From owner-freebsd-stable@FreeBSD.ORG Fri May 20 08:04:40 2005 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id EE4DE16A4CE for ; Fri, 20 May 2005 08:04:40 +0000 (GMT) Received: from relay.bestcom.ru (relay.bestcom.ru [217.72.144.5]) by mx1.FreeBSD.org (Postfix) with ESMTP id D6A9D43D9E for ; Fri, 20 May 2005 08:04:39 +0000 (GMT) (envelope-from glebius@FreeBSD.org) Received: from cell.sick.ru (root@cell.sick.ru [217.72.144.68]) by relay.bestcom.ru (8.13.1/8.12.9) with ESMTP id j4K84aO9076176 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL); Fri, 20 May 2005 12:04:37 +0400 (MSD) (envelope-from glebius@FreeBSD.org) Received: from cell.sick.ru (glebius@localhost [127.0.0.1]) by cell.sick.ru (8.13.1/8.12.8) with ESMTP id j4K84aal027376 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 20 May 2005 12:04:36 +0400 (MSD) (envelope-from glebius@FreeBSD.org) Received: (from glebius@localhost) by cell.sick.ru (8.13.1/8.13.1/Submit) id j4K84ZB3027375; Fri, 20 May 2005 12:04:35 +0400 (MSD) (envelope-from glebius@FreeBSD.org) X-Authentication-Warning: cell.sick.ru: glebius set sender to glebius@FreeBSD.org using -f Date: Fri, 20 May 2005 12:04:35 +0400 From: Gleb Smirnoff To: Jeremie Le Hen Message-ID: <20050520080435.GB26938@cell.sick.ru> References: <20050515120007.GA777@obiwan.tataz.chchile.org> <20050518155130.H87264@carver.gumbysoft.com> <20050519125639.GK818@obiwan.tataz.chchile.org> Mime-Version: 1.0 Content-Type: text/plain; charset=koi8-r Content-Disposition: inline In-Reply-To: <20050519125639.GK818@obiwan.tataz.chchile.org> User-Agent: Mutt/1.5.6i X-Virus-Scanned: ClamAV version devel-20050125, clamav-milter version 0.80ff on relay.bestcom.ru X-Virus-Status: Clean cc: freebsd-stable@FreeBSD.org Subject: Re: panic in recent RELENG_5 tcp code path X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 May 2005 08:04:41 -0000 Jeremie, On Thu, May 19, 2005 at 02:56:39PM +0200, Jeremie Le Hen wrote: J> > Can you load a kernel.debug into gdb and do "l *(tcp_output+0xb49)" and J> > post the output? that offset isn't a function call in my kernel. J> > tcp_output() doesn't call m_copypacket directly so the exact spot is J> > difficult to find. J> J> %%% J> (gdb) l *(tcp_output+0xb49) J> 0xc061b63d is in tcp_output (../../../netinet/tcp_output.c:813). J> 808 m->m_data += max_linkhdr; J> 809 m->m_len = hdrlen; J> 810 if (len <= MHLEN - hdrlen - max_linkhdr) { J> 811 m_copydata(so->so_snd.sb_mb, off, (int) len, J> 812 mtod(m, caddr_t) + hdrlen); J> 813 m->m_len += len; J> 814 } else { J> 815 m->m_next = m_copy(so->so_snd.sb_mb, off, (int) len); J> 816 if (m->m_next == 0) { J> 817 SOCKBUF_UNLOCK(&so->so_snd); J> %%% J> J> tcp_output.c rev 1.100.2.7. according to the fact that the panic occured in dereferncing mbuf pointer your kernel is compiled without INVARIANTS. Please compile it with INVARIANTS. This will probably help to trigger panic earlier, and it will be more clear. -- Totus tuus, Glebius. GLEBIUS-RIPN GLEB-RIPE