Date: Sun, 4 Aug 2002 06:45:18 +0900 From: qhwt@myrealbox.com To: current@freebsd.org Subject: panic: free: address 0xc1802270(0xc1802000) has not been allocated. Message-ID: <20020803214518.GA635.qhwt@myrealbox.com>
next in thread | raw e-mail | index | archive | help
--lCAWRPmW1mITcIfM
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Hello.
I've encountered this panic with kernel from source as of 2002.07.30.00.00.00 .
I've seen this panic message in Julian's message in July
<Pine.BSF.4.21.0207080740090.28668-100000@InterJet.elischer.org>,
but he said in another mail that it was a pilot error. I've searched the list
archive and PR, but found none similar to this.
The backtrace is attached. I was about to start racoon under supervise,
but I doubt it's reproducible only by starting racoon.
Regards.
--lCAWRPmW1mITcIfM
Content-Type: text/plain; charset=us-ascii
Content-Disposition: attachment; filename=panic
Script started on Sun Aug 4 05:55:36 2002
$ gdb -k /usr/obj/kernel/kernel.debug vmcore.5
GNU gdb 5.2.0 (FreeBSD) 20020627
Copyright 2002 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for details.
This GDB was configured as "i386-undermydesk-freebsd"...
panic: bdwrite: buffer is not busy
panic messages:
---
panic: free: address 0xc1802270(0xc1802000) has not been allocated.
syncing disks... panic: bdwrite: buffer is not busy
Uptime: 11h31m12s
Dumping 63 MB
ata0: resetting devices ..
ata0: mask=03 ostat0=50 ostat2=00
ad0: ATAPI 00 00
ata0-slave: ATAPI 00 00
ata0: mask=03 stat0=50 stat1=00
ad0: ATA 01 a5
ata0: devices=01
ad0: success setting PIO4 on generic chip
done
16 32 48
---
#0 doadump () at /usr/src/sys/kern/kern_shutdown.c:213
213 dumping++;
(kgdb) bt
#0 doadump () at /usr/src/sys/kern/kern_shutdown.c:213
#1 0xc0195038 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:345
#2 0xc019526b in panic () at /usr/src/sys/kern/kern_shutdown.c:493
#3 0xc01d2f9d in bdwrite (bp=0x104) at /usr/src/sys/kern/vfs_bio.c:947
#4 0xc026c7c8 in ffs_update (vp=0xc137c948, waitfor=0)
at /usr/src/sys/ufs/ffs/ffs_inode.c:125
#5 0xc02814e2 in ffs_fsync (ap=0xc7b93a48)
at /usr/src/sys/ufs/ffs/ffs_vnops.c:272
#6 0xc027ea98 in ffs_sync (mp=0xc1288800, waitfor=2, cred=0xc09ecd80,
td=0xc0335580) at vnode_if.h:463
#7 0xc01e4d28 in sync (td=0xc0335580, uap=0x0)
at /usr/src/sys/kern/vfs_syscalls.c:127
#8 0xc0194c2c in boot (howto=256) at /usr/src/sys/kern/kern_shutdown.c:254
#9 0xc019526b in panic () at /usr/src/sys/kern/kern_shutdown.c:493
#10 0xc018898e in free (addr=0xc1802270, type=0xc0336c80)
at /usr/src/sys/kern/kern_malloc.c:226
#11 0xc018e139 in pargs_free (pa=0x0) at /usr/src/sys/kern/kern_proc.c:1125
#12 0xc018e286 in pargs_drop (pa=0xc1802270)
at /usr/src/sys/kern/kern_proc.c:1148
#13 0xc018e4a7 in sysctl_kern_proc_args (oidp=0xc033a000, arg1=0xc7b93ca8,
arg2=1, req=0xc7b93bfc) at /usr/src/sys/kern/kern_proc.c:1191
#14 0xc019e966 in sysctl_root (oidp=0x0, arg1=0xc1802270, arg2=-944161796,
req=0xc1802270) at /usr/src/sys/kern/kern_sysctl.c:1143
#15 0xc019ec3d in userland_sysctl (td=0x0, name=0xc7b93c9c, namelen=4,
---Type <return> to continue, or q <return> to quit---
old=0xc1802270, oldlenp=0xc1802270, inkernel=0, new=0xc7b93bfc, newlen=0,
retval=0xc7b93c94) at /usr/src/sys/kern/kern_sysctl.c:1241
#16 0xc019ea6d in __sysctl (td=0x0, uap=0xc7b93d10)
at /usr/src/sys/kern/kern_sysctl.c:1180
#17 0xc02d536d in syscall (frame=
{tf_fs = 47, tf_es = 47, tf_ds = 47, tf_edi = 134541312, tf_esi = -1077939844, tf_ebp = -1077939896, tf_isp = -944161420, tf_ebx = 672297404, tf_edx = -1077939840, tf_ecx = 4, tf_eax = 202, tf_trapno = 22, tf_err = 2, tf_eip = 671861531, tf_cs = 31, tf_eflags = 663, tf_esp = -1077939940, tf_ss = 47})
at /usr/src/sys/i386/i386/trap.c:1050
#18 0xc02c62cd in Xint0x80_syscall () at {standard input}:140
---Can't read userspace from dump, or kernel process---
(kgdb) frame 12
#12 0xc018e286 in pargs_drop (pa=0xc1802270)
at /usr/src/sys/kern/kern_proc.c:1148
1148 pargs_free(pa);
(kgdb) print pa
$1 = (struct pargs *) 0xc1802270
(kgdb) down
#11 0xc018e139 in pargs_free (pa=0x0) at /usr/src/sys/kern/kern_proc.c:1125
1125 FREE(pa, M_PARGS);
(kgdb) list
1120
1121 void
1122 pargs_free(struct pargs *pa)
1123 {
1124
1125 FREE(pa, M_PARGS);
1126 }
1127
1128 void
1129 pargs_hold(struct pargs *pa)
(kgdb) up
#12 0xc018e286 in pargs_drop (pa=0xc1802270)
at /usr/src/sys/kern/kern_proc.c:1148
1148 pargs_free(pa);
(kgdb) print *pa
$2 = {ar_ref = 0, ar_length = 3246400112, ar_args = 0xc1802278 ""}
--lCAWRPmW1mITcIfM--
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020803214518.GA635.qhwt>