Date: Thu, 8 Nov 2007 09:35:39 GMT From: Stefan Lambrev <stefan.lambrev@moneybookers.com> To: freebsd-gnats-submit@FreeBSD.org Subject: kern/117913: rtfree() is being called where RTFREE_LOCKED() should be used. Message-ID: <200711080935.lA89Zd1h026284@www.freebsd.org> Resent-Message-ID: <200711080940.lA89e13B007596@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 117913
>Category: kern
>Synopsis: rtfree() is being called where RTFREE_LOCKED() should be used.
>Confidential: no
>Severity: non-critical
>Priority: medium
>Responsible: freebsd-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: sw-bug
>Submitter-Id: current-users
>Arrival-Date: Thu Nov 08 09:40:01 UTC 2007
>Closed-Date:
>Last-Modified:
>Originator: Stefan Lambrev
>Release: FreeBSD 7-BETA2
>Organization:
Moneybookers LTD
>Environment:
FreeBSD mb7.intra.net 7.0-BETA2 FreeBSD 7.0-BETA2 #7: Wed Nov 7 11:24:22 CET 2007 root@mb7.intra.net:/usr/obj/usr/src/sys/CORE i386
>Description:
rtfree() is being called where RTFREE_LOCKED() should be used.
The results is: rtfree: %p has %lu refs..
So far this happens only when the GW sends ICMP redirect messages to the host. This problem exist only in FreeBSD7.
I added kbd_backtrace to rtfree (in src/sys/net/route.c) and here is what it reports:
rtfree: 0xc74e6258 has 1 refs
KDB: stack backtrace:
db_trace_self_wrapper(c070e5d9,e59d1af0,c05efdce,c0718d8f,c06e7f6d,...) at db_trace_self_wrapper+0x26
kdb_backtrace(c0718d8f,c06e7f6d,c74e6258,1,c74e6264,...) at kdb_backtrace+0x29
rtfree(c74e6258,c6f4d570,10,0,c070a4f4,...) at rtfree+0xd5
rtredirect(e59d1bb8,e59d1ba8,0,6,e59d1b98,...) at rtredirect+0x1a3
icmp_input(c743da00,14,c0775620,e59d1c04,c054fe54,...) at icmp_input+0x4ee
ip_input(c743da00,c743da00,800,c6ef0c00,800,...) at ip_input+0x64a
netisr_dispatch(2,c743da00,10,3,0,...) at netisr_dispatch+0x6c
ether_demux(c6ef0c00,c743da00,3,0,3,...) at ether_demux+0x1d4
ether_input(c6ef0c00,c743da00,c06fbb7b,bc4,e59d1cc4,...) at ether_input+0x387
bge_intr(c6f3a000,0,c0708331,471,c6e30164,...) at bge_intr+0x7c5
ithread_loop(c6f05be0,e59d1d38,c07080a0,314,c6eea2a8,...) at ithread_loop+0x1a5
fork_exit(c0540fa0,c6f05be0,e59d1d38) at fork_exit+0xb8
fork_trampoline() at fork_trampoline+0x8
--- trap 0, eip = 0, esp = 0xe59d1d70, ebp = 0 ---
rtfree: 0xc74e6258 has 1 refs
KDB: stack backtrace:
db_trace_self_wrapper(c070e5d9,e59d1af0,c05efdce,c0718d8f,c06e7f6d,...) at db_trace_self_wrapper+0x26
kdb_backtrace(c0718d8f,c06e7f6d,c74e6258,1,c74e6264,...) at kdb_backtrace+0x29
rtfree(c74e6258,c6f4d570,10,0,c070a4f4,...) at rtfree+0xd5
rtredirect(e59d1bb8,e59d1ba8,0,6,e59d1b98,...) at rtredirect+0x1a3
icmp_input(c743c500,14,c0775620,e59d1c04,c054fe54,...) at icmp_input+0x4ee
ip_input(c743c500,c743c500,800,c6ef0c00,800,...) at ip_input+0x64a
netisr_dispatch(2,c743c500,10,3,0,...) at netisr_dispatch+0x6c
ether_demux(c6ef0c00,c743c500,3,0,3,...) at ether_demux+0x1d4
ether_input(c6ef0c00,c743c500,c06fbb7b,bc4,e59d1cc4,...) at ether_input+0x387
bge_intr(c6f3a000,0,c0708331,471,c6e30164,...) at bge_intr+0x7c5
ithread_loop(c6f05be0,e59d1d38,c07080a0,314,c6eea2a8,...) at ithread_loop+0x1a5
fork_exit(c0540fa0,c6f05be0,e59d1d38) at fork_exit+0xb8
fork_trampoline() at fork_trampoline+0x8
--- trap 0, eip = 0, esp = 0xe59d1d70, ebp = 0 ---
rtfree: 0xc74e6258 has 1 refs
KDB: stack backtrace:
db_trace_self_wrapper(c070e5d9,e59d1af0,c05efdce,c0718d8f,c06e7f6d,...) at db_trace_self_wrapper+0x26
kdb_backtrace(c0718d8f,c06e7f6d,c74e6258,1,c74e6264,...) at kdb_backtrace+0x29
rtfree(c74e6258,c6f4d570,10,0,c070a4f4,...) at rtfree+0xd5
rtredirect(e59d1bb8,e59d1ba8,0,6,e59d1b98,...) at rtredirect+0x1a3
icmp_input(c743c100,14,c0775620,e59d1c04,c054fe54,...) at icmp_input+0x4ee
ip_input(c743c100,c743c100,800,c6ef0c00,800,...) at ip_input+0x64a
netisr_dispatch(2,c743c100,10,3,0,...) at netisr_dispatch+0x6c
ether_demux(c6ef0c00,c743c100,3,0,3,...) at ether_demux+0x1d4
ether_input(c6ef0c00,c743c100,c06fbb7b,bc4,e59d1cc4,...) at ether_input+0x387
bge_intr(c6f3a000,0,c0708331,471,c6e30164,...) at bge_intr+0x7c5
ithread_loop(c6f05be0,e59d1d38,c07080a0,314,c6eea2a8,...) at ithread_loop+0x1a5
fork_exit(c0540fa0,c6f05be0,e59d1d38) at fork_exit+0xb8
fork_trampoline() at fork_trampoline+0x8
--- trap 0, eip = 0, esp = 0xe59d1d70, ebp = 0 ---
rtfree: 0xc74e6258 has 1 refs
KDB: stack backtrace:
db_trace_self_wrapper(c070e5d9,e59d1af0,c05efdce,c0718d8f,c06e7f6d,...) at db_trace_self_wrapper+0x26
kdb_backtrace(c0718d8f,c06e7f6d,c74e6258,1,c74e6264,...) at kdb_backtrace+0x29
rtfree(c74e6258,c6f4d570,10,0,c070a4f4,...) at rtfree+0xd5
rtredirect(e59d1bb8,e59d1ba8,0,6,e59d1b98,...) at rtredirect+0x1a3
icmp_input(c743ba00,14,c0775620,e59d1c04,c054fe54,...) at icmp_input+0x4ee
ip_input(c743ba00,c743ba00,800,c6ef0c00,800,...) at ip_input+0x64a
netisr_dispatch(2,c743ba00,10,3,0,...) at netisr_dispatch+0x6c
ether_demux(c6ef0c00,c743ba00,3,0,3,...) at ether_demux+0x1d4
ether_input(c6ef0c00,c743ba00,c06fbb7b,bc4,e59d1cc4,...) at ether_input+0x387
bge_intr(c6f3a000,0,c0708331,471,c6e30164,...) at bge_intr+0x7c5
ithread_loop(c6f05be0,e59d1d38,c07080a0,314,c6eea2a8,...) at ithread_loop+0x1a5
fork_exit(c0540fa0,c6f05be0,e59d1d38) at fork_exit+0xb8
fork_trampoline() at fork_trampoline+0x8
--- trap 0, eip = 0, esp = 0xe59d1d70, ebp = 0 ---
rtfree: 0xc74e6258 has 1 refs
KDB: stack backtrace:
db_trace_self_wrapper(c070e5d9,e59d1af0,c05efdce,c0718d8f,c06e7f6d,...) at db_trace_self_wrapper+0x26
kdb_backtrace(c0718d8f,c06e7f6d,c74e6258,1,c74e6264,...) at kdb_backtrace+0x29
rtfree(c74e6258,c6f4d570,10,c6dee880,e59d1b14,...) at rtfree+0xd5
rtredirect(e59d1bb8,e59d1ba8,0,6,e59d1b98,...) at rtredirect+0x1a3
icmp_input(c743b600,14,c0775620,e59d1c04,c054fe54,...) at icmp_input+0x4ee
ip_input(c743b600,c743b600,800,c6ef0c00,800,...) at ip_input+0x64a
netisr_dispatch(2,c743b600,10,3,0,...) at netisr_dispatch+0x6c
ether_demux(c6ef0c00,c743b600,3,0,3,...) at ether_demux+0x1d4
ether_input(c6ef0c00,c743b600,c06fbb7b,bc4,e59d1cc4,...) at ether_input+0x387
bge_intr(c6f3a000,0,c0708331,471,c6e30164,...) at bge_intr+0x7c5
ithread_loop(c6f05be0,e59d1d38,c07080a0,314,c6eea2a8,...) at ithread_loop+0x1a5
fork_exit(c0540fa0,c6f05be0,e59d1d38) at fork_exit+0xb8
fork_trampoline() at fork_trampoline+0x8
--- trap 0, eip = 0, esp = 0xe59d1d70, ebp = 0 ---
rtfree: 0xc74e6258 has 1 refs
KDB: stack backtrace:
db_trace_self_wrapper(c070e5d9,e59d1af0,c05efdce,c0718d8f,c06e7f6d,...) at db_trace_self_wrapper+0x26
kdb_backtrace(c0718d8f,c06e7f6d,c74e6258,1,c74e6264,...) at kdb_backtrace+0x29
rtfree(c74e6258,c6f4d570,10,0,c070a4f4,...) at rtfree+0xd5
rtredirect(e59d1bb8,e59d1ba8,0,6,e59d1b98,...) at rtredirect+0x1a3
icmp_input(c743b000,14,c0775620,e59d1c04,c054fe54,...) at icmp_input+0x4ee
ip_input(c743b000,c743b000,800,c6ef0c00,800,...) at ip_input+0x64a
netisr_dispatch(2,c743b000,10,3,0,...) at netisr_dispatch+0x6c
ether_demux(c6ef0c00,c743b000,3,0,3,...) at ether_demux+0x1d4
ether_input(c6ef0c00,c743b000,c06fbb7b,bc4,e59d1cc4,...) at ether_input+0x387
bge_intr(c6f3a000,0,c0708331,471,c6e30164,...) at bge_intr+0x7c5
ithread_loop(c6f05be0,e59d1d38,c07080a0,314,c6eea2a8,...) at ithread_loop+0x1a5
fork_exit(c0540fa0,c6f05be0,e59d1d38) at fork_exit+0xb8
fork_trampoline() at fork_trampoline+0x8
--- trap 0, eip = 0, esp = 0xe59d1d70, ebp = 0 ---
rtfree: 0xc74e6258 has 1 refs
KDB: stack backtrace:
db_trace_self_wrapper(c070e5d9,e59d1af0,c05efdce,c0718d8f,c06e7f6d,...) at db_trace_self_wrapper+0x26
kdb_backtrace(c0718d8f,c06e7f6d,c74e6258,1,c74e6264,...) at kdb_backtrace+0x29
rtfree(c74e6258,c6f4d570,10,0,c070a4f4,...) at rtfree+0xd5
rtredirect(e59d1bb8,e59d1ba8,0,6,e59d1b98,...) at rtredirect+0x1a3
icmp_input(c743ab00,14,c0775620,e59d1c04,c054fe54,...) at icmp_input+0x4ee
ip_input(c743ab00,c743ab00,800,c6ef0c00,800,...) at ip_input+0x64a
netisr_dispatch(2,c743ab00,10,3,0,...) at netisr_dispatch+0x6c
ether_demux(c6ef0c00,c743ab00,3,0,3,...) at ether_demux+0x1d4
ether_input(c6ef0c00,c743ab00,c06fbb7b,bc4,e59d1cc4,...) at ether_input+0x387
bge_intr(c6f3a000,0,c0708331,471,c6e30164,...) at bge_intr+0x7c5
ithread_loop(c6f05be0,e59d1d38,c07080a0,314,c6eea2a8,...) at ithread_loop+0x1a5
fork_exit(c0540fa0,c6f05be0,e59d1d38) at fork_exit+0xb8
fork_trampoline() at fork_trampoline+0x8
--- trap 0, eip = 0, esp = 0xe59d1d70, ebp = 0 ---
rtfree: 0xc74e6258 has 1 refs
KDB: stack backtrace:
db_trace_self_wrapper(c070e5d9,e59d1af0,c05efdce,c0718d8f,c06e7f6d,...) at db_trace_self_wrapper+0x26
kdb_backtrace(c0718d8f,c06e7f6d,c74e6258,1,c74e6264,...) at kdb_backtrace+0x29
rtfree(c74e6258,c6f4d570,10,0,c070a4f4,...) at rtfree+0xd5
rtredirect(e59d1bb8,e59d1ba8,0,6,e59d1b98,...) at rtredirect+0x1a3
icmp_input(c7439400,14,c0775620,e59d1c04,c054fe54,...) at icmp_input+0x4ee
