Date: Sat, 4 Feb 2006 07:12:11 GMT From: Ender <ender@tog.net> To: freebsd-gnats-submit@FreeBSD.org Subject: misc/92792: kernel crash Message-ID: <200602040712.k147CBBY026338@www.freebsd.org> Resent-Message-ID: <200602040720.k147K366001238@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 92792
>Category: misc
>Synopsis: kernel crash
>Confidential: no
>Severity: critical
>Priority: high
>Responsible: freebsd-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: sw-bug
>Submitter-Id: current-users
>Arrival-Date: Sat Feb 04 07:20:02 GMT 2006
>Closed-Date:
>Last-Modified:
>Originator: Ender
>Release: FreeBSD bnet 6.0-STABLE
>Organization:
none
>Environment:
FreeBSD bnet 6.0-STABLE FreeBSD 6.0-STABLE #1: Fri Feb 3 13:07:06 EST 2006
>Description:
bnet# kgdb kernel.debug /var/crash/vmcore.1
[GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"]
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd".
Unread portion of the kernel message buffer:
panic: sbdrop
cpuid = 1
Uptime: 11h48m32s
Dumping 3071 MB (3 chunks)
chunk 0: 1MB (159 pages) ... ok
chunk 1: 3070MB (785904 pages) 3054 3038 3022 3006 2990 2974 2958 2942 2926 2910 2894 2878 2862 2846 2830 2814 2798 2782 2766 2750 2734 2718 2702 2686 2670 2654 2638 2622 2606 2590 2574 2558 2542 2526 2510 2494 2478 2462 2446 2430 2414 2398 2382 2366 2350 2334 2318 2302 2286 2270 2254 2238 2222 2206 2190 2174 2158 2142 2126 2110 2094 2078 2062 2046 2030 2014 1998 1982 1966 1950 1934 1918 1902 1886 1870 1854 1838 1822 1806 1790 1774 1758 1742 1726 1710 1694 1678 1662 1646 1630 1614 1598 1582 1566 1550 1534 1518 1502 1486 1470 1454 1438 1422 1406 1390 1374 1358 1342 1326 1310 1294 1278 1262 1246 1230 1214 1198 1182 1166 1150 1134 1118 1102 1086 1070 1054 1038 1022 1006 990 974 958 942 926 910 894 878 862 846 830 814 798 782 766 750 734 718 702 686 670 654 638 622 606 590 574 558 542 526 510 494 478 462 446 430 414 398 382 366 350 334 318 302 286 270 254 238 222 206 190 174 158 142 126 110 94 78 62 46 30 14 ... ok
chunk 2: 1MB (128 pages)
#0 doadump () at pcpu.h:165
165 __asm __volatile("movl %%fs:0,%0" : "=r" (td));
(kgdb) bt full
#0 doadump () at pcpu.h:165
No locals.
#1 0xc0497e2e in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:399
first_buf_printf = 1
#2 0xc0498155 in panic (fmt=0xc05eb8be "sbdrop") at /usr/src/sys/kern/kern_shutdown.c:555
td = (struct thread *) 0xdb88ad80
bootopt = 260
newpanic = 0
ap = 0xdb88ad80 "\f\222\210Û\200ñ\201Û"
buf = "sbdrop", '\0' <repeats 249 times>
#3 0xc04d5ef4 in sbdrop_locked (sb=0xdccc4be8, len=595402917) at /usr/src/sys/kern/uipc_socket2.c:1157
m = (struct mbuf *) 0x0
next = (struct mbuf *) 0x0
#4 0xc051f565 in tcp_input (m=0xdcaed000, off0=20) at /usr/src/sys/netinet/tcp_input.c:2119
th = (struct tcphdr *) 0xdcb2d824
