From owner-freebsd-bugs@FreeBSD.ORG Sun Apr 17 17:00:37 2005 Return-Path: Delivered-To: freebsd-bugs@hub.freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 30BC316A4CE for ; Sun, 17 Apr 2005 17:00:37 +0000 (GMT) Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id DFF8443D3F for ; Sun, 17 Apr 2005 17:00:36 +0000 (GMT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.13.3/8.13.3) with ESMTP id j3HH0a6h027067 for ; Sun, 17 Apr 2005 17:00:36 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.13.3/8.13.1/Submit) id j3HH0ao0027066; Sun, 17 Apr 2005 17:00:36 GMT (envelope-from gnats) Resent-Date: Sun, 17 Apr 2005 17:00:36 GMT Resent-Message-Id: <200504171700.j3HH0ao0027066@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, Ivan Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id A30AB16A4CE for ; Sun, 17 Apr 2005 16:59:02 +0000 (GMT) Received: from www.freebsd.org (www.freebsd.org [216.136.204.117]) by mx1.FreeBSD.org (Postfix) with ESMTP id 7523043D2D for ; Sun, 17 Apr 2005 16:59:02 +0000 (GMT) (envelope-from nobody@FreeBSD.org) Received: from www.freebsd.org (localhost [127.0.0.1]) by www.freebsd.org (8.13.1/8.13.1) with ESMTP id j3HGx2RB058145 for ; Sun, 17 Apr 2005 16:59:02 GMT (envelope-from nobody@www.freebsd.org) Received: (from nobody@localhost) by www.freebsd.org (8.13.1/8.13.1/Submit) id j3HGx29F058144; Sun, 17 Apr 2005 16:59:02 GMT (envelope-from nobody) Message-Id: <200504171659.j3HGx29F058144@www.freebsd.org> Date: Sun, 17 Apr 2005 16:59:02 GMT From: Ivan To: freebsd-gnats-submit@FreeBSD.org X-Send-Pr-Version: www-2.3 Subject: kern/80035: netgraph is causing crash (free()->panic) with mpd X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 17 Apr 2005 17:00:37 -0000 >Number: 80035 >Category: kern >Synopsis: netgraph is causing crash (free()->panic) with mpd >Confidential: no >Severity: serious >Priority: medium >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Sun Apr 17 17:00:36 GMT 2005 >Closed-Date: >Last-Modified: >Originator: Ivan >Release: 5.4-RC2 >Organization: Micron-Media >Environment: FreeBSD micron-media.ru 5.4-RC2 FreeBSD 5.4-RC2 #6: Tue Apr 12 16:53:37 MSD 2005 root@micron-media.ru:/usr/obj/usr/src/sys/MKMEDIA i386 >Description: After switching vpn-server from poptop to mpd, my box started to crash periodically (from hour to several days of uptime). Normally, there is 50..70 users, connected to VPN. Just before crash, mpd is disconnecting someone. mpd patches applied: mpd 3.18 + drop-user patch from ftp://ftp.ufanet.ru/pub/boco/mpd/ (but it shouldn't affect netgraph-related stuff). Kernel config: HZ=1000, SMP (HyperThreading), ALTQ, netgraph compiled-in (only ng_vjc.ko via module). gcc flags: -O -pipe dmesg output: Free item, freed at /usr/src/sys/netgraph/ng_base.c, line 3652 problem discovered at file /usr/src/sys/netgraph/ng_base.c, line 3646 Free item, freed at /usr/src/sys/netgraph/ng_base.c, line 3652 problem discovered at file /usr/src/sys/netgraph/ng_base.c, line 3193 Free item, freed at /usr/src/sys/netgraph/ng_base.c, line 3652 problem discovered at file /usr/src/sys/netgraph/ng_base.c, line 3193 Free item, freed at /usr/src/sys/netgraph/ng_base.c, line 3652 problem discovered at file /usr/src/sys/netgraph/ng_base.c, line 3193 Free item, freed at /usr/src/sys/netgraph/ng_base.c, line 3652 problem discovered at file /usr/src/sys/netgraph/ng_base.c, line 3193 node 0xc29ad800 ([1ce9]) panic: free item! cpuid = 1 boot() called on cpu#0 Uptime: 3d3h55m37s Cannot dump. No dump device defined. Automatic reboot in 15 seconds - press a key on the console to abort Rebooting... cpu_reset called on cpu#0 cpu_reset: Stopping other CPUs >How-To-Repeat: When mpd is serving about 60..70 users, system crashes. I wasn't able to find an exact way to reproduce the crash. >Fix: >Release-Note: >Audit-Trail: >Unformatted: