From owner-freebsd-current@FreeBSD.ORG Sun Nov 16 23:11:51 2003 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 33B8616A4CE for ; Sun, 16 Nov 2003 23:11:51 -0800 (PST) Received: from mail.gmx.net (mail.gmx.net [213.165.64.20]) by mx1.FreeBSD.org (Postfix) with SMTP id DDB3943FA3 for ; Sun, 16 Nov 2003 23:11:49 -0800 (PST) (envelope-from andreas.kohn@gmx.net) Received: (qmail 4094 invoked by uid 65534); 17 Nov 2003 07:11:48 -0000 Received: from unknown (EHLO [172.16.32.190]) (212.204.32.190) by mail.gmx.net (mp012) with SMTP; 17 Nov 2003 08:11:48 +0100 X-Authenticated: #2431876 From: Andreas Kohn To: current@freebsd.org Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="=-Ug595YSE+kgJnnm0w9AX" Message-Id: <1069053107.706.10.camel@klamath> Mime-Version: 1.0 X-Mailer: Ximian Evolution 1.4.5 Date: Mon, 17 Nov 2003 08:11:47 +0100 Subject: Panic in ip_input X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 17 Nov 2003 07:11:51 -0000 --=-Ug595YSE+kgJnnm0w9AX Content-Type: text/plain Content-Transfer-Encoding: quoted-printable Hi, with a -CURRENT from yesterday, I get a panic when copying large amounts of data from my laptop to the desktop system (panic on the desktop): panic: page fault panic messages: --- Fatal trap 12: page fault while in kernel mode fault virtual address =3D 0x0 fault code =3D supervisor write, page not present instruction pointer =3D 0x8:0xc0584194 stack pointer =3D 0x10:0xce6ffa90 frame pointer =3D 0x10:0xce6ffab4 code segment =3D base 0x0, limit 0xfffff, type 0x1b =3D DPL 0, pres 1, def32 1, gran 1 processor eflags =3D interrupt enabled, resume, IOPL =3D 0 current process =3D 269 (natd) trap number =3D 12 panic: page fault syncing disks, buffers remaining... 2201 2199 2199 2199 2199 2199 2199 2199 2199 2199 2199 2199 2199 2199 2199 2199 2199 2199 2199 2199 2199=20 giving up on 181 buffers Uptime: 5m56s Dumping 255 MB 16 32 48 64 80 96 112 128[CTRL-C to abort] [CTRL-C to abort] 144 160 176 192 208 224 240 --- (kgdb) where #0 doadump () at /usr/src/sys/kern/kern_shutdown.c:240 #1 0xc0564ada in boot (howto=3D256) at /usr/src/sys/kern/kern_shutdown.c:372 #2 0xc0564e58 in panic () at /usr/src/sys/kern/kern_shutdown.c:550 #3 0xc06d977e in trap_fatal (frame=3D0xce6ffa50, eva=3D0) at /usr/src/sys/i386/i386/trap.c:821 #4 0xc06d9493 in trap_pfault (frame=3D0xce6ffa50, usermode=3D0, eva=3D0) at /usr/src/sys/i386/i386/trap.c:735 #5 0xc06d906d in trap (frame=3D {tf_fs =3D 24, tf_es =3D 16, tf_ds =3D 16, tf_edi =3D -1049795072, tf= _esi =3D 0, tf_ebp =3D -831522124, tf_isp =3D -831522180, tf_ebx =3D -831521932, tf_edx =3D 1, tf_ecx =3D -831522000, tf_eax =3D 0, tf_trapno =3D 12, tf_err= =3D 2, tf_eip =3D -1067957868, tf_cs =3D 8, tf_eflags =3D 66050, tf_esp =3D -1026868096, tf_ss =3D -831522136}) at /usr/src/sys/i386/i386/trap.c:420 #6 0xc06cb888 in calltrap () at {standard input}:94 #7 0xc05ed8a9 in ip_input (m=3D0x0) at /usr/src/sys/netinet/ip_input.c:364 #8 0xc05e6292 in div_output (so=3D0xc2f11d20, m=3D0xc16d6600, sin=3D0xc2d834b0,=20 control=3D0x0) at /usr/src/sys/netinet/ip_divert.c:364 #9 0xc05e6b1d in div_send (so=3D0x0, flags=3D0, m=3D0x0, nam=3D0x0, control=3D0x0,=20 td=3D0xc2cb3c80) at /usr/src/sys/netinet/ip_divert.c:518 #10 0xc05a1fcd in sosend (so=3D0xc2f11d20, addr=3D0xc2d834b0, uio=3D0xce6ffc4c,=20 top=3D0xc16d6600, control=3D0x0, flags=3D0, td=3D0xc2cb3c80) at /usr/src/sys/kern/uipc_socket.c:715 #11 0xc05a6500 in kern_sendit (td=3D0xc2cb3c80, s=3D3, mp=3D0xce6ffcc4, flags=3D0,=20 ---Type to continue, or q to quit--- control=3D0x0) at /usr/src/sys/kern/uipc_syscalls.c:723 #12 0xc05a633d in sendit (td=3D0x0, s=3D0, mp=3D0xce6ffcc4, flags=3D0) at /usr/src/sys/kern/uipc_syscalls.c:663 #13 0xc05a66eb in sendto (td=3D0x0, uap=3D0x0) at /usr/src/sys/kern/uipc_syscalls.c:784 #14 0xc06d9ae0 in syscall (frame=3D {tf_fs =3D 47, tf_es =3D 47, tf_ds =3D 47, tf_edi =3D -1078006400, tf= _esi =3D 1, tf_ebp =3D -1077940840, tf_isp =3D -831521420, tf_ebx =3D 1420, tf_e= dx =3D -1078006400, tf_ecx =3D 671622200, tf_eax =3D 133, tf_trapno =3D 0, tf_err = =3D 2, tf_eip =3D 671942895, tf_cs =3D 31, tf_eflags =3D 582, tf_esp =3D -1078006548, tf_ss =3D 47}) at /usr/src/sys/i386/i386/trap.c:1010 #15 0xc06cb8dd in Xint0x80_syscall () at {standard input}:136 ---Can't read userspace from dump, or kernel process--- (kgdb) frame 7 #7 0xc05ed8a9 in ip_input (m=3D0x0) at /usr/src/sys/netinet/ip_input.c:364 364 m_free(m0); (kgdb) p m0 $1 =3D (struct mbuf *) 0x0 (kgdb) l 359 360 m0 =3D m; 361 m =3D m->m_next; 362 /* XXX: This is set by ip_fastforward */ 363 if (m0->m_nextpkt =3D=3D (struct mbuf *)1) 364 m_free(m0); 365 } 366 367 M_ASSERTPKTHDR(m); 368 This panic is relatively easy to recreate.=20 Some data points: The machine is an Athlon Thunderbird 1200 (CPUTYPE=3Dathlon-tbird in make.conf), the NIC is a Realtek 8139.=20 net.inet.ip.fastforwarding is 0. I have a dump available (256M). What can I do to help fix this problem?=20 Thanks, --=20 Andreas Kohn --=-Ug595YSE+kgJnnm0w9AX Content-Type: application/pgp-signature; name=signature.asc Content-Description: This is a digitally signed message part -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.3 (FreeBSD) iD8DBQA/uHSzYucd7Ow1ygwRAo40AJ9gRpyPL/4eJOuLF42tPPZz46XbmgCgkvEh /fS+O2XsZB9o88H/XNpH4s0= =aDkt -----END PGP SIGNATURE----- --=-Ug595YSE+kgJnnm0w9AX--