From owner-freebsd-current@FreeBSD.ORG Thu Sep 4 02:31:55 2003 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 5E43F16A4BF for ; Thu, 4 Sep 2003 02:31:55 -0700 (PDT) Received: from ftp.bjpu.edu.cn (ftp.bjpu.edu.cn [202.112.78.5]) by mx1.FreeBSD.org (Postfix) with ESMTP id 92E0C43FF9 for ; Thu, 4 Sep 2003 02:31:53 -0700 (PDT) (envelope-from delphij@frontfree.net) Received: by ftp.bjpu.edu.cn (Postfix, from userid 426) id 092B3532C; Thu, 4 Sep 2003 17:30:50 +0800 (CST) Received: from srv (unknown [202.112.73.67]) by ftp.bjpu.edu.cn (Postfix) with ESMTP id 04E5352C8 for ; Thu, 4 Sep 2003 17:30:50 +0800 (CST) From: "=?utf-8?B?WGluIExJL+adjumRqw==?=" To: Date: Thu, 4 Sep 2003 17:30:50 +0800 Organization: Beijing University of Technology Message-ID: <000601c372c7$3a765dc0$0101a8c0@srv> MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook, Build 10.0.4510 Importance: Normal X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165 Subject: Four -CURRENT panics (backtrace included) X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 04 Sep 2003 09:31:55 -0000 Hello everyone, I have encounted several panics in recent kernels. The kernel was = compiled right after cvsup, so the date will apply to the source code. panic 1: =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D beastie# gdb -k kernel.debug /var/crash/vmcore.0 GNU gdb 5.2.1 (FreeBSD) Copyright 2002 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you = are welcome to change it and/or distribute copies of it under certain = conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for = details. This GDB was configured as "i386-undermydesk-freebsd"... panic: sent too much panic messages: --- --- Reading symbols from = /usr/obj/usr/src/sys/BEASTIE/modules/usr/src/sys/modules/acpi/acpi.ko.deb= ug...done. Loaded symbols for = /usr/obj/usr/src/sys/BEASTIE/modules/usr/src/sys/modules/acpi/acpi.ko.deb= ug #0 doadump () at /usr/src/sys/kern/kern_shutdown.c:240 240 dumping++; (kgdb) where #0 doadump () at /usr/src/sys/kern/kern_shutdown.c:240 #1 0xc019b6ef in boot (howto=3D256) at = /usr/src/sys/kern/kern_shutdown.c:372 #2 0xc019ba77 in panic () at /usr/src/sys/kern/kern_shutdown.c:550 #3 0xc022c240 in tcp_input (m=3D0xc0a3f300, off0=3D20) at = /usr/src/sys/netinet/tcp_input.c:2310 #4 0xc0221893 in ip_input (m=3D0xc0a3f300) at = /usr/src/sys/netinet/ip_input.c:950 #5 0xc020cca2 in swi_net (dummy=3D0x0) at /usr/src/sys/net/netisr.c:236 #6 0xc0189692 in ithread_loop (arg=3D0xc09f9c00) at = /usr/src/sys/kern/kern_intr.c:534 #7 0xc01886bf in fork_exit (callout=3D0xc0189510 , = arg=3D0x0, frame=3D0x0) at /usr/src/sys/kern/kern_fork.c:796 (kgdb) bt full #0 doadump () at /usr/src/sys/kern/kern_shutdown.c:240 No locals. #1 0xc019b6ef in boot (howto=3D256) at = /usr/src/sys/kern/kern_shutdown.c:372 No locals. #2 0xc019ba77 in panic () at /usr/src/sys/kern/kern_shutdown.c:550 td =3D (struct thread *) 0xc0a07ab0 bootopt =3D 256 newpanic =3D 1 ap =3D 0xc6242b20 "H=EE=89=96=E7=B9=BAf" buf =3D "sent too much", '\0' #3 0xc022c240 in tcp_input (m=3D0xc0a3f300, off0=3D20) at = /usr/src/sys/netinet/tcp_input.c:2310 th =3D (struct tcphdr *) 0xc0c3f834 ip =3D (struct ip *) 0xc0c3f820 ipov =3D (struct ipovly *) 0x16bc inp =3D (struct inpcb *) 0xc176aab0 optp =3D (u_char *) 0xc0c3f848 "\001\001\b\n" optlen =3D 12 len =3D -1460824075 tlen =3D 0 off =3D -1460824075 drop_hdrlen =3D 52 tp =3D (struct tcpcb *) 0xc189a858 thflags =3D 5820 so =3D (struct socket *) 0xc1888700 todrop =3D -1460824075 acked =3D -1460824075 ourfinisacked =3D -1460824075 needoutput =3D 0 tiwin =3D 57600 to =3D {to_flags =3D 1, to_tsval =3D 517689, to_tsecr =3D = 169603, to_cc =3D 0, to_ccecho =3D 0, to_mss =3D 0,=20 to_requested_s_scale =3D 0 '\0', to_pad =3D 0 '\0'} taop =3D (struct rmxp_tao *) 0xa8ed97f5 tao_noncached =3D {tao_cc =3D 3324259320, tao_ccsent =3D = 3324259328, tao_mssopt =3D 10971} headlocked =3D 1 next_hop =3D (struct sockaddr_in *) 0x0 rstreason =3D -1460824075 ---Type to continue, or q to quit--- #4 0xc0221893 in ip_input (m=3D0xc0a3f300) at = /usr/src/sys/netinet/ip_input.c:950 ip =3D (struct ip *) 0xc0c3f820 fp =3D (struct ipq *) 0xc02efe4d ia =3D (struct in_ifaddr *) 0xc1578c00 ifa =3D (struct ifaddr *) 0x0 i =3D 0 hlen =3D 20 checkif =3D 1 sum =3D 0 pkt_dst =3D {s_addr =3D 126970842} divert_info =3D 0 args =3D {m =3D 0xc0191c00, oif =3D 0x0, next_hop =3D 0x0, rule = =3D 0x0, eh =3D 0x0, ro =3D 0xe0000000,=20 dst =3D 0xc0369ff4, flags =3D 233, f_id =3D {dst_ip =3D 3224305229, = src_ip =3D 3324259512, dst_port =3D 7120,=20 src_port =3D 49177, proto =3D 244 '?, flags =3D 159 '\237'}, = divert_rule =3D 0, retval =3D 3224267492} #5 0xc020cca2 in swi_net (dummy=3D0x0) at /usr/src/sys/net/netisr.c:236 ni =3D (struct netisr *) 0xc0367030 m =3D (struct mbuf *) 0xc0a3f300 bits =3D 2147483648 i =3D 0 #6 0xc0189692 in ithread_loop (arg=3D0xc09f9c00) at = /usr/src/sys/kern/kern_intr.c:534 ithd =3D (struct ithd *) 0xc09f9c00 ih =3D (struct intrhand *) 0xc09fdd80 td =3D (struct thread *) 0xc0a07ab0 p =3D (struct proc *) 0xc0a06790 #7 0xc01886bf in fork_exit (callout=3D0xc0189510 , = arg=3D0x0, frame=3D0x0) at /usr/src/sys/kern/kern_fork.c:796 p =3D (struct proc *) 0xc0a06790 td =3D (struct thread *) 0xc0a07ab0 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D Panic #2: =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D beastie# gdb -k kernel.debug /var/crash/vmcore.1 GNU gdb 5.2.1 (FreeBSD) Copyright 2002 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you = are welcome to change it and/or distribute copies of it under certain = conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for = details. This GDB was configured as "i386-undermydesk-freebsd"... panic: recurse panic messages: --- panic: recurse Stack backtrace: syncing disks, buffers remaining... panic: sleeping thread (pid 9) owns = a mutex Uptime: 3m21s Dumping 63 MB 16 32 48 --- Reading symbols from = /usr/obj/usr/src/sys/BEASTIE/modules/usr/src/sys/modules/acpi/acpi.ko.deb= ug...done. Loaded symbols for = /usr/obj/usr/src/sys/BEASTIE/modules/usr/src/sys/modules/acpi/acpi.ko.deb= ug #0 doadump () at /usr/src/sys/kern/kern_shutdown.c:240 240 dumping++; (kgdb) where #0 doadump () at /usr/src/sys/kern/kern_shutdown.c:240 #1 0xc019b6ef in boot (howto=3D260) at = /usr/src/sys/kern/kern_shutdown.c:372 #2 0xc019ba77 in panic () at /usr/src/sys/kern/kern_shutdown.c:550 #3 0xc019188b in propagate_priority (td=3D0x0) at = /usr/src/sys/kern/kern_mutex.c:124 #4 0xc01920a9 in _mtx_lock_sleep (m=3D0xc0376180, opts=3D0,=20 file=3D0xc030046e "/usr/src/sys/i386/i386/vm_machdep.c", line=3D633) = at /usr/src/sys/kern/kern_mutex.c:635 #5 0xc0191af7 in _mtx_lock_flags (m=3D0xc0376180, opts=3D0,=20 file=3D0xc030046e "/usr/src/sys/i386/i386/vm_machdep.c", line=3D633) = at /usr/src/sys/kern/kern_mutex.c:333 #6 0xc02c2ad5 in sf_buf_free (addr=3D0x0, args=3D0xc1416ec8) at = /usr/src/sys/i386/i386/vm_machdep.c:633 #7 0xc01baa66 in m_free (mb=3D0xc0a22a00) at = /usr/src/sys/kern/subr_mbuf.c:1376 #8 0xc01dc717 in sbdrop (sb=3D0xc1768284, len=3D263) at = /usr/src/sys/kern/uipc_socket2.c:792 #9 0xc022bb8c in tcp_input (m=3D0xc0a14b00, off0=3D20) at = /usr/src/sys/netinet/tcp_input.c:1973 #10 0xc0221893 in ip_input (m=3D0xc0a14b00) at = /usr/src/sys/netinet/ip_input.c:950 #11 0xc020cca2 in swi_net (dummy=3D0x0) at /usr/src/sys/net/netisr.c:236 b#12 0xc0189692 in ithread_loop (arg=3D0xc09f9c00) at = /usr/src/sys/kern/kern_intr.c:534 t #13 0xc01886bf in fork_exit (callout=3D0xc0189510 , = arg=3D0x0, frame=3D0x0) at /usr/src/sys/kern/kern_fork.c:796 (kgdb) bt full #0 doadump () at /usr/src/sys/kern/kern_shutdown.c:240 No locals. #1 0xc019b6ef in boot (howto=3D260) at = /usr/src/sys/kern/kern_shutdown.c:372 No locals. #2 0xc019ba77 in panic () at /usr/src/sys/kern/kern_shutdown.c:550 td =3D (struct thread *) 0xc0a07ab0 bootopt =3D 260 newpanic =3D 0 ap =3D 0xc6242a3c "\t" buf =3D "recurse", '\0' #3 0xc019188b in propagate_priority (td=3D0x0) at = /usr/src/sys/kern/kern_mutex.c:124 td1 =3D (struct thread *) 0x0 pri =3D 40 m =3D (struct mtx *) 0xc0376180 #4 0xc01920a9 in _mtx_lock_sleep (m=3D0xc0376180, opts=3D0,=20 file=3D0xc030046e "/usr/src/sys/i386/i386/vm_machdep.c", line=3D633) = at /usr/src/sys/kern/kern_mutex.c:635 td =3D (struct thread *) 0xc0a07ab0 td1 =3D (struct thread *) 0x0 v =3D 0 #5 0xc0191af7 in _mtx_lock_flags (m=3D0xc0376180, opts=3D0,=20 file=3D0xc030046e "/usr/src/sys/i386/i386/vm_machdep.c", line=3D633) = at /usr/src/sys/kern/kern_mutex.c:333 No locals. #6 0xc02c2ad5 in sf_buf_free (addr=3D0x0, args=3D0xc1416ec8) at = /usr/src/sys/i386/i386/vm_machdep.c:633 sf =3D (struct sf_buf *) 0x279 m =3D (struct vm_page *) 0xc0376180 #7 0xc01baa66 in m_free (mb=3D0xc0a22a00) at = /usr/src/sys/kern/subr_mbuf.c:1376 nb =3D (struct mbuf *) 0xc030046e cchnum =3D 390 persist =3D 0 #8 0xc01dc717 in sbdrop (sb=3D0xc1768284, len=3D263) at = /usr/src/sys/kern/uipc_socket2.c:792 m =3D (struct mbuf *) 0x0 next =3D (struct mbuf *) 0x0 #9 0xc022bb8c in tcp_input (m=3D0xc0a14b00, off0=3D20) at = /usr/src/sys/netinet/tcp_input.c:1973 th =3D (struct tcphdr *) 0xc0c1a834 ip =3D (struct ip *) 0xc0c1a820 