Date: Thu, 4 Sep 2003 17:30:50 +0800 From: "=?utf-8?B?WGluIExJL+adjumRqw==?=" <delphij@frontfree.net> To: <current@freebsd.org> Subject: Four -CURRENT panics (backtrace included) Message-ID: <000601c372c7$3a765dc0$0101a8c0@srv>
next in thread | raw e-mail | index | archive | help
Hello everyone,
I have encounted several panics in recent kernels. The kernel was =
compiled right after cvsup, so the date will apply to the source code.
panic 1:
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
beastie# gdb -k kernel.debug /var/crash/vmcore.0
GNU gdb 5.2.1 (FreeBSD)
Copyright 2002 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you =
are
welcome to change it and/or distribute copies of it under certain =
conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for =
details.
This GDB was configured as "i386-undermydesk-freebsd"...
panic: sent too much
panic messages:
---
---
Reading symbols from =
/usr/obj/usr/src/sys/BEASTIE/modules/usr/src/sys/modules/acpi/acpi.ko.deb=
ug...done.
Loaded symbols for =
/usr/obj/usr/src/sys/BEASTIE/modules/usr/src/sys/modules/acpi/acpi.ko.deb=
ug
#0 doadump () at /usr/src/sys/kern/kern_shutdown.c:240
240 dumping++;
(kgdb) where
#0 doadump () at /usr/src/sys/kern/kern_shutdown.c:240
#1 0xc019b6ef in boot (howto=3D256) at =
/usr/src/sys/kern/kern_shutdown.c:372
#2 0xc019ba77 in panic () at /usr/src/sys/kern/kern_shutdown.c:550
#3 0xc022c240 in tcp_input (m=3D0xc0a3f300, off0=3D20) at =
/usr/src/sys/netinet/tcp_input.c:2310
#4 0xc0221893 in ip_input (m=3D0xc0a3f300) at =
/usr/src/sys/netinet/ip_input.c:950
#5 0xc020cca2 in swi_net (dummy=3D0x0) at /usr/src/sys/net/netisr.c:236
#6 0xc0189692 in ithread_loop (arg=3D0xc09f9c00) at =
/usr/src/sys/kern/kern_intr.c:534
#7 0xc01886bf in fork_exit (callout=3D0xc0189510 <ithread_loop>, =
arg=3D0x0, frame=3D0x0)
at /usr/src/sys/kern/kern_fork.c:796
(kgdb) bt full
#0 doadump () at /usr/src/sys/kern/kern_shutdown.c:240
No locals.
#1 0xc019b6ef in boot (howto=3D256) at =
/usr/src/sys/kern/kern_shutdown.c:372
No locals.
#2 0xc019ba77 in panic () at /usr/src/sys/kern/kern_shutdown.c:550
td =3D (struct thread *) 0xc0a07ab0
bootopt =3D 256
newpanic =3D 1
ap =3D 0xc6242b20 "H=EE=89=96=E7=B9=BAf"
buf =3D "sent too much", '\0' <repeats 242 times>
#3 0xc022c240 in tcp_input (m=3D0xc0a3f300, off0=3D20) at =
/usr/src/sys/netinet/tcp_input.c:2310
th =3D (struct tcphdr *) 0xc0c3f834
ip =3D (struct ip *) 0xc0c3f820
ipov =3D (struct ipovly *) 0x16bc
inp =3D (struct inpcb *) 0xc176aab0
optp =3D (u_char *) 0xc0c3f848 "\001\001\b\n"
optlen =3D 12
len =3D -1460824075
tlen =3D 0
off =3D -1460824075
drop_hdrlen =3D 52
tp =3D (struct tcpcb *) 0xc189a858
thflags =3D 5820
so =3D (struct socket *) 0xc1888700
todrop =3D -1460824075
acked =3D -1460824075
ourfinisacked =3D -1460824075
needoutput =3D 0
tiwin =3D 57600
to =3D {to_flags =3D 1, to_tsval =3D 517689, to_tsecr =3D =
169603, to_cc =3D 0, to_ccecho =3D 0, to_mss =3D 0,=20
to_requested_s_scale =3D 0 '\0', to_pad =3D 0 '\0'}
taop =3D (struct rmxp_tao *) 0xa8ed97f5
tao_noncached =3D {tao_cc =3D 3324259320, tao_ccsent =3D =
3324259328, tao_mssopt =3D 10971}
headlocked =3D 1
next_hop =3D (struct sockaddr_in *) 0x0
rstreason =3D -1460824075
---Type <return> to continue, or q <return> to quit---
#4 0xc0221893 in ip_input (m=3D0xc0a3f300) at =
/usr/src/sys/netinet/ip_input.c:950
ip =3D (struct ip *) 0xc0c3f820
fp =3D (struct ipq *) 0xc02efe4d
ia =3D (struct in_ifaddr *) 0xc1578c00
ifa =3D (struct ifaddr *) 0x0
i =3D 0
hlen =3D 20
checkif =3D 1
sum =3D 0
pkt_dst =3D {s_addr =3D 126970842}
divert_info =3D 0
args =3D {m =3D 0xc0191c00, oif =3D 0x0, next_hop =3D 0x0, rule =
=3D 0x0, eh =3D 0x0, ro =3D 0xe0000000,=20
dst =3D 0xc0369ff4, flags =3D 233, f_id =3D {dst_ip =3D 3224305229, =
src_ip =3D 3324259512, dst_port =3D 7120,=20
src_port =3D 49177, proto =3D 244 '?, flags =3D 159 '\237'}, =
divert_rule =3D 0, retval =3D 3224267492}
#5 0xc020cca2 in swi_net (dummy=3D0x0) at /usr/src/sys/net/netisr.c:236
ni =3D (struct netisr *) 0xc0367030
m =3D (struct mbuf *) 0xc0a3f300
bits =3D 2147483648
i =3D 0
#6 0xc0189692 in ithread_loop (arg=3D0xc09f9c00) at =
/usr/src/sys/kern/kern_intr.c:534
ithd =3D (struct ithd *) 0xc09f9c00
ih =3D (struct intrhand *) 0xc09fdd80
td =3D (struct thread *) 0xc0a07ab0
p =3D (struct proc *) 0xc0a06790
#7 0xc01886bf in fork_exit (callout=3D0xc0189510 <ithread_loop>, =
arg=3D0x0, frame=3D0x0)
at /usr/src/sys/kern/kern_fork.c:796
p =3D (struct proc *) 0xc0a06790
td =3D (struct thread *) 0xc0a07ab0
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
Panic #2:
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
beastie# gdb -k kernel.debug /var/crash/vmcore.1
GNU gdb 5.2.1 (FreeBSD)
Copyright 2002 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you =
are
welcome to change it and/or distribute copies of it under certain =
conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for =
details.
This GDB was configured as "i386-undermydesk-freebsd"...
panic: recurse
panic messages:
---
panic: recurse
Stack backtrace:
syncing disks, buffers remaining... panic: sleeping thread (pid 9) owns =
a mutex
Uptime: 3m21s
Dumping 63 MB
16 32 48
---
Reading symbols from =
/usr/obj/usr/src/sys/BEASTIE/modules/usr/src/sys/modules/acpi/acpi.ko.deb=
ug...done.
Loaded symbols for =
/usr/obj/usr/src/sys/BEASTIE/modules/usr/src/sys/modules/acpi/acpi.ko.deb=
ug
#0 doadump () at /usr/src/sys/kern/kern_shutdown.c:240
240 dumping++;
(kgdb) where
#0 doadump () at /usr/src/sys/kern/kern_shutdown.c:240
#1 0xc019b6ef in boot (howto=3D260) at =
/usr/src/sys/kern/kern_shutdown.c:372
#2 0xc019ba77 in panic () at /usr/src/sys/kern/kern_shutdown.c:550
#3 0xc019188b in propagate_priority (td=3D0x0) at =
/usr/src/sys/kern/kern_mutex.c:124
#4 0xc01920a9 in _mtx_lock_sleep (m=3D0xc0376180, opts=3D0,=20
file=3D0xc030046e "/usr/src/sys/i386/i386/vm_machdep.c", line=3D633) =
at /usr/src/sys/kern/kern_mutex.c:635
#5 0xc0191af7 in _mtx_lock_flags (m=3D0xc0376180, opts=3D0,=20
file=3D0xc030046e "/usr/src/sys/i386/i386/vm_machdep.c", line=3D633) =
at /usr/src/sys/kern/kern_mutex.c:333
#6 0xc02c2ad5 in sf_buf_free (addr=3D0x0, args=3D0xc1416ec8) at =
/usr/src/sys/i386/i386/vm_machdep.c:633
#7 0xc01baa66 in m_free (mb=3D0xc0a22a00) at =
/usr/src/sys/kern/subr_mbuf.c:1376
#8 0xc01dc717 in sbdrop (sb=3D0xc1768284, len=3D263) at =
/usr/src/sys/kern/uipc_socket2.c:792
#9 0xc022bb8c in tcp_input (m=3D0xc0a14b00, off0=3D20) at =
/usr/src/sys/netinet/tcp_input.c:1973
#10 0xc0221893 in ip_input (m=3D0xc0a14b00) at =
/usr/src/sys/netinet/ip_input.c:950
#11 0xc020cca2 in swi_net (dummy=3D0x0) at /usr/src/sys/net/netisr.c:236
b#12 0xc0189692 in ithread_loop (arg=3D0xc09f9c00) at =
/usr/src/sys/kern/kern_intr.c:534
t #13 0xc01886bf in fork_exit (callout=3D0xc0189510 <ithread_loop>, =
arg=3D0x0, frame=3D0x0)
at /usr/src/sys/kern/kern_fork.c:796
(kgdb) bt full
#0 doadump () at /usr/src/sys/kern/kern_shutdown.c:240
No locals.
#1 0xc019b6ef in boot (howto=3D260) at =
/usr/src/sys/kern/kern_shutdown.c:372
No locals.
#2 0xc019ba77 in panic () at /usr/src/sys/kern/kern_shutdown.c:550
td =3D (struct thread *) 0xc0a07ab0
bootopt =3D 260
newpanic =3D 0
ap =3D 0xc6242a3c "\t"
buf =3D "recurse", '\0' <repeats 248 times>
#3 0xc019188b in propagate_priority (td=3D0x0) at =
/usr/src/sys/kern/kern_mutex.c:124
td1 =3D (struct thread *) 0x0
pri =3D 40
m =3D (struct mtx *) 0xc0376180
#4 0xc01920a9 in _mtx_lock_sleep (m=3D0xc0376180, opts=3D0,=20
file=3D0xc030046e "/usr/src/sys/i386/i386/vm_machdep.c", line=3D633) =
at /usr/src/sys/kern/kern_mutex.c:635
td =3D (struct thread *) 0xc0a07ab0
td1 =3D (struct thread *) 0x0
v =3D 0
#5 0xc0191af7 in _mtx_lock_flags (m=3D0xc0376180, opts=3D0,=20
file=3D0xc030046e "/usr/src/sys/i386/i386/vm_machdep.c", line=3D633) =
at /usr/src/sys/kern/kern_mutex.c:333
No locals.
#6 0xc02c2ad5 in sf_buf_free (addr=3D0x0, args=3D0xc1416ec8) at =
/usr/src/sys/i386/i386/vm_machdep.c:633
sf =3D (struct sf_buf *) 0x279
m =3D (struct vm_page *) 0xc0376180
#7 0xc01baa66 in m_free (mb=3D0xc0a22a00) at =
/usr/src/sys/kern/subr_mbuf.c:1376
nb =3D (struct mbuf *) 0xc030046e
cchnum =3D 390
persist =3D 0
#8 0xc01dc717 in sbdrop (sb=3D0xc1768284, len=3D263) at =
/usr/src/sys/kern/uipc_socket2.c:792
m =3D (struct mbuf *) 0x0
next =3D (struct mbuf *) 0x0
#9 0xc022bb8c in tcp_input (m=3D0xc0a14b00, off0=3D20) at =
/usr/src/sys/netinet/tcp_input.c:1973
th =3D (struct tcphdr *) 0xc0c1a834
ip =3D (struct ip *) 0xc0c1a820
ipov =3D (struct ipovly *) 0x10
---Type <return> to continue, or q <return> to quit---=20
inp =3D (struct inpcb *) 0xc1753b94
optp =3D (u_char *) 0x0
optlen =3D 0
len =3D 1452
tlen =3D 0
off =3D 1452
drop_hdrlen =3D 40
tp =3D (struct tcpcb *) 0xc16ea858
thflags =3D 16
so =3D (struct socket *) 0xc1768200
todrop =3D 1452
acked =3D 1452
ourfinisacked =3D 1452
needoutput =3D 0
tiwin =3D 4288
to =3D {to_flags =3D 0, to_tsval =3D 0, to_tsecr =3D 0, to_cc =
=3D 0, to_ccecho =3D 0, to_mss =3D 0,=20
to_requested_s_scale =3D 0 '\0', to_pad =3D 0 '\0'}
taop =3D (struct rmxp_tao *) 0x5ac
tao_noncached =3D {tao_cc =3D 1183262627, tao_ccsent =3D =
3231666176, tao_mssopt =3D 12306}
headlocked =3D 1
next_hop =3D (struct sockaddr_in *) 0x0
rstreason =3D 1452
#10 0xc0221893 in ip_input (m=3D0xc0a14b00) at =
/usr/src/sys/netinet/ip_input.c:950
ip =3D (struct ip *) 0xc0c1a820
fp =3D (struct ipq *) 0xc6242c68
ia =3D (struct in_ifaddr *) 0xc157c800
ifa =3D (struct ifaddr *) 0x0
i =3D 0
hlen =3D 20
checkif =3D 1
sum =3D 0
pkt_dst =3D {s_addr =3D 126970842}
divert_info =3D 0
args =3D {m =3D 0xc0191c00, oif =3D 0x0, next_hop =3D 0x0, rule =
=3D 0x0, eh =3D 0x0, ro =3D 0xe0000000,=20
dst =3D 0xc0369ff4, flags =3D 233, f_id =3D {dst_ip =3D 3224305229, =
src_ip =3D 3324259512, dst_port =3D 7120,=20
src_port =3D 49177, proto =3D 244 '?, flags =3D 159 '\237'}, =
divert_rule =3D 0, retval =3D 3224267492}
---Type <return> to continue, or q <return> to quit---
#11 0xc020cca2 in swi_net (dummy=3D0x0) at /usr/src/sys/net/netisr.c:236
ni =3D (struct netisr *) 0xc0367030
m =3D (struct mbuf *) 0xc0a14b00
bits =3D 2147483648
i =3D 0
#12 0xc0189692 in ithread_loop (arg=3D0xc09f9c00) at =
/usr/src/sys/kern/kern_intr.c:534
ithd =3D (struct ithd *) 0xc09f9c00
ih =3D (struct intrhand *) 0xc09fdd80
td =3D (struct thread *) 0xc0a07ab0
p =3D (struct proc *) 0xc0a06790
#13 0xc01886bf in fork_exit (callout=3D0xc0189510 <ithread_loop>, =
arg=3D0x0, frame=3D0x0)
at /usr/src/sys/kern/kern_fork.c:796
p =3D (struct proc *) 0xc0a06790
td =3D (struct thread *) 0xc0a07ab0
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
Panic #3:
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
gdb -k kernel.debug /var/crash/vmcore.2
GNU gdb 5.2.1 (FreeBSD)
Copyright 2002 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you =
are
welcome to change it and/or distribute copies of it under certain =
conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for =
details.
This GDB was configured as "i386-undermydesk-freebsd"...
panic: recurse
panic messages:
---
panic: recurse
Stack backtrace:
syncing disks, buffers remaining... panic: sleeping thread (pid 9) owns =
a mutex
Uptime: 2m52s
Dumping 63 MB
16 32 48
---
Reading symbols from =
/usr/obj/usr/src/sys/BEASTIE/modules/usr/src/sys/modules/acpi/acpi.ko.deb=
ug...done.