ip_input(c7439400,c7439400,800,c6ef0c00,800,...) at ip_input+0x64a
netisr_dispatch(2,c7439400,10,3,0,...) at netisr_dispatch+0x6c
ether_demux(c6ef0c00,c7439400,3,0,3,...) at ether_demux+0x1d4
ether_input(c6ef0c00,c7439400,c06fbb7b,bc4,e59d1cc4,...) at ether_input+0x387
bge_intr(c6f3a000,0,c0708331,471,c6e30164,...) at bge_intr+0x7c5
ithread_loop(c6f05be0,e59d1d38,c07080a0,314,c6eea2a8,...) at ithread_loop+0x1a5
fork_exit(c0540fa0,c6f05be0,e59d1d38) at fork_exit+0xb8
fork_trampoline() at fork_trampoline+0x8
--- trap 0, eip = 0, esp = 0xe59d1d70, ebp = 0 ---
rtfree: 0xc74e6258 has 1 refs
KDB: stack backtrace:
db_trace_self_wrapper(c070e5d9,e59d1af0,c05efdce,c0718d8f,c06e7f6d,...) at db_trace_self_wrapper+0x26
kdb_backtrace(c0718d8f,c06e7f6d,c74e6258,1,c74e6264,...) at kdb_backtrace+0x29
rtfree(c74e6258,c6f4d570,10,0,c070a4f4,...) at rtfree+0xd5
rtredirect(e59d1bb8,e59d1ba8,0,6,e59d1b98,...) at rtredirect+0x1a3
icmp_input(c7439000,14,c0775620,e59d1c04,c054fe54,...) at icmp_input+0x4ee
ip_input(c7439000,c7439000,800,c6ef0c00,800,...) at ip_input+0x64a
netisr_dispatch(2,c7439000,10,3,0,...) at netisr_dispatch+0x6c
ether_demux(c6ef0c00,c7439000,3,0,3,...) at ether_demux+0x1d4
ether_input(c6ef0c00,c7439000,c06fbb7b,bc4,e59d1cc4,...) at ether_input+0x387
bge_intr(c6f3a000,0,c0708331,471,c6e30164,...) at bge_intr+0x7c5
ithread_loop(c6f05be0,e59d1d38,c07080a0,314,c6eea2a8,...) at ithread_loop+0x1a5
fork_exit(c0540fa0,c6f05be0,e59d1d38) at fork_exit+0xb8
fork_trampoline() at fork_trampoline+0x8
--- trap 0, eip = 0, esp = 0xe59d1d70, ebp = 0 ---
rtfree: 0xc74e6258 has 1 refs
KDB: stack backtrace:
db_trace_self_wrapper(c070e5d9,e59d1af0,c05efdce,c0718d8f,c06e7f6d,...) at db_trace_self_wrapper+0x26
kdb_backtrace(c0718d8f,c06e7f6d,c74e6258,1,c74e6264,...) at kdb_backtrace+0x29
rtfree(c74e6258,c6f4d570,10,0,c070a4f4,...) at rtfree+0xd5
rtredirect(e59d1bb8,e59d1ba8,0,6,e59d1b98,...) at rtredirect+0x1a3
icmp_input(c7438700,14,c0775620,e59d1c04,c054fe54,...) at icmp_input+0x4ee
ip_input(c7438700,c7438700,800,c6ef0c00,800,...) at ip_input+0x64a
netisr_dispatch(2,c7438700,10,3,0,...) at netisr_dispatch+0x6c
ether_demux(c6ef0c00,c7438700,3,0,3,...) at ether_demux+0x1d4
ether_input(c6ef0c00,c7438700,c06fbb7b,bc4,e59d1cc4,...) at ether_input+0x387
bge_intr(c6f3a000,0,c0708331,471,c6e30164,...) at bge_intr+0x7c5
ithread_loop(c6f05be0,e59d1d38,c07080a0,314,c6eea2a8,...) at ithread_loop+0x1a5
fork_exit(c0540fa0,c6f05be0,e59d1d38) at fork_exit+0xb8
fork_trampoline() at fork_trampoline+0x8
--- trap 0, eip = 0, esp = 0xe59d1d70, ebp = 0 ---
rtfree: 0xc74e6258 has 1 refs
KDB: stack backtrace:
db_trace_self_wrapper(c070e5d9,e59d1af0,c05efdce,c0718d8f,c06e7f6d,...) at db_trace_self_wrapper+0x26
kdb_backtrace(c0718d8f,c06e7f6d,c74e6258,1,c74e6264,...) at kdb_backtrace+0x29
rtfree(c74e6258,c6f4d570,10,e59d1b4c,e59d1b44,...) at rtfree+0xd5
rtredirect(e59d1bb8,e59d1ba8,0,6,e59d1b98,...) at rtredirect+0x1a3
icmp_input(c7438300,14,c0775620,e59d1c04,c054fe54,...) at icmp_input+0x4ee
ip_input(c7438300,c7438300,800,c6ef0c00,800,...) at ip_input+0x64a
netisr_dispatch(2,c7438300,10,3,0,...) at netisr_dispatch+0x6c
ether_demux(c6ef0c00,c7438300,3,0,3,...) at ether_demux+0x1d4
ether_input(c6ef0c00,c7438300,c06fbb7b,bc4,e59d1cc4,...) at ether_input+0x387
bge_intr(c6f3a000,0,c0708331,471,c6e30164,...) at bge_intr+0x7c5
ithread_loop(c6f05be0,e59d1d38,c07080a0,314,c6eea2a8,...) at ithread_loop+0x1a5
fork_exit(c0540fa0,c6f05be0,e59d1d38) at fork_exit+0xb8
fork_trampoline() at fork_trampoline+0x8
--- trap 0, eip = 0, esp = 0xe59d1d70, ebp = 0 ---
rtfree: 0xc74e6258 has 1 refs
KDB: stack backtrace:
db_trace_self_wrapper(c070e5d9,e59d1af0,c05efdce,c0718d8f,c06e7f6d,...) at db_trace_self_wrapper+0x26
kdb_backtrace(c0718d8f,c06e7f6d,c74e6258,1,c74e6264,...) at kdb_backtrace+0x29
rtfree(c74e6258,c6f4d570,10,0,c070a4f4,...) at rtfree+0xd5
rtredirect(e59d1bb8,e59d1ba8,0,6,e59d1b98,...) at rtredirect+0x1a3
icmp_input(c7437000,14,c0775620,e59d1c04,c054fe54,...) at icmp_input+0x4ee
ip_input(c7437000,c7437000,800,c6ef0c00,800,...) at ip_input+0x64a
netisr_dispatch(2,c7437000,10,3,0,...) at netisr_dispatch+0x6c
ether_demux(c6ef0c00,c7437000,3,0,3,...) at ether_demux+0x1d4
ether_input(c6ef0c00,c7437000,c06fbb7b,bc4,e59d1cc4,...) at ether_input+0x387
bge_intr(c6f3a000,0,c0708331,471,c6e30164,...) at bge_intr+0x7c5
