Re: panic: mtx_lock() of spin mutex in ip_output.c

On Fri, Nov 07, 2003 at 11:31:45AM -0800, Steven G. Kargl wrote:
> I have a Dell 4150 laptop using dhcp and ntpd on the
> xl0 interface.  I did "ifconfig xl0 down" and received
> the following panic (hand transcribed :-( ).
> 
> panic: mtx_lock() of spin mutex (null) _at_ /usr/src/sys/netinet/ip_output.c:266
> Stack backtrace:
> backtrace()
> panic()
> panic: process 414(ntpd):2 Giant but isn't blocked on a mutex
> 
> In ddb> I get,
> 
> Debugger()
> panic()
> propagate_priority()
> _mtx_lock_sleep()
> _mtx_lock_flags()
> softclock()
> ithread_loop()
> fork_exit()
> fork_trampoline()
> 
> I have a crash dump and kernel.debug if further info is need
> 

See the gdb -k trace below for further details.  Note,
for some unknown reason, I issued a "panic" command at
the ddb> prompt instead of calling dodump directly, so
I think the dump I have below is not the actually trace
we need.

-- 
Steve

Script started on Fri Nov  7 11:40:42 2003
GNU gdb 5.2.1 (FreeBSD)
Copyright 2002 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-undermydesk-freebsd"...
panic: mtx_lock() of spin mutex (null) _at_ /usr/src/sys/netinet/ip_output.c:266
panic messages:
---
panic: mtx_lock() of spin mutex (null) _at_ /usr/src/sys/netinet/ip_output.c:266
Stack backtrace:
panic: process 414(ntpd):2 holds Giant but isn't blocked on a mutex

panic: from debugger
Uptime: 1m32s
Dumping 511 MB
 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 256 272 288 304 320 336 352 368 384 400 416 432 448 464 480 496
---
Reading symbols from /usr/obj/usr/src/sys/MOBILE/modules/usr/src/sys/modules/vesa/vesa.ko.debug...done.
Loaded symbols for /usr/obj/usr/src/sys/MOBILE/modules/usr/src/sys/modules/vesa/vesa.ko.debug
Reading symbols from /boot/kernel/snd_pcm.ko...done.
Loaded symbols for /boot/kernel/snd_pcm.ko
Reading symbols from /boot/kernel/snd_ich.ko...done.
Loaded symbols for /boot/kernel/snd_ich.ko
Reading symbols from /usr/obj/usr/src/sys/MOBILE/modules/usr/src/sys/modules/agp/agp.ko.debug...done.
Loaded symbols for /usr/obj/usr/src/sys/MOBILE/modules/usr/src/sys/modules/agp/agp.ko.debug
Reading symbols from /boot/kernel/radeon.ko...done.
Loaded symbols for /boot/kernel/radeon.ko
Reading symbols from /usr/obj/usr/src/sys/MOBILE/modules/usr/src/sys/modules/acpi/acpi.ko.debug...done.
Loaded symbols for /usr/obj/usr/src/sys/MOBILE/modules/usr/src/sys/modules/acpi/acpi.ko.debug
Reading symbols from /boot/kernel/blank_saver.ko...done.
Loaded symbols for /boot/kernel/blank_saver.ko
Reading symbols from /usr/obj/usr/src/sys/MOBILE/modules/usr/src/sys/modules/linux/linux.ko.debug...done.
Loaded symbols for /usr/obj/usr/src/sys/MOBILE/modules/usr/src/sys/modules/linux/linux.ko.debug
#0  doadump () at /usr/src/sys/kern/kern_shutdown.c:240
240		dumping++;
(kgdb) bt
#0  doadump () at /usr/src/sys/kern/kern_shutdown.c:240
#1  0xc04fc14c in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:372
#2  0xc04fc4d7 in panic () at /usr/src/sys/kern/kern_shutdown.c:550
#3  0xc043cf42 in db_panic () at /usr/src/sys/ddb/db_command.c:450
#4  0xc043cea2 in db_command (last_cmdp=0xc068a6c0, cmd_table=0x0, 
    aux_cmd_tablep=0xc065db30, aux_cmd_tablep_end=0xc065db34)
    at /usr/src/sys/ddb/db_command.c:346
#5  0xc043cfe5 in db_command_loop () at /usr/src/sys/ddb/db_command.c:472
#6  0xc043ffe5 in db_trap (type=3, code=0) at /usr/src/sys/ddb/db_trap.c:73
#7  0xc05fd3ac in kdb_trap (type=3, code=0, regs=0xd77cabb0)
    at /usr/src/sys/i386/i386/db_interface.c:171
#8  0xc060e20a in trap (frame=
      {tf_fs = 24, tf_es = -1066794992, tf_ds = -679739376, tf_edi = 0, tf_esi = -1067168428, tf_ebp = -679695364, tf_isp = -679695396, tf_ebx = 0, tf_edx = 0, tf_ecx = 32, tf_eax = 18, tf_trapno = 3, tf_err = 0, tf_eip = -1067461020, tf_cs = 8, tf_eflags = 662, tf_esp = -1067090437, tf_ss = -1067165548})
    at /usr/src/sys/i386/i386/trap.c:582
#9  0xc05fed98 in calltrap () at {standard input}:102
#10 0xc04fc465 in panic (
    fmt=0xc0644d54 "process %d(%s):%d holds %s but isn't blocked on a mutex\n")
    at /usr/src/sys/kern/kern_shutdown.c:534
#11 0xc04f23d1 in propagate_priority (td=0x0)
    at /usr/src/sys/kern/kern_mutex.c:166
#12 0xc04f2b19 in _mtx_lock_sleep (m=0xc069dc80, opts=0, 
---Type <return> to continue, or q <return> to quit--- 
    file=0xc0646935 "/usr/src/sys/kern/kern_timeout.c", line=216)
    at /usr/src/sys/kern/kern_mutex.c:635
#13 0xc04f2567 in _mtx_lock_flags (m=0xc069dc80, opts=0, 
    file=0xc0646935 "/usr/src/sys/kern/kern_timeout.c", line=216)
    at /usr/src/sys/kern/kern_mutex.c:333
#14 0xc050c9c4 in softclock (dummy=0x0) at /usr/src/sys/kern/kern_timeout.c:216
#15 0xc04e8332 in ithread_loop (arg=0xc1d16d00)
    at /usr/src/sys/kern/kern_intr.c:540
#16 0xc04e7334 in fork_exit (callout=0xc04e81a0 <ithread_loop>, arg=0x0, 
    frame=0x0) at /usr/src/sys/kern/kern_fork.c:793
(kgdb) quit

Script done on Fri Nov  7 11:41:07 2003