kernel panic

Alex Lyashkov umka at sevcity.net
Sat Jun 11 15:17:16 GMT 2005


Hello Robert.

Today i install new freebsd box with freebsd 5-stable, sources from are
over Jun  6 09:28 EEST.

when i tried to work I got are full repeatable panic.

#2  0xc04aafb0 in panic (fmt=0xc0610e42 "sbflush_locked: cc %u || mb %p
|| mbcnt %u")
    at /usr/src/sys/kern/kern_shutdown.c:566
        td = (struct thread *) 0xc11cec00
        bootopt = 260
        newpanic = 0
        ap = 0xc11cec00 "L\005Iа@╪\031а"
        buf = "sbflush_locked: cc 0 || mb 0xc135f300 || mbcnt 0", '\0'
<repeats 207 times>
#3  0xc04e4a07 in sbflush_locked (sb=0xc1d3e6a4) at
/usr/src/sys/kern/uipc_socket2.c:1119
No locals.
#4  0xc04e4a46 in sbflush (sb=0xc1d3e6a4) at
/usr/src/sys/kern/uipc_socket2.c:1128
No locals.
#5  0xc055902f in tcp_disconnect (tp=0xc1da11bc) at
/usr/src/sys/netinet/tcp_usrreq.c:1226
        so = (struct socket *) 0xc1d3e654
#6  0xc0557f58 in tcp_usr_disconnect (so=0x0) at
/usr/src/sys/netinet/tcp_usrreq.c:445
        inp = (struct inpcb *) 0xc1cebb40
        tp = (struct tcpcb *) 0x0
#7  0xc04e050a in sodisconnect (so=0x0) at
/usr/src/sys/kern/uipc_socket.c:579
No locals.
#8  0xc04e012c in soclose (so=0xc1d3e654) at
/usr/src/sys/kern/uipc_socket.c:458
        error = 0
#9  0xc04d0c3f in soo_close (fp=0xc19e9d48, td=0xc11cec00) at
/usr/src/sys/kern/sys_socket.c:299
        error = 0
        so = (struct socket *) 0x0
#10 0xc048d200 in fdrop_locked (fp=0xc19e9d48, td=0xc11cec00) at
file.h:288
        error = 0
#11 0xc048d151 in fdrop (fp=0xc19e9d48, td=0xc11cec00) at
/usr/src/sys/kern/kern_descrip.c:2101
No locals.
#12 0xc048b81b in closef (fp=0xc19e9d48, td=0xc11cec00) at
/usr/src/sys/kern/kern_descrip.c:1918
        vp = (struct vnode *) 0x0
        lf = {l_start = 579614447286217896, l_len =
-3085549963380260856, l_pid = 0, l_type = 0, l_whence = 0}
        fdtol = (struct filedesc_to_leader *) 0xd52deca8
        fdp = (struct filedesc *) 0xc142c400
#13 0xc0488d05 in close (td=0xc11cec00, uap=0x0) at
/usr/src/sys/kern/kern_descrip.c:1004
        fdp = (struct filedesc *) 0xc142c400
        fp = (struct file *) 0xc19e9d48
        fd = 45
        error = -1068914549
        holdleaders = 0
#14 0xc05e45b3 in syscall (frame=
      {tf_fs = 47, tf_es = 47, tf_ds = -1088225233, tf_edi = 136442880,
tf_esi = -1085465088, tf_ebp = -1085465192, tf_isp = -718410396, tf_ebx
= 673633468, tf_edx = 148024960, tf_ecx = 135296768, tf_eax = 6,
tf_trapno = 0, tf_err = 2, tf_eip = 673966799, tf_cs = 31, tf_eflags =
646, tf_esp = -1085465236, tf_ss = 47}) at
/usr/src/sys/i386/i386/trap.c:1009

