From nobody Mon Jun 19 04:25:23 2023 X-Original-To: bugs@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4QkxWm6rtKz4fmdw for ; Mon, 19 Jun 2023 04:25:24 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4QkxWm4sgHz3KMQ for ; Mon, 19 Jun 2023 04:25:24 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1687148724; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=QZ/tFsc8S5X9uv40sCgFGT1bFh2k7rmv5XhzyhyrlLs=; b=eShJ/0QsIHv3/pG3OIxCTvRj8glf6vFTAY+vAGKgaRJkN6hs09fHau4KJdM4uIQqZn5v/O oT9+qJ3BsbsfckpvwQ8ouQ2yotV2q0ii5PqAq8Zs9fIjK6t/Nmb2yLuVJ1TV52p4wD0v11 tW+xirSfALSeZd/69vklb6nw0GR+HPAc1mrfL9w7qh4NUrszjqeVzSMwyJLa7IBFL6D6N/ hJWzZrcB7Awf3oSSzt7xv5A3visMy2CFjxM0DkDg/GOrnYq/+iO16e7odHwuAUeaUsqp5C Yr1Qd/4jXmMYADQq1DJYCe/YU3hl3G2Yfu5B2JuLDbOdg/3CL72jdWhsiENMtg== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1687148724; a=rsa-sha256; cv=none; b=qkxb2KK3eUH5c9MCHNgTQCUQkO5W6u31HwDDilQ/3OLfc6iiGZrOW1lM8wKxMOhEcz1WSW EBSLj7c3ViC1DAyTueMlgWiagiKKY+Z06WG6OPE2y1O2Q/Vym+/D5XMvUUOjaFAJMzqltc ns6rdBBgHNOLPtsgenmKVA380G7LLLt0Rq62vVkIiTOCxjOopQ2rfyZVbgl3lQeknhnyH4 M8CcBanSfFwvPYaH2jc/5W5mARzqy4iI8Ei3G5pddB+dh65W+gGywKy8xX3HCIAU7us0yK mhVx0Qiw9eFTwklMGQSIz3gUcW7maWGmEzjXT4L/chCNBIExZ+oOZ0CeyyYmTg== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4QkxWm2cZVz13Dr for ; Mon, 19 Jun 2023 04:25:24 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 35J4POti009584 for ; Mon, 19 Jun 2023 04:25:24 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 35J4PORK009583 for bugs@FreeBSD.org; Mon, 19 Jun 2023 04:25:24 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: bugs@FreeBSD.org Subject: [Bug 271991] Crash on some network packets with fresh stable Date: Mon, 19 Jun 2023 04:25:23 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 13.2-STABLE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: rozhuk.im@gmail.com X-Bugzilla-Status: Open X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: bugs@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Bug reports List-Archive: https://lists.freebsd.org/archives/freebsd-bugs List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-bugs@freebsd.org MIME-Version: 1.0 X-ThisMailContainsUnwantedMimeParts: N https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D271991 --- Comment #9 from Ivan Rozhuk --- This is full list from tcpdump: [155] Fatal trap 12: page fault while in kernel mode [155] cpuid =3D 1; apic id =3D 01 [155] fault virtual address =3D 0x2dd [155] fault code =3D supervisor read data, page not present [155] instruction pointer =3D 0x20:0xffffffff807246d3 [155] stack pointer =3D 0x28:0xfffffe015c814250 [155] frame pointer =3D 0x28:0xfffffe015c8142c0 [155] code segment =3D base 0x0, limit 0xfffff, type 0x1b [155] =3D DPL 0, pres 1, long 1, def32 0, gran 1 [155] processor eflags =3D