Bug 166940 - [ipfilter] [panic] Double fault in kern 8.2
Summary: [ipfilter] [panic] Double fault in kern 8.2
Status: Open
Alias: None
Product: Base System
Classification: Unclassified
Component: kern (show other bugs)
Version: Unspecified
Hardware: Any Any
: Normal Affects Only Me
Assignee: freebsd-bugs (Nobody)
URL:
Keywords: crash
Depends on:
Blocks:
 
Reported: 2012-04-14 10:30 UTC by Igor M
Modified: 2022-10-17 12:18 UTC (History)
1 user (show)

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Igor M 2012-04-14 10:30:10 UTC
sev-77# kgdb  /boot/kernel/kernel /var/crash/vmcore.3    
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd"...

Unread portion of the kernel message buffer:

Fatal double fault:
eip = 0xc04d19d8
esp = 0xe7e0dfd0
ebp = 0xe7e0e104
cpuid = 0; apic id = 00
panic: double fault
cpuid = 0
KDB: stack backtrace:
#0 0xc07a7507 at kdb_backtrace+0x47
#1 0xc07785c7 at panic+0x117
#2 0xc0a34cfb at dblfault_handler+0x9b
Uptime: 13m40s
Physical memory: 2034 MB
Dumping 206 MB: 191 175 159 143 127 111 95 79 63 47 31 15

