NetBSD Problem Report #28976

From woods@building.weird.com  Sat Jan 15 20:52:02 2005
Return-Path: <woods@building.weird.com>
Received: from building.weird.com (building.weird.com [204.92.254.24])
	by narn.netbsd.org (Postfix) with ESMTP id D301063B845
	for <gnats-bugs@gnats.netbsd.org>; Sat, 15 Jan 2005 20:52:01 +0000 (UTC)
Message-Id: <m1Cputt-0024g3C@building.weird.com>
Date: Sat, 15 Jan 2005 15:52:01 -0500 (EST)
From: "Greg A. Woods" <woods@weird.com>
Reply-To: "Greg A. Woods" <woods@planix.com>
To: gnats-bugs@netbsd.org
Subject: pool ipqepl: putting with none out, panic: pool_put, in tcp_reass() (netbsd-1-6)
X-Send-Pr-Version: 3.95

>Number:         28976
>Category:       kern
>Synopsis:       pool ipqepl: putting with none out, panic: pool_put, in tcp_reass() (netbsd-1-6)
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    kern-bug-people
>State:          closed
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Sat Jan 15 20:54:00 +0000 2005
>Closed-Date:    Thu Mar 29 18:58:20 +0000 2018
>Last-Modified:  Thu Mar 29 18:58:20 +0000 2018
>Originator:     Greg A. Woods
>Release:        netbsd-1-6 20050112
>Organization:
Planix, Inc.; Toronto, Ontario; Canada
>Environment:
System: NetBSD 1.6.2_STABLE
Architecture: i386
Machine: i386
>Description:

	google doesn't seem to know anything about this kind of panic,
	and I don't think I've ever seen anything like it before either...

	it happened during normal download activity while surfing the web

>How-To-Repeat:

pool ipqepl: putting with none out
panic: pool_put
Stopped at      cpu_Debugger+0x4:       movl    %ebp,%esp
db> trace
cpu_Debugger(c1cbd034,c1cbd034,c067b0a0,c029e21f,c1cbd034) at cpu_Debugger+0x4
panic(c04d9060,e5024c1c,e5024b9c,c029c5c6,c04d9040) at panic+0xb0
pool_do_put(c067b0a0,c1cbd034,eb,5,e5024c20) at pool_do_put+0x3b
pool_put(c067b0a0,c1cbd034,e5024c1c,c1cd9a00) at pool_put+0x16
tcp_reass(c1c12298,e328e034,c2027300,e5024c94,c1cd9a00) at tcp_reass+0x388
tcp_input(c1cd9a00,14,6,1,c1cd9a00) at tcp_input+0x20e6
ip_input(c1cd9a00,c01e4344,c18ea000,e4d0a3e4) at ip_input+0x63b
ipintr(10,10,10,10,e4d0a3e4) at ipintr+0x6b
Xsoftnet() at Xsoftnet+0x2c
--- interrupt ---
idle(e4d0a3e4,3,c0295254,e4d0a3e4) at idle+0x20
bpendtsleep(c0673c08,118,c04d9f40,3,0) at bpendtsleep
sys_select(e4d0a3e4,e5024f80,e5024f78,c18d5038) at sys_select+0x304
syscall_plain(1f,85a001f,85a001f,bfbf001f,85af680) at syscall_plain+0xa7
db> 
db> reboot
syncing disks... /building/work/woods/m-NetBSD-1.6/sys/netinet/tcp_input.c:2285: tcpcb 0xc1c12298 reass already locked
panic: tcp_reass_lock
Stopped at      cpu_Debugger+0x4:       movl    %ebp,%esp
db> 


>Fix:

	unknown

>Release-Note:

>Audit-Trail:
From: "Greg A. Woods" <woods@weird.com>
To: YAMAMOTO Takashi <yamt@mwd.biglobe.ne.jp>
Cc: kern-bug-people@netbsd.org,
	NetBSD GNATS submissions and followups <gnats-bugs@netbsd.org>,
	NetBSD Bugs and PR posting List <netbsd-bugs@NetBSD.ORG>
Subject: Re: kern/28976: pool ipqepl: putting with none out, panic: pool_put,
 in tcp_reass() (netbsd-1-6)
Date: Wed, 19 Jan 2005 15:54:07 -0500 (EST)

