From owner-freebsd-stable@FreeBSD.ORG Fri Nov 19 16:40:40 2004 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 1871816A4D1; Fri, 19 Nov 2004 16:40:40 +0000 (GMT) Received: from sockar.homeip.net (tourist.net1.nerim.net [62.212.109.212]) by mx1.FreeBSD.org (Postfix) with ESMTP id BD69743D4C; Fri, 19 Nov 2004 16:40:38 +0000 (GMT) (envelope-from amon@sockar.homeip.net) Received: from sockar.homeip.net (localhost [127.0.0.1]) by sockar.homeip.net (8.12.9p2/8.12.9) with ESMTP id iAJGeGoP004080; Fri, 19 Nov 2004 17:40:16 +0100 (CET) (envelope-from amon@sockar.homeip.net) Received: (from amon@localhost) by sockar.homeip.net (8.12.9p2/8.12.9/Submit) id iAJGeGqF004079; Fri, 19 Nov 2004 17:40:16 +0100 (CET) (envelope-from amon) Date: Fri, 19 Nov 2004 17:40:16 +0100 From: Herve Boulouis To: Robert Watson Message-ID: <20041119174016.D91236@ra.aabs> References: <20041119122524.5A20511445@localhost> Mime-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: 8bit User-Agent: Mutt/1.2.5.1i In-Reply-To: ; from rwatson@freebsd.org on Fri, Nov 19, 2004 at 01:08:20PM +0000 cc: pjd@freebsd.org cc: stable@freebsd.org cc: Slawek Zak Subject: Re: Network related panic on FreeBSD 5.3-STABLE/AMD64 X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Nov 2004 16:40:40 -0000 Le 19/11/2004 à 13:08, Robert Watson a écrit: > > Using the core, could you also print the contents of *so and > *so->so_snd.sb_mb in the tcp_output frame? Using SOCKBUF_DEBUG I get a little different backtrace : (kgdb) bt #0 doadump () at ../../../kern/kern_shutdown.c:245 #1 0x00000000c0141d50 in boot (howto=260) at ../../../kern/kern_shutdown.c:396 #2 0x00000000c01421f8 in panic (fmt=0xc0359ad0 "from debugger") at ../../../kern/kern_shutdown.c:552 #3 0x00000000c007a3c8 in db_panic (addr=3222674300, have_addr=0, count=-1, modif=0xe236c4b0 "") at ../../../ddb/db_command.c:435 #4 0x00000000c007a32c in db_command (last_cmdp=0xc03c6ee8, cmd_table=0x0, aux_cmd_tablep=0xc0385358, aux_cmd_tablep_end=0xc0385370) at ../../../ddb/db_command.c:349 #5 0x00000000c007a450 in db_command_loop () at ../../../ddb/db_command.c:455 #6 0x00000000c007cf70 in db_trap (type=-499726656, code=0) at ../../../ddb/db_main.c:219 #7 0x00000000c0161fa0 in kdb_trap (type=107, code=0, tf=0x1) at ../../../kern/subr_kdb.c:418 #8 0x00000000c02da1c0 in trap (tf=0xe236c940) at ../../../sparc64/sparc64/trap.c:308 #9 0x00000000c0161b7c in kdb_enter (msg=0x0) at ../../../kern/subr_kdb.c:238 #10 0x00000000c0161b74 in kdb_enter (msg=0xc0369d40 "panic") at ../../../kern/subr_kdb.c:238 #11 0x00000000c0142108 in panic (fmt=0xc0382050 "trap: %s") at ../../../kern/kern_shutdown.c:536 #12 0x00000000c02da34c in trap (tf=0xe236cd40) at ../../../sparc64/sparc64/trap.c:370 #13 0x00000000c018622c in m_copym (m=0xfffff800a2d7a800, off0=0, len=-499724272, wait=1) at ../../../kern/uipc_mbuf.c:376 #14 0x00000000c02baa40 in uma_zalloc_arg (zone=0x0, udata=0x1, flags=1460) at ../../../vm/uma_core.c:1826 #15 0x00000000c01efbcc in tcp_output (tp=0xfffff800a1e2b378) at ../../../netinet/tcp_output.c:803 #16 0x00000000c01f9c58 in tcp_disconnect (tp=0xfffff800a1e2b378) at ../../../netinet/tcp_usrreq.c:1215 #17 0x00000000c01f75a8 in tcp_usr_detach (so=0xfffff800a332d690) at ../../../netinet/tcp_usrreq.c:168 #18 0x00000000c0188f8c in soclose (so=0xfffff800a2490ac8) at ../../../kern/uipc_socket.c:465 #19 0x00000000c017586c in soo_close (fp=0xfffff8008838cee0, td=0xfffff800a2d9ea40) at ../../../kern/sys_socket.c:274 #20 0x00000000c011c948 in fdrop_locked (fp=0xfffff8008838cee0, td=0xfffff800a2d9ea40) at file.h:289 #21 0x00000000c011b3e4 in