From owner-freebsd-net@FreeBSD.ORG Thu Mar 24 09:02:04 2011 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id F145F106566B for ; Thu, 24 Mar 2011 09:02:04 +0000 (UTC) (envelope-from pluknet@gmail.com) Received: from mail-qw0-f54.google.com (mail-qw0-f54.google.com [209.85.216.54]) by mx1.freebsd.org (Postfix) with ESMTP id A54AE8FC16 for ; Thu, 24 Mar 2011 09:02:04 +0000 (UTC) Received: by qwc9 with SMTP id 9so7231005qwc.13 for ; Thu, 24 Mar 2011 02:02:04 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:in-reply-to:references:date :message-id:subject:from:to:content-type:content-transfer-encoding; bh=/IjFbM2dJj9onfw74aUdzFc9NIjdYUi3i0DdZYFITMc=; b=b47+9XOtlU7HPwn0IV2a34+E+6tQHjRY4zVaOcF3qaBjnfQSaO/IBs3VyK02hXgpyd TK9PN1CToVXank8TaJv5O1zt5LzbXxu0UP0ig9yPQOw1ZlFdlQiQLUCiuoo+obbjn/3V lUsdAEe0qYmRtocCVxwRrWPBXQYUQi4HQg9CI= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type:content-transfer-encoding; b=EdLZYA02INJTN5HBWzOoYBegdBjgTkdmQlIm0M6w1Nu2GO5s4PMOm2Y8lamQ0J0Nhm Ww9AIFA88BsPVgc3D33w3L16Pdm0mYHefbVUrhcUXc+h7bNc/WzNogTrDK34RRxVp8Vn xXY0IfgfeyXDQJMGpZYNNpZuvnUahLHi66TrQ= MIME-Version: 1.0 Received: by 10.229.45.147 with SMTP id e19mr6835578qcf.75.1300957323964; Thu, 24 Mar 2011 02:02:03 -0700 (PDT) Received: by 10.229.232.146 with HTTP; Thu, 24 Mar 2011 02:02:03 -0700 (PDT) In-Reply-To: References: Date: Thu, 24 Mar 2011 12:02:03 +0300 Message-ID: From: Sergey Kandaurov To: FreeBSD Net Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Subject: Re: panic in dummynet X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Mar 2011 09:02:05 -0000 On 21 March 2011 12:43, Sergey Kandaurov wrote: > Hi. > > This is a 8.1 box, not very much loaded. > It has two simple dummynet rules. > That's the first time it panics there. Any hints? > > db> x/s *panicstr > 0: =A0 =A0 =A0*** error reading from address 0 *** > db> bt > Tracing pid 0 tid 100116 td 0xffffff000ab057c0 > m_copym() at m_copym+0x37 > ip_fragment() at ip_fragment+0x132 > ip_output() at ip_output+0xeef > dummynet_send() at dummynet_send+0x14c > dummynet_task() at dummynet_task+0x1b7 > taskqueue_run() at taskqueue_run+0x93 > taskqueue_thread_loop() at taskqueue_thread_loop+0x46 > fork_exit() at fork_exit+0x118 > fork_trampoline() at fork_trampoline+0xe > --- trap 0, rip =3D 0, rsp =3D 0xffffff8399222d30, rbp =3D 0 --- > Hmm.. Another crash today. Looks like it might be due to race with bce intr handler. Fatal trap 12: page fault while in kernel mode cpuid =3D 0; apic id =3D 00 fault virtual address =3D 0x18 fault code =3D supervisor read data, page not present instruction pointer =3D 0x20:0xffffffff80611587 stack pointer =3D 0x28:0xffffff82b41da960 frame pointer =3D 0x28:0xffffff82b41da9c0 code segment =3D base 0x0, limit 0xfffff, type 0x1b =3D DPL 0, pres 1, long 1, def32 0, gran 1 processor eflags =3D interrupt enabled, resume, IOPL =3D 0 current process =3D 0 (dummynet) db> bt Tracing pid 0 tid 100121 td 0xffffff00094177c0 m_copym() at m_copym+0x37 ip_fragment() at ip_fragment+0x132 ip_output() at ip_output+0xeef dummynet_send() at dummynet_send+0x14c dummynet_task() at dummynet_task+0x1b7 taskqueue_run() at taskqueue_run+0x93 taskqueue_thread_loop() at taskqueue_thread_loop+0x46 fork_exit() at fork_exit+0x118 fork_trampoline() at fork_trampoline+0xe --- trap 0, rip =3D 0, rsp =3D 0xffffff82b41dad30, rbp =3D 0 --- cpuid =3D 0 curthread =3D 0xffffff00094177c0: pid 0 "dummynet" cpuid =3D 1 curthread =3D 0xffffff00029a23e0: pid 12 "irq257: bce1" cpuid =3D 2 curthread =3D 0xffffff00026fc3e0: pid 12 "swi4: clock" 100039 Run CPU 1 [irq257: bce1] 100038 RunQ [irq256: bce0] 100012 Run CPU 2 [swi4: clock] db> bt 100039 Tracing pid 12 tid 100039 td 0xffffff00029a23e0 cpustop_handler() at cpustop_handler+0x40 ipi_nmi_handler() at ipi_nmi_handler+0x30 trap() at trap+0x175 nmi_calltrap() at nmi_calltrap+0x8 --- trap 0x13, rip =3D 0xffffffff805c62e4, rsp =3D 0xffffff8000052fe0, rbp = =3D 0xfffff f82b155d7b0 --- callout_lock() at callout_lock+0x54 callout_reset_on() at callout_reset_on+0x43 tcp_do_segment() at tcp_do_segment+0x508 tcp_input() at tcp_input+0xd22 ip_input() at ip_input+0xad netisr_dispatch_src() at netisr_dispatch_src+0x7e ether_demux() at ether_demux+0x14d ether_input() at ether_input+0x17b ether_demux() at ether_demux+0x6f ether_input() at ether_input+0x17b bce_intr() at bce_intr+0x3b0 intr_event_execute_handlers() at intr_event_execute_handlers+0xfd ithread_loop() at ithread_loop+0x8e fork_exit() at fork_exit+0x118 fork_trampoline() at fork_trampoline+0xe --- trap 0, rip =3D 0, rsp =3D 0xffffff82b155dd30, rbp =3D 0 --- db> bt 100038 Tracing pid 12 tid 100038 td 0xffffff00029a27c0 sched_switch() at sched_switch+0xea mi_switch() at mi_switch+0x16f ithread_loop() at ithread_loop+0x1d0 fork_exit() at fork_exit+0x118 fork_trampoline() at fork_trampoline+0xe --- trap 0, rip =3D 0, rsp =3D 0xffffff82b1554d30, rbp =3D 0 --- db> bt 100012 Tracing pid 12 tid 100012 td 0xffffff00026fc3e0 cpustop_handler() at cpustop_handler+0x40 ipi_nmi_handler() at ipi_nmi_handler+0x30 trap() at trap+0x175 nmi_calltrap() at nmi_calltrap+0x8 --- trap 0x13, rip =3D 0xffffffff808a8270, rsp =3D 0xffffff8000059fe0, rbp =3D 0xffffff80000c9bd0 --- Xinvlpg() at Xinvlpg ithread_loop() at ithread_loop+0x142 fork_exit() at fork_exit+0x118 fork_trampoline() at fork_trampoline+0xe --- trap 0, rip =3D 0, rsp =3D 0xffffff80000c9d30, rbp =3D 0 --- --=20 wbr, pluknet