Loaded symbols for =
/usr/obj/usr/src/sys/BEASTIE/modules/usr/src/sys/modules/acpi/acpi.ko.deb=
ug
#0 doadump () at /usr/src/sys/kern/kern_shutdown.c:240
240 dumping++;
(kgdb) where
#0 doadump () at /usr/src/sys/kern/kern_shutdown.c:240
#1 0xc019b6ef in boot (howto=3D260) at =
/usr/src/sys/kern/kern_shutdown.c:372
#2 0xc019ba77 in panic () at /usr/src/sys/kern/kern_shutdown.c:550
#3 0xc019188b in propagate_priority (td=3D0x0) at =
/usr/src/sys/kern/kern_mutex.c:124
#4 0xc01920a9 in _mtx_lock_sleep (m=3D0xc0376180, opts=3D0,=20
file=3D0xc030046e "/usr/src/sys/i386/i386/vm_machdep.c", line=3D633) =
at /usr/src/sys/kern/kern_mutex.c:635
#5 0xc0191af7 in _mtx_lock_flags (m=3D0xc0376180, opts=3D0,=20
file=3D0xc030046e "/usr/src/sys/i386/i386/vm_machdep.c", line=3D633) =
at /usr/src/sys/kern/kern_mutex.c:333
#6 0xc02c2ad5 in sf_buf_free (addr=3D0x0, args=3D0xc14169a0) at =
/usr/src/sys/i386/i386/vm_machdep.c:633
#7 0xc01baa66 in m_free (mb=3D0xc0a22600) at =
/usr/src/sys/kern/subr_mbuf.c:1376
#8 0xc01dc717 in sbdrop (sb=3D0xc17a8384, len=3D876) at =
/usr/src/sys/kern/uipc_socket2.c:792
#9 0xc022aaf3 in tcp_input (m=3D0xc0a1d700, off0=3D20) at =
/usr/src/sys/netinet/tcp_input.c:1048
#10 0xc0221893 in ip_input (m=3D0xc0a1d700) at =
/usr/src/sys/netinet/ip_input.c:950
#11 0xc020cca2 in swi_net (dummy=3D0x0) at /usr/src/sys/net/netisr.c:236
#12 0xc0189692 in ithread_loop (arg=3D0xc09f9c00) at =
/usr/src/sys/kern/kern_intr.c:534
#13 0xc01886bf in fork_exit (callout=3D0xc0189510 <ithread_loop>, =
arg=3D0x0, frame=3D0x0)
at /usr/src/sys/kern/kern_fork.c:796
(kgdb) bt full
#0 doadump () at /usr/src/sys/kern/kern_shutdown.c:240
No locals.
#1 0xc019b6ef in boot (howto=3D260) at =
/usr/src/sys/kern/kern_shutdown.c:372
No locals.
#2 0xc019ba77 in panic () at /usr/src/sys/kern/kern_shutdown.c:550
td =3D (struct thread *) 0xc0a07ab0
bootopt =3D 260
newpanic =3D 0
ap =3D 0xc6242a3c "\t"
buf =3D "recurse", '\0' <repeats 248 times>
#3 0xc019188b in propagate_priority (td=3D0x0) at =
/usr/src/sys/kern/kern_mutex.c:124
td1 =3D (struct thread *) 0x0
pri =3D 40
m =3D (struct mtx *) 0xc0376180
#4 0xc01920a9 in _mtx_lock_sleep (m=3D0xc0376180, opts=3D0,=20
file=3D0xc030046e "/usr/src/sys/i386/i386/vm_machdep.c", line=3D633) =
at /usr/src/sys/kern/kern_mutex.c:635
td =3D (struct thread *) 0xc0a07ab0
td1 =3D (struct thread *) 0x0
v =3D 0
#5 0xc0191af7 in _mtx_lock_flags (m=3D0xc0376180, opts=3D0,=20