interrupt enabled, resume, IOPL =3D 0 [155] current process =3D 54569 (nginx) [155] trap number =3D 12 [155] panic: page fault [155] cpuid =3D 1 [155] time =3D 1687145826 [155] KDB: stack backtrace: [155] #0 0xffffffff80665e1b at kdb_backtrace+0x6b [155] #1 0xffffffff8061bff2 at vpanic+0x152 [155] #2 0xffffffff8061be93 at panic+0x43 [155] #3 0xffffffff8093b2a7 at trap_fatal+0x387 [155] #4 0xffffffff8093b2ff at trap_pfault+0x4f [155] #5 0xffffffff809121ce at calltrap+0x8 [155] #6 0xffffffff8071fdba at bpf_mtap+0x10a [155] #7 0xffffffff807511d4 at iflib_txq_drain+0x3c4 [155] #8 0xffffffff80756303 at drain_ring_lockless+0x63 [155] #9 0xffffffff807561ea at ifmp_ring_enqueue+0x29a [155] #10 0xffffffff80754409 at iflib_if_transmit+0x239 [155] #11 0xffffffff80737b0b at ether_output_frame+0x9b [155] #12 0xffffffff8073797d at ether_output+0x6ed [155] #13 0xffffffff80785106 at ip_output_send+0xe6 [155] #14 0xffffffff80784e33 at ip_output+0xff3 [155] #15 0xffffffff811ac339 at rack_output+0x3ee9 [155] #16 0xffffffff807aeb3f at tcp_usr_send+0x2af [155] #17 0xffffffff80619902 at vn_sendfile+0x1222 [155] Uptime: 2m35s [155] Dumping 660 out of 8171 MB:..3%..13%..22%..32%..42%..51%..61%..71%..83%..93% __curthread () at /usr/src/sys/amd64/include/pcpu_aux.h:55 55 __asm("movq %%gs:%P1,%0" : "=3Dr" (td) : "n" (offsetof(stru= ct pcpu, (kgdb) #0 __curthread () at /usr/src/sys/amd64/include/pcpu_aux.h:55 #1 doadump (textdump=3D) at ../../../sys/kern/kern_shutdown.c:396 #2 0xffffffff8061bbe8 in kern_reboot (howto=3D260) at ../../../sys/kern/kern_shutdown.c:484 #3 0xffffffff8061c05f in vpanic (fmt=3D, ap=3Dap@entry=3D0xfffffe015c8140a0) at ../../../sys/kern/kern_shutdown.= c:923 #4 0xffffffff8061be93 in panic (fmt=3D) at ../../../sys/kern/kern_shutdown.c:847 #5 0xffffffff8093b2a7 in trap_fatal (frame=3D0xfffffe015c814190, eva=3D733) at ../../../sys/amd64/amd64/trap.c:942 #6 0xffffffff8093b2ff in trap_pfault (frame=3D0xfffffe015c814190, usermode=3Dfalse, signo=3D, ucode=3D) at ../../../sys/amd64/amd64/trap.c:761 #7 #8 0xffffffff807246d3 in bpf_filter (pc=3D0xfffff80070d49448, p=3Dp@entry=3D0xfffff800159d5500 "", wirelen=3Dwirelen@entry=3D1514, buflen=3Dbuflen@entry=3D0) at ../../../sys/net/bpf_filter.c:261 #9 0xffffffff8071fdba in bpf_mtap (bp=3D0xfffff800049c3a00, m=3D0xfffff800159d5500) at ../../../sys/net/bpf.c:2348 #10 0xffffffff807511d4 in iflib_txq_drain (r=3D0xfffffe01305b3000, cidx=3D1= 23, pidx=3D) at ../../../sys/net/iflib.c:3989 #11 0xffffffff80756303 in drain_ring_lockless (r=3D, os=3D..