From owner-freebsd-bugs@FreeBSD.ORG Sat Feb 4 07:20:22 2006 Return-Path: X-Original-To: freebsd-bugs@hub.freebsd.org Delivered-To: freebsd-bugs@hub.freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id A8C5416A420 for ; Sat, 4 Feb 2006 07:20:22 +0000 (GMT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id 5318243D7D for ; Sat, 4 Feb 2006 07:20:03 +0000 (GMT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.13.4/8.13.4) with ESMTP id k147K3RS001239 for ; Sat, 4 Feb 2006 07:20:03 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.13.4/8.13.4/Submit) id k147K366001238; Sat, 4 Feb 2006 07:20:03 GMT (envelope-from gnats) Resent-Date: Sat, 4 Feb 2006 07:20:03 GMT Resent-Message-Id: <200602040720.k147K366001238@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, Ender Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id ABF0C16A422 for ; Sat, 4 Feb 2006 07:12:11 +0000 (GMT) (envelope-from nobody@FreeBSD.org) Received: from www.freebsd.org (www.freebsd.org [216.136.204.117]) by mx1.FreeBSD.org (Postfix) with ESMTP id 44AF443D45 for ; Sat, 4 Feb 2006 07:12:11 +0000 (GMT) (envelope-from nobody@FreeBSD.org) Received: from www.freebsd.org (localhost [127.0.0.1]) by www.freebsd.org (8.13.1/8.13.1) with ESMTP id k147CB00026339 for ; Sat, 4 Feb 2006 07:12:11 GMT (envelope-from nobody@www.freebsd.org) Received: (from nobody@localhost) by www.freebsd.org (8.13.1/8.13.1/Submit) id k147CBBY026338; Sat, 4 Feb 2006 07:12:11 GMT (envelope-from nobody) Message-Id: <200602040712.k147CBBY026338@www.freebsd.org> Date: Sat, 4 Feb 2006 07:12:11 GMT From: Ender To: freebsd-gnats-submit@FreeBSD.org X-Send-Pr-Version: www-2.3 Cc: Subject: misc/92792: kernel crash X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 04 Feb 2006 07:20:22 -0000 >Number: 92792 >Category: misc >Synopsis: kernel crash >Confidential: no >Severity: critical >Priority: high >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Sat Feb 04 07:20:02 GMT 2006 >Closed-Date: >Last-Modified: >Originator: Ender >Release: FreeBSD bnet 6.0-STABLE >Organization: none >Environment: FreeBSD bnet 6.0-STABLE FreeBSD 6.0-STABLE #1: Fri Feb 3 13:07:06 EST 2006 >Description: bnet# kgdb kernel.debug /var/crash/vmcore.1 [GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"] GNU gdb 6.1.1 [FreeBSD] Copyright 2004 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "i386-marcel-freebsd". Unread portion of the kernel message buffer: panic: sbdrop cpuid = 1 Uptime: 11h48m32s Dumping 3071 MB (3 chunks) chunk 0: 1MB (159 pages) ... ok chunk 1: 3070MB (785904 pages) 3054 3038 3022 3006 2990 2974 2958 2942 2926 2910 2894 2878 2862 2846 2830 2814 2798 2782 2766 2750 2734 2718 2702 2686 2670 2654 2638 2622 2606 2590 2574 2558 2542 2526 2510 2494 2478 2462 2446 2430 2414 2398 2382 2366 2350 2334 2318 2302 2286 2270 2254 2238 2222 2206 2190 2174 2158 2142 2126 2110 2094 2078 2062 2046 2030 2014 1998 1982 1966 1950 1934 1918 1902 1886 1870 1854 1838 1822 1806 1790 1774 1758 1742 1726 1710 1694 1678 1662 1646 1630 1614 1598 1582 1566 1550 1534 1518 1502 1486 1470 1454 1438 1422 1406 1390 1374 1358 1342 1326 1310 1294 1278 1262 1246 1230 1214 1198 1182 1166 