file=3D0xc030046e "/usr/src/sys/i386/i386/vm_machdep.c", line=3D633) =
at /usr/src/sys/kern/kern_mutex.c:333
No locals.
#6 0xc02c2ad5 in sf_buf_free (addr=3D0x0, args=3D0xc14169a0) at =
/usr/src/sys/i386/i386/vm_machdep.c:633
sf =3D (struct sf_buf *) 0x279
m =3D (struct vm_page *) 0xc0376180
#7 0xc01baa66 in m_free (mb=3D0xc0a22600) at =
/usr/src/sys/kern/subr_mbuf.c:1376
nb =3D (struct mbuf *) 0xc030046e
cchnum =3D -970708204
persist =3D 0
#8 0xc01dc717 in sbdrop (sb=3D0xc17a8384, len=3D876) at =
/usr/src/sys/kern/uipc_socket2.c:792
m =3D (struct mbuf *) 0x0
next =3D (struct mbuf *) 0x0
#9 0xc022aaf3 in tcp_input (m=3D0xc0a1d700, off0=3D20) at =
/usr/src/sys/netinet/tcp_input.c:1048
th =3D (struct tcphdr *) 0xc0c6e834
ip =3D (struct ip *) 0xc0c6e820
ipov =3D (struct ipovly *) 0x10
---Type <return> to continue, or q <return> to quit---
inp =3D (struct inpcb *) 0xc1786c78
optp =3D (u_char *) 0x0
optlen =3D 0
len =3D 2864
tlen =3D 0
off =3D 2864
drop_hdrlen =3D 40
tp =3D (struct tcpcb *) 0xc1772b20
thflags =3D 16
so =3D (struct socket *) 0xc17a8300
todrop =3D 2864
acked =3D 2864
ourfinisacked =3D 2864
needoutput =3D 0
tiwin =3D 17184
to =3D {to_flags =3D 0, to_tsval =3D 0, to_tsecr =3D 0, to_cc =
=3D 0, to_ccecho =3D 0, to_mss =3D 0,=20
to_requested_s_scale =3D 0 '\0', to_pad =3D 0 '\0'}
taop =3D (struct rmxp_tao *) 0xb30
tao_noncached =3D {tao_cc =3D 3481331251, tao_ccsent =3D =
3231666176, tao_mssopt =3D 40978}
headlocked =3D 1
next_hop =3D (struct sockaddr_in *) 0x0
rstreason =3D 2864
#10 0xc0221893 in ip_input (m=3D0xc0a1d700) at =
/usr/src/sys/netinet/ip_input.c:950
ip =3D (struct ip *) 0xc0c6e820
fp =3D (struct ipq *) 0xc6242c68
ia =3D (struct in_ifaddr *) 0xc157c200
ifa =3D (struct ifaddr *) 0x0
i =3D 0
hlen =3D 20
checkif =3D 1
sum =3D 0
pkt_dst =3D {s_addr =3D 126970842}
divert_info =3D 0
args =3D {m =3D 0xc0191c00, oif =3D 0x0, next_hop =3D 0x0, rule =
=3D 0x0, eh =3D 0x0, ro =3D 0xe0000000,=20
dst =3D 0xc0369ff4, flags =3D 233, f_id =3D {dst_ip =3D 3224305229, =
src_ip =3D 3324259512, dst_port =3D 7120,=20
src_port =3D 49177, proto =3D 244 '?, flags =3D 159 '\237'}, =
divert_rule =3D 0, retval =3D 3224267492}
---Type <return> to continue, or q <return> to quit---
#11 0xc020cca2 in swi_net (dummy=3D0x0) at /usr/src/sys/net/netisr.c:236
ni =3D (struct netisr *) 0xc0367030
m =3D (struct mbuf *) 0xc0a1d700
bits =3D 2147483648
i =3D 0
#12 0xc0189692 in ithread_loop (arg=3D0xc09f9c00) at =
