Date: Tue, 23 Jan 2018 20:15:57 +0000 From: bugzilla-noreply@freebsd.org To: freebsd-net@FreeBSD.org Subject: [Bug 209682] [panic] [netinet] arptimer race Message-ID: <bug-209682-2472-ty4GcKZAus@https.bugs.freebsd.org/bugzilla/> In-Reply-To: <bug-209682-2472@https.bugs.freebsd.org/bugzilla/> References: <bug-209682-2472@https.bugs.freebsd.org/bugzilla/>
next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D209682 Dave Baukus <daveb@spectralogic.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |daveb@spectralogic.com --- Comment #4 from Dave Baukus <daveb@spectralogic.com> --- I have hit this 2x in the last 4 days on stable 11.1: I'm still looking for a reliable way to recreate. #7 0xffffffff807835de in trap (frame=3D0xfffffe000038a7b0) at pcpu.h:222 #8 0xffffffff80767781 in calltrap () at /usr/home/daveb/p4work/SpectraBSD_stable/sys/amd64/amd64/exception.S:236 #9 0xffffffff804ba395 in _rw_wlock_cookie (c=3D0xdeadc0dedeadc2de, file=3D0xffffffff808839e0 "/usr/home/daveb/p4work/SpectraBSD_stable/sys/netinet/if_ether.c", line=3D2= 87) at /usr/home/daveb/p4work/SpectraBSD_stable/sys/kern/kern_rwlock.c:272 #10 0xffffffff805d348f in arptimer (arg=3D0xfffff8014c37a200) at /usr/home/daveb/p4work/SpectraBSD_stable/sys/netinet/if_ether.c:287 #11 0xffffffff804d5fb8 in softclock_call_cc (c=3D0xfffff8014c37a2b8, cc=3D<= value optimized out>, direct=3D<value optimized out>) at /usr/home/daveb/p4work/SpectraBSD_stable/sys/kern/kern_timeout.c:729 #12 0xffffffff804d639c in softclock (arg=3D0xffffffff80ed1100) at /usr/home/daveb/p4work/SpectraBSD_stable/sys/kern/kern_timeout.c:867 #13 0xffffffff80483fc9 in intr_event_execute_handlers (p=3D<value optimized= out>, ie=3D0xfffff8011f130000) at /usr/home/daveb/p4work/SpectraBSD_stable/sys/kern/kern_intr.c:1262 #14 0xffffffff80484666 in ithread_loop (arg=3D0xfffff8011f0fd5c0) at /usr/home/daveb/p4work/SpectraBSD_stable/sys/kern/kern_intr.c:1275 #15 0xffffffff804816b4 in fork_exit (callout=3D0xffffffff804845b0 <ithread_= loop>, arg=3D0xfffff8011f0fd5c0, frame=3D0xfffffe000038aac0) at /usr/home/daveb/p4work/SpectraBSD_stable/sys/kern/kern_fork.c:1042 #16 0xffffffff80767cbe in fork_trampoline () at /usr/home/daveb/p4work/SpectraBSD_stable/sys/amd64/amd64/exception.S:611 #17 0x0000000000000000 in ?? () (kgdb) frame 10 #10 0xffffffff805d348f in arptimer (arg=3D0xfffff8014c37a200) at /usr/home/daveb/p4work/SpectraBSD_stable/sys/netinet/if_ether.c:287 287 IF_AFDATA_LOCK(ifp); (kgdb) set $lle =3D (struct llentry *)arg (kgdb) p $lle $6 =3D (struct llentry *) 0xfffff8014c37a200 (kgdb) p *$lle $7 =3D { lle_next =3D { le_next =3D 0x0,=20 