Date: Mon, 27 Jun 2005 00:06:13 +0300 From: Alex Lyashkov <shadow@psoft.net> To: "Yuriy N. Shkandybin" <jura@networks.ru> Cc: "freebsd-current@freebsd.org" <freebsd-current@freebsd.org> Subject: Re: kernel panic Message-ID: <1119819972.3197.3.camel@berloga.shadowland> In-Reply-To: <00ae01c57a90$73410f10$0701010a@notebook> References: <00ae01c57a90$73410f10$0701010a@notebook>
next in thread | previous in thread | raw e-mail | index | archive | help
Same panic with RELENG_5. UP box - SACK disabled.
It fixed with downgrade to RELENG_5_4.
> #2 0xc04aafb0 in panic (fmt=3D0xc0610e42 "sbflush_locked: cc %u || mb
%p
> || mbcnt %u")
> at /usr/src/sys/kern/kern_shutdown.c:566
> td =3D (struct thread *) 0xc11cec00
> bootopt =3D 260
> newpanic =3D 0
> ap =3D 0xc11cec00 "L\005I?@?\031?"
> buf =3D "sbflush_locked: cc 0 || mb 0xc135f300 || mbcnt 0", '\0'
> <repeats 207 times>
> #3 0xc04e4a07 in sbflush_locked (sb=3D0xc1d3e6a4) at
> /usr/src/sys/kern/uipc_socket2.c:1119
> No locals.
> #4 0xc04e4a46 in sbflush (sb=3D0xc1d3e6a4) at
> /usr/src/sys/kern/uipc_socket2.c:1128
> No locals.
> #5 0xc055902f in tcp_disconnect (tp=3D0xc1da11bc) at
> /usr/src/sys/netinet/tcp_usrreq.c:1226
> so =3D (struct socket *) 0xc1d3e654
> #6 0xc0557f58 in tcp_usr_disconnect (so=3D0x0) at
> /usr/src/sys/netinet/tcp_usrreq.c:445
> inp =3D (struct inpcb *) 0xc1cebb40
> tp =3D (struct tcpcb *) 0x0
> #7 0xc04e050a in sodisconnect (so=3D0x0) at
> /usr/src/sys/kern/uipc_socket.c:579
> No locals.
> #8 0xc04e012c in soclose (so=3D0xc1d3e654) at
> /usr/src/sys/kern/uipc_socket.c:458
> error =3D 0
> #9 0xc04d0c3f in soo_close (fp=3D0xc19e9d48, td=3D0xc11cec00) at
> /usr/src/sys/kern/sys_socket.c:299
> error =3D 0
> so =3D (struct socket *) 0x0
> #10 0xc048d200 in fdrop_locked (fp=3D0xc19e9d48, td=3D0xc11cec00) at
> file.h:288
> error =3D 0
> #11 0xc048d151 in fdrop (fp=3D0xc19e9d48, td=3D0xc11cec00) at
> /usr/src/sys/kern/kern_descrip.c:2101
> No locals.
