On 15.08.2018 23:23, Matt Macy wrote:
> Author: mmacy
> Date: Wed Aug 15 20:23:08 2018
> New Revision: 337866
> URL: https://svnweb.freebsd.org/changeset/base/337866
> 
> Log:
>   Fix in6_multi double free
>   
>   This is actually several different bugs:
>   - The code is not designed to handle inpcb deletion after interface deletion
>     - add reference for inpcb membership
>   - The multicast address has to be removed from interface lists when the 
> refcount
>     goes to zero OR when the interface goes away
>     - decouple list disconnect from refcount (v6 only for now)
>   - ifmultiaddr can exist past being on interface lists
>     - add flag for tracking whether or not it's enqueued
>   - deferring freeing moptions makes the incpb cleanup code simpler but opens 
> the
>     door wider still to races
>     - call inp_gcmoptions synchronously after dropping the the inpcb lock
>   
>   Fundamentally multicast needs a rewrite - but keep applying band-aids for 
> now.
>   
>   Tested by: kp
>   Reported by: novel, kp, lwhsu
> 
> Modified:
>   head/sys/net/if.c
>   head/sys/net/if_var.h
>   head/sys/netinet/in_mcast.c
>   head/sys/netinet/in_pcb.c
>   head/sys/netinet/ip_carp.c
>   head/sys/netinet6/in6_ifattach.c
>   head/sys/netinet6/in6_mcast.c
>   head/sys/netinet6/in6_var.h
>   head/sys/netinet6/mld6.c

Hi,

After this commit my test machine panics just after boot finishes.
Reverting this commit helps.
Machine has two interfaces in failover lagg. One interface is not connected.

FreeBSD 12.0-ALPHA2 (GENERIC) #2 r337961M: Fri Aug 17 14:54:48 MSK 2018

# ifconfig
em0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
        
options=209b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,WOL_MAGIC>
        ether 00:22:4d:6a:5e:b9
        media: Ethernet autoselect
        status: no carrier
        nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
re0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
        
options=8209b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,WOL_MAGIC,LINKSTATE>
        ether 00:22:4d:6a:5e:b9
        hwaddr 1c:bd:b9:de:0d:7d
        media: Ethernet autoselect (1000baseT <full-duplex>)
        status: active
        nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
lagg0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
        
options=209b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,WOL_MAGIC>
        ether 00:22:4d:6a:5e:b9
        inet6 fe80::222:4dff:fe6a:5eb9%lagg0 prefixlen 64 scopeid 0x5
        inet 10.9.8.6 netmask 0xffffff00 broadcast 10.9.8.255
        laggproto failover lagghash l2,l3,l4
        laggport: em0 flags=1<MASTER>
        laggport: re0 flags=4<ACTIVE>
        groups: lagg
        media: Ethernet autoselect
        status: active
        nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>

-- 
WBR, Andrey V. Elsukov
GNU gdb (GDB) 8.1 [GDB v8.1 for FreeBSD]
Copyright (C) 2018 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-portbld-freebsd12.0".
Type "show configuration" for configuration details.
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>.
Find the GDB manual and other documentation resources online at:
<http://www.gnu.org/software/gdb/documentation/>.
For help, type "help".
Type "apropos word" to search for commands related to "word"...
Reading symbols from /boot/kernel/kernel...Reading symbols from 
/usr/lib/debug//boot/kernel/kernel.debug...done.
done.

Unread portion of the kernel message buffer:
---<<BOOT>>---
Copyright (c) 1992-2018 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
        The Regents of the University of California. All rights reserved.
FreeBSD is a registered trademark of The FreeBSD Foundation.
FreeBSD 12.0-ALPHA2 #1 r337961M: Fri Aug 17 14:07:50 MSK 2018
    
butc...@btr-test.yandex.net:/usr/obj/home/devel/freebsd/base/head/amd64.amd64/sys/GENERIC
 amd64
FreeBSD clang version 6.0.1 (tags/RELEASE_601/final 335540) (based on LLVM 
6.0.1)
WARNING: WITNESS option enabled, expect reduced performance.
VT(vga): resolution 640x480
CPU: Intel(R) Core(TM) i5-2400 CPU @ 3.10GHz (3093.05-MHz K8-class CPU)
  Origin="GenuineIntel"  Id=0x206a7  Family=0x6  Model=0x2a  Stepping=7
  
