Four -CURRENT panics (backtrace included)

From: Xin LI/李鑫 <delphij_at_frontfree.net>
Date: Thu, 4 Sep 2003 17:30:50 +0800
Hello everyone,

I have encounted several panics in recent kernels. The kernel was compiled right after cvsup, so the date will apply to the source code.

panic 1:
============================================================================================
beastie# gdb -k kernel.debug /var/crash/vmcore.0
GNU gdb 5.2.1 (FreeBSD)
Copyright 2002 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-undermydesk-freebsd"...
panic: sent too much
panic messages:
---
---
Reading symbols from /usr/obj/usr/src/sys/BEASTIE/modules/usr/src/sys/modules/acpi/acpi.ko.debug...done.
Loaded symbols for /usr/obj/usr/src/sys/BEASTIE/modules/usr/src/sys/modules/acpi/acpi.ko.debug
#0  doadump () at /usr/src/sys/kern/kern_shutdown.c:240
240             dumping++;
(kgdb) where
#0  doadump () at /usr/src/sys/kern/kern_shutdown.c:240
#1  0xc019b6ef in boot (howto=256) at /usr/src/sys/kern/kern_shutdown.c:372
#2  0xc019ba77 in panic () at /usr/src/sys/kern/kern_shutdown.c:550
#3  0xc022c240 in tcp_input (m=0xc0a3f300, off0=20) at /usr/src/sys/netinet/tcp_input.c:2310
#4  0xc0221893 in ip_input (m=0xc0a3f300) at /usr/src/sys/netinet/ip_input.c:950
#5  0xc020cca2 in swi_net (dummy=0x0) at /usr/src/sys/net/netisr.c:236
#6  0xc0189692 in ithread_loop (arg=0xc09f9c00) at /usr/src/sys/kern/kern_intr.c:534
#7  0xc01886bf in fork_exit (callout=0xc0189510 <ithread_loop>, arg=0x0, frame=0x0)
    at /usr/src/sys/kern/kern_fork.c:796
(kgdb) bt full
#0  doadump () at /usr/src/sys/kern/kern_shutdown.c:240
No locals.
#1  0xc019b6ef in boot (howto=256) at /usr/src/sys/kern/kern_shutdown.c:372
No locals.
#2  0xc019ba77 in panic () at /usr/src/sys/kern/kern_shutdown.c:550
        td = (struct thread *) 0xc0a07ab0
        bootopt = 256
        newpanic = 1
        ap = 0xc6242b20 "H繺f"
        buf = "sent too much", '\0' <repeats 242 times>
#3  0xc022c240 in tcp_input (m=0xc0a3f300, off0=20) at /usr/src/sys/netinet/tcp_input.c:2310
        th = (struct tcphdr *) 0xc0c3f834
        ip = (struct ip *) 0xc0c3f820
        ipov = (struct ipovly *) 0x16bc
        inp = (struct inpcb *) 0xc176aab0
        optp = (u_char *) 0xc0c3f848 "\001\001\b\n"
        optlen = 12
        len = -1460824075
        tlen = 0
        off = -1460824075
        drop_hdrlen = 52
        tp = (struct tcpcb *) 0xc189a858
        thflags = 5820
        so = (struct socket *) 0xc1888700
        todrop = -1460824075
        acked = -1460824075
        ourfinisacked = -1460824075
        needoutput = 0
        tiwin = 57600
        to = {to_flags = 1, to_tsval = 517689, to_tsecr = 169603, to_cc = 0, to_ccecho = 0, to_mss = 0, 
  to_requested_s_scale = 0 '\0', to_pad = 0 '\0'}
        taop = (struct rmxp_tao *) 0xa8ed97f5
        tao_noncached = {tao_cc = 3324259320, tao_ccsent = 3324259328, tao_mssopt = 10971}
        headlocked = 1
        next_hop = (struct sockaddr_in *) 0x0
        rstreason = -1460824075
---Type <return> to continue, or q <return> to quit---
#4  0xc0221893 in ip_input (m=0xc0a3f300) at /usr/src/sys/netinet/ip_input.c:950
        ip = (struct ip *) 0xc0c3f820
        fp = (struct ipq *) 0xc02efe4d
        ia = (struct in_ifaddr *) 0xc1578c00
        ifa = (struct ifaddr *) 0x0
        i = 0
        hlen = 20
