From owner-freebsd-stable Tue Mar 4 4: 1: 4 2003 Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 7827C37B401 for ; Tue, 4 Mar 2003 04:00:49 -0800 (PST) Received: from gandalf.online.bg (gandalf.online.bg [217.75.128.9]) by mx1.FreeBSD.org (Postfix) with SMTP id 8282943FE1 for ; Tue, 4 Mar 2003 04:00:47 -0800 (PST) (envelope-from roam@ringlet.net) Received: (qmail 23025 invoked from network); 4 Mar 2003 11:56:34 -0000 Received: from office.sbnd.net (HELO straylight.ringlet.net) (217.75.140.130) by gandalf.online.bg with SMTP; 4 Mar 2003 11:56:33 -0000 Received: (qmail 10887 invoked by uid 1000); 4 Mar 2003 11:59:18 -0000 Date: Tue, 4 Mar 2003 13:59:18 +0200 From: Peter Pentchev To: stable@FreeBSD.org Subject: 4.8-PRE (and earlier) crash - syncookies? Message-ID: <20030304115918.GA554@straylight.oblivion.bg> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="K8nIJk4ghYZn606h" Content-Disposition: inline User-Agent: Mutt/1.5.3i Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG --K8nIJk4ghYZn606h Content-Type: multipart/mixed; boundary="17pEHd4RhPHOinZp" Content-Disposition: inline --17pEHd4RhPHOinZp Content-Type: text/plain; charset=windows-1251 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Hi, I think this has been going on for a couple of months; unfortunately, I cannot remember exactly when it started :( Several machines, which have always been updated synchronously at intervals of a couple of weeks or so, have been experiencing panics every few days with recent 4.6-STABLE, 4.7-STABLE, and 4.8-PRERELEASE kernel+world. Attached is the kernel config and a gdb session of the most recent crashdump. Maybe the most interesting part is at the end of the gdb session: is there a normal reason why a TAILQ structure would have a null start pointer, and an end pointer pointing back to itself? G'luck, Peter --=20 Peter Pentchev roam@ringlet.net roam@sbnd.net roam@FreeBSD.org PGP key: http://people.FreeBSD.org/~roam/roam.key.asc Key fingerprint FDBA FD79 C26F 3C51 C95E DF9E ED18 B68D 1619 4553 This sentence was in the past tense. --17pEHd4RhPHOinZp Content-Type: text/plain; charset=windows-1251 Content-Disposition: attachment; filename=PAN-GB-HQ # # PAN-GB-HQ - kernel configuration for the Gabrovo Office 1 FreeBSD/i386 gw # # $FreeBSD: src/sys/i386/conf/GENERIC,v 1.246.2.35 2001/09/27 17:43:06 alfred Exp $ machine i386 cpu I686_CPU ident PAN-GB-HQ maxusers 32 makeoptions DEBUG="-ggdb -g3" #Build kernel with gdb(1) debug symbols options INCLUDE_CONFIG_FILE options INET #InterNETworking options INET6 #IPv6 communications protocols options IPSEC options IPSEC_ESP options IPSEC_DEBUG options IPFIREWALL options IPFIREWALL_VERBOSE options IPFIREWALL_FORWARD options IPFIREWALL_VERBOSE_LIMIT=100 options IPV6FIREWALL options IPV6FIREWALL_VERBOSE options IPV6FIREWALL_VERBOSE_LIMIT=100 options IPDIVERT options DUMMYNET options RANDOM_IP_ID options ACCEPT_FILTER_DATA options ACCEPT_FILTER_HTTP options TCP_DROP_SYNFIN options