1150 1134 1118 1102 1086 1070 1054 1038 1022 1006 990 974 958 942 926 910 894 878 862 846 830 814 798 782 766 750 734 718 702 686 670 654 638 622 606 590 574 558 542 526 510 494 478 462 446 430 414 398 382 366 350 334 318 302 286 270 254 238 222 206 190 174 158 142 126 110 94 78 62 46 30 14 ... ok chunk 2: 1MB (128 pages) #0 doadump () at pcpu.h:165 165 __asm __volatile("movl %%fs:0,%0" : "=r" (td)); (kgdb) bt full #0 doadump () at pcpu.h:165 No locals. #1 0xc0497e2e in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:399 first_buf_printf = 1 #2 0xc0498155 in panic (fmt=0xc05eb8be "sbdrop") at /usr/src/sys/kern/kern_shutdown.c:555 td = (struct thread *) 0xdb88ad80 bootopt = 260 newpanic = 0 ap = 0xdb88ad80 "\f\222\210Û\200ñ\201Û" buf = "sbdrop", '\0' #3 0xc04d5ef4 in sbdrop_locked (sb=0xdccc4be8, len=595402917) at /usr/src/sys/kern/uipc_socket2.c:1157 m = (struct mbuf *) 0x0 next = (struct mbuf *) 0x0 #4 0xc051f565 in tcp_input (m=0xdcaed000, off0=20) at /usr/src/sys/netinet/tcp_input.c:2119 th = (struct tcphdr *) 0xdcb2d824 ip = (struct ip *) 0xdcb2d810 ipov = (struct ipovly *) 0xdcb2d810 inp = (struct inpcb *) 0xdcbc40b4 optp = (u_char *) 0x0 optlen = 0 len = 132 tlen = 0 off = 20 drop_hdrlen = 40 tp = (struct tcpcb *) 0xdd519398 thflags = 16 so = (struct socket *) 0xdccc4b20 todrop = 132 acked = 132 ourfinisacked = 0 needoutput = 1 tiwin = 16677 to = {to_flags = 0, to_tsval = 0, to_tsecr = 0, to_mss = 0, to_requested_s_scale = 0 '\0', to_nsacks = 0 '\0', to_sacks = 0x0} headlocked = 1 rstreason = 132 ip6 = (struct ip6_hdr *) 0x0 isipv6 = 0 #5 0xc0516d3d in ip_input (m=0xdcaed000) at /usr/src/sys/netinet/ip_input.c:778 ip = (struct ip *) 0xdcb2d810 ia = (struct in_ifaddr *) 0xdbc15c00 ifa = (struct ifaddr *) 0x0 checkif = 0 hlen = 20 sum = 0 dchg = 0 odst = {s_addr = 0} #6 0xc050828f in netisr_processqueue (ni=0xc0635298) at /usr/src/sys/net/netisr.c:236 m = (struct mbuf *) 0xdcaed000 #7 0xc050848e in swi_net (dummy=0x0) at /usr/src/sys/net/netisr.c:349 ni = (struct netisr *) 0xc0635298 bits = 0 i = 0 #8 0xc04848a5 in ithread_loop (arg=0xdb7f8400) at /usr/src/sys/kern/kern_intr.c:547 ithd = (struct ithd *) 0xdb7f8400 ih = (struct intrhand *) 0xdb866a00 td = (struct thread *) 0xdb88ad80 p = (struct proc *) 0xdb88920c count = 0 warned = 0 #9 0xc0483961 in fork_exit (callout=0xc0484744 , arg=0xdb7f8400, frame=0xfcdead38) at /usr/src/sys/kern/kern_fork.c:789 p = (struct proc *) 0xdb88920c td = (struct thread *) 0x0 #10 0xc05b424c in fork_trampoline () at /usr/src/sys/i386/i386/exception.s:208 Some other potential useful information: #KERN.IPC kern.ipc.somaxconn=65536 kern.ipc.nmbclusters=0 kern.ipc.max_datalen=512 kern.ipc.maxsockbuf=2097152 kern.ipc.maxsockets=65536 #KERN.MAX kern.maxfiles=65536 kern.maxfilesperproc=65536 kern.maxproc=65536 kern.maxprocperuid=65536 kern.dfldsiz=2147483648 kern.dflssiz=2147483648 kern.maxdsiz=2147483648 kern.maxtsiz=2147483648 kern.maxssiz=2147483648 #NET.INET.RAW net.inet.raw.maxdgram=57344 net.inet.raw.recvspace=65536 #NET.INET.TCP net.inet.tcp.tcbhashsize=16384 net.inet.tcp.recvspace=262144 net.inet.tcp.sendspace=262144 net.inet.tcp.blackhole=2 #net.inet.tcp.msl=7500 