From owner-freebsd-bugs@FreeBSD.ORG Fri Aug 12 16:10:24 2005 Return-Path: X-Original-To: freebsd-bugs@hub.freebsd.org Delivered-To: freebsd-bugs@hub.freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id D6B1016A41F for ; Fri, 12 Aug 2005 16:10:24 +0000 (GMT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id 5C35B43D48 for ; Fri, 12 Aug 2005 16:10:24 +0000 (GMT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.13.3/8.13.3) with ESMTP id j7CGAODL017975 for ; Fri, 12 Aug 2005 16:10:24 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.13.3/8.13.1/Submit) id j7CGAOTB017974; Fri, 12 Aug 2005 16:10:24 GMT (envelope-from gnats) Date: Fri, 12 Aug 2005 16:10:24 GMT Message-Id: <200508121610.j7CGAOTB017974@freefall.freebsd.org> To: freebsd-bugs@FreeBSD.org From: Sergey Lapin Cc: Subject: Re: kern/84801: kernel hangs with pf and route-to X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Sergey Lapin List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Aug 2005 16:10:25 -0000 The following reply was made to PR kern/84801; it has been noted by GNATS. From: Sergey Lapin To: bug-followup@FreeBSD.org Cc: Subject: Re: kern/84801: kernel hangs with pf and route-to Date: Fri, 12 Aug 2005 20:03:07 +0400 Here come data from debugger. login: ~KDB: enter: Line break on console [thread pid 37 tid 100036 ] Stopped at kdb_enter+0x2b: nop db> trace Tracing pid 37 tid 100036 td 0xc1918d80 kdb_enter(c0877106) at kdb_enter+0x2b siointr1(c1a97400,c09879c0,0,c0876f16,56e) at siointr1+0xce siointr(c1a97400) at siointr+0x21 intr_execute_handlers(c18e4890,d33c695c,4,d33c69a4,c07dba33) at intr_execute_handlers+0xa5 lapic_handle_intr(34) at lapic_handle_intr+0x2e Xapic_isr1() at Xapic_isr1+0x33 --- interrupt, eip =3D 0xc0692442, esp =3D 0xd33c69a0, ebp =3D 0xd33c69a4 -= -- strncmp(c086c33f,c0859af9,3) at strncmp+0x16 fixup_filename(c086c336,d33c69f4,c0654bc4,c0926440,c092ef18) at fixup_filename+0x24 witness_checkorder(c1a4c0a4,9,c086c336,a0d) at witness_checkorder+0x72 _mtx_lock_flags(c1a4c0a4,0,c086c336,a0d) at _mtx_lock_flags+0x5b xl_start(c19e5400) at xl_start+0x22 if_start(c19e5400,c19e550c,c1b2850c,202a2a4,62) at if_start+0x7b vlan_start(c1b28400) at vlan_start+0x346 if_start(c1b28400) at if_start+0x7b ether_output_frame(c1b28400,c1b16200,0,0,0) at ether_output_frame+0x1d9 ether_output(c1b28400,c1b16200,d33c6b34,0,c1b28400) at ether_output+0x3b4 pf_route(d33c6c7c,c1cf04b8,1,c1b28400,c1e7a820) at pf_route+0x2a1 pf_test(1,c1b28400,d33c6c7c,0,0) at pf_test+0x66e pf_check_in(0,d33c6c7c,c1b28400,1,0) at pf_check_in+0x37 pfil_run_hooks(c096ed00,d33c6cc8,c1b28400,1,0) at pfil_run_hooks+0xc9 ip_input(c1b15800) at ip_input+0x231 netisr_processqueue(c096e338) at netisr_processqueue+0x6e swi_net(0) at