DragonFlyBSD

:The exact message is:
:
:panic: Bad link elm 0xfffffffe5655be58 prev->next != elm
:
:It seems launching a browser and opening a bunch of tabs at once is enough
:to cause this panic.
:
:I have put a bunch of core and kernel files at
:http://www.wolfpond.org/crash.dfly/
:
:--
:Francois Tigeot

Your kernel is more recent then my fix as far as I can tell but I was
sure I fixed that one. Try doing a full recompile of the kernel.

-Matt
Matthew Dillon
<dillon@backplane.com>

I went through the code in kern.26 and it was definitely up-to-date.

I think this crash may be related to one Jan Lentfer is getting where
a socket is getting ripped out from under some code that it shouldn't
be getting ripped out from under.

-Matt
Matthew Dillon
<dillon@backplane.com>

On Sun, Sep 12, 2010 at 01:54:47PM -0700, Matthew Dillon wrote:
> I went through the code in kern.26 and it was definitely up-to-date.
>
> I think this crash may be related to one Jan Lentfer is getting where
> a socket is getting ripped out from under some code that it shouldn't
> be getting ripped out from under.

I have upgraded anyway; hopefully the new socket assertions will help in
tracking this down.

:On Sun, Sep 12, 2010 at 01:54:47PM -0700, Matthew Dillon wrote:
:> I went through the code in kern.26 and it was definitely up-to-date.
:>
:> I think this crash may be related to one Jan Lentfer is getting where
:> a socket is getting ripped out from under some code that it shouldn't
:> be getting ripped out from under.
:
:I have upgraded anyway; hopefully the new socket assertions will help in
:tracking this down.
:
:--
:Francois Tigeot

I believe these should now be fixed for real. There was an additional
issue with the list the inpcb was placed on that caused another MP
race.

-Matt
Matthew Dillon
<dillon@backplane.com>

On Sun, Sep 12, 2010 at 11:26:17PM -0700, Matthew Dillon wrote:
>
> I believe these should now be fixed for real. There was an additional
> issue with the list the inpcb was placed on that caused another MP
> race.

Yep, this one can be closed.
I couldn't reproduce the crash with the last kernel.

:Yep, this one can be closed.
:I couldn't reproduce the crash with the last kernel.
:
:--
:Francois Tigeot

Ok, even more fixes committed, I missed two list corruption cases but
I am definitely on the right track now.

-Matt
Matthew Dillon
<dillon@backplane.com>

Original submitter says it can't be reproduced in recent kernel.

I still get this panic, with HEAD from today: on SMP kernel
running a few buildkernels with /usr/src & /usr/obj NFS mounted.

Should I upload crash dump?

-thomas

:Thomas Nikolajsen <thomas.nikolajsen@mail.dk> added the comment:
:
:I still get this panic, with HEAD from today: on SMP kernel
:running a few buildkernels with /usr/src & /usr/obj NFS mounted.
:
:Should I upload crash dump?
:
: -thomas

Yes, we're still trying to find this one.

-Matt
Matthew Dillon
<dillon@backplane.com>

On Tue, Sep 14, 2010 at 09:23:18PM -0700, Matthew Dillon wrote:
> :Thomas Nikolajsen <thomas.nikolajsen@mail.dk> added the comment:
> :
> :I still get this panic, with HEAD from today: on SMP kernel
> :running a few buildkernels with /usr/src & /usr/obj NFS mounted.
> :
> :Should I upload crash dump?
> :
> : -thomas
>
> Yes, we're still trying to find this one.
>

I got one of these the past few days, and it looked like that was
actually a secondary panic. Can you verify that's the actual panic
message (the first one the gets displayed on the console)?

--Peter

crash dump uploader to ~thomas/crash/19 on leaf.

I do think that subj was on console; but don't remember for sure,
please look into crash dump to decide primary reason.

I have a few more crash dumps w/ same panic string.

-thomas

:Thomas Nikolajsen <thomas.nikolajsen@mail.dk> added the comment:
:
:crash dump uploader to ~thomas/crash/19 on leaf.
:
:I do think that subj was on console; but don't remember for sure,
:please look into crash dump to decide primary reason.
:
:I have a few more crash dumps w/ same panic string.
:
: -thomas

Thanks Thomas. It looks like I forgot to wrap the nfs_write()
function with a token. I've pushed the fixes. Please update
and tell us if it fixed the problem!

-Matt
Matthew Dillon
<dillon@backplane.com>

See issue 2037, possible fix committed.