OpenSolaris

Printable Version Enter a New Search
Bug ID 5015757
Synopsis ip can panic with ASSERT(attach_ill == ipif->ipif_ill) failure
State 10-Fix Delivered (Fix available in build)
Category:Subcategory kernel:tcp-ip
Keywords
Responsible Engineer Peter Memishian
Reported Against s10_55 , snv_32
Duplicate Of
Introduced In solaris_10
Commit to Fix snv_107
Fixed In snv_107
Release Fixed solaris_nevada(snv_107)
Related Bugs 6569793 , 6783149 , 4898645
Submit Date 18-March-2004
Last Update Date 31-March-2009
Description
PIT have seen a panic during ipmp (version 1.1.10) execution on s10_55 with the following stack trace :

panic[cpu0]/thread=3000ac94d20: assertion failed: attach_ill == ipif->ipif_ill, file: ../../common/inet/ip/ip.c, line: 17327
 
 000002a100ab0ed0 genunix:assfail+6c (7bad42f0, 7bad4310, 43af, 1846400, 1249000, 0)
   %l0-3: 0000000000000000 0000000001254c00 00000300016a6230 00000000000001c8
   %l4-7: 0000000000000000 0000000000000000 000000000188ac00 0000000000000000
 000002a100ab0f80 ip:ip_output+1800 (e0000001, 300030d3c70, 30011561c64, 0, 30001383088, 0)
   %l0-3: 0000000000000000 0000030003221220 00000300112e3b40 0000030011573100
   %l4-7: 00000000700a8b38 0000000000004000 0000030007e7f4a8 00000300112d6380
 000002a100ab1070 unix:putnext+414 (100, 30011573100, 300115731f8, 300112d6380, 180c000, 0)
   %l0-3: 00000300112e7648 0000000000000000 0000000000000000 0000000000000000
   %l4-7: 000003000315a3f0 0000000001846400 000002a100aac000 000000007ba1ef50
 000002a100ab1120 icmp:icmp_wput+490 (300112e7648, 1efd, 700c3c00, 30011561c64, 101, e0000001)
   %l0-3: 00000300112d6380 0000000000000014 0000000000000024 00000000e0000000
   %l4-7: 00000000e0000000 00000000f0000000 0000000000000001 0000000000001efe
 000002a100ab11f0 unix:putnext+414 (b000, 300112e7648, 300021b8f20, 30003221220, 3000315a370, 0)
   %l0-3: 00000300112e6108 0000000000000000 0000000000000000 0000000000000000
   %l4-7: 000003000315a3f0 0000000001846400 000002a100aac000 000000007bb39e8c
 000002a100ab12a0 genunix:strput+2c8 (3000315a370, 30003221220, 30003221220, 0, 0, 0)
   %l0-3: 00000300112e6108 0000000000000004 0000030003221220 0000000000000000
   %l4-7: 0000000000000010 0000030010eb25c0 0000030010eb2500 0000000000000000
 000002a100ab14c0 genunix:kstrputmsg+3f4 (0, 30007ae9160, 3000315a370, 1c00, 0, 4)
   %l0-3: 0000000000000000 0000000000000003 0000000000000000 0000000000000000
   %l4-7: 0000000000000000 000003000315a3f0 0000030003221220 0000000000000004
 000002a100ab15f0 sockfs:sosend_dgram+348 (30006bdc798, 30007ae9160, 10, 2a100ab19b0, 20000, 10)
   %l0-3: 0000000000000000 0000000000000014 0000000000000000 0000000000000000
   %l4-7: 0000000000000002 0000000000000000 00000000018c7000 0000000000000000
 000002a100ab1700 sockfs:sotpi_sendmsg+5ac (30006bdc798, 2a100ab1980, 2a100ab19b0, 30007d619b0, 0, 2a100ab19b0)
   %l0-3: 0000000000000000 0000030006bdc7b8 000003006f6b0200 0000000000000006
   %l4-7: 0000000000000009 0000000000000010 0000000000000010 0000000000008000
 000002a100ab17e0 sockfs:sendit+1c4 (8, 30007d619b0, 30006bdc798, 8000, 10, 2a100ab19b0)
   %l0-3: 000003000c692ed8 0000000000000000 0000000000000000 0000000000000000
   %l4-7: 00000000ffbfe798 0000000001846400 0000000000000026 000002a100ab1980
 000002a100ab18c0 sockfs:sendto+98 (8, 2a100ab19e0, 10, 8000, ffbfe798, 8000)
   %l0-3: 0000000000000000 0000000000000000 000003000ac94f70 0000000000000001
   %l4-7: 0000000000000010 0000000000000000 0000000000000001 0000000000000000
 000002a100ab1a20 sockfs:sendto32+3c (8, ffbfe7c8, 10, 8000, ffbfe798, 10)
   %l0-3: 0000030010fdfe08 000000000121f4c8 000003006f6b0100 00000000000002c3
   %l4-7: 000000000000007f 0000000001819a28 0000000000000001 0000000000008000
 
 panic: entering debugger (continue to save dump)
 panicsys(0,fffffffffffffff8,180c000,0,40,1844c00) + 3dc
 vpanic(1249120,2a100ab0f58,300f7f2185e,300030d3dc0,baddcafe,1) + cc
 panic(1249120,7bad42f0,7bad4310,43af,1f8,1f8) +	1c
 assfail(7bad42f0,7bad4310,43af,1846400,1249000,0) + 6c
 ip_output(e0000001,300030d3c70,30011561c64,0,30001383088,0) + 1800
 putnext(100,30011573100,300115731f8,300112d6380,180c000,0) + 414
 icmp_wput(300112e7648,1efd,700c3c00,30011561c64,101,e0000001) +	490
 putnext(b000,300112e7648,300021b8f20,30003221220,3000315a370,0)	+ 414
 strput(3000315a370,30003221220,30003221220,0,0,0) + 2c8
 kstrputmsg(0,30007ae9160,3000315a370,1c00,0,4) + 3f4
 sosend_dgram(30006bdc798,30007ae9160,10,2a100ab19b0,20000,10) +	348
 sotpi_sendmsg(30006bdc798,2a100ab1980,2a100ab19b0,30007d619b0,0,2a100ab19b0) + 5ac
 sendit(8,30007d619b0,30006bdc798,8000,10,2a100ab19b0) +	1c4
 sendto(8,2a100ab19e0,10,8000,ffbfe798,8000) + 98
 sendto32(8,ffbfe7c8,10,8000,ffbfe798,10) + 3c
 kadb[0]: 
 Earth timeout: panic.
 
This occurred on freakish.ireland a SunBlade 1000 system with delenn.ireland an Ultra-2 as server .Unfortunately the core dump has been lost but at the time of logging this bug PIT are requeueing more tests to try and reproduce the problem.We will update this bug if more information becomes available.
I hit this panic again. 
bash-3.00# cat /etc/motd
Sun Microsystems Inc.   SunOS 5.11      snv_64  May. 01, 2007
SunOS Internal Development:  root 2007-05-01 [onnv_64]
bfu'ed from /ws/onnv-gate/archives/sparc/snv_64 on 2007-05-08
Sun Microsystems Inc.   SunOS 5.11      snv_57  October 2007

core dump is located at /net/chils.prc/export/home/crash/mdb 12
Work Around
N/A
Comments
Prior to Fire Engine, data packets would not continue to flow on the
stream during teardown, and thus this bug would not be possible.
As such, setting the "Introduced in Release" and "Introduced in Build"
values to match Fire Engine.