        checkif = 1
        sum = 0
        pkt_dst = {s_addr = 126970842}
        divert_info = 0
        args = {m = 0xc0191c00, oif = 0x0, next_hop = 0x0, rule = 0x0, eh = 0x0, ro = 0xe0000000, 
  dst = 0xc0369ff4, flags = 233, f_id = {dst_ip = 3224305229, src_ip = 3324259512, dst_port = 7120, 
    src_port = 49177, proto = 244 '?, flags = 159 '\237'}, divert_rule = 0, retval = 3224267492}
#5  0xc020cca2 in swi_net (dummy=0x0) at /usr/src/sys/net/netisr.c:236
        ni = (struct netisr *) 0xc0367030
        m = (struct mbuf *) 0xc0a3f300
        bits = 2147483648
        i = 0
#6  0xc0189692 in ithread_loop (arg=0xc09f9c00) at /usr/src/sys/kern/kern_intr.c:534
        ithd = (struct ithd *) 0xc09f9c00
        ih = (struct intrhand *) 0xc09fdd80
        td = (struct thread *) 0xc0a07ab0
        p = (struct proc *) 0xc0a06790
#7  0xc01886bf in fork_exit (callout=0xc0189510 <ithread_loop>, arg=0x0, frame=0x0)
    at /usr/src/sys/kern/kern_fork.c:796
        p = (struct proc *) 0xc0a06790
        td = (struct thread *) 0xc0a07ab0
============================================================================================

Panic #2:
============================================================================================
beastie# gdb -k kernel.debug /var/crash/vmcore.1
GNU gdb 5.2.1 (FreeBSD)
Copyright 2002 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-undermydesk-freebsd"...
panic: recurse
panic messages:
---
panic: recurse
Stack backtrace:

syncing disks, buffers remaining... panic: sleeping thread (pid 9) owns a mutex
Uptime: 3m21s
Dumping 63 MB
 16 32 48
---
Reading symbols from /usr/obj/usr/src/sys/BEASTIE/modules/usr/src/sys/modules/acpi/acpi.ko.debug...done.
Loaded symbols for /usr/obj/usr/src/sys/BEASTIE/modules/usr/src/sys/modules/acpi/acpi.ko.debug
#0  doadump () at /usr/src/sys/kern/kern_shutdown.c:240
240             dumping++;
(kgdb) where
#0  doadump () at /usr/src/sys/kern/kern_shutdown.c:240
#1  0xc019b6ef in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:372
#2  0xc019ba77 in panic () at /usr/src/sys/kern/kern_shutdown.c:550
#3  0xc019188b in propagate_priority (td=0x0) at /usr/src/sys/kern/kern_mutex.c:124
#4  0xc01920a9 in _mtx_lock_sleep (m=0xc0376180, opts=0, 
    file=0xc030046e "/usr/src/sys/i386/i386/vm_machdep.c", line=633) at /usr/src/sys/kern/kern_mutex.c:635
#5  0xc0191af7 in _mtx_lock_flags (m=0xc0376180, opts=0, 
    file=0xc030046e "/usr/src/sys/i386/i386/vm_machdep.c", line=633) at /usr/src/sys/kern/kern_mutex.c:333
#6  0xc02c2ad5 in sf_buf_free (addr=0x0, args=0xc1416ec8) at /usr/src/sys/i386/i386/vm_machdep.c:633
#7  0xc01baa66 in m_free (mb=0xc0a22a00) at /usr/src/sys/kern/subr_mbuf.c:1376
#8  0xc01dc717 in sbdrop (sb=0xc1768284, len=263) at /usr/src/sys/kern/uipc_socket2.c:792
#9  0xc022bb8c in tcp_input (m=0xc0a14b00, off0=20) at /usr/src/sys/netinet/tcp_input.c:1973
#10 0xc0221893 in ip_input (m=0xc0a14b00) at /usr/src/sys/netinet/ip_input.c:950
#11 0xc020cca2 in swi_net (dummy=0x0) at /usr/src/sys/net/netisr.c:236
b#12 0xc0189692 in ithread_loop (arg=0xc09f9c00) at /usr/src/sys/kern/kern_intr.c:534
t #13 0xc01886bf in fork_exit (callout=0xc0189510 <ithread_loop>, arg=0x0, frame=0x0)
    at /usr/src/sys/kern/kern_fork.c:796
(kgdb) bt full
#0  doadump () at /usr/src/sys/kern/kern_shutdown.c:240
No locals.
#1  0xc019b6ef in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:372
No locals.
#2  0xc019ba77 in panic () at /usr/src/sys/kern/kern_shutdown.c:550
        td = (struct thread *) 0xc0a07ab0
        bootopt = 260
        newpanic = 0
        ap = 0xc6242a3c "\t"
        buf = "recurse", '\0' <repeats 248 times>
#3  0xc019188b in propagate_priority (td=0x0) at /usr/src/sys/kern/kern_mutex.c:124
        td1 = (struct thread *) 0x0
        pri = 40
        m = (struct mtx *) 0xc0376180
#4  0xc01920a9 in _mtx_lock_sleep (m=0xc0376180, opts=0, 
    file=0xc030046e "/usr/src/sys/i386/i386/vm_machdep.c", line=633) at /usr/src/sys/kern/kern_mutex.c:635
        td = (struct thread *) 0xc0a07ab0
        td1 = (struct thread *) 0x0
        v = 0
#5  0xc0191af7 in _mtx_lock_flags (m=0xc0376180, opts=0, 
    file=0xc030046e "/usr/src/sys/i386/i386/vm_machdep.c", line=633) at /usr/src/sys/kern/kern_mutex.c:333
No locals.
#6  0xc02c2ad5 in sf_buf_free (addr=0x0, args=0xc1416ec8) at /usr/src/sys/i386/i386/vm_machdep.c:633
        sf = (struct sf_buf *) 0x279
        m = (struct vm_page *) 0xc0376180
#7  0xc01baa66 in m_free (mb=0xc0a22a00) at /usr/src/sys/kern/subr_mbuf.c:1376
        nb = (struct mbuf *) 0xc030046e
        cchnum = 390
        persist = 0
#8  0xc01dc717 in sbdrop (sb=0xc1768284, len=263) at /usr/src/sys/kern/uipc_socket2.c:792
        m = (struct mbuf *) 0x0
        next = (struct mbuf *) 0x0
#9  0xc022bb8c in tcp_input (m=0xc0a14b00, off0=20) at /usr/src/sys/netinet/tcp_input.c:1973
        th = (struct tcphdr *) 0xc0c1a834
        ip = (struct ip *) 0xc0c1a820
        ipov = (struct ipovly *) 0x10
---Type <return> to continue, or q <return> to quit--- 
        inp = (struct inpcb *) 0xc1753b94
        optp = (u_char *) 0x0
        optlen = 0
        len = 1452
        tlen = 0
        off = 1452
        drop_hdrlen = 40
        tp = (struct tcpcb *) 0xc16ea858
        thflags = 16
        so = (struct socket *) 0xc1768200
        todrop = 1452
        acked = 1452
        ourfinisacked = 1452
        needoutput = 0
        tiwin = 4288
        to = {to_flags = 0, to_tsval = 0, to_tsecr = 0, to_cc = 0, to_ccecho = 0, to_mss = 0, 
  to_requested_s_scale = 0 '\0', to_pad = 0 '\0'}
        taop = (struct rmxp_tao *) 0x5ac
        tao_noncached = {tao_cc = 1183262627, tao_ccsent = 3231666176, tao_mssopt = 12306}
        headlocked = 1
        next_hop = (struct sockaddr_in *) 0x0
        rstreason = 1452
#10 0xc0221893 in ip_input (m=0xc0a14b00) at /usr/src/sys/netinet/ip_input.c:950
        ip = (struct ip *) 0xc0c1a820
        fp = (struct ipq *) 0xc6242c68
        ia = (struct in_ifaddr *) 0xc157c800
        ifa = (struct ifaddr *) 0x0
        i = 0
        hlen = 20
        checkif = 1
        sum = 0
        pkt_dst = {s_addr = 126970842}
        divert_info = 0
        args = {m = 0xc0191c00, oif = 0x0, next_hop = 0x0, rule = 0x0, eh = 0x0, ro = 0xe0000000, 
  dst = 0xc0369ff4, flags = 233, f_id = {dst_ip = 3224305229, src_ip = 3324259512, dst_port = 7120, 
