kern/39655: panic: KASSERT "c->c_magic == CALLOUT_MAGIC" failed

[spz%NetBSD.org@localhost]

>Number:         39655
>Category:       kern
>Synopsis:       panic: KASSERT "c->c_magic == CALLOUT_MAGIC" failed
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Mon Sep 29 20:20:01 +0000 2008
>Originator:     S.P.Zeidler
>Release:        NetBSD 4.99.72
>Organization:
        TNF
>Environment:
System: NetBSD babylon5.netbsd.org 4.99.72 NetBSD 4.99.72 (NBFTP.PF.ukphy) #7: 
Wed Sep 24 21:25:19 UTC 2008 
spz@ADMIN:/chroots/current-src/amd64/obj/sys/arch/amd64/compile/NBFTP.PF.ukphy 
amd64
Architecture: x86_64
Machine: amd64
>Description:

panic: kernel diagnostic assertion "c->c_magic == CALLOUT_MAGIC" failed:
file "/chroots/current-src/src/sys/kern/kern_timeout.c", line 424
fatal breakpoint trap in supervisor mode
trap type 1 code 0 rip ffffffff80402e95 cs 8 rflags 246 cr2  7f7ffdfdc000
cpl 4 rsp ffff800040c06860
Stopped in pid 12331.1 (python2.4) at   netbsd:breakpoint+0x5:  leave

db{1}> bt
breakpoint() at netbsd:breakpoint+0x5
cpu_Debugger() at netbsd:cpu_Debugger+0x9
panic() at netbsd:panic+0x260
__kernassert() at netbsd:__kernassert+0x2d
callout_stop() at netbsd:callout_stop+0xb4
tcp_canceltimers() at netbsd:tcp_canceltimers+0x1f
tcp_close() at netbsd:tcp_close+0xd7
tcp_disconnect() at netbsd:tcp_disconnect+0x88
tcp_usrreq() at netbsd:tcp_usrreq+0x18d
tcp_usrreq_wrapper() at netbsd:tcp_usrreq_wrapper+0x51
sodisconnect() at netbsd:sodisconnect+0x4c
soclose() at netbsd:soclose+0x1f8
soo_close() at netbsd:soo_close+0x1c
closef() at netbsd:closef+0x70
fd_close() at netbsd:fd_close+0x137
sys_close() at netbsd:sys_close+0x24
syscall() at netbsd:syscall+0x9a
db{1}> sh reg
ds          0x6830
es          0x7
fs          0x8
gs          0x58be
rdi         0x4
rsi         0x3f8
rbp         0xffff800040c06860
rbx         0xffff800040c06880
rdx         0x8
rcx         0x4
rax         0x1
r8          0xffffffff806b37b3  copyright+0x7d5f3
r9          0x1
r10         0xffff800040c06770
r11         0x8
r12         0x100
r13         0xffffffff806c1558  copyright+0x8b398
r14         0xffff800012cc1ad8
r15         0xffff800012956300
rip         0xffffffff80402e95  breakpoint+0x5
cs          0x8
rflags      0x246
rsp         0xffff800040c06860
ss          0x10
netbsd:breakpoint+0x5:  leave

db{1}> mach cpu 0
using CPU 0
db{1}> bt
_kernel_lock() at netbsd:_kernel_lock+0x130
intr_biglock_wrapper() at netbsd:intr_biglock_wrapper+0x16
Xintr_ioapic_level2() at netbsd:Xintr_ioapic_level2+0xf7
--- interrupt ---
atomic_cas_ptr() at netbsd:atomic_cas_ptr+0x8
ffs_sync() at netbsd:ffs_sync+0xc9
VFS_SYNC() at netbsd:VFS_SYNC+0x33
sync_fsync() at netbsd:sync_fsync+0x76
VOP_FSYNC() at netbsd:VOP_FSYNC+0x71
sched_sync() at netbsd:sched_sync+0x14f
db{1}> sh reg
ds          0
es          0
fs          0
gs          0
rdi         0x6
rsi         0xffffffff803ee8f6  intr_biglock_wrapper+0x16
rbp         0xffff80003c888968
rbx         0x69f34b
rdx         0x6
rcx         0
rax         0
r8          0
r9          0
r10         0x5
r11         0
r12         0x1
r13         0xffffffff8085ea40  cpu_info_primary
r14         0x6
r15         0xffff80003c00b400
rip         0xffffffff80324240  _kernel_lock+0x130
cs          0x8
rflags      0x293
rsp         0xffff80003c888928
ss          0x10
netbsd:_kernel_lock+0x130:      call    netbsd:x86_pause
        
>How-To-Repeat:
        trying to prevent that :-P
>Fix:
        

>Unformatted:
        source date 20080924