From owner-freebsd-net@freebsd.org Wed Sep 30 12:06:32 2015 Return-Path: Delivered-To: freebsd-net@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 64055A0C422 for ; Wed, 30 Sep 2015 12:06:32 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2001:1900:2254:206a::16:76]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4F54B1D78 for ; Wed, 30 Sep 2015 12:06:32 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from bugs.freebsd.org ([127.0.1.118]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id t8UC6WrZ021720 for ; Wed, 30 Sep 2015 12:06:32 GMT (envelope-from bugzilla-noreply@freebsd.org) From: bugzilla-noreply@freebsd.org To: freebsd-net@FreeBSD.org Subject: [Bug 148807] [panic] 8.1-RELEASE/10.1-STABLE "panic: sbdrop" and "panic: sbsndptr: sockbuf _ and mbuf _ clashing" Date: Wed, 30 Sep 2015 12:06:30 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 10.1-STABLE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: girgen@FreeBSD.org X-Bugzilla-Status: Open X-Bugzilla-Priority: Normal X-Bugzilla-Assigned-To: freebsd-net@FreeBSD.org X-Bugzilla-Target-Milestone: --- X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: cc Message-ID: In-Reply-To: References: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: 7bit X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated MIME-Version: 1.0 X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Sep 2015 12:06:32 -0000 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=148807 Palle Girgensohn changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |girgen@FreeBSD.org --- Comment #20 from Palle Girgensohn --- Hi, This seems related? A GENERIC kernel binary installed using freebsd-update, so I have no WITNESS or KGDB, only standard vanilla kernel. I have core dumps (2) and a complete core.txt if anyone is interested. # ifconfig -l oce0 oce1 lo0 # freebsd-version -k 10.1-RELEASE-p19 # cat /var/crash/core.txt.1 ... Thu Aug 27 15:04:09 CEST 2015 FreeBSD kurs-ap-01 10.1-RELEASE-p10 FreeBSD 10.1-RELEASE-p10 #0: Wed May 13 06:54:13 UTC 2015 root@amd64-builder.daemonology.net:/usr/obj/usr/src/sys/GENERIC amd64 panic: sbsndptr: sockbuf 0xfffff80312126c68 and mbuf 0xfffff800b4a36800 clashing GNU gdb 6.1.1 [FreeBSD] Copyright 2004 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "amd64-marcel-freebsd"... Unread portion of the kernel message buffer: panic: sbsndptr: sockbuf 0xfffff80312126c68 and mbuf 0xfffff800b4a36800 clashing cpuid = 1 KDB: stack backtrace: #0 0xffffffff80963000 at kdb_backtrace+0x60 #1 0xffffffff80928125 at panic+0x155 #2 0xffffffff8099c180 at sbdroprecord_locked+0 #3 0xffffffff80ac8c9c at tcp_output+0xdbc #4 0xffffffff80ac6a95 at tcp_do_segment+0x3045 #5 0xffffffff80ac2e04 at tcp_input+0xd04 #6 0xffffffff80a54fc7 at ip_input+0x97 #7 0xffffffff809f4f73 at swi_net+0x143 #8 0xffffffff808faf4b at intr_event_execute_handlers+0xab #9 0xffffffff808fb396 at ithread_loop+0x96 #10 0xffffffff808f8b6a at fork_exit+0x9a #11 0xffffffff80d0b67e at fork_trampoline+0xe Uptime: 21d0h54m53s Dumping 2005 out of 32709 MB:..1%..11%..21%..31%..41%..51%..61%..71%..81%..91% Reading symbols from /boot/kernel/accf_data.ko.symbols...done. Loaded symbols for /boot/kernel/accf_data.ko.symbols Reading symbols from /boot/kernel/accf_http.ko.symbols...done. Loaded symbols for /boot/kernel/accf_http.ko.symbols Reading symbols from /boot/kernel/oce.ko.symbols...done. Loaded symbols for /boot/kernel/oce.ko.symbols Reading symbols from /boot/kernel/nullfs.ko.symbols...done. [root@kurs-ap-01 /home/girgen]# head -n 300 /var/crash/core.txt.1 kurs-ap-01 dumped core - see /var/crash/vmcore.1 Thu Aug 27 15:04:09 