kern/84801: kernel hangs with pf and route-to

[Sergey Lapin]

The following reply was made to PR kern/84801; it has been noted by GNATS.

From: Sergey Lapin <slapinid at gmail.com>
To: bug-followup at FreeBSD.org
Cc:  
Subject: Re: kern/84801: kernel hangs with pf and route-to
Date: Fri, 12 Aug 2005 20:03:07 +0400

 Here come data from debugger.
 
 
 login: ~KDB: enter: Line break on console
 [thread pid 37 tid 100036 ]
 Stopped at      kdb_enter+0x2b: nop
 db> trace
 Tracing pid 37 tid 100036 td 0xc1918d80
 kdb_enter(c0877106) at kdb_enter+0x2b
 siointr1(c1a97400,c09879c0,0,c0876f16,56e) at siointr1+0xce
 siointr(c1a97400) at siointr+0x21
 intr_execute_handlers(c18e4890,d33c695c,4,d33c69a4,c07dba33) at
 intr_execute_handlers+0xa5
 lapic_handle_intr(34) at lapic_handle_intr+0x2e
 Xapic_isr1() at Xapic_isr1+0x33
 --- interrupt, eip =3D 0xc0692442, esp =3D 0xd33c69a0, ebp =3D 0xd33c69a4 -=
 --
 strncmp(c086c33f,c0859af9,3) at strncmp+0x16
 fixup_filename(c086c336,d33c69f4,c0654bc4,c0926440,c092ef18) at
 fixup_filename+0x24
 witness_checkorder(c1a4c0a4,9,c086c336,a0d) at witness_checkorder+0x72
 _mtx_lock_flags(c1a4c0a4,0,c086c336,a0d) at _mtx_lock_flags+0x5b
 xl_start(c19e5400) at xl_start+0x22
 if_start(c19e5400,c19e550c,c1b2850c,202a2a4,62) at if_start+0x7b
 vlan_start(c1b28400) at vlan_start+0x346
 if_start(c1b28400) at if_start+0x7b
 ether_output_frame(c1b28400,c1b16200,0,0,0) at ether_output_frame+0x1d9
 ether_output(c1b28400,c1b16200,d33c6b34,0,c1b28400) at ether_output+0x3b4
 pf_route(d33c6c7c,c1cf04b8,1,c1b28400,c1e7a820) at pf_route+0x2a1
 pf_test(1,c1b28400,d33c6c7c,0,0) at pf_test+0x66e
 pf_check_in(0,d33c6c7c,c1b28400,1,0) at pf_check_in+0x37
 pfil_run_hooks(c096ed00,d33c6cc8,c1b28400,1,0) at pfil_run_hooks+0xc9
 ip_input(c1b15800) at ip_input+0x231
 netisr_processqueue(c096e338) at netisr_processqueue+0x6e
 swi_net(0) at swi_net+0xbe
 ithread_loop(c18fa480,d33c6d38,c18fa480,c061f854,0) at ithread_loop+0x11c
 fork_exit(c061f854,c18fa480,d33c6d38) at fork_exit+0xa0
 fork_trampoline() at fork_trampoline+0x8
 --- trap 0x1, eip =3D 0, esp =3D 0xd33c6d6c, ebp =3D 0 ---
 
 
 
 
 
 
 
 ~KDB: enter: Line break on console
 [thread pid 29 tid 100023 ]
 Stopped at      kdb_enter+0x2b: nop
 db> trace
 Tracing pid 29 tid 100023 td 0xc190b780
 kdb_enter(c0877106) at kdb_enter+0x2b
 siointr1(c1a97400,c09879c0,0,c0876f16,56e) at siointr1+0xce
 siointr(c1a97400) at siointr+0x21
 intr_execute_handlers(c18e4890,d339cc94,4,d339cce8,c07dba33) at
 intr_execute_handlers+0xa5
 lapic_handle_intr(34) at lapic_handle_intr+0x2e
 Xapic_isr1() at Xapic_isr1+0x33
 --- interrupt, eip =3D 0xc074fee2, esp =3D 0xd339ccd8, ebp =3D 0xd339cce8 -=
 --
 xl_intr(c1a4a000) at xl_intr+0x102
 ithread_loop(c18fa880,d339cd38,c18fa880,c061f854,0) at ithread_loop+0x11c
 fork_exit(c061f854,c18fa880,d339cd38) at fork_exit+0xa0
 fork_trampoline() at fork_trampoline+0x8
 --- trap 0x1, eip =3D 0, esp =3D 0xd339cd6c, ebp =3D 0 ---
 
