kern/94433: [panic] panic: sbdrop

Eric van Gyzen eric at vangyzen.net
Tue Mar 14 02:40:20 UTC 2006


>Number:         94433
>Category:       kern
>Synopsis:       [panic] panic: sbdrop
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Tue Mar 14 02:40:18 GMT 2006
>Closed-Date:
>Last-Modified:
>Originator:     Eric van Gyzen
>Release:        FreeBSD 6.0-RELEASE-p4 i386
>Organization:
>Environment:
System: FreeBSD host.example.com 6.0-RELEASE-p4 FreeBSD 6.0-RELEASE-p4 #6: Sat Feb 25 15:37:23 CST 2006 vangyzen at host.example.com:/freebsd/obj/freebsd/src/sys/KERNCONF i386

--- KERNCONF begins here ---
machine		i386
cpu		I686_CPU

options 	SCHED_4BSD
options 	PREEMPTION
options 	INET
options 	INET6
options 	FFS
options 	SOFTUPDATES
options 	UFS_ACL
options 	UFS_DIRHASH
options 	MSDOSFS
options 	CD9660
options 	GEOM_GPT
options 	COMPAT_43
options 	COMPAT_FREEBSD4
options 	COMPAT_FREEBSD5
options 	SCSI_DELAY=1000
options 	KTRACE
options 	SYSVSHM
options 	SYSVMSG
options 	SYSVSEM
options 	_KPOSIX_PRIORITY_SCHEDULING
options 	KBD_INSTALL_CDEV
options 	ADAPTIVE_GIANT

device		apic

device		isa
device		pci

device		ata
device		atadisk
options 	ATA_STATIC_ID

device		scbus
device		da
device		cd
device		pass

device		atkbdc
device		atkbd
device		psm

device		vga

device		splash

device		sc

device		agp

device		npx

device		pmtimer

device		ppc
device		ppbus
device		lpt
device		plip
device		ppi

device		loop
device		mem
device		io
device		random
device		ether
device		pty
device		md

device		bpf

device		uhci
device		ohci
device		ehci
device		usb
device		ugen
device		uhid
device		ukbd
device		ulpt
device		umass
device		ums

options 	INCLUDE_CONFIG_FILE

makeoptions	DEBUG=-g

options 	KDB
options 	DDB
options 	GDB

device		fdc

device		atapicd
device		atapicam

device		sym

device		sio

device		miibus
device		rl
device		fxp

device		wlan
device		wlan_wep
device		wlan_ccmp
device		wlan_tkip
device		wlan_xauth
device		wlan_acl

device		ath
device		ath_hal
device		ath_rate_sample

options		IPFIREWALL
options		IPFIREWALL_VERBOSE
options		IPFIREWALL_VERBOSE_LIMIT=1024
options		IPFIREWALL_DEFAULT_TO_ACCEPT
options		IPDIVERT
--- KERNCONF ends here ---