ip = (struct ip *) 0xdcb2d810
ipov = (struct ipovly *) 0xdcb2d810
inp = (struct inpcb *) 0xdcbc40b4
optp = (u_char *) 0x0
optlen = 0
len = 132
tlen = 0
off = 20
drop_hdrlen = 40
tp = (struct tcpcb *) 0xdd519398
thflags = 16
so = (struct socket *) 0xdccc4b20
todrop = 132
acked = 132
ourfinisacked = 0
needoutput = 1
tiwin = 16677
to = {to_flags = 0, to_tsval = 0, to_tsecr = 0, to_mss = 0, to_requested_s_scale = 0 '\0', to_nsacks = 0 '\0',
to_sacks = 0x0}
headlocked = 1
rstreason = 132
ip6 = (struct ip6_hdr *) 0x0
isipv6 = 0
#5 0xc0516d3d in ip_input (m=0xdcaed000) at /usr/src/sys/netinet/ip_input.c:778
ip = (struct ip *) 0xdcb2d810
ia = (struct in_ifaddr *) 0xdbc15c00
ifa = (struct ifaddr *) 0x0
checkif = 0
hlen = 20
sum = 0
dchg = 0
odst = {s_addr = 0}
#6 0xc050828f in netisr_processqueue (ni=0xc0635298) at /usr/src/sys/net/netisr.c:236
m = (struct mbuf *) 0xdcaed000
#7 0xc050848e in swi_net (dummy=0x0) at /usr/src/sys/net/netisr.c:349
ni = (struct netisr *) 0xc0635298
bits = 0
i = 0
#8 0xc04848a5 in ithread_loop (arg=0xdb7f8400) at /usr/src/sys/kern/kern_intr.c:547
ithd = (struct ithd *) 0xdb7f8400
ih = (struct intrhand *) 0xdb866a00
td = (struct thread *) 0xdb88ad80
p = (struct proc *) 0xdb88920c
count = 0
warned = 0
#9 0xc0483961 in fork_exit (callout=0xc0484744 <ithread_loop>, arg=0xdb7f8400, frame=0xfcdead38)
at /usr/src/sys/kern/kern_fork.c:789
p = (struct proc *) 0xdb88920c
td = (struct thread *) 0x0
#10 0xc05b424c in fork_trampoline () at /usr/src/sys/i386/i386/exception.s:208
Some other potential useful information:
#KERN.IPC
kern.ipc.somaxconn=65536
kern.ipc.nmbclusters=0
kern.ipc.max_datalen=512
kern.ipc.maxsockbuf=2097152
kern.ipc.maxsockets=65536
#KERN.MAX
kern.maxfiles=65536
kern.maxfilesperproc=65536
kern.maxproc=65536
kern.maxprocperuid=65536
kern.dfldsiz=2147483648
kern.dflssiz=2147483648
kern.maxdsiz=2147483648
kern.maxtsiz=2147483648
kern.maxssiz=2147483648
#NET.INET.RAW
net.inet.raw.maxdgram=57344
net.inet.raw.recvspace=65536
#NET.INET.TCP
net.inet.tcp.tcbhashsize=16384
net.inet.tcp.recvspace=262144
net.inet.tcp.sendspace=262144
net.inet.tcp.blackhole=2
#net.inet.tcp.msl=7500
net.inet.tcp.delayed_ack=0
net.inet.tcp.hostcache.cachelimit=32768
net.inet.tcp.hostcache.hashsize=32768
net.inet.tcp.hostcache.bucketlimit=60
#NET.INET.UDP
net.inet.udp.maxdgram=57344
net.inet.udp.recvspace=65536
net.inet.udp.blackhole=1
#NET.LOCAL
net.local.dgram.maxdgram=57344
net.local.dgram.recvspace=65536
net.local.stream.recvspace=65536
net.local.stream.sendspace=65536
#fastforward
#net.inet.ip.fastforwarding=0
#VFS
vfs.hirunningspace=8388608
vfs.ufs.dirhash_maxmem=8388608
dmesg:
Copyright (c) 1992-2005 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
The Regents of the University of California. All rights reserved.
