Gleb Smirnoff <glebius@freebsd.org> writes:
> On Wed, Dec 15, 2004 at 09:03:28AM +0100, Christian Laursen wrote:
> C> We are experiencing a panic about once a day that seems related to
> C> dummynet.
[snip]
> C> I have put the kernel configuration at at
<http://hoegaarden.pil.dk/~cfsl/NS3>
> C> and the boot output at
<http://hoegaarden.pil.dk/~cfsl/ns3-dmesg>.
> C>
> C> Thanks in adavnce for any help solving this.
>
> Can you save crashdump?
I now managed to get a crashdump.
This is the backtrace from there:
ns3# kgdb kernel.debug /var/crash/vmcore.0
[GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so:
Undefined symbol "ps_pglobal_lookup"]
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for
details.
This GDB was configured as "i386-marcel-freebsd".
doadump () at pcpu.h:159
(kgdb) bt
#0 doadump () at pcpu.h:159
#1 0xc042d88e in db_fncall (dummy1=0, dummy2=0, dummy3=57, dummy4=0xc74db99c
"??M?\200%") at /usr/src/sys/ddb/db_command.c:531
#2 0xc042d69c in db_command (last_cmdp=0xc0672564, cmd_table=0x0,
aux_cmd_tablep=0xc06440fc, aux_cmd_tablep_end=0xc0644100) at
/usr/src/sys/ddb/db_command.c:349
#3 0xc042d764 in db_command_loop () at /usr/src/sys/ddb/db_command.c:455
#4 0xc042f2d9 in db_trap (type=12, code=0) at /usr/src/sys/ddb/db_main.c:221
#5 0xc04bd382 in kdb_trap (type=12, code=0, tf=0xc74dbb2c) at
/usr/src/sys/kern/subr_kdb.c:418
#6 0xc060d011 in trap_fatal (frame=0xc74dbb2c, eva=12) at
/usr/src/sys/i386/i386/trap.c:804
#7 0xc060cd97 in trap_pfault (frame=0xc74dbb2c, usermode=0, eva=12) at
/usr/src/sys/i386/i386/trap.c:727
#8 0xc060c995 in trap (frame {tf_fs = -1061945320, tf_es = 16, tf_ds =
-951255024, tf_edi = -1052997804, tf_esi = 1460, tf_ebp = -951207024, tf_isp =
-951207080, tf_ebx = -1052997888, tf_edx = 0, tf_ecx = -1055588338, tf_eax = 0,
tf_trapno = 12, tf_err = -951255040, tf_eip = -1068659825, tf_cs = 8, tf_eflags
= 66054, tf_esp = 0, tf_ss = -1067603120}) at /usr/src/sys/i386/i386/trap.c:417
#9 0xc05ff70a in calltrap () at /usr/src/sys/i386/i386/exception.s:140
#10 0xc0b40018 in ?? ()
#11 0x00000010 in ?? ()
#12 0xc74d0010 in ?? ()
#13 0xc13c8754 in ?? ()
#14 0x000005b4 in ?? ()
#15 0xc74dbb90 in ?? ()
#16 0xc74dbb58 in ?? ()
#17 0xc13c8700 in ?? ()
#18 0x00000000 in ?? ()
#19 0xc115000e in ?? ()
#20 0x00000000 in ?? ()
#21 0x0000000c in ?? ()
#22 0xc74d0000 in ?? ()
#23 0xc04d8b8f in m_copym (m=0x0, off0=1500, len=1480, wait=1) at
/usr/src/sys/kern/uipc_mbuf.c:373
#24 0xc05305c4 in ip_fragment (ip=0xc115000e, m_frag=0xc74dbc48,
mtu=-1052997888, if_hwassist_flags=0, sw_csum=1) at
/usr/src/sys/netinet/ip_output.c:965
#25 0xc0530270 in ip_output (m=0xc0cbfe00, opt=0xc115000e, ro=0xc74dbc14,
flags=0, imo=0x0, inp=0x0) at /usr/src/sys/netinet/ip_output.c:794
#26 0xc05246b1 in transmit_event (pipe=0xc0bc9c00) at
/usr/src/sys/netinet/ip_dummynet.c:454
#27 0xc05249c4 in ready_event (q=0xc0c60900) at
/usr/src/sys/netinet/ip_dummynet.c:614
#28 0xc0524f37 in dummynet (unused=0x0) at
/usr/src/sys/netinet/ip_dummynet.c:769
#29 0xc04b229b in softclock (dummy=0x0) at /usr/src/sys/kern/kern_timeout.c:259
#30 0xc0491945 in ithread_loop (arg=0xc0ac3580) at
/usr/src/sys/kern/kern_intr.c:547
#31 0xc0490ac5 in fork_exit (callout=0xc04917f0 <ithread_loop>,
arg=0xc0ac3580, frame=0xc74dbd48) at /usr/src/sys/kern/kern_fork.c:811
#32 0xc05ff76c in fork_trampoline () at /usr/src/sys/i386/i386/exception.s:209
--
Christian Laursen