[Bug 213257] Crash in IGB driver with ALTQ

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=213257

John W. O'Brien <john at saltant.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |john at saltant.com

--- Comment #8 from John W. O'Brien <john at saltant.com> ---
I believe I have been experiencing this too. Didn't happen at r301164. Does
happen as of r306933.

Here are examples of two recent traces from 10.3-STABLE r308209 with ALTQ
enabled.

#0  doadump (textdump=<value optimized out>) at pcpu.h:219
#1  0xffffffff809939b2 in kern_reboot (howto=260)
    at /usr/src/sys/kern/kern_shutdown.c:486
#2  0xffffffff80993d95 in vpanic (fmt=<value optimized out>,
    ap=<value optimized out>) at /usr/src/sys/kern/kern_shutdown.c:889
#3  0xffffffff80993c23 in panic (fmt=0x0)
    at /usr/src/sys/kern/kern_shutdown.c:818
#4  0xffffffff80a10cb3 in sbcut_internal (sb=<value optimized out>,
    len=<value optimized out>) at /usr/src/sys/kern/uipc_sockbuf.c:886
#5  0xffffffff80b52a71 in tcp_do_segment (m=<value optimized out>,
    th=<value optimized out>, so=<value optimized out>,
    tp=<value optimized out>, drop_hdrlen=<value optimized out>, tlen=0,
    iptos=<value optimized out>, ti_locked=<value optimized out>)
    at /usr/src/sys/netinet/tcp_input.c:2838
#6  0xffffffff80b50897 in tcp_input (m=<value optimized out>,
    off0=<value optimized out>) at /usr/src/sys/netinet/tcp_input.c:1414
#7  0xffffffff80adee4b in ip_input (m=0xfffff800460cf400)
    at /usr/src/sys/netinet/ip_input.c:733
#8  0xffffffff80a761b2 in netisr_dispatch_src (proto=<value optimized out>,
    source=<value optimized out>, m=0x0) at /usr/src/sys/net/netisr.c:976
#9  0xffffffff80a6c036 in ether_demux (ifp=<value optimized out>,
    m=0xfffff800460cf400) at /usr/src/sys/net/if_ethersubr.c:851
#10 0xffffffff80a6ccde in ether_nh_input (m=<value optimized out>)
    at /usr/src/sys/net/if_ethersubr.c:646
#11 0xffffffff80a761b2 in netisr_dispatch_src (proto=<value optimized out>,
    source=<value optimized out>, m=0x0) at /usr/src/sys/net/netisr.c:976
#12 0xffffffff805101b9 in igb_rxeof (count=98)
    at /usr/src/sys/dev/e1000/if_igb.c:4790
#13 0xffffffff80510803 in igb_msix_que (arg=0xfffff8000996f400)
    at /usr/src/sys/dev/e1000/if_igb.c:1597
#14 0xffffffff8095f30b in intr_event_execute_handlers (
    p=<value optimized out>, ie=0xfffff80009979d00)
    at /usr/src/sys/kern/kern_intr.c:1264
#15 0xffffffff8095f756 in ithread_loop (arg=0xfffff800099982a0)
    at /usr/src/sys/kern/kern_intr.c:1277
#16 0xffffffff8095ce3a in fork_exit (
    callout=0xffffffff8095f6c0 <ithread_loop>, arg=0xfffff800099982a0,
    frame=0xfffffe0000340ac0) at /usr/src/sys/kern/kern_fork.c:1030
#17 0xffffffff80ddda3e in fork_trampoline ()
    at /usr/src/sys/amd64/amd64/exception.S:613
#18 0x0000000000000000 in ?? ()


#0  doadump (textdump=<value optimized out>) at pcpu.h:219
#1  0xffffffff809939b2 in kern_reboot (howto=260)
    at /usr/src/sys/kern/kern_shutdown.c:486
#2  0xffffffff80993d95 in vpanic (fmt=<value optimized out>,
    ap=<value optimized out>) at /usr/src/sys/kern/kern_shutdown.c:889
#3  0xffffffff80993c23 in panic (fmt=0x0)
    at /usr/src/sys/kern/kern_shutdown.c:818
#4  0xffffffff80df7b7b in trap_fatal (frame=<value optimized out>,
    eva=<value optimized out>) at /usr/src/sys/amd64/amd64/trap.c:858
#5  0xffffffff80df77ef in trap (frame=<value optimized out>)
    at /usr/src/sys/amd64/amd64/trap.c:203
#6  0xffffffff80ddd4fc in calltrap ()
    at /usr/src/sys/amd64/amd64/exception.S:238
#7  0xffffffff80a0cfcf in m_tag_delete_chain (m=0xfffff80059071600,
    t=<value optimized out>) at /usr/src/sys/kern/uipc_mbuf2.c:353
#8  0xffffffff80c6c07e in uma_zfree_arg (zone=0xfffff800073fe000,
    item=0xfffff80059071600, udata=0x0) at /usr/src/sys/vm/uma_core.c:2693
#9  0xffffffff80a08cd3 in m_freem (mb=<value optimized out>) at uma.h:364
#10 0xffffffff80a6c047 in ether_demux (ifp=<value optimized out>,
    m=0xfffff80059071600) at /usr/src/sys/net/if_ethersubr.c:871
#11 0xffffffff80a6ccde in ether_nh_input (m=<value optimized out>)
    at /usr/src/sys/net/if_ethersubr.c:646
#12 0xffffffff80a761b2 in netisr_dispatch_src (proto=<value optimized out>,
    source=<value optimized out>, m=0x206c6562616c2e65)
    at /usr/src/sys/net/netisr.c:976
#13 0xffffffff805101b9 in igb_rxeof (count=98)
    at /usr/src/sys/dev/e1000/if_igb.c:4790
#14 0xffffffff80510803 in igb_msix_que (arg=0xfffff8000996f670)
    at /usr/src/sys/dev/e1000/if_igb.c:1597
#15 0xffffffff8095f30b in intr_event_execute_handlers (
    p=<value optimized out>, ie=0xfffff80009979700)
    at /usr/src/sys/kern/kern_intr.c:1264
#16 0xffffffff8095f756 in ithread_loop (arg=0xfffff800099981e0)
    at /usr/src/sys/kern/kern_intr.c:1277
#17 0xffffffff8095ce3a in fork_exit (
    callout=0xffffffff8095f6c0 <ithread_loop>, arg=0xfffff800099981e0,
    frame=0xfffffe000037cac0) at /usr/src/sys/kern/kern_fork.c:1030
#18 0xffffffff80ddda3e in fork_trampoline ()
    at /usr/src/sys/amd64/amd64/exception.S:613
#19 0x0000000000000000 in ?? ()

Let me know how else I can help isolate the issue.

-- 
You are receiving this mail because:
You are the assignee for the bug.