Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 27 Mar 2006 08:55:43 +0100
From:      Josef Karthauser <joe@FreeBSD.org>
To:        stable@freebsd.org
Subject:   Page fault in kernel - network related!
Message-ID:  <20060327075543.GA957@genius.tao.org.uk>
In-Reply-To: <cd70c6810603171901t64cf8aectebd9c288164b32b0@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help

--6TrnltStXW4iwmi0
Content-Type: text/plain; charset=unknown-8bit
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

I also experience a panic on 6.1-prerelease, both on my laptop and my
server.  Here's the message I sent net@ about the laptop version of the
problem.  Maybe someone here is can help - the net@ people are probably
too busy.

Joe

----- Forwarded message from Josef Karthauser <joe@FreeBSD.org> -----

Date: Fri, 24 Mar 2006 12:55:30 +0000
=46rom: Josef Karthauser <joe@FreeBSD.org>
To: net@freebsd.org
Cc: glebius@FreeBSD.org
Subject: Problems - page fault in kernel, whilst running dhclient

Hi guys,

My laptop is running:
6.1-PRERELEASE FreeBSD 6.1-PRERELEASE #30: Thu Mar 23 09:04:30 GMT 2006

Recently something went belly up, and now when I run 'dhclient em0' on
the primary interface after a 'acpiconf -s 3' / resume cycle the machine
panics.

Here's the backtrace:

(kgdb) bt
#0  doadump () at pcpu.h:165
#1  0xc052b7b0 in boot (howto=3D260) at /usr/src/sys/kern/kern_shutdown.c:3=
99
#2  0xc052ba5b in panic (fmt=3D0xc066a469 "%s")
    at /usr/src/sys/kern/kern_shutdown.c:555
#3  0xc0642ac6 in trap_fatal (frame=3D0xf5083ad4, eva=3D3735929055)
    at /usr/src/sys/i386/i386/trap.c:836
#4  0xc06427f7 in trap_pfault (frame=3D0xf5083ad4, usermode=3D0, eva=3D3735=
929055)
    at /usr/src/sys/i386/i386/trap.c:744
#5  0xc0642441 in trap (frame=3D
      {tf_fs =3D -1067909112, tf_es =3D -993329112, tf_ds =3D -991428568,
tf_edi =3D -184009872, tf_esi =3D -559038242, tf_ebp =3D -184009924, tf_isp=
 =3D
-184009984, tf_ebx =3D -184009872, tf_edx =3D 0, tf_ecx =3D 0, tf_eax =3D
-559038242, tf_trapno =3D 12, tf_err =3D 0, tf_eip =3D -1067871110, tf_cs =
=3D
32, tf_eflags =3D 66198, tf_esp =3D -991386368, tf_ss =3D -993285120}) at
/usr/src/sys/i386/i386/trap.c:434
#6  0xc0631d7a in calltrap () at /usr/src/sys/i386/i386/exception.s:139
#7  0xc059947a in rtrequest1 (req=3D1, info=3D0xf5083b70, ret_nrt=3D0xf5083=
b64)
    at /usr/src/sys/net/route.c:659
#8  0xc059a277 in rtinit (ifa=3D0xc4ee8900, cmd=3D1, flags=3D1)
    at /usr/src/sys/net/route.c:1191
#9  0xc05b189d in in_addprefix (target=3D0xc4ee8900, flags=3D1)
    at /usr/src/sys/netinet/in.c:842
#10 0xc05b17c9 in in_ifinit (ifp=3D0xc4cbac00, ia=3D0xc4ee8900, sin=3D0x0, =
scrub=3D0)
    at /usr/src/sys/netinet/in.c:769
#11 0xc05b0b8a in in_control (so=3D0xc4eee42c, cmd=3D1, data=3D0xc4d59880 "=
em0",=20
    ifp=3D0xc4cbac00, td=3D0xc4bd8c00) at /usr/src/sys/netinet/in.c:439
#12 0xc0591737 in ifioctl (so=3D0xc4eee42c, cmd=3D2151704858,=20
    data=3D0xc4d59880 "em0", td=3D0xc4bd8c00) at /usr/src/sys/net/if.c:1568
#13 0xc0554053 in soo_ioctl (fp=3D0xdeadc0de, cmd=3D2151704858, data=3D0xc4=
d59880,=20
    active_cred=3D0xc4a9cd80, td=3D0xc4bd8c00)
    at /usr/src/sys/kern/sys_socket.c:214
#14 0xc054ee18 in ioctl (td=3D0xc4bd8c00, uap=3D0xf5083d04) at file.h:258
#15 0xc0642d53 in syscall (frame=3D
      {tf_fs =3D 59, tf_es =3D 59, tf_ds =3D 59, tf_edi =3D 134574016, tf_e=
si =3D
134582976, tf_ebp =3D -1077940728, tf_isp =3D -184009372, tf_ebx =3D
-2143262438, tf_edx =3D 134585692, tf_ecx =3D 134574016, tf_eax =3D 54,
tf_trapno =3D 12, tf_err =3D 2, tf_eip =3D 671900563, tf_cs =3D 51, tf_efla=
gs =3D
646, tf_esp =3D -1077942852, tf_ss =3D 59})
    at /usr/src/sys/i386/i386/trap.c:981
#16 0xc0631dcf in Xint0x80_syscall () at /usr/src/sys/i386/i386/exception.s=
:200
#17 0x00000033 in ?? ()


