Date: Wed, 5 Mar 2003 20:48:46 -0600 From: Sean Kelly <smkelly@zombie.org> To: current@freebsd.org Subject: WITNESS panic in netinet/tcp_input.c Message-ID: <20030306024845.GA789@edgemaster.zombie.org>
next in thread | raw e-mail | index | archive | help
--SUOF0GtieIMvvwua
Content-Type: text/plain; charset=unknown-8bit
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
It seems like I'm being handed kernel panics on a platter today. I just got
a WITNESS-related one in /usr/src/sys/netinet/tcp_input.c:2190. And
actually, in the process of writing this message the first time, it
happened again. I've since booted to an older kernel.
The kernel this comes from is 5.0-CURRENT from Tue Mar 4 20:30:35 CST 2003.
Soft updates appears to have turned my public PGP keyring file into a bunch
of NULs too :< I assume that is an artifact of the kernel panic.
Script started on Wed Mar 5 19:51:06 2003
edgemaster# gdb -k /boot/kernel/kernel.debug vmcore.4=20
GNU gdb 5.2.1 (FreeBSD)
Copyright 2002 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain condition=
s.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for details.
This GDB was configured as "i386-undermydesk-freebsd"...
panic: bwrite: buffer is not busy???
panic messages:
---
panic: lock (sleep mutex) tcp not locked @ /usr/src/sys/netinet/tcp_input.c=
:2190
Stack backtrace:
syncing disks, buffers remaining... panic: bwrite: buffer is not busy???
Uptime: 20m40s
Dumping 1279 MB
ata1: resetting devices ..
done
[CTRL-C to abort] [CTRL-C to abort] [CTRL-C to abort] [CTRL-C to abort] [CT=
RL-C to abort] [CTRL-C to abort] [CTRL-C to abort] [CTRL-C to abort] [CTRL-=
C to abort] [CTRL-C to abort] 16 32 48[CTRL-C to abort] [CTRL-C to abort] =
[CTRL-C to abort] 64 80 96 112 128 144 160 176 192 208 224 240 256 272 288=
304 320 336 352 368 384 400 416 432 448 464 480 496 512 528 544 560 576 59=
2 608 624 640 656 672 688 704 720 736 752 768 784 800 816 832 848 864 880 8=
96 912 928 944 960 976 992 1008 1024 1040 1056 1072 1088 1104 1120 1136 115=
2 1168 1184 1200 1216 1232 1248 1264
---
#0 doadump () at /usr/src/sys/kern/kern_shutdown.c:239
239 dumping++;
(kgdb) bt full
#0 doadump () at /usr/src/sys/kern/kern_shutdown.c:239
No locals.
#1 0xc01cd66a in boot (howto=3D260) at /usr/src/sys/kern/kern_shutdown.c:3=
71
No locals.
#2 0xc01cd8d3 in panic () at /usr/src/sys/kern/kern_shutdown.c:542
td =3D (struct thread *) 0xc281aa50
bootopt =3D 260
newpanic =3D 0
buf =3D "bwrite: buffer is not busy???\0ked @ /usr/src/sys/netinet/tcp_inp=
ut.c:2190", '\0' <repeats 182 times>
#3 0xc020e142 in bwrite (bp=3D0xd30a4778) at /usr/src/sys/kern/vfs_bio.c:7=
95
oldflags =3D 537002148
newbp =3D (struct buf *) 0xc767d5b4
#4 0xc020fe5c in vfs_bio_awrite (bp=3D0xd30a4778)
at /usr/src/sys/kern/vfs_bio.c:1692
i =3D 1
j =3D 0
lblkno =3D 0
vp =3D (struct vnode *) 0xc767d5b4
ncl =3D 0
nwritten =3D 16384
size =3D 16384
maxcl =3D 8
#5 0xc02c0dca in ffs_fsync (ap=3D0xdf976a00)
at /usr/src/sys/ufs/ffs/ffs_vnops.c:257
vp =3D (struct vnode *) 0xc767d5b4
ip =3D (struct inode *) 0xd30a4778
bp =3D (struct buf *) 0xd30a4778
nbp =3D (struct buf *) 0x0
error =3D 0
wait =3D 0
passes =3D 4
skipmeta =3D 0
lbn =3D 1
#6 0xc02bff1e in ffs_sync (mp=3D0xc697a000, waitfor=3D2, cred=3D0xc2806e80=
,=20
td=3D0xc037f6a0) at vnode_if.h:612
nvp =3D (struct vnode *) 0xc767d490
vp =3D (struct vnode *) 0xc767d5b4
devvp =3D (struct vnode *) 0xc767d5b4
ip =3D (struct inode *) 0x0
ump =3D (struct ufsmount *) 0xc699b300
fs =3D (struct fs *) 0xc6970000
error =3D 0
count =3D 0
wait =3D 0
lockreq =3D 18
allerror =3D 0
#7 0xc022261b in sync (td=3D0xc037f6a0, uap=3D0x0)
at /usr/src/sys/kern/vfs_syscalls.c:138
mp =3D (struct mount *) 0xc697a000
nmp =3D (struct mount *) 0x0
asyncflag =3D 0
#8 0xc01cd29c in boot (howto=3D256) at /usr/src/sys/kern/kern_shutdown.c:2=
80
bp =3D (struct buf *) 0x0
iter =3D -1031689648
nbusy =3D -1031700352
pbusy =3D -1031689648
subiter =3D -1031700352
#9 0xc01cd8d3 in panic () at /usr/src/sys/kern/kern_shutdown.c:542
td =3D (struct thread *) 0xc281aa50
bootopt =3D 256
newpanic =3D 1
buf =3D "bwrite: buffer is not busy???\0ked @ /usr/src/sys/netinet/tcp_inp=
ut.c:2190", '\0' <repeats 182 times>
#10 0xc01ee013 in witness_unlock (lock=3D0xc038f9cc, flags=3D8,=20
file=3D0xc035a374 "/usr/src/sys/netinet/tcp_input.c", line=3D2190)
at /usr/src/sys/kern/subr_witness.c:951
lock_list =3D (struct lock_list_entry **) 0xc03e3540
instance =3D (struct lock_instance *) 0xc03e3554
class =3D (struct lock_class *) 0xc0384160
s =3D 1664
i =3D 0
j =3D -1070007860
#11 0xc01c4952 in _mtx_unlock_flags (m=3D0xc03e3554, opts=3D0,=20
file=3D0xc038f9cc "`A8=C0\a\2125=C0\a\2125=C0", line=3D-1069664960)
at /usr/src/sys/kern/kern_mutex.c:357
No locals.