> #12 0xc048b81b in closef (fp=3D0xc19e9d48, td=3D0xc11cec00) at
> /usr/src/sys/kern/kern_descrip.c:1918
> vp =3D (struct vnode *) 0x0
> lf =3D {l_start =3D 579614447286217896, l_len =3D
> -3085549963380260856, l_pid =3D 0, l_type =3D 0, l_whence =3D 0}
> fdtol =3D (struct filedesc_to_leader *) 0xd52deca8
> fdp =3D (struct filedesc *) 0xc142c400
> #13 0xc0488d05 in close (td=3D0xc11cec00, uap=3D0x0) at
> /usr/src/sys/kern/kern_descrip.c:1004
> fdp =3D (struct filedesc *) 0xc142c400
> fp =3D (struct file *) 0xc19e9d48
> fd =3D 45
> error =3D -1068914549
> holdleaders =3D 0
> #14 0xc05e45b3 in syscall (frame=3D
> {tf_fs =3D 47, tf_es =3D 47, tf_ds =3D -1088225233, tf_edi =3D 13644=
2880,
> tf_esi =3D -1085465088, tf_ebp =3D -1085465192, tf_isp =3D -718410396,
tf_ebx
> =3D 673633468, tf_edx =3D 148024960, tf_ecx =3D 135296768, tf_eax =3D 6,
> tf_trapno =3D 0, tf_err =3D 2, tf_eip =3D 673966799, tf_cs =3D 31, tf_efl=
ags =3D
> 646, tf_esp =3D -1085465236, tf_ss =3D 47}) at
> /usr/src/sys/i386/i386/trap.c:1009
>
> (kgdb) p *sb
> $1 =3D {sb_sel =3D {si_thrlist =3D {tqe_next =3D 0x0, tqe_prev =3D 0xc1d0=
6030},
> si_thread =3D 0x0, si_note =3D {kl_lock =3D 0xc1d3e6bc,
> kl_list =3D {slh_first =3D 0x0}}, si_flags =3D 0}, sb_mtx =3D {mtx_o=
bject
> =3D {lo_class =3D 0xc063497c,
> lo_name =3D 0xc0610dc2 "so_rcv", lo_type =3D 0xc0610dc2 "so_rcv",
> lo_flags =3D 196608, lo_list =3D {tqe_next =3D 0x0,
> tqe_prev =3D 0x0}, lo_witness =3D 0x0}, mtx_lock =3D 3239898112,
> mtx_recurse =3D 0}, sb_mb =3D 0xc135f300,
> sb_mbtail =3D 0xc1366600, sb_lastrecord =3D 0xc135f300, sb_cc =3D 0,
> sb_hiwat =3D 66176, sb_mbcnt =3D 0, sb_mbmax =3D 262144,
> sb_ctl =3D 0, sb_lowat =3D 1, sb_timeo =3D 0, sb_flags =3D 0, sb_state =
=3D 32}
> (kgdb) f 5
> #5 0xc055902f in tcp_disconnect (tp=3D0xc1da11bc) at
> /usr/src/sys/netinet/tcp_usrreq.c:1226
> 1226 sbflush(&so->so_rcv);
> (kgdb) p so
> $2 =3D (struct socket *) 0xc1d3e654
> (kgdb) p *so
> $3 =3D {so_count =3D 1, so_type =3D 1, so_options =3D 4, so_linger =3D 0,
so_state
> =3D 266, so_qstate =3D 0, so_pcb =3D 0xc1cebb40,
> so_proto =3D 0xc063ff28, so_head =3D 0x0, so_incomp =3D {tqh_first =3D 0=
x0,
> tqh_last =3D 0x0}, so_comp =3D {tqh_first =3D 0x0,
> tqh_last =3D 0x0}, so_list =3D {tqe_next =3D 0x0, tqe_prev =3D 0xc1810=
534},
> so_qlen =3D 0, so_incqlen =3D 0, so_qlimit =3D 0,
> so_timeo =3D 0, so_error =3D 0, so_sigio =3D 0x0, so_oobmark =3D 0,
so_aiojobq
> =3D {tqh_first =3D 0x0, tqh_last =3D 0xc1d3e69c},
> so_rcv =3D {sb_sel =3D {si_thrlist =3D {tqe_next =3D 0x0, tqe_prev =3D
> 0xc1d06030}, si_thread =3D 0x0, si_note =3D {
> kl_lock =3D 0xc1d3e6bc, kl_list =3D {slh_first =3D 0x0}}, si_flags=
=3D
> 0}, sb_mtx =3D {mtx_object =3D {lo_class =3D 0xc063497c,