    src_port = 49177, proto = 244 '?, flags = 159 '\237'}, divert_rule = 0, retval = 3224267492}
---Type <return> to continue, or q <return> to quit---
#11 0xc020cca2 in swi_net (dummy=0x0) at /usr/src/sys/net/netisr.c:236
        ni = (struct netisr *) 0xc0367030
        m = (struct mbuf *) 0xc0a14b00
        bits = 2147483648
        i = 0
#12 0xc0189692 in ithread_loop (arg=0xc09f9c00) at /usr/src/sys/kern/kern_intr.c:534
        ithd = (struct ithd *) 0xc09f9c00
        ih = (struct intrhand *) 0xc09fdd80
        td = (struct thread *) 0xc0a07ab0
        p = (struct proc *) 0xc0a06790
#13 0xc01886bf in fork_exit (callout=0xc0189510 <ithread_loop>, arg=0x0, frame=0x0)
    at /usr/src/sys/kern/kern_fork.c:796
        p = (struct proc *) 0xc0a06790
        td = (struct thread *) 0xc0a07ab0
============================================================================================

Panic #3:
============================================================================================
gdb -k kernel.debug /var/crash/vmcore.2
GNU gdb 5.2.1 (FreeBSD)
Copyright 2002 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-undermydesk-freebsd"...
panic: recurse
panic messages:
---
panic: recurse
Stack backtrace:

syncing disks, buffers remaining... panic: sleeping thread (pid 9) owns a mutex
Uptime: 2m52s
Dumping 63 MB
 16 32 48
---
Reading symbols from /usr/obj/usr/src/sys/BEASTIE/modules/usr/src/sys/modules/acpi/acpi.ko.debug...done.
Loaded symbols for /usr/obj/usr/src/sys/BEASTIE/modules/usr/src/sys/modules/acpi/acpi.ko.debug
#0  doadump () at /usr/src/sys/kern/kern_shutdown.c:240
240             dumping++;
(kgdb) where
#0  doadump () at /usr/src/sys/kern/kern_shutdown.c:240
#1  0xc019b6ef in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:372
#2  0xc019ba77 in panic () at /usr/src/sys/kern/kern_shutdown.c:550
#3  0xc019188b in propagate_priority (td=0x0) at /usr/src/sys/kern/kern_mutex.c:124
#4  0xc01920a9 in _mtx_lock_sleep (m=0xc0376180, opts=0, 
    file=0xc030046e "/usr/src/sys/i386/i386/vm_machdep.c", line=633) at /usr/src/sys/kern/kern_mutex.c:635
#5  0xc0191af7 in _mtx_lock_flags (m=0xc0376180, opts=0, 
    file=0xc030046e "/usr/src/sys/i386/i386/vm_machdep.c", line=633) at /usr/src/sys/kern/kern_mutex.c:333
#6  0xc02c2ad5 in sf_buf_free (addr=0x0, args=0xc14169a0) at /usr/src/sys/i386/i386/vm_machdep.c:633
#7  0xc01baa66 in m_free (mb=0xc0a22600) at /usr/src/sys/kern/subr_mbuf.c:1376
#8  0xc01dc717 in sbdrop (sb=0xc17a8384, len=876) at /usr/src/sys/kern/uipc_socket2.c:792
#9  0xc022aaf3 in tcp_input (m=0xc0a1d700, off0=20) at /usr/src/sys/netinet/tcp_input.c:1048
#10 0xc0221893 in ip_input (m=0xc0a1d700) at /usr/src/sys/netinet/ip_input.c:950
#11 0xc020cca2 in swi_net (dummy=0x0) at /usr/src/sys/net/netisr.c:236
#12 0xc0189692 in ithread_loop (arg=0xc09f9c00) at /usr/src/sys/kern/kern_intr.c:534
#13 0xc01886bf in fork_exit (callout=0xc0189510 <ithread_loop>, arg=0x0, frame=0x0)
    at /usr/src/sys/kern/kern_fork.c:796
(kgdb) bt full
#0  doadump () at /usr/src/sys/kern/kern_shutdown.c:240
No locals.