ithread_loop(c6f05be0,e59d1d38,c07080a0,314,c6eea2a8,...) at ithread_loop+0x1a5
fork_exit(c0540fa0,c6f05be0,e59d1d38) at fork_exit+0xb8
fork_trampoline() at fork_trampoline+0x8
--- trap 0, eip = 0, esp = 0xe59d1d70, ebp = 0 ---
rtfree: 0xc74e6258 has 1 refs
KDB: stack backtrace:
db_trace_self_wrapper(c070e5d9,e59d1af0,c05efdce,c0718d8f,c06e7f6d,...) at db_trace_self_wrapper+0x26
kdb_backtrace(c0718d8f,c06e7f6d,c74e6258,1,c74e6264,...) at kdb_backtrace+0x29
rtfree(c74e6258,c6f4d570,10,c6dee880,0,...) at rtfree+0xd5
rtredirect(e59d1bb8,e59d1ba8,0,6,e59d1b98,...) at rtredirect+0x1a3
icmp_input(c7257b00,14,c0775620,e59d1c04,c054fe54,...) at icmp_input+0x4ee
ip_input(c7257b00,c7257b00,800,c6ef0c00,800,...) at ip_input+0x64a
netisr_dispatch(2,c7257b00,10,3,0,...) at netisr_dispatch+0x6c
ether_demux(c6ef0c00,c7257b00,3,0,3,...) at ether_demux+0x1d4
ether_input(c6ef0c00,c7257b00,c06fbb7b,bc4,e59d1cc4,...) at ether_input+0x387
bge_intr(c6f3a000,0,c0708331,471,c6e30164,...) at bge_intr+0x7c5
ithread_loop(c6f05be0,e59d1d38,c07080a0,314,c6eea2a8,...) at ithread_loop+0x1a5
fork_exit(c0540fa0,c6f05be0,e59d1d38) at fork_exit+0xb8
fork_trampoline() at fork_trampoline+0x8
--- trap 0, eip = 0, esp = 0xe59d1d70, ebp = 0 ---
rtfree: 0xc74e6258 has 1 refs
KDB: stack backtrace:
db_trace_self_wrapper(c070e5d9,e59d1af0,c05efdce,c0718d8f,c06e7f6d,...) at db_trace_self_wrapper+0x26
kdb_backtrace(c0718d8f,c06e7f6d,c74e6258,1,c74e6264,...) at kdb_backtrace+0x29
rtfree(c74e6258,c6f4d570,10,0,c070a4f4,...) at rtfree+0xd5
rtredirect(e59d1bb8,e59d1ba8,0,6,e59d1b98,...) at rtredirect+0x1a3
icmp_input(c748d500,14,c0775620,e59d1c04,c054fe54,...) at icmp_input+0x4ee
ip_input(c748d500,c748d500,800,c6ef0c00,800,...) at ip_input+0x64a
netisr_dispatch(2,c748d500,10,3,0,...) at netisr_dispatch+0x6c
ether_demux(c6ef0c00,c748d500,3,0,3,...) at ether_demux+0x1d4
ether_input(c6ef0c00,c748d500,c06fbb7b,bc4,e59d1cc4,...) at ether_input+0x387
bge_intr(c6f3a000,0,c0708331,471,c6e30164,...) at bge_intr+0x7c5
ithread_loop(c6f05be0,e59d1d38,c07080a0,314,c6eea2a8,...) at ithread_loop+0x1a5
fork_exit(c0540fa0,c6f05be0,e59d1d38) at fork_exit+0xb8
fork_trampoline() at fork_trampoline+0x8
--- trap 0, eip = 0, esp = 0xe59d1d70, ebp = 0 ---
rtfree: 0xc74e6258 has 1 refs
KDB: stack backtrace:
db_trace_self_wrapper(c070e5d9,e59d1af0,c05efdce,c0718d8f,c06e7f6d,...) at db_trace_self_wrapper+0x26
kdb_backtrace(c0718d8f,c06e7f6d,c74e6258,1,c74e6264,...) at kdb_backtrace+0x29
rtfree(c74e6258,c6f4d570,10,0,c070a4f4,...) at rtfree+0xd5
rtredirect(e59d1bb8,e59d1ba8,0,6,e59d1b98,...) at rtredirect+0x1a3
icmp_input(c748c400,14,c0775620,e59d1c04,c054fe54,...) at icmp_input+0x4ee
ip_input(c748c400,c748c400,800,c6ef0c00,800,...) at ip_input+0x64a
netisr_dispatch(2,c748c400,10,3,0,...) at netisr_dispatch+0x6c
ether_demux(c6ef0c00,c748c400,3,0,3,...) at ether_demux+0x1d4
ether_input(c6ef0c00,c748c400,c06fbb7b,bc4,e59d1cc4,...) at ether_input+0x387
bge_intr(c6f3a000,0,c0708331,471,c6e30164,...) at bge_intr+0x7c5
ithread_loop(c6f05be0,e59d1d38,c07080a0,314,c6eea2a8,...) at ithread_loop+0x1a5
fork_exit(c0540fa0,c6f05be0,e59d1d38) at fork_exit+0xb8
fork_trampoline() at fork_trampoline+0x8
--- trap 0, eip = 0, esp = 0xe59d1d70, ebp = 0 ---
rtfree: 0xc74e6258 has 1 refs
KDB: stack backtrace:
db_trace_self_wrapper(c070e5d9,e59d1af0,c05efdce,c0718d8f,c06e7f6d,...) at db_trace_self_wrapper+0x26
kdb_backtrace(c0718d8f,c06e7f6d,c74e6258,1,c74e6264,...) at kdb_backtrace+0x29
rtfree(c74e6258,c6f4d570,10,0,c070a4f4,...) at rtfree+0xd5
rtredirect(e59d1bb8,e59d1ba8,0,6,e59d1b98,...) at rtredirect+0x1a3
icmp_input(c748c000,14,c0775620,e59d1c04,c054fe54,...) at icmp_input+0x4ee
ip_input(c748c000,c748c000,800,c6ef0c00,800,...) at ip_input+0x64a
netisr_dispatch(2,c748c000,10,3,0,...) at netisr_dispatch+0x6c
ether_demux(c6ef0c00,c748c000,3,0,3,...) at ether_demux+0x1d4
ether_input(c6ef0c00,c748c000,c06fbb7b,bc4,e59d1cc4,...) at ether_input+0x387
bge_intr(c6f3a000,0,c0708331,471,c6e30164,...) at bge_intr+0x7c5
ithread_loop(c6f05be0,e59d1d38,c07080a0,314,c6eea2a8,...) at ithread_loop+0x1a5
fork_exit(c0540fa0,c6f05be0,e59d1d38) at fork_exit+0xb8
fork_trampoline() at fork_trampoline+0x8
--- trap 0, eip = 0, esp = 0xe59d1d70, ebp = 0 ---
rtfree: 0xc74e6258 has 1 refs
KDB: stack backtrace:
db_trace_self_wrapper(c070e5d9,e59d1af0,c05efdce,c0718d8f,c06e7f6d,...) at db_trace_self_wrapper+0x26
kdb_backtrace(c0718d8f,c06e7f6d,c74e6258,1,c74e6264,...) at kdb_backtrace+0x29
rtfree(c74e6258,c6f4d570,10,0,c070a4f4,...) at rtfree+0xd5
rtredirect(e59d1bb8,e59d1ba8,0,6,e59d1b98,...) at rtredirect+0x1a3
icmp_input(c748b700,14,c0775620,e59d1c04,c054fe54,...) at icmp_input+0x4ee
ip_input(c748b700,c748b700,800,c6ef0c00,800,...) at ip_input+0x64a
netisr_dispatch(2,c748b700,10,3,0,...) at netisr_dispatch+0x6c
ether_demux(c6ef0c00,c748b700,3,0,3,...) at ether_demux+0x1d4
ether_input(c6ef0c00,c748b700,c06fbb7b,bc4,e59d1cc4,...) at ether_input+0x387
bge_intr(c6f3a000,0,c0708331,471,c6e30164,...) at bge_intr+0x7c5
ithread_loop(c6f05be0,e59d1d38,c07080a0,314,c6eea2a8,...) at ithread_loop+0x1a5
fork_exit(c0540fa0,c6f05be0,e59d1d38) at fork_exit+0xb8
fork_trampoline() at fork_trampoline+0x8
--- trap 0, eip = 0, esp = 0xe59d1d70, ebp = 0 ---
rtfree: 0xc74e6258 has 1 refs
KDB: stack backtrace:
db_trace_self_wrapper(c070e5d9,e59d1af0,c05efdce,c0718d8f,c06e7f6d,...) at db_trace_self_wrapper+0x26
kdb_backtrace(c0718d8f,c06e7f6d,c74e6258,1,c74e6264,...) at kdb_backtrace+0x29
rtfree(c74e6258,c6f4d570,10,0,c070a4f4,...) at rtfree+0xd5
rtredirect(e59d1bb8,e59d1ba8,0,6,e59d1b98,...) at rtredirect+0x1a3
icmp_input(c748b100,14,c0775620,e59d1c04,c054fe54,...) at icmp_input+0x4ee
ip_input(c748b100,c748b100,800,c6ef0c00,800,...) at ip_input+0x64a
netisr_dispatch(2,c748b100,10,3,0,...) at netisr_dispatch+0x6c
ether_demux(c6ef0c00,c748b100,3,0,3,...) at ether_demux+0x1d4
ether_input(c6ef0c00,c748b100,c06fbb7b,bc4,e59d1cc4,...) at ether_input+0x387
bge_intr(c6f3a000,0,c0708331,471,c6e30164,...) at bge_intr+0x7c5
ithread_loop(c6f05be0,e59d1d38,c07080a0,314,c6eea2a8,...) at ithread_loop+0x1a5
fork_exit(c0540fa0,c6f05be0,e59d1d38) at fork_exit+0xb8
fork_trampoline() at fork_trampoline+0x8
--- trap 0, eip = 0, esp = 0xe59d1d70, ebp = 0 ---
rtfree: 0xc74e6258 has 1 refs
KDB: stack backtrace:
db_trace_self_wrapper(c070e5d9,e59d1af0,c05efdce,c0718d8f,c06e7f6d,...) at db_trace_self_wrapper+0x26
kdb_backtrace(c0718d8f,c06e7f6d,c74e6258,1,c74e6264,...) at kdb_backtrace+0x29
rtfree(c74e6258,c6f4d570,10,0,0,...) at rtfree+0xd5
rtredirect(e59d1bb8,e59d1ba8,0,6,e59d1b98,...) at rtredirect+0x1a3
icmp_input(c748a100,14,c0775620,e59d1c04,c054fe54,...) at icmp_input+0x4ee
ip_input(c748a100,c748a100,800,c6ef0c00,800,...) at ip_input+0x64a
netisr_dispatch(2,c748a100,10,3,0,...) at netisr_dispatch+0x6c
ether_demux(c6ef0c00,c748a100,3,0,3,...) at ether_demux+0x1d4
ether_input(c6ef0c00,c748a100,c06fbb7b,bc4,e59d1cc4,...) at ether_input+0x387
bge_intr(c6f3a000,0,c0708331,471,c6e30164,...) at bge_intr+0x7c5
ithread_loop(c6f05be0,e59d1d38,c07080a0,314,c6eea2a8,...) at ithread_loop+0x1a5
fork_exit(c0540fa0,c6f05be0,e59d1d38) at fork_exit+0xb8
fork_trampoline() at fork_trampoline+0x8
--- trap 0, eip = 0, esp = 0xe59d1d70, ebp = 0 ---
rtfree: 0xc74e6258 has 1 refs
KDB: stack backtrace:
db_trace_self_wrapper(c070e5d9,e59d1af0,c05efdce,c0718d8f,c06e7f6d,...) at db_trace_self_wrapper+0x26
kdb_backtrace(c0718d8f,c06e7f6d,c74e6258,1,c74e6264,...) at kdb_backtrace+0x29
rtfree(c74e6258,c6f4d570,10,0,c070a4f4,...) at rtfree+0xd5
rtredirect(e59d1bb8,e59d1ba8,0,6,e59d1b98,...) at rtredirect+0x1a3
icmp_input(c7489500,14,c0775620,e59d1c04,c054fe54,...) at icmp_input+0x4ee
ip_input(c7489500,c7489500,800,c6ef0c00,800,...) at ip_input+0x64a
netisr_dispatch(2,c7489500,10,3,0,...) at netisr_dispatch+0x6c
ether_demux(c6ef0c00,c7489500,3,0,3,...) at ether_demux+0x1d4
ether_input(c6ef0c00,c7489500,c06fbb7b,bc4,e59d1cc4,...) at ether_input+0x387
bge_intr(c6f3a000,0,c0708331,471,c6e30164,...) at bge_intr+0x7c5
ithread_loop(c6f05be0,e59d1d38,c07080a0,314,c6eea2a8,...) at ithread_loop+0x1a5
fork_exit(c0540fa0,c6f05be0,e59d1d38) at fork_exit+0xb8
fork_trampoline() at fork_trampoline+0x8
--- trap 0, eip = 0, esp = 0xe59d1d70, ebp = 0 ---
rtfree: 0xc74e6258 has 1 refs
KDB: stack backtrace:
db_trace_self_wrapper(c070e5d9,e59d1af0,c05efdce,c0718d8f,c06e7f6d,...) at db_trace_self_wrapper+0x26
kdb_backtrace(c0718d8f,c06e7f6d,c74e6258,1,c74e6264,...) at kdb_backtrace+0x29
rtfree(c74e6258,c6f4d570,10,0,c070a4f4,...) at rtfree+0xd5
rtredirect(e59d1bb8,e59d1ba8,0,6,e59d1b98,...) at rtredirect+0x1a3
icmp_input(c7488300,14,c0775620,e59d1c04,c054fe54,...) at icmp_input+0x4ee