> lo_name =3D 0xc0610dc2 "so_rcv", lo_type =3D 0xc0610dc2 "so_rcv",
> lo_flags =3D 196608, lo_list =3D {tqe_next =3D 0x0,
> tqe_prev =3D 0x0}, lo_witness =3D 0x0}, mtx_lock =3D 3239898112,
> mtx_recurse =3D 0}, sb_mb =3D 0xc135f300,
> sb_mbtail =3D 0xc1366600, sb_lastrecord =3D 0xc135f300, sb_cc =3D 0,
> sb_hiwat =3D 66176, sb_mbcnt =3D 0, sb_mbmax =3D 262144,
> sb_ctl =3D 0, sb_lowat =3D 1, sb_timeo =3D 0, sb_flags =3D 0, sb_state=
=3D
> 32}, so_snd =3D {sb_sel =3D {si_thrlist =3D {
> tqe_next =3D 0x0, tqe_prev =3D 0x0}, si_thread =3D 0x0, si_note =
=3D
> {kl_lock =3D 0xc1d3e724, kl_list =3D {slh_first =3D 0x0}},
> si_flags =3D 0}, sb_mtx =3D {mtx_object =3D {lo_class =3D 0xc063497c=
,
> lo_name =3D 0xc0610dbb "so_snd",
> lo_type =3D 0xc0610dbb "so_snd", lo_flags =3D 196608, lo_list =3D
> {tqe_next =3D 0x0, tqe_prev =3D 0x0}, lo_witness =3D 0x0},
> mtx_lock =3D 4, mtx_recurse =3D 0}, sb_mb =3D 0xc18bec00, sb_mbtail =
=3D
> 0xc18bec00, sb_lastrecord =3D 0xc18bec00, sb_cc =3D 529,
> sb_hiwat =3D 33792, sb_mbcnt =3D 2304, sb_mbmax =3D 262144, sb_ctl =3D=
0,
> sb_lowat =3D 2048, sb_timeo =3D 0, sb_flags =3D 0,
> sb_state =3D 16}, so_upcall =3D 0, so_upcallarg =3D 0x0, so_cred =3D
> 0xc1413500, so_label =3D 0x0, so_peerlabel =3D 0x0,
> so_gencnt =3D 17291, so_emuldata =3D 0x0, so_accf =3D 0x0}
> (kgdb) p *tp
> $4 =3D {t_segq =3D {lh_first =3D 0x0}, t_segqlen =3D 0, t_dupacks =3D 0, =
unused
=3D
> 0x0, tt_rexmt =3D 0xc1da1300,
> tt_persist =3D 0xc1da1318, tt_keep =3D 0xc1da1330, tt_2msl =3D 0xc1da134=
8,
> tt_delack =3D 0xc1da1360, t_inpcb =3D 0xc1cebb40,
> t_state =3D 4, t_flags =3D 992, t_force =3D 0, snd_una =3D 683843078, sn=
d_max
> =3D 683843350, snd_nxt =3D 683843350,
> snd_up =3D 683843078, snd_wl1 =3D 567974456, snd_wl2 =3D 683843078, iss =
=3D
> 683843077, irs =3D 567974455, rcv_nxt =3D 567974822,
> rcv_adv =3D 568040998, rcv_wnd =3D 66176, rcv_up =3D 567974456, snd_wnd =
=3D
> 132352, snd_cwnd =3D 1408, snd_bwnd =3D 1073725440,
> snd_ssthresh =3D 2896, snd_bandwidth =3D 63746785, snd_recover =3D
> 683843078, t_maxopd =3D 1420, t_rcvtime =3D 1401062,
> t_starttime =3D 1401057, t_rtttime =3D 1405584, t_rtseq =3D 683843078,
> t_bw_rtttime =3D 1401057, t_bw_rtseq =3D 0, t_rxtcur =3D 382,
> t_maxseg =3D 1408, t_srtt =3D 1086, t_rttvar =3D 595, t_rxtshift =3D 0,
> t_rttmin =3D 3, t_rttbest =3D 1236, t_rttupdated =3D 1,
> max_sndwnd =3D 132352, t_softerror =3D 0, t_oobflags =3D 0 '\0', t_iobc =
=3D 0
> '\0', snd_scale =3D 2 '\002', rcv_scale =3D 1 '\001',
> request_r_scale =3D 1 '\001', requested_s_scale =3D 2 '\002', ts_recent =
=3D
> 716722322, ts_recent_age =3D 1401062,
> last_ack_sent =3D 567974822, cc_send =3D 0, cc_recv =3D 0, snd_cwnd_prev=