Looking at the trap frame and a few above I see this:

At #7:

(kgdb) up
#7  0xc059947a in rtrequest1 (req=3D1, info=3D0xf5083b70, ret_nrt=3D0xf5083=
b64) at /usr/src/sys/net/route.c:659
659             rnh =3D rt_tables[dst->sa_family];
Current language:  auto; currently c
(kgdb) print *info
$3 =3D {rti_addrs =3D 0, rti_info =3D {0xdeadc0de, 0xdeadc0de, 0xdeadc0de, =
0x0, 0x0,=20
    0x0, 0x0, 0x0}, rti_flags =3D 49631, rti_ifa =3D 0xc4ee8900, rti_ifp =
=3D 0x0}
(kgdb) print *ret_nrt
$5 =3D (struct rtentry *) 0x0

Hmm, that's a lot of deadc0de!

Here too:

(kgdb) print *info->rti_ifa
$7 =3D {ifa_addr =3D 0xdeadc0de, ifa_dstaddr =3D 0xdeadc0de,=20
  ifa_netmask =3D 0xdeadc0de, if_data =3D {ifi_type =3D 222 '=DE',=20
    ifi_physical =3D 192 '=C0', ifi_addrlen =3D 173 '=AD', ifi_hdrlen =3D 2=
22 '=DE',=20
    ifi_link_state =3D 222 '=DE', ifi_recvquota =3D 192 '=C0',=20
    ifi_xmitquota =3D 173 '=AD', ifi_datalen =3D 222 '=DE', ifi_mtu =3D 373=
5929054,=20
    ifi_metric =3D 3735929054, ifi_baudrate =3D 3735929054,=20
    ifi_ipackets =3D 3735929054, ifi_ierrors =3D 3735929054,=20
    ifi_opackets =3D 3735929054, ifi_oerrors =3D 3735929054,=20
    ifi_collisions =3D 3735929054, ifi_ibytes =3D 3735929054,=20
    ifi_obytes =3D 3735929054, ifi_imcasts =3D 3735929054,=20
    ifi_omcasts =3D 3735929054, ifi_iqdrops =3D 3735929054,=20
    ifi_noproto =3D 3735929054, ifi_hwassist =3D 3735929054,=20
    ifi_epoch =3D -559038242, ifi_lastchange =3D {tv_sec =3D -559038242,=20
      tv_usec =3D -559038242}}, ifa_ifp =3D 0xdeadc0de, ifa_link =3D {
    tqe_next =3D 0xdeadc0de, tqe_prev =3D 0xdeadc0de},=20
  ifa_rtrequest =3D 0xc05ae384 <arp_rtrequest>, ifa_flags =3D 49630,=20
  ifa_refcnt =3D 3735929054, ifa_metric =3D 0, ifa_claim_addr =3D 0xdeadc0d=
e,=20
  ifa_mtx =3D {mtx_object =3D {lo_class =3D 0xdeadc0de,=20
      lo_name =3D 0xdeadc0de <Address 0xdeadc0de out of bounds>,=20
      lo_type =3D 0xdeadc0de <Address 0xdeadc0de out of bounds>,=20
      lo_flags =3D 3735929054, lo_list =3D {tqe_next =3D 0xdeadc0de,=20
        tqe_prev =3D 0xdeadc0de}, lo_witness =3D 0xdeadc0de},=20
    mtx_lock =3D 3735929054, mtx_recurse =3D 3735929054}}

Working up the stack:


(kgdb) up
#8  0xc059a277 in rtinit (ifa=3D0xc4ee8900, cmd=3D1, flags=3D1)
    at /usr/src/sys/net/route.c:1191
1191            error =3D rtrequest1(cmd, &info, &rt);
(kgdb) print *ifa
$8 =3D {ifa_addr =3D 0xdeadc0de, ifa_dstaddr =3D 0xdeadc0de,=20
  ifa_netmask =3D 0xdeadc0de, if_data =3D {ifi_type =3D 222 '=DE',=20
    ifi_physical =3D 192 '=C0', ifi_addrlen =3D 173 '=AD', ifi_hdrlen =3D 2=
22 '=DE',=20
    ifi_link_state =3D 222 '=DE', ifi_recvquota =3D 192 '=C0',=20
    ifi_xmitquota =3D 173 '=AD', ifi_datalen =3D 222 '=DE', ifi_mtu =3D 373=
5929054,=20
    ifi_metric =3D 3735929054, ifi_baudrate =3D 3735929054,=20
    ifi_ipackets =3D 3735929054, ifi_ierrors =3D 3735929054,=20
    ifi_opackets =3D 3735929054, ifi_oerrors =3D 3735929054,=20
    ifi_collisions =3D 3735929054, ifi_ibytes =3D 3735929054,=20
    ifi_obytes =3D 3735929054, ifi_imcasts =3D 3735929054,=20
    ifi_omcasts =3D 3735929054, ifi_iqdrops =3D 3735929054,=20
    ifi_noproto =3D 3735929054, ifi_hwassist =3D 3735929054,=20
    ifi_epoch =3D -559038242, ifi_lastchange =3D {tv_sec =3D -559038242,=20
      tv_usec =3D -559038242}}, ifa_ifp =3D 0xdeadc0de, ifa_link =3D {
    tqe_next =3D 0xdeadc0de, tqe_prev =3D 0xdeadc0de},=20
  ifa_rtrequest =3D 0xc05ae384 <arp_rtrequest>, ifa_flags =3D 49630,=20
  ifa_refcnt =3D 3735929054, ifa_metric =3D 0, ifa_claim_addr =3D 0xdeadc0d=
e,=20
  ifa_mtx =3D {mtx_object =3D {lo_class =3D 0xdeadc0de,=20
      lo_name =3D 0xdeadc0de <Address 0xdeadc0de out of bounds>,=20
      lo_type =3D 0xdeadc0de <Address 0xdeadc0de out of bounds>,=20
      lo_flags =3D 3735929054, lo_list =3D {tqe_next =3D 0xdeadc0de,=20
        tqe_prev =3D 0xdeadc0de}, lo_witness =3D 0xdeadc0de},=20
    mtx_lock =3D 3735929054, mtx_recurse =3D 3735929054}}
(kgdb) up
#9  0xc05b189d in in_addprefix (target=3D0xc4ee8900, flags=3D1)
    at /usr/src/sys/netinet/in.c:842
842             error =3D rtinit(&target->ia_ifa, (int)RTM_ADD, flags);
(kgdb) print *target
$9 =3D {ia_ifa =3D {ifa_addr =3D 0xdeadc0de, ifa_dstaddr =3D 0xdeadc0de,=20
    ifa_netmask =3D 0xdeadc0de, if_data =3D {ifi_type =3D 222 '=DE',=20
      ifi_physical =3D 192 '=C0', ifi_addrlen =3D 173 '=AD', ifi_hdrlen =3D=
 222 '=DE',=20
      ifi_link_state =3D 222 '=DE', ifi_recvquota =3D 192 '=C0',=20
      ifi_xmitquota =3D 173 '=AD', ifi_datalen =3D 222 '=DE', ifi_mtu =3D 3=
735929054,=20
      ifi_metric =3D 3735929054, ifi_baudrate =3D 3735929054,=20
      ifi_ipackets =3D 3735929054, ifi_ierrors =3D 3735929054,=20
      ifi_opackets =3D 3735929054, ifi_oerrors =3D 3735929054,=20
      ifi_collisions =3D 3735929054, ifi_ibytes =3D 3735929054,=20
      ifi_obytes =3D 3735929054, ifi_imcasts =3D 3735929054,=20
      ifi_omcasts =3D 3735929054, ifi_iqdrops =3D 3735929054,=20
      ifi_noproto =3D 3735929054, ifi_hwassist =3D 3735929054,=20
      ifi_epoch =3D -559038242, ifi_lastchange =3D {tv_sec =3D -559038242,=
=20
        tv_usec =3D -559038242}}, ifa_ifp =3D 0xdeadc0de, ifa_link =3D {
      tqe_next =3D 0xdeadc0de, tqe_prev =3D 0xdeadc0de},=20
    ifa_rtrequest =3D 0xc05ae384 <arp_rtrequest>, ifa_flags =3D 49630,=20
    ifa_refcnt =3D 3735929054, ifa_metric =3D 0, ifa_claim_addr =3D 0xdeadc=
0de,=20
    ifa_mtx =3D {mtx_object =3D {lo_class =3D 0xdeadc0de,=20
        lo_name =3D 0xdeadc0de <Address 0xdeadc0de out of bounds>,=20
        lo_type =3D 0xdeadc0de <Address 0xdeadc0de out of bounds>,=20
        lo_flags =3D 3735929054, lo_list =3D {tqe_next =3D 0xdeadc0de,=20
          tqe_prev =3D 0xdeadc0de}, lo_witness =3D 0xdeadc0de},=20
      mtx_lock =3D 3735929054, mtx_recurse =3D 3735929054}}, ia_net =3D 0,=
=20
  ia_netmask =3D 3724541952, ia_subnet =3D 0, ia_subnetmask =3D 3735929054,=
=20
  ia_netbroadcast =3D {s_addr =3D 4294967073}, ia_hash =3D {le_next =3D 0xd=
eadc0de,=20
    le_prev =3D 0xdeadc0de}, ia_link =3D {tqe_next =3D 0xdeadc0de,=20
    tqe_prev =3D 0xdeadc0de}, ia_addr =3D {sin_len =3D 222 '=DE',=20
    sin_family =3D 192 '=C0', sin_port =3D 57005, sin_addr =3D {s_addr =3D =
3735929054},=20
    sin_zero =3D "=DE=C0=AD=DE=DE=C0=AD=DE"}, ia_dstaddr =3D {sin_len =3D 2=
22 '=DE',=20
    sin_family =3D 192 '=C0', sin_port =3D 57005, sin_addr =3D {s_addr =3D =
557797921},=20
    sin_zero =3D "=DE=C0=AD=DE=DE=C0=AD=DE"}, ia_sockmask =3D {sin_len =3D =
8 '\b',=20
    sin_family =3D 192 '=C0', sin_port =3D 57005, sin_addr =3D {s_addr =3D =
3735929054},=20
    sin_zero =3D "=DE=C0=AD=DE=DE=C0=AD=DE"}}