#12 0xc0255ec9 in tcp_input (m=3D0xc038f9cc, off0=3D20)
at /usr/src/sys/netinet/tcp_input.c:2324
th =3D (struct tcphdr *) 0xc34c1824
ip =3D (struct ip *) 0xc34c1810
ipov =3D (struct ipovly *) 0xc03e3540
inp =3D (struct inpcb *) 0xc6cce804
optp =3D (u_char *) 0xc34c1838 "\001\001\b\n\026=FB\034\022"
optlen =3D 12
len =3D -1069664940
tlen =3D 1409
off =3D -1069664940
drop_hdrlen =3D 52
tp =3D (struct tcpcb *) 0xc75ae42c
thflags =3D 1
so =3D (struct socket *) 0xc758b300
todrop =3D -1069664940
acked =3D -1069664940
ourfinisacked =3D -1069664940
needoutput =3D 0
tiwin =3D 3225302336
to =3D {to_flags =3D 1, to_tsval =3D 385555474, to_tsecr =3D 123912,=20
to_cc =3D 0, to_ccecho =3D 0, to_mss =3D 0, to_requested_s_scale =3D 0 '\=
0',=20
to_pad =3D 0 '\0'}
taop =3D (struct rmxp_tao *) 0xc03e3554
tao_noncached =3D {tao_cc =3D 1461, tao_ccsent =3D 49209, tao_mssopt =3D 1=
1371}
headlocked =3D 0
next_hop =3D (struct sockaddr_in *) 0x0
rstreason =3D -1069664940
ip6 =3D (struct ip6_hdr *) 0x0
isipv6 =3D 0
#13 0xc024e6ea in ip_input (m=3D0xc283ff00)
at /usr/src/sys/netinet/ip_input.c:944
ip =3D (struct ip *) 0xc34c1810
fp =3D (struct ipq *) 0xc0353989
ia =3D (struct in_ifaddr *) 0xc6979400
ifa =3D (struct ifaddr *) 0x0
i =3D 0
hlen =3D 20
checkif =3D 0
sum =3D 0
pkt_dst =3D {s_addr =3D 1148225171}
divert_info =3D 0
args =3D {m =3D 0xc283ff00, oif =3D 0x0, next_hop =3D 0x0, rule =3D 0x0,=
=20
eh =3D 0x0, ro =3D 0xdf976ce0, dst =3D 0xc03e6174, flags =3D 227, f_id =
=3D {
dst_ip =3D 2475061316, src_ip =3D 3560425173, dst_port =3D 49209,=20
src_port =3D 11371, proto =3D 6 '\006', flags =3D 24 '\030'}, divert_ru=
le =3D 0,=20
retval =3D 3224731712}
#14 0xc02348a2 in swi_net (dummy=3D0x0) at /usr/src/sys/net/netisr.c:230
ni =3D (struct netisr *) 0xc038cb90
m =3D (struct mbuf *) 0xc283ff00
bits =3D 0
i =3D 0
#15 0xc01ae6c2 in ithread_loop (arg=3D0xc2818200)
at /usr/src/sys/kern/kern_intr.c:536
ithd =3D (struct ithd *) 0xc2818200
ih =3D (struct intrhand *) 0xc280f180
td =3D (struct thread *) 0xc281aa50
p =3D (struct proc *) 0xc28199ec
#16 0xc01ad902 in fork_exit (callout=3D0xc01ae570 <ithread_loop>, arg=3D0x0=
,=20
frame=3D0x0) at /usr/src/sys/kern/kern_fork.c:871
td =3D (struct thread *) 0x0
p =3D (struct proc *) 0xc28199ec
(kgdb)
edgemaster#=20
Script done on Wed Mar 5 19:51:29 2003
--=20
Sean Kelly | PGP KeyID: D2E5E296
smkelly@zombie.org | http://www.zombie.org
--SUOF0GtieIMvvwua
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (FreeBSD)
iD8DBQE+ZrcNPm7A9NLl4pYRApQKAJ9irr1pQIZy3IDSeCRVGCEupbHA2QCfVg62
+WmFpgFKlyydfoPKJHfSCE4=
=zIzl
-----END PGP SIGNATURE-----
--SUOF0GtieIMvvwua--
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030306024845.GA789>