Re: Fatal page fault in cbq_enqueue()

[Paul Ripke <stix%stix.id.au@localhost>]

Still happening, although not as often. Maybe the hot weather helps...

I've got a core this time, on amd64 7.0_STABLE as of 2016-10-12.

(gdb) bt
#0  0xffffffff80647ff5 in cpu_reboot (howto=howto@entry=260, bootstr=bootstr@entry=0x0) at /home/netbsd/netbsd-7/src/sys/arch/amd64/amd64/machdep.c:671
#1  0xffffffff808720c2 in vpanic (fmt=fmt@entry=0xffffffff80d23a12 "trap", ap=ap@entry=0xfffffe80400057a0) at /home/netbsd/netbsd-7/src/sys/kern/subr_prf.c:340
#2  0xffffffff8087217d in panic (fmt=fmt@entry=0xffffffff80d23a12 "trap") at /home/netbsd/netbsd-7/src/sys/kern/subr_prf.c:256
#3  0xffffffff808b5476 in trap (frame=0xfffffe80400058c0) at /home/netbsd/netbsd-7/src/sys/arch/amd64/amd64/trap.c:298
#4  0xffffffff80100f46 in alltraps ()
#5  0xffffffff80179806 in _getq (q=0xfffffe810a5d7628, q=0xfffffe810a5d7628) at /home/netbsd/netbsd-7/src/sys/altq/altq_classq.h:113
#6  _rmc_dropq (cl=<optimized out>) at /home/netbsd/netbsd-7/src/sys/altq/altq_rmclass.c:1621
#7  rmc_drop_action (cl=0xfffffe811e4b4c08) at /home/netbsd/netbsd-7/src/sys/altq/altq_rmclass.c:1434
#8  rmc_queue_packet (cl=cl@entry=0xfffffe811e4b4c08, m=m@entry=0xfffffe8095f79200) at /home/netbsd/netbsd-7/src/sys/altq/altq_rmclass.c:802
#9  0xffffffff80178327 in cbq_enqueue (ifq=0xfffffe8108d09120, m=0xfffffe8095f79200, pktattr=<optimized out>) at /home/netbsd/netbsd-7/src/sys/altq/altq_cbq.c:536
#10 0xffffffff803cf62c in ifq_enqueue2 (ifp=ifp@entry=0xfffffe8108d09008, ifq=ifq@entry=0x0, m=m@entry=0xfffffe8095f79200, pktattr=pktattr@entry=0xfffffe8040005a60) at /home/netbsd/netbsd-7/src/sys/net/if.c:2227
#11 0xffffffff80471689 in sppp_output (ifp=0xfffffe8108d09008, m=0xfffffe8095f79200, dst=<optimized out>, rt=<optimized out>) at /home/netbsd/netbsd-7/src/sys/net/if_spppsubr.c:882
#12 0xffffffff80690976 in nd6_output (ifp=ifp@entry=0xfffffe8108d09008, origifp=origifp@entry=0xfffffe8108d09008, m0=m0@entry=0xfffffe8095f79200, dst=0xfffffe8108be1388, rt0=<optimized out>) at /home/netbsd/netbsd-7/src/sys/netinet6/nd6.c:2335
#13 0xffffffff80550b6f in ipf_fastroute6 (mpp=0xfffffe8040005bf8, fdp=0x0, fin=0xfffffe8040005c00, m0=0xfffffe8095f79200) at /home/netbsd/netbsd-7/src/sys/external/bsd/ipf/netinet/ip_fil_netbsd.c:1444
#14 ipf_fastroute (m0=0xfffffe8095f79200, mpp=mpp@entry=0xfffffe8040005bf8, fin=fin@entry=0xfffffe8040005c00, fdp=fdp@entry=0x0) at /home/netbsd/netbsd-7/src/sys/external/bsd/ipf/netinet/ip_fil_netbsd.c:1068
#15 0xffffffff8054fb4d in ipf_send_ip (fin=fin@entry=0xfffffe8040005d60, m=m@entry=0xfffffe8095f79200) at /home/netbsd/netbsd-7/src/sys/external/bsd/ipf/netinet/ip_fil_netbsd.c:849
#16 0xffffffff8054fda8 in ipf_send_reset (fin=fin@entry=0xfffffe8040005d60) at /home/netbsd/netbsd-7/src/sys/external/bsd/ipf/netinet/ip_fil_netbsd.c:775
#17 0xffffffff803471af in ipf_check (ctx=0xffffffff8105b560 <ipfmain>, ip=<optimized out>, hlen=<optimized out>, ifp=<optimized out>, out=0, mp=0xfffffe8040005eb0) at /home/netbsd/netbsd-7/src/sys/external/bsd/ipf/netinet/fil.c:3081
#18 0xffffffff8071d26e in pfil_run_hooks (ph=<optimized out>, mp=mp@entry=0xfffffe8040005ef8, ifp=0xfffffe8108d09008, dir=dir@entry=1) at /home/netbsd/netbsd-7/src/sys/net/pfil.c:266
#19 0xffffffff8053bfbc in ip6_input (m=0xfffffe80d9337800) at /home/netbsd/netbsd-7/src/sys/netinet6/ip6_input.c:350
#20 0xffffffff8053ca05 in ip6intr (arg=<optimized out>) at /home/netbsd/netbsd-7/src/sys/netinet6/ip6_input.c:238
#21 0xffffffff805e9eaa in softint_execute (l=<optimized out>, s=<optimized out>, si=<optimized out>) at /home/netbsd/netbsd-7/src/sys/kern/kern_softint.c:589
#22 softint_dispatch (pinned=<optimized out>, s=4) at /home/netbsd/netbsd-7/src/sys/kern/kern_softint.c:871
#23 0xffffffff8011402f in Xsoftintr ()
(gdb) f 5
#5  0xffffffff80179806 in _getq (q=0xfffffe810a5d7628, q=0xfffffe810a5d7628) at /home/netbsd/netbsd-7/src/sys/altq/altq_classq.h:113
113             if ((m0 = m->m_nextpkt) != m)
(gdb) list
108     {
109             struct mbuf  *m, *m0;
110
111             if ((m = qtail(q)) == NULL)
112                     return (NULL);
113             if ((m0 = m->m_nextpkt) != m)
114                     m->m_nextpkt = m0->m_nextpkt;
115             else
116                     qtail(q) = NULL;
117             qlen(q)--;
(gdb) p m0
$1 = (struct mbuf *) 0x0
(gdb) p m->m_hdr
$2 = {
  mh_next = 0x0,
  mh_nextpkt = 0x0,
  mh_data = 0xfffffe8095f79266 "",
  mh_owner = 0x0,
  mh_len = 62,
  mh_flags = 2,
  mh_paddr = 2516029952,
  mh_type = 2
}

That's clearly not going to work. Ideas?

-- 
Paul Ripke
"Great minds discuss ideas, average minds discuss events, small minds
 discuss people."
-- Disputed: Often attributed to Eleanor Roosevelt. 1948.