(kgdb) up
#10 0xc05b17c9 in in_ifinit (ifp=3D0xc4cbac00, ia=3D0xc4ee8900, sin=3D0x0, =
scrub=3D0)
    at /usr/src/sys/netinet/in.c:769
769             if ((error =3D in_addprefix(ia, flags)) !=3D 0)
(kgdb) print *ifp
$10 =3D {if_softc =3D 0xc4b5d000, if_l2com =3D 0xc4be8970, if_link =3D {
    tqe_next =3D 0xc4d68800, tqe_prev =3D 0xc4cbc808},=20
  if_xname =3D "em0", '\0' <repeats 12 times>, if_dname =3D 0xc4b1b02c "em"=
,=20
  if_dunit =3D 0, if_addrhead =3D {tqh_first =3D 0xc4bc7e00, tqh_last =3D 0=
xc4bc7e60},=20
  if_klist =3D {kl_list =3D {slh_first =3D 0x0},=20
    kl_lock =3D 0xc0512df8 <knlist_mtx_lock>,=20
    kl_unlock =3D 0xc0512e14 <knlist_mtx_unlock>,=20
    kl_locked =3D 0xc0512e30 <knlist_mtx_locked>, kl_lockarg =3D 0xc06e0120=
},=20
  if_pcount =3D 0, if_carp =3D 0x0, if_bpf =3D 0x0, if_index =3D 3, if_time=
r =3D 0,=20
  if_nvlans =3D 0, if_flags =3D 34819, if_capabilities =3D 91, if_capenable=
 =3D 11,=20
  if_linkmib =3D 0x0, if_linkmiblen =3D 0, if_data =3D {ifi_type =3D 6 '\00=
6',=20
    ifi_physical =3D 0 '\0', ifi_addrlen =3D 6 '\006', ifi_hdrlen =3D 18 '\=
022',=20
    ifi_link_state =3D 2 '\002', ifi_recvquota =3D 0 '\0', ifi_xmitquota =
=3D 0 '\0',=20
    ifi_datalen =3D 80 'P', ifi_mtu =3D 1500, ifi_metric =3D 0,=20
    ifi_baudrate =3D 1000000000, ifi_ipackets =3D 118, ifi_ierrors =3D 0,=
=20
    ifi_opackets =3D 9, ifi_oerrors =3D 0, ifi_collisions =3D 0, ifi_ibytes=
 =3D 12051,=20
    ifi_obytes =3D 1432, ifi_imcasts =3D 103, ifi_omcasts =3D 0, ifi_iqdrop=
s =3D 0,=20
    ifi_noproto =3D 0, ifi_hwassist =3D 6, ifi_epoch =3D 0, ifi_lastchange =
=3D {
      tv_sec =3D 1143200348, tv_usec =3D 945159}}, if_multiaddrs =3D {
    tqh_first =3D 0xc4d52d20, tqh_last =3D 0xc4e97000}, if_amcount =3D 0,=
=20
  if_output =3D 0xc059312c <ether_output>, if_input =3D 0xc059395c <ether_i=
nput>,=20
  if_start =3D 0xc046d350 <em_start>, if_ioctl =3D 0xc046d3a8 <em_ioctl>,=
=20
  if_watchdog =3D 0xc046d6fc <em_watchdog>, if_init =3D 0xc046d9c4 <em_init=
>,=20
  if_resolvemulti =3D 0xc05941e4 <ether_resolvemulti>, if_spare1 =3D 0x0,=
=20
  if_spare2 =3D 0x0, if_spare3 =3D 0x0, if_drv_flags =3D 64, if_spare_flags=
2 =3D 0,=20
  if_snd =3D {ifq_head =3D 0xc4e8a500, ifq_tail =3D 0xc4e8a500, ifq_len =3D=
 1,=20
    ifq_maxlen =3D 255, ifq_drops =3D 0, ifq_mtx =3D {mtx_object =3D {
        lo_class =3D 0xc06bcc44, lo_name =3D 0xc4cbac10 "em0",=20
        lo_type =3D 0xc068b153 "if send queue", lo_flags =3D 196608, lo_lis=
t =3D {
          tqe_next =3D 0xc4bc7e7c, tqe_prev =3D 0xc4cbae2c},=20
        lo_witness =3D 0xc06ef630}, mtx_lock =3D 4, mtx_recurse =3D 0},=20
    ifq_drv_head =3D 0x0, ifq_drv_tail =3D 0x0, ifq_drv_len =3D 0,=20
    ifq_drv_maxlen =3D 255, altq_type =3D 0, altq_flags =3D 1, altq_disc =
=3D 0x0,=20
    altq_ifp =3D 0xc4cbac00, altq_enqueue =3D 0, altq_dequeue =3D 0,=20
    altq_request =3D 0, altq_clfier =3D 0x0, altq_classify =3D 0, altq_tbr =
