panic: sent too much

[Andre Guibert de Bruet]

Hello,

I got this earlier today:

(kgdb) where
#0  doadump () at ../../../kern/kern_shutdown.c:240
#1  0x6045028d in db_fncall (dummy1=1016, dummy2=0, dummy3=331,
dummy4=0xaedfa954 "") at ../../../ddb/db_command.c:548
#2  0x6045002a in db_command (last_cmdp=0x607869c0, cmd_table=0x0,
aux_cmd_tablep=0x607363dc, aux_cmd_tablep_end=0x607363e0)
    at ../../../ddb/db_command.c:346
#3  0x60450138 in db_command_loop () at ../../../ddb/db_command.c:472
#4  0x60452e79 in db_trap (type=3, code=0) at ../../../ddb/db_trap.c:73
#5  0x606bb6c3 in kdb_trap (type=3, code=0, regs=0xaedfaa94) at
../../../i386/i386/db_interface.c:171
#6  0x606d01ae in trap (frame=
      {tf_fs = 24, tf_es = 16, tf_ds = 16, tf_edi = 1618093012, tf_esi =
1, tf_ebp = -1361073440, tf_isp = -1361073472, tf_ebx = 0,
tf_edx = 0, tf_ecx = 1, tf_eax = 18, tf_trapno = 3, tf_err = 0, tf_eip =
1617672622, tf_cs = 8, tf_eflags = 642, tf_esp = 1618144095
, tf_ss = 1618048940}) at ../../../i386/i386/trap.c:580
#7  0x606bcfc8 in calltrap () at {standard input}:94
#8  0x6055b4d8 in panic (fmt=0x607223d4 "sent too much") at
../../../kern/kern_shutdown.c:534
#9  0x605ece8f in tcp_input (m=0x64f72400, off0=20) at
../../../netinet/tcp_input.c:2368
#10 0x605e47c9 in ip_input (m=0x64f72400) at
../../../netinet/ip_input.c:983
#11 0x605d021e in netisr_processqueue (ni=0x607bb2f8) at
../../../net/netisr.c:152
#12 0x605d0603 in swi_net (dummy=0x0) at ../../../net/netisr.c:257
#13 0x60547ec2 in ithread_loop (arg=0x64f5af00) at
../../../kern/kern_intr.c:548
#14 0x60546ea4 in fork_exit (callout=0x60547d50 <ithread_loop>, arg=0x0,
frame=0x0) at ../../../kern/kern_fork.c:797

<snip>

(kgdb) up
#9  0x605ece8f in tcp_input (m=0x64f72400, off0=20) at
../../../netinet/tcp_input.c:2368
2368            KASSERT(headlocked, ("headlocked should be 1"));
(kgdb) list
2363    #ifdef TCPDEBUG
2364            if (so->so_options & SO_DEBUG)
2365                    tcp_trace(TA_DROP, ostate, tp, (void
*)tcp_saveipgen,
2366                              &tcp_savetcp, 0);
2367    #endif
2368            KASSERT(headlocked, ("headlocked should be 1"));
2369            INP_INFO_WUNLOCK(&tcbinfo);
2370            m_freem(m);
2371            tp->t_flags |= TF_ACKNOW;
2372            (void) tcp_output(tp);
(kgdb)

System is:

FreeBSD bling.home 5.2-CURRENT FreeBSD 5.2-CURRENT #0: Mon Jan 19 15:26:00
EST 2004     root at bling.home:/usr/src/sys/i386/compile/BLING  i386

dmesg and kernel config are available upon request.

Does this ring a bell for anyone?

Regards

> Andre Guibert de Bruet | Enterprise Software Consultant >
> Silicon Landmark, LLC. | http://siliconlandmark.com/    >