Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 09 Apr 2016 10:30:28 +0000
From:      bugzilla-noreply@freebsd.org
To:        freebsd-bugs@FreeBSD.org
Subject:   [Bug 208649] 10.3 release crashing in ipfw or intel drivers
Message-ID:  <bug-208649-8@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D208649

            Bug ID: 208649
           Summary: 10.3 release crashing in ipfw or intel drivers
           Product: Base System
           Version: 10.3-BETA2
          Hardware: amd64
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: kern
          Assignee: freebsd-bugs@FreeBSD.org
          Reporter: h-k@mail.ru
                CC: freebsd-amd64@FreeBSD.org
                CC: freebsd-amd64@FreeBSD.org

We have a bridge with dummynet shaping:

root@pipe2:~ # ifconfig
igb0: flags=3D8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> metric 0=
 mtu
1500
=20=20=20=20=20=20=20
options=3D403bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM=
,TSO4,TSO6,VLAN_HWTSO>
        ether 00:1b:21:36:5d:9e
        nd6 options=3D29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>
        media: Ethernet autoselect (1000baseT <full-duplex>)
        status: active
igb1: flags=3D8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> metric 0=
 mtu
1500
=20=20=20=20=20=20=20
options=3D403bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM=
,TSO4,TSO6,VLAN_HWTSO>
        ether 00:1b:21:36:5d:9f
        nd6 options=3D29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>
        media: Ethernet autoselect (1000baseT <full-duplex>)
        status: active
em0: flags=3D8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> metric 0 =
mtu
1500
=20=20=20=20=20=20=20
options=3D4209b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,WOL_MAGIC=
,VLAN_HWTSO>
        ether 00:1b:21:46:67:69
        nd6 options=3D29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>
        media: Ethernet autoselect
        status: no carrier
em1: flags=3D8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> metric 0 =
mtu
1500
=20=20=20=20=20=20=20
options=3D209b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,WOL_MAGIC>
        ether 00:07:e9:17:71:d9
        nd6 options=3D29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>
        media: Ethernet autoselect
        status: no carrier
lo0: flags=3D8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
        options=3D600003<RXCSUM,TXCSUM,RXCSUM_IPV6,TXCSUM_IPV6>
        inet6 ::1 prefixlen 128
        inet6 fe80::1%lo0 prefixlen 64 scopeid 0x5
        inet 127.0.0.1 netmask 0xff000000
        nd6 options=3D21<PERFORMNUD,AUTO_LINKLOCAL>
bridge0: flags=3D8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu =
1500
        ether 02:50:90:8e:8f:00
        inet 192.168.8.2 netmask 0xffffff80 broadcast 192.168.8.127
        nd6 options=3D9<PERFORMNUD,IFDISABLED>
        id 00:00:00:00:00:00 priority 32768 hellotime 2 fwddelay 15
        maxage 20 holdcnt 6 proto rstp maxaddr 2000 timeout 1200
        root id 00:00:00:00:00:00 priority 32768 ifcost 0 port 0
        member: igb1 flags=3D143<LEARNING,DISCOVER,AUTOEDGE,AUTOPTP>
                ifmaxaddr 0 port 2 priority 128 path cost 2000000
        member: igb0 flags=3D143<LEARNING,DISCOVER,AUTOEDGE,AUTOPTP>
                ifmaxaddr 0 port 1 priority 128 path cost 2000000
bridge1: flags=3D8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu =
1500
        ether 00:1b:21:46:67:69
        nd6 options=3D9<PERFORMNUD,IFDISABLED>
        id 00:00:00:00:00:00 priority 32768 hellotime 2 fwddelay 15
        maxage 20 holdcnt 6 proto rstp maxaddr 2000 timeout 1200
        root id 00:00:00:00:00:00 priority 32768 ifcost 0 port 0
        member: em1 flags=3D143<LEARNING,DISCOVER,AUTOEDGE,AUTOPTP>
                ifmaxaddr 0 port 4 priority 128 path cost 2000000
        member: em0 flags=3D143<LEARNING,DISCOVER,AUTOEDGE,AUTOPTP>
                ifmaxaddr 0 port 3 priority 128 path cost 2000000