ip_input(c7488300,c7488300,800,c6ef0c00,800,...) at ip_input+0x64a
netisr_dispatch(2,c7488300,10,3,0,...) at netisr_dispatch+0x6c
ether_demux(c6ef0c00,c7488300,3,0,3,...) at ether_demux+0x1d4
ether_input(c6ef0c00,c7488300,c06fbb7b,bc4,e59d1cc4,...) at ether_input+0x387
bge_intr(c6f3a000,0,c0708331,471,c6e30164,...) at bge_intr+0x7c5
ithread_loop(c6f05be0,e59d1d38,c07080a0,314,c6eea2a8,...) at ithread_loop+0x1a5
fork_exit(c0540fa0,c6f05be0,e59d1d38) at fork_exit+0xb8
fork_trampoline() at fork_trampoline+0x8
--- trap 0, eip = 0, esp = 0xe59d1d70, ebp = 0 ---
rtfree: 0xc74e6258 has 1 refs
KDB: stack backtrace:
db_trace_self_wrapper(c070e5d9,e59d1af0,c05efdce,c0718d8f,c06e7f6d,...) at db_trace_self_wrapper+0x26
kdb_backtrace(c0718d8f,c06e7f6d,c74e6258,1,c74e6264,...) at kdb_backtrace+0x29
rtfree(c74e6258,c6f4d570,10,0,c070a4f4,...) at rtfree+0xd5
rtredirect(e59d1bb8,e59d1ba8,0,6,e59d1b98,...) at rtredirect+0x1a3
icmp_input(c7488000,14,c0775620,e59d1c04,c054fe54,...) at icmp_input+0x4ee
ip_input(c7488000,c7488000,800,c6ef0c00,800,...) at ip_input+0x64a
netisr_dispatch(2,c7488000,10,3,0,...) at netisr_dispatch+0x6c
ether_demux(c6ef0c00,c7488000,3,0,3,...) at ether_demux+0x1d4
ether_input(c6ef0c00,c7488000,c06fbb7b,bc4,e59d1cc4,...) at ether_input+0x387
bge_intr(c6f3a000,0,c0708331,471,c6e30164,...) at bge_intr+0x7c5
ithread_loop(c6f05be0,e59d1d38,c07080a0,314,c6eea2a8,...) at ithread_loop+0x1a5
fork_exit(c0540fa0,c6f05be0,e59d1d38) at fork_exit+0xb8
fork_trampoline() at fork_trampoline+0x8
--- trap 0, eip = 0, esp = 0xe59d1d70, ebp = 0 ---
rtfree: 0xc74e6258 has 1 refs
KDB: stack backtrace:
db_trace_self_wrapper(c070e5d9,e59d1af0,c05efdce,c0718d8f,c06e7f6d,...) at db_trace_self_wrapper+0x26
kdb_backtrace(c0718d8f,c06e7f6d,c74e6258,1,c74e6264,...) at kdb_backtrace+0x29
rtfree(c74e6258,c6f4d570,10,0,c070a4f4,...) at rtfree+0xd5
rtredirect(e59d1bb8,e59d1ba8,0,6,e59d1b98,...) at rtredirect+0x1a3
icmp_input(c7487a00,14,c0775620,e59d1c04,c054fe54,...) at icmp_input+0x4ee
ip_input(c7487a00,c7487a00,800,c6ef0c00,800,...) at ip_input+0x64a
netisr_dispatch(2,c7487a00,10,3,0,...) at netisr_dispatch+0x6c
ether_demux(c6ef0c00,c7487a00,3,0,3,...) at ether_demux+0x1d4
ether_input(c6ef0c00,c7487a00,c06fbb7b,bc4,e59d1cc4,...) at ether_input+0x387
bge_intr(c6f3a000,0,c0708331,471,c6e30164,...) at bge_intr+0x7c5
ithread_loop(c6f05be0,e59d1d38,c07080a0,314,c6eea2a8,...) at ithread_loop+0x1a5
fork_exit(c0540fa0,c6f05be0,e59d1d38) at fork_exit+0xb8
fork_trampoline() at fork_trampoline+0x8
--- trap 0, eip = 0, esp = 0xe59d1d70, ebp = 0 ---
rtfree: 0xc74e6258 has 1 refs
KDB: stack backtrace:
db_trace_self_wrapper(c070e5d9,e59d1af0,c05efdce,c0718d8f,c06e7f6d,...) at db_trace_self_wrapper+0x26
kdb_backtrace(c0718d8f,c06e7f6d,c74e6258,1,c74e6264,...) at kdb_backtrace+0x29
rtfree(c74e6258,c6f4d570,10,0,c070a4f4,...) at rtfree+0xd5
rtredirect(e59d1bb8,e59d1ba8,0,6,e59d1b98,...) at rtredirect+0x1a3
icmp_input(c7487700,14,c0775620,e59d1c04,c054fe54,...) at icmp_input+0x4ee
ip_input(c7487700,c7487700,800,c6ef0c00,800,...) at ip_input+0x64a
netisr_dispatch(2,c7487700,10,3,0,...) at netisr_dispatch+0x6c
ether_demux(c6ef0c00,c7487700,3,0,3,...) at ether_demux+0x1d4
ether_input(c6ef0c00,c7487700,c06fbb7b,bc4,e59d1cc4,...) at ether_input+0x387
bge_intr(c6f3a000,0,c0708331,471,c6e30164,...) at bge_intr+0x7c5
ithread_loop(c6f05be0,e59d1d38,c07080a0,314,c6eea2a8,...) at ithread_loop+0x1a5
fork_exit(c0540fa0,c6f05be0,e59d1d38) at fork_exit+0xb8
fork_trampoline() at fork_trampoline+0x8
--- trap 0, eip = 0, esp = 0xe59d1d70, ebp = 0 ---
rtfree: 0xc74e6258 has 1 refs
KDB: stack backtrace:
db_trace_self_wrapper(c070e5d9,e59d1af0,c05efdce,c0718d8f,c06e7f6d,...) at db_trace_self_wrapper+0x26
kdb_backtrace(c0718d8f,c06e7f6d,c74e6258,1,c74e6264,...) at kdb_backtrace+0x29
rtfree(c74e6258,c6f4d570,10,0,c070a4f4,...) at rtfree+0xd5
rtredirect(e59d1bb8,e59d1ba8,0,6,e59d1b98,...) at rtredirect+0x1a3
icmp_input(c7486200,14,c0775620,e59d1c04,c054fe54,...) at icmp_input+0x4ee
ip_input(c7486200,c7486200,800,c6ef0c00,800,...) at ip_input+0x64a
netisr_dispatch(2,c7486200,10,3,0,...) at netisr_dispatch+0x6c
ether_demux(c6ef0c00,c7486200,3,0,3,...) at ether_demux+0x1d4
ether_input(c6ef0c00,c7486200,c06fbb7b,bc4,e59d1cc4,...) at ether_input+0x387
bge_intr(c6f3a000,0,c0708331,471,c6e30164,...) at bge_intr+0x7c5
