Date: Thu, 12 Aug 2004 19:37:51 +0200 From: Max Laier <max@love2party.net> To: Sangwoo Shim <ssw@neo.redjade.org> Cc: yongari@kt-is.co.kr Subject: Re: Panic in nd6_slowtimo() Message-ID: <200408121938.04611.max@love2party.net> In-Reply-To: <20040812171410.GA91666@neo.redjade.org> References: <20040812171410.GA91666@neo.redjade.org>
next in thread | previous in thread | raw e-mail | index | archive | help
--Boundary-02=_8r6GBKvOD6flFTm
Content-Type: text/plain;
charset="euc-kr"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
This was reported before, but I was never able to reproduce it and the=20
original reporter didn't reply anymore (iirc). Can you please turn this int=
o=20
a PR so that we do not lose track this time? I will be looking into it.
Thanks.
On Thursday 12 August 2004 19:14, Sangwoo Shim wrote:
> [ FreeBSD-current list rejects my mail. So, to pf maintainers.. ]
>
> I recently got this panic. 1~2 times in a day.
> It seems that pflog is the culprit.. pflog0's if_afdata contains
> nothing but null. I couldn't reproduce the panic with pf.ko unloaded.
> option INET6 is in kernel configuration.
> The machine is SMP. If you need more information, please let me know.
> I'm using FreeBSD-current of Aug 12.
>
> panic messages:
> ---
> Fatal trap 12: page fault while in kernel mode
> cpuid =3D 0; apic id =3D 01
> fault virtual address =3D 0x8
> fault code =3D supervisor read, page not present
> instruction pointer =3D 0x8:0xc056ec72
> stack pointer =3D 0x10:0xd53efcb8
> frame pointer =3D 0x10:0xd53efcc4
> code segment =3D base 0x0, limit 0xfffff, type 0x1b
> =3D DPL 0, pres 1, def32 1, gran 1
> processor eflags =3D interrupt enabled, resume, IOPL =3D 0
> current process =3D 37 (swi5: clock sio)
> Dumping 511 MB
> 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 256 272 288 304 320
> 336 352 368 384 400 416 432 448 464 480 496 ---
> #0 doadump () at pcpu.h:159
> 159 pcpu.h: No such file or directory.
> in pcpu.h
> doadump () at pcpu.h:159
> 159 in pcpu.h
> (kgdb) bt
> #0 doadump () at pcpu.h:159
> #1 0xc043b83a in db_fncall (dummy1=3D0, dummy2=3D0, dummy3=3D-717292800,
> dummy4=3D0xd53efae8 "\034=FB=BE=D5=A2) at /usr/src/sys/ddb/db_command=
=2Ec:531
> #2 0xc043b648 in db_command (last_cmdp=3D0xc069cea4, cmd_table=3D0x0,
> aux_cmd_tablep=3D0xc066cc44, aux_cmd_tablep_end=3D0xc066cc48)
> at /usr/src/sys/ddb/db_command.c:349
> #3 0xc043b710 in db_command_loop () at /usr/src/sys/ddb/db_command.c:455
> #4 0xc043d289 in db_trap (type=3D12, code=3D0) at
> /usr/src/sys/ddb/db_main.c:221 #5 0xc04d9020 in kdb_trap (type=3D12, cod=
e=3D0,
> tf=3D0xd53efc78)
> at /usr/src/sys/kern/subr_kdb.c:401
> #6 0xc062795d in trap_fatal (frame=3D0xd53efc78, eva=3D8)