=3D 0x0,=20
    altq_cdnr =3D 0x0}, if_broadcastaddr =3D 0xc065f4c0 "=FF=FF=FF=FF=FF=FF=
ether_output",=20
  if_bridge =3D 0x0, lltables =3D 0x0, if_label =3D 0x0, if_prefixhead =3D {
    tqh_first =3D 0x0, tqh_last =3D 0xc4cbad7c}, if_afdata =3D {
    0x0 <repeats 37 times>}, if_afdata_initialized =3D 2, if_afdata_mtx =3D
{
    mtx_object =3D {lo_class =3D 0xc06bcc44, lo_name =3D 0xc068b143 "if_afd=
ata",=20
      lo_type =3D 0xc068b143 "if_afdata", lo_flags =3D 196608, lo_list =3D {
        tqe_next =3D 0xc4cbad0c, tqe_prev =3D 0xc4cbae70},=20
      lo_witness =3D 0xc06ef658}, mtx_lock =3D 4, mtx_recurse =3D 0},=20
  if_starttask =3D {ta_link =3D {stqe_next =3D 0x0}, ta_pending =3D 0,=20
    ta_priority =3D 0, ta_func =3D 0xc0592430 <if_start_deferred>,=20
    ta_context =3D 0xc4cbac00}, if_linktask =3D {ta_link =3D {stqe_next =3D=
 0x0},=20
    ta_pending =3D 0, ta_priority =3D 0,=20
    ta_func =3D 0xc05908b8 <do_link_state_change>, ta_context =3D 0xc4cbac0=
0},=20
  if_addr_mtx =3D {mtx_object =3D {lo_class =3D 0xc06bcc44,=20
      lo_name =3D 0xc06849b5 "if_addr_mtx", lo_type =3D 0xc06849b5 "if_addr=
_mtx",=20
      lo_flags =3D 196608, lo_list =3D {tqe_next =3D 0xc4cbae1c,=20
        tqe_prev =3D 0xc4b5d1b4}, lo_witness =3D 0xc06f0e90}, mtx_lock =3D =
4,=20
    mtx_recurse =3D 0}}
(kgdb) print *ia
$11 =3D {ia_ifa =3D {ifa_addr =3D 0xdeadc0de, ifa_dstaddr =3D 0xdeadc0de,=
=20
    ifa_netmask =3D 0xdeadc0de, if_data =3D {ifi_type =3D 222 '=DE',=20
      ifi_physical =3D 192 '=C0', ifi_addrlen =3D 173 '=AD', ifi_hdrlen =3D=
 222 '=DE',=20
      ifi_link_state =3D 222 '=DE', ifi_recvquota =3D 192 '=C0',=20
      ifi_xmitquota =3D 173 '=AD', ifi_datalen =3D 222 '=DE', ifi_mtu =3D
3735929054,=20
      ifi_metric =3D 3735929054, ifi_baudrate =3D 3735929054,=20
      ifi_ipackets =3D 3735929054, ifi_ierrors =3D 3735929054,=20
      ifi_opackets =3D 3735929054, ifi_oerrors =3D 3735929054,=20
      ifi_collisions =3D 3735929054, ifi_ibytes =3D 3735929054,=20
      ifi_obytes =3D 3735929054, ifi_imcasts =3D 3735929054,=20
      ifi_omcasts =3D 3735929054, ifi_iqdrops =3D 3735929054,=20
      ifi_noproto =3D 3735929054, ifi_hwassist =3D 3735929054,=20
      ifi_epoch =3D -559038242, ifi_lastchange =3D {tv_sec =3D -559038242,=
=20
        tv_usec =3D -559038242}}, ifa_ifp =3D 0xdeadc0de, ifa_link =3D {
      tqe_next =3D 0xdeadc0de, tqe_prev =3D 0xdeadc0de},=20
    ifa_rtrequest =3D 0xc05ae384 <arp_rtrequest>, ifa_flags =3D 49630,=20
    ifa_refcnt =3D 3735929054, ifa_metric =3D 0, ifa_claim_addr =3D 0xdeadc=
0de,=20
    ifa_mtx =3D {mtx_object =3D {lo_class =3D 0xdeadc0de,=20
        lo_name =3D 0xdeadc0de <Address 0xdeadc0de out of bounds>,=20
        lo_type =3D 0xdeadc0de <Address 0xdeadc0de out of bounds>,=20
        lo_flags =3D 3735929054, lo_list =3D {tqe_next =3D 0xdeadc0de,=20
