GENERIC HEAD from Jan 17 03:57 UTC, vmcore.145 GDB: no debug ports present KDB: debugger backends: ddb KDB: current backend: ddb Copyright (c) 1992-2005 The FreeBSD Project. Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 The Regents of the University of California. All rights reserved. FreeBSD 6.0-CURRENT #0: Mon Jan 17 09:08:27 CET 2005 pho@current.osted.lan:/usr/src/sys/i386/compile/PHO WARNING: WITNESS option enabled, expect reduced performance. ACPI APIC Table: <A M I OEMAPIC > Timecounter "i8254" frequency 1193182 Hz quality 0 CPU: Intel(R) Celeron(R) CPU 1.80GHz (1799.14-MHz 686-class CPU) Origin = "GenuineIntel" Id = 0xf13 Stepping = 3 Features=0x3febfbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM> real memory = 267583488 (255 MB) avail memory = 252448768 (240 MB) : mount root from ufs:/dev/ad0s1a KDB: stack backtrace: getdirtybuf(1,c65f4730,cf8cc560,1,cf8cc574) at getdirtybuf+0x129 flush_deplist(cf8cc560,c1789800,0,c2405700,1) at flush_deplist+0x39 flush_inodedep_deps(0,ee,cf8cc5a0,c0620c46,c0823dd7) at flush_inodedep_deps+0x63 softdep_sync_metadata(cf8cc700,1,0,0,4) at softdep_sync_metadata+0x4e ffs_fsync(cf8cc700,cf8cc85c,c07393b6,cf8cc700,c06320fc) at ffs_fsync+0x111 VOP_FSYNC_AP(cf8cc700,c06320fc,c08f7840,c09192e0,0) at VOP_FSYNC_AP+0x4a ffs_truncate(c1be79b4,2000,0,880,c1a8f580) at ffs_truncate+0x64a ufs_direnter(c1be79b4,c299dac8,cf8cc918,cf8ccc0c,0,c266c834,cf8ccc0c,cf8cc918) at ufs_direnter+0x520 ufs_makeinode(cf8ccbf8,cf8ccc0c,cf8cca6c,cf8cca54,c07ca27a) at ufs_makeinode+0x25a ufs_create(cf8cca70,cf8ccb2c,c066d460,cf8cca70,0) at ufs_create+0x25 VOP_CREATE_AP(cf8cca70) at VOP_CREATE_AP+0x4a vn_open_cred(cf8ccbe4,cf8ccce4,1b0,c1a8f580,3) at vn_open_cred+0x470 vn_open(cf8ccbe4,cf8ccce4,1b0,3,c08e82e0,8,c082c50c,3bb) at vn_open+0x1e kern_open(c2609b80,bfbfea24,0,602,1b0) at kern_open+0xd6 open(c2609b80,cf8ccd14,3,7f,216) at open+0x18 syscall(bfbf002f,bfbf002f,bfbf002f,bfbfea24,bfbfea24) at syscall+0x128 Xint0x80_syscall() at Xint0x80_syscall+0x1f --- syscall (5, FreeBSD ELF32, open), eip = 0x280bfc47, esp = 0xbfbfe9cc, ebp = 0xbfbfe9e8 --- sigreturn: eflags = 0x0 sigreturn: eflags = 0x0 : sigreturn: eflags = 0x0 sigreturn: eflags = 0x0 kern.ipc.maxpipekva exceeded; see tuning(7) kern.ipc.maxpipekva exceeded; see tuning(7) : kern.ipc.maxpipekva exceeded; see tuning(7) kern.ipc.maxpipekva exceeded; see tuning(7) pKDB: enter: manual escape to debugger [thread pid 12 tid 100005 ] Stopped at kdb_enter+0x2c: leave db> x panic_td panic_td: c25235c0 db> where Tracing pid 12 tid 100005 td 0xc151f730 kdb_enter(c084166c,cbc6dc8c,c0620f5e,c08ea500,80086) at kdb_enter+0x2c scgetc(c08c2a00,c168c080,c094e8e0,c151f730,cbc6dce4) at