Subject: more on repeatable 2.0_BETA crashes
To: None <port-alpha@netbsd.org>
From: Miles Nordin <carton@Ivy.NET>
List: port-alpha
Date: 09/03/2004 22:53:14
I can now reproduce the crash on demand:

castrovalva$ sync
castrovalva$  host 211.171.134.67
Host 67.134.171.panic: looutput: no header mbuf
Stopped in pid 218.1 (named) at netbsd:cpu_Debugger+0x4:        ret     zero,(ra
)
db> sync
syncing disks... 211.in-addr.arpa not found: 3(NXDOMAIN)
1 1 1 done

dumping to dev 8,1 offset 789343
dump 512 511 510 [...]

I'm running 2.0_BETA 2004-08-15 on a uniprocessor machine.  The
machine is running BIND 9.2.3 as a recursive resolver.

If I remove 'options INET6' from the kernel, I can no longer reproduce
the crash with the above command.  

Note the above host is in Korea, and RIPE runs some IPv6 nameservers
for reverse lookup---might have something to do with it.  But I don't
know exactly what part of the above lookup is causing the crash.

The backtrace is different than what I was getting before.  I switched
to a '-g' kernel so the core dump would hopefully be more useful.

If someone's interested in looking at this before 2.0 is released,
that'd sure be awesome.  I'm taking the machine out of production-use,
so I think I can keep it at your disposal.  at least until 2.0 is
released---then I will try to somehow make the machine useful to me
again.  TIA!

seriously, if you want me to try something, just let me know.  I
actually use IPv6, and I have been severally ``targeted'' since I run
2600net irc servers, and in this case the DoS attack is just to
connect to my irc server from some host in Korea.  That is, weak.
worse-than-winnuke weak.  and actually I bought alpha stuff
deliberately because HZ=1024 is supposed to be good for ALTQ.  ...and
just spent two weeks fighting with quagga so I can join occaid.  so,
two, two-and-a-half seperate of my projects are stuck on this, which
makes me very motivated to help, should anyone be inclined.  :)


panic: looutput: no header mbuf
db> bt
cpu_Debugger() at netbsd:cpu_Debugger+0x4
panic() at netbsd:panic+0x1f8
lostart() at netbsd:lostart
--- root of call graph ---
db> ps
 PID           PPID     PGRP        UID S   FLAGS LWPS          COMMAND    WAIT
 2631          2912      984        405 2  0x4002    1              cc1
 2912          3389      984        405 2  0x4002    1 alpha--netbsd-gc    wait
 3389          2401      984        405 2  0x4002    1               sh    wait
 3252           227      227         12 2  0x4100    1            smtpd    poll
 3259           227      227         12 2  0x4100    1            flush  select
 2401           984      984        405 2  0x4002    1           nbmake    wait
 984            324      984        405 2     0x2    1              ksh   pause
 859            789      789        105 2   0x100    1            httpd semwait
 324            323      324        405 2  0x4002    1              ksh   ttyin
 323            320      320        405 2   0x100    1             sshd  select
 320            103      320          0 2   0x101    1             sshd   netio
 493            300      493        405 2  0x4002    1              ksh   ttyin
 300            618      618        405 2   0x100    1             sshd  select
 618            103      618          0 2   0x101    1             sshd   netio
 162              1      162          0 2  0x4002    1            getty   ttyin
 282              1      282         15 2   0x100    1             ntpd   pause
>203              1      203         14 2   0x100    1            named
 422            227      227         12 2  0x4100    1           pickup  select
 884            753      884        595 2  0x4002    1              ksh   ttyin
 753            535      535        595 2   0x100    1             sshd  select
 535            103      535          0 2   0x101    1             sshd   netio
--db_more--            356            789      789        105 2   0x100    1            httpd    poll
 1021           789      789        105 2   0x100    1            httpd semwait
 424            789      789        105 2   0x100    1            httpd semwait
 426            789      789        105 2   0x100    1            httpd semwait
 989            789      789        105 2   0x100    1            httpd semwait
 417            789      789        105 2   0x100    1            httpd semwait
 570              1      570        595 2  0x4003    1              ksh   ttyin
 789              1      789          0 2       0    1            httpd  select
 357              1      357       1003 2       0    1            clamd  select
 495              1      495          0 2       0    1             cron nanosle
 854              1      854          0 2       0    1            inetd  select
 852              1      852          0 2   0x101    1           ospf6d  select
 370              1      370          0 2   0x101    1            ospfd  select
 236            227      227         12 2  0x4100    1             qmgr  select
 227              1      227          0 2  0x4108    1           master  select
 103              1      103          0 2       0    1             sshd  select
 98               1       98          0 2     0x1    1              xdm  select
 501              1      501          0 2       0    1            rarpd  select
 430              1      430          0 2       0    1   rpc.bootparamd  select
 350            313      313          0 2       0    1             nfsd    nfsd
 348            313      313          0 2       0    1             nfsd    nfsd
 335            313      313          0 2       0    1             nfsd    nfsd
 337            313      313          0 2       0    1             nfsd    nfsd
--db_more--            313              1      313          0 2       0    1             nfsd    poll
 312              1      312          0 2       0    1           mountd  select
 243              1      243          0 2       0    1        mount_mfs  mfsidl
 223              1      223          0 2       0    1          rpcbind    poll
 208              1      208          0 2       0    1            ipmon nanosle
 183              1      183          0 2       0    1          syslogd    poll
 146              1      146          0 2   0x101    1            zebra  select
 12               0        0          0 2 0x20200    1         aiodoned aiodone
 11               0        0          0 2 0x20200    1          ioflush  syncer
 10               0        0          0 2 0x20200    1       pagedaemon pgdaemo
 9                0        0          0 2 0x20200    1       lfs_writer lfswrit
 8                0        0          0 2 0x20200    1        atapibus0  sccomp
 7                0        0          0 2 0x20200    1          fwohci0 fwohcie
 6                0        0          0 2 0x20200    1         scsibus1  sccomp
 5                0        0          0 2 0x20200    1         scsibus0  sccomp
 4                0        0          0 2 0x20200    1          atabus1   atath
 3                0        0          0 2 0x20200    1          atabus0   atath
 2                0        0          0 2 0x20200    1        cryptoret crypto_
 1                0        1          0 2  0x4000    1             init    wait
 0               -1        0          0 2 0x20200    1          swapper schedul

-- 
I'm surprised she doesn't have a nosebleed from being south of
Fourteenth Street.
		-- Lexy Gold