another sbdrop panic on 6.0-BETA2

From: Evgueni V. Gavrilov (aquatique_at_rusunix.org)
Date: 08/03/05

  • Next message: Dave+Seddon: "Re: running out of mbufs?"
    Date: Wed, 3 Aug 2005 07:14:15 +0200
    To: freebsd-stable@freebsd.org
    
    

    # kgdb kernel.debug /usr/crash/vmcore.26
    [GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"]
    GNU gdb 6.1.1 [FreeBSD]
    Copyright 2004 Free Software Foundation, Inc.
    GDB is free software, covered by the GNU General Public License, and you are
    welcome to change it and/or distribute copies of it under certain conditions.
    Type "show copying" to see the conditions.
    There is absolutely no warranty for GDB. Type "show warranty" for details.
    This GDB was configured as "i386-marcel-freebsd".
    #0 doadump () at pcpu.h:165
    165 __asm __volatile("movl %%fs:0,%0" : "=r" (td));
    (kgdb) where full
    #0 doadump () at pcpu.h:165
    No locals.
    #1 0xc05afc75 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:397
            first_buf_printf = 1
    #2 0xc05b0023 in panic (fmt=0xc078b541 "sbdrop") at /usr/src/sys/kern/kern_shutdown.c:553
            td = (struct thread *) 0xc36fa600
            bootopt = 260
            newpanic = 0
            ap = 0xc36fa600 "<\232oà ´8Ã"
            buf = "sbdrop", '\0' <repeats 249 times>
    #3 0xc05f975d in sbdrop_locked (sb=0xeaabb9d8, len=232) at /usr/src/sys/kern/uipc_socket2.c:1144
            m = (struct mbuf *) 0x0
            next = (struct mbuf *) 0x0
    #4 0xc05f9641 in sbflush_locked (sb=0xeaabb9d8) at /usr/src/sys/kern/uipc_socket2.c:1111
    No locals.
    #5 0xc05f89d4 in sbrelease_locked (sb=0xeaabb9d8, so=0x0) at /usr/src/sys/kern/uipc_socket2.c:559
    No locals.
    #6 0xc05f8a70 in sbrelease (sb=0xeaabb9d8, so=0x0) at /usr/src/sys/kern/uipc_socket2.c:572
    No locals.
    #7 0xc05f5f9c in sorflush (so=0xc564d164) at /usr/src/sys/kern/uipc_socket.c:1480
            sb = (struct sockbuf *) 0xc564d1b4
            pr = (struct protosw *) 0xc07bdae0
            asb = {sb_sel = {si_thrlist = {tqe_next = 0x0, tqe_prev = 0x0}, si_thread = 0x0, si_note = {kl_list = {
            slh_first = 0x0}, kl_lock = 0, kl_unlock = 0, kl_locked = 0, kl_lockarg = 0x0}, si_flags = 0}, sb_mtx = {
        mtx_object = {lo_class = 0xc07b8224, lo_name = 0xc078b496 "so_rcv", lo_type = 0xc078b496 "so_rcv",
          lo_flags = 196608, lo_list = {tqe_next = 0x0, tqe_prev = 0x0}, lo_witness = 0x0}, mtx_lock = 3278874112,
        mtx_recurse = 0}, sb_state = 0, sb_mb = 0xc38b8300, sb_mbtail = 0xc3965800, sb_lastrecord = 0xc38b8300,
      sb_cc = 232, sb_hiwat = 8192, sb_mbcnt = 256, sb_mbmax = 65536, sb_ctl = 0, sb_lowat = 1, sb_timeo = 0,
      sb_flags = 64}
    #8 0xc05f3c6d in sofree (so=0xc564d164) at /usr/src/sys/kern/uipc_socket.c:406
            head = (struct socket *) 0x0
    #9 0xc05f4042 in soclose (so=0xc564d164) at /usr/src/sys/kern/uipc_socket.c:484
            error = 0
    #10 0xc05e16d8 in soo_close (fp=0xc4537090, td=0xc36fa600) at /usr/src/sys/kern/sys_socket.c:317
            error = 0
            so = (struct socket *) 0x0
    #11 0xc058a4ea in fdrop_locked (fp=0xc4537090, td=0x0) at file.h:289
            error = 0
    #12 0xc058a40c in fdrop (fp=0xc4537090, td=0x0) at /usr/src/sys/kern/kern_descrip.c:2099
    No locals.
    #13 0xc058835c in closef (fp=0xc4537090, td=0xc36fa600) at /usr/src/sys/kern/kern_descrip.c:1919
            vp = (struct vnode *) 0xc36f6798
            lf = {l_start = -4585496678308791428, l_len = 25769803786, l_pid = -1, l_type = -12240, l_whence = -16264}
            fdtol = (struct filedesc_to_leader *) 0x0
            fdp = (struct filedesc *) 0xc36f6700
    #14 0xc0586ed1 in fdfree (td=0xc36fa600) at /usr/src/sys/kern/kern_descrip.c:1620
            fdp = (struct filedesc *) 0xc36f6700
            fpp = (struct file **) 0xc36f6798
            i = -1
            fdtol = (struct filedesc_to_leader *) 0x0
