|
Description
|
system may crash with following stack if ipv6 address is enabled and a connection is bound to an interface using IPV6_BOUND_IF.
> ::status
debugging crash dump vmcore.2 (64-bit) from
operating system: 5.10 Generic_127127-11 (sun4u)
panic message: CONN_DEC_REF: connp(300077086c0) has ref = 1
dump content: kernel pages only
> $c
vpanic(3, 7bf2e090, 300077086c0, 1, 0, 44200029)
tcp_close_detached+0xb8(300077088c0, 7bf2e000, 1, 1, 0, 0)
squeue_drain+0x130(30007708bc0, 10, a434bfe810, 300023cff00, 0, 0)
squeue_enter+0x348(300023cff00, 300024a5680, 7beedc98, 30007430f40, 24, 0)
udp_output_wrapper+0x10(30007430f40, 300024a5680, 300023cff00, 30007423c00,
3000764d880, 30007430f40)
putnext+0x218(3000742cf20, 3000742ce28, 300024a5680, 100, 3000764dda0, 0)
strdoioctl+0x398(3000510e9b8, 2a100bc37f0, ff00000, 1, 3a98, 1)
strioctl+0x1398(3000510e9b8, ff00, fc00, 6c00, 2a100bc3adc, 30006224c70)
spec_ioctl+0x8c(29000000b6, ffffffffc00c6982, ffbff92c, 100001, 30006224c70,
2a100bc3adc)
fop_ioctl+0x20(300050fca40, ffffffffc00c6982, ffbff92c, 100001, 30006224c70,
1228cd8)
ioctl+0x184(4, 30006af9c08, ffbff92c, c, 0, ffffffffc00c6982)
syscall_trap32+0xcc(4, c00c6982, ffbff92c, c, 0, 0)
> 300077086c0::print -a ip`conn_t conn_tcp | ::print -a tcp_t tcp_bound_if
30007708bac tcp_bound_if = 0x3 <--- bound ifindex 3
|