Re: kernel panic

From: Alex Lyashkov <shadow_at_psoft.net>
Date: Mon, 27 Jun 2005 00:06:13 +0300
Same panic with RELENG_5. UP box - SACK disabled.
It fixed with downgrade to RELENG_5_4.

> #2  0xc04aafb0 in panic (fmt=0xc0610e42 "sbflush_locked: cc %u || mb
%p
> || mbcnt %u")
>    at /usr/src/sys/kern/kern_shutdown.c:566
>        td = (struct thread *) 0xc11cec00
>        bootopt = 260
>        newpanic = 0
>        ap = 0xc11cec00 "L\005I?_at_?\031?"
>        buf = "sbflush_locked: cc 0 || mb 0xc135f300 || mbcnt 0", '\0'
> <repeats 207 times>
> #3  0xc04e4a07 in sbflush_locked (sb=0xc1d3e6a4) at
> /usr/src/sys/kern/uipc_socket2.c:1119
> No locals.
> #4  0xc04e4a46 in sbflush (sb=0xc1d3e6a4) at
> /usr/src/sys/kern/uipc_socket2.c:1128
> No locals.
> #5  0xc055902f in tcp_disconnect (tp=0xc1da11bc) at
> /usr/src/sys/netinet/tcp_usrreq.c:1226
>        so = (struct socket *) 0xc1d3e654
> #6  0xc0557f58 in tcp_usr_disconnect (so=0x0) at
> /usr/src/sys/netinet/tcp_usrreq.c:445
>        inp = (struct inpcb *) 0xc1cebb40
>        tp = (struct tcpcb *) 0x0
> #7  0xc04e050a in sodisconnect (so=0x0) at
> /usr/src/sys/kern/uipc_socket.c:579
> No locals.
> #8  0xc04e012c in soclose (so=0xc1d3e654) at
> /usr/src/sys/kern/uipc_socket.c:458
>        error = 0
> #9  0xc04d0c3f in soo_close (fp=0xc19e9d48, td=0xc11cec00) at
> /usr/src/sys/kern/sys_socket.c:299
>        error = 0
>        so = (struct socket *) 0x0
> #10 0xc048d200 in fdrop_locked (fp=0xc19e9d48, td=0xc11cec00) at
> file.h:288
>        error = 0
> #11 0xc048d151 in fdrop (fp=0xc19e9d48, td=0xc11cec00) at
> /usr/src/sys/kern/kern_descrip.c:2101
> No locals.
> #12 0xc048b81b in closef (fp=0xc19e9d48, td=0xc11cec00) at
> /usr/src/sys/kern/kern_descrip.c:1918
>        vp = (struct vnode *) 0x0
>        lf = {l_start = 579614447286217896, l_len =
> -3085549963380260856, l_pid = 0, l_type = 0, l_whence = 0}
>        fdtol = (struct filedesc_to_leader *) 0xd52deca8
>        fdp = (struct filedesc *) 0xc142c400
> #13 0xc0488d05 in close (td=0xc11cec00, uap=0x0) at
> /usr/src/sys/kern/kern_descrip.c:1004
>        fdp = (struct filedesc *) 0xc142c400
>        fp = (struct file *) 0xc19e9d48
>        fd = 45
>        error = -1068914549
>        holdleaders = 0
> #14 0xc05e45b3 in syscall (frame=
>      {tf_fs = 47, tf_es = 47, tf_ds = -1088225233, tf_edi = 136442880,
> tf_esi = -1085465088, tf_ebp = -1085465192, tf_isp = -718410396,
tf_ebx
> = 673633468, tf_edx = 148024960, tf_ecx = 135296768, tf_eax = 6,
> tf_trapno = 0, tf_err = 2, tf_eip = 673966799, tf_cs = 31, tf_eflags =
> 646, tf_esp = -1085465236, tf_ss = 47}) at
> /usr/src/sys/i386/i386/trap.c:1009
>
> (kgdb) p *sb
> $1 = {sb_sel = {si_thrlist = {tqe_next = 0x0, tqe_prev = 0xc1d06030},
> si_thread = 0x0, si_note = {kl_lock = 0xc1d3e6bc,
>      kl_list = {slh_first = 0x0}}, si_flags = 0}, sb_mtx = {mtx_object
> = {lo_class = 0xc063497c,
>      lo_name = 0xc0610dc2 "so_rcv", lo_type = 0xc0610dc2 "so_rcv",
> lo_flags = 196608, lo_list = {tqe_next = 0x0,
>        tqe_prev = 0x0}, lo_witness = 0x0}, mtx_lock = 3239898112,
> mtx_recurse = 0}, sb_mb = 0xc135f300,
