Re: netisr panic?

From: Adrian Chadd <adrian_at_freebsd.org>
Date: Sat, 17 Nov 2012 08:26:58 -0800
It's a NULL ponter deref. This is my line 484 in if_ethersubr.c:

        eh = mtod(m, struct ether_header *);


.. if that's yours, see if eh is NULL?




adrian

On 17 November 2012 07:07, Ian FREISLICH <ianf_at_cloudseed.co.za> wrote:
> Hi
>
> I have this consistently with:
>
> FreeBSD firewall2.jnb1.gp-online.net 10.0-CURRENT FreeBSD 10.0-CURRENT #30 r243156: Fri Nov 16 20:12:33 SAST 2012     ianf_at_firewall2.jnb1.gp-online.net:/usr/obj/usr/src/sys/FIREWALL  amd64
>
>
> Fatal trap 12: page fault while in kernel mode
> cpuid = 4; apic id = 04
> fault virtual address   = 0xc
> fault code              = supervisor read data, page not present
> instruction pointer     = 0x20:0xffffffff8050f534
> stack pointer           = 0x28:0xffffff846384e9c0
> frame pointer           = 0x28:0xffffff846384ea00
> code segment            = base 0x0, limit 0xfffff, type 0x1b
>                         = DPL 0, pres 1, long 1, def32 0, gran 1
> processor eflags        = interrupt enabled, resume, IOPL = 0
> current process         = 11 (irq266: igb1:que 0)
> trap number             = 12
> panic: page fault
> cpuid = 4
> KDB: stack backtrace:
> db_trace_self_wrapper() at db_trace_self_wrapper+0x2a
> panic() at panic+0x1ce
> trap_fatal() at trap_fatal+0x290
> trap_pfault() at trap_pfault+0x21f
> trap() at trap+0x2b4
> calltrap() at calltrap+0x8
> --- trap 0xc, rip = 0xffffffff8050f534, rsp = 0xffffff846384e9c0, rbp = 0xffffff846384ea00 ---
> ether_nh_input() at ether_nh_input+0x94
> netisr_dispatch_src() at netisr_dispatch_src+0x212
> igb_rxeof() at igb_rxeof+0x3f0
> igb_msix_que() at igb_msix_que+0xfa
> intr_event_execute_handlers() at intr_event_execute_handlers+0xfd
> ithread_loop() at ithread_loop+0x9e
> fork_exit() at fork_exit+0x11e
> fork_trampoline() at fork_trampoline+0xe
> --- trap 0, rip = 0, rsp = 0xffffff846384ecb0, rbp = 0 ---
> Uptime: 2h2m15s
> Dumping 1241 out of 16368 MB:..2%..11%..21%..31%..42%..51%..61%..71%..82%..91%
>
> #0  doadump (textdump=1) at /usr/src/sys/kern/kern_shutdown.c:266
> 266             if (textdump && textdump_pending) {
> (kgdb) #0  doadump (textdump=1) at /usr/src/sys/kern/kern_shutdown.c:266
> #1  0xffffffff8044af04 in kern_reboot (howto=260)
>     at /usr/src/sys/kern/kern_shutdown.c:449
> #2  0xffffffff8044b487 in panic (fmt=0x1 <Address 0x1 out of bounds>)
>     at /usr/src/sys/kern/kern_shutdown.c:637
> #3  0xffffffff80605bd0 in trap_fatal (frame=0xc, eva=<value optimized out>)
>     at /usr/src/sys/amd64/amd64/trap.c:872
> #4  0xffffffff80605f3f in trap_pfault (frame=0xffffff846384e910, usermode=0)
>     at /usr/src/sys/amd64/amd64/trap.c:789
> #5  0xffffffff806062f4 in trap (frame=0xffffff846384e910)
>     at /usr/src/sys/amd64/amd64/trap.c:463
> #6  0xffffffff805eff6f in calltrap ()
>     at /usr/src/sys/amd64/amd64/exception.S:228
> #7  0xffffffff8050f534 in ether_nh_input (m=0xfffffe012521e700)
>     at /usr/src/sys/net/if_ethersubr.c:484
> #8  0xffffffff8051a602 in netisr_dispatch_src (proto=9,
>     source=<value optimized out>, m=<value optimized out>)
>     at /usr/src/sys/net/netisr.c:1013
> #9  0xffffffff803188b0 in igb_rxeof (que=0xfffffe000a183800, count=499,
>     done=0x0) at /usr/src/sys/dev/e1000/if_igb.c:4688
> #10 0xffffffff803218da in igb_msix_que (arg=<value optimized out>)
>     at /usr/src/sys/dev/e1000/if_igb.c:1596
> #11 0xffffffff804208cd in intr_event_execute_handlers (
>     p=<value optimized out>, ie=0xfffffe000a19f100)
>     at /usr/src/sys/kern/kern_intr.c:1272
> #12 0xffffffff804220fe in ithread_loop (arg=0xfffffe000a1c6660)
>     at /usr/src/sys/kern/kern_intr.c:1285
> #13 0xffffffff8041d52e in fork_exit (
>     callout=0xffffffff80422060 <ithread_loop>, arg=0xfffffe000a1c6660,
>     frame=0xffffff846384ec00) at /usr/src/sys/kern/kern_fork.c:995
> #14 0xffffffff805f042e in fork_trampoline ()
>     at /usr/src/sys/amd64/amd64/exception.S:602
> #15 0x0000000000000000 in ?? ()
>
>
>
> --
> Meditating Guru
> Ian Freislich
> _______________________________________________
> freebsd-current_at_freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-current
> To unsubscribe, send any mail to "freebsd-current-unsubscribe_at_freebsd.org"
Received on Sat Nov 17 2012 - 15:26:59 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:40:32 UTC