From owner-freebsd-current@FreeBSD.ORG Sat Nov 17 23:13:49 2012 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 89335C33; Sat, 17 Nov 2012 23:13:49 +0000 (UTC) (envelope-from vijju.singh@gmail.com) Received: from mail-ia0-f182.google.com (mail-ia0-f182.google.com [209.85.210.182]) by mx1.freebsd.org (Postfix) with ESMTP id 1C67F8FC08; Sat, 17 Nov 2012 23:13:48 +0000 (UTC) Received: by mail-ia0-f182.google.com with SMTP id x2so3255307iad.13 for ; Sat, 17 Nov 2012 15:13:48 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=references:mime-version:in-reply-to:content-type :content-transfer-encoding:message-id:cc:x-mailer:from:subject:date :to; bh=0vAbS1fimPPUkbq4dodbUJI/vliWdMN5stgTfMhfY9M=; b=zWmCnGdiBineyN26MaNo2bHycdlYCs/VmU4HzYEe4Gjkx2TQAKkzvvU2eD5QlOaSZu fGkVjSEWX+TFSLwLLxXe54mpFf2xocZ6en83AW96QAVyq/5eC/Psbv24d6WieRTFoVie yMJnpDokFWOX/Nk60jpRq4vAKdxBHPyZFho79Lk2avtHpAKfDH4ehZq8AYmzcqRcRtG2 V/hmRnfQ/DudfDZtp9PVSfwLYlpRNEu8Yt7lHRVn4JIg5YvSElXMcH9bAm4efa8D+lvi x+odgWo9tZXENkxX1jsaF7mztEjSGC62oY6nbsKCtEFgoo+Gq1n+vmayxIudX6AFjvxh BoVA== Received: by 10.50.37.196 with SMTP id a4mr3047999igk.16.1353194028332; Sat, 17 Nov 2012 15:13:48 -0800 (PST) Received: from [192.168.1.64] (108-64-226-69.lightspeed.sntcca.sbcglobal.net. [108.64.226.69]) by mx.google.com with ESMTPS id u4sm3914586igw.6.2012.11.17.15.13.44 (version=SSLv3 cipher=OTHER); Sat, 17 Nov 2012 15:13:46 -0800 (PST) References: Mime-Version: 1.0 (1.0) In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Message-Id: <55449D50-389B-4080-9B6F-A7CC0C0A2D1E@gmail.com> X-Mailer: iPhone Mail (10A523) From: Vijay Singh Subject: Re: netisr panic? Date: Sat, 17 Nov 2012 15:13:41 -0800 To: Robert Watson X-Mailman-Approved-At: Sun, 18 Nov 2012 01:56:34 +0000 Cc: FreeBSD Net , Adrian Chadd , Ian FREISLICH , "freebsd-current@freebsd.org" X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 17 Nov 2012 23:13:49 -0000 Or cluster allocation failed, and only the mbuf was used. Sent from my iPhone On Nov 17, 2012, at 1:31 PM, Robert Watson wrote: > Panics along these lines often occur if there is a concurrency bug in a de= vice driver such that it modifies an mbuf after dispatching to the network s= tack. E.g., by freeing it, reusing it, an errant dereference, etc. Not guar= anteed, but that is where I'd start. >=20 > Robert >=20 > On Sat, 17 Nov 2012, Adrian Chadd wrote: >=20 >> Check what mtod() is doing. >>=20 >> mbuf.h:#define mtod(m, t) ((t)((m)->m_data)) >>=20 >> .. so if m->m_data is NULL, bam. >>=20 >> The question is why is m_data NULL here. Someone mbuf cluey is going >> to have to answer that. I don't know whether the MH_dat stuff is being >> treated as valid but m_data isn't being updated, or something. >>=20 >>=20 >> Adrian >>=20 >> On 17 November 2012 10:13, Ian FREISLICH wrote: >>> Adrian Chadd wrote: >>>> It's a NULL ponter deref. This is my line 484 in if_ethersubr.c: >>>>=20 >>>> eh =3D mtod(m, struct ether_header *); >>>>=20 >>>>=20 >>>> .. if that's yours, see if eh is NULL? >>>=20 >>> (kgdb) frame 7 >>> #7 0xffffffff8050f534 in ether_nh_input (m=3D0xfffffe012521e700) >>> at /usr/src/sys/net/if_ethersubr.c:484 >>> 484 eh =3D mtod(m, struct ether_header *); >>> (kgdb) print eh >>> No symbol "eh" in current context. >>> (kgdb) print *m >>> $2 =3D {m_hdr =3D {mh_next =3D 0x100000000000000, mh_nextpkt =3D 0x10000= 000000, >>> mh_data =3D 0x0, mh_len =3D 60, mh_flags =3D 4259842, mh_type =3D 0, >>> pad =3D "\000\000\000\000\000"}, M_dat =3D {MH =3D {MH_pkthdr =3D { >>> rcvif =3D 0xfffffe000a1c2000, header =3D 0xffffffff, len =3D 60, f= lowid =3D 0, >>> csum_flags =3D 3840, csum_data =3D 65535, tso_segsz =3D 0, PH_vt =3D= { >>> vt_vtag =3D 4, vt_nrecs =3D 4}, tags =3D {slh_first =3D 0x3c000= 000}}, >>> MH_dat =3D {MH_ext =3D { >>> ext_buf =3D 0x69e5498600000000
, ext_free =3D 0x10602, ext_arg1 =3D 0xc000000070000, ext_arg2 =3D 0= x100, >>> ext_size =3D 2048, ref_cnt =3D 0xfffffe0125236d8c, ext_type =3D= 6}, >>> MH_databuf =3D "\000\000\000\000\206I=D0=B5i\002\006\001\000\000\= 000\000\000\000\000\a\000\000\000\f\000\000\001\000\000\000\000\000\000\000\= b\000\000\000\000\000\000\214m#%\001=D1=8E=D1=8F=D1=8F\006", '\0' }}, >>> M_databuf =3D "\000 \034\n\000=D1=8E=D1=8F=D1=8F=D1=8F=D1=8F=D1=8F=D1= =8F\000\000\000\000<\000\000\000\000\000\000\000\000\017\000\000=D1=8F=D1=8F= \000\000\000\000\004\000\000\000\000\000\000\000\000<\000\000\000\000\000\00= 0\000\000\206I=D0=B5i\002\006\001\000\000\000\000\000\000\000\a\000\000\000\= f\000\000\001\000\000\000\000\000\000\000\b\000\000\000\000\000\000\214m#%\0= 01=D1=8E=D1=8F=D1=8F\006", '\0' }} >>>=20 >>>=20 >>> Ian >>>=20 >>> -- >>> Ian Freislich >>>=20 >>> _______________________________________________ >>> freebsd-current@freebsd.org mailing list >>> http://lists.freebsd.org/mailman/listinfo/freebsd-current >>> To unsubscribe, send any mail to "freebsd-current-unsubscribe@freebsd.or= g" >> _______________________________________________ >> freebsd-current@freebsd.org mailing list >> http://lists.freebsd.org/mailman/listinfo/freebsd-current >> To unsubscribe, send any mail to "freebsd-current-unsubscribe@freebsd.org= " > _______________________________________________ > freebsd-net@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-net > To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"