Features=0xbfebfbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE>
  
Features2=0x1fbae3ff<SSE3,PCLMULQDQ,DTES64,MON,DS_CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,TSCDLT,AESNI,XSAVE,OSXSAVE,AVX>
  AMD Features=0x28100800<SYSCALL,NX,RDTSCP,LM>
  AMD Features2=0x1<LAHF>
  XSAVE Features=0x1<XSAVEOPT>
  VT-x: PAT,HLT,MTF,PAUSE,EPT,UG,VPID
  TSC: P-state invariant, performance statistics
real memory  = 25769803776 (24576 MB)
avail memory = 24864264192 (23712 MB)
Event timer "LAPIC" quality 600
ACPI APIC Table: <INTEL  DQ67SW  >
FreeBSD/SMP: Multiprocessor System Detected: 4 CPUs
FreeBSD/SMP: 1 package(s) x 4 core(s)
random: unblocking device.
ioapic0 <Version 2.0> irqs 0-23 on motherboard
Launching APs: 2 1 3
Timecounter "TSC-low" frequency 1546522861 Hz quality 1000
random: entropy device external interface
[ath_hal] loaded
module_register_init: MOD_LOAD (vesa, 0xffffffff81101160, 0) error 19
kbd1 at kbdmux0
netmap: loaded module
nexus0
vtvga0: <VT VGA driver> on motherboard
cryptosoft0: <software crypto> on motherboard
acpi0: <RStyle Proxima> on motherboard
acpi0: Power Button (fixed)
cpu0: <ACPI CPU> on acpi0
attimer0: <AT timer> port 0x40-0x43 irq 0 on acpi0
Timecounter "i8254" frequency 1193182 Hz quality 0
Event timer "i8254" frequency 1193182 Hz quality 100
atrtc0: <AT realtime clock> port 0x70-0x71 irq 8 on acpi0
atrtc0: registered as a time-of-day clock, resolution 1.000000s
Event timer "RTC" frequency 32768 Hz quality 0
hpet0: <High Precision Event Timer> iomem 0xfed00000-0xfed003ff on acpi0
Timecounter "HPET" frequency 14318180 Hz quality 950
Event timer "HPET" frequency 14318180 Hz quality 550
Event timer "HPET1" frequency 14318180 Hz quality 440
Event timer "HPET2" frequency 14318180 Hz quality 440
Event timer "HPET3" frequency 14318180 Hz quality 440
Event timer "HPET4" frequency 14318180 Hz quality 440
Timecounter "ACPI-fast" frequency 3579545 Hz quality 900
acpi_timer0: <24-bit timer at 3.579545MHz> port 0x408-0x40b on acpi0
pcib0: <ACPI Host-PCI bridge> port 0xcf8-0xcff on acpi0
pci0: <ACPI PCI bus> on pcib0
pcib1: <ACPI PCI-PCI bridge> irq 16 at device 1.0 on pci0
pci1: <ACPI PCI bus> on pcib1
vgapci0: <VGA-compatible display> port 0xf000-0xf03f mem 
0xfe000000-0xfe3fffff,0xd0000000-0xdfffffff irq 16 at device 2.0 on pci0
vgapci0: Boot video device
pci0: <simple comms> at device 22.0 (no driver attached)
atapci0: <Intel ATA controller> port 
0xf130-0xf137,0xf120-0xf123,0xf110-0xf117,0xf100-0xf103,0xf0f0-0xf0ff irq 18 at 
device 22.2 on pci0
ata2: <ATA channel> at channel 0 on atapci0
ata3: <ATA channel> at channel 1 on atapci0
uart2: <Intel AMT - KT Controller> port 0xf0e0-0xf0e7 mem 0xfe629000-0xfe629fff 
irq 17 at device 22.3 on pci0
uart2: Using 1 MSI message
em0: <Intel(R) PRO/1000 Network Connection> port 0xf080-0xf09f mem 
0xfe600000-0xfe61ffff,0xfe628000-0xfe628fff irq 20 at device 25.0 on pci0
em0: attach_pre capping queues at 1
em0: using 1024 tx descriptors and 1024 rx descriptors
em0: msix_init qsets capped at 1
em0: Unable to map MSIX table 
em0: Using an MSI interrupt
em0: allocated for 1 tx_queues
em0: allocated for 1 rx_queues
<6>em0: Ethernet address: 00:22:4d:6a:5e:b9