> at /usr/src/sys/i386/i386/trap.c:807
> #7 0xc06276bb in trap_pfault (frame=3D0xd53efc78, usermode=3D0, eva=3D8)
> at /usr/src/sys/i386/i386/trap.c:730
> #8 0xc06272d1 in trap (frame=3D
> {tf_fs =3D -1045626856, tf_es =3D -717357040, tf_ds =3D -717357040,=
tf_edi
> =3D -1045585920, tf_esi =3D -1045508608, tf_ebp =3D -717292348, tf_isp =3D
> -717292380, tf_ebx =3D 23040, tf_edx =3D 1474, tf_ecx =3D -1066723816, tf=
_eax =3D
> 0, tf_trapno =3D 12, tf_err =3D 0, tf_eip =3D -1068045198, tf_cs =3D 8, t=
f_eflags =3D
> 66182, tf_esp =3D 6, tf_ss =3D 4}) at /usr/src/sys/i386/i386/trap.c:417 #=
9=20
> 0xc0615b1a in calltrap () at /usr/src/sys/i386/i386/exception.s:140 #10
> 0xc1ad0018 in ?? ()
> #11 0xd53e0010 in ?? ()
> #12 0xd53e0010 in ?? ()
> #13 0xc1ada000 in ?? ()
> #14 0xc1aece00 in ?? ()
> #15 0xd53efcc4 in ?? ()
> #16 0xd53efca4 in ?? ()
> #17 0x00005a00 in ?? ()
> #18 0x000005c2 in ?? ()
> #19 0xc06b1618 in arc4_sbox ()
> #20 0x00000000 in ?? ()
> #21 0x0000000c in ?? ()
> #22 0x00000000 in ?? ()
> #23 0xc056ec72 in nd6_slowtimo (ignored_arg=3D0x0)
> at /usr/src/sys/netinet6/nd6.c:1800
> #24 0xc04cd05b in softclock (dummy=3D0x0) at
> /usr/src/sys/kern/kern_timeout.c:259 #25 0xc04ab6bd in ithread_loop
> (arg=3D0xc1977c00)
> at /usr/src/sys/kern/kern_intr.c:546
> #26 0xc04aa7fd in fork_exit (callout=3D0xc04ab564 <ithread_loop>,
> arg=3D0xc1977c00, frame=3D0xd53efd48) at /usr/src/sys/kern/kern_fork.=
c:819
> #27 0xc0615b7c in fork_trampoline () at
> /usr/src/sys/i386/i386/exception.s:209 (kgdb) up 23
> #23 0xc056ec72 in nd6_slowtimo (ignored_arg=3D0x0)
> at /usr/src/sys/netinet6/nd6.c:1800
> 1800 nd6if =3D ND_IFINFO(ifp);
> (kgdb) l
> 1795
> 1796 callout_reset(&nd6_slowtimo_ch, ND6_SLOWTIMER_INTERVAL *
> hz, 1797 nd6_slowtimo, NULL);
> 1798 IFNET_RLOCK();
> 1799 for (ifp =3D TAILQ_FIRST(&ifnet); ifp; ifp =3D TAILQ_NEXT=
(ifp,
> if_list)) { 1800 nd6if =3D ND_IFINFO(ifp);
> 1801 if (nd6if->basereachable && /* already initialized
> */ 1802 (nd6if->recalctm -=3D ND6_SLOWTIMER_INTERV=
AL)
> <=3D 0) { 1803 /*
> 1804 * Since reachable time rarely changes by
> router (kgdb) p *ifp
> $1 =3D {if_softc =3D 0xc1ada000, if_link =3D {tqe_next =3D 0xc1ae1800,
> tqe_prev =3D 0xc1adb004},
> if_xname =3D "pflog0\000\000\000\000\000\000\000\000\000",
> if_dname =3D 0xc077ee0d "pflog", if_dunit =3D 0, if_addrhead =3D {
> tqh_first =3D 0xc1ae3e00, tqh_last =3D 0xc1ae3e60}, if_klist =3D {
> slh_first =3D 0x0}, if_pcount =3D 0, if_carp =3D 0x0, if_bpf =3D 0x0,
> if_index =3D 4, if_timer =3D 0, if_nvlans =3D 0, if_flags =3D 0,
> if_capabilities =3D 0, if_capenable =3D 0, if_linkmib =3D 0x0, if_linkm=
iblen =3D
> 0, if_data =3D {ifi_type =3D 246 '=F6=A7, ifi_physical =3D 0 '\0', ifi_ad=