--- dmesg.boot begins here ---
Copyright (c) 1992-2005 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
	The Regents of the University of California. All rights reserved.
FreeBSD 6.0-RELEASE-p4 #5: Sat Feb 25 15:33:28 CST 2006
    vangyzen at host.example.com:/freebsd/obj/freebsd/src/sys/KERNCONF
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: AMD Athlon(tm) Processor (1399.76-MHz 686-class CPU)
  Origin = "AuthenticAMD"  Id = 0x644  Stepping = 4
  Features=0x183f9ff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR>
  AMD Features=0xc0440800<SYSCALL,<b18>,MMX+,3DNow+,3DNow>
real memory  = 268369920 (255 MB)
avail memory = 253153280 (241 MB)
wlan: mac acl policy registered
ath_hal: 0.9.14.9 (AR5210, AR5211, AR5212, RF5111, RF5112, RF2413)
npx0: [FAST]
npx0: <math processor> on motherboard
npx0: INT 16 interface
acpi0: <AMIINT > on motherboard
acpi0: Power Button (fixed)
pci_link0: <ACPI PCI Link LNKA> irq 11 on acpi0
pci_link1: <ACPI PCI Link LNKB> irq 12 on acpi0
pci_link2: <ACPI PCI Link LNKC> irq 5 on acpi0
pci_link3: <ACPI PCI Link LNKD> irq 10 on acpi0
Timecounter "ACPI-fast" frequency 3579545 Hz quality 1000
acpi_timer0: <24-bit timer at 3.579545MHz> port 0x808-0x80b on acpi0
cpu0: <ACPI CPU> on acpi0
acpi_throttle0: <ACPI CPU Throttling> on cpu0
acpi_button0: <Power Button> on acpi0
pcib0: <ACPI Host-PCI bridge> port 0xcf8-0xcff on acpi0
pci0: <ACPI PCI bus> on pcib0
agp0: <VIA 8367 (KT266/KY266x/KT333) host to PCI bridge> mem 0xe0000000-0xe1ffffff at device 0.0 on pci0
pcib1: <PCI-PCI bridge> at device 1.0 on pci0
pci1: <PCI bus> on pcib1
pci1: <display, VGA> at device 0.0 (no driver attached)
fxp0: <Intel 82559 Pro/100 Ethernet> port 0xdc00-0xdc3f mem 0xdfffe000-0xdfffefff,0xdfe00000-0xdfefffff irq 12 at device 6.0 on pci0
miibus0: <MII bus> on fxp0
inphy0: <i82555 10/100 media interface> on miibus0
inphy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
fxp0: Ethernet address: 00:d0:b7:5a:ce:f6
ath0: <Atheros 5212> mem 0xdffd0000-0xdffdffff irq 5 at device 7.0 on pci0
ath0: Ethernet address: 00:11:95:91:32:f2
ath0: mac 7.9 phy 4.5 radio 5.6
sym0: <1010-33> port 0xd400-0xd4ff mem 0xdffff800-0xdffffbff,0xdfffa000-0xdfffbfff irq 10 at device 8.0 on pci0
sym0: Symbios NVRAM, ID 7, Fast-80, LVD, parity checking
sym0: open drain IRQ line driver, using on-chip SRAM
sym0: using LOAD/STORE-based firmware.
sym0: handling phase mismatch from SCRIPTS.
sym0: [GIANT-LOCKED]
sym1: <1010-33> port 0xd800-0xd8ff mem 0xdffffc00-0xdfffffff,0xdfffc000-0xdfffdfff irq 10 at device 8.1 on pci0
sym1: Symbios NVRAM, ID 7, Fast-80, SE, parity checking
sym1: open drain IRQ line driver, using on-chip SRAM
sym1: using LOAD/STORE-based firmware.
sym1: handling phase mismatch from SCRIPTS.
sym1: [GIANT-LOCKED]
rl0: <RealTek 8139 10/100BaseTX> port 0xd000-0xd0ff mem 0xdffff700-0xdffff7ff irq 11 at device 9.0 on pci0
miibus1: <MII bus> on rl0
rlphy0: <RealTek internal media interface> on miibus1
rlphy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
rl0: Ethernet address: 00:40:f4:2d:96:ec
isab0: <PCI-ISA bridge> at device 17.0 on pci0
isa0: <ISA bus> on isab0
atapci0: <VIA 8233 UDMA100 controller> port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xff00-0xff0f at device 17.1 on pci0
ata0: <ATA channel 0> on atapci0
ata1: <ATA channel 1> on atapci0
uhci0: <VIA 83C572 USB controller> port 0xc400-0xc41f irq 10 at device 17.2 on pci0
uhci0: [GIANT-LOCKED]
usb0: <VIA 83C572 USB controller> on uhci0
usb0: USB revision 1.0
uhub0: VIA UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
uhci1: <VIA 83C572 USB controller> port 0xc800-0xc81f irq 10 at device 17.3 on pci0
uhci1: [GIANT-LOCKED]
usb1: <VIA 83C572 USB controller> on uhci1
usb1: USB revision 1.0
uhub1: VIA UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub1: 2 ports with 2 removable, self powered
uhci2: <VIA 83C572 USB controller> port 0xcc00-0xcc1f irq 10 at device 17.4 on pci0
uhci2: [GIANT-LOCKED]
usb2: <VIA 83C572 USB controller> on uhci2
usb2: USB revision 1.0
uhub2: VIA UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub2: 2 ports with 2 removable, self powered
acpi_button1: <Sleep Button> on acpi0
fdc0: <floppy drive controller> port 0x3f2-0x3f3,0x3f4-0x3f5,0x3f7 irq 6 drq 2 on acpi0
fdc0: [FAST]
fd0: <1440-KB 3.5" drive> on fdc0 drive 0
sio0: <16550A-compatible COM port> port 0x3f8-0x3ff irq 4 flags 0x10 on acpi0
sio0: type 16550A, console
sio1: <16550A-compatible COM port> port 0x2f8-0x2ff irq 3 on acpi0
sio1: type 16550A
ppc0: <ECP parallel printer port> port 0x378-0x37f,0x778-0x77b irq 7 drq 3 on acpi0
ppc0: SMC-like chipset (ECP/EPP/PS2/NIBBLE) in COMPATIBLE mode
ppc0: FIFO with 16/16/9 bytes threshold
ppbus0: <Parallel port bus> on ppc0
plip0: <PLIP network interface> on ppbus0
lpt0: <Printer> on ppbus0
lpt0: Interrupt-driven port
ppi0: <Parallel I/O> on ppbus0
pmtimer0 on isa0
orm0: <ISA Option ROMs> at iomem 0xc0000-0xcbfff,0xcc000-0xccfff,0xcd000-0xd0fff,0xd1000-0xd3fff on isa0
sc0: <System console> at flags 0x100 on isa0
sc0: VGA <16 virtual consoles, flags=0x300>
vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
atkbdc0: <Keyboard controller (i8042)> at port 0x60,0x64 on isa0
atkbd0: <AT Keyboard> irq 1 on atkbdc0
kbd0 at atkbd0
atkbd0: [GIANT-LOCKED]
ugen0: vendor 0x05e3 USB Host To Host Bridge, rev 1.00/1.80, addr 2
Timecounter "TSC" frequency 1399762999 Hz quality 800
Timecounters tick every 1.000 msec
ipfw2 (+ipv6) initialized, divert loadable, rule-based forwarding disabled, default to accept, logging limited to 1024 packets/entry by default
ad0: 39266MB <IC35L040AVER07 0 ER4OA44A> at ata0-master UDMA100
acd0: CDRW <SONY CD-RW CRX120E/1.0j> at ata1-master PIO4
(noperiph:sym0:0:-1:-1): SCSI BUS reset delivered.
(noperiph:sym1:0:-1:-1): SCSI BUS reset delivered.
da0 at sym0 bus 0 target 0 lun 0
da0: <IBM DDYS-T18350N S96H> Fixed Direct Access SCSI-3 device 
da0: 160.000MB/s transfers (80.000MHz, offset 62, 16bit), Tagged Queueing Enabled
da0: 17501MB (35843670 512 byte sectors: 255H 63S/T 2231C)
cd0 at ata1 bus 0 target 0 lun 0
cd0: <SONY CD-RW  CRX120E 1.0j> Removable CD-ROM SCSI-0 device 
cd0: 16.000MB/s transfers
cd0: Attempt to query device size failed: NOT READY, Medium not present
Trying to mount root from ufs:/dev/da0s1a
--- dmesg.boot ends here ---

>Description:

panic: sbdrop

This happened twice.  I have the dumps and will gladly
help anyone who is interested.  Right now, I'm not sure
what other information would be helpful.

--- panic-sbdrop-2006-03-09 begins here ---
$ kgdb kernel.debug /var/crash/vmcore-panic-sbdrop-2006-03-09
GNU gdb 6.1.1 [FreeBSD]
[...]

Unread portion of the kernel message buffer:

[not ascii; here is a hexdump]

                     c1  20 33 70 c0 00 00 00 00
00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00
29 00 00 00 00 00 00 00  00 90 02 00 00 00 00 00
00 00 00 00 6c 0b 05 c1  00 00 00 00 09 00 01 00
00 00 00 00 00 00 00 00  00 00 00 00 88 14 05 c1
30 33 70 c0 00 00 00 00  00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00  2a 00 00 00 00 00 00 00
00 a0 02 00 00 00 00 00  00 00 00 00 b4 0b 05 c1
00 00 00 00 0d 0a 00 01  00 00 00 00 00 00 00 00
00 00 00 00 00 d0 14 05  c1 40 33 70 c0 18 0c 05
c1 90 a3 4b c1 88 a3 4b  c1 00 00 00 00 6c 7f 4f
c1 f8 15 00 00 00 00 00  00 00 b0 02 00 00 00 00

#0  doadump () at pcpu.h:165
165		__asm __volatile("movl %%fs:0,%0" : "=r" (td));
(kgdb) bt f
#0  doadump () at pcpu.h:165
No locals.
#1  0xc04fae3e in boot (howto=260) at /freebsd/src/sys/kern/kern_shutdown.c:399
	first_buf_printf = 1
#2  0xc04fb104 in panic (fmt=0xc069ed40 "sbdrop")
    at /freebsd/src/sys/kern/kern_shutdown.c:555
	td = (struct thread *) 0xc190e480
	bootopt = 260
	newpanic = 1
	ap = 0xc190e480 "[binary]"
	buf = "sbdrop", '\0' <repeats 249 times>
#3  0xc05378b8 in sbdrop_locked (sb=0xcf603b50, len=940)
    at /freebsd/src/sys/kern/uipc_socket2.c:1157
	m = (struct mbuf *) 0x0
	next = (struct mbuf *) 0x0
#4  0xc05377ce in sbflush_locked (sb=0xcf603b50)
    at /freebsd/src/sys/kern/uipc_socket2.c:1124
No locals.
#5  0xc0536d49 in sbrelease_locked (sb=0xcf603b50, so=0x0)
    at /freebsd/src/sys/kern/uipc_socket2.c:559
No locals.
#6  0xc0536db1 in sbrelease (sb=0xcf603b50, so=0xc19c2c84)
    at /freebsd/src/sys/kern/uipc_socket2.c:572
No locals.
#7  0xc0534921 in sorflush (so=0xc19c2c84)
    at /freebsd/src/sys/kern/uipc_socket.c:1480
	sb = (struct sockbuf *) 0xc19c2cd4
	pr = (struct protosw *) 0xc06d46a0
	asb = {sb_sel = {si_thrlist = {tqe_next = 0x0, tqe_prev = 0x0}, 
    si_thread = 0x0, si_note = {kl_list = {slh_first = 0x0}, kl_lock = 0, 
      kl_unlock = 0, kl_locked = 0, kl_lockarg = 0x0}, si_flags = 0}, 
  sb_mtx = {mtx_object = {lo_class = 0xc06cf004, 
      lo_name = 0xc069ecad "so_rcv", lo_type = 0xc069ecad "so_rcv", 
      lo_flags = 196608, lo_list = {tqe_next = 0x0, tqe_prev = 0x0}, 
      lo_witness = 0x0}, mtx_lock = 3247498368, mtx_recurse = 0}, 
  sb_state = 0, sb_mb = 0xc29af800, sb_mbtail = 0xc29af800, 
  sb_lastrecord = 0xc29af800, sb_cc = 940, sb_hiwat = 8192, sb_mbcnt = 2048, 
  sb_mbmax = 65536, sb_ctl = 0, sb_lowat = 1, sb_timeo = 0, sb_flags = 64}
#8  0xc0532cbb in sofree (so=0xc19c2c84)
    at /freebsd/src/sys/kern/uipc_socket.c:406
	head = (struct socket *) 0x0
#9  0xc0532fe9 in soclose (so=0xc19c2c84)
    at /freebsd/src/sys/kern/uipc_socket.c:484
	error = 0
#10 0xc0522e6b in soo_close (fp=0xc1eac870, td=0xc190e480)
    at /freebsd/src/sys/kern/sys_socket.c:317
	error = 0
	so = (struct socket *) 0x0
#11 0xc04dc0d4 in fdrop_locked (fp=0xc1eac870, td=0xc190e480) at file.h:289
	error = 0
#12 0xc04dc025 in fdrop (fp=0xc1eac870, td=0xc190e480)
    at /freebsd/src/sys/kern/kern_descrip.c:2101
No locals.
#13 0xc04da653 in closef (fp=0xc1eac870, td=0xc190e480)
    at /freebsd/src/sys/kern/kern_descrip.c:1921
	vp = (struct vnode *) 0xc1eac870
	lf = {l_start = 4294967295, l_len = -4495592928909675680, l_pid = 0, 
  l_type = -7040, l_whence = -15984}
	fdtol = (struct filedesc_to_leader *) 0xcf603ca0
	fdp = (struct filedesc *) 0xc2ce5200
#14 0xc04d7a81 in close (td=0xc190e480, uap=0x0)
    at /freebsd/src/sys/kern/kern_descrip.c:1004
	fdp = (struct filedesc *) 0xc2ce5200
	fp = (struct file *) 0xc1eac870
	fd = 1
	error = -1047468928
	holdleaders = 0
#15 0xc0662dbb in syscall (frame=
      {tf_fs = 59, tf_es = 59, tf_ds = 59, tf_edi = 1, tf_esi = 134613344, tf_ebp = -1077941400, tf_isp = -815776412, tf_ebx = 134729728, tf_edx = 0, tf_ecx = 1, tf_eax = 6, tf_trapno = 22, tf_err = 2, tf_eip = 169785299, tf_cs = 51, tf_eflags = 642, tf_esp = -1077941428, tf_ss = 59})
    at /freebsd/src/sys/i386/i386/trap.c:976
	params = 0xbfbfeb50 <Address 0xbfbfeb50 out of bounds>
	callp = (struct sysent *) 0xc06ca6e8
	td = (struct thread *) 0xc190e480
	p = (struct proc *) 0xc19c720c
	orig_tf_eflags = 642
	sticks = 4436
	error = 0
	narg = 1
	args = {1, -815776464, -1067048045, 0, 0, 0, 4436, -1046711796}
	code = 6
#16 0xc06520cf in Xint0x80_syscall ()
    at /freebsd/src/sys/i386/i386/exception.s:200
No locals.
#17 0x00000033 in ?? ()
No symbol table info available.
Previous frame inner to this frame (corrupt stack?)
--- panic-sbdrop-2006-03-09 ends here ---