            fp = (struct file *) 0xc104a270
            vp = (struct vnode *) 0x0
            lf = {l_start = -4169999003410235389, l_len = -4586296654622376952, l_pid = -1065657888, l_type = 128,
      l_whence = 0}
    #15 0xc05923ca in exit1 (td=0xc36fa600, rv=11) at /usr/src/sys/kern/kern_exit.c:237
            new_switchtime = {sec = -357843864, frac = 16909816604093579274}
            p = (struct proc *) 0xc36f9a3c
            nq = (struct proc *) 0x0
            q = (struct proc *) 0x0
            tp = (struct tty *) 0xc35b8400
            ttyvp = (struct vnode *) 0xc35b8400
            vm = (struct vmspace *) 0x0
            vtmp = (struct vnode *) 0x0
            tracevp = (struct vnode *) 0x0
            tracecred = (struct ucred *) 0xc35b8400
            plim = (struct plimit *) 0x0
            refcnt = 0
    #16 0xc05b544d in sigexit (td=0xc36fa600, sig=11) at /usr/src/sys/kern/kern_sig.c:2439
            p = (struct proc *) 0xc36f9a3c
    #17 0xc05b50d6 in postsig (sig=11) at /usr/src/sys/kern/kern_sig.c:2314
            td = (struct thread *) 0xc36fa600
            p = (struct proc *) 0xc36f9a3c
            ps = (struct sigacts *) 0xc37d5000
            action = 0
            returnmask = {__bits = {3278874112, 3278874112, 3937123560, 3227189686}}
            code = 0
    #18 0xc05d758c in ast (framep=0xeaabbd38) at /usr/src/sys/kern/subr_trap.c:266
            td = (struct thread *) 0xc36fa600
            p = (struct proc *) 0xc36f9a3c
            kg = (struct ksegrp *) 0xc338b420
            rlim = {rlim_cur = 51539607552, rlim_max = 38654705675}
            sticks = 9
            sflag = 1
            flags = 16910336
            sig = 0
    #19 0xc072ce3d in doreti_ast () at /usr/src/sys/i386/i386/exception.s:293
    No locals.
    #20 0xeaabbd38 in ?? ()
    No symbol table info available.
    #21 0x080a003b in ?? ()
    No symbol table info available.
    #22 0x0814003b in ?? ()
    No symbol table info available.
    #23 0xbfbf003b in ?? ()
    No symbol table info available.
    #24 0x00000000 in ?? ()
    No symbol table info available.
    #25 0x68746958 in ?? ()
    No symbol table info available.
    #26 0xbfbfed88 in ?? ()
    No symbol table info available.
    #27 0xeaabbd64 in ?? ()
    No symbol table info available.
    #28 0x68746958 in ?? ()
    No symbol table info available.
    #29 0x00000000 in ?? ()
    No symbol table info available.
    #30 0x1a1d1a56 in ?? ()
    No symbol table info available.
    #31 0x00000000 in ?? ()
    No symbol table info available.
    #32 0x0000000c in ?? ()
    No symbol table info available.
    #33 0x00000000 in ?? ()
    No symbol table info available.
    #34 0x2845981f in ?? ()
    No symbol table info available.
    #35 0x00000033 in ?? ()
    No symbol table info available.
    #36 0x00010206 in ?? ()
    No symbol table info available.
    #37 0xbfbfec00 in ?? ()
    No symbol table info available.
    #38 0x0000003b in ?? ()
    No symbol table info available.
    #39 0x00000000 in ?? ()
    No symbol table info available.
    #40 0x00000000 in ?? ()
    No symbol table info available.
    #41 0x00000000 in ?? ()
    No symbol table info available.
    #42 0x00000000 in ?? ()
    No symbol table info available.
    #43 0x75ae2000 in ?? ()
    No symbol table info available.
    #44 0xc36f9a3c in ?? ()
    No symbol table info available.
    #45 0xc36fa600 in ?? ()
    No symbol table info available.
    #46 0xeaabb874 in ?? ()
    No symbol table info available.
    #47 0xeaabb85c in ?? ()
    No symbol table info available.
    #48 0xc331a780 in ?? ()
    No symbol table info available.
    #49 0xc05c5128 in sched_switch (td=0x68746958, newtd=0x68746958, flags=Cannot access memory at address 0xbfbfed98
    ) at /usr/src/sys/kern/sched_4bsd.c:973
            kg = (struct ksegrp *) 0x0
            p = (struct proc *) 0x0
    Previous frame inner to this frame (corrupt stack?)
    (kgdb) quit