/usr/src/sys/kern/kern_intr.c:534
ithd =3D (struct ithd *) 0xc09f9c00
ih =3D (struct intrhand *) 0xc09fdd80
td =3D (struct thread *) 0xc0a07ab0
p =3D (struct proc *) 0xc0a06790
#13 0xc01886bf in fork_exit (callout=3D0xc0189510 <ithread_loop>, =
arg=3D0x0, frame=3D0x0)
at /usr/src/sys/kern/kern_fork.c:796
p =3D (struct proc *) 0xc0a06790
td =3D (struct thread *) 0xc0a07ab0
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
Panic #4:
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
beastie# gdb -k kernel.debug /var/crash/vmcore.3
GNU gdb 5.2.1 (FreeBSD)
Copyright 2002 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you =
are
welcome to change it and/or distribute copies of it under certain =
conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for =
details.
This GDB was configured as "i386-undermydesk-freebsd"...
panic: sent too much
panic messages:
---
panic: sent too much
Stack backtrace:
syncing disks, buffers remaining... panic: sleeping thread (pid 13) owns =
a mutex
Uptime: 3m26s
Dumping 63 MB
16 32 48
---
Reading symbols from =
/usr/obj/usr/src/sys/BEASTIE/modules/usr/src/sys/modules/acpi/acpi.ko.deb=
ug...done.
Loaded symbols for =
/usr/obj/usr/src/sys/BEASTIE/modules/usr/src/sys/modules/acpi/acpi.ko.deb=
ug
#0 doadump () at /usr/src/sys/kern/kern_shutdown.c:240
240 dumping++;
(kgdb) where
#0 doadump () at /usr/src/sys/kern/kern_shutdown.c:240
#1 0xc019b6ef in boot (howto=3D260) at =
/usr/src/sys/kern/kern_shutdown.c:372
#2 0xc019ba77 in panic () at /usr/src/sys/kern/kern_shutdown.c:550
#3 0xc019188b in propagate_priority (td=3D0x0) at =
/usr/src/sys/kern/kern_mutex.c:124
#4 0xc01920a9 in _mtx_lock_sleep (m=3D0xc0370aec, opts=3D0, =
file=3D0xc02f2364 "/usr/src/sys/netinet/tcp_timer.c",=20
line=3D180) at /usr/src/sys/kern/kern_mutex.c:635
#5 0xc0191af7 in _mtx_lock_flags (m=3D0xc0370aec, opts=3D0, =
file=3D0xc02f2364 "/usr/src/sys/netinet/tcp_timer.c",=20
line=3D180) at /usr/src/sys/kern/kern_mutex.c:333
#6 0xc02312a6 in tcp_timer_delack (xtp=3D0xc18146f4) at =
/usr/src/sys/netinet/tcp_timer.c:180
#7 0xc01ac1eb in softclock (dummy=3D0x0) at =
/usr/src/sys/kern/kern_timeout.c:225
#8 0xc0189692 in ithread_loop (arg=3D0xc09f9d00) at =
/usr/src/sys/kern/kern_intr.c:534
#9 0xc01886bf in fork_exit (callout=3D0xc0189510 <ithread_loop>, =
arg=3D0x0, frame=3D0x0)
at /usr/src/sys/kern/kern_fork.c:796
(kgdb) bt full
#0 doadump () at /usr/src/sys/kern/kern_shutdown.c:240
No locals.