#0  doadump () at pcpu.h:231
231     pcpu.h: No such file or directory.
        in pcpu.h
(kgdb) bt
#0  doadump () at pcpu.h:231
#1  0xc0778363 in boot (howto=260) at ../../../kern/kern_shutdown.c:419
#2  0xc0778600 in panic (fmt=Variable "fmt" is not available.
) at ../../../kern/kern_shutdown.c:592
#3  0xc0a34cfb in dblfault_handler () at ../../../i386/i386/trap.c:979
#4  0xc04d19d8 in fr_checkstate (fin=0xe7e0e13c, passp=0xe7e0e138)
    at ../../../contrib/ipfilter/netinet/ip_state.c:2700
#5  0xc04b57d0 in fr_check (ip=0xc58ece48, hlen=20, ifp=0xc576e400, out=1, mp=0xe7e0e244)
    at ../../../contrib/ipfilter/netinet/fil.c:2591
#6  0xc04b852f in fr_check_wrapper (arg=0x0, mp=0xe7e0e244, ifp=0xc576e400, dir=2)
    at ../../../contrib/ipfilter/netinet/ip_fil_freebsd.c:186
#7  0xc08321b8 in pfil_run_hooks (ph=0xc0bdaf60, mp=0xe7e0e2b4, ifp=0xc576e400, dir=2, inp=0xc63bbdc0)
    at ../../../net/pfil.c:82
#8  0xc086b005 in ip_output (m=0xc58ece00, opt=0x0, ro=0xe7e0e2bc, flags=Variable "flags" is not available.
) at ../../../netinet/ip_output.c:511
#9  0xc08d38d1 in tcp_output (tp=0xc6f3b768) at ../../../netinet/tcp_output.c:1206
#10 0xc08d66c8 in tcp_mtudisc (inp=0xc63bbdc0, errno=0) at tcp_offload.h:282
#11 0xc08d39c1 in tcp_output (tp=0xc6f3b768) at ../../../netinet/tcp_output.c:1267
#12 0xc08d66c8 in tcp_mtudisc (inp=0xc63bbdc0, errno=0) at tcp_offload.h:282
#13 0xc08d39c1 in tcp_output (tp=0xc6f3b768) at ../../../netinet/tcp_output.c:1267
#14 0xc08d66c8 in tcp_mtudisc (inp=0xc63bbdc0, errno=0) at tcp_offload.h:282
#15 0xc08d39c1 in tcp_output (tp=0xc6f3b768) at ../../../netinet/tcp_output.c:1267
#16 0xc08d66c8 in tcp_mtudisc (inp=0xc63bbdc0, errno=0) at tcp_offload.h:282
#17 0xc08d39c1 in tcp_output (tp=0xc6f3b768) at ../../../netinet/tcp_output.c:1267
#18 0xc08d66c8 in tcp_mtudisc (inp=0xc63bbdc0, errno=0) at tcp_offload.h:282
#19 0xc08d39c1 in tcp_output (tp=0xc6f3b768) at ../../../netinet/tcp_output.c:1267
#20 0xc08d66c8 in tcp_mtudisc (inp=0xc63bbdc0, errno=0) at tcp_offload.h:282
#21 0xc08d39c1 in tcp_output (tp=0xc6f3b768) at ../../../netinet/tcp_output.c:1267
#22 0xc08d66c8 in tcp_mtudisc (inp=0xc63bbdc0, errno=0) at tcp_offload.h:282
#23 0xc08d39c1 in tcp_output (tp=0xc6f3b768) at ../../../netinet/tcp_output.c:1267
#24 0xc08d66c8 in tcp_mtudisc (inp=0xc63bbdc0, errno=0) at tcp_offload.h:282
#25 0xc08d39c1 in tcp_output (tp=0xc6f3b768) at ../../../netinet/tcp_output.c:1267
#26 0xc08d66c8 in tcp_mtudisc (inp=0xc63bbdc0, errno=0) at tcp_offload.h:282
#27 0xc08d39c1 in tcp_output (tp=0xc6f3b768) at ../../../netinet/tcp_output.c:1267
#28 0xc08d66c8 in tcp_mtudisc (inp=0xc63bbdc0, errno=0) at tcp_offload.h:282
#29 0xc08d39c1 in tcp_output (tp=0xc6f3b768) at ../../../netinet/tcp_output.c:1267
#30 0xc08d66c8 in tcp_mtudisc (inp=0xc63bbdc0, errno=0) at tcp_offload.h:282
---Type <return> to continue, or q <return> to quit---
#31 0xc08d39c1 in tcp_output (tp=0xc6f3b768) at ../../../netinet/tcp_output.c:1267
#32 0xc08d66c8 in tcp_mtudisc (inp=0xc63bbdc0, errno=0) at tcp_offload.h:282
#33 0xc08d39c1 in tcp_output (tp=0xc6f3b768) at ../../../netinet/tcp_output.c:1267
#34 0xc08d66c8 in tcp_mtudisc (inp=0xc63bbdc0, errno=0) at tcp_offload.h:282
#35 0xc08d39c1 in tcp_output (tp=0xc6f3b768) at ../../../netinet/tcp_output.c:1267
#36 0xc08d66c8 in tcp_mtudisc (inp=0xc63bbdc0, errno=0) at tcp_offload.h:282
#37 0xc08d39c1 in tcp_output (tp=0xc6f3b768) at ../../../netinet/tcp_output.c:1267
#38 0xc08d66c8 in tcp_mtudisc (inp=0xc63bbdc0, errno=0) at tcp_offload.h:282
#39 0xc08d39c1 in tcp_output (tp=0xc6f3b768) at ../../../netinet/tcp_output.c:1267
#40 0xc08d66c8 in tcp_mtudisc (inp=0xc63bbdc0, errno=0) at tcp_offload.h:282
#41 0xc08d39c1 in tcp_output (tp=0xc6f3b768) at ../../../netinet/tcp_output.c:1267
#42 0xc08d66c8 in tcp_mtudisc (inp=0xc63bbdc0, errno=0) at tcp_offload.h:282
#43 0xc08d39c1 in tcp_output (tp=0xc6f3b768) at ../../../netinet/tcp_output.c:1267
#44 0xc08d66c8 in tcp_mtudisc (inp=0xc63bbdc0, errno=0) at tcp_offload.h:282
#45 0xc08d39c1 in tcp_output (tp=0xc6f3b768) at ../../../netinet/tcp_output.c:1267
#46 0xc08d66c8 in tcp_mtudisc (inp=0xc63bbdc0, errno=0) at tcp_offload.h:282
#47 0xc08d39c1 in tcp_output (tp=0xc6f3b768) at ../../../netinet/tcp_output.c:1267
#48 0xc08d66c8 in tcp_mtudisc (inp=0xc63bbdc0, errno=0) at tcp_offload.h:282
#49 0xc08d39c1 in tcp_output (tp=0xc6f3b768) at ../../../netinet/tcp_output.c:1267
#50 0xc08d66c8 in tcp_mtudisc (inp=0xc63bbdc0, errno=0) at tcp_offload.h:282
#51 0xc08d39c1 in tcp_output (tp=0xc6f3b768) at ../../../netinet/tcp_output.c:1267
#52 0xc08d66c8 in tcp_mtudisc (inp=0xc63bbdc0, errno=0) at tcp_offload.h:282
#53 0xc08d39c1 in tcp_output (tp=0xc6f3b768) at ../../../netinet/tcp_output.c:1267
#54 0xc08d66c8 in tcp_mtudisc (inp=0xc63bbdc0, errno=0) at tcp_offload.h:282
#55 0xc08d39c1 in tcp_output (tp=0xc6f3b768) at ../../../netinet/tcp_output.c:1267
#56 0xc08dfb7a in tcp_usr_send (so=0xc6e5c19c, flags=0, m=0xc608fe00, nam=0x0, control=0x0, td=0xc5fd92d0)
    at tcp_offload.h:282
#57 0xc07e1276 in kern_sendfile (td=0xc5fd92d0, uap=0xe7e0fcec, hdr_uio=0xc62b0bc0, trl_uio=0x0, compat=0)
    at ../../../kern/uipc_syscalls.c:2195
#58 0xc07e1641 in do_sendfile (td=0xc5fd92d0, uap=0xe7e0fcec, compat=0) at ../../../kern/uipc_syscalls.c:1782
#59 0xc07e16e3 in sendfile (td=0xc5fd92d0, uap=0xe7e0fcec) at ../../../kern/uipc_syscalls.c:1753
#60 0xc07b3239 in syscallenter (td=0xc5fd92d0, sa=0xe7e0fce4) at ../../../kern/subr_trap.c:315
#61 0xc0a352d4 in syscall (frame=0xe7e0fd28) at ../../../i386/i386/trap.c:1061
#62 0xc0a1c2e1 in Xint0x80_syscall () at ../../../i386/i386/exception.s:264
#63 0x00000033 in ?? ()
Previous frame inner to this frame (corrupt stack?)
(kgdb)