    Copyright (c) 1992-2005 The FreeBSD Project.
    Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
            The Regents of the University of California. All rights reserved.
    FreeBSD 6.0-BETA2 #0: Tue Aug 2 18:43:26 OMSST 2005
        aquatique@blackbird.opsb:/usr/obj/usr/src/sys/BLACKBIRD6
    acpi_alloc_wakeup_handler: can't alloc wake memory
    ACPI APIC Table: <INTEL SWV25 >
    Timecounter "i8254" frequency 1193182 Hz quality 0
    CPU: Intel(R) Xeon(TM) CPU 2.40GHz (2392.29-MHz 686-class CPU)
      Origin = "GenuineIntel" Id = 0xf27 Stepping = 7
      Features=0xbfebfbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE>
      Features2=0x4400<CNTX-ID,<b14>>
      Hyperthreading: 2 logical CPUs
    real memory = 2013265920 (1920 MB)
    avail memory = 1964122112 (1873 MB)
    FreeBSD/SMP: Multiprocessor System Detected: 4 CPUs
     cpu0 (BSP): APIC ID: 0
     cpu1 (AP): APIC ID: 1
     cpu2 (AP): APIC ID: 6
     cpu3 (AP): APIC ID: 7
        ACPI-0698: *** Warning: Type override - [DEB_] had invalid type (Integer) for Scope operator, changed to (Scope)
        ACPI-0698: *** Warning: Type override - [MLIB] had invalid type (Integer) for Scope operator, changed to (Scope)
        ACPI-0698: *** Warning: Type override - [DATA] had invalid type (String) for Scope operator, changed to (Scope)
        ACPI-0698: *** Warning: Type override - [SIO_] had invalid type (String) for Scope operator, changed to (Scope)
        ACPI-0698: *** Warning: Type override - [LEDP] had invalid type (String) for Scope operator, changed to (Scope)
        ACPI-0698: *** Warning: Type override - [GPEN] had invalid type (String) for Scope operator, changed to (Scope)
        ACPI-0698: *** Warning: Type override - [GPST] had invalid type (String) for Scope operator, changed to (Scope)
        ACPI-0698: *** Warning: Type override - [WUES] had invalid type (String) for Scope operator, changed to (Scope)
        ACPI-0698: *** Warning: Type override - [WUSE] had invalid type (String) for Scope operator, changed to (Scope)
        ACPI-0698: *** Warning: Type override - [SBID] had invalid type (String) for Scope operator, changed to (Scope)
        ACPI-0698: *** Warning: Type override - [SWCE] had invalid type (String) for Scope operator, changed to (Scope)
    ioapic0 <Version 2.0> irqs 0-23 on motherboard
    ioapic1 <Version 2.0> irqs 24-47 on motherboard
    ioapic2 <Version 2.0> irqs 48-71 on motherboard
    lapic0: Forcing LINT1 to edge trigger
    netsmb_dev: loaded
    npx0: [FAST]
    npx0: <math processor> on motherboard
    npx0: INT 16 interface
    acpi0: <INTEL SWV25> on motherboard
    acpi0: Power Button (fixed)
    acpi_ec0: <Embedded Controller: GPE 0x8> port 0xca6,0xca7 on acpi0
    pci_link0: <ACPI PCI Link LNKA> irq 9 on acpi0
    pci_link1: <ACPI PCI Link LNKB> irq 11 on acpi0
    pci_link2: <ACPI PCI Link LNKC> irq 0 on acpi0
    pci_link3: <ACPI PCI Link LNKD> irq 0 on acpi0
    Timecounter "ACPI-fast" frequency 3579545 Hz quality 1000
    acpi_timer0: <24-bit timer at 3.579545MHz> port 0x408-0x40b on acpi0
    cpu0: <ACPI CPU> on acpi0
    cpu1: <ACPI CPU> on acpi0
    cpu2: <ACPI CPU> on acpi0
    cpu3: <ACPI CPU> on acpi0
    pcib0: <ACPI Host-PCI bridge> port 0xcf8-0xcff on acpi0
    pci0: <ACPI PCI bus> on pcib0
    pci0: <unknown> at device 0.1 (no driver attached)
