[Bug 204340] [panic] nfsd, em, msix, fatal trap 9

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Fri Nov 6 18:12:00 UTC 2015


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=204340

            Bug ID: 204340
           Summary: [panic] nfsd, em, msix, fatal trap 9
           Product: Base System
           Version: 10.2-RELEASE
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: kern
          Assignee: freebsd-bugs at FreeBSD.org
          Reporter: g_amanakis at yahoo.com

On a X9SCM with em NICs restarting nfsd with mounted shares remotely results in
kernel trap 9 with panic and reboot. The system is running a GENERIC kernel on
an up-to-date FreeBSD 10.2-RELEASE. 

On /var/log/messages:

1406 Nov  5 16:43:00 x3200 kernel: 
1407 Nov  5 16:43:00 x3200 kernel: 
1408 Nov  5 16:43:00 x3200 kernel: Fatal trap 9: general protection fault while
in kernel mode
1409 Nov  5 16:43:00 x3200 kernel: cpuid = 0; apic id = 00
1410 Nov  5 16:43:00 x3200 kernel: instruction pointer       =
0x20:0xffffffff8092e980
1411 Nov  5 16:43:00 x3200 kernel: stack pointer             =
0x28:0xfffffe01ee7ee430
1412 Nov  5 16:43:00 x3200 kernel: frame pointer             =
0x28:0xfffffe01ee7ee4b0
1413 Nov  5 16:43:00 x3200 kernel: code segment              = base 0x0, limit
0xfffff, type 0x1b
1414 Nov  5 16:43:00 x3200 kernel: = DPL 0, pres 1, long 1, def32 0, gran 1
1415 Nov  5 16:43:00 x3200 kernel: processor eflags  =
1416 Nov  5 16:43:00 x3200 kernel: interrupt enabled, resume, IOPL = 0
1417 Nov  5 16:43:00 x3200 kernel: current process           = 12 (irq266:
em1:rx0)
1418 Nov  5 16:45:06 x3200 syslogd: kernel boot file is /boot/kernel/kernel
1419 Nov  5 16:45:06 x3200 kernel: trap number               = 9
1420 Nov  5 16:45:06 x3200 kernel: panic: general protection fault
1421 Nov  5 16:45:06 x3200 kernel: cpuid = 0
1422 Nov  5 16:45:06 x3200 kernel: KDB: stack backtrace:
1423 Nov  5 16:45:06 x3200 kernel: #0 0xffffffff80984e30 at kdb_backtrace+0x60
1424 Nov  5 16:45:06 x3200 kernel: #1 0xffffffff809489e6 at vpanic+0x126
1425 Nov  5 16:45:06 x3200 kernel: #2 0xffffffff809488b3 at panic+0x43
1426 Nov  5 16:45:06 x3200 kernel: #3 0xffffffff80d4aadb at trap_fatal+0x36b
1427 Nov  5 16:45:06 x3200 kernel: #4 0xffffffff80d4a75c at trap+0x75c
1428 Nov  5 16:45:06 x3200 kernel: #5 0xffffffff80d307f2 at calltrap+0x8
1429 Nov  5 16:45:06 x3200 kernel: #6 0xffffffff80b4a725 at xprt_active+0x45
1430 Nov  5 16:45:06 x3200 kernel: #7 0xffffffff80b4e0a5 at
svc_vc_soupcall+0x35
1431 Nov  5 16:45:06 x3200 kernel: #8 0xffffffff809bcc52 at sowakeup+0x82
1432 Nov  5 16:45:06 x3200 kernel: #9 0xffffffff80aea942 at
tcp_do_segment+0x2b22
1433 Nov  5 16:45:06 x3200 kernel: #10 0xffffffff80ae7720 at tcp_input+0x12b0
1434 Nov  5 16:45:06 x3200 kernel: #11 0xffffffff80a77f57 at ip_input+0x97
1435 Nov  5 16:45:06 x3200 kernel: #12 0xffffffff80a177d2 at
netisr_dispatch_src+0x62
1436 Nov  5 16:45:06 x3200 kernel: #13 0xffffffff80a0eb76 at ether_demux+0x126
1437 Nov  5 16:45:06 x3200 kernel: #14 0xffffffff80a0f81e at
ether_nh_input+0x35e
1438 Nov  5 16:45:06 x3200 kernel: #15 0xffffffff80a177d2 at
netisr_dispatch_src+0x62
1439 Nov  5 16:45:06 x3200 kernel: #16 0xffffffff804e121b at em_rxeof+0x2eb
1440 Nov  5 16:45:06 x3200 kernel: #17 0xffffffff804e1663 at em_msix_rx+0x33
1441 Nov  5 16:45:06 x3200 kernel: Uptime: 2m10s
1442 Nov  5 16:45:06 x3200 kernel: Dumping 460 out of 8134
MB:..4%..11%..21%..32%..42%..53%..63%..73%..84%..91%Copyright (c) 1992-201    
5 The FreeBSD Project.