#1 0xc019b6ef in boot (howto=3D260) at =
/usr/src/sys/kern/kern_shutdown.c:372
No locals.
#2 0xc019ba77 in panic () at /usr/src/sys/kern/kern_shutdown.c:550
td =3D (struct thread *) 0xc0a07850
bootopt =3D 260
newpanic =3D 0
ap =3D 0xc623cbd8 "\r"
buf =3D "sent too much", '\0' <repeats 242 times>
#3 0xc019188b in propagate_priority (td=3D0x0) at =
/usr/src/sys/kern/kern_mutex.c:124
td1 =3D (struct thread *) 0x0
pri =3D 64
m =3D (struct mtx *) 0xc0370aec
#4 0xc01920a9 in _mtx_lock_sleep (m=3D0xc0370aec, opts=3D0, =
file=3D0xc02f2364 "/usr/src/sys/netinet/tcp_timer.c",=20
line=3D180) at /usr/src/sys/kern/kern_mutex.c:635
td =3D (struct thread *) 0xc0a07850
td1 =3D (struct thread *) 0x0
v =3D 0
#5 0xc0191af7 in _mtx_lock_flags (m=3D0xc0370aec, opts=3D0, =
file=3D0xc02f2364 "/usr/src/sys/netinet/tcp_timer.c",=20
line=3D180) at /usr/src/sys/kern/kern_mutex.c:333
No locals.
#6 0xc02312a6 in tcp_timer_delack (xtp=3D0xc18146f4) at =
/usr/src/sys/netinet/tcp_timer.c:180
tp =3D (struct tcpcb *) 0xc0370aec
inp =3D (struct inpcb *) 0xb4
#7 0xc01ac1eb in softclock (dummy=3D0x0) at =
/usr/src/sys/kern/kern_timeout.c:225
c_func =3D (void (*)(void *)) 0xc0231270 <tcp_timer_delack>
c_arg =3D (void *) 0xc18146f4
c_flags =3D -1070652572
c =3D (struct callout *) 0x0
bucket =3D (struct callout_tailq *) 0xc277b858
curticks =3D 20519
steps =3D -1070134548
depth =3D 2
mpcalls =3D 1
gcalls =3D 1
---Type <return> to continue, or q <return> to quit---
bt1 =3D {sec =3D 206, frac =3D 3020292737246421877}
bt2 =3D {sec =3D 0, frac =3D 128818686321450}
ts2 =3D {tv_sec =3D 547, tv_nsec =3D 206}
maxdt =3D 362900792606481920
#8 0xc0189692 in ithread_loop (arg=3D0xc09f9d00) at =
/usr/src/sys/kern/kern_intr.c:534
ithd =3D (struct ithd *) 0xc09f9d00
ih =3D (struct intrhand *) 0xc09fde00
td =3D (struct thread *) 0xc0a07850
p =3D (struct proc *) 0xc0a06b58
#9 0xc01886bf in fork_exit (callout=3D0xc0189510 <ithread_loop>, =
arg=3D0x0, frame=3D0x0)
at /usr/src/sys/kern/kern_fork.c:796
p =3D (struct proc *) 0xc0a06b58
td =3D (struct thread *) 0xc0a07850
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
It's a pity that I don't have much time to research on this problem, =
hope these information helpful, and, please fell free to ask more =
information if you need. Thanks in advance!
Xin LI
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?000601c372c7$3a765dc0$0101a8c0>