From owner-freebsd-bugs Wed Mar 28 10:10:16 2001 Delivered-To: freebsd-bugs@hub.freebsd.org Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21]) by hub.freebsd.org (Postfix) with ESMTP id 3DEC337B725 for ; Wed, 28 Mar 2001 10:10:01 -0800 (PST) (envelope-from gnats@FreeBSD.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.11.1/8.11.1) id f2SIA1j40086; Wed, 28 Mar 2001 10:10:01 -0800 (PST) (envelope-from gnats) Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21]) by hub.freebsd.org (Postfix) with ESMTP id 0F6B337B724 for ; Wed, 28 Mar 2001 10:06:41 -0800 (PST) (envelope-from nobody@FreeBSD.org) Received: (from nobody@localhost) by freefall.freebsd.org (8.11.1/8.11.1) id f2SI6fi39811; Wed, 28 Mar 2001 10:06:41 -0800 (PST) (envelope-from nobody) Message-Id: <200103281806.f2SI6fi39811@freefall.freebsd.org> Date: Wed, 28 Mar 2001 10:06:41 -0800 (PST) From: gunther@gusw.net To: freebsd-gnats-submit@FreeBSD.org X-Send-Pr-Version: www-1.0 Subject: kern/26176: Kernel panic when using IPsec on high loads Sender: owner-freebsd-bugs@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org >Number: 26176 >Category: kern >Synopsis: Kernel panic when using IPsec on high loads >Confidential: no >Severity: critical >Priority: high >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Wed Mar 28 10:10:01 PST 2001 >Closed-Date: >Last-Modified: >Originator: Gunther Schadow >Release: 4.2-RELEASE >Organization: Regenstrief Institute for Health Care >Environment: PicoBSD (no uname) but: it's FreeBSD 4.2-RELEASE on i386 built recently Hardware: recent DELL "Dimension 4100" PC. boot log with devices etc: Copyright (c) 1992-2000 The FreeBSD Project. Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 The Regents of the University of California. All rights reserved. FreeBSD 4.2-RELEASE #12: Thu Mar 15 22:14:04 EST 2001 schadow@aurora.regenstrief.org:/usr/src/sys-4.2/compile/PICOBSD-ngigw1 Timecounter "i8254" frequency 1193182 Hz Timecounter "TSC" frequency 930319864 Hz CPU: Pentium III/Pentium III Xeon/Celeron (930.32-MHz 686-class CPU) Origin = "GenuineIntel" Id = 0x686 Stepping = 6 Features=0x383f9ff real memory = 133955584 (130816K bytes) avail memory = 126279680 (123320K bytes) pnpbios: Bad PnP BIOS data checksum Preloaded elf kernel "kernel" at 0xc0427000. Preloaded mfs_root "/fs.PICOBSD" at 0xc0427084. Pentium Pro MTRR support enabled md0: Preloaded image 2048000 bytes at 0xc02313e8 md1: Malloc disk npx0: on motherboard npx0: INT 16 interface pcib0: on motherboard pci0: on pcib0 pcib1: at device 1.0 on pci0 pci1: on pcib1 pci1: at 0.0 irq 11 pcib2: at device 30.0 on pci0 pci2: on pcib2 xl0: <3Com 3c905C-TX Fast Etherlink XL> port 0xdc00-0xdc7f mem 0xff9ffc00-0xff9f fc7f irq 3 at device 9.0 on pci2 xl0: Ethernet address: 00:01:03:d6:24:fd miibus0: on xl0 xlphy0: <3c905C 10/100 internal PHY> on miibus0 xlphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto pci2: (vendor=0x1274, dev=0x1371) at 12.0 irq 9 isab0: at device 31.0 on pci0 isa0: on isab0 pci0: at 31.1 pci0: at 31.2 irq 10 pci0: (vendor=0x8086, dev=0x2443) at 31.3 irq 9 fdc0: at port 0x3f0-0x3f5,0x3f7 irq 6 drq 2 on isa0 fdc0: FIFO enabled, 8 bytes threshold fd0: <1440-KB 3.5" drive> on fdc0 drive 0 sio0 at port 0x3f8-0x3ff irq 4 flags 0x10 on isa0 sio0: type 16550A, console DUMMYNET initialized (000608) IP packet filtering initialized, divert enabled, rule-based forwarding disabled, default to accept, logging disabled IPsec: Initialized Security Association Processing. >Description: Kernel panic (see messages below) when used as a router for for videoconferencing (i.e. under moderate to high load of UDP streaming, 1.5 to 2 Mb/s) with IPsec tunnel mode enabled (static keying, *no* IKE/racoon) and using IPFW (with or without any firewall rules.) Kernel panics approximately 5 minutes after the streaming starts. Both input and output to the gateway go through the same ethernet device (an "xl" device.) Will reproduce more of problem tomorrow and will use kernel debugger and more recent STABLE versions. Would be good to have some feedback though that would limit my search space for trial-and-error attempts. Two incidents: Incident 1: Fatal trap 12: page fault while in kernel mode fault virtual address = 0xb5c0a612 fault code = supervisor read, page not present instruction pointer = 0x8:0xc014dcf8 stack pointer = 0x10:0xc0201d8c frame pointer = 0x10:0xc0201d98 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, def32 1, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = Idle interrupt mask = net tty trap number = 12 panic: page fault syncing disks... done Uptime: 1h48m1s Fatal trap 12: page fault while in kernel mode fault virtual address = 0xb6c03812 fault code = supervisor read, page not present instruction pointer = 0x8:0xc014dcf8 stack pointer = 0x10:0xc0201b08 frame pointer = 0x10:0xc0201b14 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, def32 1, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = Idle interrupt mask = net tty trap number = 12 panic: page fault Uptime: 1h48m2s ------------------- Incident 2: Fatal trap 12: page fault while in kernel mode fault virtual address = 0xb4c08a00 fault code = supervisor read, page not present instruction pointer = 0x8:0xc0197484 stack pointer = 0x10:0xc0201ab8 frame pointer = 0x10:0xc0201ac8 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, def32 1, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = Idle interrupt mask = net tty trap number = 12 panic: page fault syncing disks... done Uptime: 36m55s >How-To-Repeat: The problem consistently occurs about 5 minutes after the high load begins. Have one machine at remote site now but will try in laboratory setting and with KDB tomorrow. PLEASE let me know if this problem (or a similar problem) is known and has workaround or fixes of any kind. >Fix: >Release-Note: >Audit-Trail: >Unformatted: To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-bugs" in the body of the message