Date: Sun, 15 Oct 2006 13:40:48 +0400 (MSD) From: "Andrey V. Elsukov" <bu7cher@yandex.ru> To: FreeBSD-gnats-submit@FreeBSD.org Subject: kern/104430: [panic] System crash while builds kernel Message-ID: <20061015094048.927F917031@btr-nb.properlan.net> Resent-Message-ID: <200610150950.k9F9oJ7D084905@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 104430 >Category: kern >Synopsis: [panic] System crash while builds kernel >Confidential: no >Severity: serious >Priority: medium >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Sun Oct 15 09:50:18 GMT 2006 >Closed-Date: >Last-Modified: >Originator: Andrey V. Elsukov >Release: FreeBSD 7.0-CURRENT i386 >Organization: >Environment: System: FreeBSD btr-nb.properlan.net 7.0-CURRENT FreeBSD 7.0-CURRENT #10: Sun Oct 15 02:51:38 MSD 2006 root@:/usr/obj/usr/src/sys/BTR i386 kern.osrelease: 7.0-CURRENT kern.osrevision: 199506 kern.osreldate: 700022 kernel have WITNESS and DEBUG_VFS_LOCKS options. >Description: kernel panic after some time of building world and kernel. >How-To-Repeat: I will try later. >Fix: --- bt.txt begins here --- Unread portion of the kernel message buffer: Kernel page fault with the following non-sleepable locks held: exclusive sleep mutex pmap r = 0 (0xc2a1cddc) locked @ /usr/src/sys/i386/i386/pmap.c:2165 exclusive sleep mutex vm page queue mutex r = 0 (0xc07909fc) locked @ /usr/src/sys/vm/vm_object.c:1806 exclusive sleep mutex vm object (standard object) r = 0 (0xc49fd870) locked @ /usr/src/sys/vm/vm_map.c:2269 KDB: enter: witness_warn Acquiring lockmgr lock "vfslock" with the following non-sleepable locks held: exclusive sleep mutex pmap r = 0 (0xc2a1cddc) locked @ /usr/src/sys/i386/i386/pmap.c:2165 exclusive sleep mutex vm page queue mutex r = 0 (0xc07909fc) locked @ /usr/src/sys/vm/vm_object.c:1806 exclusive sleep mutex vm object (standard object) r = 0 (0xc49fd870) locked @ /usr/src/sys/vm/vm_map.c:2269 malloc(M_WAITOK) of "512", forcing M_NOWAIT with the following non-sleepable locks held: exclusive sleep mutex pmap r = 0 (0xc2a1cddc) locked @ /usr/src/sys/i386/i386/pmap.c:2165 exclusive sleep mutex vm page queue mutex r = 0 (0xc07909fc) locked @ /usr/src/sys/vm/vm_object.c:1806 exclusive sleep mutex vm object (standard object) r = 0 (0xc49fd870) locked @ /usr/src/sys/vm/vm_map.c:2269 lock order reversal: 1st 0xc2a1cddc pmap (pmap) @ /usr/src/sys/i386/i386/pmap.c:2165 2nd 0xc07901c4 Softdep Lock (Softdep Lock) @ /usr/src/sys/ufs/ffs/ffs_softdep.c:6209 KDB: stack backtrace: malloc(M_WAITOK) of "512", forcing M_NOWAIT with the following non-sleepable locks held: exclusive sleep mutex pmap r = 0 (0xc2a1cddc) locked @ /usr/src/sys/i386/i386/pmap.c:2165 exclusive sleep mutex vm page queue mutex r = 0 (0xc07909fc) locked @ /usr/src/sys/vm/vm_object.c:1806 exclusive sleep mutex vm object (standard object) r = 0 (0xc49fd870) locked @ /usr/src/sys/vm/vm_map.c:2269 panic: lockmgr: thread 0xc3218510, not exclusive lock holder 0xc0798fa0 unlocking Uptime: 2h48m36s Physical memory: 434 MB Dumping 89 MB: 74 58 42 26 10 #0 doadump () at pcpu.h:166 in pcpu.h (kgdb) bt full #0 doadump () at pcpu.h:166 No locals. #1 0xc052c79c in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:409 first_buf_printf = 1 #2 0xc052c9f7 in panic ( fmt=0xc06d36d5 "lockmgr: thread %p, not %s %p unlocking") at /usr/src/sys/kern/kern_shutdown.c:565 td = (struct thread *) 0xc3218510 bootopt = 260 newpanic = 1 ap = 0xd5c676f0 "\020\205!ÿ6mÀ \217yÀ\020\205!Ã" buf = "lockmgr: thread 0xc3218510, not exclusive lock holder 0xc0798fa0 unlocking", '\0' <repeats 181 times> #3 0xc0522478 in lockmgr (lkp=0xc28e6260, flags=6, interlkp=0xc28e6284, td=0xc3218510) at /usr/src/sys/kern/kern_lock.c:373 error = 0 thr = (struct thread *) 0xc3218510 extflags = 64 lockflags = 0 #4 0xc057a0ea in vop_stdunlock (ap=0x0) at /usr/src/sys/kern/vfs_default.c:277 vp = (struct vnode *) 0x0 #5 0xc0692529 in VOP_UNLOCK_APV (vop=0xc0719860, a=0xd5c6775c) at vnode_if.c:1667 rc = -1066297248 #6 0xc0582590 in vput (vp=0xc28e6208) at vnode_if.h:870 td = (struct thread *) 0xc3218510 error = -1030856184 #7 0xc060bcc9 in ffs_sync (mp=0xc28e4ca8, waitfor=2, td=0xc0798fa0) at /usr/src/sys/ufs/ffs/ffs_vfsops.c:1185 mvp = (struct vnode *) 0xc307fe00 vp = (struct vnode *) 0xc28e6208 devvp = (struct vnode *) 0xc28e6208 ip = (struct inode *) 0x0 ump = (struct ufsmount *) 0xc287bd00 fs = (struct fs *) 0xc2882800 error = 0 count = -1067960980 lockreq = 8242 allerror = 0 suspend = 0 suspended = 0 secondary_writes = 0 secondary_accwrites = 25405 softdep_deps = 0 softdep_accdeps = 0 bo = (struct bufobj *) 0x0 #8 0xc0584b38 in sync (td=0xc0798fa0, uap=0xc06fa0c0) at /usr/src/sys/kern/vfs_syscalls.c:139 mp = (struct mount *) 0xc28e4ca8 nmp = (struct mount *) 0x0 vfslocked = 0 asyncflag = 0 #9 0xc044bd07 in db_fncall (dummy1=-708413260, dummy2=0, dummy3=-1065697376, dummy4=0xd5c67890 "`\005{À") at /usr/src/sys/ddb/db_command.c:481 fn_addr = -1067955620 args = {-1065775200, -1066426176, -708413344, -1066166464, -708413328, -1069238281, -1066166464, -1066426176, -708413300, -708413344} nargs = 0 retval = 543517253 t = 0 #10 0xc044bb13 in db_command (last_cmdp=0xc0738ec4, cmd_table=0x0) at /usr/src/sys/ddb/db_command.c:396 cmd = (struct command *) 0xc06fa0c0 t = 0 modif = "`\005{À\000\000\000\000 ÁnÀ´xÆÕ\202ÕHÀÀ\216yÀ\000\000\000\000\000']Â\r\000\000\000 ¿zÀ\r\000\000\000\001\000\000\000àxÆÕ'ÈfÀàxÆÕ@ÈfÀ\000¾eÂ\200\225xÀx\000\000\000À\227sÀ\020\205!Ã\000yÆÕÐÚDÀ2PmÀ\024ØDÀ\020\205!ÃÀ\227sÀÆÏDÀÀ\227sÀ\b\226sÀ" addr = -708413260 count = -1065697376 have_addr = 0 result = 0 #11 0xc044bbce in db_command_loop () at /usr/src/sys/ddb/db_command.c:448 No locals. #12 0xc044d781 in db_trap (type=3, code=0) at /usr/src/sys/ddb/db_main.c:221 jb = {{_jb = {-708413120, -708413140, -708413068, 3, -1021213424, -1069230310, 0, 25, 0, 536870912, 0, 0}}} prev_jb = (void *) 0x0 bkpt = 0 #13 0xc05480e9 in kdb_trap (type=3, code=0, tf=0x0) at /usr/src/sys/kern/subr_kdb.c:502 handled = 0 #14 0xc0688344 in trap (frame= {tf_fs = 8, tf_es = 40, tf_ds = 40, tf_edi = -1065839844, tf_esi = 0, tf_ebp = -708412840, tf_isp = -708412860, tf_ebx = -1, tf_edx = 0, tf_ecx = -1052684288, tf_eax = 25, tf_trapno = 3, tf_err = 0, tf_eip = -1068204433, tf_cs = 32, tf_eflags = 130, tf_esp = -708412812, tf_ss = -1068163187}) at /usr/src/sys/i386/i386/trap.c:620 td = (struct thread *) 0xc3218510 p = (struct proc *) 0xc2bc8b04 i = 0 ucode = 0 type = 3 code = 0 addr = 4 eva = 0 ksi = {ksi_link = {tqe_next = 0xc06a37fc, tqe_prev = 0xc0551e06}, ksi_info = {si_signo = -1065839848, si_errno = 582, si_code = -1066331420, si_pid = -1065838408, si_uid = 428, si_status = -1066553049, si_addr = 0xd5c679f8, si_value = {sival_int = -1068346589, sival_ptr = 0xc0525323}, _reason = {_fault = {_trapno = -1065838408}, _timer = {_timerid = -1065838408, _overrun = 8}, _mesgq = { _mqd = -1065838408}, _poll = {_band = -1065838408}, __spare__ = { __spare1__ = -1065838408, __spare2__ = {8, -1066553049, 428, 660, -884261120, -1022554908, 1}}}}, ksi_flags = -1065839828, ksi_sigq = 0xc078932c} #15 0xc0679d1a in calltrap () at /usr/src/sys/i386/i386/exception.s:138 No locals. #16 0xc0547e6f in kdb_enter (msg=0x19 <Address 0x19 out of bounds>) at cpufunc.h:60 No locals. #17 0xc0551f8d in witness_warn (flags=5, lock=0x0, fmt=0xc06f0332 "Kernel page fault") at /usr/src/sys/kern/subr_witness.c:1362 lle = (struct lock_list_entry *) 0x0 lock1 = (struct lock_instance *) 0xc078931c ap = 0x19 <Address 0x19 out of bounds> i = -1 n = 3 __func__ = "witness_warn" #18 0xc0687f24 in trap (frame= {tf_fs = 8, tf_es = 40, tf_ds = 40, tf_edi = -1029583396, tf_esi = -1043267836, tf_ebp = -708412596, tf_isp = -708412628, tf_ebx = -1044629064, tf_edx = 0, tf_ecx = -743573820, tf_eax = 0, tf_trapno = 12, tf_err = 2, tf_eip = -1066907222, tf_cs = 32, tf_eflags = 66194, tf_esp = -1044629064, tf_ss = 0}) at /usr/src/sys/i386/i386/trap.c:274 td = (struct thread *) 0xc3218510 p = (struct proc *) 0xc2bc8b04 i = 0 ucode = 0 type = 12 code = 2 addr = -1021213424 eva = 0 ksi = {ksi_link = {tqe_next = 0xc0743394, tqe_prev = 0xc3218510}, ksi_info = {si_signo = -1066126444, si_errno = -1066126444, si_code = 2165, si_pid = -1021213260, si_uid = 3273753872, si_status = -708412732, si_addr = 0x246, si_value = {sival_int = -1066126444, sival_ptr = 0xc0743394}, _reason = {_fault = {_trapno = -708412720}, _timer = {_timerid = -708412720, _overrun = -1021213260}, _mesgq = { _mqd = -708412720}, _poll = {_band = -708412720}, __spare__ = { __spare1__ = -708412720, __spare2__ = {-1021213260, -1068161375, -1065839792, 56, -1066126444, 0, -1066566149}}}}, ksi_flags = 1706, ksi_sigq = 0xc2a1cddc} #19 0xc0679d1a in calltrap () at /usr/src/sys/i386/i386/exception.s:138 