From nobody@FreeBSD.org  Sun Jun  6 12:08:01 2010
Return-Path: <nobody@FreeBSD.org>
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id E8BDE1065670
	for <freebsd-gnats-submit@FreeBSD.org>; Sun,  6 Jun 2010 12:08:00 +0000 (UTC)
	(envelope-from nobody@FreeBSD.org)
Received: from www.freebsd.org (www.freebsd.org [IPv6:2001:4f8:fff6::21])
	by mx1.freebsd.org (Postfix) with ESMTP id CCCBE8FC0C
	for <freebsd-gnats-submit@FreeBSD.org>; Sun,  6 Jun 2010 12:08:00 +0000 (UTC)
Received: from www.freebsd.org (localhost [127.0.0.1])
	by www.freebsd.org (8.14.3/8.14.3) with ESMTP id o56C80si002040
	for <freebsd-gnats-submit@FreeBSD.org>; Sun, 6 Jun 2010 12:08:00 GMT
	(envelope-from nobody@www.freebsd.org)
Received: (from nobody@localhost)
	by www.freebsd.org (8.14.3/8.14.3/Submit) id o56C80tR002039;
	Sun, 6 Jun 2010 12:08:00 GMT
	(envelope-from nobody)
Message-Id: <201006061208.o56C80tR002039@www.freebsd.org>
Date: Sun, 6 Jun 2010 12:08:00 GMT
From: Sebastian Hyrwall <sh@keff.org>
To: freebsd-gnats-submit@FreeBSD.org
Subject: sbdrops kernel panic
X-Send-Pr-Version: www-3.1
X-GNATS-Notify:

>Number:         147558
>Category:       kern
>Synopsis:       [panic] sbdrops kernel panic
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sun Jun 06 12:10:04 UTC 2010
>Closed-Date:    
>Last-Modified:  Tue Jun  8 05:40:04 UTC 2010
>Originator:     Sebastian Hyrwall
>Release:        7.3-RELEASE
>Organization:
none
>Environment:
# uname -a
FreeBSD .... 7.3-RELEASE FreeBSD 7.3-RELEASE #0: Sun Mar 21 06:15:01 UTC 2010     root@walker.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC  i386

>Description:
"Random" kernelpanics related to "sbdrops" after the system has been on for a few hours. 

Only process running is Quagga (bgpd,zebra). 
Network traffic is minimum (<= 100kbit/s avg). 
NIC is bge. 
IPV6 is enabled/configured.

Attaching stacktrace. 

VMCORE available at : http://slask.keff.org/vmcore

# kgdb kernel /var/crash/vmcore.1
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd"...

Unread portion of the kernel message buffer:
panic: sbdrop
cpuid = 0
Uptime: 14h31m24s
Physical memory: 1011 MB
Dumping 154 MB: 139 123 107 91 75 59 43 27 11

Reading symbols from /boot/kernel/acpi.ko...Reading symbols from /boot/kernel/ac                                                                                                      
pi.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/acpi.ko
Reading symbols from /boot/kernel/pf.ko...Reading symbols from /boot/kernel/pf.k                                                                                                      
o.symbols...done.
done.
Loaded symbols for /boot/kernel/pf.ko
#0  doadump () at pcpu.h:196
196     pcpu.h: No such file or directory.
        in pcpu.h
(kgdb) backtrace
#0  doadump () at pcpu.h:196
#1  0xc07f8c57 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:418
#2  0xc07f8f29 in panic (fmt=Variable "fmt" is not available.
) at /usr/src/sys/kern/kern_shutdown.c:574
#3  0xc08514db in sbdrop_internal (sb=0xc469b5c4, len=293)
    at /usr/src/sys/kern/uipc_sockbuf.c:843
#4  0xc08516ce in sbdrop_locked (sb=0xc469b5c4, len=398)
    at /usr/src/sys/kern/uipc_sockbuf.c:893
#5  0xc0853f90 in soisdisconnected (so=0xc469b4e0)
    at /usr/src/sys/kern/uipc_socket.c:3097
#6  0xc094e32e in tcp_close (tp=0xc5714740)
    at /usr/src/sys/netinet/tcp_subr.c:819
#7  0xc094e4ac in tcp_drop (tp=0xc5714740, errno=61)
    at /usr/src/sys/netinet/tcp_subr.c:699
#8  0xc0953ca2 in tcp_timer_rexmt (xtp=0xc5714740)
    at /usr/src/sys/netinet/tcp_timer.c:455
#9  0xc080b7aa in softclock (dummy=0x0) at /usr/src/sys/kern/kern_timeout.c:274
#10 0xc07d54ab in ithread_loop (arg=0xc4093240)
    at /usr/src/sys/kern/kern_intr.c:1181
#11 0xc07d1c49 in fork_exit (callout=0xc07d5300 <ithread_loop>,
    arg=0xc4093240, frame=0xc3fb1d38) at /usr/src/sys/kern/kern_fork.c:811
#12 0xc0ae50b0 in fork_trampoline () at /usr/src/sys/i386/i386/exception.s:271
(kgdb)

>How-To-Repeat:
You wait a few hours (~10h).
>Fix:
>Release-Note:
>Audit-Trail:

From: Sebastian Hyrwall <sh@keff.org>
To: bug-followup@FreeBSD.org, sh@keff.org
Cc:  
Subject: Re: kern/147558: sbdrops kernel panic
Date: Sun, 06 Jun 2010 15:27:04 +0200

 Hi
 
 I seemed to have made a little mistake by posting the stack-trace under 
 the "fix"-section. This is of course not a fix.
 
 
 Some more information:
 
 HP DL360 G3
 CPU: Intel(R) Xeon(TM) CPU 2.80GHz (2799.22-MHz 686-class CPU)
   Logical CPUs per core: 2
 FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs
  cpu0 (BSP): APIC ID:  6
  cpu1 (AP/HT): APIC ID:  7
 
 Sincerely,
 Sebastian H

From: Sebastian Hyrwall <sh@keff.org>
To: bug-followup@FreeBSD.org, sh@keff.org
Cc:  
Subject: Re: kern/147558: [panic] sbdrops kernel panic
Date: Tue, 08 Jun 2010 07:36:56 +0200

 Hi
 
 Problem seems to have gone away after disabling TSO on the bge 
 interface. Still doing testing but stable for 40 hours now.
 
 Sincerely,
 Sebastian H
>Unformatted:
