From owner-freebsd-virtualization@FreeBSD.ORG Mon Jul 22 06:32:21 2013 Return-Path: Delivered-To: freebsd-virtualization@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) by hub.freebsd.org (Postfix) with ESMTP id 1A277909; Mon, 22 Jul 2013 06:32:21 +0000 (UTC) (envelope-from crodr001@gmail.com) Received: from mail-la0-x22a.google.com (mail-la0-x22a.google.com [IPv6:2a00:1450:4010:c03::22a]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 1BC152408; Mon, 22 Jul 2013 06:32:19 +0000 (UTC) Received: by mail-la0-f42.google.com with SMTP id eh20so2600561lab.29 for ; Sun, 21 Jul 2013 23:32:18 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:date:x-google-sender-auth:message-id:subject :from:to:cc:content-type; bh=BRjAejkO3k3Qi5QfaPOi8/JkAM5ql9nuw1zlJZN8X+Q=; b=iLVMOq9tfrDs6Dddka0faB8XZmQep87xI4PUNgmry5jO5aM75nDHSMpldsehBpFaEf sPaqpogBUM3a1r2UdGd27D/FVLUGGS79IrAAyZnpCIO04hPMfZsLfTxedttLHuTHOaVC YNGWBpjLMZOc1B5EN+d9D8L5D5xd3Cu0J4X9uBI7qeAc2YpUSy+bOw3SCRje8byxiGDV RLLNPEXNhbV29tuCq57inqd6mF6HfR3hZJtXRE2xTvUfZEUxfmKO59FkfRAeqxGd3iKC eohyPi7DzmGOsYhVIDg8vTnRiSQSy/oICLLKXV72VeeRkjJ0iNJdjPFR9T6jZxSBjbXT FPpQ== MIME-Version: 1.0 X-Received: by 10.112.3.234 with SMTP id f10mr11033009lbf.81.1374474737858; Sun, 21 Jul 2013 23:32:17 -0700 (PDT) Sender: crodr001@gmail.com Received: by 10.112.149.38 with HTTP; Sun, 21 Jul 2013 23:32:17 -0700 (PDT) Date: Sun, 21 Jul 2013 23:32:17 -0700 X-Google-Sender-Auth: 43Ak-TDYf3ata2p5DxACjAN2548 Message-ID: Subject: VIMAGE + PF crash in mbuf destructor From: Craig Rodrigues To: "freebsd-virtualization@freebsd.org" Content-Type: text/plain; charset=ISO-8859-1 X-Content-Filtered-By: Mailman/MimeDel 2.1.14 Cc: Adrian Chadd , freebsd-pf@freebsd.org X-BeenThere: freebsd-virtualization@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Discussion of various virtualization techniques FreeBSD supports." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 22 Jul 2013 06:32:21 -0000 Hi, I used a kernel config with the following lines: include GENERIC options VIMAGE and compiled a CURRENT kernel from svn://svn.freebsd.org/base/head@253346 . I also have PF enabled on my system. Once in a while I have been getting kernel panics like these: ==================================================================== (kgdb) #0 doadump (textdump=1) at pcpu.h:236 #1 0xffffffff808bc617 in kern_reboot (howto=260) at /usr/home/rodrigc/freebsd/head/sys/kern/kern_shutdown.c:447 #2 0xffffffff808bcb25 in vpanic (fmt=, ap=) at /usr/home/rodrigc/freebsd/head/sys/kern/kern_shutdown.c:754 #3 0xffffffff808bcb73 in panic (fmt=) at /usr/home/rodrigc/freebsd/head/sys/kern/kern_shutdown.c:683 #4 0xffffffff8033dff7 in db_panic (addr=, have_addr=, count=, modif=) at /usr/home/rodrigc/freebsd/head/sys/ddb/db_command.c:482 #5 0xffffffff8033dbcd in db_command (cmd_table=) at /usr/home/rodrigc/freebsd/head/sys/ddb/db_command.c:449 #6 0xffffffff8033d944 in db_command_loop () at /usr/home/rodrigc/freebsd/head/sys/ddb/db_command.c:502 #7 0xffffffff803402f0 in db_trap (type=, code=0) at /usr/home/rodrigc/freebsd/head/sys/ddb/db_main.c:231 #8 0xffffffff808f3623 in kdb_trap (type=12, code=0, tf=) at /usr/home/rodrigc/freebsd/head/sys/kern/subr_kdb.c:654 #9 0xffffffff80cda43a in trap_fatal (frame=0xffffff811dbab6b0, eva=) at /usr/home/rodrigc/freebsd/head/sys/amd64/amd64/trap.c:868 #10 0xffffffff80cda6f4 in trap_pfault (frame=0x0, usermode=0) at /usr/home/rodrigc/freebsd/head/sys/amd64/amd64/trap.c:699 #11 0xffffffff80cd9ef0 in trap (frame=0xffffff811dbab6b0) at /usr/home/rodrigc/freebsd/head/sys/amd64/amd64/trap.c:463 #12 0xffffffff80cc31a2 in calltrap () at /usr/home/rodrigc/freebsd/head/sys/amd64/amd64/exception.S:232 #13 0xffffffff8208f7b7 in pf_mtag_free (t=0xfffffe00a8797870) at /usr/home/rodrigc/freebsd/head/sys/modules/pf/../../netpfil/pf/pf.c:830 #14 0xffffffff808a51c9 in mb_dtor_mbuf (mem=0xfffffe000d0bc500, size=256, arg=0x0) at /usr/home/rodrigc/freebsd/head/sys/kern/kern_mbuf.c:499 #15 0xffffffff80b55d4d in uma_zfree_arg (zone=0xfffffe000b4ab900, item=0xfffffe000d0bc500, udata=0x0) at /usr/home/rodrigc/freebsd/head/sys/vm/uma_core.c:2560 #16 0xffffffff8092d1f5 in m_freem (mb=) at uma.h:364 #17 0xffffffff8058ba72 in iwn_tx_done (sc=0xffffff8000974000, desc=, ackfailcnt=16, status=131 '\203') at /usr/home/rodrigc/freebsd/head/sys/dev/iwn/if_iwn.c:2817 #18 0xffffffff80583e60 in iwn_notif_intr (sc=0xffffff8000974000) at /usr/home/rodrigc/freebsd/head/sys/dev/iwn/if_iwn.c:3015 #19 0xffffffff80583684 in iwn_intr (arg=0xffffff8000974000) at /usr/home/rodrigc/freebsd/head/sys/dev/iwn/if_iwn.c:3306 #20 0xffffffff8088daf3 in intr_event_execute_handlers ( p=, ie=0xfffffe000b696600) at /usr/home/rodrigc/freebsd/head/sys/kern/kern_intr.c:1263 #21 0xffffffff8088e4c6 in ithread_loop (arg=0xfffffe000b31b040) at /usr/home/rodrigc/freebsd/head/sys/kern/kern_intr.c:1276 #22 0xffffffff8088b3f4 in fork_exit ( callout=0xffffffff8088e420 , arg=0xfffffe000b31b040, frame=0xffffff811dbabac0) at /usr/home/rodrigc/freebsd/head/sys/kern/kern_fork.c:991 #23 0xffffffff80cc36de in fork_trampoline () at /usr/home/rodrigc/freebsd/head/sys/amd64/amd64/exception.S:606 #24 0x0000000000000000 in ?? () Current language: auto; currently minimal (kgdb) ==================================================================== It turns out that in this file: src/sys/netpfil/pf/pf.c 826 static void 827 pf_mtag_free(struct m_tag *t) 828 { 829 830 uma_zfree(V_pf_mtag_z, t); 831 } when line 830 is hit, it turns out that curthread->td_vnet is NULL. Does anyone have an idea as to the best place to put CURVNET_SET() to avoid this problem? I am a little less famiiar with mbuf and pf. Thanks. -- Craig