= ., prev=3D0, budget=3D32) at ../../../sys/net/mp_ring.c:187 #12 0xffffffff807561ea in ifmp_ring_enqueue (r=3D0xfffffe01305b3000, items=3D, items@entry=3D0xfffffe015c814538, n=3Dn@entry= =3D1, budget=3Dbudget@entry=3D32, abdicate=3Dabdicate@entry=3D0) at ../../../sys/net/mp_ring.c:470 #13 0xffffffff80754409 in iflib_if_transmit (ifp=3D, m=3D0xfffff800159d5500) at ../../../sys/net/iflib.c:4327 #14 0xffffffff80737b0b in ether_output_frame (ifp=3D0xfffff80004ec2000, m= =3D0x50, m@entry=3D0xfffff800159d5500) at ../../../sys/net/if_ethersubr.c:514 #15 0xffffffff8073797d in ether_output (ifp=3D, m=3D0xfffff800159d5500, dst=3D, ro=3D) at ../../../sys/net/if_ethersubr.c:441 #16 0xffffffff80785106 in ip_output_send (inp=3Dinp@entry=3D0xfffff801242ba= d90, ifp=3D0x14, m=3D0x50, gw=3D0xfffffe38, gw@entry=3D0xfffff801242baf40, r= o=3D0x0, ro@entry=3D0xfffff801242baf20, stamp_tag=3D) at ../../../sys/netinet/ip_output.c:277 #17 0xffffffff80784e33 in ip_output (m=3D, m@entry=3D0xfffff800159d5500, opt=3Dopt@entry=3D0x0, ro=3D, ro@entry=3D0xfffff801242baf20, flags=3D0, imo=3Dimo@entry=3D0x0, inp=3D0xfffff801242bad90) at ../../../sys/netinet/ip_output.c:799 #18 0xffffffff811ac339 in rack_output (tp=3D0xfffffe015c6e60e0) at ../../../../../../../../../../sys/netinet/tcp_stacks/rack.c:18270 #19 0xffffffff807aeb3f in tcp_usr_send (so=3D0xfffff800156ddb10, flags=3D0, m=3D, nam=3D0x0, control=3D, td=3D0xfffffe015c5c0e40) at ../../../sys/netinet/tcp_usrreq.c:1178 #20 0xffffffff80619902 in vn_sendfile (fp=3D, sockfd=3D9, hdr_uio=3D0x0, trl_uio=3D0x0, offset=3D, nbytes=3D419430= 4, sent=3D0xfffffe015c814dd0, flags=3D1, td=3D0xfffffe015c5c0e40) at ../../../sys/kern/kern_sendfile.c:1188 #21 0xffffffff8061a766 in fo_sendfile (fp=3D0x14, sockfd=3D80, hdr_uio=3D0xfffffe38, trl_uio=3D0x0, offset=3D0, nbytes=3D1844674188053= 3238416, sent=3D0xfffffe015c814dd0, flags=3D733, td=3D0xfffffe015c5c0e40) at ../../../sys/sys/file.h:416 #22 sendfile (uap=3D0xfffffe015c5c1228, td=3D, compat=3D) at ../../../sys/kern/kern_sendfile.c:1326 #23 sys_sendfile (td=3D0xfffffe015c5c0e40, uap=3D0xfffffe015c5c1228) at ../../../sys/kern/kern_sendfile.c:1354 #24 0xffffffff8093bb50 in syscallenter (td=3D0xfffffe015c5c0e40) at ../../../sys/amd64/amd64/../../kern/subr_syscall.c:190 #25 amd64_syscall (td=3D0xfffffe015c5c0e40, traced=3D0) at ../../../sys/amd64/amd64/trap.c:1183 #26 #27 0x000000080081e2ba in ?? () Backtrace stopped: Cannot access memory at address 0x7fffffffdaf8 (kgdb) This is full list from: ng_bpf_enable=3D"YES" ng_bpf_profiles=3D"lan0" ng_bpf_lan0_in=3D"ip and tcp and tcp port 80 and tcp[1024] !=3D 0" ng_bpf_lan0_out=3D"ip and tcp and tcp port 80 and tcp[1024] !