Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 11 Jun 2005 22:58:33 -0400
From:      Damon Hopkins <damon@hopkins-family.org>
To:        freebsd-stable@freebsd.org
Cc:        Alex Lyashkov <umka@sevcity.net>
Subject:   Re: kernel panic
Message-ID:  <42ABA4D9.8060300@hopkins-family.org>
In-Reply-To: <1118503031.3072.40.camel@berloga.shadowland>
References:  <1118503031.3072.40.camel@berloga.shadowland>

next in thread | previous in thread | raw e-mail | index | archive | help
Sorry I can't really help. I get the same thing after setting up my 
vonage VOIP adapter. I did a tcpdump on the interface and saw that I was 
getting a lot  of UDP traffic. I updated my box as of last night and now 
I don't get a panic anymore but the box just locks up instead w/out 
panicing. I'm using ipnat and ipf w/ basically no ipf rules and only a 
generic map for my nat. I tried recompiling ipnat and added 1000 to the 
number of states to keep and it didn't help one bit.

Any help would be appreciated. I don't think my file systems can take 
many more of these power cycles. But I'll help any way I can. I haven't 
really done any kernel tracing or anything like that but if someone can 
point me to a what I need to do I'll do it.

Damon Hopkins

Alex Lyashkov wrote:
> Hello Robert.
> 
> Today i install new freebsd box with freebsd 5-stable, sources from are
> over Jun  6 09:28 EEST.
> 
> when i tried to work I got are full repeatable panic.
> 
> #2  0xc04aafb0 in panic (fmt=0xc0610e42 "sbflush_locked: cc %u || mb %p
> || mbcnt %u")
>     at /usr/src/sys/kern/kern_shutdown.c:566
>         td = (struct thread *) 0xc11cec00
>         bootopt = 260
>         newpanic = 0
>         ap = 0xc11cec00 "L\005IÁ@¼\031Á"
>         buf = "sbflush_locked: cc 0 || mb 0xc135f300 || mbcnt 0", '\0'
> <repeats 207 times>
> #3  0xc04e4a07 in sbflush_locked (sb=0xc1d3e6a4) at
> /usr/src/sys/kern/uipc_socket2.c:1119
> No locals.
> #4  0xc04e4a46 in sbflush (sb=0xc1d3e6a4) at
> /usr/src/sys/kern/uipc_socket2.c:1128
> No locals.
> #5  0xc055902f in tcp_disconnect (tp=0xc1da11bc) at
> /usr/src/sys/netinet/tcp_usrreq.c:1226
>         so = (struct socket *) 0xc1d3e654
> #6  0xc0557f58 in tcp_usr_disconnect (so=0x0) at
> /usr/src/sys/netinet/tcp_usrreq.c:445
>         inp = (struct inpcb *) 0xc1cebb40
>         tp = (struct tcpcb *) 0x0
> #7  0xc04e050a in sodisconnect (so=0x0) at
> /usr/src/sys/kern/uipc_socket.c:579
> No locals.
> #8  0xc04e012c in soclose (so=0xc1d3e654) at
> /usr/src/sys/kern/uipc_socket.c:458
>         error = 0
> #9  0xc04d0c3f in soo_close (fp=0xc19e9d48, td=0xc11cec00) at
> /usr/src/sys/kern/sys_socket.c:299
>         error = 0
>         so = (struct socket *) 0x0
> #10 0xc048d200 in fdrop_locked (fp=0xc19e9d48, td=0xc11cec00) at
> file.h:288
>         error = 0
> #11 0xc048d151 in fdrop (fp=0xc19e9d48, td=0xc11cec00) at
> /usr/src/sys/kern/kern_descrip.c:2101
> No locals.
> #12 0xc048b81b in closef (fp=0xc19e9d48, td=0xc11cec00) at
> /usr/src/sys/kern/kern_descrip.c:1918
>         vp = (struct vnode *) 0x0
>         lf = {l_start = 579614447286217896, l_len =
> -3085549963380260856, l_pid = 0, l_type = 0, l_whence = 0}
>         fdtol = (struct filedesc_to_leader *) 0xd52deca8
>         fdp = (struct filedesc *) 0xc142c400
> #13 0xc0488d05 in close (td=0xc11cec00, uap=0x0) at
> /usr/src/sys/kern/kern_descrip.c:1004
>         fdp = (struct filedesc *) 0xc142c400
>         fp = (struct file *) 0xc19e9d48
>         fd = 45
>         error = -1068914549
>         holdleaders = 0
> #14 0xc05e45b3 in syscall (frame=
>       {tf_fs = 47, tf_es = 47, tf_ds = -1088225233, tf_edi = 136442880,
> tf_esi = -1085465088, tf_ebp = -1085465192, tf_isp = -718410396, tf_ebx
> = 673633468, tf_edx = 148024960, tf_ecx = 135296768, tf_eax = 6,
> tf_trapno = 0, tf_err = 2, tf_eip = 673966799, tf_cs = 31, tf_eflags =
> 646, tf_esp = -1085465236, tf_ss = 47}) at
> /usr/src/sys/i386/i386/trap.c:1009
> 
> (kgdb) p *sb
> $1 = {sb_sel = {si_thrlist = {tqe_next = 0x0, tqe_prev = 0xc1d06030},
> si_thread = 0x0, si_note = {kl_lock = 0xc1d3e6bc,
>       kl_list = {slh_first = 0x0}}, si_flags = 0}, sb_mtx = {mtx_object
> = {lo_class = 0xc063497c,
>       lo_name = 0xc0610dc2 "so_rcv", lo_type = 0xc0610dc2 "so_rcv",
> lo_flags = 196608, lo_list = {tqe_next = 0x0,
>         tqe_prev = 0x0}, lo_witness = 0x0}, mtx_lock = 3239898112,
> mtx_recurse = 0}, sb_mb = 0xc135f300,
>   sb_mbtail = 0xc1366600, sb_lastrecord = 0xc135f300, sb_cc = 0,
> sb_hiwat = 66176, sb_mbcnt = 0, sb_mbmax = 262144,
>   sb_ctl = 0, sb_lowat = 1, sb_timeo = 0, sb_flags = 0, sb_state = 32}
> (kgdb) f 5
> #5  0xc055902f in tcp_disconnect (tp=0xc1da11bc) at
> /usr/src/sys/netinet/tcp_usrreq.c:1226
> 1226                    sbflush(&so->so_rcv);
> (kgdb) p so
> $2 = (struct socket *) 0xc1d3e654
> (kgdb) p *so
> $3 = {so_count = 1, so_type = 1, so_options = 4, so_linger = 0, so_state
> = 266, so_qstate = 0, so_pcb = 0xc1cebb40,
>   so_proto = 0xc063ff28, so_head = 0x0, so_incomp = {tqh_first = 0x0,
> tqh_last = 0x0}, so_comp = {tqh_first = 0x0,
>     tqh_last = 0x0}, so_list = {tqe_next = 0x0, tqe_prev = 0xc1810534},
> so_qlen = 0, so_incqlen = 0, so_qlimit = 0,
>   so_timeo = 0, so_error = 0, so_sigio = 0x0, so_oobmark = 0, so_aiojobq
> = {tqh_first = 0x0, tqh_last = 0xc1d3e69c},
>   so_rcv = {sb_sel = {si_thrlist = {tqe_next = 0x0, tqe_prev =
> 0xc1d06030}, si_thread = 0x0, si_note = {
>         kl_lock = 0xc1d3e6bc, kl_list = {slh_first = 0x0}}, si_flags =
> 0}, sb_mtx = {mtx_object = {lo_class = 0xc063497c,
>         lo_name = 0xc0610dc2 "so_rcv", lo_type = 0xc0610dc2 "so_rcv",
> lo_flags = 196608, lo_list = {tqe_next = 0x0,
>           tqe_prev = 0x0}, lo_witness = 0x0}, mtx_lock = 3239898112,
> mtx_recurse = 0}, sb_mb = 0xc135f300,
>     sb_mbtail = 0xc1366600, sb_lastrecord = 0xc135f300, sb_cc = 0,
> sb_hiwat = 66176, sb_mbcnt = 0, sb_mbmax = 262144,