<6>em0: netmap queues/slots: TX 1/1024, RX 1/1024
ehci0: <Intel Cougar Point USB 2.0 controller> mem 0xfe627000-0xfe6273ff irq 16 
at device 26.0 on pci0
usbus0: EHCI version 1.0
usbus0 on ehci0
usbus0: 480Mbps High Speed USB v2.0
hdac0: <Intel Cougar Point HDA Controller> mem 0xfe620000-0xfe623fff irq 22 at 
device 27.0 on pci0
pcib2: <ACPI PCI-PCI bridge> irq 17 at device 28.0 on pci0
pci2: <ACPI PCI bus> on pcib2
pcib3: <ACPI PCI-PCI bridge> irq 18 at device 28.6 on pci0
pci3: <ACPI PCI bus> on pcib3
xhci0: <NEC uPD720200 USB 3.0 controller> mem 0xfe500000-0xfe501fff irq 18 at 
device 0.0 on pci3
xhci0: 32 bytes context size, 32-bit DMA
xhci0: Unable to map MSI-X table 
usbus1 on xhci0
usbus1: 5.0Gbps Super Speed USB v3.0
ehci1: <Intel Cougar Point USB 2.0 controller> mem 0xfe626000-0xfe6263ff irq 23 
at device 29.0 on pci0
usbus2: EHCI version 1.0
usbus2 on ehci1
usbus2: 480Mbps High Speed USB v2.0
pcib4: <ACPI PCI-PCI bridge> at device 30.0 on pci0
pci4: <ACPI PCI bus> on pcib4
re0: <D-Link DGE-528(T) Gigabit Ethernet Adapter> port 0xe000-0xe0ff mem 
0xfe421000-0xfe4210ff irq 16 at device 0.0 on pci4
re0: Chip rev. 0x10000000
re0: MAC rev. 0x00000000
miibus0: <MII bus> on re0
rgephy0: <RTL8169S/8110S/8211 1000BASE-T media interface> PHY 1 on miibus0
rgephy0:  none, 10baseT, 10baseT-FDX, 10baseT-FDX-flow, 100baseTX, 
100baseTX-FDX, 100baseTX-FDX-flow, 1000baseT, 1000baseT-master, 1000baseT-FDX, 
1000baseT-FDX-master, 1000baseT-FDX-flow, 1000baseT-FDX-flow-master, auto, 
auto-flow
<6>re0: Using defaults for TSO: 65518/35/2048
<6>re0: Ethernet address: 1c:bd:b9:de:0d:7d
<6>re0: netmap queues/slots: TX 1/256, RX 1/256
pci4: <serial bus, FireWire> at device 3.0 (no driver attached)
isab0: <PCI-ISA bridge> at device 31.0 on pci0
isa0: <ISA bus> on isab0
ahci0: <Intel Cougar Point AHCI SATA controller> port 
0xf0d0-0xf0d7,0xf0c0-0xf0c3,0xf0b0-0xf0b7,0xf0a0-0xf0a3,0xf060-0xf07f mem 
0xfe625000-0xfe6257ff irq 19 at device 31.2 on pci0
ahci0: AHCI v1.30 with 6 6Gbps ports, Port Multiplier not supported
ahcich0: <AHCI channel> at channel 0 on ahci0
ahcich3: <AHCI channel> at channel 3 on ahci0
ahcich4: <AHCI channel> at channel 4 on ahci0
ahcich5: <AHCI channel> at channel 5 on ahci0
ahciem0: <AHCI enclosure management bridge> on ahci0
acpi_button0: <Power Button> on acpi0
uart0: <16550 or compatible> port 0x3f8-0x3ff irq 4 flags 0x10 on acpi0
orm0: <ISA Option ROMs> at iomem 0xc0000-0xcdfff,0xce000-0xcefff pnpid ORM0000 
on isa0
atkbdc0: <Keyboard controller (i8042)> at port 0x60,0x64 on isa0
atkbd0: <AT Keyboard> irq 1 on atkbdc0
kbd0 at atkbd0
atkbd0: [GIANT-LOCKED]
atkbdc0: non-PNP ISA device will be removed from GENERIC in FreeBSD 12.
est0: <Enhanced SpeedStep Frequency Control> on cpu0
ZFS filesystem version: 5
ZFS storage pool version: features support (5000)
Timecounters tick every 1.000 msec
hdacc0: <Realtek ALC888 HDA CODEC> at cad 2 on hdac0
hdaa0: <Realtek ALC888 Audio Function Group> at nid 1 on hdacc0
pcm0: <Realtek ALC888 (Rear Analog)> at nid 20 and 24,26 on hdaa0
pcm1: <Realtek ALC888 (Front Analog)> at nid 27 and 25 on hdaa0
pcm2: <Realtek ALC888 (Onboard Digital)> at nid 30 on hdaa0
