[Bug 220358] panic in tcp_lro_flush_all

Fri Jun 30 09:28:41 UTC 2017

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=220358

--- Comment #4 from iz-rpi03 at hs-karlsruhe.de ---
There is no "option RSS" in the used kernel config. So, the answer is: No.

Hyperthreading was used.
As you suggested I disabled it via /boot/loader.conf, but the panic happend
again.
It changed its cause to "page fault while in kernel mode" but almost
not the place. "tcp_lro_flush" instead of the former "tcp_lro_flush_all".

Ralf

Unread portion of the kernel message buffer:
kernel trap 12 with interrupts disabled

Fatal trap 12: page fault while in kernel mode
cpuid = 1; apic id = 01
fault virtual address   = 0x55ea51aa
fault code              = supervisor write, page not present
instruction pointer     = 0x20:0xc7f3f21b
stack pointer           = 0x28:0xe37d97bc
frame pointer           = 0x28:0xe37d97e8
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, def32 1, gran 1
processor eflags        = resume, IOPL = 0
current process         = 0 (if_io_tqg_1)
trap number             = 12
panic: page fault
cpuid = 1
time = 1498813503
KDB: stack backtrace:
#0 0xc07dadaf at kdb_backtrace+0x4f
#1 0xc079ccb3 at vpanic+0x133
#2 0xc079cb7b at panic+0x1b
#3 0xc0ae38fe at trap_fatal+0x31e
#4 0xc0ae3943 at trap_pfault+0x33
#5 0xc0ae304e at trap+0x2be
#6 0xc0ad1fea at calltrap+0x6
#7 0xc096bb4f at tcp_do_segment+0x219f
#8 0xc0968d67 at tcp_input+0x13a7
#9 0xc08f39a6 at ip_input+0x256
#10 0xc089328c at netisr_dispatch_src+0xcc#13 0xc087e65b at
ether_nh_input+0x35b
#14 0xc089328c at netisr_dispatch_src+0xcc
#15 0xc0893550 at netisr_dispatch+0x20
#16 0xc087dc3a at ether_input+0x2a
#17 0xc096dfc5 at tcp_lro_flush+0x1d5
Uptime: 6m23s
Physical memory: 3523 MB
Dumping 149 MB: 134 118 102 86 70 54 38 22 6

