Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 09 Jul 2016 01:41:47 +0000
From:      bugzilla-noreply@freebsd.org
To:        freebsd-bugs@FreeBSD.org
Subject:   [Bug 210884] panic: bogus refcnt 0 on lle 0xfffff80004608c00
Message-ID:  <bug-210884-8-FUjALGKjaY@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-210884-8@https.bugs.freebsd.org/bugzilla/>
References:  <bug-210884-8@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D210884

--- Comment #24 from Larry Rosenman <ler@lerctr.org> ---
borg.lerctr.org /var/crash # kgdb -c vmcore.last  /boot/kernel/kernel
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain condition=
s.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "amd64-marcel-freebsd"...

Unread portion of the kernel message buffer:

panic: bogus refcnt 0 on lle 0xfffff80116196a00
cpuid =3D 5
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x2b/frame 0xfffffe2eb5908=
5b0
vpanic() at vpanic+0x182/frame 0xfffffe2eb5908630
kassert_panic() at kassert_panic+0x126/frame 0xfffffe2eb59086a0
llentry_free() at llentry_free+0x136/frame 0xfffffe2eb59086d0
in_lltable_free_entry() at in_lltable_free_entry+0xb0/frame 0xfffffe2eb5908=
700
htable_prefix_free() at htable_prefix_free+0xce/frame 0xfffffe2eb5908760
lltable_prefix_free() at lltable_prefix_free+0x5d/frame 0xfffffe2eb59087a0
in_scrubprefix() at in_scrubprefix+0x290/frame 0xfffffe2eb5908840
in_difaddr_ioctl() at in_difaddr_ioctl+0x285/frame 0xfffffe2eb5908890
in_control() at in_control+0x96/frame 0xfffffe2eb5908910
ifioctl() at ifioctl+0xda1/frame 0xfffffe2eb59089a0
kern_ioctl() at kern_ioctl+0x246/frame 0xfffffe2eb5908a00
sys_ioctl() at sys_ioctl+0x171/frame 0xfffffe2eb5908ae0
amd64_syscall() at amd64_syscall+0x2c1/frame 0xfffffe2eb5908bf0
Xfast_syscall() at Xfast_syscall+0xfb/frame 0xfffffe2eb5908bf0
--- syscall (54, FreeBSD ELF64, sys_ioctl), rip =3D 0x800fd2eaa, rsp =3D
0x7fffffffe418, rbp =3D 0x7fffffffe460 ---
Uptime: 4h47m13s
Dumping 4623 out of 64465 MB:..1%..11%..21%..31%..41%..51%..61%..71%..81%..=
91%

