Date: Fri, 30 Jun 2017 09:28:41 +0000 From: bugzilla-noreply@freebsd.org To: freebsd-net@FreeBSD.org Subject: [Bug 220358] panic in tcp_lro_flush_all Message-ID: <bug-220358-2472-MtNmY9gsFW@https.bugs.freebsd.org/bugzilla/> In-Reply-To: <bug-220358-2472@https.bugs.freebsd.org/bugzilla/> References: <bug-220358-2472@https.bugs.freebsd.org/bugzilla/>
next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D220358 --- Comment #4 from iz-rpi03@hs-karlsruhe.de --- There is no "option RSS" in the used kernel config. So, the answer is: No. Hyperthreading was used. As you suggested I disabled it via /boot/loader.conf, but the panic happend again. It changed its cause to "page fault while in kernel mode" but almost not the place. "tcp_lro_flush" instead of the former "tcp_lro_flush_all". Ralf Unread portion of the kernel message buffer: kernel trap 12 with interrupts disabled Fatal trap 12: page fault while in kernel mode cpuid =3D 1; apic id =3D 01 fault virtual address =3D 0x55ea51aa fault code =3D supervisor write, page not present instruction pointer =3D 0x20:0xc7f3f21b stack pointer =3D 0x28:0xe37d97bc frame pointer =3D 0x28:0xe37d97e8 code segment =3D base 0x0, limit 0xfffff, type 0x1b =3D DPL 0, pres 1, def32 1, gran 1 processor eflags =3D resume, IOPL =3D 0 current process =3D 0 (if_io_tqg_1) trap number =3D 12 panic: page fault cpuid =3D 1 time =3D 1498813503 KDB: stack backtrace: #0 0xc07dadaf at kdb_backtrace+0x4f #1 0xc079ccb3 at vpanic+0x133 #2 0xc079cb7b at panic+0x1b #3 0xc0ae38fe at trap_fatal+0x31e #4 0xc0ae3943 at trap_pfault+0x33 #5 0xc0ae304e at trap+0x2be #6 0xc0ad1fea at calltrap+0x6 #7 0xc096bb4f at tcp_do_segment+0x219f #8 0xc0968d67 at tcp_input+0x13a7 #9 0xc08f39a6 at ip_input+0x256 #10 0xc089328c at netisr_dispatch_src+0xcc#13 0xc087e65b at ether_nh_input+0x35b #14 0xc089328c at netisr_dispatch_src+0xcc #15 0xc0893550 at netisr_dispatch+0x20 #16 0xc087dc3a at ether_input+0x2a #17 0xc096dfc5 at tcp_lro_flush+0x1d5 Uptime: 6m23s Physical memory: 3523 MB Dumping 149 MB: 134 118 102 86 70 54 38 22 6 Reading symbols from /boot/kernel.r320396.crash/snd_hda.ko...Reading symbols from /usr/lib/debug//boot/kernel.r320396.crash/snd_hda.ko.debug...done. done. Reading symbols from /boot/kernel.r320396.crash/sound.ko...Reading symbols = from /usr/lib/debug//boot/kernel.r320396.crash/sound.ko.debug...done. done. Reading symbols from /boot/kernel.r320396.crash/cuse.ko...Reading symbols f= rom /usr/lib/debug//boot/kernel.r320396.crash/cuse.ko.debug...done. done. Reading symbols from /boot/kernel.r320396.crash/ums.ko...Reading symbols fr= om /usr/lib/debug//boot/kernel.r320396.crash/ums.ko.debug...done. done. __curthread () at ./machine/pcpu.h:225 225 __asm("movl %%fs:%1,%0" : "=3Dr" (td) (kgdb) #0 __curthread () at ./machine/pcpu.h:225 #1 doadump (textdump=3D-949457280) at /usr/src/sys/kern/kern_shutdown.c:318 #2 0xc079c924 in kern_reboot (howto=3D<optimized out>) at /usr/src/sys/kern/kern_shutdown.c:386 #3 0xc079cceb in vpanic (fmt=3D<optimized out>, ap=3D<optimized out>) at /usr/src/sys/kern/kern_shutdown.c:779 #4 0xc079cb7b in panic (fmt=3D0xc0b23936 "%s") at /usr/src/sys/kern/kern_shutdown.c:710 #5 0xc0ae38fe in trap_fatal (frame=3D<optimized out>, eva=3D<optimized out= >) at /usr/src/sys/i386/i386/trap.c:978 #6 0xc0ae3943 in trap_pfault (frame=3D<optimized out>,=20 usermode=3D<optimized out>, eva=3D<optimized out>) at /usr/src/sys/i386/i386/trap.c:804 #7 0xc0ae304e in trap (frame=3D<optimized out>) at /usr/src/sys/i386/i386/trap.c:512 #8 <signal handler called> #9 0xc7f3f21b in ?? () #10 0xc096bb4f in tcp_do_segment (m=3D<optimized out>, th=3D<optimized out>= ,=20 so=3D<optimized out>, tp=3D<optimized out>, drop_hdrlen=3D<optimized ou= t>,=20 tlen=3D<optimized out>, iptos=3D<optimized out>,=20 ti_locked=3D<error reading variable: Cannot access memory at address 0x= 1>) at /usr/src/sys/netinet/tcp_input.c:2444 #11 0xc0968d67 in tcp_input (mp=3D<optimized out>, offp=3D<optimized out>,= =20 proto=3D<optimized out>) at /usr/src/sys/netinet/tcp_input.c:1191 #12 0xc08f39a6 in ip_input (m=3D0x0) at /usr/src/sys/netinet/ip_input.c:823 #13 0xc089328c in netisr_dispatch_src (proto=3D<optimized out>,=20 source=3D<optimized out>, m=3D0xc7f3f219) at /usr/src/sys/net/netisr.c:= 1120 #14 0xc0893550 in netisr_dispatch (proto=3D1, m=3D0xc8172000) at /usr/src/sys/net/netisr.c:1211 #15 0xc087d9b0 in ether_demux (ifp=3D0xc77ca800, m=3D0x0) at /usr/src/sys/net/if_ethersubr.c:848 #16 0xc087e65b in ether_input_internal (ifp=3D0xc77ca800, m=3D0xc7f3f219) at /usr/src/sys/net/if_ethersubr.c:637 #17 ether_nh_input (m=3D<optimized out>) at /usr/src/sys/net/if_ethersubr.c= :667 #18 0xc089328c in netisr_dispatch_src (proto=3D<optimized out>,=20 source=3D<optimized out>, m=3D0xc7f3f219) at /usr/src/sys/net/netisr.c:= 1120 #19 0xc0893550 in netisr_dispatch (proto=3D5, m=3D0xc8172000) at /usr/src/sys/net/netisr.c:1211 #20 0xc087dc3a in ether_input (ifp=3D0xc77ca800, m=3D0x0) at /usr/src/sys/net/if_ethersubr.c:757 #21 0xc096dfc5 in tcp_lro_flush (lc=3D0xc77ad424, le=3D<optimized out>) at /usr/src/sys/netinet/tcp_lro.c:394 #22 0xc096e161 in tcp_lro_rx_done (lc=3D0xc77ad424) at /usr/src/sys/netinet/tcp_lro.c:284 #23 tcp_lro_flush_all (lc=3D<optimized out>) at /usr/src/sys/netinet/tcp_lro.c:532 #24 0xc088dc90 in iflib_rxeof (budget=3D16, rxq=3D<optimized out>) at /usr/src/sys/net/iflib.c:2564 #25 _task_fn_rx (context=3D<optimized out>) at /usr/src/sys/net/iflib.c:3499 #26 0xc07d9aa8 in gtaskqueue_run_locked (queue=3D0xc7688000) at /usr/src/sys/kern/subr_gtaskqueue.c:329 #27 0xc07d97c7 in gtaskqueue_thread_loop (arg=3D0xc7671814) at /usr/src/sys/kern/subr_gtaskqueue.c:504 #28 0xc0764a16 in fork_exit (callout=3D0xc07d9720 <gtaskqueue_thread_loop>,= =20 arg=3D<optimized out>, frame=3D<optimized out>) at /usr/src/sys/kern/kern_fork.c:1038 #29 <signal handler called> (kgdb)=20 #11 0xc0893550 at netisr_dispatch+0x20 #12 0xc087d9b0 at ether_demux+0x140 --=20 You are receiving this mail because: You are the assignee for the bug.=
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-220358-2472-MtNmY9gsFW>