ipov =3D (struct ipovly *) 0x10 ---Type to continue, or q to quit---=20 inp =3D (struct inpcb *) 0xc1753b94 optp =3D (u_char *) 0x0 optlen =3D 0 len =3D 1452 tlen =3D 0 off =3D 1452 drop_hdrlen =3D 40 tp =3D (struct tcpcb *) 0xc16ea858 thflags =3D 16 so =3D (struct socket *) 0xc1768200 todrop =3D 1452 acked =3D 1452 ourfinisacked =3D 1452 needoutput =3D 0 tiwin =3D 4288 to =3D {to_flags =3D 0, to_tsval =3D 0, to_tsecr =3D 0, to_cc = =3D 0, to_ccecho =3D 0, to_mss =3D 0,=20 to_requested_s_scale =3D 0 '\0', to_pad =3D 0 '\0'} taop =3D (struct rmxp_tao *) 0x5ac tao_noncached =3D {tao_cc =3D 1183262627, tao_ccsent =3D = 3231666176, tao_mssopt =3D 12306} headlocked =3D 1 next_hop =3D (struct sockaddr_in *) 0x0 rstreason =3D 1452 #10 0xc0221893 in ip_input (m=3D0xc0a14b00) at = /usr/src/sys/netinet/ip_input.c:950 ip =3D (struct ip *) 0xc0c1a820 fp =3D (struct ipq *) 0xc6242c68 ia =3D (struct in_ifaddr *) 0xc157c800 ifa =3D (struct ifaddr *) 0x0 i =3D 0 hlen =3D 20 checkif =3D 1 sum =3D 0 pkt_dst =3D {s_addr =3D 126970842} divert_info =3D 0 args =3D {m =3D 0xc0191c00, oif =3D 0x0, next_hop =3D 0x0, rule = =3D 0x0, eh =3D 0x0, ro =3D 0xe0000000,=20 dst =3D 0xc0369ff4, flags =3D 233, f_id =3D {dst_ip =3D 3224305229, = src_ip =3D 3324259512, dst_port =3D 7120,=20 src_port =3D 49177, proto =3D 244 '?, flags =3D 159 '\237'}, = divert_rule =3D 0, retval =3D 3224267492} ---Type to continue, or q to quit--- #11 0xc020cca2 in swi_net (dummy=3D0x0) at /usr/src/sys/net/netisr.c:236 ni =3D (struct netisr *) 0xc0367030 m =3D (struct mbuf *) 0xc0a14b00 bits =3D 2147483648 i =3D 0 #12 0xc0189692 in ithread_loop (arg=3D0xc09f9c00) at = /usr/src/sys/kern/kern_intr.c:534 ithd =3D (struct ithd *) 0xc09f9c00 ih =3D (struct intrhand *) 0xc09fdd80 td =3D (struct thread *) 0xc0a07ab0 p =3D (struct proc *) 0xc0a06790 #13 0xc01886bf in fork_exit (callout=3D0xc0189510 , = arg=3D0x0, frame=3D0x0) at /usr/src/sys/kern/kern_fork.c:796 p =3D (struct proc *) 0xc0a06790 td =3D (struct thread *) 0xc0a07ab0 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D Panic #3: =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D gdb -k kernel.debug /var/crash/vmcore.2 GNU gdb 5.2.1 (FreeBSD) Copyright 2002 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you = are welcome to change it and/or distribute copies of it under certain = conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for = details. This GDB was configured as "i386-undermydesk-freebsd"... panic: recurse panic messages: --- panic: recurse Stack backtrace: syncing disks, buffers remaining... panic: sleeping thread (pid 9) owns = a mutex Uptime: 2m52s Dumping 63 MB 16 32 48 --- Reading symbols from = /usr/obj/usr/src/sys/BEASTIE/modules/usr/src/sys/modules/acpi/acpi.ko.deb= ug...done. Loaded symbols for = /usr/obj/usr/src/sys/BEASTIE/modules/usr/src/sys/modules/acpi/acpi.ko.deb= ug #0 doadump () at /usr/src/sys/kern/kern_shutdown.c:240 240 dumping++; (kgdb) where #0 doadump () at /usr/src/sys/kern/kern_shutdown.c:240 #1 0xc019b6ef in boot (howto=3D260) at = /usr/src/sys/kern/kern_shutdown.c:372 #2 0xc019ba77 in panic () at /usr/src/sys/kern/kern_shutdown.c:550 #3 0xc019188b in propagate_priority (td=3D0x0) at = /usr/src/sys/kern/kern_mutex.c:124 #4 0xc01920a9 in _mtx_lock_sleep (m=3D0xc0376180, opts=3D0,=20 file=3D0xc030046e "/usr/src/sys/i386/i386/vm_machdep.c", line=3D633) = at /usr/src/sys/kern/kern_mutex.c:635 #5 0xc0191af7 in _mtx_lock_flags (m=3D0xc0376180, opts=3D0,=20 file=3D0xc030046e "/usr/src/sys/i386/i386/vm_machdep.c", line=3D633) = at /usr/src/sys/kern/kern_mutex.c:333 #6 0xc02c2ad5 in sf_buf_free (addr=3D0x0, args=3D0xc14169a0) at = /usr/src/sys/i386/i386/vm_machdep.c:633 #7 0xc01baa66 in m_free (mb=3D0xc0a22600) at = /usr/src/sys/kern/subr_mbuf.c:1376 #8 0xc01dc717 in sbdrop (sb=3D0xc17a8384, len=3D876) at = /usr/src/sys/kern/uipc_socket2.c:792 #9 0xc022aaf3 in tcp_input (m=3D0xc0a1d700, off0=3D20) at = /usr/src/sys/netinet/tcp_input.c:1048 #10 0xc0221893 in ip_input (m=3D0xc0a1d700) at = /usr/src/sys/netinet/ip_input.c:950 #11 0xc020cca2 in swi_net (dummy=3D0x0) at /usr/src/sys/net/netisr.c:236 #12 0xc0189692 in ithread_loop (arg=3D0xc09f9c00) at = /usr/src/sys/kern/kern_intr.c:534 #13 0xc01886bf in fork_exit (callout=3D0xc0189510 , = arg=3D0x0, frame=3D0x0) at /usr/src/sys/kern/kern_fork.c:796 (kgdb) bt full #0 doadump () at /usr/src/sys/kern/kern_shutdown.c:240 No locals. #1 0xc019b6ef in boot (howto=3D260) at = /usr/src/sys/kern/kern_shutdown.c:372 No locals. #2 0xc019ba77 in panic () at /usr/src/sys/kern/kern_shutdown.c:550 td =3D (struct thread *) 0xc0a07ab0 bootopt =3D 260 newpanic =3D 0 ap =3D 0xc6242a3c "\t" buf =3D "recurse", '\0' #3 0xc019188b in propagate_priority (td=3D0x0) at = /usr/src/sys/kern/kern_mutex.c:124 td1 =3D (struct thread *) 0x0 pri =3D 40 m =3D (struct mtx *) 0xc0376180 #4 0xc01920a9 in _mtx_lock_sleep (m=3D0xc0376180, opts=3D0,=20 file=3D0xc030046e "/usr/src/sys/i386/i386/vm_machdep.c", line=3D633) = at /usr/src/sys/kern/kern_mutex.c:635 td =3D (struct thread *) 0xc0a07ab0 td1 =3D (struct thread *) 0x0 v =3D 0 #5 0xc0191af7 in _mtx_lock_flags (m=3D0xc0376180, opts=3D0,=20 file=3D0xc030046e "/usr/src/sys/i386/i386/vm_machdep.c", line=3D633) = at /usr/src/sys/kern/kern_mutex.c:333 No locals. #6 0xc02c2ad5 in sf_buf_free (addr=3D0x0, args=3D0xc14169a0) at = /usr/src/sys/i386/i386/vm_machdep.c:633 sf =3D (struct sf_buf *) 0x279 m =3D (struct vm_page *) 0xc0376180 #7 0xc01baa66 in m_free (mb=3D0xc0a22600) at = /usr/src/sys/kern/subr_mbuf.c:1376 nb =3D (struct mbuf *) 0xc030046e cchnum =3D -970708204 persist =3D 0 #8 0xc01dc717 in sbdrop (sb=3D0xc17a8384, len=3D876) at = /usr/src/sys/kern/uipc_socket2.c:792 m =3D (struct mbuf *) 0x0 next =3D (struct mbuf *) 0x0 #9 0xc022aaf3 in tcp_input (m=3D0xc0a1d700, off0=3D20) at = /usr/src/sys/netinet/tcp_input.c:1048 th =3D (struct tcphdr *) 0xc0c6e834 ip =3D (struct ip *) 0xc0c6e820 ipov =3D (struct ipovly *) 0x10 ---Type to continue, or q to quit--- inp =3D (struct inpcb *) 0xc1786c78 optp =3D (u_char *) 0x0 optlen =3D 0 len =3D 2864 tlen =3D 0 off =3D 2864 