Re: A page fault in subr_turnstile.c:propogate_priority()

On Wed, Dec 03, 2003 at 05:43:13PM +0300, Igor Sysoev wrote:

> panic: page fault
> panic messages:
> ---
> Fatal trap 12: page fault while in kernel mode
> cpuid = 2; apic id = 02
> fault virtual address   = 0xe5
> fault code              = supervisor read, page not present
> instruction pointer     = 0x8:0xc053f197
> stack pointer           = 0x10:0xe3c21c80
> frame pointer           = 0x10:0xe3c21ca0
> code segment            = base 0x0, limit 0xfffff, type 0x1b
>                         = DPL 0, pres 1, def32 1, gran 1
> processor eflags        = resume, IOPL = 0
> current process         = 42 (irq29: ahd0)
> trap number             = 12
> panic: page fault
> cpuid = 2; 
> boot() called on cpu#2
> 
> syncing disks, buffers remaining... panic: bremfree: removing a buffer not on a queue
> cpuid = 2; 
> boot() called on cpu#2
> Uptime: 1d2h4m15s
> Dumping 2047 MB

>     jmp    0xc053f2b2 <propagate_priority+578>
> 0xc053f187 <propagate_priority+279>:    cmp    (%edi),%ebx
> 0xc053f189 <propagate_priority+281>:
>     je     0xc053f290 <propagate_priority+544>
> 0xc053f18f <propagate_priority+287>:    mov    0x24(%ebx),%eax
> 0xc053f192 <propagate_priority+290>:    mov    0x4(%eax),%eax
> 0xc053f195 <propagate_priority+293>:    mov    (%eax),%edx
> 
> [ FAULT ]
> 

/usr/src/sys/kern/subr_turnstile.c:256

                td1 = TAILQ_PREV(td, threadqueue, td_lockq);
                if (td1->td_priority <= pri) {
                        mtx_unlock_spin(&tc->tc_lock);
                        continue;
                }

> 0xc053f197 <propagate_priority+295>:    movzbl 0xe5(%edx),%eax
> 0xc053f19e <propagate_priority+302>:    cmp    0xfffffff0(%ebp),%eax
> 0xc053f1a1 <propagate_priority+305>:
>     jle    0xc053f290 <propagate_priority+544>
> 0xc053f1a7 <propagate_priority+311>:    call   0xc051e650 <critical_enter>
> 0xc053f1ac <propagate_priority+316>:    mov    %fs:0x0,%edx
> 0xc053f1b3 <propagate_priority+323>:    mov    $0x4,%eax
> 0xc053f1b8 <propagate_priority+328>:    lock cmpxchg %edx,0xc06ac7fc
> 0xc053f1c0 <propagate_priority+336>:    sete   %al
> 0xc053f1c3 <propagate_priority+339>:    movzbl %al,%eax
> 0xc053f1c6 <propagate_priority+342>:    test   %eax,%eax
> 0xc053f1c8 <propagate_priority+344>:
>     jne    0xc053f210 <propagate_priority+416>
> 0xc053f1ca <propagate_priority+346>:    mov    %fs:0x0,%edx
        

-- 
Slawa Olhovchenkov