FreeBSD 6.0-STABLE #1: Fri Feb 3 13:07:06 EST 2006
ender@bnet:/usr/obj/usr/src/sys/BNET
acpi_alloc_wakeup_handler: can't alloc wake memory
ACPI APIC Table: <PTLTD APIC >
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: AMD Athlon(tm) MP 2800+ (2133.42-MHz 686-class CPU)
Origin = "AuthenticAMD" Id = 0x6a0 Stepping = 0
Features=0x383fbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR,SSE>
AMD Features=0xc0480800<SYSCALL,MP,MMX+,3DNow+,3DNow>
real memory = 3220701184 (3071 MB)
avail memory = 3150737408 (3004 MB)
FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs
cpu0 (BSP): APIC ID: 1
cpu1 (AP): APIC ID: 0
MADT: Forcing active-low polarity and level trigger for SCI
ioapic0 <Version 1.1> irqs 0-23 on motherboard
npx0: [FAST]
npx0: <math processor> on motherboard
npx0: INT 16 interface
acpi0: <PTLTD RSDT> on motherboard
acpi0: Power Button (fixed)
acpi0: Sleep Button (fixed)
Timecounter "ACPI-fast" frequency 3579545 Hz quality 1000
acpi_timer0: <24-bit timer at 3.579545MHz> port 0x8008-0x800b on acpi0
cpu0: <ACPI CPU> on acpi0
cpu1: <ACPI CPU> on acpi0
acpi_button0: <Power Button> on acpi0
pcib0: <ACPI Host-PCI bridge> port 0xcf8-0xcff,0x8000-0x807f,0x8080-0x80ff iomem 0xd8000-0xdbfff on acpi0
pci0: <ACPI PCI bus> on pcib0
agp0: <AMD 762 host to AGP bridge> port 0x1010-0x1013 mem 0xea000000-0xebffffff,0xe9300000-0xe9300fff at device 0.0 on pci0
pcib1: <ACPI PCI-PCI bridge> at device 1.0 on pci0
pci1: <ACPI PCI bus> on pcib1
pci1: <display, VGA> at device 5.0 (no driver attached)
isab0: <PCI-ISA bridge> at device 7.0 on pci0
isa0: <ISA bus> on isab0
atapci0: <AMD 768 UDMA100 controller> port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xf000-0xf00f at device 7.1 on pci0
ata0: <ATA channel 0> on atapci0
ata1: <ATA channel 1> on atapci0
pci0: <bridge> at device 7.3 (no driver attached)
pcib2: <ACPI PCI-PCI bridge> at device 16.0 on pci0
pci2: <ACPI PCI bus> on pcib2
em0: <Intel(R) PRO/1000 Network Connection Version - 3.2.18> port 0x2080-0x20bf mem 0xe9020000-0xe903ffff,0xe9000000-0xe901fff
f irq 17 at device 5.0 on pci2
em0: Ethernet address: 00:07:e9:08:e1:fa
pci2: <network, ethernet> at device 8.0 (no driver attached)
atkbdc0: <Keyboard controller (i8042)> port 0x60,0x64 irq 1 on acpi0
atkbd0: <AT Keyboard> irq 1 on atkbdc0
atkbd0: [GIANT-LOCKED]
sio0: <16550A-compatible COM port> port 0x3f8-0x3ff irq 4 flags 0x10 on acpi0
sio0: type 16550A
pmtimer0 on isa0
orm0: <ISA Option ROMs> at iomem 0xca800-0xcafff,0xcb000-0xcbfff,0xe0000-0xe3fff on isa0
sc0: <System console> at flags 0x100 on isa0
sc0: VGA <16 virtual consoles, flags=0x300>
vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
sio1: configured irq 3 not in bitmap of probed irqs 0
sio1: port may not be enabled
Timecounters tick every 10.000 msec
ad0: 114473MB <WDC WD1200JB-00EVA0 15.05R15> at ata0-master UDMA100
SMP: AP CPU #1 Launched!
Swap zone entries reduced from 121574 to 36021.
Trying to mount root from ufs:/dev/ad0s1a
em0: link state changed to UP
>How-To-Repeat:
Have 10,000 TCP connections on your network stack.
>Fix:
>Release-Note:
>Audit-Trail:
>Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200602040712.k147CBBY026338>