Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 25 Feb 2003 17:01:01 -0300
From:      "Daniel C. Sobral" <dcs@tcoip.com.br>
To:        current@freebsd.org
Subject:   TCP stack panic (panic: bremfree: bp 0xc7743f60 not locked)
Message-ID:  <3E5BCB7D.9080304@tcoip.com.br>

next in thread | raw e-mail | index | archive | help
This is just not my day. Today's (25/03) kernel:

savecore: reboot after panic: bremfree: bp 0xc7743f60 not locked
Feb 25 16:48:39 dcs savecore: reboot after panic: bremfree: bp=20
0xc7743f60 not lo
cked
savecore: writing core to vmcore.5

root@dcs:/root$ gdb -k /var/crash/kernel.5 /var/crash/vmcore.5
GNU gdb 5.2.1 (FreeBSD)
Copyright 2002 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you =
are
welcome to change it and/or distribute copies of it under certain=20
conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for detail=
s.
This GDB was configured as "i386-undermydesk-freebsd"...
panic: bremfree: bp 0xc7743f60 not locked
panic messages:
---
panic: headlocked should be 0

syncing disks, buffers remaining... panic: bremfree: bp 0xc7743f60 not=20
locked
Uptime: 8m11s
Dumping 255 MB
ata0: resetting devices ..
done
  16 32 48 64 80 96 112 128 144 160 176 192 208 224 240
---
#0  doadump () at /usr/src/sys/kern/kern_shutdown.c:239
239             dumping++;
(kgdb) bt full
#0  doadump () at /usr/src/sys/kern/kern_shutdown.c:239
No locals.
#1  0xc01eace7 in boot (howto=3D260) at /usr/src/sys/kern/kern_shutdown.c=
:371
No locals.
#2  0xc01eaf53 in panic () at /usr/src/sys/kern/kern_shutdown.c:542
	td =3D (struct thread *) 0xc0ec8c30
	bootopt =3D 260
	newpanic =3D 0
	buf =3D "bremfree: bp 0xc7743f60 not locked", '\0' <repeats 221 times>
#3  0xc022cde7 in bremfreel (bp=3D0xc7743f60) at=20
/usr/src/sys/kern/vfs_bio.c:680
	old_qindex =3D 3
#4  0xc022cd55 in bremfree (bp=3D0x0) at /usr/src/sys/kern/vfs_bio.c:667
No locals.
#5  0xc022f073 in vfs_bio_awrite (bp=3D0x3) at=20
/usr/src/sys/kern/vfs_bio.c:1765
	i =3D 6
	j =3D -948682708
	lblkno =3D 196800
	vp =3D (struct vnode *) 0xc26b7000
	ncl =3D 0
	nwritten =3D -948682912
	size =3D -1033146368
	maxcl =3D 0
#6  0xc0236316 in vop_stdfsync (ap=3D0xcd2b1a34)
     at /usr/src/sys/kern/vfs_default.c:755
	vp =3D (struct vnode *) 0xc26b7000
	bp =3D (struct buf *) 0xc7743f60
	nbp =3D (struct buf *) 0x0
	error =3D 0
	maxretry =3D 100
#7  0xc01a38c0 in spec_fsync (ap=3D0xcd2b1a34)
     at /usr/src/sys/fs/specfs/spec_vnops.c:422
No locals.
#8  0xc01a2ce8 in spec_vnoperate (ap=3D0x0)
     at /usr/src/sys/fs/specfs/spec_vnops.c:123
No locals.
#9  0xc028e6f7 in ffs_sync (mp=3D0xc25cd400, waitfor=3D2, cred=3D0xc0eb7e=
80,
     td=3D0xc034c640) at vnode_if.h:612
	nvp =3D (struct vnode *) 0x0
	vp =3D (struct vnode *) 0xcd2b1a34
	devvp =3D (struct vnode *) 0xcd2b1a34
	ip =3D (struct inode *) 0x0
	ump =3D (struct ufsmount *) 0xc26b3200
	fs =3D (struct fs *) 0xc2613800
	error =3D -1070283200
	count =3D 0
	wait =3D 0
	lockreq =3D 18
	allerror =3D 0
#10 0xc024222b in sync (td=3D0xc034c640, uap=3D0x0)
     at /usr/src/sys/kern/vfs_syscalls.c:138
	mp =3D (struct mount *) 0xc25cd400
	nmp =3D (struct mount *) 0x0
	asyncflag =3D 0
#11 0xc01ea8ec in boot (howto=3D256) at /usr/src/sys/kern/kern_shutdown.c=
:280
	bp =3D (struct buf *) 0x0
	iter =3D -1058239440
	nbusy =3D -1058250624
	pbusy =3D -1070448168
	subiter =3D -1058250624
#12 0xc01eaf53 in panic () at /usr/src/sys/kern/kern_shutdown.c:542
	td =3D (struct thread *) 0xc0ec8c30
	bootopt =3D 256
	newpanic =3D 1
	buf =3D "bremfree: bp 0xc7743f60 not locked", '\0' <repeats 221 times>
#13 0xc02670a8 in tcp_input (m=3D0xc0eddb00, off0=3D20)
     at /usr/src/sys/netinet/tcp_input.c:2251
	th =3D (struct tcphdr *) 0xc1366034
	ip =3D (struct ip *) 0xc1366020
	ipov =3D (struct ipovly *) 0x0
	inp =3D (struct inpcb *) 0xc28060e4
	optp =3D (u_char *) 0xc1366048 "\001\001\b\n!=D5}=BB"
	optlen =3D 12
	len =3D -1025473848
	tlen =3D 0
	off =3D -1025473848
	drop_hdrlen =3D 52
	tp =3D (struct tcpcb *) 0xc2e082c8
	thflags =3D 0
	so =3D (struct socket *) 0xc2da5400
	todrop =3D -1025473848
	acked =3D -1025473848
	ourfinisacked =3D -1025473848
	needoutput =3D 0
	tiwin =3D 31856
	to =3D {to_flags =3D 1, to_tsval =3D 567639483, to_tsecr =3D 489925,
   to_cc =3D 0, to_ccecho =3D 0, to_mss =3D 0, to_requested_s_scale =3D 0=
 '\0',
   to_pad =3D 0 '\0'}
	taop =3D (struct rmxp_tao *) 0xc2e082c8
	tao_noncached =3D {tao_cc =3D 3223375443, tao_ccsent =3D 3224899888,
   tao_mssopt =3D 4840}
	headlocked =3D 1
	next_hop =3D (struct sockaddr_in *) 0x0
	rstreason =3D -1025473848
#14 0xc02608e6 in ip_input (m=3D0xc0eddb00)
     at /usr/src/sys/netinet/ip_input.c:947
	ip =3D (struct ip *) 0xc1366020
	fp =3D (struct ipq *) 0xc26e8400
	ia =3D (struct in_ifaddr *) 0xc26e8400
	ifa =3D (struct ifaddr *) 0x0
	i =3D 0
	hlen =3D 20
	checkif =3D 1
	sum =3D 0
	pkt_dst =3D {s_addr =3D 100794378}
	divert_info =3D 0
	args =3D {m =3D 0xc03a4738, oif =3D 0x0, next_hop =3D 0x0, rule =3D 0x0,=

