From owner-freebsd-stable@FreeBSD.ORG Wed Sep 8 15:12:27 2010 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id A3F9B106564A; Wed, 8 Sep 2010 15:12:27 +0000 (UTC) (envelope-from mike@sentex.net) Received: from smarthost2.sentex.ca (smarthost2-6.sentex.ca [IPv6:2607:f3e0:80:80::2]) by mx1.freebsd.org (Postfix) with ESMTP id 42D8D8FC08; Wed, 8 Sep 2010 15:12:27 +0000 (UTC) Received: from lava.sentex.ca (pyroxene.sentex.ca [199.212.134.18]) by smarthost2.sentex.ca (8.14.4/8.14.4) with ESMTP id o88FCJxe003090 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 8 Sep 2010 11:12:19 -0400 (EDT) (envelope-from mike@sentex.net) Received: from mdt-xp.sentex.net (simeon.sentex.ca [192.168.43.27]) by lava.sentex.ca (8.14.4/8.14.3) with ESMTP id o88FCIq8064280; Wed, 8 Sep 2010 11:12:18 -0400 (EDT) (envelope-from mike@sentex.net) Message-Id: <201009081512.o88FCIq8064280@lava.sentex.ca> X-Mailer: QUALCOMM Windows Eudora Version 7.1.0.9 Date: Wed, 08 Sep 2010 11:12:24 -0400 To: "Li, Qing" , From: Mike Tancsa In-Reply-To: References: <201008312102.o7VL2MJr000894@lava.sentex.ca> <201009012255.o81MtMXn009701@lava.sentex.ca> Mime-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1"; format=flowed Content-Transfer-Encoding: quoted-printable X-Scanned-By: MIMEDefang 2.67 on 205.211.164.50 Cc: Subject: RE: if_rtdel: error 47 (netgraph or mpd issue?) X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Sep 2010 15:12:27 -0000 At 07:24 PM 9/1/2010, Li, Qing wrote: >http://svn.freebsd.org/viewvc/base/head/sys/netinet/in.c?r1=3D201811&r2=3D2= 0 >3401 > > Maybe related and something similar needs to be done for IPv6 ... Hi, Another 6 days and another crash. The=20 coredump seems to be in the same location as before h= ttp://lists.freebsd.org/pipermail/freebsd-stable/2010-August/058419.html=20 I didnt see any routing table corruption this=20 time, so perhaps thats a different issue that=20 just happened to be hit last time ? Fatal trap 12: page fault while in kernel mode cpuid =3D 1; apic id =3D 01 fault virtual address =3D 0x24 fault code =3D supervisor read, page not present instruction pointer =3D 0x20:0xc5ef3e15 stack pointer =3D 0x28:0xc4fe4838 frame pointer =3D 0x28:0xc4fe484c code segment =3D base 0x0, limit 0xfffff, type 0x1b =3D DPL 0, pres 1, def32 1, gran 1 processor eflags =3D interrupt enabled, resume, IOPL =3D 0 current process =3D 1000 (ng_queue1) trap number =3D 12 panic: page fault cpuid =3D 1 Uptime: 6d4h9m42s #1 0xc0681233 in boot (howto=3D260) at= /usr/src/sys/kern/kern_shutdown.c:416 #2 0xc0681499 in panic (fmt=3DVariable "fmt" is not available. ) at /usr/src/sys/kern/kern_shutdown.c:590 #3 0xc08ea3ec in trap_fatal (frame=3D0xc4fe47f8, eva=3D36) at /usr/src/sys/i386/i386/trap.c:938 #4 0xc08ea650 in trap_pfault (frame=3D0xc4fe47f8, usermode=3D0, eva=3D36) at /usr/src/sys/i386/i386/trap.c:851 #5 0xc08eaf19 in trap (frame=3D0xc4fe47f8) at= /usr/src/sys/i386/i386/trap.c:533 #6 0xc08cd4bc in calltrap () at /usr/src/sys/i386/i386/exception.s:166 #7 0xc5ef3e15 in ng_address_hook (here=3D0x0, item=3D0xc5f03c40, hook=3D0xcb685980, retaddr=3D0) at= /usr/src/sys/modules/netgraph/netgraph/../../../netgraph/ng_base.c:3504 #8 0xc5f7ebfb in ng_tcpmss_rcvdata (hook=3D0xc6618300, item=3D0xc5f03c40) at= /usr/src/sys/modules/netgraph/tcpmss/../../../netgraph/ng_tcpmss.c:347 #9 0xc5ef57c4 in ng_apply_item (node=3D0xca955b00, item=3D0xc5f03c40, rw=3D= 0) at= /usr/src/sys/modules/netgraph/netgraph/../../../netgraph/ng_base.c:2336 #10 0xc5ef479f in ng_snd_item (item=3D0xc5f03c40,=20 flags=3DVariable "flags" is not available. ) at= /usr/src/sys/modules/netgraph/netgraph/../../../netgraph/ng_base.c:2253 #11 0xc5f6dd30 in ng_ppp_proto_recv=20 (node=3D0xc6431300, item=3D0xc5f03c40, proto=3DVariable "proto" is