          tqe_prev =3D 0xdeadc0de}, lo_witness =3D 0xdeadc0de},=20
      mtx_lock =3D 3735929054, mtx_recurse =3D 3735929054}}, ia_net =3D 0,=
=20
  ia_netmask =3D 3724541952, ia_subnet =3D 0, ia_subnetmask =3D 3735929054,=
=20
  ia_netbroadcast =3D {s_addr =3D 4294967073}, ia_hash =3D {le_next =3D 0xd=
eadc0de,=20
    le_prev =3D 0xdeadc0de}, ia_link =3D {tqe_next =3D 0xdeadc0de,=20
    tqe_prev =3D 0xdeadc0de}, ia_addr =3D {sin_len =3D 222 '=DE',=20
    sin_family =3D 192 '=C0', sin_port =3D 57005, sin_addr =3D {s_addr =3D =
3735929054},=20
    sin_zero =3D "=DE=C0=AD=DE=DE=C0=AD=DE"}, ia_dstaddr =3D {sin_len =3D 2=
22 '=DE',=20
    sin_family =3D 192 '=C0', sin_port =3D 57005, sin_addr =3D {s_addr =3D =
557797921},=20
    sin_zero =3D "=DE=C0=AD=DE=DE=C0=AD=DE"}, ia_sockmask =3D {sin_len =3D =
8 '\b',=20
    sin_family =3D 192 '=C0', sin_port =3D 57005, sin_addr =3D {s_addr =3D =
3735929054},=20
    sin_zero =3D "=DE=C0=AD=DE=DE=C0=AD=DE"}}
(kgdb) up=20
#11 0xc05b0b8a in in_control (so=3D0xc4eee42c, cmd=3D1, data=3D0xc4d59880 "=
em0",=20
    ifp=3D0xc4cbac00, td=3D0xc4bd8c00) at /usr/src/sys/netinet/in.c:439
439                             error =3D in_ifinit(ifp, ia, &ifra->ifra_ad=
dr, 0);
(kgdb) print *so
$12 =3D {so_count =3D 1, so_type =3D 2, so_options =3D 0, so_linger =3D 0, =
so_state =3D 0,=20
  so_qstate =3D 0, so_pcb =3D 0xc4ef30b4, so_proto =3D 0xc06c7954, so_head =
=3D 0x0,=20
  so_incomp =3D {tqh_first =3D 0x0, tqh_last =3D 0xc4eee448}, so_comp =3D {
    tqh_first =3D 0x0, tqh_last =3D 0xc4eee450}, so_list =3D {tqe_next =3D =
0x0,=20
    tqe_prev =3D 0x0}, so_qlen =3D 0, so_incqlen =3D 0, so_qlimit =3D 0, so=
_timeo =3D 0,=20
  so_error =3D 0, so_sigio =3D 0x0, so_oobmark =3D 0, so_aiojobq =3D {tqh_f=
irst =3D 0x0,=20
    tqh_last =3D 0xc4eee474}, so_rcv =3D {sb_sel =3D {si_thrlist =3D {tqe_n=
ext =3D 0x0,=20
        tqe_prev =3D 0x0}, si_thread =3D 0x0, si_note =3D {kl_list =3D {
          slh_first =3D 0x0}, kl_lock =3D 0xc0512df8 <knlist_mtx_lock>,=20
        kl_unlock =3D 0xc0512e14 <knlist_mtx_unlock>,=20
        kl_locked =3D 0xc0512e30 <knlist_mtx_locked>, kl_lockarg =3D 0xc4ee=
e4a0},=20
      si_flags =3D 0}, sb_mtx =3D {mtx_object =3D {lo_class =3D 0xc06bcc44,=
=20
        lo_name =3D 0xc0684972 "so_rcv", lo_type =3D 0xc0684972 "so_rcv",=
=20
        lo_flags =3D 196608, lo_list =3D {tqe_next =3D 0xc4ef3144,=20
          tqe_prev =3D 0xc4eee528}, lo_witness =3D 0xc06f0fa8}, mtx_lock =
=3D 4,=20
      mtx_recurse =3D 0}, sb_state =3D 0, sb_mb =3D 0x0, sb_mbtail =3D 0x0,=
=20
    sb_lastrecord =3D 0x0, sb_cc =3D 0, sb_hiwat =3D 41600, sb_mbcnt =3D 0,=
=20
    sb_mbmax =3D 262144, sb_ctl =3D 0, sb_lowat =3D 1, sb_timeo =3D 0, sb_f=
lags =3D 0},=20
  so_snd =3D {sb_sel =3D {si_thrlist =3D {tqe_next =3D 0x0, tqe_prev =3D 0x=
0},=20
      si_thread =3D 0x0, si_note =3D {kl_list =3D {slh_first =3D 0x0},=20
        kl_lock =3D 0xc0512df8 <knlist_mtx_lock>,=20