 
 
 
 
 ~KDB: enter: Line break on console
 [thread pid 40 tid 100029 ]
 Stopped at      kdb_enter+0x2b: nop
 db> trace
 Tracing pid 40 tid 100029 td 0xc18bed80
 kdb_enter(c0877106) at kdb_enter+0x2b
 siointr1(c1a97400,c09879c0,0,c0876f16,56e) at siointr1+0xce
 siointr(c1a97400) at siointr+0x21
 intr_execute_handlers(c18e4890,d23b9bb0,4,d23b9bf8,c07dba33) at
 intr_execute_handlers+0xa5
 lapic_handle_intr(34) at lapic_handle_intr+0x2e
 Xapic_isr1() at Xapic_isr1+0x33
 --- interrupt, eip =3D 0xc07e46e7, esp =3D 0xd23b9bf4, ebp =3D 0xd23b9bf8 -=
 --
 spinlock_exit(c096cb10,d23b9c30,c0654bc4,c0926440,0) at spinlock_exit+0x27
 _mtx_unlock_spin_flags(c0926440,0,c085995e,6af,c0926440) at
 _mtx_unlock_spin_flags+0x8d
 witness_lock_list_free(c096cb10) at witness_lock_list_free+0x40
 witness_unlock(c1a4c0a4,8,c086c33f,839) at witness_unlock+0x1b6
 _mtx_unlock_flags(c1a4c0a4,0,c086c336,839,c1a4a000) at _mtx_unlock_flags+0x=
 5b
 xl_rxeof_task(c1a4a000,0,c19b839c,0,c085914d) at xl_rxeof_task+0x38
 taskqueue_run(c19b8380,d23b9d0c,c061f970,0,0) at taskqueue_run+0x86
 taskqueue_swi_run(0) at taskqueue_swi_run+0xe
 ithread_loop(c19b8300,d23b9d38,c19b8300,c061f854,0) at ithread_loop+0x11c
 fork_exit(c061f854,c19b8300,d23b9d38) at fork_exit+0xa0
 fork_trampoline() at fork_trampoline+0x8
 --- trap 0x1, eip =3D 0, esp =3D 0xd23b9d6c, ebp =3D 0 ---
 
 
 
 
 
 
 ~KDB: enter: Line break on console
 [thread pid 40 tid 100029 ]
 Stopped at      kdb_enter+0x2b: nop
 db> trace
 Tracing pid 40 tid 100029 td 0xc18bed80
 kdb_enter(c0877106) at kdb_enter+0x2b
 siointr1(c1a97400,c09879c0,0,c0876f16,56e) at siointr1+0xce
 siointr(c1a97400) at siointr+0x21
 intr_execute_handlers(c18e4890,d23b9be8,4,d23b9c30,c07dba33) at
 intr_execute_handlers+0xa5
 lapic_handle_intr(34) at lapic_handle_intr+0x2e
 Xapic_isr1() at Xapic_isr1+0x33
 --- interrupt, eip =3D 0xc069244f, esp =3D 0xd23b9c2c, ebp =3D 0xd23b9c30 -=
 --
 strncmp(c086c33f,c0859af9,3) at strncmp+0x23
 fixup_filename(c086c336,c092ef18,c1a4c0a4,837,c086c336) at fixup_filename+0=
 x24
 witness_lock(c1a4c0a4,8,c086c336,837,c1a4a000) at witness_lock+0x55
 _mtx_lock_flags(c1a4c0a4,0,c086c336,837,0) at _mtx_lock_flags+0x97
 xl_rxeof_task(c1a4a000,0,c19b839c,0,c085914d) at xl_rxeof_task+0x20
 taskqueue_run(c19b8380,d23b9d0c,c061f970,0,0) at taskqueue_run+0x86
 taskqueue_swi_run(0) at taskqueue_swi_run+0xe
 ithread_loop(c19b8300,d23b9d38,c19b8300,c061f854,0) at ithread_loop+0x11c
 fork_exit(c061f854,c19b8300,d23b9d38) at fork_exit+0xa0
 fork_trampoline() at fork_trampoline+0x8
 --- trap 0x1, eip =3D 0, esp =3D 0xd23b9d6c, ebp =3D 0 ---
 
