Project

General

Profile

Actions
Copy link

Bug #1960

closed

syncache page fault panic

Added by pavalos over 13 years ago. Updated about 13 years ago.

Status:
Closed
Priority:
High
Assignee:
sepherosa
Category:
-
Target version:
-
Start date:
Due date:
% Done:

0%

Estimated time:

Description

Got the following panic today on a box running a kernel from Nov. 5th:

#0 _get_mycpu (di=0xc03ef960) at ./machine/thread.h:83
#1 md_dumpsys (di=0xc03ef960)
at /usr/src/sys/platform/pc32/i386/dump_machdep.c:263
#2 0xc019e6c5 in dumpsys () at /usr/src/sys/kern/kern_shutdown.c:881
#3 0xc019ec85 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:388
#4 0xc019ef5d in panic (fmt=0xc0360fd7 "%s")
at /usr/src/sys/kern/kern_shutdown.c:787
#5 0xc032e1fb in trap_fatal (frame=0xd9d3faa0, eva=<value optimized out>)
at /usr/src/sys/platform/pc32/i386/trap.c:1125
#6 0xc032e309 in trap_pfault (frame=0xd9d3faa0, usermode=0, eva=44)
at /usr/src/sys/platform/pc32/i386/trap.c:1026
#7 0xc032edf5 in trap (frame=0xd9d3faa0)
at /usr/src/sys/platform/pc32/i386/trap.c:707
#8 0xc0317f77 in calltrap ()
at /usr/src/sys/platform/pc32/i386/exception.s:785
#9 0xc023d2c9 in syncache_socket (inc=0xd9d3fbd0, th=0xfd78b024,
sop=0xd9d3fc8c, m=0xfd72e400) at /usr/src/sys/netinet/tcp_syncache.c:837
#10 syncache_expand (inc=0xd9d3fbd0, th=0xfd78b024, sop=0xd9d3fc8c,
m=0xfd72e400) at /usr/src/sys/netinet/tcp_syncache.c:919
#11 0xc0234b15 in tcp_input (mp=0xd9d3fcb8, offp=0xd9d3fcb4, proto=6)
at /usr/src/sys/netinet/tcp_input.c:893
#12 0xc022efc6 in transport_processing_oncpu (m=0x0, hlen=20, ip=0xfd78b010)
at /usr/src/sys/netinet/ip_input.c:394
#13 0xc022ff8d in ip_input (m=0xfd72e400)
at /usr/src/sys/netinet/ip_input.c:959
#14 0xc022ffb5 in ip_input_handler (msg=0xfd72e41c)
at /usr/src/sys/netinet/ip_input.c:415
#15 0xc022031f in netmsg_service_loop (arg=0x0)
at /usr/src/sys/net/netisr.c:294
#16 0xc01a8a1e in lwkt_deschedule_self (td=Cannot access memory at address 0x8
)
at /usr/src/sys/kern/lwkt_thread.c:258
Backtrace stopped: previous frame inner to this frame (corrupt stack?)

Files can be downloaded from:

http://www.theshell.com/~pavalos/crash/ylem-crash1.tar.xz

--Peter

Actions
Copy link
 #1

Updated by sepherosa about 13 years ago

On Mon, Jan 17, 2011 at 1:45 PM, Peter Avalos <> wrote:

Got the following panic today on a box running a kernel from Nov. 5th:

#0  _get_mycpu (di=0xc03ef960) at ./machine/thread.h:83
#1  md_dumpsys (di=0xc03ef960)
   at /usr/src/sys/platform/pc32/i386/dump_machdep.c:263
#2  0xc019e6c5 in dumpsys () at /usr/src/sys/kern/kern_shutdown.c:881
#3  0xc019ec85 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:388
#4  0xc019ef5d in panic (fmt=0xc0360fd7 "%s")
   at /usr/src/sys/kern/kern_shutdown.c:787
#5  0xc032e1fb in trap_fatal (frame=0xd9d3faa0, eva=<value optimized out>)
   at /usr/src/sys/platform/pc32/i386/trap.c:1125
#6  0xc032e309 in trap_pfault (frame=0xd9d3faa0, usermode=0, eva=44)
   at /usr/src/sys/platform/pc32/i386/trap.c:1026
#7  0xc032edf5 in trap (frame=0xd9d3faa0)
   at /usr/src/sys/platform/pc32/i386/trap.c:707
#8  0xc0317f77 in calltrap ()
   at /usr/src/sys/platform/pc32/i386/exception.s:785
#9  0xc023d2c9 in syncache_socket (inc=0xd9d3fbd0, th=0xfd78b024,
   sop=0xd9d3fc8c, m=0xfd72e400) at /usr/src/sys/netinet/tcp_syncache.c:837
#10 syncache_expand (inc=0xd9d3fbd0, th=0xfd78b024, sop=0xd9d3fc8c,
   m=0xfd72e400) at /usr/src/sys/netinet/tcp_syncache.c:919
#11 0xc0234b15 in tcp_input (mp=0xd9d3fcb8, offp=0xd9d3fcb4, proto=6)
   at /usr/src/sys/netinet/tcp_input.c:893
#12 0xc022efc6 in transport_processing_oncpu (m=0x0, hlen=20, ip=0xfd78b010)
   at /usr/src/sys/netinet/ip_input.c:394
#13 0xc022ff8d in ip_input (m=0xfd72e400)
   at /usr/src/sys/netinet/ip_input.c:959
#14 0xc022ffb5 in ip_input_handler (msg=0xfd72e41c)
   at /usr/src/sys/netinet/ip_input.c:415
#15 0xc022031f in netmsg_service_loop (arg=0x0)
   at /usr/src/sys/net/netisr.c:294
#16 0xc01a8a1e in lwkt_deschedule_self (td=Cannot access memory at address 0x8
)
   at /usr/src/sys/kern/lwkt_thread.c:258
Backtrace stopped: previous frame inner to this frame (corrupt stack?)

Please cherry-pick following commits (top 4 commits) on my leaf/devel

32efb58aa71321cc2936d0e2e116c628093a00f4
d9cdef25f00683455d95bd3781ca7f0c072d67ce
ae7b1378090dc5eefd507f99a69db87ee8fa51a3
ddadce06b969bc758226b8c62c2b2293ad52b655

Anyone interested, please review it too.

Best Regards,
sephe

Actions
Copy link
 #2

Updated by pavalos about 13 years ago

Fixed in ce6f0462a237160626ebf5cc25f2d792b941b905.

Actions
Copy link

Also available in: Atom PDF