Re: [issue717] panic: assertion: msg->ms_flags & MSGF_INTRANSIT

[Peter Avalos <pavalos@xxxxxxxxxxxx>]

On Wed, Jul 04, 2007 at 04:27:22PM -0400, Peter Avalos wrote:
> On Wed, Jul 04, 2007 at 12:50:47PM -0700, Matthew Dillon wrote:
> > 
> > :Peter Avalos <pavalos@theshell.com> added the comment:
> > :
> > :Got another one...not sure if it's gunna help though:
> > :...
> > :boot() called on cpu#1
> > :Uptime: 2d12h22m33s
> > :
> > :dumping to dev #da/0x20001, blockno 378927
> > :dump devstat_end_transaction: HELP!! busy_count for da1 is < 0 (-1)!
> > :LWKT_WAIT_IPIQ WARNING! 0 wait 1 (-3)
> > :SECONDARY PANIC ON CPU 0 THREAD 0xc0354e04
> > 
> >     Was this after your ahd logic fix?
> 
> Before.  I'm running the current code now, so we'll see if i get it again.
> 
> There have been a bunch of changes in the last 4 years, and I plan on
> looking into bringing some of these in.
> 
> I'll try that patch as well as the latest code (lwkt_msgport.c).
> 

Well that was quick:

panic: assertion: (msg->ms_flags & (MSGF_DONE|MSGF_QUEUED|MSGF_INTRANSIT)) == 0 in lwkt_thread_replyport
mp_lock = 00000000; cpuid = 0
Trace beginning at frame 0xda6d2d08
panic(c030db06,0,c02fe28a,da6d2d3c,da6d2d3c) at panic+0x16d
panic(c02fe28a,c03178ac,c02f2b7f,0,e897ab78) at panic+0x16d
lwkt_thread_replyport(d9e57310,e897ac28,e897ab78,ff800000,da6d2d84) at lwkt_thread_replyport+0x39
netmsg_so_notify_abort(e897ab78,0,0,c0390cc0,0) at netmsg_so_notify_abort+0x5c
tcpmsg_service_loop(0,0,0,0,0) at tcpmsg_service_loop+0x3a
lwkt_exit() at lwkt_exit
boot() called on cpu#0
Uptime: 1m48s

dumping to dev #da/0x20001, blockno 378927

(kgdb) bt
#0  dumpsys () at thread.h:83
#1  0xc01966d2 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:371
#2  0xc01969ef in panic (fmt=Variable "fmt" is not available.
) at /usr/src/sys/kern/kern_shutdown.c:796
#3  0xc01a19d1 in lwkt_thread_replyport (port=0xd9e57310, msg=0xe897ac28) at /usr/src/sys/kern/lwkt_msgport.c:410
#4  0xc01ca8be in netmsg_so_notify_abort (netmsg=0xe897ab78) at msgport2.h:63
#5  0xc0216127 in tcpmsg_service_loop (dummy=0x0) at /usr/src/sys/netinet/tcp_subr.c:385
#6  0xc019e2b7 in lwkt_deschedule_self (td=Variable "td" is not available.
) at /usr/src/sys/kern/lwkt_thread.c:214
Previous frame inner to this frame (corrupt stack?)
(kgdb)

Attachment: pgp00002.pgp
Description: PGP signature