CURRENT: Traps in netisr_queue_internal and in netisr itself (Was: ppp triggers GPF panic)

[Kamigishi Rei]

Stefan Bethke wrote:
> Yesterday's -current, amd64, C2D, 4 GB RAM. Full dmesg below.
This is not ppp's fault.
It's completely the same case as for my every-2-hours panics - a bug in 
netisr, and it is currently being looked into.
See an example below:

Fatal trap 12: page fault while in kernel mode
cpuid = 0; apic id = 00
fault virtual address   = 0x131e288
fault code              = supervisor read data, page not present
instruction pointer     = 0x20:0xffffffff80586325
stack pointer           = 0x28:0xffffff803beef490
frame pointer           = 0x28:0xffffff803beef4c0
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags        = resume, IOPL = 0
current process         = 0 (dummynet)
trap number             = 12
panic: page fault
cpuid = 0
Uptime: 1h55m42s

#0  doadump () at pcpu.h:223
223     pcpu.h: No such file or directory.
        in pcpu.h
(kgdb) #0  doadump () at pcpu.h:223
#1  0xffffffff80595163 in boot (howto=260)
    at /usr/src/sys/kern/kern_shutdown.c:419
#2  0xffffffff805955bc in panic (fmt=Variable "fmt" is not available.)
    at /usr/src/sys/kern/kern_shutdown.c:575
#3  0xffffffff8085e18d in trap_fatal (frame=0xc, eva=Variable "eva" is 
not available.)
    at /usr/src/sys/amd64/amd64/trap.c:852
#4  0xffffffff8085ee25 in trap (frame=0xffffff803beef3e0)
    at /usr/src/sys/amd64/amd64/trap.c:345
#5  0xffffffff80844cc3 in calltrap ()
    at /usr/src/sys/amd64/amd64/exception.S:223
#6  0xffffffff80586325 in _mtx_lock_sleep (m=0xffffffff80e61863,    
tid=18446742974219441952, opts=Variable "opts" is not available.
) at /usr/src/sys/kern/kern_mutex.c:407
#7  0xffffffff8058647e in _mtx_lock_flags (m=Variable "m" is not available.)
    at /usr/src/sys/kern/kern_mutex.c:203
#8  0xffffffff80642bd5 in netisr_queue_internal (proto=1, 
m=0xffffff00441f0c00, cpuid=Variable "cpuid" is not available.) at 
/usr/src/sys/net/netisr.c:830
#9  0xffffffff80642cb9 in netisr_queue_src (proto=1, source=Variable 
"source" is not available.)
    at /usr/src/sys/net/netisr.c:860
#10 0xffffffff8063ec30 in if_simloop (ifp=0xffffff000314b800, 
m=0xffffff00441f0c00, af=2, hlen=0) at /usr/src/sys/net/if_loop.c:400
#11 0xffffffff8063ed86 in looutput (ifp=0xffffff000314b800, 
m=0xffffff00441f0c00, dst=0xffffff803beef640, ro=Variable "ro" is not 
available.)
    at /usr/src/sys/net/if_loop.c:296
#12 0xffffffff8069dfd7 in ip_output (m=0xffffff00441f0c00, opt=Variable 
"opt" is not available.)


--
Kamigishi Rei
KREI-RIPE