swi_net+0xbe ithread_loop(c18fa480,d33c6d38,c18fa480,c061f854,0) at ithread_loop+0x11c fork_exit(c061f854,c18fa480,d33c6d38) at fork_exit+0xa0 fork_trampoline() at fork_trampoline+0x8 --- trap 0x1, eip =3D 0, esp =3D 0xd33c6d6c, ebp =3D 0 --- ~KDB: enter: Line break on console [thread pid 29 tid 100023 ] Stopped at kdb_enter+0x2b: nop db> trace Tracing pid 29 tid 100023 td 0xc190b780 kdb_enter(c0877106) at kdb_enter+0x2b siointr1(c1a97400,c09879c0,0,c0876f16,56e) at siointr1+0xce siointr(c1a97400) at siointr+0x21 intr_execute_handlers(c18e4890,d339cc94,4,d339cce8,c07dba33) at intr_execute_handlers+0xa5 lapic_handle_intr(34) at lapic_handle_intr+0x2e Xapic_isr1() at Xapic_isr1+0x33 --- interrupt, eip =3D 0xc074fee2, esp =3D 0xd339ccd8, ebp =3D 0xd339cce8 -= -- xl_intr(c1a4a000) at xl_intr+0x102 ithread_loop(c18fa880,d339cd38,c18fa880,c061f854,0) at ithread_loop+0x11c fork_exit(c061f854,c18fa880,d339cd38) at fork_exit+0xa0 fork_trampoline() at fork_trampoline+0x8 --- trap 0x1, eip =3D 0, esp =3D 0xd339cd6c, ebp =3D 0 --- ~KDB: enter: Line break on console [thread pid 40 tid 100029 ] Stopped at kdb_enter+0x2b: nop db> trace Tracing pid 40 tid 100029 td 0xc18bed80 kdb_enter(c0877106) at kdb_enter+0x2b siointr1(c1a97400,c09879c0,0,c0876f16,56e) at siointr1+0xce siointr(c1a97400) at siointr+0x21 intr_execute_handlers(c18e4890,d23b9bb0,4,d23b9bf8,c07dba33) at intr_execute_handlers+0xa5 lapic_handle_intr(34) at lapic_handle_intr+0x2e Xapic_isr1() at Xapic_isr1+0x33 --- interrupt, eip =3D 0xc07e46e7, esp =3D 0xd23b9bf4, ebp =3D 0xd23b9bf8 -= -- spinlock_exit(c096cb10,d23b9c30,c0654bc4,c0926440,0) at spinlock_exit+0x27 _mtx_unlock_spin_flags(c0926440,0,c085995e,6af,c0926440) at _mtx_unlock_spin_flags+0x8d witness_lock_list_free(c096cb10) at witness_lock_list_free+0x40 witness_unlock(c1a4c0a4,8,c086c33f,839) at witness_unlock+0x1b6 _mtx_unlock_flags(c1a4c0a4,0,c086c336,839,c1a4a000) at _mtx_unlock_flags+0x= 5b xl_rxeof_task(c1a4a000,0,c19b839c,0,c085914d) at xl_rxeof_task+0x38 taskqueue_run(c19b8380,d23b9d0c,c061f970,0,0) at taskqueue_run+0x86 taskqueue_swi_run(0) at taskqueue_swi_run+0xe ithread_loop(c19b8300,d23b9d38,c19b8300,c061f854,0) at ithread_loop+0x11c fork_exit(c061f854,c19b8300,d23b9d38) at fork_exit+0xa0 fork_trampoline() at fork_trampoline+0x8 --- trap 0x1, eip =3D 0, esp =3D 0xd23b9d6c, ebp =3D 0 --- ~KDB: enter: Line break on console [thread pid 40 tid 100029 ] Stopped at kdb_enter+0x2b: nop db> trace Tracing pid 40 tid 100029 td 0xc18bed80 kdb_enter(c0877106) at kdb_enter+0x2b siointr1(c1a97400,c09879c0,0,c0876f16,56e) at siointr1+0xce siointr(c1a97400) at siointr+0x21 intr_execute_handlers(c18e4890,d23b9be8,4,d23b9c30,c07dba33) at intr_execute_handlers+0xa5 lapic_handle_intr(34) at