From owner-freebsd-current@FreeBSD.ORG  Mon Nov 17 02:49:02 2003
Return-Path: <owner-freebsd-current@FreeBSD.ORG>
Delivered-To: freebsd-current@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id F0BAC16A4CE
	for <current@freebsd.org>; Mon, 17 Nov 2003 02:49:02 -0800 (PST)
Received: from mailtoaster1.pipeline.ch (mailtoaster1.pipeline.ch
	[62.48.0.70])	by mx1.FreeBSD.org (Postfix) with ESMTP id 3ACE043F85
	for <current@freebsd.org>; Mon, 17 Nov 2003 02:49:00 -0800 (PST)
	(envelope-from oppermann@pipeline.ch)
Received: (qmail 58741 invoked from network); 17 Nov 2003 10:51:58 -0000
Received: from unknown (HELO pipeline.ch) ([62.48.0.53])
          (envelope-sender <oppermann@pipeline.ch>)
          by mailtoaster1.pipeline.ch (qmail-ldap-1.03) with SMTP
          for <max@love2party.net>; 17 Nov 2003 10:51:58 -0000
Message-ID: <3FB8A79B.89C66105@pipeline.ch>
Date: Mon, 17 Nov 2003 11:48:59 +0100
From: Andre Oppermann <oppermann@pipeline.ch>
X-Mailer: Mozilla 4.76 [en] (Windows NT 5.0; U)
X-Accept-Language: en
MIME-Version: 1.0
To: Max Laier <max@love2party.net>
References: <1069053107.706.10.camel@klamath>
	<4212255218.20031117090256@love2party.net>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
cc: sam@freebsd.org
cc: andre@freebsd.org
cc: Andreas Kohn <andreas.kohn@gmx.net>
cc: current@freebsd.org
Subject: Re: Panic in ip_input
X-BeenThere: freebsd-current@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Discussions about the use of FreeBSD-current
	<freebsd-current.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-current>
List-Post: <mailto:freebsd-current@freebsd.org>
List-Help: <mailto:freebsd-current-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 17 Nov 2003 10:49:03 -0000

Max Laier wrote:
> 
> Hello Andreas,
> 
> Monday, November 17, 2003, 8:11:47 AM, you wrote:
> AK> #7  0xc05ed8a9 in ip_input (m=0x0) at
> AK> /usr/src/sys/netinet/ip_input.c:364
> AK> #8  0xc05e6292 in div_output (so=0xc2f11d20, m=0xc16d6600,
> AK> sin=0xc2d834b0,
> AK>     control=0x0) at /usr/src/sys/netinet/ip_divert.c:364
> 
> AK> (kgdb) frame 7
> AK> #7  0xc05ed8a9 in ip_input (m=0x0) at
> AK> /usr/src/sys/netinet/ip_input.c:364
> AK> 364                             m_free(m0);
> AK> (kgdb) p m0
> AK> $1 = (struct mbuf *) 0x0
> AK> (kgdb) l
> AK> 359
> AK> 360                     m0 = m;
> AK> 361                     m = m->m_next;
> AK> 362                     /* XXX: This is set by ip_fastforward */
> AK> 363                     if (m0->m_nextpkt == (struct mbuf *)1)
> AK> 364                             m_free(m0);
> AK> 365             }
> AK> 366
> AK> 367             M_ASSERTPKTHDR(m);
> AK> 368
> 
> AK> This panic is relatively easy to recreate.
> 
> AK> Some data points:
> 
> AK> The machine is an Athlon Thunderbird 1200 (CPUTYPE=athlon-tbird in
> AK> make.conf), the NIC is a Realtek 8139.
> AK> net.inet.ip.fastforwarding is 0.
> 
> AK> I have a dump available (256M). What can I do to help fix this problem?
> 
> What rev. of ip_input.c is this? Looks like head. Rev. 1.253 mangled
> the for(;;) in a strange way and added that very strange check ... can
> somebody just kill these bastard MT_TAG thing in flavour for real
> mbuf_tags, now? Please!

Green fixed the problem a couple of hours ago in ip_divert.c.  The
m_nextpkt was uninitialized and happend to be 1 this time.  Please
re-cvsup.

-- 
Andre