>  sb_mbtail = 0xc1366600, sb_lastrecord = 0xc135f300, sb_cc = 0,
> sb_hiwat = 66176, sb_mbcnt = 0, sb_mbmax = 262144,
>  sb_ctl = 0, sb_lowat = 1, sb_timeo = 0, sb_flags = 0, sb_state = 32}
> (kgdb) f 5
> #5  0xc055902f in tcp_disconnect (tp=0xc1da11bc) at
> /usr/src/sys/netinet/tcp_usrreq.c:1226
> 1226                    sbflush(&so->so_rcv);
> (kgdb) p so
> $2 = (struct socket *) 0xc1d3e654
> (kgdb) p *so
> $3 = {so_count = 1, so_type = 1, so_options = 4, so_linger = 0,
so_state
> = 266, so_qstate = 0, so_pcb = 0xc1cebb40,
>  so_proto = 0xc063ff28, so_head = 0x0, so_incomp = {tqh_first = 0x0,
> tqh_last = 0x0}, so_comp = {tqh_first = 0x0,
>    tqh_last = 0x0}, so_list = {tqe_next = 0x0, tqe_prev = 0xc1810534},
> so_qlen = 0, so_incqlen = 0, so_qlimit = 0,
>  so_timeo = 0, so_error = 0, so_sigio = 0x0, so_oobmark = 0,
so_aiojobq
> = {tqh_first = 0x0, tqh_last = 0xc1d3e69c},
>  so_rcv = {sb_sel = {si_thrlist = {tqe_next = 0x0, tqe_prev =
> 0xc1d06030}, si_thread = 0x0, si_note = {
>        kl_lock = 0xc1d3e6bc, kl_list = {slh_first = 0x0}}, si_flags =
> 0}, sb_mtx = {mtx_object = {lo_class = 0xc063497c,
>        lo_name = 0xc0610dc2 "so_rcv", lo_type = 0xc0610dc2 "so_rcv",
> lo_flags = 196608, lo_list = {tqe_next = 0x0,
>          tqe_prev = 0x0}, lo_witness = 0x0}, mtx_lock = 3239898112,
> mtx_recurse = 0}, sb_mb = 0xc135f300,
>    sb_mbtail = 0xc1366600, sb_lastrecord = 0xc135f300, sb_cc = 0,
> sb_hiwat = 66176, sb_mbcnt = 0, sb_mbmax = 262144,
>    sb_ctl = 0, sb_lowat = 1, sb_timeo = 0, sb_flags = 0, sb_state =
> 32}, so_snd = {sb_sel = {si_thrlist = {
>        tqe_next = 0x0, tqe_prev = 0x0}, si_thread = 0x0, si_note =
> {kl_lock = 0xc1d3e724, kl_list = {slh_first = 0x0}},
>      si_flags = 0}, sb_mtx = {mtx_object = {lo_class = 0xc063497c,
> lo_name = 0xc0610dbb "so_snd",
>        lo_type = 0xc0610dbb "so_snd", lo_flags = 196608, lo_list =
> {tqe_next = 0x0, tqe_prev = 0x0}, lo_witness = 0x0},
>      mtx_lock = 4, mtx_recurse = 0}, sb_mb = 0xc18bec00, sb_mbtail =
> 0xc18bec00, sb_lastrecord = 0xc18bec00, sb_cc = 529,
>    sb_hiwat = 33792, sb_mbcnt = 2304, sb_mbmax = 262144, sb_ctl = 0,
> sb_lowat = 2048, sb_timeo = 0, sb_flags = 0,
>    sb_state = 16}, so_upcall = 0, so_upcallarg = 0x0, so_cred =
> 0xc1413500, so_label = 0x0, so_peerlabel = 0x0,
>  so_gencnt = 17291, so_emuldata = 0x0, so_accf = 0x0}
> (kgdb) p *tp
> $4 = {t_segq = {lh_first = 0x0}, t_segqlen = 0, t_dupacks = 0, unused
=
> 0x0, tt_rexmt = 0xc1da1300,
>  tt_persist = 0xc1da1318, tt_keep = 0xc1da1330, tt_2msl = 0xc1da1348,
> tt_delack = 0xc1da1360, t_inpcb = 0xc1cebb40,
>  t_state = 4, t_flags = 992, t_force = 0, snd_una = 683843078, snd_max
> = 683843350, snd_nxt = 683843350,
>  snd_up = 683843078, snd_wl1 = 567974456, snd_wl2 = 683843078, iss =
> 683843077, irs = 567974455, rcv_nxt = 567974822,
>  rcv_adv = 568040998, rcv_wnd = 66176, rcv_up = 567974456, snd_wnd =
> 132352, snd_cwnd = 1408, snd_bwnd = 1073725440,
>  snd_ssthresh = 2896, snd_bandwidth = 63746785, snd_recover =
> 683843078, t_maxopd = 1420, t_rcvtime = 1401062,
>  t_starttime = 1401057, t_rtttime = 1405584, t_rtseq = 683843078,