        kl_unlock =3D 0xc0512e14 <knlist_mtx_unlock>,=20
        kl_locked =3D 0xc0512e30 <knlist_mtx_locked>, kl_lockarg =3D 0xc4ee=
e518},=20
      si_flags =3D 0}, sb_mtx =3D {mtx_object =3D {lo_class =3D 0xc06bcc44,=
=20
        lo_name =3D 0xc068496b "so_snd", lo_type =3D 0xc068496b "so_snd",=
=20
        lo_flags =3D 196608, lo_list =3D {tqe_next =3D 0xc4eee4a0,=20
          tqe_prev =3D 0xc4ee863c}, lo_witness =3D 0xc06f0fd0}, mtx_lock =
=3D 4,=20
      mtx_recurse =3D 0}, sb_state =3D 0, sb_mb =3D 0x0, sb_mbtail =3D 0x0,=
=20
    sb_lastrecord =3D 0x0, sb_cc =3D 0, sb_hiwat =3D 9216, sb_mbcnt =3D 0,=
=20
    sb_mbmax =3D 73728, sb_ctl =3D 0, sb_lowat =3D 2048, sb_timeo =3D 0,=20
    sb_flags =3D 0}, so_upcall =3D 0, so_upcallarg =3D 0x0, so_cred =3D 0xc=
4a9cd80,=20
  so_label =3D 0x0, so_peerlabel =3D 0x0, so_gencnt =3D 204, so_emuldata =
=3D 0x0,=20
  so_accf =3D 0x0}
(kgdb) print *data
$13 =3D 101 'e'
(kgdb) print *ifp
$14 =3D {if_softc =3D 0xc4b5d000, if_l2com =3D 0xc4be8970, if_link =3D {
    tqe_next =3D 0xc4d68800, tqe_prev =3D 0xc4cbc808},=20
  if_xname =3D "em0", '\0' <repeats 12 times>, if_dname =3D 0xc4b1b02c "em"=
,=20
  if_dunit =3D 0, if_addrhead =3D {tqh_first =3D 0xc4bc7e00, tqh_last =3D 0=
xc4bc7e60},=20
  if_klist =3D {kl_list =3D {slh_first =3D 0x0},=20
    kl_lock =3D 0xc0512df8 <knlist_mtx_lock>,=20
    kl_unlock =3D 0xc0512e14 <knlist_mtx_unlock>,=20
    kl_locked =3D 0xc0512e30 <knlist_mtx_locked>, kl_lockarg =3D 0xc06e0120=
},=20
  if_pcount =3D 0, if_carp =3D 0x0, if_bpf =3D 0x0, if_index =3D 3, if_time=
r =3D 0,=20
  if_nvlans =3D 0, if_flags =3D 34819, if_capabilities =3D 91, if_capenable=
 =3D 11,=20
  if_linkmib =3D 0x0, if_linkmiblen =3D 0, if_data =3D {ifi_type =3D 6 '\00=
6',=20
    ifi_physical =3D 0 '\0', ifi_addrlen =3D 6 '\006', ifi_hdrlen =3D 18 '\=
022',=20
    ifi_link_state =3D 2 '\002', ifi_recvquota =3D 0 '\0', ifi_xmitquota =
=3D 0 '\0',=20
    ifi_datalen =3D 80 'P', ifi_mtu =3D 1500, ifi_metric =3D 0,=20
    ifi_baudrate =3D 1000000000, ifi_ipackets =3D 118, ifi_ierrors =3D 0,=
=20
    ifi_opackets =3D 9, ifi_oerrors =3D 0, ifi_collisions =3D 0, ifi_ibytes=
 =3D 12051,=20
    ifi_obytes =3D 1432, ifi_imcasts =3D 103, ifi_omcasts =3D 0, ifi_iqdrop=
s =3D 0,=20
    ifi_noproto =3D 0, ifi_hwassist =3D 6, ifi_epoch =3D 0, ifi_lastchange =
=3D {
      tv_sec =3D 1143200348, tv_usec =3D 945159}}, if_multiaddrs =3D {
    tqh_first =3D 0xc4d52d20, tqh_last =3D 0xc4e97000}, if_amcount =3D 0,=
=20
  if_output =3D 0xc059312c <ether_output>, if_input =3D 0xc059395c <ether_i=
nput>,=20
  if_start =3D 0xc046d350 <em_start>, if_ioctl =3D 0xc046d3a8 <em_ioctl>,=
=20
  if_watchdog =3D 0xc046d6fc <em_watchdog>, if_init =3D 0xc046d9c4 <em_init=
>,=20
  if_resolvemulti =3D 0xc05941e4 <ether_resolvemulti>, if_spare1 =3D 0x0,=
=20
  if_spare2 =3D 0x0, if_spare3 =3D 0x0, if_drv_flags =3D 64, if_spare_flags=
