From nobody@FreeBSD.org  Mon Sep 17 08:31:19 2012
Return-Path: <nobody@FreeBSD.org>
Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52])
	by hub.freebsd.org (Postfix) with ESMTP id 672E0106566B
	for <freebsd-gnats-submit@FreeBSD.org>; Mon, 17 Sep 2012 08:31:19 +0000 (UTC)
	(envelope-from nobody@FreeBSD.org)
Received: from red.freebsd.org (red.freebsd.org [IPv6:2001:4f8:fff6::22])
	by mx1.freebsd.org (Postfix) with ESMTP id 3847F8FC12
	for <freebsd-gnats-submit@FreeBSD.org>; Mon, 17 Sep 2012 08:31:19 +0000 (UTC)
Received: from red.freebsd.org (localhost [127.0.0.1])
	by red.freebsd.org (8.14.5/8.14.5) with ESMTP id q8H8VJen033972
	for <freebsd-gnats-submit@FreeBSD.org>; Mon, 17 Sep 2012 08:31:19 GMT
	(envelope-from nobody@red.freebsd.org)
Received: (from nobody@localhost)
	by red.freebsd.org (8.14.5/8.14.5/Submit) id q8H8VIou033971;
	Mon, 17 Sep 2012 08:31:18 GMT
	(envelope-from nobody)
Message-Id: <201209170831.q8H8VIou033971@red.freebsd.org>
Date: Mon, 17 Sep 2012 08:31:18 GMT
From: "Eugene M. Zheganin" <eugene@zhegan.in>
To: freebsd-gnats-submit@FreeBSD.org
Subject: cannot record a crashdump whan FreeBSD panics, it panics while doing this again
X-Send-Pr-Version: www-3.1
X-GNATS-Notify:

>Number:         171700
>Category:       kern
>Synopsis:       cannot record a crashdump whan FreeBSD panics, it panics while doing this again
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-bugs
>State:          open
>Quarter:
>Keywords:
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Mon Sep 17 08:40:07 UTC 2012
>Closed-Date:
>Last-Modified:
>Originator:     Eugene M. Zheganin
>Release:        9.1-PRERELEASE
>Organization:
Vivat-Trade LLC
>Environment:
>Description:
I got a panic in ndp. I have a configured crashdump device:

# grep dump /etc/rc.conf
dumpdev="AUTO"
# ls -l /dev/dump*
lrwxr-xr-x  1 root  wheel  12 17 &#1089;&#1077;&#1085; 19:48 /dev/dumpdev -> /dev/aacd0p2

I have enough space:

# grep -i memory /var/run/dmesg.boot
real memory  = 4294967296 (4096 MB)
avail memory = 4089982976 (3900 MB)
# swapinfo
Device          1K-blocks     Used    Avail Capacity
/dev/aacd0p2      8388608        0  8388608     0%

Each time FreeBSd panics and tries to do a dump, it panics again:

panic: sin_family 18
cpuid = 1
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x2a
kdb_backtrace() at kdb_backtrace+0x37
panic() at panic+0x1d8
in6_lltable_lookup() at in6_lltable_lookup+0x44d
nd6_output_lle() at nd6_output_lle+0x349
nd6_output() at nd6_output+0x18
ip6_output() at ip6_output+0x122f
tcp_output() at tcp_output+0x12c7
tcp_usr_shutdown() at tcp_usr_shutdown+0xf8
sys_shutdown() at sys_shutdown+0x75
amd64_syscall() at amd64_syscall+0x2fa
Xfast_syscall() at Xfast_syscall+0xf7
--- syscall (134, FreeBSD ELF64, sys_shutdown), rip = 0x801fee65c, rsp = 0x7fffffffd728, rbp = 0x7fffffffd970 ---
Uptime: 43m28s
Dumping 545 out of 4079 MB:panic: Bad tailq NEXT(0xfffffe0002a74160->tqh_last) != NULL
cpuid = 1
Uptime: 43m28s
aac0: shutting down controller...

Another one:

panic: sin_family 18
cpuid = 2
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x2a
kdb_backtrace() at kdb_backtrace+0x37
panic() at panic+0x1d8
in6_lltable_lookup() at in6_lltable_lookup+0x44d
nd6_output_lle() at nd6_output_lle+0x349
nd6_output() at nd6_output+0x18
ip6_output() at ip6_output+0x122f
nd6_na_output_fib() at nd6_na_output_fib+0x4fa
nd6_ns_input() at nd6_ns_input+0x992
icmp6_input() at icmp6_input+0xb06
ip6_input() at ip6_input+0x8f4
netisr_dispatch_src() at netisr_dispatch_src+0x152
ether_demux() at ether_demux+0x17d
ether_nh_input() at ether_nh_input+0x20e
netisr_dispatch_src() at netisr_dispatch_src+0x152
ether_demux() at ether_demux+0x86
ether_nh_input() at ether_nh_input+0x20e
netisr_dispatch_src() at netisr_dispatch_src+0x152
bce_intr() at bce_intr+0x46a
intr_event_execute_handlers() at intr_event_execute_handlers+0x6a
ithread_loop() at ithread_loop+0xb4
fork_exit() at fork_exit+0x135
fork_trampoline() at fork_trampoline+0xe
--- trap 0, rip = 0, rsp = 0xffffff811a901cf0, rbp = 0 ---
Uptime: 19d0h34m11s
Dumping 1472 out of 4079 MB:panic: Bad tailq NEXT(0xfffffe0002a74160->tqh_last) != NULL
cpuid = 2
Uptime: 19d0h34m11s
aac0: shutting down controller...
>How-To-Repeat:
Configure a dump device in FreeBSD, make it panic.
>Fix:


>Release-Note:
>Audit-Trail:
>Unformatted:
