From owner-freebsd-current@freebsd.org Wed Dec 30 17:39:14 2015 Return-Path: Delivered-To: freebsd-current@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id A17D7A56E1F for ; Wed, 30 Dec 2015 17:39:14 +0000 (UTC) (envelope-from hps@selasky.org) Received: from mail.turbocat.net (heidi.turbocat.net [88.198.202.214]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 31DC01E7C; Wed, 30 Dec 2015 17:39:13 +0000 (UTC) (envelope-from hps@selasky.org) Received: from laptop015.home.selasky.org (unknown [62.141.129.119]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mail.turbocat.net (Postfix) with ESMTPSA id 877181FE024; Wed, 30 Dec 2015 18:39:04 +0100 (CET) Subject: Re: panic: softclock_call_cc: act 0xfffffe0003d36958 0 To: "Bjoern A. Zeeb" , FreeBSD Current References: <1B181660-3715-404B-8F11-B52A79318DE8@lists.zabbadoz.net> Cc: Randall Stewart From: Hans Petter Selasky Message-ID: <56841735.10302@selasky.org> Date: Wed, 30 Dec 2015 18:41:09 +0100 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:38.0) Gecko/20100101 Thunderbird/38.4.0 MIME-Version: 1.0 In-Reply-To: <1B181660-3715-404B-8F11-B52A79318DE8@lists.zabbadoz.net> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Dec 2015 17:39:14 -0000 On 12/30/15 18:16, Bjoern A. Zeeb wrote: > Hi, > > I am at SVN r292843 and I just got this panic: > > panic: softclock_call_cc: act 0xfffffe0003d36958 0 > cpuid = 0 > KDB: stack backtrace: > db_trace_self_wrapper() at db_trace_self_wrapper+0x2b/frame 0xfffffe0839d897f0 > vpanic() at vpanic+0x182/frame 0xfffffe0839d89870 > kassert_panic() at kassert_panic+0x126/frame 0xfffffe0839d898e0 > softclock_call_cc() at softclock_call_cc+0x4d4/frame 0xfffffe0839d899c0 > softclock() at softclock+0x47/frame 0xfffffe0839d899e0 > intr_event_execute_handlers() at intr_event_execute_handlers+0x96/frame 0xfffffe0839d89a20 > ithread_loop() at ithread_loop+0xa6/frame 0xfffffe0839d89a70 > fork_exit() at fork_exit+0x84/frame 0xfffffe0839d89ab0 > fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe0839d89ab0 > --- trap 0, rip = 0, rsp = 0, rbp = 0 --- > KDB: enter: panic > [ thread pid 12 tid 100013 ] > Stopped at kdb_enter+0x3b: movq $0,kdb_why > db> show alllocks > Process 75753 (ping) thread 0xfffff80016f6a9a0 (100110) > exclusive lockmgr nfs (nfs) r = 0 (0xfffff80016a4b068) locked @ /tank/users/bz/projects_vnet.svn/sys/kern/vfs_subr.c:2473 > shared lockmgr nfs (nfs) r = 0 (0xfffff80016b925f0) locked @ /tank/users/bz/projects_vnet.svn/sys/kern/vfs_subr.c:2473 > Process 75752 (sh) thread 0xfffff8019f63c4d0 (100254) > exclusive rw tcpinp (tcpinp) r = 0 (0xfffff80015307300) locked @ /tank/users/bz/projects_vnet.svn/sys/netinet/tcp_usrreq.c:872 > exclusive sx so_snd_sx (so_snd_sx) r = 0 (0xfffff800153037c8) locked @ /tank/users/bz/projects_vnet.svn/sys/kern/uipc_sockbuf.c:265 > exclusive lockmgr nfs (nfs) r = 0 (0xfffff80016b92418) locked @ /tank/users/bz/projects_vnet.svn/sys/kern/vfs_subr.c:2473 > shared lockmgr nfs (nfs) r = 0 (0xfffff80016b925f0) locked @ /tank/users/bz/projects_vnet.svn/sys/kern/vfs_subr.c:2473 > Process 75751 (jexec) thread 0xfffff805254b14d0 (100370) > exclusive lockmgr nfs (nfs) r = 0 (0xfffff80016a4a5f0) locked @ /tank/users/bz/projects_vnet.svn/sys/kern/vfs_subr.c:2473 > shared lockmgr nfs (nfs) r = 0 (0xfffff80016b925f0) locked @ /tank/users/bz/projects_vnet.svn/sys/kern/vfs_subr.c:2473 > Process 75749 (jail) thread 0xfffff8001503f4d0 (100150) > exclusive sleep mutex maxsockets_change (eventhandler list) r = 0 (0xfffff8000bd99b90) locked @ /tank/users/bz/projects_vnet.svn/sys/kern/subr_eventhandler.c:126 > shared sx vnet_sysinit_sxlock (vnet_sysinit_sxlock) r = 0 (0xffffffff81d23cd8) locked @ /tank/users/bz/projects_vnet.svn/sys/net/vnet.c:573 > exclusive sx allprison (allprison) r = 0 (0xffffffff81cfe238) locked @ /tank/users/bz/projects_vnet.svn/sys/kern/kern_jail.c:1020 > > > > I cannot make a dump so if anyone wants any further information please let me know. I’ll need the machine again but I’ll wait an hour or two (at most). Hi, From past experience these panics reflect use-after free scenarios with regard to callouts. Maybe dump the backtrace of all cores? Are you able to make a crash dump? Further there are some callout sepecific structures in sys/kern/kern_timeout.c which you might want to dump. --HPS