2 =3D 0,=20
  if_snd =3D {ifq_head =3D 0xc4e8a500, ifq_tail =3D 0xc4e8a500, ifq_len =3D=
 1,=20
    ifq_maxlen =3D 255, ifq_drops =3D 0, ifq_mtx =3D {mtx_object =3D {
        lo_class =3D 0xc06bcc44, lo_name =3D 0xc4cbac10 "em0",=20
        lo_type =3D 0xc068b153 "if send queue", lo_flags =3D 196608, lo_lis=
t =3D {
          tqe_next =3D 0xc4bc7e7c, tqe_prev =3D 0xc4cbae2c},=20
        lo_witness =3D 0xc06ef630}, mtx_lock =3D 4, mtx_recurse =3D 0},=20
    ifq_drv_head =3D 0x0, ifq_drv_tail =3D 0x0, ifq_drv_len =3D 0,=20
    ifq_drv_maxlen =3D 255, altq_type =3D 0, altq_flags =3D 1, altq_disc =
=3D 0x0,=20
    altq_ifp =3D 0xc4cbac00, altq_enqueue =3D 0, altq_dequeue =3D 0,=20
    altq_request =3D 0, altq_clfier =3D 0x0, altq_classify =3D 0, altq_tbr =
=3D 0x0,=20
    altq_cdnr =3D 0x0}, if_broadcastaddr =3D 0xc065f4c0 "=FF=FF=FF=FF=FF=FF=
ether_output",=20
  if_bridge =3D 0x0, lltables =3D 0x0, if_label =3D 0x0, if_prefixhead =3D {
    tqh_first =3D 0x0, tqh_last =3D 0xc4cbad7c}, if_afdata =3D {
    0x0 <repeats 37 times>}, if_afdata_initialized =3D 2, if_afdata_mtx =3D=
 {
    mtx_object =3D {lo_class =3D 0xc06bcc44, lo_name =3D 0xc068b143 "if_afd=
ata",=20
      lo_type =3D 0xc068b143 "if_afdata", lo_flags =3D 196608, lo_list =3D {
        tqe_next =3D 0xc4cbad0c, tqe_prev =3D 0xc4cbae70},=20
      lo_witness =3D 0xc06ef658}, mtx_lock =3D 4, mtx_recurse =3D 0},=20
  if_starttask =3D {ta_link =3D {stqe_next =3D 0x0}, ta_pending =3D 0,=20
    ta_priority =3D 0, ta_func =3D 0xc0592430 <if_start_deferred>,=20
    ta_context =3D 0xc4cbac00}, if_linktask =3D {ta_link =3D {stqe_next =3D=
 0x0},=20
    ta_pending =3D 0, ta_priority =3D 0,=20
    ta_func =3D 0xc05908b8 <do_link_state_change>, ta_context =3D 0xc4cbac0=
0},=20
  if_addr_mtx =3D {mtx_object =3D {lo_class =3D 0xc06bcc44,=20
      lo_name =3D 0xc06849b5 "if_addr_mtx", lo_type =3D 0xc06849b5 "if_addr=
_mtx",=20
      lo_flags =3D 196608, lo_list =3D {tqe_next =3D 0xc4cbae1c,=20
        tqe_prev =3D 0xc4b5d1b4}, lo_witness =3D 0xc06f0e90}, mtx_lock =3D =
4,=20
    mtx_recurse =3D 0}}



There's rather a lot of deadc0de appearing up there...... any ideas?

Joe



----- End forwarded message -----

--=20
Josef Karthauser (joe@tao.org.uk)	       http://www.josef-k.net/
FreeBSD (cvs meister, admin and hacker)     http://www.uk.FreeBSD.org/
Physics Particle Theory (student)   http://www.pact.cpes.sussex.ac.uk/
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D An eclectic mix of fact an=
d theory. =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D

--6TrnltStXW4iwmi0
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (FreeBSD)

iEYEARECAAYFAkQnmn4ACgkQXVIcjOaxUBY27gCeP/Tqh16VOpwIcTjRAmZDF2pS
W80AnRolYIhuOzpMTDRWVXh52J0jxNOa
=XcL/
-----END PGP SIGNATURE-----

--6TrnltStXW4iwmi0--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20060327075543.GA957>