=3D
> 0, snd_ssthresh_prev =3D 0, snd_recover_prev =3D 0,
> t_badrxtwin =3D 0, snd_limited =3D 0 '\0', rcv_second =3D 0, rcv_pps =3D=
0,
> rcv_byps =3D 0, sack_enable =3D 1, snd_numholes =3D 0,
> snd_holes =3D 0x0, rcv_lastsack =3D 0, rcv_numsacks =3D 0, sackblks =3D
> {{start =3D 0, end =3D 0}, {start =3D 0, end =3D 0}, {start =3D 0,
> end =3D 0}, {start =3D 0, end =3D 0}, {start =3D 0, end =3D 0}, {sta=
rt =3D 0,
> end =3D 0}}, sack_newdata =3D 0}
> (kgdb)
=F7 =F7=D3=CB, 26.06.2005, =D7 23:48, Yuriy N. Shkandybin =D0=C9=DB=C5=D4:
> I've got panic with cvsuped CURRENT-6 kernel from Fri Jun 24 14:11:40 MSD=
2005
> This is HTT SMP machine with ADAPTIVE_GIANT and no PREEMTION or IPI_PREEM=
PTION=20
>=20
> Jura
>=20
>=20
> #0 doadump () at pcpu.h:165
> 165 __asm __volatile("movl %%fs:0,%0" : "=3Dr" (td));
> (kgdb) bt
> #0 doadump () at pcpu.h:165
> #1 0xc04b8dd0 in boot (howto=3D260) at /usr/src/sys/kern/kern_shutdown.c=
:397
> #2 0xc04b961d in panic (fmt=3D0xc0646f02 "sbflush_locked: cc %u || mb %p=
|| mbcnt %u")
> at /usr/src/sys/kern/kern_shutdown.c:553
> #3 0xc050853f in sbflush_locked (sb=3D0xc40a2b1c) at /usr/src/sys/kern/u=
ipc_socket2.c:1112
> #4 0xc0508572 in sbrelease_locked (sb=3D0xc40a2b1c, so=3D0x0) at /usr/sr=
c/sys/kern/uipc_socket2.c:557
> #5 0xc05052f2 in sofree (so=3D0xc40a2a60) at /usr/src/sys/kern/uipc_sock=
et.c:402
> #6 0xc055b97f in in_pcbdetach (inp=3D0xc58944ec) at /usr/src/sys/netinet=
/in_pcb.c:728
> #7 0xc0572fca in tcp_close (tp=3D0x0) at /usr/src/sys/netinet/tcp_subr.c=
:779
> #8 0xc056f01f in tcp_input (m=3D0xc4dc8b00, off0=3D1) at /usr/src/sys/ne=
tinet/tcp_input.c:2200
> #9 0xc05669c5 in ip_input (m=3D0xc4dc8b00) at /usr/src/sys/netinet/ip_in=
put.c:776
> #10 0xc0549831 in ether_demux (ifp=3D0xc319f000, m=3D0xc4dc8b00) at /usr/=
src/sys/net/if_ethersubr.c:850
> #11 0xc0549bf9 in ether_input (ifp=3D0xc319f000, m=3D0xc4dc8b00) at /usr/=
src/sys/net/if_ethersubr.c:640
> #12 0xc0447bde in em_intr (arg=3D0xc3169000) at /usr/src/sys/dev/em/if_em=
.c:2908
> #13 0xc04a1147 in ithread_loop (arg=3D0xc3099800) at /usr/src/sys/kern/ke=
rn_intr.c:545
> #14 0xc049fe3d in fork_exit (callout=3D0xc04a10a0 <ithread_loop>, arg=3D0=
x0, frame=3D0x0) at /usr/src/sys/kern/kern_fork.c:789
> #15 0xc060758c in fork_trampoline () at /usr/src/sys/i386/i386/exception.=
s:208
> _______________________________________________
> freebsd-current@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-current
> To unsubscribe, send any mail to "freebsd-current-unsubscribe@freebsd.org=
"
--=20
FreeVPS Developers Team http://www.freevps.com
Positive Software http://www.psoft.net
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1119819972.3197.3.camel>