Date: Fri, 21 Feb 2003 16:02:07 -0300 From: "Daniel C. Sobral" <dcs@tcoip.com.br> To: rwatson@freebsd.org, current@freebsd.org Subject: Witness This Message-ID: <3E5677AF.9060005@tcoip.com.br>
next in thread | raw e-mail | index | archive | help
Ok, a couple of witness complains, first about the sound driver, I=20
think, and the second something macish. Then a backtrace for a mac_mls=20
panic. All this for your weekend entertainment. :-)
First, witness cmi:
backtrace(c032e7d9,c25af500,c25a98d4,c046236e,c04623ec) at backtrace+0x17=
witness_lock(c25af500,8,c04623ec,1b8,c) at witness_lock+0x660
_mtx_lock_flags(c25af500,0,c04623ec,1b8,80000095) at _mtx_lock_flags+0xb1=
chn_intr(c25a9880,c,10000,208,c25af7c0) at chn_intr+0x2f
cmi_intr(c25a9800,0,c0329618,217,c25ae9ec) at cmi_intr+0xa6
ithread_loop(c25a9000,cd2ced48,c032948d,366,55ff44fd) at ithread_loop+0x1=
82
fork_exit(c01cd420,c25a9000,cd2ced48) at fork_exit+0xc4
fork_trampoline() at fork_trampoline+0x1a
--- trap 0x1, eip =3D 0, esp =3D 0xcd2ced7c, ebp =3D 0 ---
Now, witness biba:
backtrace(c032e7d9,c0831110,c03395bc,c03395bc,c0339453) at backtrace+0x17=
witness_lock(c0831110,8,c0339453,145,d1d726dc) at witness_lock+0x660
_mtx_lock_flags(c0831110,0,c0339453,145,d1d72704) at _mtx_lock_flags+0xb1=
_vm_map_lock(c08310b0,c0339453,145,d1d72708,c038a058) at _vm_map_lock+0x3=
6
kmem_malloc(c08310b0,1000,5,d1d72770,c02bda1d) at kmem_malloc+0x65
page_alloc(c083c240,1000,d1d72763,5,c0389e00) at page_alloc+0x27
slab_zalloc(c083c240,5,c033ae28,667,c083cda4) at slab_zalloc+0xfd
uma_zone_slab(c083c240,5,c033ae28,667,0) at uma_zone_slab+0xd8
uma_zalloc_internal(c083c240,0,5,6e7,0) at uma_zalloc_internal+0x55
uma_zfree_arg(c083cd80,c2bc0900,c2bc0fc8,116,80) at uma_zfree_arg+0x2c9
free(c2bc0900,c0364b80,d1d72838,c027620d,c2bc0900) at free+0xde
biba_free(c2bc0900,c0364e60,d1d72858,c01d6baf,c2c1621c) at biba_free+0x1d=
mac_biba_destroy_label(c2c1621c,0,c032a35b,3eb,0) at=20
mac_biba_destroy_label+0x1d
mac_destroy_vnode_label(c2c1621c,d1d728bc,c0240373,c2c1611c,0) at=20
mac_destroy_vn
ode_label+0x7f
mac_destroy_vnode(c2c1611c,0,c03329d0,3bd,15d) at mac_destroy_vnode+0x16
getnewvnode(c0334a68,c25f9800,c2607700,d1d7290c,6) at getnewvnode+0x393
ffs_vget(c25f9800,19273,2,d1d72984,d1d72988) at ffs_vget+0x9b
ufs_lookup(d1d72ab8,d1d72af4,c0236d7c,d1d72ab8,d1d72c38) at ufs_lookup+0x=
dfb
ufs_vnoperate(d1d72ab8,d1d72c38,d1d72c4c,c01f3b04,c26095a0) at=20
ufs_vnoperate+0x1
8
vfs_cache_lookup(d1d72b68,d1d72b94,c023b6d9,d1d72b68,c2c40e6c) at=20
vfs_cache_look
up+0x2fc
ufs_vnoperate(d1d72b68,c2c40e6c,d1d72c4c,0,c26095a0) at ufs_vnoperate+0x1=
8
lookup(d1d72c24,0,c0332347,a4,c26095a0) at lookup+0x329
namei(d1d72c24,0,d1d72c24,c0390440,0) at namei+0x24e
lstat(c26095a0,d1d72d10,c033e8c9,407,2) at lstat+0x52
syscall(806002f,806002f,bfbf002f,8072b00,8072b48) at syscall+0x28e
Xint0x80_syscall() at Xint0x80_syscall+0x1d
--- syscall (190), eip =3D 0x280b8ea3, esp =3D 0xbfbffb0c, ebp =3D 0xbfbf=
fba8 ---
Finally, trace this:
#0 doadump () at /usr/src/sys/kern/kern_shutdown.c:239
No locals.