ithread_loop(c6f05be0,e59d1d38,c07080a0,314,c6eea2a8,...) at ithread_loop+0x1a5
fork_exit(c0540fa0,c6f05be0,e59d1d38) at fork_exit+0xb8
fork_trampoline() at fork_trampoline+0x8
--- trap 0, eip = 0, esp = 0xe59d1d70, ebp = 0 ---
rtfree: 0xc74e6258 has 1 refs
KDB: stack backtrace:
db_trace_self_wrapper(c070e5d9,e59d1af0,c05efdce,c0718d8f,c06e7f6d,...) at db_trace_self_wrapper+0x26
kdb_backtrace(c0718d8f,c06e7f6d,c74e6258,1,c74e6264,...) at kdb_backtrace+0x29
rtfree(c74e6258,c6f4d570,10,0,c070a4f4,...) at rtfree+0xd5
rtredirect(e59d1bb8,e59d1ba8,0,6,e59d1b98,...) at rtredirect+0x1a3
icmp_input(c743f400,14,c0775620,e59d1c04,c054fe54,...) at icmp_input+0x4ee
ip_input(c743f400,c743f400,800,c6ef0c00,800,...) at ip_input+0x64a
netisr_dispatch(2,c743f400,10,3,0,...) at netisr_dispatch+0x6c
ether_demux(c6ef0c00,c743f400,3,0,3,...) at ether_demux+0x1d4
ether_input(c6ef0c00,c743f400,c06fbb7b,bc4,e59d1cc4,...) at ether_input+0x387
bge_intr(c6f3a000,0,c0708331,471,c6e30164,...) at bge_intr+0x7c5
ithread_loop(c6f05be0,e59d1d38,c07080a0,314,c6eea2a8,...) at ithread_loop+0x1a5
fork_exit(c0540fa0,c6f05be0,e59d1d38) at fork_exit+0xb8
fork_trampoline() at fork_trampoline+0x8
--- trap 0, eip = 0, esp = 0xe59d1d70, ebp = 0 ---
rtfree: 0xc74e6258 has 1 refs
KDB: stack backtrace:
db_trace_self_wrapper(c070e5d9,e59d1af0,c05efdce,c0718d8f,c06e7f6d,...) at db_trace_self_wrapper+0x26
kdb_backtrace(c0718d8f,c06e7f6d,c74e6258,1,c74e6264,...) at kdb_backtrace+0x29
rtfree(c74e6258,c6f4d570,10,0,c070a4f4,...) at rtfree+0xd5
rtredirect(e59d1bb8,e59d1ba8,0,6,e59d1b98,...) at rtredirect+0x1a3
icmp_input(c7514b00,14,c0775620,e59d1c04,c054fe54,...) at icmp_input+0x4ee
ip_input(c7514b00,c7514b00,800,c6ef0c00,800,...) at ip_input+0x64a
netisr_dispatch(2,c7514b00,10,3,0,...) at netisr_dispatch+0x6c
ether_demux(c6ef0c00,c7514b00,3,0,3,...) at ether_demux+0x1d4
ether_input(c6ef0c00,c7514b00,c06fbb7b,bc4,e59d1cc4,...) at ether_input+0x387
bge_intr(c6f3a000,0,c0708331,471,c6e30164,...) at bge_intr+0x7c5
ithread_loop(c6f05be0,e59d1d38,c07080a0,314,c6eea2a8,...) at ithread_loop+0x1a5
fork_exit(c0540fa0,c6f05be0,e59d1d38) at fork_exit+0xb8
fork_trampoline() at fork_trampoline+0x8
--- trap 0, eip = 0, esp = 0xe59d1d70, ebp = 0 ---
rtfree: 0xc74e6258 has 1 refs
KDB: stack backtrace:
db_trace_self_wrapper(c070e5d9,e59d1af0,c05efdce,c0718d8f,c06e7f6d,...) at db_trace_self_wrapper+0x26
kdb_backtrace(c0718d8f,c06e7f6d,c74e6258,1,c74e6264,...) at kdb_backtrace+0x29
rtfree(c74e6258,c6f4d570,10,c6dee880,e59d1b14,...) at rtfree+0xd5
rtredirect(e59d1bb8,e59d1ba8,0,6,e59d1b98,...) at rtredirect+0x1a3
icmp_input(c7513600,14,c0775620,e59d1c04,c054fe54,...) at icmp_input+0x4ee
ip_input(c7513600,c7513600,800,c6ef0c00,800,...) at ip_input+0x64a
netisr_dispatch(2,c7513600,10,3,0,...) at netisr_dispatch+0x6c
ether_demux(c6ef0c00,c7513600,3,0,3,...) at ether_demux+0x1d4
ether_input(c6ef0c00,c7513600,c06fbb7b,bc4,e59d1cc4,...) at ether_input+0x387
bge_intr(c6f3a000,0,c0708331,471,c6e30164,...) at bge_intr+0x7c5
ithread_loop(c6f05be0,e59d1d38,c07080a0,314,c6eea2a8,...) at ithread_loop+0x1a5
fork_exit(c0540fa0,c6f05be0,e59d1d38) at fork_exit+0xb8
fork_trampoline() at fork_trampoline+0x8
--- trap 0, eip = 0, esp = 0xe59d1d70, ebp = 0 ---
rtfree: 0xc74e6258 has 1 refs
KDB: stack backtrace:
db_trace_self_wrapper(c070e5d9,e59d1af0,c05efdce,c0718d8f,c06e7f6d,...) at db_trace_self_wrapper+0x26
kdb_backtrace(c0718d8f,c06e7f6d,c74e6258,1,c74e6264,...) at kdb_backtrace+0x29
rtfree(c74e6258,c6f4d570,10,0,c070a4f4,...) at rtfree+0xd5
rtredirect(e59d1bb8,e59d1ba8,0,6,e59d1b98,...) at rtredirect+0x1a3
icmp_input(c7512d00,14,c0775620,e59d1c04,c054fe54,...) at icmp_input+0x4ee
ip_input(c7512d00,c7512d00,800,c6ef0c00,800,...) at ip_input+0x64a
netisr_dispatch(2,c7512d00,10,3,0,...) at netisr_dispatch+0x6c
ether_demux(c6ef0c00,c7512d00,3,0,3,...) at ether_demux+0x1d4
ether_input(c6ef0c00,c7512d00,c06fbb7b,bc4,e59d1cc4,...) at ether_input+0x387
bge_intr(c6f3a000,0,c0708331,471,c6e30164,...) at bge_intr+0x7c5
ithread_loop(c6f05be0,e59d1d38,c07080a0,314,c6eea2a8,...) at ithread_loop+0x1a5
fork_exit(c0540fa0,c6f05be0,e59d1d38) at fork_exit+0xb8
fork_trampoline() at fork_trampoline+0x8
--- trap 0, eip = 0, esp = 0xe59d1d70, ebp = 0 ---
rtfree: 0xc74e6258 has 1 refs
KDB: stack backtrace:
db_trace_self_wrapper(c070e5d9,e59d1af0,c05efdce,c0718d8f,c06e7f6d,...) at db_trace_self_wrapper+0x26