scgetc+0x3ba sckbdevent(c094e8e0,0,c0967ac0) at sckbdevent+0x80 atkbd_intr(c094e8e0,0,cbc6dd1c,c05fef32,c094e8e0) at atkbd_intr+0x8c atkbd_isa_intr(c094e8e0,0,0,c151e9d8,0) at atkbd_isa_intr+0x16 ithread_loop(c151c680,cbc6dd48,c151c680,c05fed94,0) at ithread_loop+0x19e fork_exit(c05fed94,c151c680,cbc6dd48) at fork_exit+0x7e fork_trampoline() at fork_trampoline+0x8 --- trap 0x1, eip = 0, esp = 0xcbc6dd7c, ebp = 0 --- db> show pcpu cpuid = 0 curthread = 0xc151f730: pid 12 "irq1: atkbd0" curpcb = 0xcbc6dda0 fpcurthread = none idlethread = 0xc151f5c0: pid 11 "idle: cpu0" APIC ID = 0 currentldt = 0x28 spin locks held: db> show alllocks Process 69026 (cc1) thread 0xc2600730 (100640) exclusive sx user map r = 0 (0xc2323170) locked @ vm/vm_map.c:2994 Process 68998 (cc) thread 0xc2301a10 (100256) exclusive sx user map r = 0 (0xc1cf774c) locked @ vm/vm_map.c:2994 Process 68976 (make) thread 0xc25235c0 (100574) exclusive sleep mutex so_rcv r = 0 (0xc1e28578) locked @ kern/uipc_socket.c:992 db> where 68976 Tracing pid 68976 tid 100574 td 0xc25235c0 sched_switch(c25235c0,0,0) at sched_switch+0xeb mi_switch(2,0,c08e82a0,8,c0824b95) at mi_switch+0x1b1 critical_exit(c08c9240,c25235c0,0,c25235c0,3f8) at critical_exit+0xa2 intr_execute_handlers(c08c9240,cf6f0a08,c25235c0,3f8,2580) at intr_execute_handlers+0xd0 atpic_handle_intr(0) at atpic_handle_intr+0x39 Xatpic_intr0() at Xatpic_intr0+0x20 --- interrupt, eip = 0xc0620c61, esp = 0xcf6f0a4c, ebp = 0xcf6f0a50 --- critical_exit(c0950400,0,c0841121,a23) at critical_exit+0x61 siocnputc(c08c4640,70,5,70,cf6f0b9c) at siocnputc+0x82 cnputc(70,c0629f9c,c082383e,c0829941,cf6f0b80) at cnputc+0x4c putchar(70,cf6f0b9c,c062a346,0,2062a456) at putchar+0x96 kvprintf(c082383d,c0629f9c,cf6f0b9c,a,cf6f0bbc) at kvprintf+0x5f printf(c082383d,c08e8520,c08e8520,100,c0829941,cf6f0bf0) at printf+0x43 panic(c0829941,0,ffffffff,c1e28578,c0826e09) at panic+0xd8 soreceive(c1e28510,0,cf6f0c90,0,0) at soreceive+0x54c fifo_read_f(c2182044,cf6f0c90,c203f800,0,c25235c0) at fifo_read_f+0x47 dofileread(3,bfbfdaf7,1,ffffffff,ffffffff) at dofileread+0x82 read(c25235c0,cf6f0d14,3,10,202) at read+0x44 syscall(2f,2f,2f,bfbfdb30,80a1c00) at syscall+0x128 Xint0x80_syscall() at Xint0x80_syscall+0x1f --- syscall (3, FreeBSD ELF32, read), eip = 0x8064c77, esp = 0xbfbfdadc, ebp = 0xbfbfdaf8 --- db> call doadump Dumping 255 MB 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 Dump complete 0x29 db> reset panic: receive: m == 0 so->so_rcv.sb_cc == 4294967295 (kgdb) l *soreceive+1356 0xc0648ab8 is in soreceive (../../../kern/uipc_socket.c:1347). 