Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 7 Oct 2004 15:36:18 -0700
From:      Kris Kennaway <kris@obsecurity.org>
To:        Brian Fundakowski Feldman <green@FreeBSD.org>
Cc:        Kris Kennaway <kris@obsecurity.org>
Subject:   Re: "panic: fxp_start_body: attempted use of a free mbuf!" in RELENG_5
Message-ID:  <20041007223618.GA22644@xor.obsecurity.org>
In-Reply-To: <20041007204844.GE73261@green.homeunix.org>
References:  <20041007165719.GA4023@xor.obsecurity.org> <20041007204844.GE73261@green.homeunix.org>

next in thread | previous in thread | raw e-mail | index | archive | help

--BXVAT5kNtrzKuDFl
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Thu, Oct 07, 2004 at 04:48:44PM -0400, Brian Fundakowski Feldman wrote:
> On Thu, Oct 07, 2004 at 09:57:19AM -0700, Kris Kennaway wrote:
> > Top of RELENG_5 on an smp machine:
> >=20
> > panic: fxp_start_body: attempted use of a free mbuf!
> > cpuid =3D 1
> > KDB: enter: panic
> > [thread 100042]
> > Stopped at      kdb_enter+0x30: leave
> > db> trace
> > kdb_enter(c06de69a,1,c06d47c5,ebbd2b14,c34cd320) at kdb_enter+0x30
> > panic(c06d47c5,c06c1030,4,c0499300,c3539000) at panic+0x14e
> > fxp_start_body(c3539000,0,c06d5639,4ca,c3539000) at fxp_start_body+0x462
> > fxp_start(c3539000,122,0,c3539000) at fxp_start+0x3f
> > if_start(c3539000,0,c06e7822,179,ffff8002) at if_start+0x99
> > ether_output_frame(c3539000,c38b5300,6,c4106b00,ebbd2bc8) at ether_outp=
ut_frame+0x218
> > ether_output(c3539000,c38b5300,c4106b00,c95ec210,c04fe48d) at ether_out=
put+0x43e
> > in_arpinput(c38b8700,122,c38b8700,c07656b8,c38b8700) at in_arpinput+0x6=
86
> > arpintr(c38b8700,0,c06e7c88,e5,c07656b8) at arpintr+0x104
> > netisr_processqueue(c07656b8,c0738ac0,1,c06dda24,c3462940) at netisr_pr=
ocessqueue+0x8e
> > swi_net(0,0,c06dc037,269,c0738ac0) at swi_net+0xe9
> > ithread_loop(c345d880,ebbd2d48,c06dbe2a,323,d552d9c9) at ithread_loop+0=
x172
> > fork_exit(c04f1210,c345d880,ebbd2d48) at fork_exit+0xc6
> > fork_trampoline() at fork_trampoline+0x8
> > --- trap 0x1, eip =3D 0, esp =3D 0xebbd2d7c, ebp =3D 0 ---
>=20
> Does this fix it?

I don't yet know whether this problem is repeatable, so there's no
point in testing the patch yet.  If it keeps happening, I'll try your
patch and see what it does so I can distinguish "fixed" from "null
result".

Kris

--BXVAT5kNtrzKuDFl
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (FreeBSD)

iD8DBQFBZcTiWry0BWjoQKURArg+AKCK01DOR4XjejK+BCZctodSEvBLwgCgrfht
dzasEKAM/x0CCFzRxgAsKZo=
=cK7x
-----END PGP SIGNATURE-----

--BXVAT5kNtrzKuDFl--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20041007223618.GA22644>