pcm3: <Realtek ALC888 (Onboard Analog Speaker)> at nid 23 on hdaa0
hdacc1: <Intel Cougar Point HDA CODEC> at cad 3 on hdac0
hdaa1: <Intel Cougar Point Audio Function Group> at nid 1 on hdacc1
pcm4: <Intel Cougar Point (HDMI/DP 8ch)> at nid 6 on hdaa1
ugen0.1: <Intel EHCI root HUB> at usbus0
ugen1.1: <0x1033 XHCI root HUB> at usbus1
ugen2.1: <Intel EHCI root HUB> at usbus2
uhub0: <Intel EHCI root HUB, class 9/0, rev 2.00/1.00, addr 1> on usbus0
uhub1: <Intel EHCI root HUB, class 9/0, rev 2.00/1.00, addr 1> on usbus2
uhub2: <0x1033 XHCI root HUB, class 9/0, rev 3.00/1.00, addr 1> on usbus1
uhub2: 4 ports with 4 removable, self powered
uhub1: 3 ports with 3 removable, self powered
uhub0: 3 ports with 3 removable, self powered
ses0 at ahciem0 bus 0 scbus6 target 0 lun 0
ses0: <AHCI SGPIO Enclosure 1.00 0001> SEMB S-E-S 2.00 device
ses0: SEMB SES Device
ada0 at ahcich0 bus 0 scbus2 target 0 lun 0
ada0: <HDS725050KLA360 K2AOAB5A> ATA-7 SATA 2.x device
ada0: Serial Number KRVN67ZBH70EMF
ada0: 300.000MB/s transfers (SATA 2.x, UDMA6, PIO 8192bytes)
ada0: Command Queueing enabled
ada0: 476940MB (976773168 512 byte sectors)
ugen2.2: <vendor 0x8087 product 0x0024> at usbus2
uhub3 on uhub1
uhub3: <vendor 0x8087 product 0x0024, class 9/0, rev 2.00/0.00, addr 2> on 
usbus2
cd0 at ahcich3 bus 0 scbus3 target 0 lun 0
cd0: <Optiarc DVD RW AD-7280S 1.01> Removable CD-ROM SCSI device
cd0: 150.000MB/s transfers (SATA 1.x, UDMA5, ATAPI 12bytes, PIO 8192bytes)
cd0: Attempt to query device size failed: NOT READY, Medium not present - tray 
closed
WARNING: WITNESS option enabled, expect reduced performance.
Trying to mount root from zfs:z/ROOT/head []...
ugen0.2: <vendor 0x8087 product 0x0024> at usbus0
uhub4 on uhub0
uhub4: <vendor 0x8087 product 0x0024, class 9/0, rev 2.00/0.00, addr 2> on 
usbus0
Root mount waiting for: usbus2 usbus0
uhub4: 6 ports with 6 removable, self powered
Root mount waiting for: usbus2 usbus0
uhub3: 8 ports with 8 removable, self powered
ugen0.3: <vendor 0x04f3 product 0x0103> at usbus0
ukbd0 on uhub4
ukbd0: <vendor 0x04f3 product 0x0103, class 0/0, rev 2.00/1.07, addr 3> on 
usbus0
kbd2 at ukbd0
<118>Setting hostuuid: d0848cdb-a7f4-e011-bb5d-000ea68f73ad.
<118>Setting hostid: 0xfe8654eb.
<118>Starting file system checks:
<118>Mounting local filesystems:.
<118>ELF ldconfig path: /lib /usr/lib /usr/lib/compat /usr/local/lib 
/usr/local/lib/compat /usr/local/lib/perl5/5.26/mach/CORE /usr/local/lib/pth
<118>32-bit compatibility ldconfig path: /usr/lib32 /usr/local/lib32/compat
<118>Setting hostname: btr-test.yandex.net.
<118>Setting up harvesting: 
[UMA],[FS_ATIME],SWI,INTERRUPT,NET_NG,NET_ETHER,NET_TUN,MOUSE,KEYBOARD,ATTACH,CACHED
<118>Feeding entropy: .
<118>Created clone interfaces: lagg0.
<6>lo0: link state changed to UP
<6>re0: link state changed to DOWN
<6>lagg0: IPv6 addresses on em0 have been removed before adding it as a member 
to prevent IPv6 address scope violation.
<6>lagg0: link state changed to DOWN
<6>lagg0: IPv6 addresses on re0 have been removed before adding it as a member 
to prevent IPv6 address scope violation.
<6>re0: link state changed to UP
<6>lagg0: link state changed to UP