    pcib1: <ACPI PCI-PCI bridge> at device 3.0 on pci0
    pci2: <ACPI PCI bus> on pcib1
    pci2: <base peripheral, interrupt controller> at device 28.0 (no driver attached)
    pcib2: <ACPI PCI-PCI bridge> at device 29.0 on pci2
    pci4: <ACPI PCI bus> on pcib2
    iir0: <Intel Integrated RAID Controller> mem 0xfa000000-0xfbffffff irq 48 at device 8.0 on pci4
    iir0: [GIANT-LOCKED]
    pci2: <base peripheral, interrupt controller> at device 30.0 (no driver attached)
    pcib3: <ACPI PCI-PCI bridge> at device 31.0 on pci2
    pci3: <ACPI PCI bus> on pcib3
    em0: <Intel(R) PRO/1000 Network Connection, Version - 2.1.7> port 0x2040-0x207f mem 0xfe8c0000-0xfe8dffff irq 30 at device 7.0 on pci3
    em0: Ethernet address: 00:07:e9:05:a4:28
    em0: Speed:N/A Duplex:N/A
    em1: <Intel(R) PRO/1000 Network Connection, Version - 2.1.7> port 0x2000-0x203f mem 0xfe8e0000-0xfe8fffff irq 31 at device 7.1 on pci3
    em1: Ethernet address: 00:07:e9:05:a4:29
    em1: Speed:N/A Duplex:N/A
    pci0: <unknown> at device 3.1 (no driver attached)
    pcib4: <ACPI PCI-PCI bridge> at device 30.0 on pci0
    pci1: <ACPI PCI bus> on pcib4
    pci1: <display, VGA> at device 12.0 (no driver attached)
    isab0: <PCI-ISA bridge> at device 31.0 on pci0
    isa0: <ISA bus> on isab0
    atapci0: <Intel ICH3 UDMA100 controller> port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0x3a0-0x3af at device 31.1 on pci0
    ata0: <ATA channel 0> on atapci0
    ata1: <ATA channel 1> on atapci0
    pci0: <serial bus, SMBus> at device 31.3 (no driver attached)
    atkbdc0: <Keyboard controller (i8042)> port 0x60,0x64 irq 1 on acpi0
    atkbd0: <AT Keyboard> irq 1 on atkbdc0
    kbd0 at atkbd0
    atkbd0: [GIANT-LOCKED]
    psm0: <PS/2 Mouse> irq 12 on atkbdc0
    psm0: [GIANT-LOCKED]
    psm0: model Generic PS/2 mouse, device ID 0
    fdc0: <floppy drive controller (FDE)> port 0x3f2-0x3f3,0x3f4-0x3f5,0x3f7 irq 6 drq 2 on acpi0
    fdc0: [FAST]
    fd0: <1440-KB 3.5" drive> on fdc0 drive 0
    sio0: <16550A-compatible COM port> port 0x3f8-0x3ff irq 4 flags 0x10 on acpi0
    sio0: type 16550A
    sio1: <16550A-compatible COM port> port 0x2f8-0x2ff irq 3 on acpi0
    sio1: type 16550A
    orm0: <ISA Option ROMs> at iomem 0xc0000-0xc7fff,0xcd800-0xcefff,0xcf000-0xd07ff on isa0
    sc0: <System console> at flags 0x100 on isa0
    sc0: VGA <16 virtual consoles, flags=0x300>
    vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
    Timecounters tick every 1.000 msec
    Waiting 2 seconds for SCSI devices to settle
    acd0: CDROM <SAMSUNG CD-ROM SN-124/N101> at ata1-master UDMA33
    ses0 at iir0 bus 1 target 6 lun 0
    ses0: <ESG-SHV SCA HSBP M16 0.05> Fixed Processor SCSI-2 device
    ses0: SAF-TE Compliant Device
    da0 at iir0 bus 2 target 0 lun 0
    da0: <Intel Host Drive #00 > Fixed Direct Access SCSI-2 device
    da0: Tagged Queueing Enabled
    da0: 17461MB (35760690 512 byte sectors: 255H 63S/T 2226C)
    ATA PseudoRAID loaded
    SMP: AP CPU #3 Launched!
    SMP: AP CPU #1 Launched!
    lapic6: Forcing LINT1 to edge trigger
    SMP: AP CPU #2 Launched!
    Trying to mount root from ufs:/dev/da0s1a
    WARNING: /mnt was not properly dismounted
    WARNING: /mnt/usr was not properly dismounted
    WARNING: /mnt/var was not properly dismounted
    /mnt/var: mount pending error: blocks 2688 files 2
    em0: link state changed to UP
    Accounting enabled