Reading symbols from /boot/kernel.r320396.crash/snd_hda.ko...Reading symbols
from /usr/lib/debug//boot/kernel.r320396.crash/snd_hda.ko.debug...done.
done.
Reading symbols from /boot/kernel.r320396.crash/sound.ko...Reading symbols from
/usr/lib/debug//boot/kernel.r320396.crash/sound.ko.debug...done.
done.
Reading symbols from /boot/kernel.r320396.crash/cuse.ko...Reading symbols from
/usr/lib/debug//boot/kernel.r320396.crash/cuse.ko.debug...done.
done.
Reading symbols from /boot/kernel.r320396.crash/ums.ko...Reading symbols from
/usr/lib/debug//boot/kernel.r320396.crash/ums.ko.debug...done.
done.
__curthread () at ./machine/pcpu.h:225
225             __asm("movl %%fs:%1,%0" : "=r" (td)
(kgdb) #0  __curthread () at ./machine/pcpu.h:225
#1  doadump (textdump=-949457280) at /usr/src/sys/kern/kern_shutdown.c:318
#2  0xc079c924 in kern_reboot (howto=<optimized out>)
    at /usr/src/sys/kern/kern_shutdown.c:386
#3  0xc079cceb in vpanic (fmt=<optimized out>, ap=<optimized out>)
    at /usr/src/sys/kern/kern_shutdown.c:779
#4  0xc079cb7b in panic (fmt=0xc0b23936 "%s")
    at /usr/src/sys/kern/kern_shutdown.c:710
#5  0xc0ae38fe in trap_fatal (frame=<optimized out>, eva=<optimized out>)
    at /usr/src/sys/i386/i386/trap.c:978
#6  0xc0ae3943 in trap_pfault (frame=<optimized out>, 
    usermode=<optimized out>, eva=<optimized out>)
    at /usr/src/sys/i386/i386/trap.c:804
#7  0xc0ae304e in trap (frame=<optimized out>)
    at /usr/src/sys/i386/i386/trap.c:512
#8  <signal handler called>
#9  0xc7f3f21b in ?? ()
#10 0xc096bb4f in tcp_do_segment (m=<optimized out>, th=<optimized out>, 
    so=<optimized out>, tp=<optimized out>, drop_hdrlen=<optimized out>, 
    tlen=<optimized out>, iptos=<optimized out>, 
    ti_locked=<error reading variable: Cannot access memory at address 0x1>)
    at /usr/src/sys/netinet/tcp_input.c:2444
#11 0xc0968d67 in tcp_input (mp=<optimized out>, offp=<optimized out>, 
    proto=<optimized out>) at /usr/src/sys/netinet/tcp_input.c:1191
#12 0xc08f39a6 in ip_input (m=0x0) at /usr/src/sys/netinet/ip_input.c:823
#13 0xc089328c in netisr_dispatch_src (proto=<optimized out>, 
    source=<optimized out>, m=0xc7f3f219) at /usr/src/sys/net/netisr.c:1120
#14 0xc0893550 in netisr_dispatch (proto=1, m=0xc8172000)
    at /usr/src/sys/net/netisr.c:1211
#15 0xc087d9b0 in ether_demux (ifp=0xc77ca800, m=0x0)
    at /usr/src/sys/net/if_ethersubr.c:848
#16 0xc087e65b in ether_input_internal (ifp=0xc77ca800, m=0xc7f3f219)
    at /usr/src/sys/net/if_ethersubr.c:637
#17 ether_nh_input (m=<optimized out>) at /usr/src/sys/net/if_ethersubr.c:667
#18 0xc089328c in netisr_dispatch_src (proto=<optimized out>, 
    source=<optimized out>, m=0xc7f3f219) at /usr/src/sys/net/netisr.c:1120
#19 0xc0893550 in netisr_dispatch (proto=5, m=0xc8172000)
    at /usr/src/sys/net/netisr.c:1211
#20 0xc087dc3a in ether_input (ifp=0xc77ca800, m=0x0)
    at /usr/src/sys/net/if_ethersubr.c:757
#21 0xc096dfc5 in tcp_lro_flush (lc=0xc77ad424, le=<optimized out>)
    at /usr/src/sys/netinet/tcp_lro.c:394
#22 0xc096e161 in tcp_lro_rx_done (lc=0xc77ad424)
    at /usr/src/sys/netinet/tcp_lro.c:284
#23 tcp_lro_flush_all (lc=<optimized out>)
    at /usr/src/sys/netinet/tcp_lro.c:532
#24 0xc088dc90 in iflib_rxeof (budget=16, rxq=<optimized out>)
    at /usr/src/sys/net/iflib.c:2564
#25 _task_fn_rx (context=<optimized out>) at /usr/src/sys/net/iflib.c:3499
#26 0xc07d9aa8 in gtaskqueue_run_locked (queue=0xc7688000)
    at /usr/src/sys/kern/subr_gtaskqueue.c:329
#27 0xc07d97c7 in gtaskqueue_thread_loop (arg=0xc7671814)
    at /usr/src/sys/kern/subr_gtaskqueue.c:504
#28 0xc0764a16 in fork_exit (callout=0xc07d9720 <gtaskqueue_thread_loop>, 
    arg=<optimized out>, frame=<optimized out>)
    at /usr/src/sys/kern/kern_fork.c:1038
#29 <signal handler called>
(kgdb) 

#11 0xc0893550 at netisr_dispatch+0x20
#12 0xc087d9b0 at ether_demux+0x140

-- 
You are receiving this mail because:
You are the assignee for the bug.