Running kgdb:
(kgdb) list *0xffffffff8092e980
0xffffffff8092e980 is in __mtx_lock_sleep (/usr/src/sys/kern/kern_mutex.c:438).
433                      * owner stops running or the state of the lock
changes.
434                      */
435                     v = m->mtx_lock;
436                     if (v != MTX_UNOWNED) {
437                             owner = (struct thread *)(v & ~MTX_FLAGMASK);
438                             if (TD_IS_RUNNING(owner)) {
439                                     if (LOCK_LOG_TEST(&m->lock_object, 0))
440                                             CTR3(KTR_LOCK,
441                                                 "%s: spinning on %p held by
%p",
442                                                 __func__, m, owner);

(kgdb) backtrace
#0  doadump (textdump=<value optimized out>) at pcpu.h:219
#1  0xffffffff80948642 in kern_reboot (howto=260) at
/usr/src/sys/kern/kern_shutdown.c:451
#2  0xffffffff80948a25 in vpanic (fmt=<value optimized out>, ap=<value
optimized out>) at /usr/src/sys/kern/kern_shutdown.c:758
#3  0xffffffff809488b3 in panic (fmt=0x0) at
/usr/src/sys/kern/kern_shutdown.c:687
#4  0xffffffff80d4aadb in trap_fatal (frame=<value optimized out>, eva=<value
optimized out>) at /usr/src/sys/amd64/amd64/trap.c:851
#5  0xffffffff80d4a75c in trap (frame=<value optimized out>) at
/usr/src/sys/amd64/amd64/trap.c:203
#6  0xffffffff80d307f2 in calltrap () at
/usr/src/sys/amd64/amd64/exception.S:236
#7  0xffffffff8092e980 in __mtx_lock_sleep (c=0xfffffe0000e09198,
tid=18446735277688524800, opts=0, file=0x0, line=0)
    at /usr/src/sys/kern/kern_mutex.c:437
#8  0xffffffff80b4a725 in xprt_active (xprt=0xfffff801247cae00) at
/usr/src/sys/rpc/svc.c:394
#9  0xffffffff80b4e0a5 in svc_vc_soupcall (so=0xfffffe0000e09180, arg=<value
optimized out>, waitflag=0)
    at /usr/src/sys/rpc/svc_vc.c:953
#10 0xffffffff809bcc52 in sowakeup (so=0xfffff8012473a570,
sb=0xfffff8012473a600) at /usr/src/sys/kern/uipc_sockbuf.c:191
#11 0xffffffff80aea942 in tcp_do_segment (m=<value optimized out>, th=<value
optimized out>, so=0xfffff8012473a570, 
    tp=0xfffff801b93ed810, drop_hdrlen=<value optimized out>, tlen=324,
iptos=<value optimized out>, ti_locked=Cannot access memory at address 0x1
)
    at /usr/src/sys/netinet/tcp_input.c:1842
#12 0xffffffff80ae7720 in tcp_input (m=<value optimized out>, off0=<value
optimized out>) at /usr/src/sys/netinet/tcp_input.c:1376
#13 0xffffffff80a77f57 in ip_input (m=0xfffff8003e5b6500) at
/usr/src/sys/netinet/ip_input.c:734
#14 0xffffffff80a177d2 in netisr_dispatch_src (proto=<value optimized out>,
source=<value optimized out>, m=0xfac0622db6ac96f8)
    at /usr/src/sys/net/netisr.c:976
#15 0xffffffff80a0eb76 in ether_demux (ifp=<value optimized out>,
m=0xfffff8003e5b6500) at /usr/src/sys/net/if_ethersubr.c:851
#16 0xffffffff80a0f81e in ether_nh_input (m=<value optimized out>) at
/usr/src/sys/net/if_ethersubr.c:646
#17 0xffffffff80a177d2 in netisr_dispatch_src (proto=<value optimized out>,
source=<value optimized out>, m=0xfac0622db6ac96f8)
    at /usr/src/sys/net/netisr.c:976
#18 0xffffffff804e121b in em_rxeof (count=99) at
/usr/src/sys/dev/e1000/if_em.c:4711
#19 0xffffffff804e1663 in em_msix_rx (arg=0xfffff8000449ca00) at
/usr/src/sys/dev/e1000/if_em.c:1639
#20 0xffffffff8091482b in intr_event_execute_handlers (p=<value optimized out>,
ie=0xfffff8000446fd00)
    at /usr/src/sys/kern/kern_intr.c:1264
#21 0xffffffff80914c76 in ithread_loop (arg=0xfffff800044d40a0) at
/usr/src/sys/kern/kern_intr.c:1277
#22 0xffffffff8091244a in fork_exit (callout=0xffffffff80914be0 <ithread_loop>,
arg=0xfffff800044d40a0, frame=0xfffffe01ee7eeac0)
    at /usr/src/sys/kern/kern_fork.c:1018
#23 0xffffffff80d30d2e in fork_trampoline () at
/usr/src/sys/amd64/amd64/exception.S:611
#24 0x0000000000000000 in ?? ()

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the freebsd-bugs mailing list