#1 0xc0128945 in db_fncall (dummy1=3D0, dummy2=3D0, dummy3=3D1999,
dummy4=3D0xcd2a7750 "\200'7=C0\b=DA6=C0lw*=CD\r")
at /usr/src/sys/ddb/db_command.c:546
fn_addr =3D -1071732400
args =3D {0 <repeats 11 times>}
nargs =3D 11
retval =3D 0
func =3D (fcn_10args_t *) 0xc01ea950 <doadump>
t =3D 0
#2 0xc01286c2 in db_command (last_cmdp=3D0xc0346ae0, cmd_table=3D0x0,
aux_cmd_tablep=3D0xc0341084, aux_cmd_tablep_end=3D0xc0341088)
at /usr/src/sys/ddb/db_command.c:346
cmd =3D (struct command *) 0xc0346a70
t =3D 0
modif =3D "\200'7=C0\b=DA6=C0lw*=CD\r\0\0\0`\006<=C0\r\0\0\0\001\0\0\0\2=
14w*=CD=A6U-=C0=E0=EC:
=C0\aK\0=20
=E0\006<=C0\200=CB:=C0\200'7=C0x\0\0\0\200'7=C0\b=DA6=C0=B0w*=CD=E1=A3\02=
2=C0G=F21=C0=D0=A2\022=C0\0\0\0\0\02
0\0\0\0\b=DA6=C0\200'7=C0N\234\022=C0\200'7=C0`\0377=C0x\0\0\0\003\0\0"
addr =3D 0
count =3D 1999
have_addr =3D 0
result =3D 0
#3 0xc01287d6 in db_command_loop () at /usr/src/sys/ddb/db_command.c:470=
No locals.
#4 0xc012b56a in db_trap (type=3D3, code=3D0) at /usr/src/sys/ddb/db_tra=
p.c:72
bkpt =3D 0
#5 0xc02dec22 in kdb_trap (type=3D3, code=3D0, regs=3D0xcd2a78a4)
at /usr/src/sys/i386/i386/db_interface.c:166
ddb_mode =3D 1
#6 0xc02f060f in trap (frame=3D
{tf_fs =3D 24, tf_es =3D -1070006256, tf_ds =3D -852885488, tf_edi=
=3D=20
-1058227632
, tf_esi =3D 256, tf_ebp =3D -852854544, tf_isp =3D -852854576, tf_ebx =3D=
0,=20
tf_edx =3D 0
, tf_ecx =3D 1920, tf_eax =3D 18, tf_trapno =3D 3, tf_err =3D 0, tf_eip =3D=
=20
-1070731580, t
f_cs =3D 8, tf_eflags =3D 646, tf_esp =3D -1070350146, tf_ss =3D -1070421=
591})
at /usr/src/sys/i386/i386/trap.c:603
td =3D (struct thread *) 0xc0ecba50
p =3D (struct proc *) 0xc0eca9ec
sticks =3D 0
i =3D 0
ucode =3D 0
type =3D 3
code =3D 0
eva =3D 0
#7 0xc02e0578 in calltrap () at {standard input}:96
No locals.
