page fault panic in propagate_priority

From: Pawel Worach <pawel.worach_at_telia.com>
Date: Sun, 26 Sep 2004 14:09:35 +0200
Got this when starting thunderbird (non-port build),
libpthread was supposed to be libmapped to libc_r but
because of a typo that did not become the case.

I was under the impression that the turnstile panics
where fixed, where they not or is this a different one?

UP, 4BSD, PREEMPTION, debug.mpsafenet=1

Good dump found on device /dev/ad0s2b
   Architecture: i386
   Architecture version: 1
   Dump length: 268304384B (255 MB)
   Blocksize: 512
   Dumptime: Sun Sep 26 13:43:10 2004
   Hostname: corona
   Versionstring: FreeBSD 6.0-CURRENT #0: Wed Sep 22 03:20:59 CEST 2004
     root_at_darkstar:/export/data/obj/usr/src/sys/CORONA
   Panicstring: page fault
   Bounds: 1

(kgdb) bt
#0  doadump () at pcpu.h:159
#1  0xc04f473a in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:385
#2  0xc04f4ae9 in panic (fmt=0xc06a59c3 "%s")
     at /usr/src/sys/kern/kern_shutdown.c:541
#3  0xc067e734 in trap_fatal (frame=0xcbd46bd8, eva=0)
     at /usr/src/sys/i386/i386/trap.c:809
#4  0xc067dd23 in trap (frame=
       {tf_fs = -1047461864, tf_es = -65520, tf_ds = -875298800, tf_edi 
= -1044380496, tf_esi = -1051479264, tf_ebp = -875271104, tf_isp = 
-875271164, tf_ebx = -1051479264, tf_edx = 56, tf_ecx = -1051496320, 
tf_eax = 0, tf_trapno = 12, tf_err = 0, tf_eip = -1068387980, tf_cs = 8, 
tf_eflags = 65683, tf_esp = -875271120, tf_ss = -1068463145}) at 
/usr/src/sys/i386/i386/trap.c:247
#5  0xc066ec4a in calltrap () at /usr/src/sys/i386/i386/exception.s:140
#6  0xc1910018 in ?? ()
#7  0xffff0010 in ?? ()
#8  0xcbd40010 in ?? ()
#9  0xc1c004b0 in ?? ()
#10 0xc153b320 in ?? ()
#11 0xcbd46c40 in ?? ()
#12 0xcbd46c04 in ?? ()
#13 0xc153b320 in ?? ()
#14 0x00000038 in ?? ()
#15 0xc1537080 in ?? ()
#16 0x00000000 in ?? ()
#17 0x0000000c in ?? ()
#18 0x00000000 in ?? ()
#19 0xc051b174 in propagate_priority (td=0xc1c004b0)
     at /usr/src/sys/kern/subr_turnstile.c:243
#20 0xc051ba7d in turnstile_wait (ts=0xc1537080, lock=0xc06fb740, owner=0x0)
     at /usr/src/sys/kern/subr_turnstile.c:556
#21 0xc04e9708 in _mtx_lock_sleep (m=0xc06fb740, td=0xc153b320, opts=0,
     file=0x0, line=0) at /usr/src/sys/kern/kern_mutex.c:551
#22 0xc0503ed8 in softclock (dummy=0x0) at 
/usr/src/sys/kern/kern_timeout.c:247
#23 0xc04da8f8 in ithread_loop (arg=0xc1530500)
     at /usr/src/sys/kern/kern_intr.c:547
#24 0xc04d9630 in fork_exit (callout=0xc04da740 <ithread_loop>, arg=0x0,
     frame=0x0) at /usr/src/sys/kern/kern_fork.c:807
#25 0xc066ecac in fork_trampoline () at 
/usr/src/sys/i386/i386/exception.s:209
(kgdb) frame 19
#19 0xc051b174 in propagate_priority (td=0xc1c004b0)
     at /usr/src/sys/kern/subr_turnstile.c:243
243                     ts = td->td_blocked;
(kgdb) list
238                         ts->ts_lockobj->lo_name));
239
240                     /*
241                      * Pick up the lock that td is blocked on.
242                      */
243                     ts = td->td_blocked;
244                     MPASS(ts != NULL);
245                     tc = TC_LOOKUP(ts->ts_lockobj);
246                     mtx_lock_spin(&tc->tc_lock);
247
(kgdb) print *td
$1 = {td_proc = 0xc1a7e700, td_ksegrp = 0xc1824af0, td_plist = {
     tqe_next = 0xc1c007d0, tqe_prev = 0xc1a7e710}, td_kglist = {
     tqe_next = 0x0, tqe_prev = 0xc1824afc}, td_slpq = {tqe_next = 0x0,
     tqe_prev = 0xcd37bc50}, td_lockq = {tqe_next = 0x0,
     tqe_prev = 0xcd452b84}, td_runq = {tqe_next = 0x0, tqe_prev = 
0xc1a7e718},
   td_selq = {tqh_first = 0x0, tqh_last = 0xc1c004e0},
   td_sleepqueue = 0xc1f727a0, td_turnstile = 0xc1821c00, td_tid = 100143,
   td_flags = 16777216, td_inhibitors = 1, td_pflags = 2176, td_dupfd = 0,
   td_wchan = 0x0, td_wmesg = 0x0, td_lastcpu = 0 '\0', td_oncpu = 255 'ÿ',
