From owner-freebsd-bugs Sun Apr 4 13:22: 0 1999 Delivered-To: freebsd-bugs@freebsd.org Received: from freefall.freebsd.org (freefall.FreeBSD.ORG [204.216.27.21]) by hub.freebsd.org (Postfix) with ESMTP id 0C10814CAD for ; Sun, 4 Apr 1999 13:21:57 -0700 (PDT) (envelope-from gnats@FreeBSD.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.9.2/8.9.2) id NAA52596; Sun, 4 Apr 1999 13:20:02 -0700 (PDT) (envelope-from gnats@FreeBSD.org) Date: Sun, 4 Apr 1999 13:20:02 -0700 (PDT) Message-Id: <199904042020.NAA52596@freefall.freebsd.org> To: freebsd-bugs@FreeBSD.org Cc: From: Bob Willcox Subject: Re: kern/10872: Panic in sorecieve() due to NULL mbuf pointer Reply-To: Bob Willcox Sender: owner-freebsd-bugs@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org The following reply was made to PR kern/10872; it has been noted by GNATS. From: Bob Willcox To: freebsd-gnats-submit@freebsd.org Cc: Subject: Re: kern/10872: Panic in sorecieve() due to NULL mbuf pointer Date: Sun, 4 Apr 1999 15:15:05 -0500 --/9DWx/yDrRhgMJTb Content-Type: text/plain; charset=us-ascii I have been able to further isolate this problem to probable interaction between network and SCSI activity. Attached is a small test script with which I have been able to easily recreate the panic (w/o involving amanda). Key to recreating the panic is to run the test script so that it is writing to two different files on the same filesystem of the target system simultaneously (I could not make it fail when writing to different filesystems or /dev/null). You can run the two invocations from the same or different source systems (seems to cause the panic more quickly if run from different systems). Note that I have pretty much ruled out hardware as I completely replaced the hardware of my backup server system (and my test system for this panic) and still get the same panic. I have been running this script as follows: ./panic_test 5 65536 deathstar /stuff2/tmp/junk1 & ./panic_test 5 65536 deathstar /stuff2/tmp/junk2 & from either the same or different source systems. This will attempt to write two 2GB files (junk1 and junk2) on the /stuff2 filesystem (one of the holding disk filesystems) on deathstar. For the record, here is the dmesg output for deathstar: Copyright (c) 1992-1999 FreeBSD Inc. Copyright (c) 1982, 1986, 1989, 1991, 1993 The Regents of the University of California. All rights reserved. FreeBSD 3.1-STABLE #6: Sun Apr 4 11:56:38 CDT 1999 root@deathstar.pmr.com:/usr/src/sys/compile/DEATHSTAR Timecounter "i8254" frequency 1193182 Hz Timecounter "TSC" frequency 400909762 Hz CPU: AMD-K6(tm) 3D processor (400.91-MHz 586-class CPU) Origin = "AuthenticAMD" Id = 0x58c Stepping=12 Features=0x8021bf real memory = 67043328 (65472K bytes) avail memory = 62144512 (60688K bytes) Preloaded elf kernel "kernel" at 0xf02d4000. Probing for devices on PCI bus 0: chip0: rev 0x04 on pci0.0.0 chip1: rev 0x04 on pci0.1.0 chip2: rev 0x00 on pci0.3.0 chip3: rev 0xc3 on pci0.7.0 ncr0: rev 0x03 int a irq 5 on pci0.10.0 ncr1: rev 0x12 int a irq 10 on pci0.11.0 fxp0: rev 0x01 int a irq 11 on pci0.12.0 fxp0: Ethernet address 00:a0:c9:00:53:29 ide_pci0: rev 0xc1 int a irq 0 on pci0.15.0 Probing for devices on PCI bus 1: vga0: rev 0x01 int a irq 11 on pci1.0.0 Probing for devices on the ISA bus: sc0 on isa sc0: VGA color <16 virtual consoles, flags=0x0> atkbdc0 at 0x60-0x6f on motherboard atkbd0 irq 1 on isa psm0 not found sio0 at 0x3f8-0x3ff irq 4 flags 0x10 on isa sio0: type 16550A sio1 at 0x2f8-0x2ff irq 3 on isa sio1: type 16550A fdc0 at 0x3f0-0x3f7 irq 6 drq 2 on isa fdc0: FIFO enabled, 8 bytes threshold fd0: 1.44MB 3.5in wdc0 at 0x1f0-0x1f7 irq 14 flags 0xb0ffb0ff on isa wdc0: unit 0 (wd0): , LBA, DMA, 32-bit, multi-block-16 wd0: 4111MB (8420832 sectors), 524 cyls, 255 heads, 63 S/T, 512 B/S ppc0 at 0x378 irq 7 on isa ppc0: SMC-like chipset (ECP/EPP/PS2/NIBBLE) in COMPATIBLE mode ppc0: FIFO with 16/16/7 bytes threshold nlpt0: on ppbus 0 nlpt0: Interrupt-driven port ppi0: on ppbus 0 plip0: on ppbus 0 vga0 at 0x3b0-0x3df maddr 0xa0000 msize 131072 on isa npx0 on motherboard npx0: INT 16 interface Waiting 10 seconds for SCSI devices to settle sa0 at ncr1 bus 0 target 1 lun 0 sa0: Removable Sequential Access SCSI-2 device sa0: 10.000MB/s transfers (10.000MHz, offset 8) changing root device to wd0s1a WARNING: / was not properly dismounted ch0 at ncr1 bus 0 target 0 lun 0 ch0: Removable Changer SCSI-2 device ch0: 3.300MB/s transfers ch0: 11 slots, 1 drive, 1 picker, 0 portals da1 at ncr0 bus 0 target 8 lun 0 da1: Fixed Direct Access SCSI-2 device da1: 40.000MB/s transfers (20.000MHz, offset 15, 16bit), Tagged Queueing Enabled da1: 8715MB (17850000 512 byte sectors: 255H 63S/T 1111C) da0 at ncr0 bus 0 target 0 lun 0 da0: Fixed Direct Access SCSI-2 device da0: 40.000MB/s transfers (20.000MHz, offset 15, 16bit), Tagged Queueing Enabled da0: 8715MB (17850000 512 byte sectors: 255H 63S/T 1111C) ffs_mountfs: superblock updated for soft updates ffs_mountfs: superblock updated for soft updates ffs_mountfs: superblock updated for soft updates ffs_mountfs: superblock updated for soft updates ffs_mountfs: superblock updated for soft updates fxp0: promiscuous mode enabled -- Bob Willcox The man who follows the crowd will usually get no bob@luke.pmr.com further than the crowd. The man who walks alone is Austin, TX likely to find himself in places no one has ever been. -- Alan Ashley-Pitt --/9DWx/yDrRhgMJTb Content-Type: text/plain; charset=us-ascii Content-Disposition: attachment; filename=panic_test #!/bin/sh if [ $# -ne 4 ]; then echo "Usage: sor_test loopcnt blkcnt host path" exit 1 fi lpcnt=$1 blkcnt=$2 host=$3 path=$4 i=1 while [ $i -le $lpcnt ] do cmd="dd count=$blkcnt bs=32k if=/dev/zero|rsh $host \"dd bs=32k of=$path\"" echo "$i: $cmd" eval $cmd i=`expr $i + 1` done --/9DWx/yDrRhgMJTb-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-bugs" in the body of the message