root@pipe2:~ # ipfw show
00005      2        92 allow ip from any to any mac-type 0x0806 layer2
00006      0         0 deny ip from any to
217.117.112.144/28,217.117.125.152/29 layer2 // NAT IPs vo izbejanie ziklov
00010 371789  22100077 allow ip from table(1) to any layer2
00010 632790 932188391 allow ip from any to table(1) layer2
00020      0         0 deny ip from any to 192.168.0.0/16 out via igb1 laye=
r2
00500      0         0 deny ip from table(5) to any dst-port 25 layer2 // D=
enys
from TestServer
00501      0         0 deny ip from 192.168.0.0/16 to any dst-port 25 layer=
2 //
maill forr fake IP
00502      0         0 deny ip from table(6) to any layer2 // Denys from
TestServer
00602      0         0 skipto 825 ip from table(52) to any dst-port 53,80,4=
43
layer2
00604      0         0 skipto 825 ip from any 53,80,443 to table(52) layer2
00822      0         0 deny ip from table(52) to not table(2) layer2 //
Tabl52-vse blokirov IP tabl2-open hosts
00849      0         0 allow udp from not 217.117.112.0/20,192.168.128.0/20=
 123
to 217.117.112.0/20,192.168.128.0/20 layer2
00850      0         0 deny udp from not 217.117.112.0/26 123 to any not
dst-port 123 layer2
05502      0         0 deny udp from table(111) to any not dst-port
3658,5730-5739,27005-27095,5060 layer2 // zashita ot uTP
05504      0         0 deny udp from any not 3658,5730-5739,27005-27095,506=
0 to
table(111) layer2 // zashita ot uTP
55010      0         0 pipe 30 ip from table(30) to any layer2 // 50 MBit/s=
ec
55020    787     63185 pipe 80 ip from any to table(30) layer2 // 50 MBit/s=
ec
55030      0         0 pipe 37 ip from table(37) to any layer2 // 75 MBit/s=
ec
60000      8       772 deny ip from any to any layer2
65535      0         0 allow ip from any to any


randomly OS get crashed with following stack:

Apr  9 10:42:03 pipe2 kernel: Fatal trap 12: page fault while in kernel mode
Apr  9 10:42:03 pipe2 kernel: cpuid =3D 0; apic id =3D 00
Apr  9 10:42:03 pipe2 kernel: fault virtual address     =3D 0x188
Apr  9 10:42:03 pipe2 kernel: fault code                =3D supervisor read=
 data,
page not present
Apr  9 10:42:03 pipe2 kernel: instruction pointer       =3D
0x20:0xffffffff80a1b31f
Apr  9 10:42:03 pipe2 kernel: stack pointer             =3D
0x28:0xfffffe0090ff6620
Apr  9 10:42:03 pipe2 kernel: frame pointer             =3D
0x28:0xfffffe0090ff6640
Apr  9 10:42:03 pipe2 kernel: code segment              =3D base 0x0, limit
0xfffff, type 0x1b
Apr  9 10:42:03 pipe2 kernel: =3D DPL 0, pres 1, long 1, def32 0, gran 1
Apr  9 10:42:03 pipe2 kernel: processor eflags  =3D interrupt enabled, resu=
me,
IOPL =3D 0
Apr  9 10:42:03 pipe2 kernel: current process           =3D 12 (irq256: igb=
0:que
0)
Apr  9 10:42:03 pipe2 kernel: trap number               =3D 12
Apr  9 10:42:03 pipe2 kernel: panic: page fault
Apr  9 10:42:03 pipe2 kernel: cpuid =3D 0
Apr  9 10:42:03 pipe2 kernel: KDB: stack backtrace:
Apr  9 10:42:03 pipe2 kernel: #0 0xffffffff8098e390 at kdb_backtrace+0x60
Apr  9 10:42:03 pipe2 kernel: #1 0xffffffff80951066 at vpanic+0x126
Apr  9 10:42:03 pipe2 kernel: #2 0xffffffff80950f33 at panic+0x43
Apr  9 10:42:03 pipe2 kernel: #3 0xffffffff80d55f7b at trap_fatal+0x36b
Apr  9 10:42:03 pipe2 kernel: #4 0xffffffff80d5627d at trap_pfault+0x2ed
Apr  9 10:42:03 pipe2 kernel: #5 0xffffffff80d558fa at trap+0x47a
Apr  9 10:42:03 pipe2 kernel: #6 0xffffffff80d3b8d2 at calltrap+0x8
Apr  9 10:42:03 pipe2 kernel: #7 0xffffffff819e3f05 at dummynet_send+0x95
Apr  9 10:42:03 pipe2 kernel: #8 0xffffffff819e4307 at dummynet_io+0x357
Apr  9 10:42:03 pipe2 kernel: #9 0xffffffff819c13ae at ipfw_check_frame+0x2=
3e
Apr  9 10:42:03 pipe2 kernel: #10 0xffffffff80a24ef4 at pfil_run_hooks+0x84
Apr  9 10:42:03 pipe2 kernel: #11 0xffffffff80a1b370 at ether_demux+0x40
Apr  9 10:42:03 pipe2 kernel: #12 0xffffffff80a1c0fe at ether_nh_input+0x35e
Apr  9 10:42:03 pipe2 kernel: #13 0xffffffff80a24092 at
netisr_dispatch_src+0x62
Apr  9 10:42:03 pipe2 kernel: #14 0xffffffff804f859c at igb_rxeof+0x60c
Apr  9 10:42:03 pipe2 kernel: #15 0xffffffff804f8c41 at igb_msix_que+0x121
Apr  9 10:42:03 pipe2 kernel: #16 0xffffffff8091c99b at
intr_event_execute_handlers+0xab
Apr  9 10:42:03 pipe2 kernel: #17 0xffffffff8091cde6 at ithread_loop+0x96
Apr  9 10:42:03 pipe2 kernel: Uptime: 4h58m8s

