Date: Sat, 11 Jun 2005 18:17:11 +0300 From: Alex Lyashkov <umka@sevcity.net> To: Robert Watson <rwatson@FreeBSD.org> Cc: Gleb Smirnoff <glebius@FreeBSD.org>, freebsd-stable@FreeBSD.org Subject: kernel panic Message-ID: <1118503031.3072.40.camel@berloga.shadowland>
next in thread | raw e-mail | index | archive | help
Hello Robert.
Today i install new freebsd box with freebsd 5-stable, sources from are
over Jun 6 09:28 EEST.
when i tried to work I got are full repeatable panic.
#2 0xc04aafb0 in panic (fmt=3D0xc0610e42 "sbflush_locked: cc %u || mb %p
|| mbcnt %u")
at /usr/src/sys/kern/kern_shutdown.c:566
td =3D (struct thread *) 0xc11cec00
bootopt =3D 260
newpanic =3D 0
ap =3D 0xc11cec00 "L\005I=C1@=BC\031=C1"
buf =3D "sbflush_locked: cc 0 || mb 0xc135f300 || mbcnt 0", '\0'
<repeats 207 times>
#3 0xc04e4a07 in sbflush_locked (sb=3D0xc1d3e6a4) at
/usr/src/sys/kern/uipc_socket2.c:1119
No locals.
#4 0xc04e4a46 in sbflush (sb=3D0xc1d3e6a4) at
/usr/src/sys/kern/uipc_socket2.c:1128
No locals.
#5 0xc055902f in tcp_disconnect (tp=3D0xc1da11bc) at
/usr/src/sys/netinet/tcp_usrreq.c:1226
so =3D (struct socket *) 0xc1d3e654
#6 0xc0557f58 in tcp_usr_disconnect (so=3D0x0) at
/usr/src/sys/netinet/tcp_usrreq.c:445
inp =3D (struct inpcb *) 0xc1cebb40
tp =3D (struct tcpcb *) 0x0
#7 0xc04e050a in sodisconnect (so=3D0x0) at
/usr/src/sys/kern/uipc_socket.c:579
No locals.
#8 0xc04e012c in soclose (so=3D0xc1d3e654) at
/usr/src/sys/kern/uipc_socket.c:458
error =3D 0
#9 0xc04d0c3f in soo_close (fp=3D0xc19e9d48, td=3D0xc11cec00) at
/usr/src/sys/kern/sys_socket.c:299
error =3D 0
so =3D (struct socket *) 0x0
#10 0xc048d200 in fdrop_locked (fp=3D0xc19e9d48, td=3D0xc11cec00) at
file.h:288
error =3D 0
#11 0xc048d151 in fdrop (fp=3D0xc19e9d48, td=3D0xc11cec00) at
/usr/src/sys/kern/kern_descrip.c:2101
No locals.
#12 0xc048b81b in closef (fp=3D0xc19e9d48, td=3D0xc11cec00) at
/usr/src/sys/kern/kern_descrip.c:1918
vp =3D (struct vnode *) 0x0
lf =3D {l_start =3D 579614447286217896, l_len =3D
-3085549963380260856, l_pid =3D 0, l_type =3D 0, l_whence =3D 0}
fdtol =3D (struct filedesc_to_leader *) 0xd52deca8
fdp =3D (struct filedesc *) 0xc142c400
#13 0xc0488d05 in close (td=3D0xc11cec00, uap=3D0x0) at
/usr/src/sys/kern/kern_descrip.c:1004
fdp =3D (struct filedesc *) 0xc142c400
fp =3D (struct file *) 0xc19e9d48
fd =3D 45
error =3D -1068914549
holdleaders =3D 0
#14 0xc05e45b3 in syscall (frame=3D
{tf_fs =3D 47, tf_es =3D 47, tf_ds =3D -1088225233, tf_edi =3D 136442=
880,
tf_esi =3D -1085465088, tf_ebp =3D -1085465192, tf_isp =3D -718410396, tf_e=
bx
=3D 673633468, tf_edx =3D 148024960, tf_ecx =3D 135296768, tf_eax =3D 6,
