From owner-freebsd-net@freebsd.org Tue Jan 23 20:15:57 2018 Return-Path: Delivered-To: freebsd-net@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 7A556EC4931 for ; Tue, 23 Jan 2018 20:15:57 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.ysv.freebsd.org (mxrelay.ysv.freebsd.org [IPv6:2001:1900:2254:206a::19:3]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mxrelay.ysv.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 6175F6CE32 for ; Tue, 23 Jan 2018 20:15:57 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2001:1900:2254:206a::16:76]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mxrelay.ysv.freebsd.org (Postfix) with ESMTPS id 5624B1004E for ; Tue, 23 Jan 2018 20:15:57 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.118]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id w0NKFviu019796 for ; Tue, 23 Jan 2018 20:15:57 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id w0NKFv1S019795 for freebsd-net@FreeBSD.org; Tue, 23 Jan 2018 20:15:57 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: freebsd-net@FreeBSD.org Subject: [Bug 209682] [panic] [netinet] arptimer race Date: Tue, 23 Jan 2018 20:15:57 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: CURRENT X-Bugzilla-Keywords: patch X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: daveb@spectralogic.com X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: freebsd-net@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: cc Message-ID: In-Reply-To: References: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated MIME-Version: 1.0 X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.25 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Jan 2018 20:15:57 -0000 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D209682 Dave Baukus changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |daveb@spectralogic.com --- Comment #4 from Dave Baukus --- I have hit this 2x in the last 4 days on stable 11.1: I'm still looking for a reliable way to recreate. #7 0xffffffff807835de in trap (frame=3D0xfffffe000038a7b0) at pcpu.h:222 #8 0xffffffff80767781 in calltrap () at /usr/home/daveb/p4work/SpectraBSD_stable/sys/amd64/amd64/exception.S:236 #9 0xffffffff804ba395 in _rw_wlock_cookie (c=3D0xdeadc0dedeadc2de, file=3D0xffffffff808839e0 "/usr/home/daveb/p4work/SpectraBSD_stable/sys/netinet/if_ether.c", line=3D2= 87) at /usr/home/daveb/p4work/SpectraBSD_stable/sys/kern/kern_rwlock.c:272 #10 0xffffffff805d348f in arptimer (arg=3D0xfffff8014c37a200) at /usr/home/daveb/p4work/SpectraBSD_stable/sys/netinet/if_ether.c:287 #11 0xffffffff804d5fb8 in softclock_call_cc (c=3D0xfffff8014c37a2b8, cc=3D<= value optimized out>, direct=3D) at /usr/home/daveb/p4work/SpectraBSD_stable/sys/kern/kern_timeout.c:729 #12 0xffffffff804d639c in softclock (arg=3D0xffffffff80ed1100) at /usr/home/daveb/p4work/SpectraBSD_stable/sys/kern/kern_timeout.c:867 #13 0xffffffff80483fc9 in intr_event_execute_handlers (p=3D, ie=3D0xfffff8011f130000) at /usr/home/daveb/p4work/SpectraBSD_stable/sys/kern/kern_intr.c:1262 #14 0xffffffff80484666 in ithread_loop (arg=3D0xfffff8011f0fd5c0) at /usr/home/daveb/p4work/SpectraBSD_stable/sys/kern/kern_intr.c:1275 #15 0xffffffff804816b4 in fork_exit (callout=3D0xffffffff804845b0 , arg=3D0xfffff8011f0fd5c0, frame=3D0xfffffe000038aac0) at /usr/home/daveb/p4work/SpectraBSD_stable/sys/kern/kern_fork.c:1042 #16 0xffffffff80767cbe in fork_trampoline () at /usr/home/daveb/p4work/SpectraBSD_stable/sys/amd64/amd64/exception.S:611 #17 0x0000000000000000 in ?? () (kgdb) frame 10 #10 0xffffffff805d348f in arptimer (arg=3D0xfffff8014c37a200) at /usr/home/daveb/p4work/SpectraBSD_stable/sys/netinet/if_ether.c:287 287 IF_AFDATA_LOCK(ifp); (kgdb) set $lle =3D (struct llentry *)arg (kgdb) p $lle $6 =3D (struct llentry *) 0xfffff8014c37a200 (kgdb) p *$lle $7 =3D { lle_next =3D { le_next =3D 0x0,=20 le_prev =3D 0xfffff80c29487a00 },=20 r_l3addr =3D { addr4 =3D { s_addr =3D 0 },=20 addr6 =3D { __u6_addr =3D { __u6_addr8 =3D 0xfffff8014c37a210 "",=20 __u6_addr16 =3D 0xfffff8014c37a210,=20 __u6_addr32 =3D 0xfffff8014c37a210 } } },=20 r_linkdata =3D 0xfffff8014c37a220 "$\001=EF=BF=BD#\234=EF=BF=BD",=20 r_hdrlen =3D 14 '\016',=20 spare0 =3D 0xfffff8014c37a239 "",=20 r_flags =3D 1,=20 r_skip_req =3D 1,=20 lle_tbl =3D 0xfffff80c6a454d00,=20 lle_head =3D 0xfffff80c29487a00,=20 lle_free =3D 0xffffffff805db670 ,=20 la_hold =3D 0x0,=20 la_numheld =3D 0,=20 la_expire =3D 11654,=20 la_flags =3D 1,=20 la_asked =3D 0,=20 la_preempt =3D 5,=20 ln_state =3D 2,=20 ln_router =3D 0,=20 ln_ntick =3D 0,=20 lle_remtime =3D 0,=20 lle_hittime =3D 0,=20 lle_refcnt =3D 1,=20 ll_addr =3D 0xfffff8014c37a220 "$\001=EF=BF=BD#\234=EF=BF=BD",=20 lle_chain =3D { le_next =3D 0x0,=20 le_prev =3D 0x0 },=20 lle_timer =3D { c_links =3D { le =3D { le_next =3D 0x0,=20 le_prev =3D 0xffffffff80ed1218 },=20 sle =3D { sle_next =3D 0x0 },=20 tqe =3D { tqe_next =3D 0x0,=20 tqe_prev =3D 0xffffffff80ed1218 } },=20 c_time =3D 50057632637741,=20 c_precision =3D 268435437,=20 c_arg =3D 0xfffff8014c37a200,=20 c_func =3D 0xffffffff805d31f0 ,=20 c_lock =3D 0x0,=20 c_flags =3D 0,=20 c_iflags =3D 144,=20 c_cpu =3D 0 },=20 lle_lock =3D { lock_object =3D { lo_name =3D 0xffffffff8087f95e "lle",=20 lo_flags =3D 90374144,=20 lo_data =3D 0,=20 lo_witness =3D 0xfffffe00009fe180 },=20 rw_lock =3D 1 },=20 req_mtx =3D { lock_object =3D { lo_name =3D 0xffffffff808848ce "lle req",=20 lo_flags =3D 16973824,=20 lo_data =3D 0,=20 lo_witness =3D 0xfffffe00009fe200 },=20 mtx_lock =3D 4 } } (kgdb) p *$lle->lle_tbl $9 =3D { llt_link =3D { sle_next =3D 0xdeadc0dedeadc0de },=20 llt_af =3D -559038242,=20 llt_hsize =3D -559038242,=20 lle_head =3D 0xdeadc0dedeadc0de,=20 llt_ifp =3D 0xdeadc0dedeadc0de,=20 llt_lookup =3D 0xdeadc0dedeadc0de,=20 llt_alloc_entry =3D 0xdeadc0dedeadc0de,=20 llt_delete_entry =3D 0xdeadc0dedeadc0de,=20 llt_prefix_free =3D 0xdeadc0dedeadc0de,=20 llt_dump_entry =3D 0xdeadc0dedeadc0de,=20 llt_hash =3D 0xdeadc0dedeadc0de,=20 llt_match_prefix =3D 0xdeadc0dedeadc0de,=20 llt_free_entry =3D 0xdeadc0dedeadc0de,=20 llt_foreach_entry =3D 0xdeadc0dedeadc0de,=20 llt_link_entry =3D 0xdeadc0dedeadc0de,=20 llt_unlink_entry =3D 0xdeadc0dedeadc0de,=20 llt_fill_sa_entry =3D 0xdeadc0dedeadc0de,=20 llt_free_tbl =3D 0xdeadc0dedeadc0de } (kgdb) --=20 You are receiving this mail because: You are the assignee for the bug.=