panic: mutex tcp owned at /usr/src/sys/netinet/tcp_input.c:2475

From: Stefan Bethke <stb_at_lassitu.de>
Date: Thu, 10 May 2007 23:35:54 +0200
Got this reproducable panic on AMD64 on a couple of days old -current  
when I try to copy a file off a ZFS dataset via netatalk's afpd (via  
TCP, no actual AppleTalk involved).

Any other info you're interested in, just let me know.


Stefan

-- 
Stefan Bethke <stb_at_lassitu.de>   Fon +49 170 346 0140



root_at_little:/usr/obj/usr/src/sys/LITTLE# kgdb kernel.debug /var/crash/ 
vmcore.1
[GDB will not be able to debug user-mode threads: /usr/lib/ 
libthread_db.so: Undefined symbol "ps_pglobal_lookup"]
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and  
you are
welcome to change it and/or distribute copies of it under certain  
conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for  
details.
This GDB was configured as "amd64-marcel-freebsd".

Unread portion of the kernel message buffer:
panic: mutex tcp owned at /usr/src/sys/netinet/tcp_input.c:2475
cpuid = 1
KDB: enter: panic
panic: from debugger
cpuid = 1
KDB: stack backtrace:
Uptime: 2m50s
Physical memory: 1010 MB
Dumping 102 MB: 87 71 55 39 23 7

#0  doadump () at pcpu.h:171
171             __asm __volatile("movq %%gs:0,%0" : "=r" (td));
(kgdb) bt
#0  doadump () at pcpu.h:171
#1  0xffffffff8046771b in boot (howto=260)
     at /usr/src/sys/kern/kern_shutdown.c:409
#2  0xffffffff804671a7 in panic (
     fmt=0xffffffff8072d9b3 "mutex %s owned at %s:%d")
     at /usr/src/sys/kern/kern_shutdown.c:563
#3  0xffffffff8045d363 in _mtx_assert (m=0x0, what=0, file=0x0, line=0)
     at /usr/src/sys/kern/kern_mutex.c:620
#4  0xffffffff80535efe in tcp_do_segment (m=0xffffff002e102a00,
     th=0xffffff002e304824, so=0xffffff002e993000,  
tp=0xffffff002b9de000,
     drop_hdrlen=52, tlen=0) at /usr/src/sys/netinet/tcp_input.c:2475
#5  0xffffffff805380d5 in tcp_input (m=0xffffff002e102a00,  
off0=741322752)
     at /usr/src/sys/netinet/tcp_input.c:989
#6  0xffffffff8052e59f in ip_input (m=0xffffff002e102a00)
     at /usr/src/sys/netinet/ip_input.c:662
#7  0xffffffff804f6cdc in ether_demux (ifp=0xffffff003d078000,
     m=0xffffff002e102a00) at /usr/src/sys/net/if_ethersubr.c:843
#8  0xffffffff804f769b in ether_input (ifp=0xffffff003d078000,
     m=0xffffff002e102a00) at /usr/src/sys/net/if_ethersubr.c:701
#9  0xffffffff80699691 in nve_ospacketrx (ctx=0xffffff003d121c00,
     data=0xffffffffa061c120, success=1, newbuf=0x0, priority=0 '\0')
     at /usr/src/sys/dev/nve/if_nve.c:1607
#10 0xffffffff80628af1 in UpdateReceiveDescRingData ()
#11 0xffffffff806286b7 in ADAPTER_HandleInterruptThroughput ()
---Type <return> to continue, or q <return> to quit---
#12 0xffffffff80698448 in nve_ifstart_locked (ifp=0xffffff003d078000)
     at /usr/src/sys/dev/nve/if_nve.c:884
#13 0xffffffff8069871c in nve_ifstart (ifp=0xffffff003d078000)
     at /usr/src/sys/dev/nve/if_nve.c:842
#14 0xffffffff804f6619 in ether_output_frame (ifp=0xffffff003d078000,
     m=0xffffff003cab2900) at /usr/src/sys/net/if_ethersubr.c:403
#15 0xffffffff804f69dc in ether_output (ifp=0xffffff003d078000,
     m=0xffffff003cab2900, dst=0xffffff003d04e9b0, rt0=0x0)
     at /usr/src/sys/net/if_ethersubr.c:372
#16 0xffffffff80531af4 in ip_output (m=0xffffff003cab2900, opt=0x1,
     ro=0xffffffffa061c600, flags=1, imo=0x0, inp=0xffffff002c2fb000)
     at /usr/src/sys/netinet/ip_output.c:561
#17 0xffffffff80539498 in tcp_output (tp=0xffffff002b9de000)
     at /usr/src/sys/netinet/tcp_output.c:1121
#18 0xffffffff80536dbb in tcp_do_segment (m=0xffffff002e102b00,
     th=0xffffff002e304024, so=0xffffff002e993000,  
tp=0xffffff002b9de000,
     drop_hdrlen=52, tlen=0) at /usr/src/sys/netinet/tcp_input.c:3137
#19 0xffffffff805380d5 in tcp_input (m=0xffffff002e102b00,  
off0=741322752)
     at /usr/src/sys/netinet/tcp_input.c:989
#20 0xffffffff8052e59f in ip_input (m=0xffffff002e102b00)
     at /usr/src/sys/netinet/ip_input.c:662
#21 0xffffffff804f6cdc in ether_demux (ifp=0xffffff003d078000,
     m=0xffffff002e102b00) at /usr/src/sys/net/if_ethersubr.c:843
#22 0xffffffff804f769b in ether_input (ifp=0xffffff003d078000,
---Type <return> to continue, or q <return> to quit---
     m=0xffffff002e102b00) at /usr/src/sys/net/if_ethersubr.c:701
#23 0xffffffff80699691 in nve_ospacketrx (ctx=0xffffff003d121c00,
     data=0xffffffffa061caa0, success=1, newbuf=0x0, priority=0 '\0')
     at /usr/src/sys/dev/nve/if_nve.c:1607
#24 0xffffffff80628af1 in UpdateReceiveDescRingData ()
#25 0xffffffff806286b7 in ADAPTER_HandleInterruptThroughput ()
#26 0xffffffff80698809 in nve_intr (arg=0x0)
     at /usr/src/sys/dev/nve/if_nve.c:1068
#27 0xffffffff8044e9d8 in ithread_loop (arg=0xffffff003da1d7c0)
     at /usr/src/sys/kern/kern_intr.c:1036
#28 0xffffffff8044d6ea in fork_exit (
     callout=0xffffffff8044e8d0 <ithread_loop>, arg=0xffffff003da1d7c0,
     frame=0xffffffffa061cc80) at /usr/src/sys/kern/kern_fork.c:814
#29 0xffffffff8065da8e in fork_trampoline ()
     at /usr/src/sys/amd64/amd64/exception.S:397
#30 0x0000000000000000 in ?? ()
#31 0x0000000000000000 in ?? ()
#32 0x0000000000000001 in ?? ()
#33 0x0000000000000000 in ?? ()
#34 0x0000000000000000 in ?? ()
#35 0x0000000000000000 in ?? ()
#36 0x0000000000000000 in ?? ()
#37 0x0000000000000000 in ?? ()
#38 0x0000000000000000 in ?? ()
---Type <return> to continue, or q <return> to quit---
#39 0x0000000000000000 in ?? ()
#40 0x0000000000000000 in ?? ()
#41 0x0000000000000000 in ?? ()
#42 0x0000000000000000 in ?? ()
#43 0x0000000000000000 in ?? ()
#44 0x0000000000000000 in ?? ()
#45 0x0000000000000000 in ?? ()
#46 0x0000000000000000 in ?? ()
#47 0x0000000000000000 in ?? ()
#48 0x0000000000000000 in ?? ()
#49 0x0000000000000000 in ?? ()
#50 0x0000000000000000 in ?? ()
#51 0x0000000000000000 in ?? ()
#52 0x0000000000000000 in ?? ()
#53 0x0000000000000000 in ?? ()
#54 0x0000000000ca2000 in ?? ()
#55 0x0000000000000000 in ?? ()
#56 0x0000000000000000 in ?? ()
#57 0xffffff003da5c2a0 in ?? ()
#58 0xffffff003da5c000 in ?? ()
#59 0xffffffffa061bc70 in ?? ()
#60 0xffffffffa061bc48 in ?? ()
#61 0xffffff003d947380 in ?? ()
#62 0xffffffff80482f72 in sched_switch (td=0xffffffff8044e8d0,  
newtd=0x0,
---Type <return> to continue, or q <return> to quit---
     flags=0) at /usr/src/sys/kern/sched_4bsd.c:907
Previous frame inner to this frame (corrupt stack?)


Kernel's almost GENERIC:
include GENERIC
ident           LITTLE
nooptions       WITNESS

$ kldstat
Id Refs Address            Size     Name
1    9 0xffffffff80100000 9fdfd8   kernel
2    1 0xffffffff80afe000 38ec8    linux.ko
3    1 0xffffffff80b37000 7590     snd_ich.ko
4    2 0xffffffff80b3f000 5e078    sound.ko
5    1 0xffffffff80b9e000 cd68     cpufreq.ko
6    1 0xffffffffa332e000 84747    zfs.ko


Copyright (c) 1992-2007 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
         The Regents of the University of California. All rights  
reserved.
FreeBSD is a registered trademark of The FreeBSD Foundation.
FreeBSD 7.0-CURRENT #2: Thu May 10 21:45:41 CEST 2007
     root_at_little.lassitu.de:/usr/obj/usr/src/sys/LITTLE
ACPI APIC Table: <Nvidia AWRDACPI>
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: AMD Athlon(tm) 64 X2 Dual Core Processor 4400+ (2210.20-MHz K8- 
class CPU)
   Origin = "AuthenticAMD"  Id = 0x20f32  Stepping = 2
    
Features=0x178bfbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE 
,MCA,CMOV,PAT,PSE36,CLFLUSH,MMX,FXSR,SSE,SSE2,HTT>
   Features2=0x1<SSE3>
   AMD Features=0xe2500800<SYSCALL,NX,MMX+,FFXSR,LM,3DNow!+,3DNow!>
   AMD Features2=0x3<LAHF,CMP>
   Cores per package: 2
usable memory = 1059913728 (1010 MB)
avail memory  = 1021321216 (974 MB)
FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs
cpu0 (BSP): APIC ID:  0
cpu1 (AP): APIC ID:  1
ioapic0: Changing APIC ID to 2
ioapic0 <Version 1.1> irqs 0-23 on motherboard
kbd1 at kbdmux0
ath_hal: 0.9.20.3 (AR5210, AR5211, AR5212, RF5111, RF5112, RF2413,  
RF5413)
acpi0: <Nvidia AWRDACPI> on motherboard
acpi0: [ITHREAD]
acpi0: Power Button (fixed)
acpi0: reservation of 0, a0000 (3) failed
acpi0: reservation of 100000, 3fde0000 (3) failed
Timecounter "ACPI-fast" frequency 3579545 Hz quality 1000
acpi_timer0: <24-bit timer at 3.579545MHz> port 0x1008-0x100b on acpi0
cpu0: <ACPI CPU> on acpi0
powernow0: <Cool`n'Quiet K8> on cpu0
cpu1: <ACPI CPU> on acpi0
powernow1: <Cool`n'Quiet K8> on cpu1
acpi_button0: <Power Button> on acpi0
pcib0: <ACPI Host-PCI bridge> port 0xcf8-0xcff on acpi0
pci0: <ACPI PCI bus> on pcib0
pci0: <memory> at device 0.0 (no driver attached)
isab0: <PCI-ISA bridge> at device 1.0 on pci0
isa0: <ISA bus> on isab0
pci0: <serial bus, SMBus> at device 1.1 (no driver attached)
ohci0: <OHCI (generic) USB controller> mem 0xfe02f000-0xfe02ffff irq  
21 at device 2.0 on pci0
ohci0: [GIANT-LOCKED]
ohci0: [ITHREAD]
usb0: OHCI version 1.0, legacy support
usb0: SMM does not respond, resetting
usb0: <OHCI (generic) USB controller> on ohci0
usb0: USB revision 1.0
uhub0: <nVidia OHCI root hub, class 9/0, rev 1.00/1.00, addr 1> on usb0
uhub0: 10 ports with 10 removable, self powered
ehci0: <NVIDIA nForce4 USB 2.0 controller> mem 0xfeb00000-0xfeb000ff  
irq 22 at device 2.1 on pci0
ehci0: [GIANT-LOCKED]
ehci0: [ITHREAD]
usb1: EHCI version 1.0
usb1: companion controller, 4 ports each: usb0
usb1: <NVIDIA nForce4 USB 2.0 controller> on ehci0
usb1: USB revision 2.0
uhub1: <nVidia EHCI root hub, class 9/0, rev 2.00/1.00, addr 1> on usb1
