re: port-sparc/40629: kernel panic under high network load using pf (and ipv6)

[Hisashi T Fujinaka <htodd%twofifty.com@localhost>]

The following reply was made to PR port-sparc/40629; it has been noted by GNATS.

From: Hisashi T Fujinaka <htodd%twofifty.com@localhost>
To: matthew green <mrg%eterna.com.au@localhost>
Cc: gnats-bugs%NetBSD.org@localhost, port-sparc-maintainer%NetBSD.org@localhost,
        gnats-admin%NetBSD.org@localhost, netbsd-bugs%NetBSD.org@localhost
Subject: re: port-sparc/40629: kernel panic under high network load using pf
 (and ipv6)
Date: Thu, 19 Mar 2009 06:33:48 -0700 (PDT)

 Well, it died again and this is all I got. The disk subsystem appears to
 be hosed and "w" and "sync" didn't do much more than dump more.
 
 trap type 0x7: pc=0xf010d49c npc=0xf010d4a0 psr=41101bc0<EF,S,PS>
 kernel: alignment fault trap
 Stopped in pid 1167040718.1 
(b^E^E^E^9q5]E^E^E^E^E^E^5E^5^f$aE^5zaE]8E]E^E^:5E^:
 
5Z819@E^9S95zi5xq9E^eE^E]E^EE~E^E^E^FQE_E^99E^9E^:.E^E^E^E^E^E^E^E^E^E^E^E^E^EEE
 
^E^E^E^E^E^E^E^E_E^E^wE^E^IE^E^E^:@E^5`E^5E^E^E^E^E^E^E^E^E^::E^E^E^E^E^E`E^E^E^
 eE]E]E]E]EE^E^E^ZXE^E^E^E^E^5]E^E^E^E^E^E^5E^5^f$cq:):gE^8 
E^E^E^:5E^:5Z8):g8Q9T
 
5zi9ky:hE^=E^E^E^EE^E^E^E^G^EE^9A:(E^:E^8E^E^E^E^E^E^E^E^E^E^E^E^E^EE9E^E^E^E^E^
 
E^E^E^E_[E^E^E^E^E^E^E^:E^5`E^5E^E^E^E^E^E^E^E^E^::E^E^E^E^E^E~E^E^E^eE^E^E^O~E^
 
E^E^Zc^E^E^E^9A5]E^E^E^E^E^E^5E^5^E^E^5zaE]8E]E^E^:5E^:5Z8)9E^9U5zi5xq:E^eLE^E]E
 ^EE~E^E^E^F^EE^99) at   netbsd:uvm_fault_internal+0x5c: ld              [%o0 + 0
 x20], %g1
 db> bt
 uvm_fault_internal(0x39fc63e1, 0x458f5000, 0x1, 0x0, 0xf05b9238, 0xc) at 
netbsd:mem_access_fault4m+0x4f0
 mem_access_fault4m(0x9, 0x126, 0x458f5ef4, 0xf02885c8, 0x1, 0xe) at 0xf0006254
 0xf0006254(0xf02d27d0, 0xb3, 0xb4, 0xb3, 0x41001fe4, 0x41001fe4) at 
netbsd:timer_tick+0x18
 timer_tick(0x458f5ef0, 0x0, 0x8, 0x2, 0x0, 0x205752) at netbsd:hardclock+0x20
 hardclock(0xf02887b0, 0x7ffffc00, 0x1105da2b, 0x7abb, 0xffff, 0xf4796000) at 
netbsd:clockintr_4m+0x30
 clockintr_4m(0x1, 0xf01e596c, 0xa00, 0x418010e0, 0x1, 0x0) at 
netbsd:sparc_interrupt44c+0x128
 sparc_interrupt44c(0xf472e9ec, 0xf472ebe0, 0xf139fcc7, 0x0, 0xf47d9a8f, 
0xf472e9f0) at netbsd:pf_change_a
 pf_change_a(0x1, 0x28, 0xffff8d57, 0xf472e9c0, 0xf05b9238, 0xc) at 
netbsd:pf_test_state_tcp+0xb48
 pf_test_state_tcp(0xf472ebec, 0x1, 0xf0567e00, 0x1, 0xfc00, 0x0) at 
netbsd:pf_test+0x9d4
 pf_test(0x1, 0xf079b148, 0xf472eccc, 0x0, 0x6, 0x1) at 
netbsd:pfil4_wrapper+0x34 
 pfil4_wrapper(0x0, 0xf472eccc, 0xf3a9d408, 0x1, 0x0, 0x4) at 
netbsd:pfil_run_hooks+0x84
 pfil_run_hooks(0xf05227c0, 0xf472ed84, 0xf3a9d408, 0x1, 0x414010a6, 
0x41401fa6) at netbsd:ip_input+0x284
 ip_input(0xf079b148, 0x0, 0xf3a9d408, 0x1, 0x1, 0xf02c5f50) at 
netbsd:ipintr+0x64
 ipintr(0xf02c5c00, 0xf079b100, 0x0, 0x440, 0xf3a9d6d0, 0xfffffac3) at 
netbsd:softint_overlay+0x1e8
 softint_overlay(0xf3a9d6e0, 0xa4f3, 0x8, 0x2, 0xf3a9f040, 0x40) at 
netbsd:lwp_userret+0x1c8
 lwp_userret(0xf46d35e0, 0xfe029010, 0x0, 0xffffffff, 0x0, 0x0) at 
netbsd:trap+0x1c8
 trap(0xfffffffe, 0xf47d91f8, 0x202e12cc, 0xf472efb0, 0x201782a0, 0xf0002000) 
at 0xf0006434
 db> w 
 Nothing written.
 db> q 
 No such command: q
 db> ? 
 Bad character
 ?
 db> help
 b               d               machine         s               trace
 break           delete          match           search          until
 bt              dmesg           next            set             w
 c               dwatch          p               show            watch
 call            examine         print           sifting         whatis
 callout         help            ps              step            write
 continue        kill            reboot          sync            x
 db> sync
 syncing disks... trap type 0x7: pc=0xf010d49c npc=0xf010d4a0 
psr=41101fc0<EF,S,PS>
 kernel: alignment fault trap
 Stopped in pid 1167040718.1 
(b^E^E^E^9q5]E^E^E^E^E^E^5E^5^f$aE^5zaE]8E]E^E^:5E^:
 
5Z819@E^9S95zi5xq9E^eE^E]E^EE~E^E^E^FQE_E^99E^9E^:.E^E^E^E^E^E^E^E^E^E^E^E^E^EEE
 
^E^E^E^E^E^E^E^E_E^E^wE^E^IE^E^E^:@E^5`E^5E^E^E^E^E^E^E^E^E^::E^E^E^E^E^E`E^E^E^
 eE]E]E]E]EE^E^E^ZXE^E^E^E^E^5]E^E^E^E^E^E^5E^5^f$cq:):gE^8 
E^E^E^:5E^:5Z8):g8Q9T
 
5zi9ky:hE^=E^E^E^EE^E^E^E^G^EE^9A:(E^:E^8E^E^E^E^E^E^E^E^E^E^E^E^E^EE9E^E^E^E^E^
 
E^E^E^E_[E^E^E^E^E^E^E^:E^5`E^5E^E^E^E^E^E^E^E^E^::E^E^E^E^E^E~E^E^E^eE^E^E^O~E^
 
E^E^Zc^E^E^E^9A5]E^E^E^E^E^E^5E^5^E^E^5zaE]8E]E^E^:5E^:5Z8)9E^9U5zi5xq:E^eLE^E]E
 ^EE~E^E^E^F^EE^99) at   netbsd:uvm_fault_internal+0x5c: ld              [%o0 + 0
 x20], %g1
 db> sync
 Frame pointer is at 0xf0287438
 Call traceback:
    pc = 0xf020c0cc  args = (0xffffffff, 0x63, 0x1, 0x2, 0xf0298c00, 
0xf0287624, 0xf02874a0) fp = 0xf02874a0
    pc = 0xf00793e4  args = (0x100, 0x0, 0xf02cc000, 0x2, 0x73, 0xf0242944, 
0xf0287510) fp = 0xf0287510
    pc = 0xf0079bc4  args = (0xf02876a8, 0x0, 0x10, 0xf02875d8, 0xf02876a8, 
0x0, 0xf0287578) fp = 0xf0287578
    pc = 0xf0079e74  args = (0xf028c8bc, 0xf0272160, 0x2b, 0x20, 0x3f, 
0xf02876a8, 0xf0287660) fp = 0xf0287660
    pc = 0xf007d69c  args = (0xf010d4a0, 0x0, 0x1, 0xf47d9395, 0x73, 
0xf0287728, 0xf02876e0) fp = 0xf02876e0
    pc = 0xf02161b4  args = (0xf02d8000, 0x0, 0x60, 0x18, 0xf0287a50, 
0xf0287860, 0xf0287750) fp = 0xf0287750
    pc = 0xf0214814  args = (0xf0287800, 0xf02879a0, 0xf010d49c, 0xf010d4a0, 
0xf02878c8, 0xf00, 0xf0287868) fp = 0xf0287868
    pc = 0xf0006434  args = (0x7, 0x41101fc0, 0xf010d49c, 0xf02879a0, 
0xf0287eb0, 0x0, 0xf0287940) fp = 0xf0287940
    pc = 0xf01ea848  args = (0x39fc63e1, 0x17, 0x17, 0x38e9a000, 0x73, 
0xf0242944, 0xf02879f0) fp = 0xf02879f0
    pc = 0xf02142cc  args = (0x39fc63e1, 0x38e9a000, 0x1, 0x0, 0xf0288000, 
0x54, 0xf0287b30) fp = 0xf0287b30
    pc = 0xf0006254  args = (0x9, 0x126, 0x38e9aa00, 0xf0287c70, 0x3f, 0xe, 
0xf0287c10) fp = 0xf0287c10
    pc = 0xf0151578  args = (0x0, 0x0, 0xf46d35e0, 0x0, 0x41401fe4, 0x41401fe4, 