>     sb_ctl = 0, sb_lowat = 1, sb_timeo = 0, sb_flags = 0, sb_state =
> 32}, so_snd = {sb_sel = {si_thrlist = {
>         tqe_next = 0x0, tqe_prev = 0x0}, si_thread = 0x0, si_note =
> {kl_lock = 0xc1d3e724, kl_list = {slh_first = 0x0}},
>       si_flags = 0}, sb_mtx = {mtx_object = {lo_class = 0xc063497c,
> lo_name = 0xc0610dbb "so_snd",
>         lo_type = 0xc0610dbb "so_snd", lo_flags = 196608, lo_list =
> {tqe_next = 0x0, tqe_prev = 0x0}, lo_witness = 0x0},
>       mtx_lock = 4, mtx_recurse = 0}, sb_mb = 0xc18bec00, sb_mbtail =
> 0xc18bec00, sb_lastrecord = 0xc18bec00, sb_cc = 529,
>     sb_hiwat = 33792, sb_mbcnt = 2304, sb_mbmax = 262144, sb_ctl = 0,
> sb_lowat = 2048, sb_timeo = 0, sb_flags = 0,
>     sb_state = 16}, so_upcall = 0, so_upcallarg = 0x0, so_cred =
> 0xc1413500, so_label = 0x0, so_peerlabel = 0x0,
>   so_gencnt = 17291, so_emuldata = 0x0, so_accf = 0x0}
> (kgdb) p *tp
> $4 = {t_segq = {lh_first = 0x0}, t_segqlen = 0, t_dupacks = 0, unused =
> 0x0, tt_rexmt = 0xc1da1300,
>   tt_persist = 0xc1da1318, tt_keep = 0xc1da1330, tt_2msl = 0xc1da1348,
> tt_delack = 0xc1da1360, t_inpcb = 0xc1cebb40,
>   t_state = 4, t_flags = 992, t_force = 0, snd_una = 683843078, snd_max
> = 683843350, snd_nxt = 683843350,
>   snd_up = 683843078, snd_wl1 = 567974456, snd_wl2 = 683843078, iss =
> 683843077, irs = 567974455, rcv_nxt = 567974822,
>   rcv_adv = 568040998, rcv_wnd = 66176, rcv_up = 567974456, snd_wnd =
> 132352, snd_cwnd = 1408, snd_bwnd = 1073725440,
>   snd_ssthresh = 2896, snd_bandwidth = 63746785, snd_recover =
> 683843078, t_maxopd = 1420, t_rcvtime = 1401062,
>   t_starttime = 1401057, t_rtttime = 1405584, t_rtseq = 683843078,
> t_bw_rtttime = 1401057, t_bw_rtseq = 0, t_rxtcur = 382,
>   t_maxseg = 1408, t_srtt = 1086, t_rttvar = 595, t_rxtshift = 0,
> t_rttmin = 3, t_rttbest = 1236, t_rttupdated = 1,
>   max_sndwnd = 132352, t_softerror = 0, t_oobflags = 0 '\0', t_iobc = 0
> '\0', snd_scale = 2 '\002', rcv_scale = 1 '\001',
>   request_r_scale = 1 '\001', requested_s_scale = 2 '\002', ts_recent =
> 716722322, ts_recent_age = 1401062,
>   last_ack_sent = 567974822, cc_send = 0, cc_recv = 0, snd_cwnd_prev =
> 0, snd_ssthresh_prev = 0, snd_recover_prev = 0,
>   t_badrxtwin = 0, snd_limited = 0 '\0', rcv_second = 0, rcv_pps = 0,
> rcv_byps = 0, sack_enable = 1, snd_numholes = 0,
>   snd_holes = 0x0, rcv_lastsack = 0, rcv_numsacks = 0, sackblks =
> {{start = 0, end = 0}, {start = 0, end = 0}, {start = 0,
>       end = 0}, {start = 0, end = 0}, {start = 0, end = 0}, {start = 0,
> end = 0}}, sack_newdata = 0}
> (kgdb)
> 
> other panic with 'Panic String: sbdrop', but for it i can`t have
> backtrace.
> 
> Repeat it trivial - at this host i have are ircd daemon who restarted
> via cron script. I tried to connect to ircd port (via loopback) at near
> start time and got a panic.
> 
> If you need additional info ask me directly - i`m not are subscribed to
> list.
> 



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?42ABA4D9.8060300>