Re: panic upon kldunload snd_ich (lor # 159)

On 9/12/05, Pyun YongHyeon <pyunyh_at_gmail.com> wrote:
> 
> On Mon, Sep 12, 2005 at 04:04:48AM +0000, Ben Kaduk wrote:
> > Hi everyone,
> >
> > I see that this panic is caused by lor #159
> > http://sources.zabbadoz.net/freebsd/lor.html#159
> > but I figured I'd report it to see if it will help anyone
> >
> > Booting to single user and issuing:
> > # kldload snd_ich
> > # kldunload snd_ich
> >
> > are sufficient to trigger the panic on my system. I know that Alexander
> > Leidinger has recently committed some bits to current in the sound code, 
> but
> > it is unclear if it will fix my panic; I'm currently cvsup-ing and 
> building
> > world to find out.
> >
> > The machine in question is:
> >
> > bash-2.05b$ uname -a
> > FreeBSD prolepsis.math.uiuc.edu <http://prolepsis.math.uiuc.edu> <
> http://prolepsis.math.uiuc.edu>
> > 7.0-CURRENTFreeBSD
> > 7.0-CURRENT #9: Thu Aug 25 06:22:00 UTC 2005
> > kaduk_at_prolepsis.math.uiuc.edu:/usr/obj/usr/src/sys/PROLEPSIS
> > i386
> >
> > As shown below, I have a core to play with, so if this needs fixing, 
> tell me
> > what I can do to help.
> >
> I think the LOR you seen is not cause of panic. As you've got core, would
> you please give us full back-trace with symbol information?
> See 
> http://www.freebsd.org/doc/en_US.ISO8859-1/books/developers-handbook/kerneldebug-kld.htmlfor more datils.
> And make sure to rebuild sound driver module with debugging information 
> too.
> --
> Regards,
> Pyun YongHyeon
> 
(sorry if this double-sent; gmail timed out)


Thanks for the link, Pyun. I think I found the right snd_ich.ko.debug 
(luckily I got this before my buildworld finished and I nuked the old 
modules), and this is all I can get:

(kgdb) bt full
#0 doadump () at pcpu.h:165
No locals.
#1 0xc04492fa in db_fncall (dummy1=0, dummy2=0, dummy3=1999,
dummy4=0xef8fca38 " TtÀ") at /usr/src/sys/ddb/db_command.c:486
fn_addr = -1068258876
args = {0, -275789308, -1066987413, -1065742880, 28, -275789308,
-1069241393, 32, -1066323808, 2}
nargs = 0
retval = 544870080
t = 0
#2 0xc04490a4 in db_command (last_cmdp=0xc0744b24, cmd_table=0x0,
aux_cmd_tablep=0xc070d9e4, aux_cmd_tablep_end=0xc070d9e8)
at /usr/src/sys/ddb/db_command.c:401
cmd = (struct command *) 0xc0713220
t = 0
modif = " 
TtÀ\000\000\000\000TÊ\217ï\r\000\000\000à>{À\r\000\000\000\001\000\000\000tÊ\217ï\026ðhÀà\rzÀ\aK\000
d?{À \206yÀ TtÀx\000\000\000 
TtÀ\000\000\000\000\230Ê\217ï\037´DÀY§nÀØ°DÀ\000\000\000\000\020\000\000\000\000\000\000\000
TtÀà§DÀ TtÀØKtÀx\000\000\000üÊ\217ï"
addr = 0
count = 1999
have_addr = 0
result = 0
---Type <return> to continue, or q <return> to quit---
#3 0xc0449195 in db_command_loop () at /usr/src/sys/ddb/db_command.c:452
No locals.
#4 0xc044b039 in db_trap (type=3, code=0) at /usr/src/sys/ddb/db_main.c:221
jb = {{_jb = {-275789060, -275789088, -275789008, -1025104320, 0,
-1069240360, 0, 0, 0, 0, -275789008, -1068140841}}}
prev_jb = (void *) 0x0
bkpt = 0
#5 0xc055775c in kdb_trap (type=0, code=0, tf=0xef8fcb84)
at /usr/src/sys/kern/subr_kdb.c:473
handled = -275788924
#6 0xc06adfea in trap (frame=
{tf_fs = -1066532856, tf_es = 40, tf_ds = -275840984, tf_edi = 1, tf_esi = 
-1066488724, tf_ebp = -275788852, tf_isp = -275788880, tf_ebx = -275788796, 
tf_edx = 1, tf_ecx = -1052684288, tf_eax = 18, tf_trapno = 3, tf_err = 0, 
tf_eip = -1068141358, tf_cs = 32, tf_eflags = 646, tf_esp = -1066481942, 
tf_ss = -1066490330})
at /usr/src/sys/i386/i386/trap.c:601
td = (struct thread *) 0xc2e62640
p = (struct proc *) 0xc2e61c48
sticks = 3226793233
i = 0
ucode = 0
type = 3
code = 0
---Type <return> to continue, or q <return> to quit---
eva = 0
#7 0xc069c18a in calltrap () at /usr/src/sys/i386/i386/exception.s:139
No locals.
#8 0xc06e0008 in ?? ()
No symbol table info available.
#9 0x00000028 in ?? ()
No symbol table info available.
#10 0xef8f0028 in ?? ()
No symbol table info available.
#11 0x00000001 in ?? ()
No symbol table info available.
#12 0xc06eac6c in ?? ()
No symbol table info available.
#13 0xef8fcbcc in ?? ()
No symbol table info available.
#14 0xef8fcbb0 in ?? ()
No symbol table info available.
#15 0xef8fcc04 in ?? ()
No symbol table info available.
#16 0x00000001 in ?? ()
No symbol table info available.
#17 0xc1415000 in ?? ()
No symbol table info available.
---Type <return> to continue, or q <return> to quit---
#18 0x00000012 in ?? ()
No symbol table info available.
#19 0x00000003 in ?? ()
No symbol table info available.
#20 0x00000000 in ?? ()
No symbol table info available.
#21 0xc05574d2 in kdb_enter (msg=0x0) at cpufunc.h:60
No locals.
#22 0xc053b25c in panic (fmt=0xc06eac6c "%s (%s): holders or waiters\n")
at /usr/src/sys/kern/kern_shutdown.c:537
td = (struct thread *) 0xc2e62640
bootopt = 256
newpanic = 1
ap = 0xef8fcc04 "¶\232lÀÏmÛ ¥ÛÂ$Ì\217ïÛ*Û ½ÛÂ×mÛÂg\001"
buf = "sx_destroy (sndstat): holders or waiters\n", '\0' <repeats 214 times>
#23 0xc05412e2 in sx_destroy (sx=0xc2dbbda0) at 
/usr/src/sys/kern/kern_sx.c:96
__func__ = "sx_destroy"
#24 0xc2db2adb in ?? ()
No symbol table info available.
#25 0xc2dbbda0 in ?? ()
No symbol table info available.
#26 0xc2db6dd7 in ?? ()
---Type <return> to continue, or q <return> to quit---
No symbol table info available.
#27 0x00000167 in ?? ()
No symbol table info available.
#28 0xef8fcc50 in ?? ()
No symbol table info available.
#29 0xc052ad83 in linker_file_sysuninit (lf=0x0)
at /usr/src/sys/kern/kern_linker.c:238
start = (struct sysinit **) 0xc2db2adb
stop = (struct sysinit **) 0xc2dbbda0
sipp = (struct sysinit **) 0xc2db74c8
xipp = (struct sysinit **) 0x0
save = (struct sysinit *) 0x0




hope this helps; I should be able to get back with info about today's 
current tomorrow night.

Ben Kaduk