   td_locks = 0, td_blocked = 0x0, td_ithd = 0x0, td_lockname = 0x0,
   td_contested = {lh_first = 0xc1537080}, td_sleeplocks = 0x0,
   td_intr_nesting_level = 0, td_pinned = 0, td_mailbox = 0x2808e050,
   td_ucred = 0xc1a2de80, td_standin = 0xc27ca000, td_prticks = 0,
   td_upcall = 0xc27b7300, td_sticks = 0, td_uuticks = 0, td_usticks = 0,
   td_intrval = 0, td_oldsigmask = {__bits = {0, 0, 0, 0}}, td_sigmask = {
     __bits = {4294901503, 4294967295, 4294967295, 4294967295}}, 
td_siglist = {
     __bits = {0, 0, 0, 0}}, td_waitset = 0x0, td_umtx = {tqe_next = 0x0,
     tqe_prev = 0x0}, td_generation = 17, td_sigstk = {ss_sp = 0x0,
     ss_size = 0, ss_flags = 0}, td_kflags = 0, td_xsig = 0,
   td_profil_addr = 0, td_profil_ticks = 0, td_base_pri = 104 'h',
   td_priority = 56 '8', td_pcb = 0xcd458da0, td_state = TDS_INHIBITED,
   td_retval = {0, 134579520}, td_slpcallout = {c_links = {sle = {
         sle_next = 0x0}, tqe = {tqe_next = 0x0, tqe_prev = 0xc65fee48}},
     c_time = 22436277, c_arg = 0xc1c004b0, c_func = 0, c_flags = 8},
   td_frame = 0xcd458d48, td_kstack_obj = 0xc2564108, td_kstack = 
3443879936,
   td_kstack_pages = 2, td_altkstack_obj = 0x0, td_altkstack = 0,
   td_altkstack_pages = 0, td_critnest = 1, td_md = {md_savecrit = 582},
   td_sched = 0xc1c00604}
(kgdb) print ts
$2 = (struct turnstile *) 0x0
(kgdb) print *td->td_proc
$3 = {p_list = {le_next = 0xc1ac4a80, le_prev = 0xc06fcb04}, p_ksegrps = {
     tqh_first = 0xc1824380, tqh_last = 0xc1824af4}, p_threads = {
     tqh_first = 0xc1c004b0, tqh_last = 0xc1c007d8}, p_suspended = {
     tqh_first = 0xc1c004b0, tqh_last = 0xc1c004d8}, p_ucred = 0xc1a2de80,
   p_fd = 0xc2bb2500, p_fdtol = 0x0, p_stats = 0xcd46b000,
   p_limit = 0xc2b21700, p_upages_obj = 0xc1d9d5ac, p_sigacts = 0xc1f3d000,
   p_flag = 67683458, p_sflag = 1, p_state = PRS_NORMAL, p_pid = 54717,
   p_hash = {le_next = 0x0, le_prev = 0xc152e2f4}, p_pglist = {le_next = 
0x0,
     le_prev = 0xc1ac4ad4}, p_pptr = 0xc1ac4a80, p_sibling = {le_next = 
0x0,
     le_prev = 0xc1ac4ae8}, p_children = {lh_first = 0x0}, p_mtx = {
     mtx_object = {lo_class = 0xc06d587c, lo_name = 0xc06acf51 "process 
lock",
       lo_type = 0xc06acf51 "process lock", lo_flags = 4390912, lo_list = {
         tqe_next = 0x0, tqe_prev = 0x0}, lo_witness = 0x0}, mtx_lock = 4,
     mtx_recurse = 0}, p_oppid = 0, p_vmspace = 0xc1a38834, p_swtime = 73,
   p_realtimer = {it_interval = {tv_sec = 0, tv_usec = 0}, it_value = {
       tv_sec = 0, tv_usec = 0}}, p_runtime = {sec = 61,
     frac = 13726861932649556722}, p_uu = 30507495, p_su = 5155093, p_iu 
= 1,
   p_uticks = 6717, p_sticks = 1174, p_iticks = 0, p_profthreads = 0,
   p_maxthrwaits = 0, p_traceflag = 0, p_tracevp = 0x0, p_tracecred = 0x0,
   p_textvp = 0xc27e5318, p_siglist = {__bits = {2, 0, 0, 0}}, p_lock = 
0 '\0',
   p_sigiolst = {slh_first = 0x0}, p_sigparent = 20, p_sig = 0, p_code = 0,
   p_stops = 0, p_stype = 0, p_step = 0 '\0', p_pfsflags = 0 '\0',
   p_nlminfo = 0x0, p_aioinfo = 0x0, p_singlethread = 0xc1c004b0,
   p_suspcount = 1, p_xthread = 0x0, p_magic = 3203398350,
   p_comm = "thunderbird-bin\000\000\000\000", p_pgrp = 0xc1ba42c0,
   p_sysent = 0xc06ecfa0, p_args = 0xc29f0180,
   p_cpulimit = 9223372036854775807, p_nice = 0 '\0', p_xstat = 0, 
p_klist = {
     kl_lock = 0xc1a7e76c, kl_list = {slh_first = 0x0}}, p_numthreads = 2,
   p_numksegrps = 2, p_md = {md_ldt = 0xc2b84aa0}, p_itcallout = 
{c_links = {
       sle = {sle_next = 0x0}, tqe = {tqe_next = 0x0, tqe_prev = 0x0}},
     c_time = 0, c_arg = 0x0, c_func = 0, c_flags = 8}, p_uarea = 
0xcd46b000,
   p_acflag = 0, p_ru = 0x0, p_peers = 0x0, p_leader = 0xc1a7e700,
   p_emuldata = 0x0, p_label = 0x0, p_sched = 0xc1a7e8c0}

-- 
Pawel
Received on Sun Sep 26 2004 - 10:09:41 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:38:13 UTC