From owner-freebsd-bugs@freebsd.org Sat Apr 9 10:30:28 2016 Return-Path: Delivered-To: freebsd-bugs@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 52E9FB0940F for ; Sat, 9 Apr 2016 10:30:28 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2001:1900:2254:206a::16:76]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 43DF3111C for ; Sat, 9 Apr 2016 10:30:28 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from bugs.freebsd.org ([127.0.1.118]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id u39AURaO030650 for ; Sat, 9 Apr 2016 10:30:28 GMT (envelope-from bugzilla-noreply@freebsd.org) From: bugzilla-noreply@freebsd.org To: freebsd-bugs@FreeBSD.org Subject: [Bug 208649] 10.3 release crashing in ipfw or intel drivers Date: Sat, 09 Apr 2016 10:30:28 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: new X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 10.3-BETA2 X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: h-k@mail.ru X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: freebsd-bugs@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: bug_id short_desc product version rep_platform op_sys bug_status bug_severity priority component assigned_to reporter cc Message-ID: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated MIME-Version: 1.0 X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.21 Precedence: list List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 09 Apr 2016 10:30:28 -0000 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D208649 Bug ID: 208649 Summary: 10.3 release crashing in ipfw or intel drivers Product: Base System Version: 10.3-BETA2 Hardware: amd64 OS: Any Status: New Severity: Affects Some People Priority: --- Component: kern Assignee: freebsd-bugs@FreeBSD.org Reporter: h-k@mail.ru CC: freebsd-amd64@FreeBSD.org CC: freebsd-amd64@FreeBSD.org We have a bridge with dummynet shaping: root@pipe2:~ # ifconfig igb0: flags=3D8943 metric 0= mtu 1500 =20=20=20=20=20=20=20 options=3D403bb ether 00:1b:21:36:5d:9e nd6 options=3D29 media: Ethernet autoselect (1000baseT ) status: active igb1: flags=3D8943 metric 0= mtu 1500 =20=20=20=20=20=20=20 options=3D403bb ether 00:1b:21:36:5d:9f nd6 options=3D29 media: Ethernet autoselect (1000baseT ) status: active em0: flags=3D8943 metric 0 = mtu 1500 =20=20=20=20=20=20=20 options=3D4209b ether 00:1b:21:46:67:69 nd6 options=3D29 media: Ethernet autoselect status: no carrier em1: flags=3D8943 metric 0 = mtu 1500 =20=20=20=20=20=20=20 options=3D209b ether 00:07:e9:17:71:d9 nd6 options=3D29 media: Ethernet autoselect status: no carrier lo0: flags=3D8049 metric 0 mtu 16384 options=3D600003 inet6 ::1 prefixlen 128 inet6 fe80::1%lo0 prefixlen 64 scopeid 0x5 inet 127.0.0.1 netmask 0xff000000 nd6 options=3D21 bridge0: flags=3D8843 metric 0 mtu = 1500 ether 02:50:90:8e:8f:00 inet 192.168.8.2 netmask 0xffffff80 broadcast 192.168.8.127 nd6 options=3D9 id 00:00:00:00:00:00 priority 