From owner-freebsd-current@FreeBSD.ORG  Thu Aug 27 20:13:13 2009
Return-Path: <owner-freebsd-current@FreeBSD.ORG>
Delivered-To: freebsd-current@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 69749106568B
	for <freebsd-current@freebsd.org>; Thu, 27 Aug 2009 20:13:13 +0000 (UTC)
	(envelope-from qing.li@bluecoat.com)
Received: from whisker.bluecoat.com (whisker.bluecoat.com [216.52.23.28])
	by mx1.freebsd.org (Postfix) with ESMTP id 4C3B18FC36
	for <freebsd-current@freebsd.org>; Thu, 27 Aug 2009 20:13:12 +0000 (UTC)
Received: from bcs-mail03.internal.cacheflow.com ([10.2.2.95])
	by whisker.bluecoat.com (8.14.2/8.14.2) with ESMTP id n7RKCx5G011202;
	Thu, 27 Aug 2009 13:12:59 -0700 (PDT)
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Date: Thu, 27 Aug 2009 13:12:26 -0700
Message-ID: <B583FBF374231F4A89607B4D08578A43052773AF@bcs-mail03.internal.cacheflow.com>
In-Reply-To: <20090827181522.81970.qmail@mailgate.gta.com>
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: 8.0-BETA3 reproducible panic under load
Thread-Index: AconRiirkGJtTDanRTyLTqrl4SeU+QADEbPQ
References: <109727.111234.43119@localhost>
	<20090827181522.81970.qmail@mailgate.gta.com>
From: "Li, Qing" <qing.li@bluecoat.com>
To: "Larry Baird" <lab@gta.com>, <freebsd-current@freebsd.org>
Cc: Mike Andrews <mandrews@bit0.com>
Subject: RE: 8.0-BETA3 reproducible panic under load
X-BeenThere: freebsd-current@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Discussions about the use of FreeBSD-current
	<freebsd-current.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>, 
	<mailto:freebsd-current-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-current>
List-Post: <mailto:freebsd-current@freebsd.org>
List-Help: <mailto:freebsd-current-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 27 Aug 2009 20:13:13 -0000

>
> Not sure if this is what you hit or not.  I once saw something
similar.
> The call to LLE_FREE() in ip_output doesn't expect NULL.  Adding
>    if (ro->ro_lle !=3D NULL)
> just before the call to LLE_FREE() may fix your crashes.
>=20

Actually, LLE_FREE() should not be called at all here because the=20
"if (!nortfree)" block test applies to route entries that are not=20
from the flow-table.  And if the route entry is not from the
flow-table, then the rt_lle field is invalid.

I will commit the fix.

Thanks,

-- Qing