#1  0xc019b6ef in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:372
No locals.
#2  0xc019ba77 in panic () at /usr/src/sys/kern/kern_shutdown.c:550
        td = (struct thread *) 0xc0a07ab0
        bootopt = 260
        newpanic = 0
        ap = 0xc6242a3c "\t"
        buf = "recurse", '\0' <repeats 248 times>
#3  0xc019188b in propagate_priority (td=0x0) at /usr/src/sys/kern/kern_mutex.c:124
        td1 = (struct thread *) 0x0
        pri = 40
        m = (struct mtx *) 0xc0376180
#4  0xc01920a9 in _mtx_lock_sleep (m=0xc0376180, opts=0, 
    file=0xc030046e "/usr/src/sys/i386/i386/vm_machdep.c", line=633) at /usr/src/sys/kern/kern_mutex.c:635
        td = (struct thread *) 0xc0a07ab0
        td1 = (struct thread *) 0x0
        v = 0
#5  0xc0191af7 in _mtx_lock_flags (m=0xc0376180, opts=0, 
    file=0xc030046e "/usr/src/sys/i386/i386/vm_machdep.c", line=633) at /usr/src/sys/kern/kern_mutex.c:333
No locals.
#6  0xc02c2ad5 in sf_buf_free (addr=0x0, args=0xc14169a0) at /usr/src/sys/i386/i386/vm_machdep.c:633
        sf = (struct sf_buf *) 0x279
        m = (struct vm_page *) 0xc0376180
#7  0xc01baa66 in m_free (mb=0xc0a22600) at /usr/src/sys/kern/subr_mbuf.c:1376
        nb = (struct mbuf *) 0xc030046e
        cchnum = -970708204
        persist = 0
#8  0xc01dc717 in sbdrop (sb=0xc17a8384, len=876) at /usr/src/sys/kern/uipc_socket2.c:792
        m = (struct mbuf *) 0x0
        next = (struct mbuf *) 0x0
#9  0xc022aaf3 in tcp_input (m=0xc0a1d700, off0=20) at /usr/src/sys/netinet/tcp_input.c:1048
        th = (struct tcphdr *) 0xc0c6e834
        ip = (struct ip *) 0xc0c6e820
        ipov = (struct ipovly *) 0x10
---Type <return> to continue, or q <return> to quit---
        inp = (struct inpcb *) 0xc1786c78
        optp = (u_char *) 0x0
        optlen = 0
        len = 2864
        tlen = 0
        off = 2864
        drop_hdrlen = 40
        tp = (struct tcpcb *) 0xc1772b20
        thflags = 16
        so = (struct socket *) 0xc17a8300
        todrop = 2864
        acked = 2864
        ourfinisacked = 2864
        needoutput = 0
        tiwin = 17184
        to = {to_flags = 0, to_tsval = 0, to_tsecr = 0, to_cc = 0, to_ccecho = 0, to_mss = 0, 
  to_requested_s_scale = 0 '\0', to_pad = 0 '\0'}
        taop = (struct rmxp_tao *) 0xb30
        tao_noncached = {tao_cc = 3481331251, tao_ccsent = 3231666176, tao_mssopt = 40978}
        headlocked = 1
        next_hop = (struct sockaddr_in *) 0x0
        rstreason = 2864
#10 0xc0221893 in ip_input (m=0xc0a1d700) at /usr/src/sys/netinet/ip_input.c:950
        ip = (struct ip *) 0xc0c6e820
        fp = (struct ipq *) 0xc6242c68
        ia = (struct in_ifaddr *) 0xc157c200
        ifa = (struct ifaddr *) 0x0
        i = 0
        hlen = 20
        checkif = 1
        sum = 0
        pkt_dst = {s_addr = 126970842}
        divert_info = 0
        args = {m = 0xc0191c00, oif = 0x0, next_hop = 0x0, rule = 0x0, eh = 0x0, ro = 0xe0000000, 