ICMP_BANDLIM options FFS #Berkeley Fast Filesystem options FFS_ROOT #FFS usable as root device [keep this!] options SOFTUPDATES #Enable FFS soft updates support options UFS_DIRHASH options PROCFS #Process filesystem options SUIDDIR options COMPAT_43 #Compatible with BSD 4.3 [KEEP THIS!] options SCSI_DELAY=15000 #Delay (in ms) before probing SCSI options KTRACE #ktrace(1) support options SYSVSHM #SYSV-style shared memory options SHMMNI=2048 options SHMSEG=128 options SYSVMSG #SYSV-style message queues options MSGMNI=2048 options MSGTQL=2048 options SYSVSEM #SYSV-style semaphores options SEMMNI=128 options SEMMNS=2048 options SEMMNU=1024 options SEMUME=128 options P1003_1B #Posix P1003_1B real-time extensions options _KPOSIX_PRIORITY_SCHEDULING options ICMP_BANDLIM #Rate limit bad replies device isa device pci # Floppy drives device fdc0 at isa? port IO_FD1 irq 6 drq 2 device fd0 at fdc0 drive 0 # ATA and ATAPI devices device ata0 at isa? port IO_WD1 irq 14 device ata1 at isa? port IO_WD2 irq 15 device ata device atadisk # ATA disk drives device atapicd # ATAPI CDROM drives options ATA_STATIC_ID #Static device numbering # atkbdc0 controls both the keyboard and the PS/2 mouse device atkbdc0 at isa? port IO_KBD device atkbd0 at atkbdc? irq 1 device psm0 at atkbdc? irq 12 device vga0 at isa? # splash screen/screen saver pseudo-device splash # syscons is the default console driver, resembling an SCO console device sc0 at isa? flags 0x100 options SC_MOUSE_CHAR=0x3 # Floating point support - do not disable. device npx0 at nexus? port IO_NPX irq 13 # Serial (COM) ports device sio0 at isa? port IO_COM1 flags 0x10 irq 4 device sio1 at isa? port IO_COM2 irq 3 #device sio2 at isa? disable port IO_COM3 irq 5 #device sio3 at isa? disable port IO_COM4 irq 9 # PCI Ethernet NICs that use the common MII bus controller code. # NOTE: Be sure to keep the 'device miibus' line in order to use these NICs! device miibus # MII bus support device xl # 3Com 3c90x (``Boomerang'', ``Cyclone'') # Pseudo devices - the number indicates how many units to allocate. pseudo-device loop # Network loopback pseudo-device ether # Ethernet support pseudo-device tun # Packet tunnel. pseudo-device pty # Pseudo-ttys (telnet etc) pseudo-device gif # IPv6 and IPv4 tunneling pseudo-device snp 3 # The `bpf' pseudo-device enables the Berkeley Packet Filter. # Be aware of the administrative consequences of enabling this! pseudo-device bpf #Berkeley packet filter --17pEHd4RhPHOinZp Content-Type: text/plain; charset=windows-1251 Content-Disposition: attachment; filename="pan-pl.crash.txt" Content-Transfer-Encoding: quoted-printable Script started on Tue Mar 4 11:50:48 2003 Setting up interactive shell params.. [roam@flat:p2 ~]$ cd /var/crash [roam@flat:p2 /var/crash]$ sudo gdb -k /usr/obj/usr/src/sys/PAN-GB-HQ/kerne= l.debug vmcore.2 Password: GNU gdb 4.18 (FreeBSD) Copyright 1998 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain condition= s. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "i386-unknown-freebsd"...Deprecated bfd_read cal= led at /usr/src/gnu/usr.bin/binutils/gdb/../../../../contrib/gdb/gdb/dbxrea= d.c line 2627 in elfstab_build_psymtabs Deprecated bfd_read called at /usr/src/gnu/usr.bin/binutils/gdb/../../../..= /contrib/gdb/gdb/dbxread.c line 933 in fill_symbuf IdlePTD at phsyical address 0x0033b000 initial pcb at physical address 0x002a54e0 panicstr: page fault panic messages: --- Fatal trap 12: page fault while in kernel mode fault virtual address =3D 0x8 fault code =3D supervisor read, page not present instruction pointer =3D 0x8:0xc01b2768 stack pointer =3D 0x10:0xc0284e3c frame pointer =3D 0x10:0xc0284e48 code segment =3D base 0x0, limit 0xfffff, type 0x1b =3D DPL 0, pres 1, def32 1, gran 1 processor eflags =3D interrupt enabled, resume, IOPL =3D 0 current process =3D Idle interrupt mask =3D=20 trap number =3D 12 panic: page fault syncing disks...=20 Fatal trap 12: page fault while in kernel mode fault virtual address =3D 0x30 fault code =3D supervisor read, page not present instruction pointer =3D 0x8:0xc01f9ab4 stack pointer =3D 0x10:0xc0284c5c frame pointer =3D 0x10:0xc0284c64 code segment =3D base 0x0, limit 0xfffff, type 0x1b =3D DPL 0, pres 1, def32 1, gran 1 processor eflags =3D interrupt enabled, resume, IOPL =3D 0 current process =3D Idle interrupt mask =3D bio=20 trap number =3D 12 panic: page fault Uptime: 6d11h8m49s dumping to dev #ad/0x20001, offset 524456 dump ata0: resetting devices .. done 255 254 253 252 251 250 249 248 247 246 245 244 243 242 241 240 239 238 237= 236 235 234 233 232 231 230 229 228 227 226 225 224 223 222 221 220 219 21= 8 217 216 215 214 213 212 211 210 209 208 207 206 205 204 203 202 201 200 1= 99 198 197 196 195 194 193 192 191 190 189 188 187 186 185 184 183 182 181 = 180 179 178 177 176 175 174 173 172 171 170 169 168 167 166 165 164 163 162= 161 160 159 158 157 156 155 154 153 152 151 150 149 148 147 146 145 144 14= 3 142 141 140 139 138 137 136 135 134 133 132 131 130 129 128 127 126 125 1= 24 123 122 121 120 119 118 117 116 115 114 113 112 111 110 109 108 107 106 = 105 104 103 102 101 100 99 98 97 96 95 94 93 92 91 90 89 88 87 86 85 84 83 = 82 81 80 79 78 77 76 75 74 73 72 71 70 69 68 67 66 65 64 63 62 61 60 59 58 = 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 = 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 9 8 7 = 6 5 4 3 2 1 0=20 --- #0 dumpsys () at /usr/src/sys/kern/kern_shutdown.c:487 487 if (dumping++) { (kgdb) bt #0 dumpsys () at /usr/src/sys/kern/kern_shutdown.c:487 #1 0xc0151020 in boot (howto=3D260) at /usr/src/sys/kern/kern_shutdown.c:3= 16 #2 0xc0151454 in poweroff_wait (junk=3D0xc027d7ac, howto=3D-1071131953) at /usr/src/sys/kern/kern_shutdown.c:595 #3 0xc023d9e7 in trap_fatal (frame=3D0xc0284c1c, eva=3D48) at /usr/src/sys/i386/i386/trap.c:974 #4 0xc023d6a1 in trap_pfault (frame=3D0xc0284c1c, usermode=3D0, eva=3D48) at /usr/src/sys/i386/i386/trap.c:867 #5 0xc023d277 in trap (frame=3D{tf_fs =3D 16, tf_es =3D 16, tf_ds =3D -107= 2431088,=20 tf_edi =3D 0, tf_esi =3D 2, tf_ebp =3D -1071100828, tf_isp =3D -10711= 00856,=20 tf_ebx =3D -1071017220, tf_edx =3D 6864960, tf_ecx =3D -1070874464,= =20 tf_eax =3D 0, tf_trapno =3D 12, tf_err =3D 0, tf_eip =3D -1071670604,= tf_cs =3D 8,=20 tf_eflags =3D 66050, tf_esp =3D -1071100708, tf_ss =3D 2}) at /usr/src/sys/i386/i386/trap.c:466 #6 0xc01f9ab4 in acquire_lock (lk=3D0xc02992fc) at /usr/src/sys/ufs/ffs/ffs_softdep.c:266 #7 0xc01fe202 in softdep_fsync_mountdev (vp=3D0xcbb2eb40) at /usr/src/sys/ufs/ffs/ffs_softdep.c:4024 #8 0xc0202512 in ffs_fsync (ap=3D0xc0284cdc) at /usr/src/sys/ufs/ffs/ffs_vnops.c:134 #9 0xc0201150 in ffs_sync (mp=3D0xc0ef0000, waitfor=3D2, cred=3D0xc0a3b600= ,=20 p=3D0xc02bc0a0) at vnode_if.h:558 #10 0xc0182107 in sync (p=3D0xc02bc0a0, uap=3D0x0) at /usr/src/sys/kern/vfs_syscalls.c:576 #11 0xc0150ddb in boot (howto=3D256) at /usr/src/sys/kern/kern_shutdown.c:2= 35 #12 0xc0151454 in poweroff_wait (junk=3D0xc027d7ac, howto=3D-1071131953) at /usr/src/sys/kern/kern_shutdown.c:595 #13 0xc023d9e7 in trap_fatal (frame=3D0xc0284dfc, eva=3D8) at /usr/src/sys/i386/i386/trap.c:974 ---Type to continue, or q to quit--- #14 0xc023d6a1 in trap_pfault (frame=3D0xc0284dfc, usermode=3D0, eva=3D8) at /usr/src/sys/i386/i386/trap.c:867 #15 0xc023d277 in trap (frame=3D{tf_fs =3D 6422544, tf_es =3D -1072300016,= =20 tf_ds =3D -1071120368, tf_edi =3D 6422528, tf_esi =3D -1058083972,=20 tf_ebp =3D -1071100344, tf_isp =3D -1071100376, tf_ebx =3D -880342144= ,=20 tf_edx =3D 0, tf_ecx =3D 0, tf_eax =3D -1, tf_trapno =3D 12, tf_err = =3D 0,=20 tf_eip =3D -1071962264, tf_cs =3D 8, tf_eflags =3D 66182, tf_esp =3D = -880342144,=20 tf_ss =3D -1054661004}) at /usr/src/sys/i386/i386/trap.c:466 #16 0xc01b2768 in syncache_insert (sc=3D0xcb870b80, sch=3D0xc0eeeb7c) at /usr/src/sys/netinet/tcp_syncache.c:289 #17 0xc01b3639 in syncache_add (inc=3D0xc0284ee8, to=3D0xc0284f54, th=3D0xc= 0ab0024,=20 sop=3D0xc0284ee4, m=3D0xc0aadc00) at /usr/src/sys/netinet/tcp_syncache.= c:1021 #18 0xc01adcc3 in tcp_input (m=3D0xc0aadc00, off0=3D20, proto=3D6) at /usr/src/sys/netinet/tcp_input.c:826 #19 0xc01a8cba in ip_input (m=3D0xc0aadc00) at /usr/src/sys/netinet/ip_input.c:910 #20 0xc01a8d37 in ipintr () at /usr/src/sys/netinet/ip_input.c:934 #21 0xc02330b9 in swi_net_next () (kgdb) bt full #0 dumpsys () at /usr/src/sys/kern/kern_shutdown.c:487 error =3D 0 #1 0xc0151020 in boot (howto=3D260) at /usr/src/sys/kern/kern_shutdown.c:3= 16 howto =3D 260 #2 0xc0151454 in poweroff_wait (junk=3D0xc027d7ac, howto=3D-1071131953) at /usr/src/sys/kern/kern_shutdown.c:595 fmt =3D 0xc027d7ac "%s" bootopt =3D 260 buf =3D "page fault", '\000' #3 0xc023d9e7 in trap_fatal (frame=3D0xc0284c1c, eva=3D48) at /usr/src/sys/i386/i386/trap.c:974 frame =3D (struct trapframe *) 0x104 eva =3D 0 code =3D -1071130708 type =3D 12 ss =3D -1071130708 esp =3D 0 softseg =3D {ssd_base =3D 0, ssd_limit =3D 1048575, ssd_type =3D 27,=20 ssd_dpl =3D 0, ssd_p =3D 1, ssd_xx =3D 4, ssd_xx1 =3D 2, ssd_def32 =3D 1,= ssd_gran =3D 1} #4 0xc023d6a1 in trap_pfault (frame=3D0xc0284c1c, usermode=3D0, eva=3D48) at /usr/src/sys/i386/i386/trap.c:867 va =3D 0 vm =3D (struct vmspace *) 0x0 map =3D 0xc rv =3D 0 ftype =3D 192 '=C0' p =3D (struct proc *) 0x0 #5 0xc023d277 in trap (frame=3D{tf_fs =3D 16, tf_es =3D 16, tf_ds =3D -107= 2431088,=20 tf_edi =3D 0, tf_esi =3D 2, tf_ebp =3D -1071100828, tf_isp =3D -10711= 00856,=20 ---Type to continue, or q to quit--- tf_ebx =3D -1071017220, tf_edx =3D 6864960, tf_ecx =3D -1070874464,= =20 tf_eax =3D 0, tf_trapno =3D 12, tf_err =3D 0, tf_eip =3D -1071670604,= tf_cs =3D 8,=20 tf_eflags =3D 66050, tf_esp =3D -1071100708, tf_ss =3D 2}) at /usr/src/sys/i386/i386/trap.c:466 p =3D (struct proc *) 0x0 sticks =3D 13847272392516173825 i =3D 0 ucode =3D 0 type =3D 12 code =3D 0 eva =3D 48 #6 0xc01f9ab4 in acquire_lock (lk=3D0xc02992fc) at /usr/src/sys/ufs/ffs/ffs_softdep.c:266 lk =3D (struct lockit *) 0x6ac040 holder =3D 2 #7 0xc01fe202 in softdep_fsync_mountdev (vp=3D0xcbb2eb40) at /usr/src/sys/ufs/ffs/ffs_softdep.c:4024 bp =3D (struct buf *) 0xc0284cdc nbp =3D (struct buf *) 0xc0284cb4 wk =3D (struct worklist *) 0x0 #8 0xc0202512 in ffs_fsync (ap=3D0xc0284cdc) at /usr/src/sys/ufs/ffs/ffs_vnops.c:134 vp =3D (struct vnode *) 0xcbb2eb40 bp =3D (struct buf *) 0xc0284cdc nbp =3D (struct buf *) 0xc0284cf0 s =3D -1070874464 error =3D 0 wait =3D 0 passes =3D -877466816 ---Type to continue, or q to quit--- skipmeta =3D -1071097632 lbn =3D 2147483647 #9 0xc0201150 in ffs_sync (mp=3D0xc0ef0000, waitfor=3D2, cred=3D0xc0a3b600= ,=20 p=3D0xc02bc0a0) at vnode_if.h:558 a =3D {a_desc =3D 0xc0285620, a_vp =3D 0xcbb2eb40, a_cred =3D 0xc0a3b600,= =20 a_waitfor =3D 2, a_p =3D 0xc02bc0a0} vp =3D (struct vnode *) 0x0 cred =3D (struct ucred *) 0xc0a3b600 waitfor =3D 2 p =3D (struct proc *) 0xc02bc0a0 waitfor =3D 2 nvp =3D (struct vnode *) 0x0 vp =3D (struct vnode *) 0xc0284cdc ip =3D (struct inode *) 0x0 ump =3D (struct ufsmount *) 0xc0f04e00 fs =3D (struct fs *) 0xc0f03000 error =3D 0 allerror =3D 0 #10 0xc0182107 in sync (p=3D0xc02bc0a0, uap=3D0x0) at /usr/src/sys/kern/vfs_syscalls.c:576 p =3D (struct proc *) 0xc02bc0a0 mp =3D (struct mount *) 0xc0ef0000 nmp =3D (struct mount *) 0x0 asyncflag =3D 0 #11 0xc0150ddb in boot (howto=3D256) at /usr/src/sys/kern/kern_shutdown.c:2= 35 bp =3D (struct buf *) 0x0 iter =3D 5 nbusy =3D -1071130708 pbusy =3D -1071100576 ---Type to continue, or q to quit--- howto =3D 256 #12 0xc0151454 in poweroff_wait (junk=3D0xc027d7ac, howto=3D-1071131953) at /usr/src/sys/kern/kern_shutdown.c:595 fmt =3D 0xc027d7ac "%s" bootopt =3D 256 buf =3D "page fault", '\000' #13 0xc023d9e7 in trap_fatal (frame=3D0xc0284dfc, eva=3D8) at /usr/src/sys/i386/i386/trap.c:974 frame =3D (struct trapframe *) 0x100 eva =3D 0 code =3D -1071130708 type =3D 12 ss =3D -1071130708 esp =3D 0 softseg =3D {ssd_base =3D 0, ssd_limit =3D 1048575, ssd_type =3D 27,=20 ssd_dpl =3D 0, ssd_p =3D 1, ssd_xx =3D 0, ssd_xx1 =3D 0, ssd_def32 =3D 1,= ssd_gran =3D 1} #14 0xc023d6a1 in trap_pfault (frame=3D0xc0284dfc, usermode=3D0, eva=3D8) at /usr/src/sys/i386/i386/trap.c:867 va =3D 0 vm =3D (struct vmspace *) 0x0 map =3D 0xc rv =3D 0 ftype =3D 192 '=C0' p =3D (struct proc *) 0x0 #15 0xc023d277 in trap (frame=3D{tf_fs =3D 6422544, tf_es =3D -1072300016,= =20 tf_ds =3D -1071120368, tf_edi =3D 6422528, tf_esi =3D -1058083972,=20 tf_ebp =3D -1071100344, tf_isp =3D -1071100376, tf_ebx =3D -880342144= ,=20 tf_edx =3D 0, tf_ecx =3D 0, tf_eax =3D -1, tf_trapno =3D 12, tf_err = =3D 0,=20 tf_eip =3D -1071962264, tf_cs =3D 8, tf_eflags =3D 66182, tf_esp =3D = -880342144,=20 ---Type to continue, or q to quit--- tf_ss =3D -1054661004}) at /usr/src/sys/i386/i386/trap.c:466 p =3D (struct proc *) 0x0 sticks =3D 22531436045668236 i =3D 0 ucode =3D 0 type =3D 12 code =3D 0 eva =3D 8 #16 0xc01b2768 in syncache_insert (sc=3D0xcb870b80, sch=3D0xc0eeeb7c) at /usr/src/sys/netinet/tcp_syncache.c:289 sc =3D (struct syncache *) 0x620000 sch =3D (struct syncache_head *) 0xc0eeeb7c sc2 =3D (struct syncache *) 0x0 s =3D 6422528 i =3D 0 #17 0xc01b3639 in syncache_add (inc=3D0xc0284ee8, to=3D0xc0284f54, th=3D0xc= 0ab0024,=20 sop=3D0xc0284ee4, m=3D0xc0aadc00) at /usr/src/sys/netinet/tcp_syncache.= c:1021 inc =3D (struct in_conninfo *) 0xc1232674 th =3D (struct tcphdr *) 0x0 tp =3D (struct tcpcb *) 0xcb813d40 so =3D (struct socket *) 0xcb785980 sc =3D (struct syncache *) 0xcb870b80 sch =3D (struct syncache_head *) 0xc0eeeb7c ipopts =3D (struct mbuf *) 0x0 taop =3D (struct rmxp_tao *) 0xc1232674 i =3D 0 s =3D 4 #18 0xc01adcc3 in tcp_input (m=3D0xc0aadc00, off0=3D20, proto=3D6) at /usr/src/sys/netinet/tcp_input.c:826 ---Type to continue, or q to quit--- inc =3D {inc_flags =3D 0 '\000', inc_len =3D 101 'e', inc_pad =3D 49178,= =20 inc_ie =3D {ie_fport =3D 14348, ie_lport =3D 20480, ie_dependfaddr =3D { ie46_foreign =3D {ia46_pad32 =3D {3237187428, 131072, 3232422912},=20 ia46_addr4 =3D {s_addr =3D 4196968640}}, ie6_foreign =3D {__u6_addr= =3D { __u6_addr8 =3D "d\217=F3=C0\000\000\002\000\000=DC=AA=C0=C0=A8(= =FA", __u6_addr16 =3D { 36708, 49395, 0, 2, 56320, 49322, 43200, 64040}, __u6_addr32 = =3D { 3237187428, 131072, 3232422912, 4196968640}}}}, ie_dependladdr = =3D { ie46_local =3D {ia46_pad32 =3D {3232422912, 3238793776, 0}, ia46_addr= 4 =3D { s_addr =3D 2349844673}}, ie6_local =3D {__u6_addr =3D { __u6_addr8 =3D "\000=DC=AA=C00\022\f=C1\000\000\000\000=C1=C8\017= \214",=20 __u6_addr16 =3D {56320, 49322, 4656, 49420, 0, 0, 51393, 35855},= =20 __u6_addr32 =3D {3232422912, 3238793776, 0, 2349844673}}}}},=20 inc_dependroute =3D {inc4_route =3D {ro_rt =3D 0x0, ro_dst =3D {sa_len = =3D 0 '\000',=20 sa_family =3D 80 'P',=20 sa_data =3D "\f8\000\000\000@\024\000\000\000\000\200=D4=C0"}},=20 inc6_route =3D {ro_rt =3D 0x0, ro_dst =3D {sin6_len =3D 0 '\000',=20 sin6_family =3D 80 'P', sin6_port =3D 14348, sin6_flowinfo =3D 1073= 741824,=20 sin6_addr =3D {__u6_addr =3D { __u6_addr8 =3D "\024\000\000\000\000\200=D4=C0\020\000=AB=C0=C8= O(=C0",=20 __u6_addr16 =3D {20, 0, 32768, 49364, 16, 49323, 20424, 49192},= =20 __u6_addr32 =3D {20, 3235151872, 3232432144, 3223867336}}},=20 sin6_scope_id =3D 3223867340}}}} th =3D (struct tcphdr *) 0xc0ab0024 ip =3D (struct ip *) 0xc0ab0010 ipov =3D (struct ipovly *) 0xcb813c80 inp =3D (struct inpcb *) 0xcb813c80 optp =3D (u_char *) 0xc0ab0038 "\002\004\005=B4\001\001\004\002" optlen =3D 8 len =3D -1071100076 ---Type to continue, or q to quit--- tlen =3D 0 off =3D -1071100076 drop_hdrlen =3D 48 tp =3D (struct tcpcb *) 0xcb813d40 thflags =3D 2 so =3D (struct socket *) 0xcb785980 todrop =3D -1071100076 acked =3D -880722816 ourfinisacked =3D -1071100076 needoutput =3D 0 tiwin =3D 64240 to =3D {to_flags =3D 16, to_tsval =3D 0, to_tsecr =3D 0, to_cc =3D 0,=20 to_ccecho =3D 0, to_mss =3D 1460, to_requested_s_scale =3D 0 '\000',=20 to_pad =3D 0 '\000'} taop =3D (struct rmxp_tao *) 0xc0284f54 tao_noncached =3D {tao_cc =3D 1, tao_ccsent =3D 3235151872, tao_mssopt =3D= 2} next_hop =3D (struct sockaddr_in *) 0xc0f3807c rstreason =3D -1071100076 ip6 =3D (struct ip6_hdr *) 0x0 isipv6 =3D 0 #19 0xc01a8cba in ip_input (m=3D0xc0aadc00) at /usr/src/sys/netinet/ip_input.c:910 tag =3D {mh_next =3D 0xc0aadc00, mh_nextpkt =3D 0xc0d482f0,=20 mh_data =3D 0xc0f3807c "\020\0028\f=C0=A8(=FE", mh_len =3D -1071717142, m= h_type =3D 13,=20 mh_flags =3D 18} m =3D (struct mbuf *) 0xc0aadc00 ip =3D (struct ip *) 0xc0ab0010 fp =3D (struct ipq *) 0xc0284fb8 ia =3D (struct in_ifaddr *) 0xc0f35f00 ---Type to continue, or q to quit--- ifa =3D (struct ifaddr *) 0x0 i =3D 0 hlen =3D 20 checkif =3D 0 sum =3D 0 pkt_dst =3D {s_addr =3D 4264077504} divert_info =3D 0 args =3D {m =3D 0xc0aadc00, oif =3D 0x0, next_hop =3D 0xc0f3807c, rule =3D= 0x0,=20 eh =3D 0x0, ro =3D 0xc014f22a, dst =3D 0xc02a50b0, flags =3D -1070877576,= f_id =3D { dst_ip =3D 3251113868, src_ip =3D 3232246010, dst_port =3D 80, src_port= =3D 3128,=20 proto =3D 6 '\006', flags =3D 2 '\002'}, divert_rule =3D 0, retval =3D = 3223998624} #20 0xc01a8d37 in ipintr () at /usr/src/sys/netinet/ip_input.c:934 s =3D 0 m =3D (struct mbuf *) 0xc0aadc00 #21 0xc02330b9 in swi_net_next () No symbol table info available. (kgdb) fr 16 #16 0xc01b2768 in syncache_insert (sc=3D0xcb870b80, sch=3D0xc0eeeb7c) at /usr/src/sys/netinet/tcp_syncache.c:289 289 sc2 =3D TAILQ_FIRST(&sch->sch_bucket); (kgdb) print sch $1 =3D (struct syncache_head *) 0xc0eeeb7c (kgdb) print *sch $2 =3D {sch_bucket =3D {tqh_first =3D 0x0, tqh_last =3D 0xc0eeeb7c},=20 sch_length =3D 4294967295} (kgdb) q [roam@flat:p2 /var/crash]$ exit exit Script done on Tue Mar 4 11:51:49 2003 --17pEHd4RhPHOinZp-- --K8nIJk4ghYZn606h Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (FreeBSD) iD8DBQE+ZJUW7Ri2jRYZRVMRAvJPAJ0c+OMnciHI5ePcgEq2mAximluW7wCeOv5Q hexyzDpbh6MrSoslLmSr6aI= =HUrd -----END PGP SIGNATURE----- --K8nIJk4ghYZn606h-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message