tf_trapno =3D 0, tf_err =3D 2, tf_eip =3D 673966799, tf_cs =3D 31, tf_eflag=
s =3D
646, tf_esp =3D -1085465236, tf_ss =3D 47}) at
/usr/src/sys/i386/i386/trap.c:1009
(kgdb) p *sb
$1 =3D {sb_sel =3D {si_thrlist =3D {tqe_next =3D 0x0, tqe_prev =3D 0xc1d060=
30},
si_thread =3D 0x0, si_note =3D {kl_lock =3D 0xc1d3e6bc,
kl_list =3D {slh_first =3D 0x0}}, si_flags =3D 0}, sb_mtx =3D {mtx_ob=
ject
=3D {lo_class =3D 0xc063497c,
lo_name =3D 0xc0610dc2 "so_rcv", lo_type =3D 0xc0610dc2 "so_rcv",
lo_flags =3D 196608, lo_list =3D {tqe_next =3D 0x0,
tqe_prev =3D 0x0}, lo_witness =3D 0x0}, mtx_lock =3D 3239898112,
mtx_recurse =3D 0}, sb_mb =3D 0xc135f300,
sb_mbtail =3D 0xc1366600, sb_lastrecord =3D 0xc135f300, sb_cc =3D 0,
sb_hiwat =3D 66176, sb_mbcnt =3D 0, sb_mbmax =3D 262144,
sb_ctl =3D 0, sb_lowat =3D 1, sb_timeo =3D 0, sb_flags =3D 0, sb_state =
=3D 32}
(kgdb) f 5
#5 0xc055902f in tcp_disconnect (tp=3D0xc1da11bc) at
/usr/src/sys/netinet/tcp_usrreq.c:1226
1226 sbflush(&so->so_rcv);
(kgdb) p so
$2 =3D (struct socket *) 0xc1d3e654
(kgdb) p *so
$3 =3D {so_count =3D 1, so_type =3D 1, so_options =3D 4, so_linger =3D 0, s=
o_state
=3D 266, so_qstate =3D 0, so_pcb =3D 0xc1cebb40,
so_proto =3D 0xc063ff28, so_head =3D 0x0, so_incomp =3D {tqh_first =3D 0x=
0,
tqh_last =3D 0x0}, so_comp =3D {tqh_first =3D 0x0,
tqh_last =3D 0x0}, so_list =3D {tqe_next =3D 0x0, tqe_prev =3D 0xc18105=
34},
so_qlen =3D 0, so_incqlen =3D 0, so_qlimit =3D 0,
so_timeo =3D 0, so_error =3D 0, so_sigio =3D 0x0, so_oobmark =3D 0, so_ai=
ojobq
=3D {tqh_first =3D 0x0, tqh_last =3D 0xc1d3e69c},
so_rcv =3D {sb_sel =3D {si_thrlist =3D {tqe_next =3D 0x0, tqe_prev =3D
0xc1d06030}, si_thread =3D 0x0, si_note =3D {
kl_lock =3D 0xc1d3e6bc, kl_list =3D {slh_first =3D 0x0}}, si_flags =
=3D
0}, sb_mtx =3D {mtx_object =3D {lo_class =3D 0xc063497c,
lo_name =3D 0xc0610dc2 "so_rcv", lo_type =3D 0xc0610dc2 "so_rcv",
lo_flags =3D 196608, lo_list =3D {tqe_next =3D 0x0,
tqe_prev =3D 0x0}, lo_witness =3D 0x0}, mtx_lock =3D 3239898112,
mtx_recurse =3D 0}, sb_mb =3D 0xc135f300,
sb_mbtail =3D 0xc1366600, sb_lastrecord =3D 0xc135f300, sb_cc =3D 0,
sb_hiwat =3D 66176, sb_mbcnt =3D 0, sb_mbmax =3D 262144,
sb_ctl =3D 0, sb_lowat =3D 1, sb_timeo =3D 0, sb_flags =3D 0, sb_state =
=3D
32}, so_snd =3D {sb_sel =3D {si_thrlist =3D {
tqe_next =3D 0x0, tqe_prev =3D 0x0}, si_thread =3D 0x0, si_note =3D
{kl_lock =3D 0xc1d3e724, kl_list =3D {slh_first =3D 0x0}},
si_flags =3D 0}, sb_mtx =3D {mtx_object =3D {lo_class =3D 0xc063497c,
lo_name =3D 0xc0610dbb "so_snd",
lo_type =3D 0xc0610dbb "so_snd", lo_flags =3D 196608, lo_list =3D
{tqe_next =3D 0x0, tqe_prev =3D 0x0}, lo_witness =3D 0x0},