kdb_backtrace(c0718d8f,c06e7f6d,c74e6258,1,c74e6264,...) at kdb_backtrace+0x29
rtfree(c74e6258,c6f4d570,10,0,c070a4f4,...) at rtfree+0xd5
rtredirect(e59d1bb8,e59d1ba8,0,6,e59d1b98,...) at rtredirect+0x1a3
icmp_input(c7512200,14,c0775620,e59d1c04,c054fe54,...) at icmp_input+0x4ee
ip_input(c7512200,c7512200,800,c6ef0c00,800,...) at ip_input+0x64a
netisr_dispatch(2,c7512200,10,3,0,...) at netisr_dispatch+0x6c
ether_demux(c6ef0c00,c7512200,3,0,3,...) at ether_demux+0x1d4
ether_input(c6ef0c00,c7512200,c06fbb7b,bc4,e59d1cc4,...) at ether_input+0x387
bge_intr(c6f3a000,0,c0708331,471,c6e30164,...) at bge_intr+0x7c5
ithread_loop(c6f05be0,e59d1d38,c07080a0,314,c6eea2a8,...) at ithread_loop+0x1a5
fork_exit(c0540fa0,c6f05be0,e59d1d38) at fork_exit+0xb8
fork_trampoline() at fork_trampoline+0x8
--- trap 0, eip = 0, esp = 0xe59d1d70, ebp = 0 ---
rtfree: 0xc74e6258 has 1 refs
KDB: stack backtrace:
db_trace_self_wrapper(c070e5d9,e59d1af0,c05efdce,c0718d8f,c06e7f6d,...) at db_trace_self_wrapper+0x26
kdb_backtrace(c0718d8f,c06e7f6d,c74e6258,1,c74e6264,...) at kdb_backtrace+0x29
rtfree(c74e6258,c6f4d570,10,0,c070a4f4,...) at rtfree+0xd5
rtredirect(e59d1bb8,e59d1ba8,0,6,e59d1b98,...) at rtredirect+0x1a3
icmp_input(c7511800,14,c0775620,e59d1c04,c054fe54,...) at icmp_input+0x4ee
ip_input(c7511800,c7511800,800,c6ef0c00,800,...) at ip_input+0x64a
netisr_dispatch(2,c7511800,10,3,0,...) at netisr_dispatch+0x6c
ether_demux(c6ef0c00,c7511800,3,0,3,...) at ether_demux+0x1d4
ether_input(c6ef0c00,c7511800,c06fbb7b,bc4,e59d1cc4,...) at ether_input+0x387
bge_intr(c6f3a000,0,c0708331,471,c6e30164,...) at bge_intr+0x7c5
ithread_loop(c6f05be0,e59d1d38,c07080a0,314,c6eea2a8,...) at ithread_loop+0x1a5
fork_exit(c0540fa0,c6f05be0,e59d1d38) at fork_exit+0xb8
fork_trampoline() at fork_trampoline+0x8
--- trap 0, eip = 0, esp = 0xe59d1d70, ebp = 0 ---
rtfree: 0xc74e6258 has 1 refs
KDB: stack backtrace:
db_trace_self_wrapper(c070e5d9,e59d1af0,c05efdce,c0718d8f,c06e7f6d,...) at db_trace_self_wrapper+0x26
kdb_backtrace(c0718d8f,c06e7f6d,c74e6258,1,c74e6264,...) at kdb_backtrace+0x29
rtfree(c74e6258,c6f4d570,10,0,c070a4f4,...) at rtfree+0xd5
rtredirect(e59d1bb8,e59d1ba8,0,6,e59d1b98,...) at rtredirect+0x1a3
icmp_input(c7511400,14,c0775620,e59d1c04,c054fe54,...) at icmp_input+0x4ee
ip_input(c7511400,c7511400,800,c6ef0c00,800,...) at ip_input+0x64a
netisr_dispatch(2,c7511400,10,3,0,...) at netisr_dispatch+0x6c
ether_demux(c6ef0c00,c7511400,3,0,3,...) at ether_demux+0x1d4
ether_input(c6ef0c00,c7511400,c06fbb7b,bc4,e59d1cc4,...) at ether_input+0x387
bge_intr(c6f3a000,0,c0708331,471,c6e30164,...) at bge_intr+0x7c5
ithread_loop(c6f05be0,e59d1d38,c07080a0,314,c6eea2a8,...) at ithread_loop+0x1a5
fork_exit(c0540fa0,c6f05be0,e59d1d38) at fork_exit+0xb8
fork_trampoline() at fork_trampoline+0x8
--- trap 0, eip = 0, esp = 0xe59d1d70, ebp = 0 ---
rtfree: 0xc74e6258 has 1 refs
KDB: stack backtrace:
db_trace_self_wrapper(c070e5d9,e59d1af0,c05efdce,c0718d8f,c06e7f6d,...) at db_trace_self_wrapper+0x26
kdb_backtrace(c0718d8f,c06e7f6d,c74e6258,1,c74e6264,...) apanic: sched_priority: invalid priority 224: nice 0, ticks 21273056 ftick 15171 ltick 26026 tick pri 44
cpuid = 2
KDB: enter: panic
[thread pid 712 tid 100074 ]
Stopped at kdb_enter+0x32: leave
>How-To-Repeat:
set for your RELENG_7 host, default gateway IP that sits on carp interface.
create a shorter route (for the host) to another network (using second local gateway for example), but introduce this route only on the carp gateway.
Every time when the host try to access this network, the gateway will send icmp type 5 redirect message, which will be ignored by the host, beacuese it's come from the IP of the network card of the GW instead of the IP of the carp interface.
I can trigger the problem just by redirecting all syslogd traffic to remote syslogd that leaves in this new network.
>Fix:
Because of the BUG(?) of carp, shorter routes are not added on the host, but instead
if (error)
goto done;
on line 345 of src/sys/net/route.c is triggered.
which calls:
if (rt)
rtfree(rt);
At this time rtfree is still locked (I'm not sure why, may be a race, may be not even checked)
So the proper solution is to check if rt is locked before calling rtfree(rt)?
>Release-Note:
>Audit-Trail:
>Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200711080935.lA89Zd1h026284>