uhub1: 10 ports with 10 removable, self powered
pcm0: <nVidia nForce4> port 0xf000-0xf0ff,0xec00-0xecff mem  
0xfe02d000-0xfe02dfff irq 23 at device 4.0 on pci0
pcm0: [ITHREAD]
pcm0: <Avance Logic ALC850 AC97 Codec>
atapci0: <nVidia nForce CK804 UDMA133 controller> port  
0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xe000-0xe00f at device 6.0 on pci0
ata0: <ATA channel 0> on atapci0
ata0: [ITHREAD]
ata1: <ATA channel 1> on atapci0
ata1: [ITHREAD]
atapci1: <nVidia nForce CK804 SATA300 controller> port  
0x9f0-0x9f7,0xbf0-0xbf3,0x970-0x977,0xb70-0xb73,0xcc00-0xcc0f mem  
0xfe02b000-0xfe02bfff irq 21 at device 7.0 on pci0
atapci1: [ITHREAD]
ata2: <ATA channel 0> on atapci1
ata2: [ITHREAD]
ata3: <ATA channel 1> on atapci1
ata3: [ITHREAD]
atapci2: <nVidia nForce CK804 SATA300 controller> port  
0x9e0-0x9e7,0xbe0-0xbe3,0x960-0x967,0xb60-0xb63,0xb800-0xb80f mem  
0xfe02a000-0xfe02afff irq 22 at device 8.0 on pci0
atapci2: [ITHREAD]
ata4: <ATA channel 0> on atapci2
ata4: [ITHREAD]
ata5: <ATA channel 1> on atapci2
ata5: [ITHREAD]
pcib1: <ACPI PCI-PCI bridge> at device 9.0 on pci0
pci1: <ACPI PCI bus> on pcib1
fwohci0: <Texas Instruments TSB43AB22/A> mem 0xfdeff000-0xfdeff7ff, 
0xfdef8000-0xfdefbfff irq 18 at device 6.0 on pci1
fwohci0: [ITHREAD]
fwohci0: OHCI version 1.10 (ROM=1)
fwohci0: No. of Isochronous channels is 4.
fwohci0: EUI64 00:00:00:50:8d:da:95:13
fwohci0: Phy 1394a available S400, 2 ports.
fwohci0: Link S400, max_rec 2048 bytes.
firewire0: <IEEE1394(FireWire) bus> on fwohci0
fwe0: <Ethernet over FireWire> on firewire0
if_fwe0: Fake Ethernet address: 02:00:00:da:95:13
fwe0: Ethernet address: 02:00:00:da:95:13
fwe0: if_start running deferred for Giant
sbp0: <SBP-2/SCSI over FireWire> on firewire0
fwohci0: Initiate bus reset
fwohci0: BUS reset
fwohci0: node_id=0xc800ffc0, gen=1, CYCLEMASTER mode
firewire0: 1 nodes, maxhop <= 0, cable IRM = 0 (me)
firewire0: bus manager 0 (me)
ohci1: <NEC uPD 9210 USB controller> mem 0xfdefe000-0xfdefefff irq 16  
at device 8.0 on pci1
ohci1: [GIANT-LOCKED]
ohci1: [ITHREAD]
usb2: OHCI version 1.0
usb2: <NEC uPD 9210 USB controller> on ohci1
usb2: USB revision 1.0
uhub2: <NEC OHCI root hub, class 9/0, rev 1.00/1.00, addr 1> on usb2
uhub2: 3 ports with 3 removable, self powered
ohci2: <NEC uPD 9210 USB controller> mem 0xfdefd000-0xfdefdfff irq 17  
at device 8.1 on pci1
ohci2: [GIANT-LOCKED]
ohci2: [ITHREAD]
usb3: OHCI version 1.0
usb3: <NEC uPD 9210 USB controller> on ohci2
usb3: USB revision 1.0
uhub3: <NEC OHCI root hub, class 9/0, rev 1.00/1.00, addr 1> on usb3
uhub3: 2 ports with 2 removable, self powered
ehci1: <NEC uPD 720100 USB 2.0 controller> mem 0xfdefc000-0xfdefc0ff  
irq 18 at device 8.2 on pci1
ehci1: [GIANT-LOCKED]
ehci1: [ITHREAD]
usb4: EHCI version 1.0
usb4: companion controllers, 3 ports each: usb2 usb3
usb4: <NEC uPD 720100 USB 2.0 controller> on ehci1
usb4: USB revision 2.0
uhub4: <NEC EHCI root hub, class 9/0, rev 2.00/1.00, addr 1> on usb4
uhub4: 5 ports with 5 removable, self powered
nve0: <NVIDIA nForce MCP9 Networking Adapter> port 0xb400-0xb407 mem  