32768 hellotime 2 fwddelay 15 maxage 20 holdcnt 6 proto rstp maxaddr 2000 timeout 1200 root id 00:00:00:00:00:00 priority 32768 ifcost 0 port 0 member: igb1 flags=3D143 ifmaxaddr 0 port 2 priority 128 path cost 2000000 member: igb0 flags=3D143 ifmaxaddr 0 port 1 priority 128 path cost 2000000 bridge1: flags=3D8843 metric 0 mtu = 1500 ether 00:1b:21:46:67:69 nd6 options=3D9 id 00:00:00:00:00:00 priority 32768 hellotime 2 fwddelay 15 maxage 20 holdcnt 6 proto rstp maxaddr 2000 timeout 1200 root id 00:00:00:00:00:00 priority 32768 ifcost 0 port 0 member: em1 flags=3D143 ifmaxaddr 0 port 4 priority 128 path cost 2000000 member: em0 flags=3D143 ifmaxaddr 0 port 3 priority 128 path cost 2000000 root@pipe2:~ # ipfw show 00005 2 92 allow ip from any to any mac-type 0x0806 layer2 00006 0 0 deny ip from any to 217.117.112.144/28,217.117.125.152/29 layer2 // NAT IPs vo izbejanie ziklov 00010 371789 22100077 allow ip from table(1) to any layer2 00010 632790 932188391 allow ip from any to table(1) layer2 00020 0 0 deny ip from any to 192.168.0.0/16 out via igb1 laye= r2 00500 0 0 deny ip from table(5) to any dst-port 25 layer2 // D= enys from TestServer 00501 0 0 deny ip from 192.168.0.0/16 to any dst-port 25 layer= 2 // maill forr fake IP 00502 0 0 deny ip from table(6) to any layer2 // Denys from TestServer 00602 0 0 skipto 825 ip from table(52) to any dst-port 53,80,4= 43 layer2 00604 0 0 skipto 825 ip from any 53,80,443 to table(52) layer2 00822 0 0 deny ip from table(52) to not table(2) layer2 // Tabl52-vse blokirov IP tabl2-open hosts 00849 0 0 allow udp from not 217.117.112.0/20,192.168.128.0/20= 123 to 217.117.112.0/20,192.168.128.0/20 layer2 00850 0 0 deny udp from not 217.117.112.0/26 123 to any not dst-port 123 layer2 05502 0 0 deny udp from table(111) to any not dst-port 3658,5730-5739,27005-27095,5060 layer2 // zashita ot uTP 05504 0 0 deny udp from any not 3658,5730-5739,27005-27095,506= 0 to table(111) layer2 // zashita ot uTP 55010 0 0 pipe 30 ip from table(30) to any layer2 // 50 MBit/s= ec 55020 787 63185 pipe 80 ip from any to table(30) layer2 // 50 MBit/s= ec 55030 0 0 pipe 37 ip from table(37) to any layer2 // 75 MBit/s= ec 60000 8 772 deny ip from any to any layer2 65535 0 0 allow ip from any to any randomly OS get crashed with following stack: Apr 9 10:42:03 pipe2 kernel: Fatal trap 12: page fault while in kernel mode Apr 9 10:42:03 pipe2 kernel: cpuid =3D 0; apic id =3D 00 Apr 9 10:42:03 pipe2 kernel: fault virtual address =3D 0x188 Apr 9 10:42:03 pipe2 kernel: fault code =3D supervisor read= data, page not present Apr 9 10:42:03 pipe2 kernel: instruction pointer =3D 0x20:0xffffffff80a1b31f Apr 9 10:42:03 pipe2 kernel: stack pointer =3D 0x28:0xfffffe0090ff6620 Apr 9 10:42:03 pipe2 kernel: frame pointer =3D 0x28:0xfffffe0090ff6640 Apr 9 10:42:03 pipe2 kernel: code segment =3D base 0x0, limit 0xfffff, type 0x1b Apr 9 10:42:03 pipe2 kernel: =3D DPL 0, pres 1, long 