28:0xe8918b10
frame pointer           = 0x28:0xe8918b2c
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, def32 1, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 15752 (exim-4.63-3)
trap number             = 12
panic: page fault
cpuid = 1
Uptime: 6d5h7m32s
Cannot dump. No dump device defined.
Automatic reboot in 15 seconds - press a key on the console to abort

Crash message from GENERIC-SMP kernel:-

Fatal trap 12: page fault while in kernel mode
cpuid = 1; apic id = 06
fault virtual address   = 0x5c
fault code              = supervisor read, page not present
instruction pointer     = 0x20:0xc06eefd4
stack pointer           = 0x28:0xe8df6b10
frame pointer           = 0x28:0xe8df6b2c
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, def32 1, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 54198 (exim-4.63-3)
trap number             = 12
panic: page fault
cpuid = 1
Uptime: 2d13h27m51s
Cannot dump. No dump device defined.
Automatic reboot in 15 seconds - press a key on the console to abort

Crash message from GENERIC kernel:-

Fatal trap 12: page fault while in kernel mode
fault virtual address   = 0x5c
fault code              = supervisor read, page not present
instruction pointer     = 0x20:0xc06ea3a8
stack pointer           = 0x28:0xe8d7ab10
frame pointer           = 0x28:0xe8d7ab2c
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, def32 1, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 81192 (exim-4.63-3)
trap number             = 12
panic: page fault
Uptime: 10d0h3m56s
Cannot dump. No dump device defined.
Automatic reboot in 15 seconds - press a key on the console to abort

A fourth identical hardware platform running FreeBSD 4.9-RELEASE, Exim 4.30 and Spamassassin 2.64 has been running without problems for about 2 years.

>How-To-Repeat:
Unable to repeat on demand. Need to wait for it to crash on its own.
>Fix:

>Release-Note:
>Audit-Trail:

From: Ruslan Ermilov <ru@FreeBSD.org>
To: Jonathan Hall <jdhall@glam.ac.uk>
Cc: bug-followup@FreeBSD.org
Subject: Re: kern/105208: Fatal trap 12: page fault while in kernel mode on mail gateway running Exim and Spamassassin
Date: Mon, 6 Nov 2006 17:36:08 +0300

 --liOOAslEiF7prFVr
 Content-Type: text/plain; charset=us-ascii
 Content-Disposition: inline
 Content-Transfer-Encoding: quoted-printable
 
 Jonathan,
 
 On Mon, Nov 06, 2006 at 12:37:23PM +0000, Jonathan Hall wrote:
 > Crash message from GENERIC kernel:-
 >=20
 > Fatal trap 12: page fault while in kernel mode
 > fault virtual address   =3D 0x5c
 > fault code              =3D supervisor read, page not present
 > instruction pointer     =3D 0x20:0xc06ea3a8
 > stack pointer           =3D 0x28:0xe8d7ab10
 > frame pointer           =3D 0x28:0xe8d7ab2c
 > code segment            =3D base 0x0, limit 0xfffff, type 0x1b
 >                         =3D DPL 0, pres 1, def32 1, gran 1
 > processor eflags        =3D interrupt enabled, resume, IOPL =3D 0
 > current process         =3D 81192 (exim-4.63-3)
 > trap number             =3D 12
 > panic: page fault
 > Uptime: 10d0h3m56s
 > Cannot dump. No dump device defined.
 > Automatic reboot in 15 seconds - press a key on the console to abort
 >=20
 This looks pretty much like a null pointer dereference.
 Two things to do for you:
 
 1) Please check that the problem is still there with a more
    recent version of OS, by upgrading to the top of RELENG_6,
    because it can be that it's been already found and fixed.
 
 2) If above isn't possible, or doesn't fix the problem, please
    get yourself familiar with the kernel debugging, and provide
    a useful stack trace that developers can use to try to diagnose
    the problem:
 
 http://www.freebsd.org/doc/en_US.ISO8859-1/books/developers-handbook/kernel=
 debug.html
 
 
 Cheers,
 --=20
 Ruslan Ermilov
 ru@FreeBSD.org
 FreeBSD committer
 
 --liOOAslEiF7prFVr
 Content-Type: application/pgp-signature
 Content-Disposition: inline
 
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v1.4.5 (FreeBSD)
 
 iD8DBQFFT0hXqRfpzJluFF4RAmO8AJ0cCSJ6go6FYmzXYV5+AdXghcUC9QCfdrjd
 UgDUYFc5DzfrOtdY06rj1wo=
 =ORgF
 -----END PGP SIGNATURE-----
 
 --liOOAslEiF7prFVr--
State-Changed-From-To: open->closed 
State-Changed-By: kris 
State-Changed-When: Tue Mar 27 04:10:47 UTC 2007 
State-Changed-Why:  
Submitter address bounces, no response to request for a 
backtrace.  There is nothing further we can do on this PR. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=105208 
>Unformatted:
