panic with HEAD

Steve Mynott steve.mynott at gmail.com
Wed Dec 14 14:05:07 PST 2005


OK I reapplied the patch and recompiled for luck and did:-

brandy:sys/dev/netif/wi # grep serialize.h if_wi.c
#include <sys/serialize.h>
brandy:sys/dev/netif/wi # sum if_wi.c
32845 83 if_wi.c

[snip]

(kgdb) bt full
#0  dumpsys () at /usr/src/sys/kern/kern_shutdown.c:527
        error = 11
#1  0xc01624a9 in db_fncall (dummy1=1936, dummy2=0, dummy3=-844617152,
    dummy4=0xcda82a3c "?\a") at /usr/src/sys/ddb/db_command.c:548
        fn_addr = -1070947510
        args = {0 <repeats 11 times>}
        nargs = 11
        retval = 0
        func = (fcn_10args_t *) 0xc02aa34a <dumpsys>
        t = 0
#2  0xc0162263 in db_command (last_cmdp=0xc05a98d0, cmd_table=0x0,
    aux_cmd_tablep=0xc054d3e0, aux_cmd_tablep_end=0xc054d3f8)
    at /usr/src/sys/ddb/db_command.c:345
        cmd = (struct command *) 0xc0556080
        t = 0
        modif =
"?\a\000\000\000\000\000\000`\024_?`\024_?\000\000\000\000d*??B0I?\001\000\000\000\001\000\000\000`\024_?\204*???.I?
?^?\aK\000 x\000\000\000??Z?\000\000\000\000\234*??\203<\026???O???J?x\000\000\000??J?\000\000\000\000??Z?\0176\026???Z?\000\231Z?x\000\000\000\003\000\000"
        addr = 1936
        count = -844617152
        have_addr = 0
        result = 0
#3  0xc0162343 in db_command_loop () at /usr/src/sys/ddb/db_command.c:471
No locals.
#4  0xc0165020 in db_trap (type=3, code=0) at /usr/src/sys/ddb/db_trap.c:72
        bkpt = 0
#5  0xc049c010 in kdb_trap (type=3, code=0, regs=0xcda82b54)
    at /usr/src/sys/i386/i386/db_interface.c:150
        ddb_mode = 1
#6  0xc04b0582 in trap (frame=
      {tf_fs = 24, tf_es = 16, tf_ds = 16, tf_edi = 1, tf_esi =
-1068269136, tf_ebp = -844616804, tf_isp = -844616832, tf_ebx = 256,
tf_edx = -1072988160, tf_ec---Type <return> to continue, or q <return>
to quit---
x = 32, tf_eax = 18, tf_trapno = 3, tf_err = 0, tf_eip = -1068907674,
tf_cs = 8, tf_eflags = 658, tf_esp = -1068410704, tf_ss =
-1068483729})
    at /usr/src/sys/i386/i386/trap.c:811
        gd = (struct globaldata *) 0x3
        td = (struct thread *) 0xc05bee84
        lp = (struct lwp *) 0x0
        p = (struct proc *) 0x0
        sticks = 0
        i = 0
        ucode = 0
        type = 3
        code = 0
        eva = 0
        __func__ = "trap"
#7  0xc049d2ef in calltrap () at /usr/src/sys/i386/i386/exception.s:774
No locals.
#8  0x00000018 in ?? ()
No symbol table info available.
#9  0x00000010 in ?? ()
No symbol table info available.
#10 0x00000010 in ?? ()
No symbol table info available.
#11 0x00000001 in ?? ()
No symbol table info available.
#12 0xc05381b0 in ?? ()
No symbol table info available.
#13 0xcda82b9c in ?? ()
No symbol table info available.
#14 0xcda82b80 in ?? ()
No symbol table info available.
#15 0x00000100 in ?? ()
No symbol table info available.
#16 0xc00b8000 in ?? ()
---Type <return> to continue, or q <return> to quit---
No symbol table info available.
#17 0x00000020 in ?? ()
No symbol table info available.
#18 0x00000012 in ?? ()
No symbol table info available.
#19 0x00000003 in ?? ()
No symbol table info available.
#20 0x00000000 in ?? ()
No symbol table info available.
#21 0xc049c366 in Debugger (msg=0x0) at cpufunc.h:68
        in_Debugger = 1 '\001'
#22 0xc02aa5b2 in panic (
    fmt=0xc05381b0 "assertion: (ifp->if_serializer)->last_td ==
curthread in %s") at /usr/src/sys/kern/kern_shutdown.c:671
        bootopt = 256