mtx_lock =3D 4, mtx_recurse =3D 0}, sb_mb =3D 0xc18bec00, sb_mbtail =
=3D
0xc18bec00, sb_lastrecord =3D 0xc18bec00, sb_cc =3D 529,
sb_hiwat =3D 33792, sb_mbcnt =3D 2304, sb_mbmax =3D 262144, sb_ctl =3D =
0,
sb_lowat =3D 2048, sb_timeo =3D 0, sb_flags =3D 0,
sb_state =3D 16}, so_upcall =3D 0, so_upcallarg =3D 0x0, so_cred =3D
0xc1413500, so_label =3D 0x0, so_peerlabel =3D 0x0,
so_gencnt =3D 17291, so_emuldata =3D 0x0, so_accf =3D 0x0}
(kgdb) p *tp
$4 =3D {t_segq =3D {lh_first =3D 0x0}, t_segqlen =3D 0, t_dupacks =3D 0, un=
used =3D
0x0, tt_rexmt =3D 0xc1da1300,
tt_persist =3D 0xc1da1318, tt_keep =3D 0xc1da1330, tt_2msl =3D 0xc1da1348=
,
tt_delack =3D 0xc1da1360, t_inpcb =3D 0xc1cebb40,
t_state =3D 4, t_flags =3D 992, t_force =3D 0, snd_una =3D 683843078, snd=
_max
=3D 683843350, snd_nxt =3D 683843350,
snd_up =3D 683843078, snd_wl1 =3D 567974456, snd_wl2 =3D 683843078, iss =
=3D
683843077, irs =3D 567974455, rcv_nxt =3D 567974822,
rcv_adv =3D 568040998, rcv_wnd =3D 66176, rcv_up =3D 567974456, snd_wnd =
=3D
132352, snd_cwnd =3D 1408, snd_bwnd =3D 1073725440,
snd_ssthresh =3D 2896, snd_bandwidth =3D 63746785, snd_recover =3D
683843078, t_maxopd =3D 1420, t_rcvtime =3D 1401062,
t_starttime =3D 1401057, t_rtttime =3D 1405584, t_rtseq =3D 683843078,
t_bw_rtttime =3D 1401057, t_bw_rtseq =3D 0, t_rxtcur =3D 382,
t_maxseg =3D 1408, t_srtt =3D 1086, t_rttvar =3D 595, t_rxtshift =3D 0,
t_rttmin =3D 3, t_rttbest =3D 1236, t_rttupdated =3D 1,
max_sndwnd =3D 132352, t_softerror =3D 0, t_oobflags =3D 0 '\0', t_iobc =
=3D 0
'\0', snd_scale =3D 2 '\002', rcv_scale =3D 1 '\001',
request_r_scale =3D 1 '\001', requested_s_scale =3D 2 '\002', ts_recent =
=3D
716722322, ts_recent_age =3D 1401062,
last_ack_sent =3D 567974822, cc_send =3D 0, cc_recv =3D 0, snd_cwnd_prev =
=3D
0, snd_ssthresh_prev =3D 0, snd_recover_prev =3D 0,
t_badrxtwin =3D 0, snd_limited =3D 0 '\0', rcv_second =3D 0, rcv_pps =3D =
0,
rcv_byps =3D 0, sack_enable =3D 1, snd_numholes =3D 0,
snd_holes =3D 0x0, rcv_lastsack =3D 0, rcv_numsacks =3D 0, sackblks =3D
{{start =3D 0, end =3D 0}, {start =3D 0, end =3D 0}, {start =3D 0,
end =3D 0}, {start =3D 0, end =3D 0}, {start =3D 0, end =3D 0}, {star=
t =3D 0,
end =3D 0}}, sack_newdata =3D 0}
(kgdb)
other panic with 'Panic String: sbdrop', but for it i can`t have
backtrace.
Repeat it trivial - at this host i have are ircd daemon who restarted
via cron script. I tried to connect to ircd port (via loopback) at near
start time and got a panic.
If you need additional info ask me directly - i`m not are subscribed to
list.
--=20
Alex Lyashkov <umka@sevcity.net>
SevcityNet
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1118503031.3072.40.camel>