> t_bw_rtttime = 1401057, t_bw_rtseq = 0, t_rxtcur = 382,
>  t_maxseg = 1408, t_srtt = 1086, t_rttvar = 595, t_rxtshift = 0,
> t_rttmin = 3, t_rttbest = 1236, t_rttupdated = 1,
>  max_sndwnd = 132352, t_softerror = 0, t_oobflags = 0 '\0', t_iobc = 0
> '\0', snd_scale = 2 '\002', rcv_scale = 1 '\001',
>  request_r_scale = 1 '\001', requested_s_scale = 2 '\002', ts_recent =
> 716722322, ts_recent_age = 1401062,
>  last_ack_sent = 567974822, cc_send = 0, cc_recv = 0, snd_cwnd_prev =
> 0, snd_ssthresh_prev = 0, snd_recover_prev = 0,
>  t_badrxtwin = 0, snd_limited = 0 '\0', rcv_second = 0, rcv_pps = 0,
> rcv_byps = 0, sack_enable = 1, snd_numholes = 0,
>  snd_holes = 0x0, rcv_lastsack = 0, rcv_numsacks = 0, sackblks =
> {{start = 0, end = 0}, {start = 0, end = 0}, {start = 0,
>      end = 0}, {start = 0, end = 0}, {start = 0, end = 0}, {start = 0,
> end = 0}}, sack_newdata = 0}
> (kgdb)


В Вск, 26.06.2005, в 23:48, Yuriy N. Shkandybin пишет:
> I've got panic with cvsuped CURRENT-6 kernel from Fri Jun 24 14:11:40 MSD 2005
> This is HTT SMP machine with ADAPTIVE_GIANT and no PREEMTION or IPI_PREEMPTION 
> 
> Jura
> 
> 
> #0  doadump () at pcpu.h:165
> 165             __asm __volatile("movl %%fs:0,%0" : "=r" (td));
> (kgdb) bt
> #0  doadump () at pcpu.h:165
> #1  0xc04b8dd0 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:397
> #2  0xc04b961d in panic (fmt=0xc0646f02 "sbflush_locked: cc %u || mb %p || mbcnt %u")
>     at /usr/src/sys/kern/kern_shutdown.c:553
> #3  0xc050853f in sbflush_locked (sb=0xc40a2b1c) at /usr/src/sys/kern/uipc_socket2.c:1112
> #4  0xc0508572 in sbrelease_locked (sb=0xc40a2b1c, so=0x0) at /usr/src/sys/kern/uipc_socket2.c:557
> #5  0xc05052f2 in sofree (so=0xc40a2a60) at /usr/src/sys/kern/uipc_socket.c:402
> #6  0xc055b97f in in_pcbdetach (inp=0xc58944ec) at /usr/src/sys/netinet/in_pcb.c:728
> #7  0xc0572fca in tcp_close (tp=0x0) at /usr/src/sys/netinet/tcp_subr.c:779
> #8  0xc056f01f in tcp_input (m=0xc4dc8b00, off0=1) at /usr/src/sys/netinet/tcp_input.c:2200
> #9  0xc05669c5 in ip_input (m=0xc4dc8b00) at /usr/src/sys/netinet/ip_input.c:776
> #10 0xc0549831 in ether_demux (ifp=0xc319f000, m=0xc4dc8b00) at /usr/src/sys/net/if_ethersubr.c:850
> #11 0xc0549bf9 in ether_input (ifp=0xc319f000, m=0xc4dc8b00) at /usr/src/sys/net/if_ethersubr.c:640
> #12 0xc0447bde in em_intr (arg=0xc3169000) at /usr/src/sys/dev/em/if_em.c:2908
> #13 0xc04a1147 in ithread_loop (arg=0xc3099800) at /usr/src/sys/kern/kern_intr.c:545
> #14 0xc049fe3d in fork_exit (callout=0xc04a10a0 <ithread_loop>, arg=0x0, frame=0x0) at /usr/src/sys/kern/kern_fork.c:789
> #15 0xc060758c in fork_trampoline () at /usr/src/sys/i386/i386/exception.s:208
> _______________________________________________
> freebsd-current_at_freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-current
> To unsubscribe, send any mail to "freebsd-current-unsubscribe_at_freebsd.org"
-- 
FreeVPS Developers Team  http://www.freevps.com
Positive Software        http://www.psoft.net
Received on Sun Jun 26 2005 - 19:06:38 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:38:37 UTC