From owner-freebsd-current@FreeBSD.ORG Thu Aug 12 17:40:07 2004 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id A389616A4CE for ; Thu, 12 Aug 2004 17:40:07 +0000 (GMT) Received: from moutng.kundenserver.de (moutng.kundenserver.de [212.227.126.191]) by mx1.FreeBSD.org (Postfix) with ESMTP id B9D5143D48 for ; Thu, 12 Aug 2004 17:40:06 +0000 (GMT) (envelope-from max@love2party.net) Received: from [212.227.126.162] (helo=mrelayng.kundenserver.de) by moutng.kundenserver.de with esmtp (Exim 3.35 #1) id 1BvJYR-0004Ei-00; Thu, 12 Aug 2004 19:39:55 +0200 Received: from [217.83.7.130] (helo=donor.laier.local) by mrelayng.kundenserver.de with asmtp (TLSv1:RC4-MD5:128) (Exim 3.35 #1) id 1BvJYQ-0004w1-00; Thu, 12 Aug 2004 19:39:55 +0200 From: Max Laier To: Sangwoo Shim Date: Thu, 12 Aug 2004 19:37:51 +0200 User-Agent: KMail/1.6.2 References: <20040812171410.GA91666@neo.redjade.org> In-Reply-To: <20040812171410.GA91666@neo.redjade.org> MIME-Version: 1.0 Content-Type: multipart/signed; protocol="application/pgp-signature"; micalg=pgp-sha1; boundary="Boundary-02=_8r6GBKvOD6flFTm"; charset="euc-kr" Content-Transfer-Encoding: 7bit Message-Id: <200408121938.04611.max@love2party.net> X-Provags-ID: kundenserver.de abuse@kundenserver.de auth:61c499deaeeba3ba5be80f48ecc83056 cc: freebsd-current@freebsd.org cc: yongari@kt-is.co.kr Subject: Re: Panic in nd6_slowtimo() X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Aug 2004 17:40:07 -0000 --Boundary-02=_8r6GBKvOD6flFTm Content-Type: text/plain; charset="euc-kr" Content-Transfer-Encoding: quoted-printable Content-Disposition: inline This was reported before, but I was never able to reproduce it and the=20 original reporter didn't reply anymore (iirc). Can you please turn this int= o=20 a PR so that we do not lose track this time? I will be looking into it. Thanks. On Thursday 12 August 2004 19:14, Sangwoo Shim wrote: > [ FreeBSD-current list rejects my mail. So, to pf maintainers.. ] > > I recently got this panic. 1~2 times in a day. > It seems that pflog is the culprit.. pflog0's if_afdata contains > nothing but null. I couldn't reproduce the panic with pf.ko unloaded. > option INET6 is in kernel configuration. > The machine is SMP. If you need more information, please let me know. > I'm using FreeBSD-current of Aug 12. > > panic messages: > --- > Fatal trap 12: page fault while in kernel mode > cpuid =3D 0; apic id =3D 01 > fault virtual address =3D 0x8 > fault code =3D supervisor read, page not present > instruction pointer =3D 0x8:0xc056ec72 > stack pointer =3D 0x10:0xd53efcb8 > frame pointer =3D 0x10:0xd53efcc4 > code segment =3D base 0x0, limit 0xfffff, type 0x1b > =3D DPL 0, pres 1, def32 1, gran 1 > processor eflags =3D interrupt enabled, resume, IOPL =3D 0 > current process =3D 37 (swi5: clock sio) > Dumping 511 MB > 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 256 272 288 304 320 > 336 352 368 384 400 416 432 448 464 480 496 --- > #0 doadump () at pcpu.h:159 > 159 pcpu.h: No such file or directory. > in