Re: kernel panic. pppoe

From: sekes <gexlie_at_gmail.com>
Date: Mon, 29 May 2006 15:13:59 +0400
here is it:

xnet# cd /usr/obj/usr/src/sys/GENERIC/
xnet# kgdb kernel.debug /var/crash/vmcore.0
[GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so:
Undefined symbol "ps_pglobal_lookup"]
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain
conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd".

Unread portion of the kernel message buffer:
panic: mutex Giant not owned at /usr/src/sys/net/if.c:2209
cpuid = 0
KDB: enter: panic
panic: from debugger
cpuid = 0
Uptime: 17m7s
Physical memory: 503 MB
Dumping 68 MB: 53 37 21 5

#0  doadump () at pcpu.h:166
166             __asm __volatile("movl %%fs:0,%0" : "=r" (td));
#0  doadump () at pcpu.h:166
No locals.
#1  0xc0693650 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:409
        first_buf_printf = 1
#2  0xc0693965 in panic (fmt=0xc08d1881 "from debugger") at
/usr/src/sys/kern/kern_shutdown.c:565
        td = (struct thread *) 0xc24a1870
        bootopt = 260
        newpanic = 0
        ap = 0xd364a834 "ä¨dÓìMGÀ«ÞjÀ"
        buf = "mutex Giant not owned at /usr/src/sys/net/if.c:2209", '\0'
<repeats 204 times>
#3  0xc0474e55 in db_panic (addr=-1066738005, have_addr=0, count=-1,
modif=0xd364a858 "") at /usr/src/sys/ddb/db_command.c:426
No locals.
#4  0xc0474dec in db_command (last_cmdp=0xc09e0e64, cmd_table=0x0) at
/usr/src/sys/ddb/db_command.c:395
        cmd = (struct command *) 0xc08a0f40
        t = 0
        modif =
"\000¨dÓø\003\000\000t¨dÓø\003\000\000\234¨dÓF\000\b\000\210¨dÓø\003\000\000\214¨dÓé(\206Àø\003\000\000ø\003\000\000\r\000\000\000´¨dÓê*\206À\234¨dÓø\003\000\000\f\000\017\003x\000\000\000`\027\236ÀF\000\b\000ȨdÓ|nGÀLö\220ÀTkGÀF\000\b\000`\027\236À\006cGÀ`\027\236À\220\017\236À"
        addr = -1066738005
        count = -1
        have_addr = 0
        result = 0
#5  0xc0474eaa in db_command_loop () at /usr/src/sys/ddb/db_command.c:446
No locals.
#6  0xc0476ac1 in db_trap (type=3, code=0) at /usr/src/sys/ddb/db_main.c:221
        jb = {{_jb = {-748377848, -748377868, -748377796, 1, 524358,
-1069061542, 10, -748377596, -1066729647, 18, 0, 536870912}}}
        prev_jb = (void *) 0x0
        bkpt = 0
#7  0xc06ae184 in kdb_trap (type=3, code=0, tf=0xd364a9e8) at
/usr/src/sys/kern/subr_kdb.c:481
        intr = 524358
        did_stop_cpus = 1
        handled = -748377624
#8  0xc088a560 in trap (frame=
      {tf_fs = -748421112, tf_es = -1066794968, tf_ds = -1064239064, tf_edi
= -1064245263, tf_esi = 1, tf_ebp = -748377560, tf_isp = -748377580, tf_ebx
= -748377516, tf_edx = 0, tf_ecx = -1056755712, tf_eax = 18, tf_trapno = 3,
tf_err = 0, tf_eip = -1066738005, tf_cs = 32, tf_eflags = 524934, tf_esp =
-748377528, tf_ss = -1066845929}) at /usr/src/sys/i386/i386/trap.c:622
        td = (struct thread *) 0xc24a1870
        p = (struct proc *) 0xc24a08d0
        i = 0
        ucode = 0
        type = 3
        code = 0
        addr = 0
        eva = 0
        ksi = {ksi_link = {tqe_next = 0xc090f503, tqe_prev = 0xd364a9ac},
ksi_info = {si_signo = -1064085553, si_errno = -748377704,
    si_code = 1, si_pid = 842018816, si_uid = 3259636018, si_status =
-748377668, si_addr = 0xc06a716f, si_value = {
      sival_int = -1063274320, sival_ptr = 0xc09fb8b0}, _reason = {_fault =
{_trapno = 2}, _timer = {_timerid = 2,
        _overrun = -1064235292}, _mesgq = {_mqd = 2}, _poll = {_band = 2},
__spare__ = {__spare1__ = 2, __spare2__ = {-1064235292, 622,
          -1035331472, -748377656, 524870, -1063249196, -748377644}}}},
ksi_flags = -1035331472, ksi_sigq = 0x0}
#9  0xc087580a in calltrap () at /usr/src/sys/i386/i386/exception.s:138
No locals.
#10 0xc06adeab in kdb_enter (msg=0x12 <Address 0x12 out of bounds>) at
cpufunc.h:60
No locals.
#11 0xc0693917 in panic (fmt=0xc090e7f1 "mutex %s not owned at %s:%d") at
/usr/src/sys/kern/kern_shutdown.c:549
        td = (struct thread *) 0xc24a1870
        bootopt = 256
        newpanic = 1
        ap = 0xd364aa54 "{K\222À2¢\221À¡\b"
        buf = "mutex Giant not owned at /usr/src/sys/net/if.c:2209", '\0'
<repeats 204 times>
#12 0xc068b50a in _mtx_assert (m=0xc09fb8c8, what=-1056755712,
file=0xc091a232 "/usr/src/sys/net/if.c", line=2209)
    at /usr/src/sys/kern/kern_mutex.c:754
No locals.
#13 0xc07021c6 in if_start (ifp=0xc25b5000) at /usr/src/sys/net/if.c:2209
No locals.
#14 0xc0703684 in ether_output_frame (ifp=0xc25b5000, m=0xc26bda00) at
/usr/src/sys/net/if_ethersubr.c:384
        len = 32
        mflags = 2
        error = 0
        rule = (struct ip_fw *) 0x0
#15 0xc2b34930 in ?? ()
No symbol table info available.
#16 0xc25b5000 in ?? ()
No symbol table info available.
#17 0xc26bda00 in ?? ()
No symbol table info available.
#18 0xc26bd300 in ?? ()
No symbol table info available.
#19 0x00000000 in ?? ()
No symbol table info available.
#20 0xc2b40c90 in ?? ()
No symbol table info available.
#21 0xc28fce80 in ?? ()
No symbol table info available.
#22 0xd364ab6c in ?? ()
No symbol table info available.
#23 0xc2b2881a in ?? ()
No symbol table info available.
#24 0xc28fce80 in ?? ()
No symbol table info available.
#25 0xc2b40c90 in ?? ()
No symbol table info available.
#26 0x000006b5 in ?? ()
No symbol table info available.
#27 0xc0a01ad4 in witness_spin_warn ()
No symbol table info available.
#28 0x00000000 in ?? ()
No symbol table info available.
#29 0xc09136c3 in ?? ()
No symbol table info available.
#30 0x000006b2 in ?? ()
No symbol table info available.
#31 0xc0a48194 in w_locklistdata ()
No symbol table info available.
#32 0xd364ab10 in ?? ()
No symbol table info available.
#33 0xc06b97e6 in witness_unlock (lock=0xc25b5000, flags=-1028387696,
file=0x6b5 <Address 0x6b5 out of bounds>, line=-1063249196)
    at /usr/src/sys/kern/subr_witness.c:1294
        lock_list = (struct lock_list_entry **) 0xc26bda00
        instance = (struct lock_instance *) 0xc26bd300
        class = (struct lock_class *) 0xc26bd300
        s = -1033119232
        i = -1056755712
j = -1034203136