--- panic-sbdrop-2006-03-12 begins here ---
$ kgdb kernel.debug /var/crash/vmcore-panic-sbdrop-2006-03-12
GNU gdb 6.1.1 [FreeBSD]
[...]

Unread portion of the kernel message buffer:

[not ascii; here is a hexdump]

                     51  c1 00 40 09 28 18 6c 03
c1 08 3c 03 c1 38 01 03  c1 50 95 03 c1 44 44 51
c1 00 a0 06 08 00 00 00  00 74 07 37 c1 d0 e5 02
c1 28 f9 02 c1 4c 4b 51  c1 00 00 12 28 d0 52 03
c1 f4 48 3c c1 c0 7c 03  c1 a0 f6 02 c1 18 43 51
c1 00 20 07 28 00 00 00  00 ac 37 35 c1 08 0d 0a
03 c1 88 40 03 c1 78 4c  51 c1 00 30 0f 28 d8 c3
03 c1 18 e8 02 c1 e0 e4  02 c1 20 02 03 c1 c8 47
51 c1 00 a0 13 08 00 00  00 00 4c 13 3b c1 a0 28
03 c1 28 60 03 c1 18 43  51 c1 00 b0 bf bf 00 00
00 00 5c 0c 35 c1 58 0b  03 c1 d0 43 03 c1 c8 47
51 c1 00 50 17 08 00 00  00 00 e4 d0 36 c1 d0 4b
03 c1 00 1d 03 c1 a4 dd  94 c1 00