No locals. #20 0xc06849aa in pmap_remove_all (m=0xc1bc39b8) at atomic.h:289 pv = 0xc1d0ff04 pmap = 0xc2a1cddc pte = (pt_entry_t *) 0x0 tpte = 3250338232 #21 0xc062a525 in vm_object_page_remove (object=0xc49fd870, start=) at /usr/src/sys/vm/vm_object.c:1837 p = 0xc1bc39b8 next = 0xc1a01388 #22 0xc06259cc in vm_map_entry_delete (map=0xc2a1c208, entry=0xc31ab000) at /usr/src/sys/vm/vm_map.c:2275 object = 0xc49fd870 offidxstart = 0 offidxend = 138 count = 138 #23 0xc0625b64 in vm_map_delete (map=0xc2a1c208, start=3275147936, end=3217031168) at /usr/src/sys/vm/vm_map.c:2372 next = 0xc336caa0 entry = 0xc31ab000 first_entry = 0xc2a1c208 #24 0xc0625bca in vm_map_remove (map=0xc2a1c208, start=0, end=3217031168) at /usr/src/sys/vm/vm_map.c:2391 result = -1077936128 #25 0xc0623824 in vmspace_exit (td=0xc3218510) at /usr/src/sys/vm/vm_map.c:305 refcnt = 1 vm = (struct vmspace *) 0xc2a1c208 p = (struct proc *) 0xc2bc8b04 #26 0xc05175f6 in exit1 (td=0xc3218510, rv=0) at /usr/src/sys/kern/kern_exit.c:302 p = (struct proc *) 0xc2bc8b04 nq = (struct proc *) 0x0 q = (struct proc *) 0xc27bd700 tp = (struct tty *) 0x0 ttyvp = (struct vnode *) 0x0 vtmp = (struct vnode *) 0xc27bd700 tracevp = (struct vnode *) 0xc27bd700 tracecred = (struct ucred *) 0xc531b400 plim = (struct plimit *) 0xc27bd700 locked = 0 #27 0xc05171d8 in sys_exit (td=0xc3218510, uap=0x0) at /usr/src/sys/kern/kern_exit.c:101 No locals. #28 0xc0688b0a in syscall (frame= {tf_fs = 59, tf_es = 59, tf_ds = 59, tf_edi = 0, tf_esi = -1077943752, tf_ebp = -1077944008, tf_isp = -708412060, tf_ebx = 46, tf_edx = 0, tf_ecx = 0, tf_eax = 1, tf_trapno = 12, tf_err = 2, tf_eip = 137197879, tf_cs = 51, tf_eflags = 662, tf_esp = -1077944036, tf_ss = 59}) at /usr/src/sys/i386/i386/trap.c:1006 params = 0xbfbfe120 <Address 0xbfbfe120 out of bounds> callp = (struct sysent *) 0xc070b258 td = (struct thread *) 0xc3218510 p = (struct proc *) 0xc2bc8b04 orig_tf_eflags = 662 error = 0 narg = 1 args = {0, 140951552, 1234, 4098, -1, 0, 0, 0} code = 1 ksi = {ksi_link = {tqe_next = 0xc06883ff, tqe_prev = 0xc3218510}, ksi_info = {si_signo = -708412104, si_errno = 137967876, si_code = 137276572, si_pid = 7, si_uid = 0, si_status = 0, si_addr = 0x0, si_value = {sival_int = -708412176, sival_ptr = 0xd5c67cf0}, _reason = {_fault = {_trapno = -1066882577}, _timer = {_timerid = -1066882577, _overrun = -1065693464}, _mesgq = { _mqd = -1066882577}, _poll = {_band = -1066882577}, __spare__ = { __spare1__ = -1066882577, __spare2__ = {-1065693464, 0, -1066465361, 268, 0, -708412144, -1066933960}}}}, ksi_flags = 0, ksi_sigq = 0xc3218510} #29 0xc0679d6f in Xint0x80_syscall () at /usr/src/sys/i386/i386/exception.s:191 No locals. #30 0x00000033 in ?? () No symbol table info available. (kgdb) --- bt.txt ends here --- >Release-Note: >Audit-Trail: >Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20061015094048.927F917031>