le_prev =3D 0xfffff80c29487a00 },=20 r_l3addr =3D { addr4 =3D { s_addr =3D 0 },=20 addr6 =3D { __u6_addr =3D { __u6_addr8 =3D 0xfffff8014c37a210 "",=20 __u6_addr16 =3D 0xfffff8014c37a210,=20 __u6_addr32 =3D 0xfffff8014c37a210 } } },=20 r_linkdata =3D 0xfffff8014c37a220 "$\001=EF=BF=BD#\234=EF=BF=BD",=20 r_hdrlen =3D 14 '\016',=20 spare0 =3D 0xfffff8014c37a239 "",=20 r_flags =3D 1,=20 r_skip_req =3D 1,=20 lle_tbl =3D 0xfffff80c6a454d00,=20 lle_head =3D 0xfffff80c29487a00,=20 lle_free =3D 0xffffffff805db670 <in_lltable_destroy_lle>,=20 la_hold =3D 0x0,=20 la_numheld =3D 0,=20 la_expire =3D 11654,=20 la_flags =3D 1,=20 la_asked =3D 0,=20 la_preempt =3D 5,=20 ln_state =3D 2,=20 ln_router =3D 0,=20 ln_ntick =3D 0,=20 lle_remtime =3D 0,=20 lle_hittime =3D 0,=20 lle_refcnt =3D 1,=20 ll_addr =3D 0xfffff8014c37a220 "$\001=EF=BF=BD#\234=EF=BF=BD",=20 lle_chain =3D { le_next =3D 0x0,=20 le_prev =3D 0x0 },=20 lle_timer =3D { c_links =3D { le =3D { le_next =3D 0x0,=20 le_prev =3D 0xffffffff80ed1218 },=20 sle =3D { sle_next =3D 0x0 },=20 tqe =3D { tqe_next =3D 0x0,=20 tqe_prev =3D 0xffffffff80ed1218 } },=20 c_time =3D 50057632637741,=20 c_precision =3D 268435437,=20 c_arg =3D 0xfffff8014c37a200,=20 c_func =3D 0xffffffff805d31f0 <arptimer>,=20 c_lock =3D 0x0,=20 c_flags =3D 0,=20 c_iflags =3D 144,=20 c_cpu =3D 0 },=20 lle_lock =3D { lock_object =3D { lo_name =3D 0xffffffff8087f95e "lle",=20 lo_flags =3D 90374144,=20 lo_data =3D 0,=20 lo_witness =3D 0xfffffe00009fe180 },=20 rw_lock =3D 1 },=20 req_mtx =3D { lock_object =3D { lo_name =3D 0xffffffff808848ce "lle req",=20 lo_flags =3D 16973824,=20 lo_data =3D 0,=20 lo_witness =3D 0xfffffe00009fe200 },=20 mtx_lock =3D 4 } } (kgdb) p *$lle->lle_tbl $9 =3D { llt_link =3D { sle_next =3D 0xdeadc0dedeadc0de },=20 llt_af =3D -559038242,=20 llt_hsize =3D -559038242,=20 lle_head =3D 0xdeadc0dedeadc0de,=20 llt_ifp =3D 0xdeadc0dedeadc0de,=20 llt_lookup =3D 0xdeadc0dedeadc0de,=20 llt_alloc_entry =3D 0xdeadc0dedeadc0de,=20 llt_delete_entry =3D 0xdeadc0dedeadc0de,=20 llt_prefix_free =3D 0xdeadc0dedeadc0de,=20 llt_dump_entry =3D 0xdeadc0dedeadc0de,=20 llt_hash =3D 0xdeadc0dedeadc0de,=20 llt_match_prefix =3D 0xdeadc0dedeadc0de,=20 llt_free_entry =3D 0xdeadc0dedeadc0de,=20 llt_foreach_entry =3D 0xdeadc0dedeadc0de,=20 llt_link_entry =3D 0xdeadc0dedeadc0de,=20 llt_unlink_entry =3D 0xdeadc0dedeadc0de,=20 llt_fill_sa_entry =3D 0xdeadc0dedeadc0de,=20 llt_free_tbl =3D 0xdeadc0dedeadc0de } (kgdb) --=20 You are receiving this mail because: You are the assignee for the bug.=
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-209682-2472-ty4GcKZAus>