0xf0287cc0) fp = 0xf0287cc0
    pc = 0xf0160e4c  args = (0x38e9aa00, 0x5, 0x0, 0x0, 0xf0287dd8, 0xf0287e44, 
0xf0287d28) fp = 0xf0287d28
    pc = 0xf01af578  args = (0xf02658d0, 0x1, 0x17, 0x0, 0x0, 0xf00, 
0xf0287d90) fp = 0xf0287d90
    pc = 0xf020c148  args = (0xf46d35e0, 0x63, 0x0, 0x0, 0xf0287eb0, 0x0, 
0xf0287df8) fp = 0xf0287df8
    pc = 0xf00793e4  args = (0x100, 0x0, 0xf02cc000, 0x2, 0x73, 0xf0242944, 
0xf0287e68) fp = 0xf0287e68
    pc = 0xf0079bc4  args = (0xf0288000, 0x0, 0xffffffff, 0xf0287f30, 
0xf0288000, 0x54, 0xf0287ed0) fp = 0xf0287ed0
    pc = 0xf0079e74  args = (0xf028c8bc, 0xf028c8d8, 0xf0287fb8, 0xf0079e30, 
0x3f, 0xf0288000, 0xf0287fb8) fp = 0xf0287fb8
    pc = 0xf007d69c  args = (0xf010d4a0, 0x0, 0x1, 0xf47d9395, 0x73, 
0xf0288080, 0xf0288038) fp = 0xf0288038
 
 dumping to dev 7,1 offset 377867
 dump dma0: error: csr=a4400212<ERR,DRAINING=0,IEN,ENDMA,BURST=0,FASTER,ALOADED>
 esp0: DMA error; resetting
 sd0: async, 8-bit transfers
 i/o error
 sd0(esp0:0:3:0): polling command not done
 panic: scsipi_execute_xs
 Stopped in pid 1167040718.1 
(b^E^E^E^9q5]E^E^E^E^E^E^5E^5^f$aE^5zaE]8E]E^E^:5E^:
 
5Z819@E^9S95zi5xq9E^eE^E]E^EE~E^E^E^FQE_E^99E^9E^:.E^E^E^E^E^E^E^E^E^E^E^E^E^EEE
 
^E^E^E^E^E^E^E^E_E^E^wE^E^IE^E^E^:@E^5`E^5E^E^E^E^E^E^E^E^E^::E^E^E^E^E^E`E^E^E^
 eE]E]E]E]EE^E^E^ZXE^E^E^E^E^5]E^E^E^E^E^E^5E^5^f$cq:):gE^8 
E^E^E^:5E^:5Z8):g8Q9T
 
5zi9ky:hE^=E^E^E^EE^E^E^E^G^EE^9A:(E^:E^8E^E^E^E^E^E^E^E^E^E^E^E^E^EE9E^E^E^E^E^
 
E^E^E^E_[E^E^E^E^E^E^E^:E^5`E^5E^E^E^E^E^E^E^E^E^::E^E^E^E^E^E~E^E^E^eE^E^E^O~E^
 
E^E^Zc^E^E^E^9A5]E^E^E^E^E^E^5E^5^E^E^5zaE]8E]E^E^:5E^:5Z8)9E^9U5zi5xq:E^eLE^E]E
 ^EE~E^E^E^F^EE^99) at   netbsd:cpu_Debugger+0x4:        or              %o7, 
%g0
 , %g1
 db> reboot
 rebooting
 
 Resetting ...
 
 SPARCclassic, No Keyboard
 ROM Rev. 2.12, 72 MB memory installed, Serial #150133.
 Ethernet address 8:0:20:4:c5:75, Host ID: 80024a75.