Reading symbols from /boot/kernel/zfs.ko...Reading symbols from
/usr/lib/debug//boot/kernel/zfs.ko.debug...done.
done.
Loaded symbols for /boot/kernel/zfs.ko
Reading symbols from /boot/kernel/opensolaris.ko...Reading symbols from
/usr/lib/debug//boot/kernel/opensolaris.ko.debug...done.
done.
Loaded symbols for /boot/kernel/opensolaris.ko
Reading symbols from /boot/kernel/linux.ko...Reading symbols from
/usr/lib/debug//boot/kernel/linux.ko.debug...done.
done.
Loaded symbols for /boot/kernel/linux.ko
Reading symbols from /boot/kernel/linux_common.ko...Reading symbols from
/usr/lib/debug//boot/kernel/linux_common.ko.debug...done.
done.
Loaded symbols for /boot/kernel/linux_common.ko
Reading symbols from /boot/kernel/if_lagg.ko...Reading symbols from
/usr/lib/debug//boot/kernel/if_lagg.ko.debug...done.
done.
Loaded symbols for /boot/kernel/if_lagg.ko
Reading symbols from /boot/kernel/snd_envy24ht.ko...Reading symbols from
/usr/lib/debug//boot/kernel/snd_envy24ht.ko.debug...done.
done.
Loaded symbols for /boot/kernel/snd_envy24ht.ko
Reading symbols from /boot/kernel/snd_spicds.ko...Reading symbols from
/usr/lib/debug//boot/kernel/snd_spicds.ko.debug...done.
done.
Loaded symbols for /boot/kernel/snd_spicds.ko
Reading symbols from /boot/kernel/coretemp.ko...Reading symbols from
/usr/lib/debug//boot/kernel/coretemp.ko.debug...done.
done.
Loaded symbols for /boot/kernel/coretemp.ko
Reading symbols from /boot/kernel/fuse.ko...Reading symbols from
/usr/lib/debug//boot/kernel/fuse.ko.debug...done.
done.
Loaded symbols for /boot/kernel/fuse.ko
Reading symbols from /boot/kernel/ichsmb.ko...Reading symbols from
/usr/lib/debug//boot/kernel/ichsmb.ko.debug...done.
done.
Loaded symbols for /boot/kernel/ichsmb.ko
Reading symbols from /boot/kernel/smbus.ko...Reading symbols from
/usr/lib/debug//boot/kernel/smbus.ko.debug...done.
done.
Loaded symbols for /boot/kernel/smbus.ko
Reading symbols from /boot/kernel/ichwd.ko...Reading symbols from
/usr/lib/debug//boot/kernel/ichwd.ko.debug...done.
done.
Loaded symbols for /boot/kernel/ichwd.ko
Reading symbols from /boot/kernel/cpuctl.ko...Reading symbols from
/usr/lib/debug//boot/kernel/cpuctl.ko.debug...done.
done.
Loaded symbols for /boot/kernel/cpuctl.ko
Reading symbols from /boot/kernel/cryptodev.ko...Reading symbols from
/usr/lib/debug//boot/kernel/cryptodev.ko.debug...done.
done.
Loaded symbols for /boot/kernel/cryptodev.ko
Reading symbols from /boot/kernel/dtraceall.ko...Reading symbols from
/usr/lib/debug//boot/kernel/dtraceall.ko.debug...done.
done.
Loaded symbols for /boot/kernel/dtraceall.ko
Reading symbols from /boot/kernel/profile.ko...Reading symbols from
/usr/lib/debug//boot/kernel/profile.ko.debug...done.
done.
Loaded symbols for /boot/kernel/profile.ko
Reading symbols from /boot/kernel/dtrace.ko...Reading symbols from
/usr/lib/debug//boot/kernel/dtrace.ko.debug...done.
done.
Loaded symbols for /boot/kernel/dtrace.ko
Reading symbols from /boot/kernel/systrace_freebsd32.ko...Reading symbols f=
rom
/usr/lib/debug//boot/kernel/systrace_freebsd32.ko.debug...done.
done.
Loaded symbols for /boot/kernel/systrace_freebsd32.ko
Reading symbols from /boot/kernel/systrace.ko...Reading symbols from
/usr/lib/debug//boot/kernel/systrace.ko.debug...done.
done.
Loaded symbols for /boot/kernel/systrace.ko
Reading symbols from /boot/kernel/sdt.ko...Reading symbols from
/usr/lib/debug//boot/kernel/sdt.ko.debug...done.
done.
Loaded symbols for /boot/kernel/sdt.ko
Reading symbols from /boot/kernel/fasttrap.ko...Reading symbols from
/usr/lib/debug//boot/kernel/fasttrap.ko.debug...done.
done.
Loaded symbols for /boot/kernel/fasttrap.ko
Reading symbols from /boot/kernel/fbt.ko...Reading symbols from
/usr/lib/debug//boot/kernel/fbt.ko.debug...done.
done.
Loaded symbols for /boot/kernel/fbt.ko
Reading symbols from /boot/kernel/dtnfscl.ko...Reading symbols from
/usr/lib/debug//boot/kernel/dtnfscl.ko.debug...done.
done.
Loaded symbols for /boot/kernel/dtnfscl.ko
Reading symbols from /boot/kernel/dtmalloc.ko...Reading symbols from
/usr/lib/debug//boot/kernel/dtmalloc.ko.debug...done.
done.
Loaded symbols for /boot/kernel/dtmalloc.ko
Reading symbols from /boot/kernel/ipmi.ko...Reading symbols from
/usr/lib/debug//boot/kernel/ipmi.ko.debug...done.
done.
Loaded symbols for /boot/kernel/ipmi.ko
Reading symbols from /boot/kernel/ipmi_linux.ko...Reading symbols from
/usr/lib/debug//boot/kernel/ipmi_linux.ko.debug...done.
done.