#8 0xc01eb0bb in panic (fmt=3D0x0) at /usr/src/sys/kern/kern_shutdown.c:=
528
td =3D (struct thread *) 0xc0ecba50
bootopt =3D 256
newpanic =3D 1
buf =3D "mac_mls_single_in_range: a not single", '\0' <repeats 218 times=
>
#9 0xc0277274 in mac_mls_single_in_range (single=3D0x0, range=3D0xc2605e=
80)
at /usr/src/sys/security/mac_mls/mac_mls.c:225
No locals.
#10 0xc0278cb6 in mac_mls_check_ifnet_transmit (ifnet=3D0xc25ebc00,
ifnetlabel=3D0x0, m=3D0xc0eda000, mbuflabel=3D0x0)
at /usr/src/sys/security/mac_mls/mac_mls.c:1462
p =3D (struct mac_mls *) 0x0
i =3D (struct mac_mls *) 0x0
#11 0xc01dad7a in mac_check_ifnet_transmit (ifnet=3D0xc25ebc00,=20
mbuf=3D0xc0eda000)
at /usr/src/sys/kern/kern_mac.c:2269
mpc =3D (struct mac_policy_conf *) 0xc2605e80
error =3D 0
#12 0xc02527d8 in ether_output (ifp=3D0xc25ebc00, m=3D0xc0eda000,=20
dst=3D0xc26cc410,
rt0=3D0xc2b16100) at /usr/src/sys/net/if_ethersubr.c:157
type =3D 0
error =3D -1058168748
hdrcmplt =3D 0
esrc =3D "\0\0\0\0\024"
edst =3D "T =ED=C0=CCy"
rt =3D (struct rtentry *) 0xc0eda000
eh =3D (struct ether_header *) 0xc0eda054
loop_copy =3D 0
ac =3D (struct arpcom *) 0xc25ebc00
#13 0xc0262785 in ip_output (m0=3D0xc0eda000, opt=3D0xc0eda054, ro=3D0xc2=
89ba08,
flags=3D0, imo=3D0x0, inp=3D0xc289b9cc) at=20
/usr/src/sys/netinet/ip_output.c:1015
ip =3D (struct ip *) 0xc0eda054
mhip =3D (struct ip *) 0xcd2a7a58
ifp =3D (struct ifnet *) 0xc25ebc00
m =3D (struct mbuf *) 0xc2b16100
hlen =3D 20
len =3D -1071770192
off =3D -1070052704
error =3D 0
dst =3D (struct sockaddr_in *) 0xc26cc410
ia =3D (struct in_ifaddr *) 0xc2608e00
isbroadcast =3D 0
sw_csum =3D 1
pkt_dst =3D {s_addr =3D 843641662}
args =3D {m =3D 0xcd2a7a7c, oif =3D 0xc01d181b, next_hop =3D 0x0, rule =3D=
0x0,
eh =3D 0x0, ro =3D 0x2cf, dst =3D 0xc0eda000, flags =3D 2, f_id =3D {d=
st_ip =3D 1,
src_ip =3D 3442113188, dst_port =3D 20111, src_port =3D 49184, proto=
=3D 0=20
'\0',
flags =3D 160 ' '}, divert_rule =3D 0, retval =3D 2}
src_was_INADDR_ANY =3D 0
#14 0xc026a68c in tcp_twrespond (tw=3D0xc2cd3000, flags=3D16)
at /usr/src/sys/netinet/tcp_subr.c:1776
inp =3D (struct inpcb *) 0xc289b9cc
th =3D (struct tcphdr *) 0xc0eda068
m =3D (struct mbuf *) 0xc0eda000
ip =3D (struct ip *) 0xc0eda054
optp =3D (u_int8_t *) 0x0
optlen =3D 12
error =3D 0
#15 0xc026a42d in tcp_twstart (tp=3D0xc280d700)
at /usr/src/sys/netinet/tcp_subr.c:1663
tm =3D (struct tcptw_mem *) 0x0
tw =3D (struct tcptw *) 0xc2cd3000
inp =3D (struct inpcb *) 0xc289b9cc
tw_time =3D 60000
acknow =3D 1
so =3D (struct socket *) 0xc280d700