<118>Starting Network: lo0 em0 re0 enc0 lagg0.
<118>lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
<118>   options=680003<RXCSUM,TXCSUM,LINKSTATE,RXCSUM_IPV6,TXCSUM_IPV6>
<118>   inet6 ::1 prefixlen 128 
<118>   inet6 fe80::1%lo0 prefixlen 64 scopeid 0x3 
<118>   inet 127.0.0.1 netmask 0xff000000 
<118>   groups: lo 
<118>   nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
<118>em0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
<118>   
options=209b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,WOL_MAGIC>
<118>   ether 00:22:4d:6a:5e:b9
<118>   media: Ethernet autoselect
<118>   status: no carrier
<118>   nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
<118>re0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
<118>   
options=8209b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,WOL_MAGIC,LINKSTATE>
<118>   ether 00:22:4d:6a:5e:b9
<118>   hwaddr 1c:bd:b9:de:0d:7d
<118>   media: Ethernet autoselect (1000baseT <full-duplex>)
<118>   status: active
<118>   nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
<118>enc0: flags=0<> metric 0 mtu 1536
<118>   groups: enc 
<118>   nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
<118>lagg0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
<118>   
options=209b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,WOL_MAGIC>
<118>   ether 00:22:4d:6a:5e:b9
<118>   inet6 fe80::222:4dff:fe6a:5eb9%lagg0 prefixlen 64 scopeid 0x5 
<118>   laggproto failover lagghash l2,l3,l4
<118>   laggport: em0 flags=1<MASTER>
<118>   laggport: re0 flags=4<ACTIVE>
<118>   groups: lagg 
<118>   media: Ethernet autoselect
<118>   status: active
<118>   nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
<118>Starting devd.
<118>Starting Network: enc0.
<118>enc0: flags=0<> metric 0 mtu 1536
<118>   groups: enc 
<118>   nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
<118>Autoloading module: uhid.ko
uhid0 on uhub4
uhid0: <vendor 0x04f3 product 0x0103, class 0/0, rev 2.00/1.07, addr 3> on 
usbus0
<118>Starting dhclient.
<118>DHCPREQUEST on lagg0 to 255.255.255.255 port 67
<118>DHCPACK from 10.9.8.1
Kernel page fault with the following non-sleepable locks held:
exclusive sleep mutex mld_mtx (mld_mtx) r = 0 (0xffffffff81fdb618) locked @ 
/home/devel/freebsd/base/head/sys/netinet6/mld6.c:1354
exclusive sleep mutex in6_multi_list_mtx (in6_multi_list_mtx) r = 0 
(0xffffffff82051150) locked @ 
/home/devel/freebsd/base/head/sys/netinet6/mld6.c:1353
shared rw vnet_rwlock (vnet_rwlock) r = 0 (0xffffffff82050d80) locked @ 
/home/devel/freebsd/base/head/sys/netinet6/mld6.c:1314
stack backtrace:
#0 0xffffffff80c01643 at witness_debugger+0x73
#1 0xffffffff80c02a21 at witness_warn+0x461
#2 0xffffffff8107e093 at trap_pfault+0x53
#3 0xffffffff8107d6aa at trap+0x2ba
#4 0xffffffff81057e85 at calltrap+0x8
#5 0xffffffff80e04262 at mld_v1_transmit_report+0x62
#6 0xffffffff80e02c4b at mld_fasttimo+0xaab
#7 0xffffffff80c283c4 at pffasttimo+0x54
#8 0xffffffff80baf710 at softclock_call_cc+0x150
#9 0xffffffff80bafadc at softclock+0x7c
#10 0xffffffff80b57340 at ithread_loop+0x140
#11 0xffffffff80b54224 at fork_exit+0x84
#12 0xffffffff81058e5e at fork_trampoline+0xe


