Skip site navigation (1)Skip section navigation (2) 
Date:      Wed, 20 Jun 2007 05:12:03 +1000
From:      Peter Jeremy <peterjeremy@optushome.com.au>
To:        freebsd-current@freebsd.org
Subject:   Panic in callout_reset()
Message-ID:  <20070619191203.GA1167@turion.vk2pj.dyndns.org>
next in thread | raw e-mail | index | archive | help 

--x+6KMIRAuhnl3hBn
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Running: FreeBSD 7.0-CURRENT #5: Sat Jun  9 18:29:40 EST 2007
    root@server.vk2pj.dyndns.org:/var/obj/k7/usr/src/sys/server
Panic String: Bad tailq NEXT(0xcce421a8->tqh_last) !=3D NULL

#0  doadump () at pcpu.h:195
#1  0xc04524a9 in db_fncall (dummy1=3D0xc0576aa2, dummy2=3D0x0, dummy3=3D0x=
1, dummy4=3D0xd3b23a3c "")
    at /usr/src/sys/ddb/db_command.c:486
#2  0xc0452a15 in db_command_loop () at /usr/src/sys/ddb/db_command.c:401
#3  0xc0454195 in db_trap (type=3D0x3, code=3D0x0) at /usr/src/sys/ddb/db_m=
ain.c:222
#4  0xc0576943 in kdb_trap (type=3D0x3, code=3D0x0, tf=3D0xd3b23bd4) at /us=
r/src/sys/kern/subr_kdb.c:502
#5  0xc06d4d4b in trap (frame=3D0xd3b23bd4) at /usr/src/sys/i386/i386/trap.=
c:620
#6  0xc06c21db in calltrap () at /usr/src/sys/i386/i386/exception.s:139
#7  0xc0576aa2 in kdb_enter (msg=3D0xc0719d31 "panic") at cpufunc.h:60
#8  0xc0550035 in panic (fmt=3D0xc06fdb26 "Bad tailq NEXT(%p->tqh_last) !=
=3D NULL")
    at /usr/src/sys/kern/kern_shutdown.c:547
#9  0xc056180a in callout_reset (c=3D0xc07ec000, to_ticks=3D0xa, ftn=3D0xc0=
63fd30 <nfsrv_timer>, arg=3D0x0)
    at /usr/src/sys/kern/kern_timeout.c:477
#10 0xc063fde4 in nfsrv_timer (arg=3D0x0) at /usr/src/sys/nfsserver/nfs_srv=
sock.c:815
#11 0xc0561f1e in softclock (dummy=3D0x0) at /usr/src/sys/kern/kern_timeout=
=2Ec:280
#12 0xc0534485 in ithread_loop (arg=3D0xc2926670) at /usr/src/sys/kern/kern=
_intr.c:1036
#13 0xc0531a57 in fork_exit (callout=3D0xc05342d0 <ithread_loop>, arg=3D0xc=
2926670, frame=3D0xd3b23d38)
    at /usr/src/sys/kern/kern_fork.c:787
#14 0xc06c2250 in fork_trampoline () at /usr/src/sys/i386/i386/exception.s:=
205

'c' in callout_reset looks like:
(kgdb) p *c
$1 =3D {
  c_links =3D {
    sle =3D {
      sle_next =3D 0xc07e5e08
    },=20
    tqe =3D {
      tqe_next =3D 0xc07e5e08,=20
      tqe_prev =3D 0xcce42158
    }
  },=20
  c_time =3D 0x3230ae73,=20
  c_arg =3D 0x0,=20
  c_func =3D 0xc063fd30 <nfsrv_timer>,=20
  c_mtx =3D 0x0,=20
  c_flags =3D 0x16
}

(kgdb) p *$1.c_links.tqe.tqe_next
$3 =3D {
  c_links =3D {
    sle =3D {
      sle_next =3D 0x0
    },=20
    tqe =3D {
      tqe_next =3D 0x0,=20
      tqe_prev =3D 0xcce42158
    }
  },=20
  c_time =3D 0x3230ae69,=20
  c_arg =3D 0x0,=20
  c_func =3D 0xc0605f80 <tcp_isn_tick>,=20
  c_mtx =3D 0x0,=20
  c_flags =3D 0x16
}
(kgdb) p *$1.c_links.tqe.tqe_prev
$5 =3D (struct callout *) 0xc07e5e08

Any suggestions?

--=20
Peter Jeremy

--x+6KMIRAuhnl3hBn
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (FreeBSD)

iD8DBQFGeCqD/opHv/APuIcRAus2AKCXOa8lahI07GOIjoZbCQaoCxl0IwCfWRqJ
xMxuRxftSiUSesTyuBR0jMU=
=GRgl
-----END PGP SIGNATURE-----

--x+6KMIRAuhnl3hBn--

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20070619191203.GA1167>