9.3 boxes work fine on the same ruleset ipfw and other configuration

root@pipe2:~ # pciconf -lv
hostb0@pci0:0:0:0:      class=3D0x060000 card=3D0x836d1043 chip=3D0x2e30808=
6 rev=3D0x03
hdr=3D0x00
    vendor     =3D 'Intel Corporation'
    device     =3D '4 Series Chipset DRAM Controller'
    class      =3D bridge
    subclass   =3D HOST-PCI
pcib1@pci0:0:1:0:       class=3D0x060400 card=3D0x836d1043 chip=3D0x2e31808=
6 rev=3D0x03
hdr=3D0x01
    vendor     =3D 'Intel Corporation'
    device     =3D '4 Series Chipset PCI Express Root Port'
    class      =3D bridge
    subclass   =3D PCI-PCI
vgapci0@pci0:0:2:0:     class=3D0x030000 card=3D0x836d1043 chip=3D0x2e32808=
6 rev=3D0x03
hdr=3D0x00
    vendor     =3D 'Intel Corporation'
    device     =3D '4 Series Chipset Integrated Graphics Controller'
    class      =3D display
    subclass   =3D VGA
hdac0@pci0:0:27:0:      class=3D0x040300 card=3D0x83f31043 chip=3D0x27d8808=
6 rev=3D0x01
hdr=3D0x00
    vendor     =3D 'Intel Corporation'
    device     =3D 'NM10/ICH7 Family High Definition Audio Controller'
    class      =3D multimedia
    subclass   =3D HDA
pcib2@pci0:0:28:0:      class=3D0x060400 card=3D0x81791043 chip=3D0x27d0808=
6 rev=3D0x01
hdr=3D0x01
    vendor     =3D 'Intel Corporation'
    device     =3D 'NM10/ICH7 Family PCI Express Port 1'
    class      =3D bridge
    subclass   =3D PCI-PCI
uhci0@pci0:0:29:0:      class=3D0x0c0300 card=3D0x81791043 chip=3D0x27c8808=
6 rev=3D0x01
hdr=3D0x00
    vendor     =3D 'Intel Corporation'
    device     =3D 'NM10/ICH7 Family USB UHCI Controller'
    class      =3D serial bus
    subclass   =3D USB
uhci1@pci0:0:29:1:      class=3D0x0c0300 card=3D0x81791043 chip=3D0x27c9808=
6 rev=3D0x01
hdr=3D0x00
    vendor     =3D 'Intel Corporation'
    device     =3D 'NM10/ICH7 Family USB UHCI Controller'
    class      =3D serial bus
    subclass   =3D USB
uhci2@pci0:0:29:2:      class=3D0x0c0300 card=3D0x81791043 chip=3D0x27ca808=
6 rev=3D0x01
hdr=3D0x00
    vendor     =3D 'Intel Corporation'
    device     =3D 'NM10/ICH7 Family USB UHCI Controller'
    class      =3D serial bus
    subclass   =3D USB
uhci3@pci0:0:29:3:      class=3D0x0c0300 card=3D0x81791043 chip=3D0x27cb808=
6 rev=3D0x01
hdr=3D0x00
    vendor     =3D 'Intel Corporation'
    device     =3D 'NM10/ICH7 Family USB UHCI Controller'
    class      =3D serial bus
    subclass   =3D USB
ehci0@pci0:0:29:7:      class=3D0x0c0320 card=3D0x81791043 chip=3D0x27cc808=
6 rev=3D0x01
hdr=3D0x00
    vendor     =3D 'Intel Corporation'
    device     =3D 'NM10/ICH7 Family USB2 EHCI Controller'
    class      =3D serial bus
    subclass   =3D USB
pcib3@pci0:0:30:0:      class=3D0x060401 card=3D0x81791043 chip=3D0x244e808=
6 rev=3D0xe1
hdr=3D0x01
    vendor     =3D 'Intel Corporation'
    device     =3D '82801 PCI Bridge'
    class      =3D bridge
    subclass   =3D PCI-PCI
isab0@pci0:0:31:0:      class=3D0x060100 card=3D0x81791043 chip=3D0x27b8808=
6 rev=3D0x01
hdr=3D0x00
    vendor     =3D 'Intel Corporation'
    device     =3D '82801GB/GR (ICH7 Family) LPC Interface Bridge'
    class      =3D bridge
    subclass   =3D PCI-ISA
atapci0@pci0:0:31:1:    class=3D0x01018a card=3D0x81791043 chip=3D0x27df808=
6 rev=3D0x01
hdr=3D0x00
    vendor     =3D 'Intel Corporation'
    device     =3D '82801G (ICH7 Family) IDE Controller'
    class      =3D mass storage
    subclass   =3D ATA
atapci1@pci0:0:31:2:    class=3D0x01018f card=3D0x81791043 chip=3D0x27c0808=
6 rev=3D0x01
hdr=3D0x00
    vendor     =3D 'Intel Corporation'
    device     =3D 'NM10/ICH7 Family SATA Controller [IDE mode]'
    class      =3D mass storage
    subclass   =3D ATA
igb0@pci0:1:0:0:        class=3D0x020000 card=3D0xa03c8086 chip=3D0x10c9808=
6 rev=3D0x01
hdr=3D0x00
    vendor     =3D 'Intel Corporation'
    device     =3D '82576 Gigabit Network Connection'
    class      =3D network
    subclass   =3D ethernet
igb1@pci0:1:0:1:        class=3D0x020000 card=3D0xa03c8086 chip=3D0x10c9808=
6 rev=3D0x01
hdr=3D0x00
    vendor     =3D 'Intel Corporation'
    device     =3D '82576 Gigabit Network Connection'
    class      =3D network
    subclass   =3D ethernet
em0@pci0:2:0:0: class=3D0x020000 card=3D0xa01f8086 chip=3D0x10d38086 rev=3D=
0x00
hdr=3D0x00
    vendor     =3D 'Intel Corporation'
    device     =3D '82574L Gigabit Network Connection'
    class      =3D network
    subclass   =3D ethernet
em1@pci0:3:0:0: class=3D0x020000 card=3D0x002e8086 chip=3D0x100e8086 rev=3D=
0x02
hdr=3D0x00
    vendor     =3D 'Intel Corporation'
    device     =3D '82540EM Gigabit Ethernet Controller'
    class      =3D network
    subclass   =3D ethernet


3 kernel dump can be found here - https://mail.proc.ru/temp/xz.zip

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-208649-8>