CEST 2015 FreeBSD kurs-ap-01 10.1-RELEASE-p10 FreeBSD 10.1-RELEASE-p10 #0: Wed May 13 06:54:13 UTC 2015 root@amd64-builder.daemonology.net:/usr/obj/usr/src/sys/GENERIC amd64 panic: sbsndptr: sockbuf 0xfffff80312126c68 and mbuf 0xfffff800b4a36800 clashing GNU gdb 6.1.1 [FreeBSD] Copyright 2004 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "amd64-marcel-freebsd"... Unread portion of the kernel message buffer: panic: sbsndptr: sockbuf 0xfffff80312126c68 and mbuf 0xfffff800b4a36800 clashing cpuid = 1 KDB: stack backtrace: #0 0xffffffff80963000 at kdb_backtrace+0x60 #1 0xffffffff80928125 at panic+0x155 #2 0xffffffff8099c180 at sbdroprecord_locked+0 #3 0xffffffff80ac8c9c at tcp_output+0xdbc #4 0xffffffff80ac6a95 at tcp_do_segment+0x3045 #5 0xffffffff80ac2e04 at tcp_input+0xd04 #6 0xffffffff80a54fc7 at ip_input+0x97 #7 0xffffffff809f4f73 at swi_net+0x143 #8 0xffffffff808faf4b at intr_event_execute_handlers+0xab #9 0xffffffff808fb396 at ithread_loop+0x96 #10 0xffffffff808f8b6a at fork_exit+0x9a #11 0xffffffff80d0b67e at fork_trampoline+0xe Uptime: 21d0h54m53s Dumping 2005 out of 32709 MB:..1%..11%..21%..31%..41%..51%..61%..71%..81%..91% Reading symbols from /boot/kernel/accf_data.ko.symbols...done. Loaded symbols for /boot/kernel/accf_data.ko.symbols Reading symbols from /boot/kernel/accf_http.ko.symbols...done. Loaded symbols for /boot/kernel/accf_http.ko.symbols Reading symbols from /boot/kernel/oce.ko.symbols...done. Loaded symbols for /boot/kernel/oce.ko.symbols Reading symbols from /boot/kernel/nullfs.ko.symbols...done. Loaded symbols for /boot/kernel/nullfs.ko.symbols Reading symbols from /boot/kernel/linprocfs.ko.symbols...done. Loaded symbols for /boot/kernel/linprocfs.ko.symbols Reading symbols from /boot/kernel/linux.ko.symbols...done. Loaded symbols for /boot/kernel/linux.ko.symbols Reading symbols from /boot/kernel/zfs.ko.symbols...done. Loaded symbols for /boot/kernel/zfs.ko.symbols Reading symbols from /boot/kernel/opensolaris.ko.symbols...done. Loaded symbols for /boot/kernel/opensolaris.ko.symbols #0 doadump (textdump=) at pcpu.h:219 219 pcpu.h: No such file or directory. in pcpu.h (kgdb) #0 doadump (textdump=) at pcpu.h:219 #1 0xffffffff80927da2 in kern_reboot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:452 #2 0xffffffff80928164 in panic (fmt=) at /usr/src/sys/kern/kern_shutdown.c:759 #3 0xffffffff8099c180 in sbsndptr (sb=, off=, len=, moff=) at /usr/src/sys/kern/uipc_sockbuf.c:1011 #4 0xffffffff80ac8c9c in tcp_output (tp=0xfffff80312ef5800) at /usr/src/sys/netinet/tcp_output.c:870 #5 0xffffffff80ac6a95 in tcp_do_segment (m=, th=, so=, tp=, drop_hdrlen=, tlen=0, iptos=, ti_locked=Cannot access memory at address 0x1 ) at /usr/src/sys/netinet/tcp_input.c:3018 #6 0xffffffff80ac2e04 in tcp_input (m=, off0=) at /usr/src/sys/netinet/tcp_input.c:1377 #7 0xffffffff80a54fc7 in ip_input (m=0xfffff800b4516600) at /usr/src/sys/netinet/ip_input.c:734 #8 0xffffffff809f4f73 in swi_net (arg=0xffffffff81988880) at /usr/src/sys/net/netisr.c:765 #9 0xffffffff808faf4b in intr_event_execute_handlers ( p=, ie=0xfffff800093ac600) at /usr/src/sys/kern/kern_intr.c:1263 #10 0xffffffff808fb396 in ithread_loop (arg=0xfffff80009388e40) at /usr/src/sys/kern/kern_intr.c:1276 #11 0xffffffff808f8b6a in fork_exit ( callout=0xffffffff808fb300 , arg=0xfffff80009388e40, frame=0xfffffe083c3e3ac0) at /usr/src/sys/kern/kern_fork.c:996 #12 0xffffffff80d0b67e in fork_trampoline () at /usr/src/sys/amd64/amd64/exception.S:606 #13 0x0000000000000000 in ?? () Current language: auto; currently minimal (kgdb) -- You are receiving this mail because: You are the assignee for the bug.