Date: Thu, 24 Mar 2011 12:02:03 +0300 From: Sergey Kandaurov <pluknet@gmail.com> To: FreeBSD Net <freebsd-net@freebsd.org> Subject: Re: panic in dummynet Message-ID: <AANLkTi=_YopOzfEqYjCeS7xPE-22P-1=nP%2BA_9pcKfpF@mail.gmail.com> In-Reply-To: <AANLkTik=sGnOYNfjXinutrDgs0dn9jKRsPUyi5gA-b9h@mail.gmail.com> References: <AANLkTik=sGnOYNfjXinutrDgs0dn9jKRsPUyi5gA-b9h@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On 21 March 2011 12:43, Sergey Kandaurov <pluknet@gmail.com> wrote:
> Hi.
>
> This is a 8.1 box, not very much loaded.
> It has two simple dummynet rules.
> That's the first time it panics there. Any hints?
>
> db> x/s *panicstr
> 0: =A0 =A0 =A0*** error reading from address 0 ***
> db> bt
> Tracing pid 0 tid 100116 td 0xffffff000ab057c0
> m_copym() at m_copym+0x37
> ip_fragment() at ip_fragment+0x132
> ip_output() at ip_output+0xeef
> dummynet_send() at dummynet_send+0x14c
> dummynet_task() at dummynet_task+0x1b7
> taskqueue_run() at taskqueue_run+0x93
> taskqueue_thread_loop() at taskqueue_thread_loop+0x46
> fork_exit() at fork_exit+0x118
> fork_trampoline() at fork_trampoline+0xe
> --- trap 0, rip =3D 0, rsp =3D 0xffffff8399222d30, rbp =3D 0 ---
>
Hmm.. Another crash today.
Looks like it might be due to race with bce intr handler.
Fatal trap 12: page fault while in kernel mode
cpuid =3D 0; apic id =3D 00
fault virtual address =3D 0x18
fault code =3D supervisor read data, page not present
instruction pointer =3D 0x20:0xffffffff80611587
stack pointer =3D 0x28:0xffffff82b41da960
frame pointer =3D 0x28:0xffffff82b41da9c0
code segment =3D base 0x0, limit 0xfffff, type 0x1b
=3D DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags =3D interrupt enabled, resume, IOPL =3D 0
current process =3D 0 (dummynet)
db> bt
Tracing pid 0 tid 100121 td 0xffffff00094177c0
m_copym() at m_copym+0x37
ip_fragment() at ip_fragment+0x132
ip_output() at ip_output+0xeef
dummynet_send() at dummynet_send+0x14c
dummynet_task() at dummynet_task+0x1b7
taskqueue_run() at taskqueue_run+0x93
taskqueue_thread_loop() at taskqueue_thread_loop+0x46
fork_exit() at fork_exit+0x118
fork_trampoline() at fork_trampoline+0xe
--- trap 0, rip =3D 0, rsp =3D 0xffffff82b41dad30, rbp =3D 0 ---
cpuid =3D 0
curthread =3D 0xffffff00094177c0: pid 0 "dummynet"
cpuid =3D 1
curthread =3D 0xffffff00029a23e0: pid 12 "irq257: bce1"
cpuid =3D 2
curthread =3D 0xffffff00026fc3e0: pid 12 "swi4: clock"
100039 Run CPU 1 [irq257: bce1]
100038 RunQ [irq256: bce0]
100012 Run CPU 2 [swi4: clock]
db> bt 100039
Tracing pid 12 tid 100039 td 0xffffff00029a23e0
cpustop_handler() at cpustop_handler+0x40
ipi_nmi_handler() at ipi_nmi_handler+0x30
trap() at trap+0x175
nmi_calltrap() at nmi_calltrap+0x8
--- trap 0x13, rip =3D 0xffffffff805c62e4, rsp =3D 0xffffff8000052fe0, rbp =
=3D 0xfffff
f82b155d7b0 ---
callout_lock() at callout_lock+0x54
callout_reset_on() at callout_reset_on+0x43
tcp_do_segment() at tcp_do_segment+0x508
tcp_input() at tcp_input+0xd22
ip_input() at ip_input+0xad
netisr_dispatch_src() at netisr_dispatch_src+0x7e
ether_demux() at ether_demux+0x14d
ether_input() at ether_input+0x17b
ether_demux() at ether_demux+0x6f
ether_input() at ether_input+0x17b
bce_intr() at bce_intr+0x3b0
intr_event_execute_handlers() at intr_event_execute_handlers+0xfd
ithread_loop() at ithread_loop+0x8e
fork_exit() at fork_exit+0x118
fork_trampoline() at fork_trampoline+0xe
--- trap 0, rip =3D 0, rsp =3D 0xffffff82b155dd30, rbp =3D 0 ---
db> bt 100038
Tracing pid 12 tid 100038 td 0xffffff00029a27c0
sched_switch() at sched_switch+0xea
mi_switch() at mi_switch+0x16f
ithread_loop() at ithread_loop+0x1d0
fork_exit() at fork_exit+0x118
fork_trampoline() at fork_trampoline+0xe
--- trap 0, rip =3D 0, rsp =3D 0xffffff82b1554d30, rbp =3D 0 ---
db> bt 100012
Tracing pid 12 tid 100012 td 0xffffff00026fc3e0
cpustop_handler() at cpustop_handler+0x40
ipi_nmi_handler() at ipi_nmi_handler+0x30
trap() at trap+0x175
nmi_calltrap() at nmi_calltrap+0x8
--- trap 0x13, rip =3D 0xffffffff808a8270, rsp =3D 0xffffff8000059fe0, rbp
=3D 0xffffff80000c9bd0 ---
Xinvlpg() at Xinvlpg
ithread_loop() at ithread_loop+0x142
fork_exit() at fork_exit+0x118
fork_trampoline() at fork_trampoline+0xe
--- trap 0, rip =3D 0, rsp =3D 0xffffff80000c9d30, rbp =3D 0 ---
--=20
wbr,
pluknet
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?AANLkTi=_YopOzfEqYjCeS7xPE-22P-1=nP%2BA_9pcKfpF>