How-To-Repeat: repeats every 5-30 min
Comment 1 Mark Linimon freebsd_committer freebsd_triage 2012-04-23 04:12:58 UTC
Responsible Changed
From-To: freebsd-i386->freebsd-net

reclassify.
Comment 2 Andrey Zonov 2012-04-23 07:05:40 UTC
Hi,

Try my patch from this PR [1].

[1] http://www.freebsd.org/cgi/query-pr.cgi?pr=kern/155585

-- 
Andrey Zonov
Comment 3 Cy Schubert freebsd_committer freebsd_triage 2013-07-03 06:23:30 UTC
Responsible Changed
From-To: freebsd-net->cy

Mine.
Comment 4 Eitan Adler freebsd_committer freebsd_triage 2017-12-31 07:59:14 UTC
For bugs matching the following criteria:

Status: In Progress Changed: (is less than) 2014-06-01

Reset to default assignee and clear in-progress tags.

Mail being skipped
Comment 5 Graham Perrin freebsd_committer freebsd_triage 2021-10-11 01:31:22 UTC
> 8.2

With 11.4 end of life, is this still an issue?
Comment 6 Graham Perrin freebsd_committer freebsd_triage 2022-10-17 12:18:06 UTC
Keyword: 

    crash

– in lieu of summary line prefix: 

    [panic]

* bulk change for the keyword
* summary lines may be edited manually (not in bulk). 

Keyword descriptions and search interface: 

    <https://bugs.freebsd.org/bugzilla/describekeywords.cgi>