 [ On Monday, January 17, 2005 at 08:27:07 (+0900), YAMAMOTO Takashi wrote: ]
 > Subject: Re: kern/28976: pool ipqepl: putting with none out, panic: pool_put, in tcp_reass() (netbsd-1-6)
 >
 > > >Number:         28976
 > > >Category:       kern
 > > >Synopsis:       pool ipqepl: putting with none out, panic: pool_put, in tcp_reass() (netbsd-1-6)
 > 
 > > 	google doesn't seem to know anything about this kind of panic,
 > > 	and I don't think I've ever seen anything like it before either...
 > 
 > did you try a patch i've mailed you for PR/24782 ?

 Yes, in fact that's the only significant networking change I've made to
 the kernel on that system recently.

 Do you think the patch could be a possible cause of this problem?

 I have not yet built a kernel with that change for my alpha or sparc
 systems, which may explain why none of them have suffered a similar
 panic, yet this i386 system has now suffered a second identical panic
 even while it was mostly idle (though it may have been port scanned or
 such as it is internet accessible and only partly protected by a very
 liberal firewall).

 -- 
 						Greg A. Woods

 H:+1 416 218-0098  W:+1 416 489-5852 x122  VE3TCP  RoboHack <woods@robohack.ca>
 Planix, Inc. <woods@planix.com>          Secrets of the Weird <woods@weird.com>

From: "Greg A. Woods" <woods@weird.com>
To: NetBSD GNATS submissions and followups <gnats-bugs@netbsd.org>
Cc: YAMAMOTO Takashi <yamt@mwd.biglobe.ne.jp>,
	kern-bug-people@netbsd.org
Subject: Re: kern/28976: pool ipqepl: putting with none out, panic: pool_put,
 in tcp_reass() (netbsd-1-6)
Date: Wed, 19 Jan 2005 17:22:28 -0500 (EST)

 [ On Wednesday, January 19, 2005 at 15:54:07 (-0500), Greg A. Woods wrote: ]
 > Subject: Re: kern/28976: pool ipqepl: putting with none out, panic: pool_put, in tcp_reass() (netbsd-1-6)
 >
 > Do you think the patch could be a possible cause of this problem?

 To perhaps answer my own question, yes I do believe one instance of
 ipqent_pool was missed around about line 557....

 -- 
 						Greg A. Woods

 H:+1 416 218-0098  W:+1 416 489-5852 x122  VE3TCP  RoboHack <woods@robohack.ca>
 Planix, Inc. <woods@planix.com>          Secrets of the Weird <woods@weird.com>

From: "Greg A. Woods" <woods@weird.com>
To: NetBSD GNATS submissions and followups <gnats-bugs@netbsd.org>
Cc: kern-bug-people@netbsd.org, gnats-admin@netbsd.org
Subject: Re: kern/28976: Re: kern/28976: pool ipqepl: putting with none out, panic: pool_put, in tcp_reass() (netbsd-1-6)
Date: Tue, 25 Jan 2005 19:49:59 -0500 (EST)

 [ On Wednesday, January 19, 2005 at 22:23:01 (+0000), Greg A. Woods wrote: ]
 > Subject: kern/28976: Re: kern/28976: pool ipqepl: putting with none out, panic: pool_put, in tcp_reass() (netbsd-1-6)
 >
 >  To perhaps answer my own question, yes I do believe one instance of
 >  ipqent_pool was missed around about line 557....

 Just to follow up -- there have been no further panics since I fixed
 that one last reference to ipqent_pool...

 I would say that once the pullup includes this amendment that it's good
 to go in.

 -- 
 						Greg A. Woods

 H:+1 416 218-0098  W:+1 416 489-5852 x122  VE3TCP  RoboHack <woods@robohack.ca>
 Planix, Inc. <woods@planix.com>          Secrets of the Weird <woods@weird.com>

State-Changed-From-To: open->closed
State-Changed-By: maxv@NetBSD.org
State-Changed-When: Thu, 29 Mar 2018 18:58:20 +0000
State-Changed-Why:
Fixed.


>Unformatted:

Home	PR Database Search