lapic_handle_intr+0x2e Xapic_isr1() at Xapic_isr1+0x33 --- interrupt, eip =3D 0xc069244f, esp =3D 0xd23b9c2c, ebp =3D 0xd23b9c30 -= -- strncmp(c086c33f,c0859af9,3) at strncmp+0x23 fixup_filename(c086c336,c092ef18,c1a4c0a4,837,c086c336) at fixup_filename+0= x24 witness_lock(c1a4c0a4,8,c086c336,837,c1a4a000) at witness_lock+0x55 _mtx_lock_flags(c1a4c0a4,0,c086c336,837,0) at _mtx_lock_flags+0x97 xl_rxeof_task(c1a4a000,0,c19b839c,0,c085914d) at xl_rxeof_task+0x20 taskqueue_run(c19b8380,d23b9d0c,c061f970,0,0) at taskqueue_run+0x86 taskqueue_swi_run(0) at taskqueue_swi_run+0xe ithread_loop(c19b8300,d23b9d38,c19b8300,c061f854,0) at ithread_loop+0x11c fork_exit(c061f854,c19b8300,d23b9d38) at fork_exit+0xa0 fork_trampoline() at fork_trampoline+0x8 --- trap 0x1, eip =3D 0, esp =3D 0xd23b9d6c, ebp =3D 0 --- db> trace Tracing pid 29 tid 100023 td 0xc190b780 kdb_enter(c0877106) at kdb_enter+0x2b siointr1(c1a97400,c09879c0,0,c0876f16,56e) at siointr1+0xce siointr(c1a97400) at siointr+0x21 intr_execute_handlers(c18e4890,d339cc88,4,d339ccd0,c07dba33) at intr_execute_handlers+0xa5 lapic_handle_intr(34) at lapic_handle_intr+0x2e Xapic_isr1() at Xapic_isr1+0x33 --- interrupt, eip =3D 0xc07e46e7, esp =3D 0xd339cccc, ebp =3D 0xd339ccd0 -= -- spinlock_exit(0,d339cd0c,c061fa8c,c091efa0,0) at spinlock_exit+0x27 _mtx_unlock_spin_flags(c091efa0,0,c08539c9,251) at _mtx_unlock_spin_flags+0= x8d ithread_loop(c18fa880,d339cd38,c18fa880,c061f854,0) at ithread_loop+0x238 fork_exit(c061f854,c18fa880,d339cd38) at fork_exit+0xa0 fork_trampoline() at fork_trampoline+0x8 --- trap 0x1, eip =3D 0, esp =3D 0xd339cd6c, ebp =3D 0 --- ~KDB: enter: Line break on console [thread pid 40 tid 100029 ] Stopped at kdb_enter+0x2b: nop db> trace Tracing pid 40 tid 100029 td 0xc18bed80 kdb_enter(c0877106) at kdb_enter+0x2b siointr1(c1a97400,c09879c0,0,c0876f16,56e) at siointr1+0xce siointr(c1a97400) at siointr+0x21 intr_execute_handlers(c18e4890,d23b9c80,4,d23b9cdc,c07dba33) at intr_execute_handlers+0xa5 lapic_handle_intr(34) at lapic_handle_intr+0x2e Xapic_isr1() at Xapic_isr1+0x33 --- interrupt, eip =3D 0xc06505da, esp =3D 0xd23b9cc4, ebp =3D 0xd23b9cdc -= -- taskqueue_run(c19b8380,d23b9d0c,c061f970,0,0) at taskqueue_run+0xaa taskqueue_swi_run(0) at taskqueue_swi_run+0xe ithread_loop(c19b8300,d23b9d38,c19b8300,c061f854,0) at ithread_loop+0x11c fork_exit(c061f854,c19b8300,d23b9d38) at fork_exit+0xa0 fork_trampoline() at fork_trampoline+0x8 --- trap 0x1, eip =3D 0, esp =3D 0xd23b9d6c, ebp =3D 0 --- db> call doadump Dumping 447 MB (2 chunks) chunk 0: 1MB (159 pages) ... ok chunk 1: 447MB (114416 pages) 431 415 399 383 367 351 335 319 303 287 271 255 239 223 207 191 175 159 143 127 111 95 79 63 47 31 15 ... ok Dump complete =3D 0xf