        newpanic = 1
        buf = "assertion: (ifp->if_serializer)->last_td == curthread
in ether_input", '\0' <repeats 187 times>
#23 0xc030febd in ether_input (ifp=0xc9876000, eh=0x0, m=0xcea40800)
    at /usr/src/sys/net/if_ethersubr.c:568
        save_eh = {ether_dhost = "\006\000\000\000\b\n",
  ether_shost = "?\000\000\002-\t", ether_type = 36198}
        __func__ = "ether_input"
#24 0xc030fe7d in ether_input_internal (ifp=0x0, m=0x0)
    at /usr/src/sys/net/if_ethersubr.c:539
No locals.
#25 0xc031fbb3 in ieee80211_input (ifp=0xc9876000, m=0xcea40800,
    ni=0xc1189f38, rssi=114, rstamp=279618)
    at /usr/src/sys/netproto/802_11/ieee80211_input.c:302
        ic = (struct ieee80211com *) 0xc9876000
        wh = (struct ieee80211_frame *) 0x0
        eh = (struct ether_header *) 0x0
        m1 = (struct mbuf *) 0x0
---Type <return> to continue, or q <return> to quit---
        len = 0
        dir = 2 '\002'
        type = 8 '\b'
        subtype = 8 '\b'
        bssid = (uint8_t *) 0x0
        rxseq = 0
        __func__ = "ieee80211_input"
#26 0xc027b3c7 in wi_rx_intr (sc=0xc1189f38)
    at /usr/src/sys/dev/netif/wi/if_wi.c:1480
        ic = (struct ieee80211com *) 0xc9876000
        ifp = (struct ifnet *) 0xc9876000
        frmhdr = {wi_status = 8192, wi_rx_tstamp1 = 17474, wi_rx_tstamp0 = 4,
  wi_rx_silence = 55 '7', wi_rx_signal = 114 'r', wi_rx_rate = 110 'n',
  wi_rx_flow = 0 '\0', wi_tx_rtry = 0 '\0', wi_tx_rate = 0 '\0',
  wi_tx_ctl = 0, wi_whdr = {i_fc = "\bJ", i_dur = "?",
    i_addr1 = "\000\002-\tf\215", i_addr2 = "\000\r\223\201e?",
    i_addr3 = "\000\r\223!?<", i_seq = "p'", i_addr4 = "?\n!+?\\"},
  wi_dat_len = 36, wi_ehdr = {ether_dhost = "\000\002-\tf\215",
    ether_shost = "\000\r\223!?<", ether_type = 9216}}
        m = (struct mbuf *) 0xcea40800
        wh = (struct ieee80211_frame *) 0xcea40838
        ni = (struct ieee80211_node *) 0xc1189f38
        fid = 231
        len = 36
        rssi = 114
        status = 0
        rstamp = 279618
#27 0xc02794f8 in wi_intr (arg=0xc9876000)
    at /usr/src/sys/dev/netif/wi/if_wi.c:594
        sc = (struct wi_softc *) 0xc9876000
        ifp = (struct ifnet *) 0xc9876000
        status = 32769
#28 0xc0398b54 in pccard_intr (arg=0xc1169f00)
---Type <return> to continue, or q <return> to quit---
    at /usr/src/sys/bus/pccard/pccard.c:1209
        pf = (struct pccard_function *) 0xc1169f00
        reg = 0
        doisr = 1
#29 0xc016c20f in cbb_intr (arg=0xc12c96c8)
    at /usr/src/sys/dev/pccard/pccbb/pccbb.c:1060
        sc = (struct cbb_softc *) 0xc12c96c8
        sockevent = 0
        ih = (struct cbb_intrhand *) 0xc1041e40
#30 0xc028e6bf in ithread_handler (arg=0xa)
    at /usr/src/sys/kern/kern_intr.c:750
        info = (struct intr_info *) 0xc05bee80
        use_limit = 0
        lticks = 20257
        lcount = 0
        intr = 10
        list = (struct intrec **) 0xc05bee80
        rec = 0x0
        nrec = 0x0
        gd = 0xff800000
        ill_timer = {node = {tqe_next = 0x0, tqe_prev = 0x0}, queue = 0x0,
  time = 0, periodic = 0, func = 0, data = 0x0, flags = 0, gd = 0x0}
        ill_count = 12
#31 0xc02b0903 in lwkt_create (func=0, arg=0x0, tdp=0xc05bee84, template=0x0,
    tdflags=---Can't read userspace from dump, or kernel process---

) at /usr/src/sys/kern/lwkt_thread.c:1368
        td = 0xff8003a8
Previous frame inner to this frame (corrupt stack?)
(kgdb)






More information about the Bugs mailing list