Loaded symbols for /boot/kernel/ipmi_linux.ko
Reading symbols from /boot/kernel/hwpmc.ko...Reading symbols from
/usr/lib/debug//boot/kernel/hwpmc.ko.debug...done.
done.
Loaded symbols for /boot/kernel/hwpmc.ko
Reading symbols from /boot/kernel/filemon.ko...Reading symbols from
/usr/lib/debug//boot/kernel/filemon.ko.debug...done.
done.
Loaded symbols for /boot/kernel/filemon.ko
Reading symbols from /boot/kernel/uhid.ko...Reading symbols from
/usr/lib/debug//boot/kernel/uhid.ko.debug...done.
done.
Loaded symbols for /boot/kernel/uhid.ko
Reading symbols from /boot/kernel/nullfs.ko...Reading symbols from
/usr/lib/debug//boot/kernel/nullfs.ko.debug...done.
done.
Loaded symbols for /boot/kernel/nullfs.ko
Reading symbols from /boot/kernel/fdescfs.ko...Reading symbols from
/usr/lib/debug//boot/kernel/fdescfs.ko.debug...done.
done.
Loaded symbols for /boot/kernel/fdescfs.ko
Reading symbols from /boot/kernel/linux64.ko...Reading symbols from
/usr/lib/debug//boot/kernel/linux64.ko.debug...done.
done.
Loaded symbols for /boot/kernel/linux64.ko
Reading symbols from /boot/kernel/pf.ko...Reading symbols from
/usr/lib/debug//boot/kernel/pf.ko.debug...done.
done.
Loaded symbols for /boot/kernel/pf.ko
#0  doadump (textdump=3D1) at pcpu.h:221
221     pcpu.h: No such file or directory.
        in pcpu.h
(kgdb) bt
#0  doadump (textdump=3D1) at pcpu.h:221
#1  0xffffffff80a48945 in kern_reboot (howto=3D<value optimized out>)
    at /usr/src/sys/kern/kern_shutdown.c:366
#2  0xffffffff80a48f1b in vpanic (fmt=3D<value optimized out>,
    ap=3D<value optimized out>) at /usr/src/sys/kern/kern_shutdown.c:759
#3  0xffffffff80a48d56 in kassert_panic (fmt=3D<value optimized out>)
    at /usr/src/sys/kern/kern_shutdown.c:649
#4  0xffffffff80b351d6 in llentry_alloc (ifp=3D0x0, lt=3D0x0, dst=3D0x0)
    at /usr/src/sys/net/if_llatbl.c:445
#5  0xffffffff80b9e3e0 in in_lltable_free_entry (llt=3D0xfffff80116196a00,
    lle=3D0xfffff80116196a00) at counter.h:85
#6  0xffffffff80b35aae in htable_prefix_free (llt=3D<value optimized out>,
    addr=3D<value optimized out>, mask=3D<value optimized out>,
    flags=3D<value optimized out>) at /usr/src/sys/net/if_llatbl.c:231
#7  0xffffffff80b3577d in lltable_prefix_free (af=3D<value optimized out>,
    addr=3D<value optimized out>, mask=3D<value optimized out>,
    flags=3D<value optimized out>) at /usr/src/sys/net/if_llatbl.c:601
#8  0xffffffff80b9d4a0 in in_scrubprefix (target=3D<value optimized out>,
    flags=3D<value optimized out>) at /usr/src/sys/netinet/in.c:888
#9  0xffffffff80b9ced5 in in_difaddr_ioctl (data=3D<value optimized out>,
    ifp=3D<value optimized out>, td=3D<value optimized out>)
    at /usr/src/sys/netinet/in.c:618
#10 0xffffffff80b9c0a6 in in_control (so=3D<value optimized out>,
    cmd=3D<value optimized out>, data=3D0xfffffe2eb5908a30 "lagg0",
---Type <return> to continue, or q <return> to quit---
    ifp=3D0xfffff8007534a800, td=3D0xfffff80067f3fa00)
    at /usr/src/sys/netinet/in.c:247
#11 0xffffffff80b2d031 in ifioctl (so=3D<value optimized out>,
    cmd=3D<value optimized out>, data=3D<value optimized out>,
    td=3D<value optimized out>) at /usr/src/sys/net/if.c:2842
#12 0xffffffff80aa7616 in kern_ioctl (td=3D<value optimized out>,
    fd=3D<value optimized out>, com=3D<value optimized out>,
    data=3D<value optimized out>) at /usr/src/sys/kern/sys_generic.c:838
#13 0xffffffff80aa7361 in sys_ioctl (td=3D<value optimized out>,
    uap=3D0xfffffe2eb5908b80) at /usr/src/sys/kern/sys_generic.c:745
#14 0xffffffff80eb4af1 in amd64_syscall (td=3D0xfffff80067f3fa00, traced=3D=
0)
    at subr_syscall.c:135
#15 0xffffffff80e9418b in Xfast_syscall ()
    at /usr/src/sys/amd64/amd64/exception.S:400
#16 0x0000000800fd2eaa in ?? ()
Previous frame inner to this frame (corrupt stack?)
Current language:  auto; currently minimal
(kgdb)
(kgdb) fr 5
#5  0xffffffff80b9e3e0 in in_lltable_free_entry (llt=3D0xfffff80116196a00,
    lle=3D0xfffff80116196a00) at counter.h:85
85      counter.h: No such file or directory.
        in counter.h
(kgdb) print lle->lle_timer
$1 =3D {c_links =3D {le =3D {le_next =3D 0x0, le_prev =3D 0x0}, sle =3D {sl=
e_next =3D 0x0},
    tqe =3D {tqe_next =3D 0x0, tqe_prev =3D 0x0}}, c_time =3D 0, c_precisio=
n =3D 0,
  c_arg =3D 0x0, c_func =3D 0, c_lock =3D 0x0, c_flags =3D 0, c_iflags =3D =
16, c_cpu =3D 0}
(kgdb) list
80      in counter.h
(kgdb)

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-210884-8-FUjALGKjaY>