Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 17 Nov 2003 08:11:47 +0100
From:      Andreas Kohn <andreas.kohn@gmx.net>
To:        current@freebsd.org
Subject:   Panic in ip_input
Message-ID:  <1069053107.706.10.camel@klamath>

next in thread | raw e-mail | index | archive | help

--=-Ug595YSE+kgJnnm0w9AX
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

Hi,

with a -CURRENT from yesterday, I get a panic when copying large amounts
of data from my laptop to the desktop system (panic on the desktop):

panic: page fault
panic messages:
---
Fatal trap 12: page fault while in kernel mode
fault virtual address   =3D 0x0
fault code              =3D supervisor write, page not present
instruction pointer     =3D 0x8:0xc0584194
stack pointer           =3D 0x10:0xce6ffa90
frame pointer           =3D 0x10:0xce6ffab4
code segment            =3D base 0x0, limit 0xfffff, type 0x1b
                        =3D DPL 0, pres 1, def32 1, gran 1
processor eflags        =3D interrupt enabled, resume, IOPL =3D 0
current process         =3D 269 (natd)
trap number             =3D 12
panic: page fault

syncing disks, buffers remaining... 2201 2199 2199 2199 2199 2199 2199
2199 2199 2199 2199 2199 2199 2199 2199 2199 2199 2199 2199 2199 2199=20
giving up on 181 buffers
Uptime: 5m56s
Dumping 255 MB
 16 32 48 64 80 96 112 128[CTRL-C to abort] [CTRL-C to abort]  144 160
176 192 208 224 240
---

(kgdb) where
#0  doadump () at /usr/src/sys/kern/kern_shutdown.c:240
#1  0xc0564ada in boot (howto=3D256) at
/usr/src/sys/kern/kern_shutdown.c:372
#2  0xc0564e58 in panic () at /usr/src/sys/kern/kern_shutdown.c:550
#3  0xc06d977e in trap_fatal (frame=3D0xce6ffa50, eva=3D0)
    at /usr/src/sys/i386/i386/trap.c:821
#4  0xc06d9493 in trap_pfault (frame=3D0xce6ffa50, usermode=3D0, eva=3D0)
    at /usr/src/sys/i386/i386/trap.c:735
#5  0xc06d906d in trap (frame=3D
      {tf_fs =3D 24, tf_es =3D 16, tf_ds =3D 16, tf_edi =3D -1049795072, tf=
_esi
=3D 0, tf_ebp =3D -831522124, tf_isp =3D -831522180, tf_ebx =3D -831521932,
tf_edx =3D 1, tf_ecx =3D -831522000, tf_eax =3D 0, tf_trapno =3D 12, tf_err=
 =3D 2,
tf_eip =3D -1067957868, tf_cs =3D 8, tf_eflags =3D 66050, tf_esp =3D
-1026868096, tf_ss =3D -831522136})
    at /usr/src/sys/i386/i386/trap.c:420
#6  0xc06cb888 in calltrap () at {standard input}:94
#7  0xc05ed8a9 in ip_input (m=3D0x0) at
/usr/src/sys/netinet/ip_input.c:364
#8  0xc05e6292 in div_output (so=3D0xc2f11d20, m=3D0xc16d6600,
sin=3D0xc2d834b0,=20
    control=3D0x0) at /usr/src/sys/netinet/ip_divert.c:364
#9  0xc05e6b1d in div_send (so=3D0x0, flags=3D0, m=3D0x0, nam=3D0x0,
control=3D0x0,=20
    td=3D0xc2cb3c80) at /usr/src/sys/netinet/ip_divert.c:518
#10 0xc05a1fcd in sosend (so=3D0xc2f11d20, addr=3D0xc2d834b0,
uio=3D0xce6ffc4c,=20
    top=3D0xc16d6600, control=3D0x0, flags=3D0, td=3D0xc2cb3c80)
    at /usr/src/sys/kern/uipc_socket.c:715
#11 0xc05a6500 in kern_sendit (td=3D0xc2cb3c80, s=3D3, mp=3D0xce6ffcc4,
flags=3D0,=20
---Type <return> to continue, or q <return> to quit---
    control=3D0x0) at /usr/src/sys/kern/uipc_syscalls.c:723
#12 0xc05a633d in sendit (td=3D0x0, s=3D0, mp=3D0xce6ffcc4, flags=3D0)
    at /usr/src/sys/kern/uipc_syscalls.c:663
#13 0xc05a66eb in sendto (td=3D0x0, uap=3D0x0)
    at /usr/src/sys/kern/uipc_syscalls.c:784
#14 0xc06d9ae0 in syscall (frame=3D
      {tf_fs =3D 47, tf_es =3D 47, tf_ds =3D 47, tf_edi =3D -1078006400, tf=
_esi
=3D 1, tf_ebp =3D -1077940840, tf_isp =3D -831521420, tf_ebx =3D 1420, tf_e=
dx =3D
-1078006400, tf_ecx =3D 671622200, tf_eax =3D 133, tf_trapno =3D 0, tf_err =
=3D
2, tf_eip =3D 671942895, tf_cs =3D 31, tf_eflags =3D 582, tf_esp =3D
-1078006548, tf_ss =3D 47})
    at /usr/src/sys/i386/i386/trap.c:1010
#15 0xc06cb8dd in Xint0x80_syscall () at {standard input}:136
---Can't read userspace from dump, or kernel process---

(kgdb) frame 7
#7  0xc05ed8a9 in ip_input (m=3D0x0) at
/usr/src/sys/netinet/ip_input.c:364
364                             m_free(m0);
(kgdb) p m0
$1 =3D (struct mbuf *) 0x0
(kgdb) l
359
360                     m0 =3D m;
361                     m =3D m->m_next;
362                     /* XXX: This is set by ip_fastforward */
363                     if (m0->m_nextpkt =3D=3D (struct mbuf *)1)
364                             m_free(m0);
365             }
366
367             M_ASSERTPKTHDR(m);
368


This panic is relatively easy to recreate.=20

Some data points:

The machine is an Athlon Thunderbird 1200 (CPUTYPE=3Dathlon-tbird in
make.conf), the NIC is a Realtek 8139.=20
net.inet.ip.fastforwarding is 0.

I have a dump available (256M). What can I do to help fix this problem?=20


Thanks,
--=20
Andreas Kohn <andreas.kohn@gmx.net>

--=-Ug595YSE+kgJnnm0w9AX
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (FreeBSD)

iD8DBQA/uHSzYucd7Ow1ygwRAo40AJ9gRpyPL/4eJOuLF42tPPZz46XbmgCgkvEh
/fS+O2XsZB9o88H/XNpH4s0=
=aDkt
-----END PGP SIGNATURE-----

--=-Ug595YSE+kgJnnm0w9AX--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1069053107.706.10.camel>