  dst = 0xc0369ff4, flags = 233, f_id = {dst_ip = 3224305229, src_ip = 3324259512, dst_port = 7120, 
    src_port = 49177, proto = 244 '?, flags = 159 '\237'}, divert_rule = 0, retval = 3224267492}
---Type <return> to continue, or q <return> to quit---
#11 0xc020cca2 in swi_net (dummy=0x0) at /usr/src/sys/net/netisr.c:236
        ni = (struct netisr *) 0xc0367030
        m = (struct mbuf *) 0xc0a1d700
        bits = 2147483648
        i = 0
#12 0xc0189692 in ithread_loop (arg=0xc09f9c00) at /usr/src/sys/kern/kern_intr.c:534
        ithd = (struct ithd *) 0xc09f9c00
        ih = (struct intrhand *) 0xc09fdd80
        td = (struct thread *) 0xc0a07ab0
        p = (struct proc *) 0xc0a06790
#13 0xc01886bf in fork_exit (callout=0xc0189510 <ithread_loop>, arg=0x0, frame=0x0)
    at /usr/src/sys/kern/kern_fork.c:796
        p = (struct proc *) 0xc0a06790
        td = (struct thread *) 0xc0a07ab0
============================================================================================

Panic #4:
============================================================================================
beastie# gdb -k kernel.debug /var/crash/vmcore.3
GNU gdb 5.2.1 (FreeBSD)
Copyright 2002 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-undermydesk-freebsd"...
panic: sent too much
panic messages:
---
panic: sent too much
Stack backtrace:

syncing disks, buffers remaining... panic: sleeping thread (pid 13) owns a mutex
Uptime: 3m26s
Dumping 63 MB
 16 32 48
---
Reading symbols from /usr/obj/usr/src/sys/BEASTIE/modules/usr/src/sys/modules/acpi/acpi.ko.debug...done.
Loaded symbols for /usr/obj/usr/src/sys/BEASTIE/modules/usr/src/sys/modules/acpi/acpi.ko.debug
#0  doadump () at /usr/src/sys/kern/kern_shutdown.c:240
240             dumping++;
(kgdb) where
#0  doadump () at /usr/src/sys/kern/kern_shutdown.c:240
#1  0xc019b6ef in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:372
#2  0xc019ba77 in panic () at /usr/src/sys/kern/kern_shutdown.c:550
#3  0xc019188b in propagate_priority (td=0x0) at /usr/src/sys/kern/kern_mutex.c:124
#4  0xc01920a9 in _mtx_lock_sleep (m=0xc0370aec, opts=0, file=0xc02f2364 "/usr/src/sys/netinet/tcp_timer.c", 
    line=180) at /usr/src/sys/kern/kern_mutex.c:635
#5  0xc0191af7 in _mtx_lock_flags (m=0xc0370aec, opts=0, file=0xc02f2364 "/usr/src/sys/netinet/tcp_timer.c", 
    line=180) at /usr/src/sys/kern/kern_mutex.c:333
#6  0xc02312a6 in tcp_timer_delack (xtp=0xc18146f4) at /usr/src/sys/netinet/tcp_timer.c:180
#7  0xc01ac1eb in softclock (dummy=0x0) at /usr/src/sys/kern/kern_timeout.c:225
#8  0xc0189692 in ithread_loop (arg=0xc09f9d00) at /usr/src/sys/kern/kern_intr.c:534
#9  0xc01886bf in fork_exit (callout=0xc0189510 <ithread_loop>, arg=0x0, frame=0x0)
    at /usr/src/sys/kern/kern_fork.c:796
(kgdb) bt full
#0  doadump () at /usr/src/sys/kern/kern_shutdown.c:240
No locals.