drlen =3D 0
> '\0', ifi_hdrlen =3D 48 '0', ifi_link_state =3D 0 '\0', ifi_recvquota =3D=
0 '\0',
> ifi_xmitquota =3D 0 '\0', ifi_mtu =3D 33208, ifi_metric =3D 0, ifi_baudra=
te =3D 0,
> ifi_ipackets =3D 0, ifi_ierrors =3D 0, ifi_opackets =3D 0, ifi_oerrors =
=3D 0,
> ifi_collisions =3D 0, ifi_ibytes =3D 0, ifi_obytes =3D 0, ifi_imcasts =3D=
0,
> ifi_omcasts =3D 0, ifi_iqdrops =3D 0, ifi_noproto =3D 0, ifi_hwassist =3D=
0,
> ifi_unused =3D 0, ifi_lastchange =3D {tv_sec =3D 1, tv_usec =3D 10464}},
> if_multiaddrs =3D {tqh_first =3D 0x0, tqh_last =3D 0xc1ada0a8}, if_amcoun=
t =3D 0,
> if_output =3D 0xc077d738, if_input =3D 0, if_start =3D 0xc077d69c,
> if_ioctl =3D 0xc077d760, if_watchdog =3D 0, if_init =3D 0, if_resolvemu=
lti =3D 0,
> if_snd =3D {ifq_head =3D 0x0, ifq_tail =3D 0x0, ifq_len =3D 0, ifq_maxl=
en =3D 50,
> ifq_drops =3D 0, ifq_mtx =3D {mtx_object =3D {lo_class =3D 0xc067db3c,
> lo_name =3D 0xc1ada00c "pflog0", lo_type =3D 0xc0657e7d "if send
> queue", lo_flags =3D 196608, lo_list =3D {tqe_next =3D 0x0, tqe_prev =3D =
0x0},
> lo_witness =3D 0x0}, mtx_lock =3D 4, mtx_recurse =3D 0}, ifq_drv_head =3D=
0x0,
> ifq_drv_tail =3D 0x0, ifq_drv_len =3D 0, ifq_drv_maxlen =3D 0, altq_type =
=3D 0,
> altq_flags =3D 0, altq_disc =3D 0x0, altq_ifp =3D 0xc1ada000, altq_enqueu=
e =3D 0,
> altq_dequeue =3D 0, altq_request =3D 0, altq_clfier =3D 0x0, altq_classif=
y =3D 0,
> altq_tbr =3D 0x0, altq_cdnr =3D 0x0}, if_broadcastaddr =3D 0x0, lltables =
=3D 0x0,
> if_label =3D 0x0, if_prefixhead =3D {tqh_first =3D 0x0, tqh_last =3D 0xc1=
ada150},
> if_afdata =3D {0x0 <repeats 37 times>}, if_afdata_initialized =3D 1,
> if_afdata_mtx =3D {mtx_object =3D {lo_class =3D 0xc067db3c,
> lo_name =3D 0xc0657e6d "if_afdata", lo_type =3D 0xc0657e6d "if_afda=
ta",
> lo_flags =3D 196608, lo_list =3D {tqe_next =3D 0x0, tqe_prev =3D 0x=
0},
> lo_witness =3D 0x0}, mtx_lock =3D 4, mtx_recurse =3D 0}, if_startta=
sk =3D {
> ta_link =3D {stqe_next =3D 0x0}, ta_pending =3D 0, ta_priority =3D 0,
> ta_func =3D 0xc0527fb4 <if_start_deferred>, ta_context =3D 0xc1ada000=
}}
>
> Thanks.
> - Sangwoo Shim
=2D-=20
/"\ Best regards, | mlaier@freebsd.org
\ / Max Laier | ICQ #67774661
X http://pf4freebsd.love2party.net/ | mlaier@EFnet
/ \ ASCII Ribbon Campaign | Against HTML Mail and News
--Boundary-02=_8r6GBKvOD6flFTm
Content-Type: application/pgp-signature
Content-Description: signature
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (FreeBSD)
iD8DBQBBG6r8XyyEoT62BG0RAnlHAJ9nA0IqjKtcYmG+J+7o3G2gbP1MqQCeNyxd
ojDL/qKPxp3xTZwilm9tXbA=
=nl83
-----END PGP SIGNATURE-----
--Boundary-02=_8r6GBKvOD6flFTm--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200408121938.04611.max>