    machine i386
    cpu I686_CPU
    ident BLACKBIRD6

    makeoptions DEBUG=-g

    options SCHED_4BSD
    options PREEMPTION
    options INET
    options FFS
    options SOFTUPDATES
    options UFS_EXTATTR
    options UFS_EXTATTR_AUTOSTART
    options UFS_ACL
    options UFS_DIRHASH
    options MD_ROOT
    options NFSCLIENT
    options NFSSERVER
    options MSDOSFS
    options MSDOSFS_LARGE
    options CD9660
    options PROCFS
    options NULLFS
    options PSEUDOFS
    options GEOM_GPT
    options COMPAT_43
    options COMPAT_FREEBSD4
    options COMPAT_FREEBSD5
    options SCSI_DELAY=2000
    options KTRACE

    options VESA

    options COMPAT_LINUX
    options LINPROCFS

    options SMBFS
    options NETSMB
    options NETSMBCRYPTO
    options LIBMCHAIN
    options LIBICONV

    options ZERO_COPY_SOCKETS

    options SC_HISTORY_SIZE=4096
    options INCLUDE_CONFIG_FILE

    options SYSVSHM
    options SHMMAXPGS=65535
    options SHMMIN=2
    options SHMMNI=128
    options SHMSEG=128

    options SYSVMSG
    options MSGMNB=16384
    options MSGMNI=41
    options MSGSEG=2049
    options MSGSSZ=64
    options MSGTQL=2048

    options SYSVSEM
    options SEMMAP=31
    options SEMMNI=40
    options SEMMNS=240
    options SEMMNU=120
    options SEMMSL=61
    options SEMOPM=101
    options SEMUME=40

    options _KPOSIX_PRIORITY_SCHEDULING
    options KBD_INSTALL_CDEV

    options SMP
    device apic

    device isa
    device pci

    device fdc

    device ata
    device atadisk
    device ataraid
    device atapicd
    device atapifd
    device atapist
    options ATA_STATIC_ID

    device ahc
    device ahd
    device aha
    device aic
    device bt

    device isp
    device ciss
    device iir
    device ips
    device mly
    device twa

    device scbus
    device ch
    device da
    device sa
    device cd
    device pass
    device ses

    device atkbdc
    device atkbd
    device psm
    device vga
    device splash
    device sc
    device agp
    device npx

    device sio

    device miibus
    device em
    device ixgb
    device bge
    device fxp

    device loop
    device mem
    device io
    device random
    device ether
    device pty
    device md
    device bpf

    device pf
    device pflog

    options MAXMEM=(1920*1024)

    _______________________________________________
    freebsd-net@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-net
    To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"


  • Next message: Dave+Seddon: "Re: running out of mbufs?"