kern/131290: [hang]: How to completely freeze FreeBSD 7.1 under a non-privileged user

Sun Feb 8 10:36:33 PST 2009

Old Synopsis: How to completely freeze FreeBSD 7.1 under a non-privileged user
New Synopsis: [hang]: How to completely freeze FreeBSD 7.1 under a non-privileged user

State-Changed-From-To: closed->open
State-Changed-By: remko
State-Changed-When: Sun Feb 8 18:35:10 UTC 2009
State-Changed-Why: 
Reopen the ticket:

Debugging info from Mikolaj Golub <to.my.trociny at gmail.com>

GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd"...

Unread portion of the kernel message buffer:
panic: Bad link elm 0xc4f0c1f0 next->prev != elm
cpuid = 0
KDB: enter: panic
exclusive sleep mutex sellck r = 0 (0xc0cc7204) locked @ /usr/src/sys/kern/sys_generic.c:1127
exclusive sleep mutex pipe mutex r = 0 (0xc4f0c2fc) locked @ /usr/src/sys/kern/sys_pipe.c:1132
panic: from debugger
cpuid = 0
Uptime: 38m7s
Physical memory: 1003 MB
Dumping 116 MB: 101 85 69 53 37 21 5

Reading symbols from /boot/kernel/acpi.ko...Reading symbols from /boot/kernel/acpi.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/acpi.ko
Reading symbols from /boot/kernel/pf.ko...Reading symbols from /boot/kernel/pf.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/pf.ko
Reading symbols from /boot/kernel/smbfs.ko...Reading symbols from /boot/kernel/smbfs.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/smbfs.ko
Reading symbols from /boot/kernel/libiconv.ko...Reading symbols from /boot/kernel/libiconv.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/libiconv.ko
Reading symbols from /boot/kernel/libmchain.ko...Reading symbols from /boot/kernel/libmchain.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/libmchain.ko
Reading symbols from /boot/kernel/linux.ko...Reading symbols from /boot/kernel/linux.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/linux.ko
Reading symbols from /boot/kernel/logo_saver.ko...Reading symbols from /boot/kernel/logo_saver.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/logo_saver.ko
Reading symbols from /boot/kernel/ng_socket.ko...Reading symbols from /boot/kernel/ng_socket.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/ng_socket.ko
Reading symbols from /boot/kernel/netgraph.ko...Reading symbols from /boot/kernel/netgraph.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/netgraph.ko
Reading symbols from /boot/kernel/if_bridge.ko...Reading symbols from /boot/kernel/if_bridge.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/if_bridge.ko
Reading symbols from /boot/kernel/bridgestp.ko...Reading symbols from /boot/kernel/bridgestp.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/bridgestp.ko
#0  doadump () at pcpu.h:196
196	pcpu.h: No such file or directory.
	in pcpu.h
(kgdb) backtrace
#0  doadump () at pcpu.h:196
#1  0xc079a07e in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:418
#2  0xc079a352 in panic (fmt=Variable "fmt" is not available.
) at /usr/src/sys/kern/kern_shutdown.c:574
#3  0xc0493a07 in db_panic (addr=Could not find the frame base for "db_panic".
) at /usr/src/sys/ddb/db_command.c:446
#4  0xc049440c in db_command (last_cmdp=0xc0c48114, cmd_table=0x0, dopager=1)
   at /usr/src/sys/ddb/db_command.c:413
#5  0xc049451a in db_command_loop () at /usr/src/sys/ddb/db_command.c:466
#6  0xc0495d0d in db_trap (type=3, code=0) at /usr/src/sys/ddb/db_main.c:228
#7  0xc07c3866 in kdb_trap (type=3, code=0, tf=0xe69ceac8)
   at /usr/src/sys/kern/subr_kdb.c:524
#8  0xc0a9fb5b in trap (frame=0xe69ceac8) at /usr/src/sys/i386/i386/trap.c:688
#9  0xc0a8541b in calltrap () at /usr/src/sys/i386/i386/exception.s:159
#10 0xc07c39ea in kdb_enter_why (why=0xc0b42038 "panic", 
   msg=0xc0b42038 "panic") at cpufunc.h:60
#11 0xc079a336 in panic (fmt=0xc0af1d18 "Bad link elm %p next->prev != elm")
   at /usr/src/sys/kern/kern_shutdown.c:557
#12 0xc07d4b3b in doselwakeup (sip=0xc4f0c1f0, pri=88)
   at /usr/src/sys/kern/sys_generic.c:1138
#13 0xc07d4c1e in selwakeuppri (sip=0xc4f0c1f0, pri=88)
   at /usr/src/sys/kern/sys_generic.c:1114
#14 0xc07d9c8e in pipe_write (fp=0xc42b95f0, uio=0xe69cec60, 
   active_cred=0xc4aa8800, flags=0, td=0xc4bc8aa0)
   at /usr/src/sys/kern/sys_pipe.c:528
---Type <return> to continue, or q <return> to quit---#15 0xc07d6095 in dofilewrite (td=0xc4bc8aa0, fd=4, fp=0xc42b95f0, 
   auio=0xe69cec60, offset=-1, flags=0) at file.h:256
#16 0xc07d6318 in kern_writev (td=0xc4bc8aa0, fd=4, auio=0xe69cec60)
   at /usr/src/sys/kern/sys_generic.c:401
#17 0xc07d638f in write (td=0xc4bc8aa0, uap=0xe69cecfc)
   at /usr/src/sys/kern/sys_generic.c:317
#18 0xc0a9f2d3 in syscall (frame=0xe69ced38)
   at /usr/src/sys/i386/i386/trap.c:1090
#19 0xc0a85480 in Xint0x80_syscall ()
   at /usr/src/sys/i386/i386/exception.s:255
#20 0x00000033 in ?? ()
Previous frame inner to this frame (corrupt stack?)
(kgdb) list *0xc07d4b3b
0xc07d4b3b is in doselwakeup (/usr/src/sys/kern/sys_generic.c:1138).
1133		}
1134		if (td == NULL) {
1135			mtx_unlock(&sellock);
1136			return;
1137		}
1138		TAILQ_REMOVE(&td->td_selq, sip, si_thrlist);
1139		sip->si_thread = NULL;
1140		thread_lock(td);
1141		td->td_flags &= ~TDF_SELECT;
1142		thread_unlock(td);
(kgdb) 

http://www.freebsd.org/cgi/query-pr.cgi?pr=131290