fdrop (fp=0xfffff8008838cee0, td=0xfffff800a2d9ea40) at ../../../kern/kern_descrip.c:1897 #22 0x00000000c011b384 in closef (fp=0xfffff8008838cee0, td=0xfffff800a2d9ea40) at ../../../kern/kern_descrip.c:1883 #23 0x00000000c0119498 in close (td=0xfffff800a2d9ea40, uap=0xfffff800a3cda800) at ../../../kern/kern_descrip.c:997 #24 0x00000000c02da914 in syscall (tf=0xe236d880) at ../../../sparc64/sparc64/trap.c:593 Here are *so & *so->so_snd.sb_mb : (kgdb) #15 0x00000000c01efbcc in tcp_output (tp=0xfffff800a1e2b378) at ../../../netinet/tcp_output.c:803 803 m->m_next = m_copy(so->so_snd.sb_mb, off, (int) len); (kgdb) print *so $1 = {so_count = 1, so_type = 1, so_options = 12, so_linger = 0, so_state = 10, so_qstate = 0, so_pcb = 0xfffff800a332d690, so_proto = 0xc03ae290, so_head = 0x0, so_incomp = {tqh_first = 0x0, tqh_last = 0x0}, so_comp = {tqh_first = 0x0, tqh_last = 0x0}, so_list = {tqe_next = 0x0, tqe_prev = 0xfffff800a41893a0}, so_qlen = 0, so_incqlen = 0, so_qlimit = 0, so_timeo = 0, so_error = 0, so_sigio = 0x0, so_oobmark = 0, so_aiojobq = { tqh_first = 0x0, tqh_last = 0xfffff800a2490b40}, so_rcv = {sb_sel = {si_thrlist = {tqe_next = 0x0, tqe_prev = 0x0}, si_thread = 0x0, si_note = { kl_lock = 0xfffff800a2490b80, kl_list = {slh_first = 0x0}}, si_flags = 0}, sb_mtx = {mtx_object = {lo_class = 0xc03a1050, lo_name = 0xc036d9e0 "so_rcv", lo_type = 0xc036d9e0 "so_rcv", lo_flags = 196608, lo_list = {tqe_next = 0x0, tqe_prev = 0x0}, lo_witness = 0x0}, mtx_lock = 4, mtx_recurse = 0}, sb_mb = 0x0, sb_mbtail = 0x0, sb_lastrecord = 0x0, sb_cc = 0, sb_hiwat = 65536, sb_mbcnt = 0, sb_mbmax = 262144, sb_ctl = 0, sb_lowat = 1, sb_timeo = 0, sb_flags = 0, sb_state = 32}, so_snd = {sb_sel = {si_thrlist = {tqe_next = 0x0, tqe_prev = 0x0}, si_thread = 0x0, si_note = {kl_lock = 0xfffff800a2490c30, kl_list = {slh_first = 0x0}}, si_flags = 0}, sb_mtx = {mtx_object = { lo_class = 0xc03a1050, lo_name = 0xc036d9d8 "so_snd", lo_type = 0xc036d9d8 "so_snd", lo_flags = 196608, lo_list = {tqe_next = 0x0, tqe_prev = 0x0}, lo_witness = 0x0}, mtx_lock = 18446735280348719680, mtx_recurse = 0}, sb_mb = 0xfffff800a2532400, sb_mbtail = 0xfffff800a4055600, sb_lastrecord = 0xfffff800a2532400, sb_cc = 64740, sb_hiwat = 65536, sb_mbcnt = 67584, sb_mbmax = 262144, sb_ctl = 0, sb_lowat = 2048, sb_timeo = 0, sb_flags = 0, sb_state = 16}, so_upcall = 0, so_upcallarg = 0x0, so_cred = 0xfffff8008427d000, so_label = 0x0, so_peerlabel = 0x0, so_gencnt = 344, so_emuldata = 0x0, so_accf = 0x0} (kgdb) print *so->so_snd.sb_mb $2 = {m_hdr = {mh_next = 0xfffff800a293cc00, mh_nextpkt = 0x0, mh_data = 0xdf84631c "\205", mh_len = 7396, mh_flags = 11, mh_type = 1}, M_dat = {MH = { MH_pkthdr = {rcvif = 0x0, len = 8192, header = 0x0, csum_flags = 0, csum_data = 16, tags = {slh_first = 0x0}}, MH_dat = {MH_ext = { ext_buf = 0xdf846000 "ÆPôé\214Þ2H¾q\003\216\006\003.\004&\0214\006\017\202qÑ\236Ñ0\020@×H`,8\030\214Óæo0c8·Ñ¼ËI\215\f»K\026½¦Jß\fu£iå ÃV\223Á\231\202Q\2234\220èZu, ext_args = 0xc0850880, ext_size = 8192, ref_cnt = 0xfffff800a3d7ecc0, ext_type = 2}, MH_databuf = "\0\0\0\0ß\204`\0\0\0\0\0À\031(@\0\0\0\0À\205\b\200\0\0 \0Õ×?\002ÿÿø\0£×ìÀ\0\0\0\002ªÍæÑP\020ÿÿ¹ã\0\0150-Accepted data connection\r\n15<95>Nov 19 16:57:56 pure-ftpd[458]: (ftp@213.46.110.214) [DEBUG] Command [pasv] []\0\0\0\0\0"}}, M_databuf = "\0\0\0\0\0\0\0\0\0\0 ", '\0' , "\020", '\0' , "ß\204`\0\0\0\0\0À\031(@\0\0\0\0À\205\b\200\0\0 \0Õ×?\002ÿÿø\0£×ìÀ\0\0\0\002ªÍæÑP\020ÿÿ¹ã\0\0150-Accepted data connection\r\n15<95>Nov 19 16:57:56 pure-ftpd[458]: (ftp@213.46.110.214) [DEBUG] Command [pasv] []\0\0"...}} -- Herve Boulouis