(kgdb) p *sb
$1 = {sb_sel = {si_thrlist = {tqe_next = 0x0, tqe_prev = 0xc1d06030},
si_thread = 0x0, si_note = {kl_lock = 0xc1d3e6bc,
      kl_list = {slh_first = 0x0}}, si_flags = 0}, sb_mtx = {mtx_object
= {lo_class = 0xc063497c,
      lo_name = 0xc0610dc2 "so_rcv", lo_type = 0xc0610dc2 "so_rcv",
lo_flags = 196608, lo_list = {tqe_next = 0x0,
        tqe_prev = 0x0}, lo_witness = 0x0}, mtx_lock = 3239898112,
mtx_recurse = 0}, sb_mb = 0xc135f300,
  sb_mbtail = 0xc1366600, sb_lastrecord = 0xc135f300, sb_cc = 0,
sb_hiwat = 66176, sb_mbcnt = 0, sb_mbmax = 262144,
  sb_ctl = 0, sb_lowat = 1, sb_timeo = 0, sb_flags = 0, sb_state = 32}
(kgdb) f 5
#5  0xc055902f in tcp_disconnect (tp=0xc1da11bc) at
/usr/src/sys/netinet/tcp_usrreq.c:1226
1226                    sbflush(&so->so_rcv);
(kgdb) p so
$2 = (struct socket *) 0xc1d3e654
(kgdb) p *so
$3 = {so_count = 1, so_type = 1, so_options = 4, so_linger = 0, so_state
= 266, so_qstate = 0, so_pcb = 0xc1cebb40,
  so_proto = 0xc063ff28, so_head = 0x0, so_incomp = {tqh_first = 0x0,
tqh_last = 0x0}, so_comp = {tqh_first = 0x0,
    tqh_last = 0x0}, so_list = {tqe_next = 0x0, tqe_prev = 0xc1810534},
so_qlen = 0, so_incqlen = 0, so_qlimit = 0,
  so_timeo = 0, so_error = 0, so_sigio = 0x0, so_oobmark = 0, so_aiojobq
= {tqh_first = 0x0, tqh_last = 0xc1d3e69c},
  so_rcv = {sb_sel = {si_thrlist = {tqe_next = 0x0, tqe_prev =
0xc1d06030}, si_thread = 0x0, si_note = {
        kl_lock = 0xc1d3e6bc, kl_list = {slh_first = 0x0}}, si_flags =
0}, sb_mtx = {mtx_object = {lo_class = 0xc063497c,
        lo_name = 0xc0610dc2 "so_rcv", lo_type = 0xc0610dc2 "so_rcv",
lo_flags = 196608, lo_list = {tqe_next = 0x0,
          tqe_prev = 0x0}, lo_witness = 0x0}, mtx_lock = 3239898112,
mtx_recurse = 0}, sb_mb = 0xc135f300,
    sb_mbtail = 0xc1366600, sb_lastrecord = 0xc135f300, sb_cc = 0,
sb_hiwat = 66176, sb_mbcnt = 0, sb_mbmax = 262144,
    sb_ctl = 0, sb_lowat = 1, sb_timeo = 0, sb_flags = 0, sb_state =
32}, so_snd = {sb_sel = {si_thrlist = {
        tqe_next = 0x0, tqe_prev = 0x0}, si_thread = 0x0, si_note =
{kl_lock = 0xc1d3e724, kl_list = {slh_first = 0x0}},
      si_flags = 0}, sb_mtx = {mtx_object = {lo_class = 0xc063497c,
lo_name = 0xc0610dbb "so_snd",
        lo_type = 0xc0610dbb "so_snd", lo_flags = 196608, lo_list =
{tqe_next = 0x0, tqe_prev = 0x0}, lo_witness = 0x0},
      mtx_lock = 4, mtx_recurse = 0}, sb_mb = 0xc18bec00, sb_mbtail =
0xc18bec00, sb_lastrecord = 0xc18bec00, sb_cc = 529,
    sb_hiwat = 33792, sb_mbcnt = 2304, sb_mbmax = 262144, sb_ctl = 0,
sb_lowat = 2048, sb_timeo = 0, sb_flags = 0,
    sb_state = 16}, so_upcall = 0, so_upcallarg = 0x0, so_cred =
0xc1413500, so_label = 0x0, so_peerlabel = 0x0,
  so_gencnt = 17291, so_emuldata = 0x0, so_accf = 0x0}
(kgdb) p *tp
$4 = {t_segq = {lh_first = 0x0}, t_segqlen = 0, t_dupacks = 0, unused =
0x0, tt_rexmt = 0xc1da1300,
  tt_persist = 0xc1da1318, tt_keep = 0xc1da1330, tt_2msl = 0xc1da1348,
tt_delack = 0xc1da1360, t_inpcb = 0xc1cebb40,
  t_state = 4, t_flags = 992, t_force = 0, snd_una = 683843078, snd_max
= 683843350, snd_nxt = 683843350,
  snd_up = 683843078, snd_wl1 = 567974456, snd_wl2 = 683843078, iss =
683843077, irs = 567974455, rcv_nxt = 567974822,
  rcv_adv = 568040998, rcv_wnd = 66176, rcv_up = 567974456, snd_wnd =
132352, snd_cwnd = 1408, snd_bwnd = 1073725440,
  snd_ssthresh = 2896, snd_bandwidth = 63746785, snd_recover =
683843078, t_maxopd = 1420, t_rcvtime = 1401062,
  t_starttime = 1401057, t_rtttime = 1405584, t_rtseq = 683843078,
t_bw_rtttime = 1401057, t_bw_rtseq = 0, t_rxtcur = 382,
  t_maxseg = 1408, t_srtt = 1086, t_rttvar = 595, t_rxtshift = 0,
t_rttmin = 3, t_rttbest = 1236, t_rttupdated = 1,
  max_sndwnd = 132352, t_softerror = 0, t_oobflags = 0 '\0', t_iobc = 0
'\0', snd_scale = 2 '\002', rcv_scale = 1 '\001',
  request_r_scale = 1 '\001', requested_s_scale = 2 '\002', ts_recent =
716722322, ts_recent_age = 1401062,
  last_ack_sent = 567974822, cc_send = 0, cc_recv = 0, snd_cwnd_prev =
0, snd_ssthresh_prev = 0, snd_recover_prev = 0,
  t_badrxtwin = 0, snd_limited = 0 '\0', rcv_second = 0, rcv_pps = 0,
rcv_byps = 0, sack_enable = 1, snd_numholes = 0,
  snd_holes = 0x0, rcv_lastsack = 0, rcv_numsacks = 0, sackblks =
{{start = 0, end = 0}, {start = 0, end = 0}, {start = 0,
      end = 0}, {start = 0, end = 0}, {start = 0, end = 0}, {start = 0,
end = 0}}, sack_newdata = 0}
(kgdb)

other panic with 'Panic String: sbdrop', but for it i can`t have
backtrace.

Repeat it trivial - at this host i have are ircd daemon who restarted
via cron script. I tried to connect to ircd port (via loopback) at near
start time and got a panic.

If you need additional info ask me directly - i`m not are subscribed to
list.

-- 
Alex Lyashkov <umka at sevcity.net>
SevcityNet


More information about the freebsd-stable mailing list