not= available. ) at /usr/src/sys/modules/netgraph/ppp/../../../netgraph/ng_ppp.c:949 #12 0xc5f6ea25 in ng_ppp_rcvdata (hook=3D0xcb228a80, item=3D0xc5f03c40) at /usr/src/sys/modules/netgraph/ppp/../../../netgraph/ng_ppp.c:1524 #13 0xc5ef57c4 in ng_apply_item (node=3D0xc6431300, item=3D0xc5f03c40, rw=3D= 0) at= /usr/src/sys/modules/netgraph/netgraph/../../../netgraph/ng_base.c:2336 #14 0xc5ef479f in ng_snd_item (item=3D0xc5f03c40,=20 flags=3DVariable "flags" is not available. ) at= /usr/src/sys/modules/netgraph/netgraph/../../../netgraph/ng_base.c:2253 #15 0xc5ef57c4 in ng_apply_item (node=3D0xcb375c80, item=3D0xc5f03c40, rw=3D= 0) at= /usr/src/sys/modules/netgraph/netgraph/../../../netgraph/ng_base.c:2336 #16 0xc5ef479f in ng_snd_item (item=3D0xc5f03c40,=20 flags=3DVariable "flags" is not available. ) at= /usr/src/sys/modules/netgraph/netgraph/../../../netgraph/ng_base.c:2253 #17 0xc5ef57c4 in ng_apply_item (node=3D0xc6330100, item=3D0xc5f03c40, rw=3D= 0) at= /usr/src/sys/modules/netgraph/netgraph/../../../netgraph/ng_base.c:2336 #18 0xc5ef479f in ng_snd_item (item=3D0xc5f03c40,=20 flags=3DVariable "flags" is not available. ) at= /usr/src/sys/modules/netgraph/netgraph/../../../netgraph/ng_base.c:2253 #19 0xc5f4db1c in ng_ksocket_incoming2 (node=3D0xc6431e00, hook=3D0x0, arg1=3D0xc63479a8, arg2=3D0) at=20 /usr/src/sys/modules/netgraph/ksocket/../../../netgraph/ng_ksocket.c:1153 #20 0xc5ef58f9 in ng_apply_item (node=3D0xc6431e00, item=3D0xc5f02780, rw=3D= 1) at= /usr/src/sys/modules/netgraph/netgraph/../../../netgraph/ng_base.c:2407 #21 0xc5ef6a46 in ngthread (arg=3D0x0) at= /usr/src/sys/modules/netgraph/netgraph/../../../netgraph/ng_base.c:3351 #22 0xc0656cd1 in fork_exit (callout=3D0xc5ef68e0 , arg=3D0x0, frame=3D0xc4fe4d38) at /usr/src/sys/kern/kern_fork.c:844 #23 0xc08cd534 in fork_trampoline () at= /usr/src/sys/i386/i386/exception.s:273 (kgdb) up 7 #7 0xc5ef3e15 in ng_address_hook (here=3D0x0,=20 item=3D0xc5f03c40, hook=3D0xcb685980, retaddr=3D0) at= /usr/src/sys/modules/netgraph/netgraph/../../../netgraph/ng_base.c:3504 3504 if ((hook =3D=3D NULL) || (kgdb) list 3499 * Quick sanity check.. 3500 * Since a hook holds a reference on it's node, once we know 3501 * that the peer is still connected (even if invalid,) we= know 3502 * that the peer node is present, though maybe invalid. 3503 */ 3504 if ((hook =3D=3D NULL) || 3505 NG_HOOK_NOT_VALID(hook) || 3506 NG_HOOK_NOT_VALID(peer =3D NG_HOOK_PEER(hook)) || 3507 NG_NODE_NOT_VALID(peernode =3D NG_PEER_NODE(hook))) { 3508 NG_FREE_ITEM(item); (kgdb) (kgdb) p item $1 =3D 0xc5f03c40 (kgdb) p *item $2 =3D {el_flags =3D 5, el_next =3D {stqe_next =3D 0x0},=20 el_dest =3D 0x0, el_hook =3D 0x0, body =3D {da_m =3D 0xcaa71600, msg =3D { msg_msg =3D 0xcaa71600, msg_retaddr =3D 0}, fn=20 =3D {fn_fn =3D {fn_fn =3D 0xcaa71600, fn_fn2 =3D 0xcaa71600}, fn_arg1 =3D= 0x0, fn_arg2 =3D 0}}, apply =3D 0x0, depth =3D 4} (kgdb) p *hook $3 =3D {hk_name =3D "out", '\0' ,=20 hk_private =3D 0xc60dba00, hk_flags =3D 0, hk_type =3D 0, hk_peer =3D= 0xcae40480, hk_node =3D 0xca955b00, hk_hooks =3D {le_next =3D=20 0xc6618300, le_prev =3D 0xca955b34}, hk_rcvmsg =3D 0, hk_rcvdata =3D 0,= hk_refs =3D 2} (kgdb) p *peer $4 =3D {hk_name =3D "\b\000\000\000=20 \000\000\000\004\000\000\000\001\000\000\000\037>t\001\003=F6\0248cmd4\000\0= 00\000",=20 hk_private =3D 0x0, hk_flags =3D 0, hk_type =3D 0,=20 hk_peer =3D 0x0, hk_node =3D 0x0, hk_hooks =3D {le_next =3D 0x0, le_prev =3D= 0x355db}, hk_rcvmsg =3D 0x11a11376, hk_rcvdata =3D 0x1c7e8, hk_refs =3D 6432036} (kgdb) -------------------------------------------------------------------- Mike Tancsa, tel +1 519 651 3400 Sentex Communications, mike@sentex.net Providing Internet since 1994 www.sentex.net Cambridge, Ontario Canada www.sentex.net/mike