 
 
 
 
 db> trace
 Tracing pid 29 tid 100023 td 0xc190b780
 kdb_enter(c0877106) at kdb_enter+0x2b
 siointr1(c1a97400,c09879c0,0,c0876f16,56e) at siointr1+0xce
 siointr(c1a97400) at siointr+0x21
 intr_execute_handlers(c18e4890,d339cc88,4,d339ccd0,c07dba33) at
 intr_execute_handlers+0xa5
 lapic_handle_intr(34) at lapic_handle_intr+0x2e
 Xapic_isr1() at Xapic_isr1+0x33
 --- interrupt, eip =3D 0xc07e46e7, esp =3D 0xd339cccc, ebp =3D 0xd339ccd0 -=
 --
 spinlock_exit(0,d339cd0c,c061fa8c,c091efa0,0) at spinlock_exit+0x27
 _mtx_unlock_spin_flags(c091efa0,0,c08539c9,251) at _mtx_unlock_spin_flags+0=
 x8d
 ithread_loop(c18fa880,d339cd38,c18fa880,c061f854,0) at ithread_loop+0x238
 fork_exit(c061f854,c18fa880,d339cd38) at fork_exit+0xa0
 fork_trampoline() at fork_trampoline+0x8
 --- trap 0x1, eip =3D 0, esp =3D 0xd339cd6c, ebp =3D 0 ---
 
 
 
 
 
 ~KDB: enter: Line break on console
 [thread pid 40 tid 100029 ]
 Stopped at      kdb_enter+0x2b: nop
 db> trace
 Tracing pid 40 tid 100029 td 0xc18bed80
 kdb_enter(c0877106) at kdb_enter+0x2b
 siointr1(c1a97400,c09879c0,0,c0876f16,56e) at siointr1+0xce
 siointr(c1a97400) at siointr+0x21
 intr_execute_handlers(c18e4890,d23b9c80,4,d23b9cdc,c07dba33) at
 intr_execute_handlers+0xa5
 lapic_handle_intr(34) at lapic_handle_intr+0x2e
 Xapic_isr1() at Xapic_isr1+0x33
 --- interrupt, eip =3D 0xc06505da, esp =3D 0xd23b9cc4, ebp =3D 0xd23b9cdc -=
 --
 taskqueue_run(c19b8380,d23b9d0c,c061f970,0,0) at taskqueue_run+0xaa
 taskqueue_swi_run(0) at taskqueue_swi_run+0xe
 ithread_loop(c19b8300,d23b9d38,c19b8300,c061f854,0) at ithread_loop+0x11c
 fork_exit(c061f854,c19b8300,d23b9d38) at fork_exit+0xa0
 fork_trampoline() at fork_trampoline+0x8
 --- trap 0x1, eip =3D 0, esp =3D 0xd23b9d6c, ebp =3D 0 ---
 
 
 
 db> call doadump
 Dumping 447 MB (2 chunks)
  chunk 0: 1MB (159 pages) ... ok
  chunk 1: 447MB (114416 pages) 431 415 399 383 367 351 335 319 303
 287 271 255 239 223 207 191 175 159 143 127 111 95 79 63 47 31 15 ...
 ok
 
 Dump complete
 =3D 0xf