#16 0xc026706e in tcp_input (m=3D0xc0eda000, off0=3D20)
at /usr/src/sys/netinet/tcp_input.c:2189
th =3D (struct tcphdr *) 0xc1357034
ip =3D (struct ip *) 0xc1357020
ipov =3D (struct ipovly *) 0x1
inp =3D (struct inpcb *) 0xc289b9cc
optp =3D (u_char *) 0xc1357048 "\001\001\b\n\017-\2235"
optlen =3D 12
len =3D -1031153932
tlen =3D 0
off =3D -1031153932
drop_hdrlen =3D 52
tp =3D (struct tcpcb *) 0xc289d6f4
thflags =3D 1
so =3D (struct socket *) 0xc280d700
todrop =3D -1031153932
acked =3D -1031153932
ourfinisacked =3D -1031153932
needoutput =3D 0
tiwin =3D 57920
to =3D {to_flags =3D 1, to_tsval =3D 254645045, to_tsecr =3D 379134,
to_cc =3D 0, to_ccecho =3D 0, to_mss =3D 0, to_requested_s_scale =3D 0=
'\0',
to_pad =3D 0 '\0'}
taop =3D (struct rmxp_tao *) 0xc289d6f4
tao_noncached =3D {tao_cc =3D 3442113524, tao_ccsent =3D 5,
tao_mssopt =3D 45568}
headlocked =3D 0
next_hop =3D (struct sockaddr_in *) 0x0
rstreason =3D -1031153932
#17 0xc0260a14 in ip_input (m=3D0xc0eda000)
at /usr/src/sys/netinet/ip_input.c:934
ip =3D (struct ip *) 0xc1357020
fp =3D (struct ipq *) 0xc2608e00
ia =3D (struct in_ifaddr *) 0xc2608e00
ifa =3D (struct ifaddr *) 0x0
i =3D 0
hlen =3D 20
checkif =3D 1
sum =3D 0
pkt_dst =3D {s_addr =3D 100794378}
divert_info =3D 0
args =3D {m =3D 0xc03aca38, oif =3D 0x0, next_hop =3D 0x0, rule =3D 0x0,=
eh =3D 0x0, ro =3D 0xcd2a7cb8, dst =3D 0xc0360fb4, flags =3D 949, f_id=
=3D {
dst_ip =3D 3224580591, src_ip =3D 3442113704, dst_port =3D 5552,
src_port =3D 49182, proto =3D 180 '=B4', flags =3D 15 '\017'}, diver=
t_rule =3D 0,
retval =3D 3224542840}
#18 0xc0260ac1 in ipintr () at /usr/src/sys/netinet/ip_input.c:952
m =3D (struct mbuf *) 0xc0eda000
#19 0xc0254964 in swi_net (dummy=3D0x0) at /usr/src/sys/net/netisr.c:97
pollmore =3D 0
bits =3D 4
i =3D 2
#20 0xc01c9be2 in ithread_loop (arg=3D0xc0ec8f00)
at /usr/src/sys/kern/kern_intr.c:536
ithd =3D (struct ithd *) 0xc0ec8f00
ih =3D (struct intrhand *) 0xc0ec04c0
td =3D (struct thread *) 0xc0ecba50
p =3D (struct proc *) 0xc0eca9ec
#21 0xc01c8cb4 in fork_exit (callout=3D0xc0ec04c0, arg=3D0x0, frame=3D0x0=
)
at /usr/src/sys/kern/kern_fork.c:871
td =3D (struct thread *) 0x0
p =3D (struct proc *) 0xc0ec8f00
--=20
Daniel C. Sobral
Ger=EAncia de Opera=E7=F5es
Divis=E3o de Comunica=E7=E3o de Dados
Coordena=E7=E3o de Seguran=E7a
TCO
Fones: 55-61-313-7654/Cel: 55-61-9618-0904
E-mail: Daniel.Capo@tco.net.br
Daniel.Sobral@tcoip.com.br
dcs@tcoip.com.br
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3E5677AF.9060005>