0xfe029000-0xfe029fff irq 23 at device 10.0 on pci0
nve0: Ethernet address 00:50:8d:c3:6d:8e
miibus0: <MII bus> on nve0
ciphy0: <Cicada CS8201 10/100/1000TX PHY> PHY 1 on miibus0
ciphy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT,  
1000baseT-FDX, auto
nve0: using obsoleted if_watchdog interface
nve0: Ethernet address: 00:50:8d:c3:6d:8e
nve0: [ITHREAD]
pcib2: <ACPI PCI-PCI bridge> at device 11.0 on pci0
pci2: <ACPI PCI bus> on pcib2
pcib3: <ACPI PCI-PCI bridge> at device 12.0 on pci0
pci3: <ACPI PCI bus> on pcib3
pcib4: <ACPI PCI-PCI bridge> at device 13.0 on pci0
pci4: <ACPI PCI bus> on pcib4
em0: <Intel(R) PRO/1000 Network Connection Version - 6.5.0> port  
0x7c00-0x7c1f mem 0xfd9e0000-0xfd9fffff,0xfd9c0000-0xfd9dffff irq 19  
at device 0.0 on pci4
em0: Ethernet address: 00:15:17:1e:1c:34
em0: [FILTER]
em1: <Intel(R) PRO/1000 Network Connection Version - 6.5.0> port  
0x7800-0x781f mem 0xfd9a0000-0xfd9bffff,0xfd980000-0xfd99ffff irq 16  
at device 0.1 on pci4
em1: Ethernet address: 00:15:17:1e:1c:35
em1: [FILTER]
pcib5: <ACPI PCI-PCI bridge> at device 14.0 on pci0
pci5: <ACPI PCI bus> on pcib5
vgapci0: <VGA-compatible display> mem 0xfa000000-0xfaffffff, 
0xd0000000-0xdfffffff,0xfb000000-0xfbffffff irq 18 at device 0.0 on pci5
acpi_tz0: <Thermal Zone> on acpi0
atkbdc0: <Keyboard controller (i8042)> port 0x60,0x64 irq 1 on acpi0
atkbd0: <AT Keyboard> irq 1 on atkbdc0
kbd0 at atkbd0
atkbd0: [GIANT-LOCKED]
atkbd0: [ITHREAD]
ppc0: cannot reserve I/O port range
sc0: <System console> at flags 0x100 on isa0
sc0: VGA <16 virtual consoles, flags=0x300>
sio0: configured irq 4 not in bitmap of probed irqs 0
sio0: port may not be enabled
sio0: configured irq 4 not in bitmap of probed irqs 0
sio0: port may not be enabled
sio0 at port 0x3f8-0x3ff irq 4 flags 0x10 on isa0
sio0: type 8250 or not responding
sio0: [FILTER]
sio1: configured irq 3 not in bitmap of probed irqs 0
sio1: port may not be enabled
vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on  
isa0
uhub5: <vendor 0x0557 product 0x7000, class 9/0, rev 1.10/1.00, addr  
2> on uhub3
uhub5: 4 ports with 4 removable, self powered
ukbd0: <Mitsumi Electric Apple Extended USB Keyboard, class 0/0, rev  
1.10/4.00, addr 3> on uhub5
kbd2 at ukbd0
uhid0: <Mitsumi Electric Apple Extended USB Keyboard, class 0/0, rev  
1.10/4.00, addr 3> on uhub5
Timecounters tick every 1.000 msec
ad0: 238475MB <WDC WD2500JB-00EVA0 15.05R15> at ata0-master UDMA100
ad2: 114473MB <WDC WD1200JB-00CRA1 17.07W17> at ata1-master UDMA100
acd0: DVDR <PIONEER DVD-RW DVR-106D/1.08> at ata1-slave UDMA33
SMP: AP CPU #1 Launched!
Trying to mount root from ufs:/dev/ad0s3a
WARNING: ZFS is considered to be an experimental feature in FreeBSD.
ZFS filesystem version 6
ZFS storage pool version 6
ums0: <Mitsumi Electric Apple Optical USB Mouse, class 0/0, rev  
1.10/1.08, addr 4> on uhub5
ums0: 4 buttons and Z dir.
ums0: at uhub5 port 4 (addr 4) disconnected
ums0: detached
Received on Thu May 10 2007 - 19:51:35 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:39:10 UTC