net.inet.tcp.delayed_ack=0 net.inet.tcp.hostcache.cachelimit=32768 net.inet.tcp.hostcache.hashsize=32768 net.inet.tcp.hostcache.bucketlimit=60 #NET.INET.UDP net.inet.udp.maxdgram=57344 net.inet.udp.recvspace=65536 net.inet.udp.blackhole=1 #NET.LOCAL net.local.dgram.maxdgram=57344 net.local.dgram.recvspace=65536 net.local.stream.recvspace=65536 net.local.stream.sendspace=65536 #fastforward #net.inet.ip.fastforwarding=0 #VFS vfs.hirunningspace=8388608 vfs.ufs.dirhash_maxmem=8388608 dmesg: Copyright (c) 1992-2005 The FreeBSD Project. Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 The Regents of the University of California. All rights reserved. FreeBSD 6.0-STABLE #1: Fri Feb 3 13:07:06 EST 2006 ender@bnet:/usr/obj/usr/src/sys/BNET acpi_alloc_wakeup_handler: can't alloc wake memory ACPI APIC Table: Timecounter "i8254" frequency 1193182 Hz quality 0 CPU: AMD Athlon(tm) MP 2800+ (2133.42-MHz 686-class CPU) Origin = "AuthenticAMD" Id = 0x6a0 Stepping = 0 Features=0x383fbff AMD Features=0xc0480800 real memory = 3220701184 (3071 MB) avail memory = 3150737408 (3004 MB) FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs cpu0 (BSP): APIC ID: 1 cpu1 (AP): APIC ID: 0 MADT: Forcing active-low polarity and level trigger for SCI ioapic0 irqs 0-23 on motherboard npx0: [FAST] npx0: on motherboard npx0: INT 16 interface acpi0: on motherboard acpi0: Power Button (fixed) acpi0: Sleep Button (fixed) Timecounter "ACPI-fast" frequency 3579545 Hz quality 1000 acpi_timer0: <24-bit timer at 3.579545MHz> port 0x8008-0x800b on acpi0 cpu0: on acpi0 cpu1: on acpi0 acpi_button0: on acpi0 pcib0: port 0xcf8-0xcff,0x8000-0x807f,0x8080-0x80ff iomem 0xd8000-0xdbfff on acpi0 pci0: on pcib0 agp0: port 0x1010-0x1013 mem 0xea000000-0xebffffff,0xe9300000-0xe9300fff at device 0.0 on pci0 pcib1: at device 1.0 on pci0 pci1: on pcib1 pci1: at device 5.0 (no driver attached) isab0: at device 7.0 on pci0 isa0: on isab0 atapci0: port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xf000-0xf00f at device 7.1 on pci0 ata0: on atapci0 ata1: on atapci0 pci0: at device 7.3 (no driver attached) pcib2: at device 16.0 on pci0 pci2: on pcib2 em0: port 0x2080-0x20bf mem 0xe9020000-0xe903ffff,0xe9000000-0xe901fff f irq 17 at device 5.0 on pci2 em0: Ethernet address: 00:07:e9:08:e1:fa pci2: at device 8.0 (no driver attached) atkbdc0: port 0x60,0x64 irq 1 on acpi0 atkbd0: irq 1 on atkbdc0 atkbd0: [GIANT-LOCKED] sio0: <16550A-compatible COM port> port 0x3f8-0x3ff irq 4 flags 0x10 on acpi0 sio0: type 16550A pmtimer0 on isa0 orm0: at iomem 0xca800-0xcafff,0xcb000-0xcbfff,0xe0000-0xe3fff on isa0 sc0: at flags 0x100 on isa0 sc0: VGA <16 virtual consoles, flags=0x300> vga0: at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0 sio1: configured irq 3 not in bitmap of probed irqs 0 sio1: port may not be enabled Timecounters tick every 10.000 msec ad0: 114473MB at ata0-master UDMA100 SMP: AP CPU #1 Launched! Swap zone entries reduced from 121574 to 36021. Trying to mount root from ufs:/dev/ad0s1a em0: link state changed to UP >How-To-Repeat: Have 10,000 TCP connections on your network stack. >Fix: >Release-Note: >Audit-Trail: >Unformatted: