From owner-freebsd-net@FreeBSD.ORG Wed Mar 25 21:48:39 2015 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 6F526F50; Wed, 25 Mar 2015 21:48:39 +0000 (UTC) Received: from mail.strugglingcoder.info (strugglingcoder.info [65.19.130.35]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4E61287C; Wed, 25 Mar 2015 21:48:38 +0000 (UTC) Received: from localhost (unknown [10.1.1.3]) (Authenticated sender: hiren@strugglingcoder.info) by mail.strugglingcoder.info (Postfix) with ESMTPSA id 92915106953; Wed, 25 Mar 2015 14:48:32 -0700 (PDT) Date: Wed, 25 Mar 2015 14:48:32 -0700 From: hiren panchasara To: freebsd-net@freebsd.org Subject: pagefault in IPv6 codepath in defrouter_select() Message-ID: <20150325214832.GI53237@strugglingcoder.info> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="ZH76yXETYuyhTGDD" Content-Disposition: inline User-Agent: Mutt/1.5.23 (2014-03-12) Cc: ae@freebsd.org, hrs@freebsd.org, nitroboost@gmail.com X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 25 Mar 2015 21:48:39 -0000 --ZH76yXETYuyhTGDD Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable We are seeing following panic with "Panic String: page fault" on a month old stable/10 tree: kgdb) #0 doadump (textdump=3D1) at pcpu.h:219 #1 0xffffffff80746307 in kern_reboot (howto=3D260) at /usr/src/sys/kern/kern_shutdown.c:452 #2 0xffffffff807466e4 in panic (fmt=3D) at /usr/src/sys/kern/kern_shutdown.c:759 #3 0xffffffff80a9ab5f in trap_fatal (frame=3D,=20 eva=3D) at /usr/src/sys/amd64/amd64/trap.c:859 #4 0xffffffff80a9ae5d in trap_pfault (frame=3D0xfffffe000038eef0,=20 usermode=3D) at /usr/src/sys/amd64/amd64/trap.c:676 #5 0xffffffff80a9a4da in trap (frame=3D0xfffffe000038eef0) at /usr/src/sys/amd64/amd64/trap.c:440 #6 0xffffffff80a804e2 in calltrap () at /usr/src/sys/amd64/amd64/exception.S:236 #7 0xffffffff80744ab3 in __rw_rlock (c=3D0x100b421, file=3D0x0, line=3D0) at /usr/src/sys/kern/kern_rwlock.c:378 #8 0xffffffff80887193 in defrouter_select () at /usr/src/sys/netinet6/nd6_rtr.c:640 #9 0xffffffff80885b58 in nd6_ra_input (m=3D,=20 off=3D, icmp6len=3D) at /usr/src/sys/netinet6/nd6_rtr.c:796 #10 0xffffffff8085fa9f in icmp6_input (mp=3D,=20 offp=3D0xfffffe000038f66c, proto=3D) at /usr/src/sys/netinet6/icmp6.c:814 #11 0xffffffff80874e6c in ip6_input (m=3D0xfffff800269e8a00) at /usr/src/sys/netinet6/ip6_input.c:1019 #12 0xffffffff808144a2 in netisr_dispatch_src (proto=3D,=20 source=3D, m=3D0x0) at /usr/src/sys/net/netisr.c:9= 72 #13 0xffffffff8080ce66 in ether_demux (ifp=3D,=20 m=3D0xfffff800269e8a00) at /usr/src/sys/net/if_ethersubr.c:851 #14 0xffffffff8080daf9 in ether_nh_input (m=3D) at /usr/src/sys/net/if_ethersubr.c:646 #15 0xffffffff808144a2 in netisr_dispatch_src (proto=3D,=20 source=3D, m=3D0x0) at /usr/src/sys/net/netisr.c:9= 72 #16 0xffffffff80437a98 in igb_rxeof (count=3D99) at /usr/src/sys/dev/e1000/if_igb.c:4808 #17 0xffffffff80438131 in igb_msix_que (arg=3D0xfffff8000e6efa08) at /usr/src/sys/dev/e1000/if_igb.c:1621 #18 0xffffffff80716e4b in intr_event_execute_handlers ( p=3D, ie=3D0xfffff8000e6ea500) at /usr/src/sys/kern/kern_intr.c:1264 #19 0xffffffff807177e6 in ithread_loop (arg=3D0xfffff8000e6f5e00) at /usr/src/sys/kern/kern_intr.c:1277 #20 0xffffffff80714a6a in fork_exit ( callout=3D0xffffffff80717750 , arg=3D0xfffff8000e6f5e00,= =20 frame=3D0xfffffe000038fac0) at /usr/src/sys/kern/kern_fork.c:1017 #21 0xffffffff80a80a1e in fork_trampoline () at /usr/src/sys/amd64/amd64/exception.S:611 #22 0x0000000000000000 in ?? () Current language: auto; currently minimal (kgdb) f 7 #7 0xffffffff80744ab3 in __rw_rlock (c=3D0x100b421, file=3D0x0, line=3D0) at /usr/src/sys/kern/kern_rwlock.c:378 378 spin_cnt++; (kgdb) p spin_cnt=20 $6 =3D 1 (kgdb)=20 This is 3rd occurence of this panic. What could be the cause? I have vmcore and can provide more info if needed. Cheers, Hiren --ZH76yXETYuyhTGDD Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (FreeBSD) iQF8BAEBCgBmBQJVEy0vXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXRBNEUyMEZBMUQ4Nzg4RjNGMTdFNjZGMDI4 QjkyNTBFMTU2M0VERkU1AAoJEIuSUOFWPt/lXU4H/AvKGi6wosUrkcyLomyiRB/P 3PZtLJq+KTfUS4ZpIHeMc6znbic3Or+gs9VfPwwqtE56XvTspeTZ+zBeDffULlAf fCU0HfgNZQ6WCxKj+HblRGDYqpw9uiSspwbd7pvkQwoa9Xr8SMlYWFPpPSmoxLPK rstz0MevRul2/1m5uenIQE4B+HxKC7ZPMWzaBJeTeZiAx3iOwWCbvkwwD4MeNrev ZPQ7OYaDAcsXSznpB7oA08cZJDb51CemvwN6aU1zt7oyP66eGy4b4joP95CmUWEx spghQVfT8e6OlBP2OgglkrcbNKZAE8y4UxHU4Jf6dx0TUUx3hmyR6K5clxya2DE= =dTnN -----END PGP SIGNATURE----- --ZH76yXETYuyhTGDD--