Date: Tue, 29 May 2018 16:53:13 +0300 From: Andriy Gapon <avg@FreeBSD.org> To: Hans Petter Selasky <hps@selasky.org>, FreeBSD Current <freebsd-current@FreeBSD.org> Subject: Re: head@r334204, Bad link elm in callout_process() Message-ID: <0df613ac-70aa-f793-1b7b-7a5e097fef28@FreeBSD.org> In-Reply-To: <84341ca3-90a5-97ef-8eee-dc1bbb07503c@selasky.org> References: <d52aa0a9-7fbe-da6e-aa36-f34171e33843@FreeBSD.org> <84341ca3-90a5-97ef-8eee-dc1bbb07503c@selasky.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On 29/05/2018 14:53, Hans Petter Selasky wrote:
> On 05/29/18 13:20, Andriy Gapon wrote:
>> (kgdb) p *$4.lh_first->c_links.le.le_next
>> $6 = {
>> c_links = {
>> le = {
>> le_next = 0x0,
>> le_prev = 0xfffffe0003999f98
>
> Where does the le_prev point?
>
> Typically happens when callouts are not properly drained before freeing memory.
Yeah, this could have been a pilot error.
I added some debugging code and that code could do callout_init + callout_reset
on an active or pending callout. I am not seeing the problem without the
debugging code.
Sorry for the noise!
--
Andriy Gapon
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?0df613ac-70aa-f793-1b7b-7a5e097fef28>