From owner-freebsd-current@FreeBSD.ORG Tue Aug 9 20:50:10 2005 Return-Path: X-Original-To: current@freebsd.org Delivered-To: freebsd-current@FreeBSD.ORG Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 9188F16A41F; Tue, 9 Aug 2005 20:50:10 +0000 (GMT) (envelope-from bzeeb-lists@lists.zabbadoz.net) Received: from transport.cksoft.de (transport.cksoft.de [62.111.66.27]) by mx1.FreeBSD.org (Postfix) with ESMTP id 1A4E143D5E; Tue, 9 Aug 2005 20:50:09 +0000 (GMT) (envelope-from bzeeb-lists@lists.zabbadoz.net) Received: from transport.cksoft.de (localhost [127.0.0.1]) by transport.cksoft.de (Postfix) with ESMTP id D559A1FF9A7; Tue, 9 Aug 2005 22:50:07 +0200 (CEST) Received: by transport.cksoft.de (Postfix, from userid 66) id 9466C1FF9AC; Tue, 9 Aug 2005 22:50:05 +0200 (CEST) Received: by mail.int.zabbadoz.net (Postfix, from userid 1060) id 720CB15384; Tue, 9 Aug 2005 20:49:43 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by mail.int.zabbadoz.net (Postfix) with ESMTP id 672EC15329; Tue, 9 Aug 2005 20:49:43 +0000 (UTC) Date: Tue, 9 Aug 2005 20:49:43 +0000 (UTC) From: "Bjoern A. Zeeb" X-X-Sender: bz@e0-0.zab2.int.zabbadoz.net To: John Baldwin In-Reply-To: <200508091444.10415.jhb@FreeBSD.org> Message-ID: References: <200508091048.50086.jhb@FreeBSD.org> <200508091444.10415.jhb@FreeBSD.org> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-Virus-Scanned: by AMaViS cksoft-s20020300-20031204bz on transport.cksoft.de Cc: FreeBSD current mailing list , ume@FreeBSD.org Subject: Re: LOR + panic in scope6.c X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Aug 2005 20:50:10 -0000 On Tue, 9 Aug 2005, John Baldwin wrote: > > > > (gdb) l *0xffffffff804990a0 > > > > 0xffffffff804990a0 is in in6_setscope (sys/netinet6/scope6.c:417). > > > > 412 u_int32_t zoneid = 0; > > > > 413 struct scope6_id *sid; > > > > 414 > > > > 415 IF_AFDATA_LOCK(ifp); > > > > 416 > > > > 417 sid = SID(ifp); > > > > 418 > > > > 419 #ifdef DIAGNOSTIC > > > > 420 if (sid == NULL) { /* should not happen */ > > > > 421 panic("in6_setscope: scope array is NULL"); > > > > > > Well, SID is a macro that expands this to: > > > > > > sid = ifp->if_afdata[AF_INET6]->scope6_id > > > > > > If if_afdata[AF_INET6] has already been freed that could be the problem. > > > It might have never been non-null either I guess. You can try having > > > in6_setscope() bail if ifp->if_afdata[AF_INET6] is NULL. > > > > I will. I think I found another problem with attach/detach in sk. > > Might be a double free. > > The above seems to happen in the "No PHY found" case (which I fixed > > already locally and everything went away). > > Well, I've seen this when attach fails on de(4) as well, so I think it's some > sort of bug where you ether_ifdetach() an interface before it's fully up or > something. exactly. what was the solution? And the other question: why does this happen? if_{a,de}ttach looked ok to me on order. Havent' had the time to go to netinet6/ and check what's going on there... -- Bjoern A. Zeeb bzeeb at Zabbadoz dot NeT