Fatal trap 12: page fault while in kernel mode
cpuid = 0; apic id = 00
fault virtual address   = 0x1a8
fault code              = supervisor read data, page not present
instruction pointer     = 0x20:0xffffffff80de6b52
stack pointer           = 0x28:0xfffffe0077bce790
frame pointer           = 0x28:0xfffffe0077bce7d0
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 12 (swi4: clock (0))

__curthread () at ./machine/pcpu.h:230
230             __asm("movq %%gs:%1,%0" : "=r" (td)
(kgdb) bt
#0  __curthread () at ./machine/pcpu.h:230
#1  doadump (textdump=1)
    at /home/devel/freebsd/base/head/sys/kern/kern_shutdown.c:366
#2  0xffffffff8043f10c in db_fncall_generic (addr=<optimized out>, 
    rv=<optimized out>, nargs=<optimized out>, args=<optimized out>)
    at /home/devel/freebsd/base/head/sys/ddb/db_command.c:609
#3  db_fncall (dummy1=<optimized out>, dummy2=<optimized out>, 
    dummy3=<optimized out>, dummy4=<optimized out>)
    at /home/devel/freebsd/base/head/sys/ddb/db_command.c:657
#4  0xffffffff8043ec49 in db_command (last_cmdp=<optimized out>, 
    cmd_table=<optimized out>, dopager=<optimized out>)
    at /home/devel/freebsd/base/head/sys/ddb/db_command.c:481
#5  0xffffffff8043e9c4 in db_command_loop ()
    at /home/devel/freebsd/base/head/sys/ddb/db_command.c:534
#6  0xffffffff80441bef in db_trap (type=<optimized out>, code=<optimized out>)
    at /home/devel/freebsd/base/head/sys/ddb/db_main.c:252
#7  0xffffffff80be00e3 in kdb_trap (type=12, code=0, tf=<optimized out>)
    at /home/devel/freebsd/base/head/sys/kern/subr_kdb.c:693
#8  0xffffffff8107df81 in trap_fatal (frame=0xfffffe0077bce6d0, eva=424)
    at /home/devel/freebsd/base/head/sys/amd64/amd64/trap.c:906
#9  0xffffffff8107e0a2 in trap_pfault (frame=0xfffffe0077bce6d0, 
    usermode=<optimized out>)
    at /home/devel/freebsd/base/head/sys/amd64/amd64/trap.c:746
#10 0xffffffff8107d6aa in trap (frame=0xfffffe0077bce6d0)
    at /home/devel/freebsd/base/head/sys/amd64/amd64/trap.c:427
#11 <signal handler called>
#12 ck_pr_md_load_ptr (target=<optimized out>)
    at 
/home/devel/freebsd/base/head/sys/contrib/ck/include/gcc/x86_64/ck_pr.h:185
#13 in6ifa_ifpforlinklocal (ifp=0x0, ignoreflags=7)
    at /home/devel/freebsd/base/head/sys/netinet6/in6.c:1474
#14 0xffffffff80e04262 in mld_v1_transmit_report (in6m=0xfffff80019839300, 
    type=131) at /home/devel/freebsd/base/head/sys/netinet6/mld6.c:1803
#15 0xffffffff80e02c4b in mld_fasttimo_vnet ()
    at /home/devel/freebsd/base/head/sys/netinet6/mld6.c:1433
#16 mld_fasttimo () at /home/devel/freebsd/base/head/sys/netinet6/mld6.c:1317
#17 0xffffffff80c283c4 in pffasttimo (arg=0xfffffe0077b99a00)
    at /home/devel/freebsd/base/head/sys/kern/uipc_domain.c:521
#18 0xffffffff80baf710 in softclock_call_cc (
    c=0xffffffff81fc4ed0 <pffast_callout>, cc=0xffffffff8203b480 <cc_cpu>, 
    direct=<optimized out>)
    at /home/devel/freebsd/base/head/sys/kern/kern_timeout.c:731
#19 0xffffffff80bafadc in softclock (arg=0xffffffff8203b480 <cc_cpu>)
    at /home/devel/freebsd/base/head/sys/kern/kern_timeout.c:869
#20 0xffffffff80b57340 in intr_event_execute_handlers (p=<optimized out>, 
    ie=<optimized out>)
    at /home/devel/freebsd/base/head/sys/kern/kern_intr.c:1043
#21 ithread_execute_handlers (p=<optimized out>, ie=<optimized out>)
    at /home/devel/freebsd/base/head/sys/kern/kern_intr.c:1056
#22 ithread_loop (arg=<optimized out>)
    at /home/devel/freebsd/base/head/sys/kern/kern_intr.c:1136
#23 0xffffffff80b54224 in fork_exit (
    callout=0xffffffff80b57200 <ithread_loop>, arg=0xfffff800035e9f00, 
    frame=0xfffffe0077bceac0)
    at /home/devel/freebsd/base/head/sys/kern/kern_fork.c:1057
#24 <signal handler called>
(kgdb) f 14
#14 0xffffffff80e04262 in mld_v1_transmit_report (in6m=0xfffff80019839300, 
    type=131) at /home/devel/freebsd/base/head/sys/netinet6/mld6.c:1803
1803            ia = in6ifa_ifpforlinklocal(ifp, 
IN6_IFF_NOTREADY|IN6_IFF_ANYCAST);
(kgdb) i lo
ifp = 0x0
ia = <optimized out>
mh = <optimized out>
md = <optimized out>
ip6 = <optimized out>
mld = <optimized out>
(kgdb) p in6m
$1 = (struct in6_multi *) 0xfffff80019839300
(kgdb) p *in6m
$2 = {in6m_addr = {__u6_addr = {
      __u6_addr8 = 
"\377\002\000\005\000\000\000\000\000\000\000\002\324\361\304G", __u6_addr16 = 
{767, 1280, 0, 0, 0, 512, 61908, 18372}, __u6_addr32 = {
        83886847, 0, 33554432, 1204089300}}}, in6m_ifp = 0x0, 
  in6m_ifma = 0xfffff80003b50400, in6m_refcount = 0, in6m_state = 3, 
  in6m_timer = 0, in6m_mli = 0xfffff800030d2880, in6m_nrele = {
    sle_next = 0x0}, in6m_srcs = {rbh_root = 0x0}, in6m_nsrc = 0, in6m_scq = {
    mq_head = {stqh_first = 0x0, stqh_last = 0xfffff80019839350}, mq_len = 0, 
    mq_maxlen = 24}, in6m_lastgsrtv = {tv_sec = 0, tv_usec = 0}, 
  in6m_sctimer = 0, in6m_scrv = 1, in6m_st = {{iss_fmode = 2, iss_asm = 1, 
      iss_ex = 1, iss_in = 0, iss_rec = 0}, {iss_fmode = 2, iss_asm = 1, 
      iss_ex = 1, iss_in = 0, iss_rec = 0}}}
(kgdb) quit

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to