Bug #1960

syncache page fault panic

Added by pavalos over 3 years ago. Updated about 3 years ago.

Status:ClosedStart date:
Priority:HighDue date:
Assignee:sepherosa% Done:

0%

Category:-
Target version:-

Description

Got the following panic today on a box running a kernel from Nov. 5th:

#0 _get_mycpu (di=0xc03ef960) at ./machine/thread.h:83
#1 md_dumpsys (di=0xc03ef960)
at /usr/src/sys/platform/pc32/i386/dump_machdep.c:263
#2 0xc019e6c5 in dumpsys () at /usr/src/sys/kern/kern_shutdown.c:881
#3 0xc019ec85 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:388
#4 0xc019ef5d in panic (fmt=0xc0360fd7 "%s")
at /usr/src/sys/kern/kern_shutdown.c:787
#5 0xc032e1fb in trap_fatal (frame=0xd9d3faa0, eva=<value optimized out>)
at /usr/src/sys/platform/pc32/i386/trap.c:1125
#6 0xc032e309 in trap_pfault (frame=0xd9d3faa0, usermode=0, eva=44)
at /usr/src/sys/platform/pc32/i386/trap.c:1026
#7 0xc032edf5 in trap (frame=0xd9d3faa0)
at /usr/src/sys/platform/pc32/i386/trap.c:707
#8 0xc0317f77 in calltrap ()
at /usr/src/sys/platform/pc32/i386/exception.s:785
#9 0xc023d2c9 in syncache_socket (inc=0xd9d3fbd0, th=0xfd78b024,
sop=0xd9d3fc8c, m=0xfd72e400) at /usr/src/sys/netinet/tcp_syncache.c:837
#10 syncache_expand (inc=0xd9d3fbd0, th=0xfd78b024, sop=0xd9d3fc8c,
m=0xfd72e400) at /usr/src/sys/netinet/tcp_syncache.c:919
#11 0xc0234b15 in tcp_input (mp=0xd9d3fcb8, offp=0xd9d3fcb4, proto=6)
at /usr/src/sys/netinet/tcp_input.c:893
#12 0xc022efc6 in transport_processing_oncpu (m=0x0, hlen=20, ip=0xfd78b010)
at /usr/src/sys/netinet/ip_input.c:394
#13 0xc022ff8d in ip_input (m=0xfd72e400)
at /usr/src/sys/netinet/ip_input.c:959
#14 0xc022ffb5 in ip_input_handler (msg=0xfd72e41c)
at /usr/src/sys/netinet/ip_input.c:415
#15 0xc022031f in netmsg_service_loop (arg=0x0)
at /usr/src/sys/net/netisr.c:294
#16 0xc01a8a1e in lwkt_deschedule_self (td=Cannot access memory at address 0x8
)
at /usr/src/sys/kern/lwkt_thread.c:258
Backtrace stopped: previous frame inner to this frame (corrupt stack?)

Files can be downloaded from:

http://www.theshell.com/~pavalos/crash/ylem-crash1.tar.xz

--Peter

History

#1 Updated by sepherosa about 3 years ago

On Mon, Jan 17, 2011 at 1:45 PM, Peter Avalos <> wrote:
> Got the following panic today on a box running a kernel from Nov. 5th:
>
> #0  _get_mycpu (di=0xc03ef960) at ./machine/thread.h:83
> #1  md_dumpsys (di=0xc03ef960)
>    at /usr/src/sys/platform/pc32/i386/dump_machdep.c:263
> #2  0xc019e6c5 in dumpsys () at /usr/src/sys/kern/kern_shutdown.c:881
> #3  0xc019ec85 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:388
> #4  0xc019ef5d in panic (fmt=0xc0360fd7 "%s")
>    at /usr/src/sys/kern/kern_shutdown.c:787
> #5  0xc032e1fb in trap_fatal (frame=0xd9d3faa0, eva=<value optimized out>)
>    at /usr/src/sys/platform/pc32/i386/trap.c:1125
> #6  0xc032e309 in trap_pfault (frame=0xd9d3faa0, usermode=0, eva=44)
>    at /usr/src/sys/platform/pc32/i386/trap.c:1026
> #7  0xc032edf5 in trap (frame=0xd9d3faa0)
>    at /usr/src/sys/platform/pc32/i386/trap.c:707
> #8  0xc0317f77 in calltrap ()
>    at /usr/src/sys/platform/pc32/i386/exception.s:785
> #9  0xc023d2c9 in syncache_socket (inc=0xd9d3fbd0, th=0xfd78b024,
>    sop=0xd9d3fc8c, m=0xfd72e400) at /usr/src/sys/netinet/tcp_syncache.c:837
> #10 syncache_expand (inc=0xd9d3fbd0, th=0xfd78b024, sop=0xd9d3fc8c,
>    m=0xfd72e400) at /usr/src/sys/netinet/tcp_syncache.c:919
> #11 0xc0234b15 in tcp_input (mp=0xd9d3fcb8, offp=0xd9d3fcb4, proto=6)
>    at /usr/src/sys/netinet/tcp_input.c:893
> #12 0xc022efc6 in transport_processing_oncpu (m=0x0, hlen=20, ip=0xfd78b010)
>    at /usr/src/sys/netinet/ip_input.c:394
> #13 0xc022ff8d in ip_input (m=0xfd72e400)
>    at /usr/src/sys/netinet/ip_input.c:959
> #14 0xc022ffb5 in ip_input_handler (msg=0xfd72e41c)
>    at /usr/src/sys/netinet/ip_input.c:415
> #15 0xc022031f in netmsg_service_loop (arg=0x0)
>    at /usr/src/sys/net/netisr.c:294
> #16 0xc01a8a1e in lwkt_deschedule_self (td=Cannot access memory at address 0x8
> )
>    at /usr/src/sys/kern/lwkt_thread.c:258
> Backtrace stopped: previous frame inner to this frame (corrupt stack?)

Please cherry-pick following commits (top 4 commits) on my leaf/devel

32efb58aa71321cc2936d0e2e116c628093a00f4
d9cdef25f00683455d95bd3781ca7f0c072d67ce
ae7b1378090dc5eefd507f99a69db87ee8fa51a3
ddadce06b969bc758226b8c62c2b2293ad52b655

Anyone interested, please review it too.

Best Regards,
sephe

#2 Updated by pavalos about 3 years ago

Fixed in ce6f0462a237160626ebf5cc25f2d792b941b905.

Also available in: Atom PDF