On 5/29/06, Maxim Konovalov <maxim_at_macomnet.ru> wrote:
>
> On Mon, 29 May 2006, 13:05+0400, sekes wrote:
>
> > Cause my message has been lost in threads i repost it again here.
> >
> > http://lists.freebsd.org/pipermail/freebsd-current/2006-May/062955.html
> > Sorry for annoying :-)
> >
> > Strange panic occurs in the kernel every time i'm trying to make PPPoE
> > connection
> > This problem is very important to me because since all that time it
> presents
> > in the kernel i am not able to establish any succesfull internet
> sessions
> > longer than on 10-15 minutes:(
> >
> > panic: mutex Giant not owned at /usr/src/sys/net/if.c:2209
> > cpuid = 0
> > KDB: enter: panic
> > [thread pid 11 tid 100005 ]
> > Stopped at      kdb_enter+0x2b: nop
> > db>
> > db>
> > db>
> > db>bt
> > Tracing pid 11 tid 100005 td 0xc28916c0
> > kdb_enter(3230725374) at kdb_enter+43
> > panic(3230722033,3230813051,3230769714,2209,3264851968) at panic+295
> > _mtx_assert(3231693000,1,3230769714,2209) at _mtx_assert+102
> > if_start(3264851968) at if_start+38
> > ether_output_frame(3264851968,3265936896,3265938176,0,3270958224) at
> > ether_output_frame+384
> > ng_ether_rcvdata(3270304512,3270958224,1717,3231718100,0) at
> > ng_ether_rcvdata+308
> > ng_apply_item(0,3265938176,5,0,0) at ng_apply_item+278
> > ng_snd_item(3270958224,0,3270958224,3266710848,3270315648) at
> > ng_snd_item+230
> > pppoe_ticker(3270315648,3270304384,0,0,3227049343) at pppoe_ticker+229
> > ng_apply_item(1,622,2,1,0) at ng_apply_item+495
> > ng_snd_item(3270958272,0,3548757204,3228176966,3270958272) at
> > ng_snd_item+230
> > ng_callout_trampoline(3270958272) at ng_callout_trampoline+13
> > softclock(0) at softclock+518
> > ithread_execute_handlers(3263761156,3263960576) at
> > ithread_execute_handlers+234
> > ithread_loop(3263596944,3548757304) at ithread_loop+103
> > fork_exit(3228039632,3263596944,3548757304) at fork_exit+164
> > fork_trampoline() at fork_trampoline+8
> > --- trap 1, eip = 0, esp = 3548757356, ebp = 0 ---
>
> I don't think anybody help you without crashdump.  I know nothing
> about geli but if it doesn't allow to dump a kernel dump on it then
> unconfigure it and get a dump.
>
> --
> Maxim Konovalov
>
Received on Mon May 29 2006 - 09:20:34 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:38:56 UTC