#0  doadump () at pcpu.h:165
165		__asm __volatile("movl %%fs:0,%0" : "=r" (td));
(kgdb) bt f
#0  doadump () at pcpu.h:165
No locals.
#1  0xc04fae3e in boot (howto=260) at /freebsd/src/sys/kern/kern_shutdown.c:399
	first_buf_printf = 1
#2  0xc04fb104 in panic (fmt=0xc069ed40 "sbdrop")
    at /freebsd/src/sys/kern/kern_shutdown.c:555
	td = (struct thread *) 0xc194ac00
	bootopt = 260
	newpanic = 1
	ap = 0xc194ac00 "[binary]"
	buf = "sbdrop", '\0' <repeats 249 times>
#3  0xc05378b8 in sbdrop_locked (sb=0xcf612b50, len=17)
    at /freebsd/src/sys/kern/uipc_socket2.c:1157
	m = (struct mbuf *) 0x0
	next = (struct mbuf *) 0x0
#4  0xc05377ce in sbflush_locked (sb=0xcf612b50)
    at /freebsd/src/sys/kern/uipc_socket2.c:1124
No locals.
#5  0xc0536d49 in sbrelease_locked (sb=0xcf612b50, so=0x0)
    at /freebsd/src/sys/kern/uipc_socket2.c:559
No locals.
#6  0xc0536db1 in sbrelease (sb=0xcf612b50, so=0xc1908b20)
    at /freebsd/src/sys/kern/uipc_socket2.c:572
No locals.
#7  0xc0534921 in sorflush (so=0xc1908b20)
    at /freebsd/src/sys/kern/uipc_socket.c:1480
	sb = (struct sockbuf *) 0xc1908b70
	pr = (struct protosw *) 0xc06d8b14
	asb = {sb_sel = {si_thrlist = {tqe_next = 0x0, tqe_prev = 0x0}, 
    si_thread = 0x0, si_note = {kl_list = {slh_first = 0x0}, kl_lock = 0, 
      kl_unlock = 0, kl_locked = 0, kl_lockarg = 0x0}, si_flags = 0}, 
  sb_mtx = {mtx_object = {lo_class = 0xc06cf004, 
      lo_name = 0xc069ecad "so_rcv", lo_type = 0xc069ecad "so_rcv", 
      lo_flags = 196608, lo_list = {tqe_next = 0x0, tqe_prev = 0x0}, 
      lo_witness = 0x0}, mtx_lock = 3247746048, mtx_recurse = 0}, 
  sb_state = 0, sb_mb = 0x0, sb_mbtail = 0x0, sb_lastrecord = 0x0, sb_cc = 17, 
  sb_hiwat = 42080, sb_mbcnt = 4294964992, sb_mbmax = 262144, 
  sb_ctl = 4294967280, sb_lowat = 1, sb_timeo = 0, sb_flags = 64}
#8  0xc0532cbb in sofree (so=0xc1908b20)
    at /freebsd/src/sys/kern/uipc_socket.c:406
	head = (struct socket *) 0x0
#9  0xc0532fe9 in soclose (so=0xc1908b20)
    at /freebsd/src/sys/kern/uipc_socket.c:484
	error = 0
#10 0xc0522e6b in soo_close (fp=0xc198ea20, td=0xc194ac00)
    at /freebsd/src/sys/kern/sys_socket.c:317
	error = 0
	so = (struct socket *) 0x0
#11 0xc04dc0d4 in fdrop_locked (fp=0xc198ea20, td=0xc194ac00) at file.h:289
	error = 0
#12 0xc04dc025 in fdrop (fp=0xc198ea20, td=0xc194ac00)
    at /freebsd/src/sys/kern/kern_descrip.c:2101
No locals.
#13 0xc04da653 in closef (fp=0xc198ea20, td=0xc194ac00)
    at /freebsd/src/sys/kern/kern_descrip.c:1921
	vp = (struct vnode *) 0xc198ea20
	lf = {l_start = -4580996068436530020, l_len = 23122899, 
  l_pid = -370322744, l_type = 599, l_whence = 0}
	fdtol = (struct filedesc_to_leader *) 0xbe24ecff
	fdp = (struct filedesc *) 0xc1ca2400
#14 0xc04d7a81 in close (td=0xc194ac00, uap=0x0)
    at /freebsd/src/sys/kern/kern_descrip.c:1004
	fdp = (struct filedesc *) 0xc1ca2400
	fp = (struct file *) 0xc198ea20
	fd = 3
	error = -1047221248
	holdleaders = 0
#15 0xc0662dbb in syscall (frame=
      {tf_fs = 59, tf_es = 59, tf_ds = 59, tf_edi = 0, tf_esi = 673886912, tf_ebp = -1077941608, tf_isp = -815714972, tf_ebx = 673809636, tf_edx = 0, tf_ecx = 0, tf_eax = 6, tf_trapno = 0, tf_err = 2, tf_eip = 673286099, tf_cs = 51, tf_eflags = 534, tf_esp = -1077941636, tf_ss = 59})
    at /freebsd/src/sys/i386/i386/trap.c:976
	params = 0xbfbfea80 <Address 0xbfbfea80 out of bounds>
	callp = (struct sysent *) 0xc06ca6e8
	td = (struct thread *) 0xc194ac00
	p = (struct proc *) 0xc1a7f624
	orig_tf_eflags = 534
	sticks = 12
	error = 0
	narg = 1
	args = {3, -1066484000, 152949657, -815715028, -1067035982, 
  -1066484000, -815715020, 672605572}
	code = 6
#16 0xc06520cf in Xint0x80_syscall ()
    at /freebsd/src/sys/i386/i386/exception.s:200
No locals.
#17 0x00000033 in ?? ()
No symbol table info available.
Previous frame inner to this frame (corrupt stack?)
--- panic-sbdrop-2006-03-12 ends here ---


>How-To-Repeat:

unknown

>Fix:

unknown


>Release-Note:
>Audit-Trail:
>Unformatted:


More information about the freebsd-bugs mailing list