Date: Fri, 30 Jun 2017 15:46:43 +0000 From: bugzilla-noreply@freebsd.org To: freebsd-net@FreeBSD.org Subject: [Bug 220358] panic in tcp_lro_flush_all Message-ID: <bug-220358-2472-OifyIZl6XO@https.bugs.freebsd.org/bugzilla/> In-Reply-To: <bug-220358-2472@https.bugs.freebsd.org/bugzilla/> References: <bug-220358-2472@https.bugs.freebsd.org/bugzilla/>
next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D220358 oleg.nauman@gmail.com changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |oleg.nauman@gmail.com --- Comment #8 from oleg.nauman@gmail.com --- I'm observing crashes too ( CURRENT/i386 r320466 ), for example crash due to incoming SSH connection attempt: __curthread () at ./machine/pcpu.h:225 225 __asm("movl %%fs:%1,%0" : "=3Dr" (td) (kgdb) #0 __curthread () at ./machine/pcpu.h:225 #1 doadump (textdump=3D-968634112) at ../../../kern/kern_shutdown.c:318 #2 0xc06e8954 in kern_reboot (howto=3D<optimized out>) at ../../../kern/kern_shutdown.c:386 #3 0xc06e8ceb in vpanic (fmt=3D<optimized out>, ap=3D0xea5c56ec "K\336\235\300H\325\065\306\001") at ../../../kern/kern_shutdown.c:779 #4 0xc06e8bab in panic (fmt=3D0xc092e2de "%s") at ../../../kern/kern_shutdown.c:710 #5 0xc08eee71 in trap_fatal (frame=3D0xea5c584c, eva=3D<optimized out>) at ../../../i386/i386/trap.c:978 #6 0xc08eefbb in trap_pfault (frame=3D0xea5c584c, usermode=3D0, eva=3D<optimized out>) at ../../../i386/i386/trap.c:890 #7 0xc08ee5de in trap (frame=3D<optimized out>) at ../../../i386/i386/trap.c:512 #8 <signal handler called> #9 0xc6be0a1b in ?? () #10 0xc082ef73 in tcp_do_segment (m=3D<optimized out>, th=3D<optimized out>, so=3D<optimized out>, tp=3D<optimized out>, drop_hdrlen=3D<optimized ou= t>, tlen=3D<optimized out>, iptos=3D<optimized out>, ti_locked=3D<error reading variable: Cannot access memory at address 0x= 1>) at ../../../netinet/tcp_input.c:2444 #11 0xc082c3a1 in tcp_input (mp=3D<optimized out>, offp=3D<optimized out>, proto=3D<optimized out>) at ../../../netinet/tcp_input.c:1191 #12 0xc0820a98 in ip_input (m=3D0x0) at ../../../netinet/ip_input.c:823 #13 0xc07d57db in netisr_dispatch_src (proto=3D<optimized out>, source=3D<optimized out>, m=3D0xc6be0a18) at ../../../net/netisr.c:1120 #14 0xc07d5aa0 in netisr_dispatch (proto=3D1, m=3D0xc6c01800) at ../../../net/netisr.c:1211 #15 0xc07c74b2 in ether_demux (ifp=3D0xc634e800, m=3D0x0) at ../../../net/if_ethersubr.c:848 #16 0xc07c8140 in ether_input_internal (ifp=3D0xc634e800, m=3D0xc6be0a18) at ../../../net/if_ethersubr.c:637 #17 ether_nh_input (m=3D<optimized out>) at ../../../net/if_ethersubr.c:667 #18 0xc07d57db in netisr_dispatch_src (proto=3D<optimized out>, source=3D<optimized out>, m=3D0xc6be0a18) at ../../../net/netisr.c:1120 #19 0xc07d5aa0 in netisr_dispatch (proto=3D5, m=3D0xc6c01800) at ../../../net/netisr.c:1211 #20 0xc07c773a in ether_input (ifp=3D0xc634e800, m=3D0x0) at ../../../net/if_ethersubr.c:757 #21 0xc04f5058 in age_rxeof (sc=3D<optimized out>, rxrd=3D<optimized out>) at ../../../dev/age/if_age.c:2442 #22 age_rxintr (rr_prod=3D4, count=3D<optimized out>, sc=3D<optimized out>) at ../../../dev/age/if_age.c:2488 #23 age_int_task (arg=3D<optimized out>, pending=3D1) at ../../../dev/age/if_age.c:2167 #24 0xc0735bfc in taskqueue_run_locked (queue=3D0xc631a300) at ../../../kern/subr_taskqueue.c:454 #25 0xc0736ae7 in taskqueue_thread_loop (arg=3D0xc6344a6c) at ../../../kern/subr_taskqueue.c:746 #26 0xc06b8b06 in fork_exit (callout=3D0xc0736a40 <taskqueue_thread_loop>, arg=3D<optimized out>, frame=3D<optimized out>) at ../../../kern/kern_fork.c:1038 #27 <signal handler called> (kgdb) machdep.hyperthreading_allowed is set to 0 My system also reproducible panics on named reconfigure/flush/shutdown even= ts with ( partially ) similar backtrace , as well as panics caused by IPC ; for example: __curthread () at ./machine/pcpu.h:225 225 __asm("movl %%fs:%1,%0" : "=3Dr" (td) (kgdb) #0 __curthread () at ./machine/pcpu.h:225 #1 doadump (textdump=3D-968633856) at ../../../kern/kern_shutdown.c:318 #2 0xc06e88c4 in kern_reboot (howto=3D<optimized out>) at ../../../kern/kern_shutdown.c:386 #3 0xc06e8c5b in vpanic (fmt=3D<optimized out>, ap=3D0xefd5c73c "\340\334\235\300\310\370\266\306\001") at ../../../kern/kern_shutdown.c:779 #4 0xc06e8b1b in panic (fmt=3D0xc092e18e "%s") at ../../../kern/kern_shutdown.c:710 #5 0xc08eed21 in trap_fatal (frame=3D0xefd5c878, eva=3D<optimized out>) at ../../../i386/i386/trap.c:978 #6 0xc08eea38 in trap (frame=3D<optimized out>) at ../../../i386/i386/trap.c:704 #7 <signal handler called> #8 0xc6bcda1b in ?? () #9 0xc0770281 in unp_connect2 (so=3D<optimized out>, so2=3D<optimized out>, req=3D<optimized out>) at ../../../kern/uipc_usrreq.c:1497 #10 0xc076ff17 in unp_connectat (fd=3D<optimized out>, so=3D<optimized out>, nam=3D<optimized out>, td=3D<optimized out>) at ../../../kern/uipc_usrreq.c:1446 #11 0xc076d510 in unp_connect (so=3D0xc71c9400, nam=3D0xc662d500, td=3D<optimized out>) at ../../../kern/uipc_usrreq.c:1310 #12 uipc_connect (so=3D0xc71c9400, nam=3D0xc662d500, td=3D<optimized out>) at ../../../kern/uipc_usrreq.c:587 #13 0xc076a042 in kern_connectat (td=3D<optimized out>, dirfd=3D-100, fd=3D<optimized out>, sa=3D0xc662d500) at ../../../kern/uipc_syscalls.c= :505 #14 0xc0769f49 in sys_connect (td=3D0xc6bcda18, uap=3D0xc6b6f988) at ../../../kern/uipc_syscalls.c:470 #15 0xc08ef679 in syscallenter (td=3D<optimized out>) at ../../../i386/i386/../../kern/subr_syscall.c:132 #16 syscall (frame=3D<optimized out>) at ../../../i386/i386/trap.c:1103 #17 <signal handler called> #18 0x283a4747 in ?? () Backtrace stopped: Cannot access memory at address 0xbfbfe794 (kgdb) --=20 You are receiving this mail because: You are the assignee for the bug.=
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-220358-2472-OifyIZl6XO>