1, def32 0, gran 1 Apr 9 10:42:03 pipe2 kernel: processor eflags =3D interrupt enabled, resu= me, IOPL =3D 0 Apr 9 10:42:03 pipe2 kernel: current process =3D 12 (irq256: igb= 0:que 0) Apr 9 10:42:03 pipe2 kernel: trap number =3D 12 Apr 9 10:42:03 pipe2 kernel: panic: page fault Apr 9 10:42:03 pipe2 kernel: cpuid =3D 0 Apr 9 10:42:03 pipe2 kernel: KDB: stack backtrace: Apr 9 10:42:03 pipe2 kernel: #0 0xffffffff8098e390 at kdb_backtrace+0x60 Apr 9 10:42:03 pipe2 kernel: #1 0xffffffff80951066 at vpanic+0x126 Apr 9 10:42:03 pipe2 kernel: #2 0xffffffff80950f33 at panic+0x43 Apr 9 10:42:03 pipe2 kernel: #3 0xffffffff80d55f7b at trap_fatal+0x36b Apr 9 10:42:03 pipe2 kernel: #4 0xffffffff80d5627d at trap_pfault+0x2ed Apr 9 10:42:03 pipe2 kernel: #5 0xffffffff80d558fa at trap+0x47a Apr 9 10:42:03 pipe2 kernel: #6 0xffffffff80d3b8d2 at calltrap+0x8 Apr 9 10:42:03 pipe2 kernel: #7 0xffffffff819e3f05 at dummynet_send+0x95 Apr 9 10:42:03 pipe2 kernel: #8 0xffffffff819e4307 at dummynet_io+0x357 Apr 9 10:42:03 pipe2 kernel: #9 0xffffffff819c13ae at ipfw_check_frame+0x2= 3e Apr 9 10:42:03 pipe2 kernel: #10 0xffffffff80a24ef4 at pfil_run_hooks+0x84 Apr 9 10:42:03 pipe2 kernel: #11 0xffffffff80a1b370 at ether_demux+0x40 Apr 9 10:42:03 pipe2 kernel: #12 0xffffffff80a1c0fe at ether_nh_input+0x35e Apr 9 10:42:03 pipe2 kernel: #13 0xffffffff80a24092 at netisr_dispatch_src+0x62 Apr 9 10:42:03 pipe2 kernel: #14 0xffffffff804f859c at igb_rxeof+0x60c Apr 9 10:42:03 pipe2 kernel: #15 0xffffffff804f8c41 at igb_msix_que+0x121 Apr 9 10:42:03 pipe2 kernel: #16 0xffffffff8091c99b at intr_event_execute_handlers+0xab Apr 9 10:42:03 pipe2 kernel: #17 0xffffffff8091cde6 at ithread_loop+0x96 Apr 9 10:42:03 pipe2 kernel: Uptime: 4h58m8s 9.3 boxes work fine on the same ruleset ipfw and other configuration root@pipe2:~ # pciconf -lv hostb0@pci0:0:0:0: class=3D0x060000 card=3D0x836d1043 chip=3D0x2e30808= 6 rev=3D0x03 hdr=3D0x00 vendor =3D 'Intel Corporation' device =3D '4 Series Chipset DRAM Controller' class =3D bridge subclass =3D HOST-PCI pcib1@pci0:0:1:0: class=3D0x060400 card=3D0x836d1043 chip=3D0x2e31808= 6 rev=3D0x03 hdr=3D0x01 vendor =3D 'Intel Corporation' device =3D '4 Series Chipset PCI Express Root Port' class =3D bridge subclass =3D PCI-PCI vgapci0@pci0:0:2:0: class=3D0x030000 card=3D0x836d1043 chip=3D0x2e32808= 6 rev=3D0x03 hdr=3D0x00 vendor =3D 'Intel Corporation' device =3D '4 Series Chipset Integrated Graphics Controller' class =3D display subclass =3D VGA hdac0@pci0:0:27:0: class=3D0x040300 card=3D0x83f31043 chip=3D0x27d8808= 6 rev=3D0x01 hdr=3D0x00 vendor =3D 'Intel Corporation' device =3D 'NM10/ICH7 Family High Definition Audio Controller' class =3D multimedia subclass =3D HDA pcib2@pci0:0:28:0: class=3D0x060400 card=3D0x81791043 chip=3D0x27d0808= 6 rev=3D0x01 hdr=3D0x01 vendor =3D 'Intel Corporation' device =3D 'NM10/ICH7 Family PCI Express Port 1' class =3D bridge subclass =3D PCI-PCI