Date: Tue, 15 Apr 2003 10:29:29 -0700 From: Kris Kennaway <kris@obsecurity.org> To: Kris Kennaway <kris@obsecurity.org> Cc: jhb@FreeBSD.org Subject: Another "impossible" mutex panic (Re: Panic in wait4()) Message-ID: <20030415172929.GA65268@rot13.obsecurity.org> In-Reply-To: <20030325222204.GA6918@rot13.obsecurity.org> References: <20030325222204.GA6918@rot13.obsecurity.org>
next in thread | previous in thread | raw e-mail | index | archive | help
--RnlQjJ0d97Da+TV1
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
On Tue, Mar 25, 2003 at 02:22:04PM -0800, Kris Kennaway wrote:
> I just got this on bento (running a kernel from Mar 17). It was under
> heavy disk load at the time, which may or may not be relevant.
>=20
> Kris
>=20
> panic: mtx_lock() of spin mutex %s @ %s:%d
> panic messages:
I just got another one of these "impossible" panics on one of the
gohans (impossible because according to gdb the mutex is not a spin
mutex, so the assertion should not have fired).
panic: mtx_lock() of spin mutex %s @ %s:%d
panic messages:
---
Fatal trap 12: page fault while in kernel mode
fault virtual address =3D 0x260
fault code =3D supervisor read, page not present
instruction pointer =3D 0x8:0xc02bd3a8
stack pointer =3D 0x10:0xd8fc1b48
frame pointer =3D 0x10:0xd8fc1b48
code segment =3D base 0x0, limit 0xfffff, type 0x1b
=3D DPL 0, pres 1, def32 1, gran 1
processor eflags =3D interrupt enabled, resume, IOPL =3D 0
current process =3D 78102 (sh)
Dumping 510 MB
ata0: resetting devices ..
done
16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 256 272 288 304 320 =
336 352 368 384 400 4\
16 432 448 464 480 496
---
#0 doadump () at /a/asami/portbuild/i386/src-client/sys/kern/kern_shutdown=
.c:239
239 /a/asami/portbuild/i386/src-client/sys/kern/kern_shutdown.c: No suc=
h file or directory.
in /a/asami/portbuild/i386/src-client/sys/kern/kern_shutdown.c
(kgdb) bt
#0 doadump () at /a/asami/portbuild/i386/src-client/sys/kern/kern_shutdown=
.c:239
#1 0xc0165d15 in db_fncall (dummy1=3D1016, dummy2=3D0, dummy3=3D1016, dumm=
y4=3D0xd8fc1934 "\f")
at /a/asami/portbuild/i386/src-client/sys/ddb/db_command.c:546
#2 0xc0165a92 in db_command (last_cmdp=3D0xc0445260, cmd_table=3D0x0, aux_=
cmd_tablep=3D0xc043edd8,
aux_cmd_tablep_end=3D0xc043eddc)
at /a/asami/portbuild/i386/src-client/sys/ddb/db_command.c:346
#3 0xc0165ba6 in db_command_loop ()
at /a/asami/portbuild/i386/src-client/sys/ddb/db_command.c:470
#4 0xc016892a in db_trap (type=3D12, code=3D0)
at /a/asami/portbuild/i386/src-client/sys/ddb/db_trap.c:72
#5 0xc03c3d46 in kdb_trap (type=3D12, code=3D0, regs=3D0xd8fc1b08)
at /a/asami/portbuild/i386/src-client/sys/i386/i386/db_interface.c:170
#6 0xc03d53d2 in trap_fatal (frame=3D0xd8fc1b08, eva=3D0)
at /a/asami/portbuild/i386/src-client/sys/i386/i386/trap.c:838
#7 0xc03d50e2 in trap_pfault (frame=3D0xd8fc1b08, usermode=3D0, eva=3D608)
at /a/asami/portbuild/i386/src-client/sys/i386/i386/trap.c:757
#8 0xc03d4c5d in trap (frame=3D
{tf_fs =3D -654573544, tf_es =3D -1071185904, tf_ds =3D -1068957680, =
tf_edi =3D -987128304, tf_esi\
=3D -1069422829, tf_ebp =3D -654566584, tf_isp =3D -654566604, tf_ebx =3D =
608, tf_edx =3D 608, tf_ecx =3D 0\
, tf_eax =3D 608, tf_trapno =3D 12, tf_err =3D 0, tf_eip =3D -1070869592, t=
f_cs =3D 8, tf_eflags =3D 66118, \
tf_esp =3D -654566384, tf_ss =3D -1071153877})
at /a/asami/portbuild/i386/src-client/sys/i386/i386/trap.c:444
#9 0xc03c56a8 in calltrap () at {standard input}:96
#10 0xc0277d2b in kvprintf (fmt=3D0xc041e713 " @ %s:%d", func=3D0xc02776d0 =
<snprintf_func>,
arg=3D0xd8fc1c2c, radix=3D10, ap=3D0xd8fc1c74 "XXXbinarydataXXX")
at /a/asami/portbuild/i386/src-client/sys/kern/subr_prf.c:668
#11 0xc027764e in vsnprintf (str=3D0xc0494840 "mtx_lock() of spin mutex ", =
size=3D0, format=3D0x0,
ap=3D0x0) at /a/asami/portbuild/i386/src-client/sys/kern/subr_prf.c:413
#12 0xc025acec in panic (fmt=3D0xd8fc1c2c "YHI)
at /a/asami/portbuild/i386/src-client/sys/kern/kern_shutdown.c:509
#13 0xc0251126 in _mtx_lock_flags (m=3D0xc045b5c0, opts=3D0,
file=3D0xc041eef5 "/a/asami/portbuild/i386/src-client/sys/kern/kern_res=
ource.c", line=3D940)
at /a/asami/portbuild/i386/src-client/sys/kern/kern_mutex.c:332
#14 0xc0259a3d in uifree (uip=3D0xc045b5c0)
at /a/asami/portbuild/i386/src-client/sys/kern/kern_resource.c:940
#15 0xc025650a in setreuid (td=3D0x0, uap=3D0x0)
at /a/asami/portbuild/i386/src-client/sys/kern/kern_prot.c:902
#16 0xc03d56ee in syscall (frame=3D
{tf_fs =3D 47, tf_es =3D 47, tf_ds =3D 47, tf_edi =3D 0, tf_esi =3D 0=
, tf_ebp =3D -1077941152, tf_isp \
=3D---Type <return> to continue, or q <return> to quit---
-654566028, tf_ebx =3D 3, tf_edx =3D 0, tf_ecx =3D 0, tf_eax =3D 126, tf_t=
rapno =3D 12, tf_err =3D 2, tf_ei\
p =3D 134699020, tf_cs =3D 31, tf_eflags =3D 659, tf_esp =3D -1077941228, t=
f_ss =3D 47})
at /a/asami/portbuild/i386/src-client/sys/i386/i386/trap.c:1030
#17 0xc03c56fd in Xint0x80_syscall () at {standard input}:138
---Can't read userspace from dump, or kernel process---
--RnlQjJ0d97Da+TV1
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (FreeBSD)
iD8DBQE+nEF5Wry0BWjoQKURAoYLAKC9ZO0fjHSUBYVJzFWPRTYFiKomjQCglhGI
Y1BLqEIHKtcjKbyU2zBIHyQ=
=UWLA
-----END PGP SIGNATURE-----
--RnlQjJ0d97Da+TV1--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030415172929.GA65268>