From owner-freebsd-net@freebsd.org Fri Jun 30 15:46:43 2017 Return-Path: Delivered-To: freebsd-net@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 58984D94637 for ; Fri, 30 Jun 2017 15:46:43 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2001:1900:2254:206a::16:76]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 46DCD728D6 for ; Fri, 30 Jun 2017 15:46:43 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from bugs.freebsd.org ([127.0.1.118]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id v5UFkhNX030672 for ; Fri, 30 Jun 2017 15:46:43 GMT (envelope-from bugzilla-noreply@freebsd.org) From: bugzilla-noreply@freebsd.org To: freebsd-net@FreeBSD.org Subject: [Bug 220358] panic in tcp_lro_flush_all Date: Fri, 30 Jun 2017 15:46:43 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: CURRENT X-Bugzilla-Keywords: regression X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: oleg.nauman@gmail.com X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: freebsd-net@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: cc Message-ID: In-Reply-To: References: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated MIME-Version: 1.0 X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 Jun 2017 15:46:43 -0000 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D220358 oleg.nauman@gmail.com changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |oleg.nauman@gmail.com --- Comment #8 from oleg.nauman@gmail.com --- I'm observing crashes too ( CURRENT/i386 r320466 ), for example crash due to incoming SSH connection attempt: __curthread () at ./machine/pcpu.h:225 225 __asm("movl %%fs:%1,%0" : "=3Dr" (td) (kgdb) #0 __curthread () at ./machine/pcpu.h:225 #1 doadump (textdump=3D-968634112) at ../../../kern/kern_shutdown.c:318 #2 0xc06e8954 in kern_reboot (howto=3D) at ../../../kern/kern_shutdown.c:386 #3 0xc06e8ceb in vpanic (fmt=3D, ap=3D0xea5c56ec "K\336\235\300H\325\065\306\001") at ../../../kern/kern_shutdown.c:779 #4 0xc06e8bab in panic (fmt=3D0xc092e2de "%s") at ../../../kern/kern_shutdown.c:710 #5 0xc08eee71 in trap_fatal (frame=3D0xea5c584c, eva=3D) at ../../../i386/i386/trap.c:978 #6 0xc08eefbb in trap_pfault (frame=3D0xea5c584c, usermode=3D0, eva=3D) at ../../../i386/i386/trap.c:890 #7 0xc08ee5de in trap (frame=3D) at ../../../i386/i386/trap.c:512 #8 #9 0xc6be0a1b in ?? () #10 0xc082ef73 in tcp_do_segment (m=3D, th=3D, so=3D, tp=3D, drop_hdrlen=3D, tlen=3D, iptos=3D, ti_locked=3D) at ../../../netinet/tcp_input.c:2444 #11 0xc082c3a1 in tcp_input (mp=3D, offp=3D, proto=3D) at ../../../netinet/tcp_input.c:1191 #12 0xc0820a98 in ip_input (m=3D0x0) at ../../../netinet/ip_input.c:823 #13 0xc07d57db in netisr_dispatch_src (proto=3D, source=3D, m=3D0xc6be0a18) at ../../../net/netisr.c:1120 #14 0xc07d5aa0 in netisr_dispatch (proto=3D1, m=3D0xc6c01800) at ../../../net/netisr.c:1211 #15 0xc07c74b2 in ether_demux (ifp=3D0xc634e800, m=3D0x0) at ../../../net/if_ethersubr.c:848 #16 0xc07c8140 in ether_input_internal (ifp=3D0xc634e800, m=3D0xc6be0a18) at ../../../net/if_ethersubr.c:637 #17 ether_nh_input (m=3D) at ../../../net/if_ethersubr.c:667 #18 0xc07d57db in netisr_dispatch_src (proto=3D, source=3D, m=3D0xc6be0a18) at ../../../net/netisr.c:1120 #19 0xc07d5aa0 in netisr_dispatch (proto=3D5, m=3D0xc6c01800) at ../../../net/netisr.c:1211 #20 0xc07c773a in ether_input (ifp=3D0xc634e800, m=3D0x0) at ../../../net/if_ethersubr.c:757 #21 0xc04f5058 in age_rxeof (sc=3D, rxrd=3D) at ../../../dev/age/if_age.c:2442 #22 age_rxintr (rr_prod=3D4, count=3D, sc=3D) at ../../../dev/age/if_age.c:2488 #23 age_int_task (arg=3D, pending=3D1) at ../../../dev/age/if_age.c:2167 #24 0xc0735bfc in taskqueue_run_locked (queue=3D0xc631a300) at ../../../kern/subr_taskqueue.c:454 #25 0xc0736ae7 in taskqueue_thread_loop (arg=3D0xc6344a6c) at ../../../kern/subr_taskqueue.c:746 #26 0xc06b8b06 in fork_exit (callout=3D0xc0736a40 , arg=3D, frame=3D) at ../../../kern/kern_fork.c:1038 #27 (kgdb) machdep.hyperthreading_allowed is set to 0 My system also reproducible panics on named reconfigure/flush/shutdown even= ts with ( partially ) similar backtrace , as well as panics caused by IPC ; for example: __curthread () at ./machine/pcpu.h:225 225 __asm("movl %%fs:%1,%0" : "=3Dr" (td) (kgdb) #0 __curthread () at ./machine/pcpu.h:225 #1 doadump (textdump=3D-968633856) at ../../../kern/kern_shutdown.c:318 #2 0xc06e88c4 in kern_reboot (howto=3D) at ../../../kern/kern_shutdown.c:386 #3 0xc06e8c5b in vpanic (fmt=3D, ap=3D0xefd5c73c "\340\334\235\300\310\370\266\306\001") at ../../../kern/kern_shutdown.c:779 #4 0xc06e8b1b in panic (fmt=3D0xc092e18e "%s") at ../../../kern/kern_shutdown.c:710 #5 0xc08eed21 in trap_fatal (frame=3D0xefd5c878, eva=3D) at ../../../i386/i386/trap.c:978 #6 0xc08eea38 in trap (frame=3D) at ../../../i386/i386/trap.c:704 #7 #8 0xc6bcda1b in ?? () #9 0xc0770281 in unp_connect2 (so=3D, so2=3D, req=3D) at ../../../kern/uipc_usrreq.c:1497 #10 0xc076ff17 in unp_connectat (fd=3D, so=3D, nam=3D, td=3D) at ../../../kern/uipc_usrreq.c:1446 #11 0xc076d510 in unp_connect (so=3D0xc71c9400, nam=3D0xc662d500, td=3D) at ../../../kern/uipc_usrreq.c:1310 #12 uipc_connect (so=3D0xc71c9400, nam=3D0xc662d500, td=3D) at ../../../kern/uipc_usrreq.c:587 #13 0xc076a042 in kern_connectat (td=3D, dirfd=3D-100, fd=3D, sa=3D0xc662d500) at ../../../kern/uipc_syscalls.c= :505 #14 0xc0769f49 in sys_connect (td=3D0xc6bcda18, uap=3D0xc6b6f988) at ../../../kern/uipc_syscalls.c:470 #15 0xc08ef679 in syscallenter (td=3D) at ../../../i386/i386/../../kern/subr_syscall.c:132 #16 syscall (frame=3D) at ../../../i386/i386/trap.c:1103 #17 #18 0x283a4747 in ?? () Backtrace stopped: Cannot access memory at address 0xbfbfe794 (kgdb) --=20 You are receiving this mail because: You are the assignee for the bug.=