Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 08 Sep 2010 11:12:24 -0400
From:      Mike Tancsa <mike@sentex.net>
To:        "Li, Qing" <qing.li@bluecoat.com>, <freebsd-stable@freebsd.org>
Subject:   RE: if_rtdel: error 47 (netgraph or mpd issue?)
Message-ID:  <201009081512.o88FCIq8064280@lava.sentex.ca>
In-Reply-To: <B583FBF374231F4A89607B4D08578A4308026ABC@bcs-mail03.intern al.cacheflow.com>
References:  <201008312102.o7VL2MJr000894@lava.sentex.ca> <B583FBF374231F4A89607B4D08578A4308026A4D@bcs-mail03.internal.cacheflow.com> <201009012255.o81MtMXn009701@lava.sentex.ca> <B583FBF374231F4A89607B4D08578A4308026ABC@bcs-mail03.internal.cacheflow.com>

next in thread | previous in thread | raw e-mail | index | archive | help
At 07:24 PM 9/1/2010, Li, Qing wrote:

>http://svn.freebsd.org/viewvc/base/head/sys/netinet/in.c?r1=3D201811&r2=3D2=
0
>3401
>
>    Maybe related and something similar needs to be done for IPv6 ...

Hi,
         Another 6 days and another crash.  The=20
coredump seems to be in the same location as before

<http://lists.freebsd.org/pipermail/freebsd-stable/2010-August/058419.html>h=
ttp://lists.freebsd.org/pipermail/freebsd-stable/2010-August/058419.html=20


I didnt see any routing table corruption this=20
time, so perhaps thats a different issue that=20
just happened to be hit last time ?



Fatal trap 12: page fault while in kernel mode
cpuid =3D 1; apic id =3D 01
fault virtual address   =3D 0x24
fault code              =3D supervisor read, page not present
instruction pointer     =3D 0x20:0xc5ef3e15
stack pointer           =3D 0x28:0xc4fe4838
frame pointer           =3D 0x28:0xc4fe484c
code segment            =3D base 0x0, limit 0xfffff, type 0x1b
                         =3D DPL 0, pres 1, def32 1, gran 1
processor eflags        =3D interrupt enabled, resume, IOPL =3D 0
current process         =3D 1000 (ng_queue1)
trap number             =3D 12
panic: page fault
cpuid =3D 1
Uptime: 6d4h9m42s


#1  0xc0681233 in boot (howto=3D260) at=
 /usr/src/sys/kern/kern_shutdown.c:416
#2  0xc0681499 in panic (fmt=3DVariable "fmt" is not available.
) at /usr/src/sys/kern/kern_shutdown.c:590
#3  0xc08ea3ec in trap_fatal (frame=3D0xc4fe47f8, eva=3D36)
     at /usr/src/sys/i386/i386/trap.c:938
#4  0xc08ea650 in trap_pfault (frame=3D0xc4fe47f8, usermode=3D0, eva=3D36)
     at /usr/src/sys/i386/i386/trap.c:851
#5  0xc08eaf19 in trap (frame=3D0xc4fe47f8) at=
 /usr/src/sys/i386/i386/trap.c:533
#6  0xc08cd4bc in calltrap () at /usr/src/sys/i386/i386/exception.s:166
#7  0xc5ef3e15 in ng_address_hook (here=3D0x0, item=3D0xc5f03c40,
     hook=3D0xcb685980, retaddr=3D0)
     at=
 /usr/src/sys/modules/netgraph/netgraph/../../../netgraph/ng_base.c:3504
#8  0xc5f7ebfb in ng_tcpmss_rcvdata (hook=3D0xc6618300, item=3D0xc5f03c40)
     at=
 /usr/src/sys/modules/netgraph/tcpmss/../../../netgraph/ng_tcpmss.c:347
#9  0xc5ef57c4 in ng_apply_item (node=3D0xca955b00, item=3D0xc5f03c40, rw=3D=
0)
     at=
 /usr/src/sys/modules/netgraph/netgraph/../../../netgraph/ng_base.c:2336
#10 0xc5ef479f in ng_snd_item (item=3D0xc5f03c40,=20
flags=3DVariable "flags" is not available.
)
     at=
 /usr/src/sys/modules/netgraph/netgraph/../../../netgraph/ng_base.c:2253
#11 0xc5f6dd30 in ng_ppp_proto_recv=20
(node=3D0xc6431300, item=3D0xc5f03c40, proto=3DVariable "proto" is not=
 available.
)
     at /usr/src/sys/modules/netgraph/ppp/../../../netgraph/ng_ppp.c:949
#12 0xc5f6ea25 in ng_ppp_rcvdata (hook=3D0xcb228a80, item=3D0xc5f03c40)
     at /usr/src/sys/modules/netgraph/ppp/../../../netgraph/ng_ppp.c:1524
#13 0xc5ef57c4 in ng_apply_item (node=3D0xc6431300, item=3D0xc5f03c40, rw=3D=
0)
     at=
 /usr/src/sys/modules/netgraph/netgraph/../../../netgraph/ng_base.c:2336
#14 0xc5ef479f in ng_snd_item (item=3D0xc5f03c40,=20
flags=3DVariable "flags" is not available.
)
     at=
 /usr/src/sys/modules/netgraph/netgraph/../../../netgraph/ng_base.c:2253
#15 0xc5ef57c4 in ng_apply_item (node=3D0xcb375c80, item=3D0xc5f03c40, rw=3D=
0)
     at=
 /usr/src/sys/modules/netgraph/netgraph/../../../netgraph/ng_base.c:2336
#16 0xc5ef479f in ng_snd_item (item=3D0xc5f03c40,=20
flags=3DVariable "flags" is not available.
)
     at=
 /usr/src/sys/modules/netgraph/netgraph/../../../netgraph/ng_base.c:2253
#17 0xc5ef57c4 in ng_apply_item (node=3D0xc6330100, item=3D0xc5f03c40, rw=3D=
0)
     at=
 /usr/src/sys/modules/netgraph/netgraph/../../../netgraph/ng_base.c:2336
#18 0xc5ef479f in ng_snd_item (item=3D0xc5f03c40,=20
flags=3DVariable "flags" is not available.
)
     at=
 /usr/src/sys/modules/netgraph/netgraph/../../../netgraph/ng_base.c:2253
#19 0xc5f4db1c in ng_ksocket_incoming2 (node=3D0xc6431e00, hook=3D0x0,
     arg1=3D0xc63479a8, arg2=3D0)
     at=20
/usr/src/sys/modules/netgraph/ksocket/../../../netgraph/ng_ksocket.c:1153
#20 0xc5ef58f9 in ng_apply_item (node=3D0xc6431e00, item=3D0xc5f02780, rw=3D=
1)
     at=
 /usr/src/sys/modules/netgraph/netgraph/../../../netgraph/ng_base.c:2407
#21 0xc5ef6a46 in ngthread (arg=3D0x0)
     at=
 /usr/src/sys/modules/netgraph/netgraph/../../../netgraph/ng_base.c:3351
#22 0xc0656cd1 in fork_exit (callout=3D0xc5ef68e0 <ngthread>, arg=3D0x0,
     frame=3D0xc4fe4d38) at /usr/src/sys/kern/kern_fork.c:844
#23 0xc08cd534 in fork_trampoline () at=
 /usr/src/sys/i386/i386/exception.s:273


(kgdb) up 7
#7  0xc5ef3e15 in ng_address_hook (here=3D0x0,=20
item=3D0xc5f03c40, hook=3D0xcb685980, retaddr=3D0)
     at=
 /usr/src/sys/modules/netgraph/netgraph/../../../netgraph/ng_base.c:3504
3504            if ((hook =3D=3D NULL) ||
(kgdb) list
3499             * Quick sanity check..
3500             * Since a hook holds a reference on it's node, once we know
3501             * that the peer is still connected (even if invalid,) we=
 know
3502             * that the peer node is present, though maybe invalid.
3503             */
3504            if ((hook =3D=3D NULL) ||
3505                NG_HOOK_NOT_VALID(hook) ||
3506                NG_HOOK_NOT_VALID(peer =3D NG_HOOK_PEER(hook)) ||
3507                NG_NODE_NOT_VALID(peernode =3D NG_PEER_NODE(hook))) {
3508                    NG_FREE_ITEM(item);
(kgdb)

(kgdb) p item
$1 =3D 0xc5f03c40
(kgdb) p *item
$2 =3D {el_flags =3D 5, el_next =3D {stqe_next =3D 0x0},=20
el_dest =3D 0x0, el_hook =3D 0x0, body =3D {da_m =3D 0xcaa71600, msg =3D {
       msg_msg =3D 0xcaa71600, msg_retaddr =3D 0}, fn=20
=3D {fn_fn =3D {fn_fn =3D 0xcaa71600, fn_fn2 =3D 0xcaa71600}, fn_arg1 =3D=
 0x0,
       fn_arg2 =3D 0}}, apply =3D 0x0, depth =3D 4}
(kgdb) p *hook
$3 =3D {hk_name =3D "out", '\0' <repeats 28 times>,=20
hk_private =3D 0xc60dba00, hk_flags =3D 0, hk_type =3D 0, hk_peer =3D=
 0xcae40480,
   hk_node =3D 0xca955b00, hk_hooks =3D {le_next =3D=20
0xc6618300, le_prev =3D 0xca955b34}, hk_rcvmsg =3D 0, hk_rcvdata =3D 0,=
 hk_refs =3D 2}
(kgdb) p *peer
$4 =3D {hk_name =3D "\b\000\000\000=20
\000\000\000\004\000\000\000\001\000\000\000\037>t\001\003=F6\0248cmd4\000\0=
00\000",=20

   hk_private =3D 0x0, hk_flags =3D 0, hk_type =3D 0,=20
hk_peer =3D 0x0, hk_node =3D 0x0, hk_hooks =3D {le_next =3D 0x0, le_prev =3D=
 0x355db},
   hk_rcvmsg =3D 0x11a11376, hk_rcvdata =3D 0x1c7e8, hk_refs =3D 6432036}
(kgdb)

--------------------------------------------------------------------
Mike Tancsa,                                      tel +1 519 651 3400
Sentex Communications,                            mike@sentex.net
Providing Internet since 1994                    www.sentex.net
Cambridge, Ontario Canada                         www.sentex.net/mike




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201009081512.o88FCIq8064280>