Date: Wed, 14 Apr 1999 15:10:01 -0700 (PDT) From: Bob Willcox <bob@pmr.com> To: freebsd-bugs@FreeBSD.org Subject: Re: kern/10872: Panic in sorecieve() due to NULL mbuf pointer Message-ID: <199904142210.PAA10614@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
The following reply was made to PR kern/10872; it has been noted by GNATS.
From: Bob Willcox <bob@pmr.com>
To: freebsd-gnats-submit@freebsd.org, bob@pmr.com
Cc:
Subject: Re: kern/10872: Panic in sorecieve() due to NULL mbuf pointer
Date: Wed, 14 Apr 1999 17:00:15 -0500
As a test, I installed the 4/8 4.0 snap on one of my systems here and
then upgraded it to 4.0-current (as of this morning, 4/14/99) and re-
ran my tests. It still panics, though at a slightly different place
(though due to the same reason, the mbuf chain pointer is unexpectedly
NULL).
Here is the crash dump trace back:
IdlePTD 2977792
initial pcb at 268420
panicstr: sbdrop
panic messages:
---
panic: sbdrop
syncing disks... 24 24 14 done
dumping to dev 20401, offset 241664
dump 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11
10 9 8 7 6 5 4 3 2 1
---
#0 boot (howto=256) at ../../kern/kern_shutdown.c:287
287 dumppcb.pcb_cr3 = rcr3();
(kgdb) where
#0 boot (howto=256) at ../../kern/kern_shutdown.c:287
#1 0xc0149084 in at_shutdown (
function=0xc0232d26
<__set_sysctl_set_sym_sysctl___kern_ipc_somaxconn+226>, arg=0xc38c0b84,
queue=-1
014232256) at ../../kern/kern_shutdown.c:448
#2 0xc0162b5c in sbdrop (sb=0xc38c0b84, len=2920)
at ../../kern/uipc_socket2.c:739
#3 0xc0162ae5 in sbflush (sb=0xc38c0b84) at
../../kern/uipc_socket2.c:719
#4 0xc0199597 in tcp_disconnect (tp=0xc39523c0)
at ../../netinet/tcp_usrreq.c:742
#5 0xc0198d6e in tcp_usr_disconnect (so=0xc38c0b40)
at ../../netinet/tcp_usrreq.c:268
#6 0xc0160aac in sodisconnect (so=0xc38c0b40) at
../../kern/uipc_socket.c:371
#7 0xc01608c6 in soclose (so=0xc38c0b40) at
../../kern/uipc_socket.c:251
#8 0xc0157407 in soo_close (fp=0xc093c340, p=0xc3a1c940)
at ../../kern/sys_socket.c:175
#9 0xc0141dd4 in closef (fp=0xc093c340, p=0xc3a1c940)
at ../../kern/kern_descrip.c:1065
#10 0xc0141bb8 in fdfree (p=0xc3a1c940) at ../../kern/kern_descrip.c:977
#11 0xc0143096 in exit1 (p=0xc3a1c940, rv=0) at
../../kern/kern_exit.c:200
#12 0xc0142efc in exit1 (p=0xc3a1c940, rv=-1077945712)
at ../../kern/kern_exit.c:105
#13 0xc0214086 in syscall (frame={tf_es = 47, tf_ds = -1078001617,
tf_edi = 134815272, tf_esi = 0, tf_ebp = -1077945428,
tf_isp = -1009856540, tf_ebx = -1, tf_edx = 1, tf_ecx = 0, tf_eax
= 1,
tf_trapno = 8, tf_err = 2, tf_eip = 134755660, tf_cs = 31,
tf_eflags = 582, tf_esp = -1077945448, tf_ss = 47})
at ../../i386/i386/trap.c:1101
#14 0xc020a5ec in Xint0x80_syscall ()
#15 0x805b423 in ?? ()
#16 0x805b1db in ?? ()
#17 0x805aefb in ?? ()
#18 0x80480e9 in ?? ()
(kgdb) up 2
#2 0xc0162b5c in sbdrop (sb=0xc38c0b84, len=2920)
at ../../kern/uipc_socket2.c:739
739 panic("sbdrop");
(kgdb) list
734
735 next = (m = sb->sb_mb) ? m->m_nextpkt : 0;
736 while (len > 0) {
737 if (m == 0) {
738 if (next == 0)
739 panic("sbdrop");
740 m = next;
741 next = m->m_nextpkt;
742 continue;
743 }
(kgdb) print *sb
$1 = {sb_cc = 2920, sb_hiwat = 17520, sb_mbcnt = 4352, sb_mbmax =
140160,
sb_lowat = 1, sb_mb = 0x0, sb_sel = {si_pid = 0, si_flags = 0},
sb_flags = 0, sb_timeo = 0}
(kgdb)
--
Bob Willcox The man who follows the crowd will usually get
no
bob@luke.pmr.com further than the crowd. The man who walks alone
is
Austin, TX likely to find himself in places no one has ever
been. -- Alan Ashley-Pitt
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-bugs" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199904142210.PAA10614>