drop_hdrlen =3D 40 tp =3D (struct tcpcb *) 0xc1772b20 thflags =3D 16 so =3D (struct socket *) 0xc17a8300 todrop =3D 2864 acked =3D 2864 ourfinisacked =3D 2864 needoutput =3D 0 tiwin =3D 17184 to =3D {to_flags =3D 0, to_tsval =3D 0, to_tsecr =3D 0, to_cc = =3D 0, to_ccecho =3D 0, to_mss =3D 0,=20 to_requested_s_scale =3D 0 '\0', to_pad =3D 0 '\0'} taop =3D (struct rmxp_tao *) 0xb30 tao_noncached =3D {tao_cc =3D 3481331251, tao_ccsent =3D = 3231666176, tao_mssopt =3D 40978} headlocked =3D 1 next_hop =3D (struct sockaddr_in *) 0x0 rstreason =3D 2864 #10 0xc0221893 in ip_input (m=3D0xc0a1d700) at = /usr/src/sys/netinet/ip_input.c:950 ip =3D (struct ip *) 0xc0c6e820 fp =3D (struct ipq *) 0xc6242c68 ia =3D (struct in_ifaddr *) 0xc157c200 ifa =3D (struct ifaddr *) 0x0 i =3D 0 hlen =3D 20 checkif =3D 1 sum =3D 0 pkt_dst =3D {s_addr =3D 126970842} divert_info =3D 0 args =3D {m =3D 0xc0191c00, oif =3D 0x0, next_hop =3D 0x0, rule = =3D 0x0, eh =3D 0x0, ro =3D 0xe0000000,=20 dst =3D 0xc0369ff4, flags =3D 233, f_id =3D {dst_ip =3D 3224305229, = src_ip =3D 3324259512, dst_port =3D 7120,=20 src_port =3D 49177, proto =3D 244 '?, flags =3D 159 '\237'}, = divert_rule =3D 0, retval =3D 3224267492} ---Type to continue, or q to quit--- #11 0xc020cca2 in swi_net (dummy=3D0x0) at /usr/src/sys/net/netisr.c:236 ni =3D (struct netisr *) 0xc0367030 m =3D (struct mbuf *) 0xc0a1d700 bits =3D 2147483648 i =3D 0 #12 0xc0189692 in ithread_loop (arg=3D0xc09f9c00) at = /usr/src/sys/kern/kern_intr.c:534 ithd =3D (struct ithd *) 0xc09f9c00 ih =3D (struct intrhand *) 0xc09fdd80 td =3D (struct thread *) 0xc0a07ab0 p =3D (struct proc *) 0xc0a06790 #13 0xc01886bf in fork_exit (callout=3D0xc0189510 , = arg=3D0x0, frame=3D0x0) at /usr/src/sys/kern/kern_fork.c:796 p =3D (struct proc *) 0xc0a06790 td =3D (struct thread *) 0xc0a07ab0 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D Panic #4: =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D beastie# gdb -k kernel.debug /var/crash/vmcore.3 GNU gdb 5.2.1 (FreeBSD) Copyright 2002 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you = are welcome to change it and/or distribute copies of it under certain = conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for = details. This GDB was configured as "i386-undermydesk-freebsd"... panic: sent too much panic messages: --- panic: sent too much Stack backtrace: syncing disks, buffers remaining... panic: sleeping thread (pid 13) owns = a mutex Uptime: 3m26s Dumping 63 MB 16 32 48 --- Reading symbols from = /usr/obj/usr/src/sys/BEASTIE/modules/usr/src/sys/modules/acpi/acpi.ko.deb= ug...done. Loaded symbols for = /usr/obj/usr/src/sys/BEASTIE/modules/usr/src/sys/modules/acpi/acpi.ko.deb= ug #0 doadump () at /usr/src/sys/kern/kern_shutdown.c:240 240 dumping++; (kgdb) where #0 doadump () at /usr/src/sys/kern/kern_shutdown.c:240 #1 0xc019b6ef in boot (howto=3D260) at = /usr/src/sys/kern/kern_shutdown.c:372 #2 0xc019ba77 in panic () at /usr/src/sys/kern/kern_shutdown.c:550 #3 0xc019188b in propagate_priority (td=3D0x0) at = /usr/src/sys/kern/kern_mutex.c:124 #4 0xc01920a9 in _mtx_lock_sleep (m=3D0xc0370aec, opts=3D0, = file=3D0xc02f2364 "/usr/src/sys/netinet/tcp_timer.c",=20 line=3D180) at /usr/src/sys/kern/kern_mutex.c:635 #5 0xc0191af7 in _mtx_lock_flags (m=3D0xc0370aec, opts=3D0, = file=3D0xc02f2364 "/usr/src/sys/netinet/tcp_timer.c",=20 line=3D180) at /usr/src/sys/kern/kern_mutex.c:333 #6 0xc02312a6 in tcp_timer_delack (xtp=3D0xc18146f4) at = /usr/src/sys/netinet/tcp_timer.c:180 #7 0xc01ac1eb in softclock (dummy=3D0x0) at = /usr/src/sys/kern/kern_timeout.c:225 #8 0xc0189692 in ithread_loop (arg=3D0xc09f9d00) at = /usr/src/sys/kern/kern_intr.c:534 #9 0xc01886bf in fork_exit (callout=3D0xc0189510 , = arg=3D0x0, frame=3D0x0) at /usr/src/sys/kern/kern_fork.c:796 (kgdb) bt full #0 doadump () at /usr/src/sys/kern/kern_shutdown.c:240 No locals. #1 0xc019b6ef in boot (howto=3D260) at = /usr/src/sys/kern/kern_shutdown.c:372 No locals. #2 0xc019ba77 in panic () at /usr/src/sys/kern/kern_shutdown.c:550 td =3D (struct thread *) 0xc0a07850 bootopt =3D 260 newpanic =3D 0 ap =3D 0xc623cbd8 "\r" buf =3D "sent too much", '\0' #3 0xc019188b in propagate_priority (td=3D0x0) at = /usr/src/sys/kern/kern_mutex.c:124 td1 =3D (struct thread *) 0x0 pri =3D 64 m =3D (struct mtx *) 0xc0370aec #4 0xc01920a9 in _mtx_lock_sleep (m=3D0xc0370aec, opts=3D0, = file=3D0xc02f2364 "/usr/src/sys/netinet/tcp_timer.c",=20 line=3D180) at /usr/src/sys/kern/kern_mutex.c:635 td =3D (struct thread *) 0xc0a07850 td1 =3D (struct thread *) 0x0 v =3D 0 #5 0xc0191af7 in _mtx_lock_flags (m=3D0xc0370aec, opts=3D0, = file=3D0xc02f2364 "/usr/src/sys/netinet/tcp_timer.c",=20 line=3D180) at /usr/src/sys/kern/kern_mutex.c:333 No locals. #6 0xc02312a6 in tcp_timer_delack (xtp=3D0xc18146f4) at = /usr/src/sys/netinet/tcp_timer.c:180 tp =3D (struct tcpcb *) 0xc0370aec inp =3D (struct inpcb *) 0xb4 #7 0xc01ac1eb in softclock (dummy=3D0x0) at = /usr/src/sys/kern/kern_timeout.c:225 c_func =3D (void (*)(void *)) 0xc0231270 c_arg =3D (void *) 0xc18146f4 c_flags =3D -1070652572 c =3D (struct callout *) 0x0 bucket =3D (struct callout_tailq *) 0xc277b858 curticks =3D 20519 steps =3D -1070134548 depth =3D 2 mpcalls =3D 1 gcalls =3D 1 ---Type to continue, or q to quit--- bt1 =3D {sec =3D 206, frac =3D 3020292737246421877} bt2 =3D {sec =3D 0, frac =3D 128818686321450} ts2 =3D {tv_sec =3D 547, tv_nsec =3D 206} maxdt =3D 362900792606481920 #8 0xc0189692 in ithread_loop (arg=3D0xc09f9d00) at = /usr/src/sys/kern/kern_intr.c:534 ithd =3D (struct ithd *) 0xc09f9d00 ih =3D (struct intrhand *) 0xc09fde00 td =3D (struct thread *) 0xc0a07850 p =3D (struct proc *) 0xc0a06b58 #9 0xc01886bf in fork_exit (callout=3D0xc0189510 , = arg=3D0x0, frame=3D0x0) at /usr/src/sys/kern/kern_fork.c:796 p =3D (struct proc *) 0xc0a06b58 td =3D (struct thread *) 0xc0a07850 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D It's a pity that I don't have much time to research on this problem, = hope these information helpful, and, please fell free to ask more = information if you need. Thanks in advance! Xin LI