   eh =3D 0x0, ro =3D 0xcd2b1cb8, dst =3D 0xc0359d54, flags =3D 962, f_id=
 =3D {
     dst_ip =3D 3224554013, src_ip =3D 3442154664, dst_port =3D 5168,
     src_port =3D 49182, proto =3D 84 'T', flags =3D 157 '\235'}, divert_=
rule =3D 0,
   retval =3D 3224515833}
#15 0xc0260991 in ipintr () at /usr/src/sys/netinet/ip_input.c:965
	m =3D (struct mbuf *) 0xc0eddb00
#16 0xc0254814 in swi_net (dummy=3D0x0) at /usr/src/sys/net/netisr.c:97
	pollmore =3D 0
	bits =3D 4
	i =3D 2
#17 0xc01c9a72 in ithread_loop (arg=3D0xc0ec6100)
     at /usr/src/sys/kern/kern_intr.c:536
	ithd =3D (struct ithd *) 0xc0ec6100
	ih =3D (struct intrhand *) 0xc0ebd400
	td =3D (struct thread *) 0xc0ec8c30
	p =3D (struct proc *) 0xc0ec75f4
#18 0xc01c8b44 in fork_exit (callout=3D0xc0ebd400, arg=3D0x0, frame=3D0x0=
)
     at /usr/src/sys/kern/kern_fork.c:871
	td =3D (struct thread *) 0x0
	p =3D (struct proc *) 0xc0ec6100


Core dump and kernel with debugging symbols are still available for=20
post-crash perusal.

--=20
Daniel C. Sobral
Ger=EAncia de Opera=E7=F5es
Divis=E3o de Comunica=E7=E3o de Dados
Coordena=E7=E3o de Seguran=E7a
TCO
Fones: 55-61-313-7654/Cel: 55-61-9618-0904
E-mail:	Daniel.Capo@tco.net.br
	Daniel.Sobral@tcoip.com.br
	dcs@tcoip.com.br



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3E5BCB7D.9080304>