uhci0@pci0:0:29:0: class=3D0x0c0300 card=3D0x81791043 chip=3D0x27c8808= 6 rev=3D0x01 hdr=3D0x00 vendor =3D 'Intel Corporation' device =3D 'NM10/ICH7 Family USB UHCI Controller' class =3D serial bus subclass =3D USB uhci1@pci0:0:29:1: class=3D0x0c0300 card=3D0x81791043 chip=3D0x27c9808= 6 rev=3D0x01 hdr=3D0x00 vendor =3D 'Intel Corporation' device =3D 'NM10/ICH7 Family USB UHCI Controller' class =3D serial bus subclass =3D USB uhci2@pci0:0:29:2: class=3D0x0c0300 card=3D0x81791043 chip=3D0x27ca808= 6 rev=3D0x01 hdr=3D0x00 vendor =3D 'Intel Corporation' device =3D 'NM10/ICH7 Family USB UHCI Controller' class =3D serial bus subclass =3D USB uhci3@pci0:0:29:3: class=3D0x0c0300 card=3D0x81791043 chip=3D0x27cb808= 6 rev=3D0x01 hdr=3D0x00 vendor =3D 'Intel Corporation' device =3D 'NM10/ICH7 Family USB UHCI Controller' class =3D serial bus subclass =3D USB ehci0@pci0:0:29:7: class=3D0x0c0320 card=3D0x81791043 chip=3D0x27cc808= 6 rev=3D0x01 hdr=3D0x00 vendor =3D 'Intel Corporation' device =3D 'NM10/ICH7 Family USB2 EHCI Controller' class =3D serial bus subclass =3D USB pcib3@pci0:0:30:0: class=3D0x060401 card=3D0x81791043 chip=3D0x244e808= 6 rev=3D0xe1 hdr=3D0x01 vendor =3D 'Intel Corporation' device =3D '82801 PCI Bridge' class =3D bridge subclass =3D PCI-PCI isab0@pci0:0:31:0: class=3D0x060100 card=3D0x81791043 chip=3D0x27b8808= 6 rev=3D0x01 hdr=3D0x00 vendor =3D 'Intel Corporation' device =3D '82801GB/GR (ICH7 Family) LPC Interface Bridge' class =3D bridge subclass =3D PCI-ISA atapci0@pci0:0:31:1: class=3D0x01018a card=3D0x81791043 chip=3D0x27df808= 6 rev=3D0x01 hdr=3D0x00 vendor =3D 'Intel Corporation' device =3D '82801G (ICH7 Family) IDE Controller' class =3D mass storage subclass =3D ATA atapci1@pci0:0:31:2: class=3D0x01018f card=3D0x81791043 chip=3D0x27c0808= 6 rev=3D0x01 hdr=3D0x00 vendor =3D 'Intel Corporation' device =3D 'NM10/ICH7 Family SATA Controller [IDE mode]' class =3D mass storage subclass =3D ATA igb0@pci0:1:0:0: class=3D0x020000 card=3D0xa03c8086 chip=3D0x10c9808= 6 rev=3D0x01 hdr=3D0x00 vendor =3D 'Intel Corporation' device =3D '82576 Gigabit Network Connection' class =3D network subclass =3D ethernet igb1@pci0:1:0:1: class=3D0x020000 card=3D0xa03c8086 chip=3D0x10c9808= 6 rev=3D0x01 hdr=3D0x00 vendor =3D 'Intel Corporation' device =3D '82576 Gigabit Network Connection' class =3D network subclass =3D ethernet em0@pci0:2:0:0: class=3D0x020000 card=3D0xa01f8086 chip=3D0x10d38086 rev=3D= 0x00 hdr=3D0x00 vendor =3D 'Intel Corporation' device =3D '82574L Gigabit Network Connection' class =3D network subclass =3D ethernet em1@pci0:3:0:0: class=3D0x020000 card=3D0x002e8086 chip=3D0x100e8086 rev=3D= 0x02 hdr=3D0x00 vendor =3D 'Intel Corporation' device =3D '82540EM Gigabit Ethernet Controller' class =3D network subclass =3D ethernet 3 kernel dump can be found here - https://mail.proc.ru/temp/xz.zip --=20 You are receiving this mail because: You are the assignee for the bug.=