#1  0xc019b6ef in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:372
No locals.
#2  0xc019ba77 in panic () at /usr/src/sys/kern/kern_shutdown.c:550
        td = (struct thread *) 0xc0a07850
        bootopt = 260
        newpanic = 0
        ap = 0xc623cbd8 "\r"
        buf = "sent too much", '\0' <repeats 242 times>
#3  0xc019188b in propagate_priority (td=0x0) at /usr/src/sys/kern/kern_mutex.c:124
        td1 = (struct thread *) 0x0
        pri = 64
        m = (struct mtx *) 0xc0370aec
#4  0xc01920a9 in _mtx_lock_sleep (m=0xc0370aec, opts=0, file=0xc02f2364 "/usr/src/sys/netinet/tcp_timer.c", 
    line=180) at /usr/src/sys/kern/kern_mutex.c:635
        td = (struct thread *) 0xc0a07850
        td1 = (struct thread *) 0x0
        v = 0
#5  0xc0191af7 in _mtx_lock_flags (m=0xc0370aec, opts=0, file=0xc02f2364 "/usr/src/sys/netinet/tcp_timer.c", 
    line=180) at /usr/src/sys/kern/kern_mutex.c:333
No locals.
#6  0xc02312a6 in tcp_timer_delack (xtp=0xc18146f4) at /usr/src/sys/netinet/tcp_timer.c:180
        tp = (struct tcpcb *) 0xc0370aec
        inp = (struct inpcb *) 0xb4
#7  0xc01ac1eb in softclock (dummy=0x0) at /usr/src/sys/kern/kern_timeout.c:225
        c_func = (void (*)(void *)) 0xc0231270 <tcp_timer_delack>
        c_arg = (void *) 0xc18146f4
        c_flags = -1070652572
        c = (struct callout *) 0x0
        bucket = (struct callout_tailq *) 0xc277b858
        curticks = 20519
        steps = -1070134548
        depth = 2
        mpcalls = 1
        gcalls = 1
---Type <return> to continue, or q <return> to quit---
        bt1 = {sec = 206, frac = 3020292737246421877}
        bt2 = {sec = 0, frac = 128818686321450}
        ts2 = {tv_sec = 547, tv_nsec = 206}
        maxdt = 362900792606481920
#8  0xc0189692 in ithread_loop (arg=0xc09f9d00) at /usr/src/sys/kern/kern_intr.c:534
        ithd = (struct ithd *) 0xc09f9d00
        ih = (struct intrhand *) 0xc09fde00
        td = (struct thread *) 0xc0a07850
        p = (struct proc *) 0xc0a06b58
#9  0xc01886bf in fork_exit (callout=0xc0189510 <ithread_loop>, arg=0x0, frame=0x0)
    at /usr/src/sys/kern/kern_fork.c:796
        p = (struct proc *) 0xc0a06b58
        td = (struct thread *) 0xc0a07850
============================================================================================

It's a pity that I don't have much time to research on this problem, hope these information helpful, and, please fell free to ask more information if you need. Thanks in advance!

Xin LI
Received on Thu Sep 04 2003 - 00:31:55 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:37:21 UTC