=3D 0" My original config was: ng_bpf_enable=3D"YES" ng_bpf_profiles=3D"vlan886" ng_bpf_vlan886_in=3D"ip and tcp and ip[6] & 64 =3D 0 and ip[8]>128 and tcp[tcpflags] =3D=3D tcp-rst" it filters only incoming from internet packets from intel i211 adapter. [235] Fatal trap 12: page fault while in kernel mode [235] cpuid =3D 0; apic id =3D 00 [235] fault virtual address =3D 0x2dd [235] fault code =3D supervisor read data, page not present [235] instruction pointer =3D 0x20:0xffffffff818f7e93 [235] stack pointer =3D 0x28:0xfffffe015b3e13e0 [235] frame pointer =3D 0x28:0xfffffe015b3e1450 [235] code segment =3D base 0x0, limit 0xfffff, type 0x1b [235] =3D DPL 0, pres 1, long 1, def32 0, gran 1 [235] processor eflags =3D interrupt enabled, resume, IOPL =3D 0 [235] current process =3D 66911 (nginx) [235] trap number =3D 12 [235] panic: page fault [235] cpuid =3D 0 [235] time =3D 1687147722 [235] KDB: stack backtrace: [235] #0 0xffffffff80665e1b at kdb_backtrace+0x6b [235] #1 0xffffffff8061bff2 at vpanic+0x152 [235] #2 0xffffffff8061be93 at panic+0x43 [235] #3 0xffffffff8093b2a7 at trap_fatal+0x387 [235] #4 0xffffffff8093b2ff at trap_pfault+0x4f [235] #5 0xffffffff809121ce at calltrap+0x8 [235] #6 0xffffffff818f756a at ng_bpf_rcvdata+0xda [235] #7 0xffffffff818ee777 at ng_apply_item+0x207 [235] #8 0xffffffff818ee25c at ng_snd_item+0x1cc [235] #9 0xffffffff818e8bdd at ng_ether_output+0x5d [235] #10 0xffffffff80737957 at ether_output+0x6c7 [235] #11 0xffffffff80785106 at ip_output_send+0xe6 [235] #12 0xffffffff80784e33 at ip_output+0xff3 [235] #13 0xffffffff811af339 at rack_output+0x3ee9 [235] #14 0xffffffff807aeb3f at tcp_usr_send+0x2af [235] #15 0xffffffff80619902 at vn_sendfile+0x1222 [235] #16 0xffffffff8061a766 at sys_sendfile+0xe6 [235] #17 0xffffffff8093bb50 at amd64_syscall+0xd0 [235] Uptime: 3m55s [235] Dumping 646 out of 8171 MB:..3%..13%..23%..33%..43%..52%..62%..72%..82%..92% __curthread () at /usr/src/sys/amd64/include/pcpu_aux.h:55 55 __asm("movq %%gs:%P1,%0" : "=3Dr" (td) : "n" (offsetof(stru= ct pcpu, (kgdb) #0 __curthread () at /usr/src/sys/amd64/include/pcpu_aux.h:55 #1 doadump (textdump=3D) at ../../../sys/kern/kern_shutdown.c:396 #2 0xffffffff8061bbe8 in kern_reboot (howto=3D260) at ../../../sys/kern/kern_shutdown.c:484 #3 0xffffffff8061c05f in vpanic (fmt=3D, ap=3Dap@entry=3D0xfffffe015b3e1230) at ../../../sys/kern/kern_shutdown.= c:923 #4 0xffffffff8061be93 in panic (fmt=3D) at ../../../sys/kern/kern_shutdown.c:847 #5 0xffffffff8093b2a7 in trap_fatal (frame=3D0xfffffe015b3e1320, eva=3D733) at ../../../sys/amd64/amd64/trap.c:942 #6 0xffffffff8093b2ff in trap_pfault (frame=3D0xfffffe015b3e1320, usermode=3Dfalse, signo=3D, ucode=3D) at ../../../sys/amd64/amd64/trap.c:761 #7 #8 0xffffffff818f7e93 in bpf_filter (pc=3D0xfffff80004e3c1bc, p=3D0xfffff800a9815500 "", wirelen=3D1514, buflen=3D0) at ../../../../../../../../../../sys/net/bpf_filter.c:261 #9 0xffffffff818f756a in ng_bpf_rcvdata (hook=3D, item=3D0xfffff800a9239980) at ../../../../../../../../../../sys/netgraph/ng_bpf.c:475 #10 0xffffffff818ee777 in ng_apply_item (node=3Dnode@entry=3D0xfffff80004e3= c200, item=3Ditem@entry=3D0xfffff800a9239980, rw=3D-456) at ../../../../../../../../../../sys/netgraph/ng_base.c:2406 #11 0xffffffff818ee25c in ng_snd_item (item=3Ditem@entry=3D0xfffff800a92399= 80, flags=3Dflags@entry=3D0) at ../../../../../../../../../../sys/netgraph/ng_base.c:2323 #12 0xffffffff818e8bdd in ng_ether_output (ifp=3D, mp=3D0xfffffe015b3e15c8) at ../../../../../../../../../../sys/netgraph/ng_ether.c:294 #13 0xffffffff80737957 in ether_output (ifp=3D, m=3D0xfffff800a9815500, dst=3D, ro=3D) at ../../../sys/net/if_ethersubr.c:431 #14 0xffffffff80785106 in ip_output_send (inp=3Dinp@entry=3D0xfffff800a96ff= ba0, ifp=3D0x14, m=3D0x50, gw=3D0xfffffe38, gw@entry=3D0xfffff800a96ffd50, r= o=3D0x0, ro@entry=3D0xfffff800a96ffd30, stamp_tag=3D) at ../../../sys/netinet/ip_output.c:277 #15 0xffffffff80784e33 in ip_output (m=3D, m@entry=3D0xfffff800a9815500, opt=3Dopt@entry=3D0x0, ro=3D, ro@entry=3D0xfffff800a96ffd30, flags=3D0, imo=3Dimo@entry=3D0x0, inp=3D0xfffff800a96ffba0) at ../../../sys/netinet/ip_output.c:799 #16 0xffffffff811af339 in rack_output (tp=3D0xfffffe015c6fd0e0) at ../../../../../../../../../../sys/netinet/tcp_stacks/rack.c:18270 #17 0xffffffff807aeb3f in tcp_usr_send (so=3D0xfffff80004ef2760, flags=3D0, m=3D, nam=3D0x0, control=3D, td=3D0xfffffe00dec7bac0) at ../../../sys/netinet/tcp_usrreq.c:1178 #18 0xffffffff80619902 in vn_sendfile (fp=3D, sockfd=3D11, hdr_uio=3D0x0, trl_uio=3D0x0, offset=3D, nbytes=3D419430= 4, sent=3D0xfffffe015b3e1dd0, flags=3D1, td=3D0xfffffe00dec7bac0) at ../../../sys/kern/kern_sendfile.c:1188 #19 0xffffffff8061a766 in fo_sendfile (fp=3D0x14, sockfd=3D80, hdr_uio=3D0xfffffe38, trl_uio=3D0x0, offset=3D0, nbytes=3D1844674188051= 2058400, sent=3D0xfffffe015b3e1dd0, flags=3D733, td=3D0xfffffe00dec7bac0) at ../../../sys/sys/file.h:416 #20 sendfile (uap=3D0xfffffe00dec7bea8, td=3D, compat=3D) at ../../../sys/kern/kern_sendfile.c:1326 #21 sys_sendfile (td=3D0xfffffe00dec7bac0, uap=3D0xfffffe00dec7bea8) at ../../../sys/kern/kern_sendfile.c:1354 #22 0xffffffff8093bb50 in syscallenter (td=3D0xfffffe00dec7bac0) at ../../../sys/amd64/amd64/../../kern/subr_syscall.c:190 #23 amd64_syscall (td=3D0xfffffe00dec7bac0, traced=3D0) at ../../../sys/amd64/amd64/trap.c:1183 #24 #25 0x000000080081e2ba in ?? () Backtrace stopped: Cannot access memory at address 0x7fffffffdaf8 My patch did not fix issue (even in my netgraph case) :( But stack trace is different now: [71] Fatal trap 12: page fault while in kernel mode [71] cpuid =3D 1; apic id =3D 01 [71] fault virtual address =3D 0x2dd [71] fault code =3D supervisor read data, page not present [71] instruction pointer =3D 0x20:0xffffffff818f7e93 [71] stack pointer =3D 0x28:0xfffffe00c4f82490 [71] frame pointer =3D 0x28:0xfffffe00c4f82500 [71] code segment =3D base 0x0, limit 0xfffff, type 0x1b [71] =3D DPL 0, pres 1, long 1, def32 0, gran 1 [71] processor eflags =3D interrupt enabled, resume, IOPL =3D 0 [71] current process =3D 11 (irq40: ahci0:ch0) [71] trap number =3D 12 [71] panic: page fault [71] cpuid =3D 1 [71] time =3D 1687148175 [71] KDB: stack backtrace: [71] #0 0xffffffff80665e1b at kdb_backtrace+0x6b [71] #1 0xffffffff8061bff2 at vpanic+0x152 [71] #2 0xffffffff8061be93 at panic+0x43 [71] #3 0xffffffff8093b377 at trap_fatal+0x387 [71] #4 0xffffffff8093b3cf at trap_pfault+0x4f [71] #5 0xffffffff8091229e at calltrap+0x8 [71] #6 0xffffffff818f756a at ng_bpf_rcvdata+0xda [71] #7 0xffffffff818ee777 at ng_apply_item+0x207 [71] #8 0xffffffff818ee25c at ng_snd_item+0x1cc [71] #9 0xffffffff818e8bdd at ng_ether_output+0x5d [71] #10 0xffffffff80737a27 at ether_output+0x6c7 [71] #11 0xffffffff807851d6 at ip_output_send+0xe6 [71] #12 0xffffffff80784f03 at ip_output+0xff3 [71] #13 0xffffffff811af339 at rack_output+0x3ee9 [71] #14 0xffffffff807af255 at tcp_usr_ready+0xf5 [71] #15 0xffffffff8061a3f7 at sendfile_iodone+0x107 [71] #16 0xffffffff808c0be3 at vnode_pager_generic_getpages_done_async+0x43 [71] #17 0xffffffff806cd448 at bufdone+0x48 [71] Uptime: 1m11s [71] Dumping 642 out of 8171 MB:..3%..13%..23%..33%..43%..53%..63%..73%..83%..93% __curthread () at /usr/src/sys/amd64/include/pcpu_aux.h:55 55 __asm("movq %%gs:%P1,%0" : "=3Dr" (td) : "n" (offsetof(stru= ct pcpu, (kgdb) #0 __curthread () at /usr/src/sys/amd64/include/pcpu_aux.h:55 #1 doadump (textdump=3D) at ../../../sys/kern/kern_shutdown.c:396 #2 0xffffffff8061bbe8 in kern_reboot (howto=3D260) at ../../../sys/kern/kern_shutdown.c:484 #3 0xffffffff8061c05f in vpanic (fmt=3D, ap=3Dap@entry=3D0xfffffe00c4f822e0) at ../../../sys/kern/kern_shutdown.= c:923 #4 0xffffffff8061be93 in panic (fmt=3D) at ../../../sys/kern/kern_shutdown.c:847 #5 0xffffffff8093b377 in trap_fatal (frame=3D0xfffffe00c4f823d0, eva=3D733) at ../../../sys/amd64/amd64/trap.c:942 #6 0xffffffff8093b3cf in trap_pfault (frame=3D0xfffffe00c4f823d0, usermode=3Dfalse, signo=3D, ucode=3D) at ../../../sys/amd64/amd64/trap.c:761 #7 #8 0xffffffff818f7e93 in bpf_filter (pc=3D0xfffff80001a399bc, p=3D0xfffff800147cc700 "", wirelen=3D1514, buflen=3D0) at ../../../../../../../../../../sys/net/bpf_filter.c:261 #9 0xffffffff818f756a in ng_bpf_rcvdata (hook=3D, item=3D0xfffff80014de8c80) at ../../../../../../../../../../sys/netgraph/ng_bpf.c:475 #10 0xffffffff818ee777 in ng_apply_item (node=3Dnode@entry=3D0xfffff800019e= 9800, item=3Ditem@entry=3D0xfffff80014de8c80, rw=3D-456) at ../../../../../../../../../../sys/netgraph/ng_base.c:2406 #11 0xffffffff818ee25c in ng_snd_item (item=3Ditem@entry=3D0xfffff80014de8c= 80, flags=3Dflags@entry=3D0) at ../../../../../../../../../../sys/netgraph/ng_base.c:2323 #12 0xffffffff818e8bdd in ng_ether_output (ifp=3D, mp=3D0xfffffe00c4f82678) at ../../../../../../../../../../sys/netgraph/ng_ether.c:294 #13 0xffffffff80737a27 in ether_output (ifp=3D, m=3D0xfffff800147cc700, dst=3D, ro=3D) at ../../../sys/net/if_ethersubr.c:431 #14 0xffffffff807851d6 in ip_output_send (inp=3Dinp@entry=3D0xfffff80084ad7= ba0, ifp=3D0x14, m=3D0x50, gw=3D0xfffffe38, gw@entry=3D0xfffff80084ad7d50, r= o=3D0x0, ro@entry=3D0xfffff80084ad7d30, stamp_tag=3D) at ../../../sys/netinet/ip_output.c:277 #15 0xffffffff80784f03 in ip_output (m=3D, m@entry=3D0xfffff800147cc700, opt=3Dopt@entry=3D0x0, ro=3D, ro@entry=3D0xfffff80084ad7d30, flags=3D0, imo=3Dimo@entry=3D0x0, inp=3D0xfffff80084ad7ba0) at ../../../sys/netinet/ip_output.c:799 #16 0xffffffff811af339 in rack_output (tp=3D0xfffffe015c738950) at ../../../../../../../../../../sys/netinet/tcp_stacks/rack.c:18270 #17 0xffffffff807af255 in tcp_usr_ready (so=3D, m=3D0xfffff800147d2700, count=3D512) at ../../../sys/netinet/tcp_usrreq= .c:1302 #18 0xffffffff8061a3f7 in sendfile_iodone (arg=3D0xfffffe015c741000, pa=3D0xfffffe013057e638, count=3D, error=3D) at ../../../sys/kern/kern_sendfile.c:399 #19 0xffffffff808c0be3 in vnode_pager_generic_getpages_done_async ( bp=3D0xfffffe013057e500) at ../../../sys/vm/vnode_pager.c:1121 #20 0xffffffff806cd448 in bufdone (bp=3D0xfffffe013057e500) at ../../../sys/kern/vfs_bio.c:4547 #21 0xffffffff8057b18e in g_io_deliver (bp=3D0xfffff800019a9178, error=3D0) at ../../../sys/geom/geom_io.c:687 #22 0xffffffff8057b18e in g_io_deliver (bp=3D0xfffff80004dd82f0, error=3D0) at ../../../sys/geom/geom_io.c:687 #23 0xffffffff8057b18e in g_io_deliver (bp=3Dbp@entry=3D0xfffff80004dda000, error=3D0) at ../../../sys/geom/geom_io.c:687 #24 0xffffffff80578419 in g_disk_done (bp=3D0xfffff80004e41000) at ../../../sys/geom/geom_disk.c:259 #25 0xffffffff802d4c00 in xpt_done_process ( ccb_h=3Dccb_h@entry=3D0xfffff80084166000) at ../../../sys/cam/cam_xpt.c= :5435 #26 0xffffffff802d4827 in xpt_done_direct (done_ccb=3D0xfffff80084166000) at ../../../sys/cam/cam_xpt.c:4616 #27 0xffffffff80416545 in ahci_ch_intr_direct (arg=3D0xfffffe00c51c1000) at ../../../sys/dev/ahci/ahci.c:1355 #28 0xffffffff80414db3 in ahci_intr_one (data=3D) at ../../../sys/dev/ahci/ahci.c:556 #29 0xffffffff805e6e31 in intr_event_execute_handlers (ie=3D0xfffff800018d3= c00, p=3D) at ../../../sys/kern/kern_intr.c:1169 #30 ithread_execute_handlers (ie=3D0xfffff800018d3c00, p=3D) at ../../../sys/kern/kern_intr.c:1182 #31 ithread_loop (arg=3D0xfffff80001c69000) at ../../../sys/kern/kern_intr.c:1270 #32 0xffffffff805e3b96 in fork_exit ( callout=3D0xffffffff805e6bf0 , arg=3D0xfffff80001c69000, frame=3D0xfffffe00c4f82f40) at ../../../sys/kern/kern_fork.c:1094 #33 #34 0xfffffe00c4d82fd0 in ?? () Backtrace stopped: Cannot access memory at address 0x0 --=20 You are receiving this mail because: You are the assignee for the bug.=