1342 error = sbwait(&so->so_rcv); 1343 if (error) 1344 goto release; 1345 m = so->so_rcv.sb_mb; 1346 if (m != NULL) 1347 nextrecord = m->m_nextpkt; 1348 } 1349 } 1350 1351 SOCKBUF_LOCK_ASSERT(&so->so_rcv); (kgdb) l 1017 1012 so->so_rcv.sb_cc < uio->uio_resid) && 1013 (so->so_rcv.sb_cc < so->so_rcv.sb_lowat || 1014 ((flags & MSG_WAITALL) && uio->uio_resid <= so->so_rcv.sb_hiwat)) && 1015 m->m_nextpkt == NULL && (pr->pr_flags & PR_ATOMIC) == 0)) { 1016 KASSERT(m != NULL || !so->so_rcv.sb_cc, 1017 ("receive: m == %p so->so_rcv.sb_cc == %u", 1018 m, so->so_rcv.sb_cc)); 1019 if (so->so_error) { 1020 if (m != NULL) 1021 goto dontblock; (kgdb) p *(struct socket *)0xc1e28510 $1 = {so_count = 0x1, so_type = 0x1, so_options = 0x0, so_linger = 0x0, so_state = 0x2, so_qstate = 0x0, so_pcb = 0xc18143d4, so_proto = 0xc088a860, so_head = 0x0, so_incomp = {tqh_first = 0x0, tqh_last = 0xc1e2852c}, so_comp = {tqh_first = 0x0, tqh_last = 0xc1e28534}, so_list = {tqe_next = 0x0, tqe_prev = 0x0}, so_qlen = 0x0, so_incqlen = 0x0, so_qlimit = 0x0, so_timeo = 0x0, so_error = 0x0, so_sigio = 0x0, so_oobmark = 0x0, so_aiojobq = {tqh_first = 0x0, tqh_last = 0xc1e28558}, so_rcv = {sb_sel = { si_thrlist = {tqe_next = 0xc2d6c2d8, tqe_prev = 0xc26c61a0}, si_thread = 0xc26c6170, si_note = {kl_lock = 0xc1e28578, kl_list = { slh_first = 0x0}}, si_flags = 0x1}, sb_mtx = {mtx_object = {lo_class = 0xc0884570, lo_name = 0xc0826cb6 "so_rcv", lo_type = 0xc0826cb6 "so_rcv", lo_flags = 0x30000, lo_list = {tqe_next = 0xc2d6c358, tqe_prev = 0xc1e285f0}, lo_witness = 0xc08f93e8}, mtx_lock = 0xc25235c0, mtx_recurse = 0x0}, sb_mb = 0x0, sb_mbtail = 0x0, sb_lastrecord = 0x0, sb_cc = 0xffffffff, sb_hiwat = 0x2000, sb_mbcnt = 0x0, sb_mbmax = 0x10000, sb_ctl = 0x0, sb_lowat = 0x1, sb_timeo = 0x0, sb_flags = 0x9, sb_state = 0x0}, so_snd = {sb_sel = {si_thrlist = {tqe_next = 0x0, tqe_prev = 0x0}, si_thread = 0x0, si_note = { kl_lock = 0xc1e285e0, kl_list = {slh_first = 0x0}}, si_flags = 0x0}, sb_mtx = {mtx_object = {lo_class = 0xc0884570, lo_name = 0xc0826caf "so_snd", lo_type = 0xc0826caf "so_snd", lo_flags = 0x30000, lo_list = {tqe_next = 0xc1e28578, tqe_prev = 0xc1de966c}, lo_witness = 0xc08f9410}, mtx_lock = 0x4, mtx_recurse = 0x0}, sb_mb = 0x0, sb_mbtail = 0x0, sb_lastrecord = 0x0, sb_cc = 0x0, sb_hiwat = 0x2000, sb_mbcnt = 0x0, sb_mbmax = 0x10000, sb_ctl = 0x0, sb_lowat = 0x800, sb_timeo = 0x0, sb_flags = 0x0, sb_state = 0x0}, so_upcall = 0, so_upcallarg = 0x0, so_cred = 0xc203f800, so_label = 0x0, so_peerlabel = 0x0, so_gencnt = 0x130ba, so_emuldata = 0x0, so_accf = 0x0} (kgdb) p *(struct uio*)0xcf6f0c90 $2 = {uio_iov = 0xcf6f0c88, uio_iovcnt = 0x1, uio_offset = 0xffffffffffffffff, uio_resid = 0x1, uio_segflg = UIO_USERSPACE, uio_rw = UIO_READ, uio_td = 0xc25235c0}