pcpu.h > doadump () at pcpu.h:159 > 159 in pcpu.h > (kgdb) bt > #0 doadump () at pcpu.h:159 > #1 0xc043b83a in db_fncall (dummy1=3D0, dummy2=3D0, dummy3=3D-717292800, > dummy4=3D0xd53efae8 "\034=FB=BE=D5=A2) at /usr/src/sys/ddb/db_command= =2Ec:531 > #2 0xc043b648 in db_command (last_cmdp=3D0xc069cea4, cmd_table=3D0x0, > aux_cmd_tablep=3D0xc066cc44, aux_cmd_tablep_end=3D0xc066cc48) > at /usr/src/sys/ddb/db_command.c:349 > #3 0xc043b710 in db_command_loop () at /usr/src/sys/ddb/db_command.c:455 > #4 0xc043d289 in db_trap (type=3D12, code=3D0) at > /usr/src/sys/ddb/db_main.c:221 #5 0xc04d9020 in kdb_trap (type=3D12, cod= e=3D0, > tf=3D0xd53efc78) > at /usr/src/sys/kern/subr_kdb.c:401 > #6 0xc062795d in trap_fatal (frame=3D0xd53efc78, eva=3D8) > at /usr/src/sys/i386/i386/trap.c:807 > #7 0xc06276bb in trap_pfault (frame=3D0xd53efc78, usermode=3D0, eva=3D8) > at /usr/src/sys/i386/i386/trap.c:730 > #8 0xc06272d1 in trap (frame=3D > {tf_fs =3D -1045626856, tf_es =3D -717357040, tf_ds =3D -717357040,= tf_edi > =3D -1045585920, tf_esi =3D -1045508608, tf_ebp =3D -717292348, tf_isp =3D > -717292380, tf_ebx =3D 23040, tf_edx =3D 1474, tf_ecx =3D -1066723816, tf= _eax =3D > 0, tf_trapno =3D 12, tf_err =3D 0, tf_eip =3D -1068045198, tf_cs =3D 8, t= f_eflags =3D > 66182, tf_esp =3D 6, tf_ss =3D 4}) at /usr/src/sys/i386/i386/trap.c:417 #= 9=20 > 0xc0615b1a in calltrap () at /usr/src/sys/i386/i386/exception.s:140 #10 > 0xc1ad0018 in ?? () > #11 0xd53e0010 in ?? () > #12 0xd53e0010 in ?? () > #13 0xc1ada000 in ?? () > #14 0xc1aece00 in ?? () > #15 0xd53efcc4 in ?? () > #16 0xd53efca4 in ?? () > #17 0x00005a00 in ?? () > #18 0x000005c2 in ?? () > #19 0xc06b1618 in arc4_sbox () > #20 0x00000000 in ?? () > #21 0x0000000c in ?? () > #22 0x00000000 in ?? () > #23 0xc056ec72 in nd6_slowtimo (ignored_arg=3D0x0) > at /usr/src/sys/netinet6/nd6.c:1800 > #24 0xc04cd05b in softclock (dummy=3D0x0) at > /usr/src/sys/kern/kern_timeout.c:259 #25 0xc04ab6bd in ithread_loop > (arg=3D0xc1977c00) > at /usr/src/sys/kern/kern_intr.c:546 > #26 0xc04aa7fd in fork_exit (callout=3D0xc04ab564 , > arg=3D0xc1977c00, frame=3D0xd53efd48) at /usr/src/sys/kern/kern_fork.= c:819 > #27 0xc0615b7c in fork_trampoline () at > /usr/src/sys/i386/i386/exception.s:209 (kgdb) up 23 > #23 0xc056ec72 in nd6_slowtimo (ignored_arg=3D0x0) > at /usr/src/sys/netinet6/nd6.c:1800 > 1800 nd6if =3D ND_IFINFO(ifp); > (kgdb) l > 1795 > 1796 callout_reset(&nd6_slowtimo_ch, ND6_SLOWTIMER_INTERVAL * > hz, 1797 nd6_slowtimo, NULL); > 1798 IFNET_RLOCK(); > 1799 for (ifp =3D TAILQ_FIRST(&ifnet); ifp; ifp =3D TAILQ_NEXT= (ifp, > if_list)) { 1800 nd6if =3D ND_IFINFO(ifp); > 1801 if (nd6if->basereachable && /* already initialized > */ 1802 (nd6if->recalctm -=3D ND6_SLOWTIMER_INTERV= AL) > <=3D 0) { 1803 /* > 1804 * Since reachable time rarely changes by > router (kgdb) p *ifp > $1 =3D {if_softc =3D 0xc1ada000, if_link =3D {tqe_next =3D 0xc1ae1800, > tqe_prev =3D 0xc1adb004}, > if_xname =3D "pflog0\000\000\000\000\000\000\000\000\000", > if_dname =3D 0xc077ee0d "pflog", if_dunit =3D 0, if_addrhead =3D { > tqh_first =3D 0xc1ae3e00, tqh_last =3D 0xc1ae3e60}, if_klist =3D { > slh_first =3D 0x0}, if_pcount =3D 0, if_carp =3D 0x0, if_bpf =3D 0x0, > if_index =3D 4, if_timer =3D 0, if_nvlans =3D 0, if_flags =3D 0, > if_capabilities =3D 0, if_capenable =3D 0, if_linkmib =3D 0x0, if_linkm= iblen =3D > 0, if_data =3D {ifi_type =3D 246 '=F6=A7, ifi_physical =3D 0 '\0', ifi_ad= drlen =3D 0 > '\0', ifi_hdrlen =3D 48 '0', ifi_link_state =3D 0 '\0', ifi_recvquota =3D= 0 '\0', > ifi_xmitquota =3D 0 '\0', ifi_mtu =3D 33208, ifi_metric =3D 0, ifi_baudra= te =3D 0, > ifi_ipackets =3D 0, ifi_ierrors =3D 0, ifi_opackets =3D 0, ifi_oerrors = =3D 0, > ifi_collisions =3D 0, ifi_ibytes =3D 0, ifi_obytes =3D 0, ifi_imcasts =3D= 0, > ifi_omcasts =3D 0, ifi_iqdrops =3D 0, ifi_noproto =3D 0, ifi_hwassist =3D= 0, > ifi_unused =3D 0, ifi_lastchange =3D {tv_sec =3D 1, tv_usec =3D 10464}}, > if_multiaddrs =3D {tqh_first =3D 0x0, tqh_last =3D 0xc1ada0a8}, if_amcoun= t =3D 0, > if_output =3D 0xc077d738, if_input =3D 0, if_start =3D 0xc077d69c, > if_ioctl =3D 0xc077d760, if_watchdog =3D 0, if_init =3D 0, if_resolvemu= lti =3D 0, > if_snd =3D {ifq_head =3D 0x0, ifq_tail =3D 0x0, ifq_len =3D 0, ifq_maxl= en =3D 50, > ifq_drops =3D 0, ifq_mtx =3D {mtx_object =3D {lo_class =3D 0xc067db3c, > lo_name =3D 0xc1ada00c "pflog0", lo_type =3D 0xc0657e7d "if send > queue", lo_flags =3D 196608, lo_list =3D {tqe_next =3D 0x0, tqe_prev =3D = 0x0}, > lo_witness =3D 0x0}, mtx_lock =3D 4, mtx_recurse =3D 0}, ifq_drv_head =3D= 0x0, > ifq_drv_tail =3D 0x0, ifq_drv_len =3D 0, ifq_drv_maxlen =3D 0, altq_type = =3D 0, > altq_flags =3D 0, altq_disc =3D 0x0, altq_ifp =3D 0xc1ada000, altq_enqueu= e =3D 0, > altq_dequeue =3D 0, altq_request =3D 0, altq_clfier =3D 0x0, altq_classif= y =3D 0, > altq_tbr =3D 0x0, altq_cdnr =3D 0x0}, if_broadcastaddr =3D 0x0, lltables = =3D 0x0, > if_label =3D 0x0, if_prefixhead =3D {tqh_first =3D 0x0, tqh_last =3D 0xc1= ada150}, > if_afdata =3D {0x0 }, if_afdata_initialized =3D 1, > if_afdata_mtx =3D {mtx_object =3D {lo_class =3D 0xc067db3c, > lo_name =3D 0xc0657e6d "if_afdata", lo_type =3D 0xc0657e6d "if_afda= ta", > lo_flags =3D 196608, lo_list =3D {tqe_next =3D 0x0, tqe_prev =3D 0x= 0}, > lo_witness =3D 0x0}, mtx_lock =3D 4, mtx_recurse =3D 0}, if_startta= sk =3D { > ta_link =3D {stqe_next =3D 0x0}, ta_pending =3D 0, ta_priority =3D 0, > ta_func =3D 0xc0527fb4 , ta_context =3D 0xc1ada000= }} > > Thanks. > - Sangwoo Shim =2D-=20 /"\ Best regards, | mlaier@freebsd.org \ / Max Laier | ICQ #67774661 X http://pf4freebsd.love2party.net/ | mlaier@EFnet / \ ASCII Ribbon Campaign | Against HTML Mail and News --Boundary-02=_8r6GBKvOD6flFTm Content-Type: application/pgp-signature Content-Description: signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (FreeBSD) iD8DBQBBG6r8XyyEoT62BG0RAnlHAJ9nA0IqjKtcYmG+J+7o3G2gbP1MqQCeNyxd ojDL/qKPxp3xTZwilm9tXbA= =nl83 -----END PGP SIGNATURE----- --Boundary-02=_8r6GBKvOD6flFTm--