Date: Fri, 12 Sep 2003 08:54:59 +0200 From: Morten Rodal <morten@rodal.no> To: current@freebsd.org Subject: panic: absolutely cannot call smp_ipi_shootdown with interrupts already disabled Message-ID: <20030912065458.GA604@atlantis.rodal.no>
next in thread | raw e-mail | index | archive | help
--VrqPEDrXMn8OVzN4
Content-Type: multipart/mixed; boundary="AqsLC8rIMeq19msA"
Content-Disposition: inline
--AqsLC8rIMeq19msA
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
A little bit of history first. I am having great trouble in running
any of the Mozilla web browsers under -CURRENT with libkse. (If you
are really interested see the thread on threads@)
When I ran Mozilla Firebird with the --debug (which lets you run
Mozilla Firebird from within gdb) the machine paniced. The backtrace
is rather long and I am not sure if the subject of this email is the
real panic either. This computer is/was (I am currently rebuilding
the kernel to todays sources) running:
FreeBSD slurp.rodal.no 5.1-CURRENT FreeBSD 5.1-CURRENT #1: Fri Aug 22 18:06=
:03 CEST 2003 root@slurp.rodal.no:/usr/obj/usr/src/sys/slurp i386
More details are available upon request.
--=20
Morten Rodal
--AqsLC8rIMeq19msA
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: attachment; filename="crash.12"
Content-Transfer-Encoding: quoted-printable
Script started on Fri Sep 12 08:49:49 2003
slurp# gdb -k kernel.12 vmcore.12
GNU gdb 5.2.1 (FreeBSD)
Copyright 2002 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain condition=
s.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for details.
This GDB was configured as "i386-undermydesk-freebsd"...
panic: absolutely cannot call smp_ipi_shootdown with interrupts already dis=
abled
panic messages:
---
panic: absolutely cannot call smp_ipi_shootdown with interrupts already dis=
abled
cpuid =3D 1; lapic.id =3D 00000000
Stack backtrace:
boot() called on cpu#1
syncing disks, buffers remaining... panic: absolutely cannot call smp_ipi_s=
hootdown with interrupts already disabled
cpuid =3D 1; lapic.id =3D 00000000
boot() called on cpu#1
Uptime: 3d0h0m11s
Dumping 447 MB
[CTRL-C to abort] [CTRL-C to abort] [CTRL-C to abort] [CTRL-C to abort] [CT=
RL-C to abort] 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 256 2=
72 288 304 320 336 352 368 384 400 416 432
---
Reading symbols from /boot/kernel/linux.ko...done.
Loaded symbols for /boot/kernel/linux.ko
Reading symbols from /boot/kernel/snd_sb16.ko...done.
Loaded symbols for /boot/kernel/snd_sb16.ko
Reading symbols from /boot/kernel/snd_sbc.ko...done.
Loaded symbols for /boot/kernel/snd_sbc.ko
Reading symbols from /boot/kernel/snd_pcm.ko...done.
Loaded symbols for /boot/kernel/snd_pcm.ko
Reading symbols from /boot/kernel/nvidia.ko...done.
Loaded symbols for /boot/kernel/nvidia.ko
Reading symbols from /boot/kernel/acpi.ko...done.
Loaded symbols for /boot/kernel/acpi.ko
Reading symbols from /boot/kernel/if_gif.ko...done.
Loaded symbols for /boot/kernel/if_gif.ko
Reading symbols from /boot/kernel/nfsserver.ko...done.
Loaded symbols for /boot/kernel/nfsserver.ko
Reading symbols from /boot/kernel/cd9660.ko...done.
Loaded symbols for /boot/kernel/cd9660.ko
#0 doadump () at /usr/src/sys/kern/kern_shutdown.c:240
240 dumping++;
(kgdb) bt
#0 doadump () at /usr/src/sys/kern/kern_shutdown.c:240
#1 0xc01e40f6 in boot (howto=3D260) at /usr/src/sys/kern/kern_shutdown.c:3=
72
#2 0xc01e4548 in panic () at /usr/src/sys/kern/kern_shutdown.c:550
#3 0xc0322347 in smp_tlb_shootdown (vector=3D0, addr1=3D0, addr2=3D0)
at /usr/src/sys/i386/i386/mp_machdep.c:2397
#4 0xc0322689 in smp_invlpg_range (addr1=3D0, addr2=3D0)
at /usr/src/sys/i386/i386/mp_machdep.c:2529
#5 0xc0324a18 in pmap_invalidate_range (pmap=3D0xc03e6640, sva=3D348965273=
6,=20
eva=3D3489669120) at /usr/src/sys/i386/i386/pmap.c:719
#6 0xc0324d71 in pmap_qremove (sva=3D3489652736, count=3D0)
at /usr/src/sys/i386/i386/pmap.c:961
#7 0xc022ffaa in vfs_vmio_release (bp=3D0xccab1058)
at /usr/src/sys/kern/vfs_bio.c:1587
#8 0xc0230724 in getnewbuf (slpflag=3D0, slptimeo=3D0, size=3D6144, maxsiz=
e=3D16384)
at /usr/src/sys/kern/vfs_bio.c:1864
#9 0xc0231fba in geteblk (size=3D6144) at /usr/src/sys/kern/vfs_bio.c:2627
#10 0xc022dca3 in bwrite (bp=3D0x4000) at /usr/src/sys/kern/vfs_bio.c:813
#11 0xc022eabc in bawrite (bp=3D0x0) at /usr/src/sys/kern/vfs_bio.c:1148
#12 0xc0238bc0 in vop_stdfsync (ap=3D0xdc2bc708)
at /usr/src/sys/kern/vfs_default.c:742
#13 0xc01a8ad0 in spec_fsync (ap=3D0xdc2bc708)
at /usr/src/sys/fs/specfs/spec_vnops.c:417
#14 0xc01a7ec8 in spec_vnoperate (ap=3D0x0)
at /usr/src/sys/fs/specfs/spec_vnops.c:122
#15 0xc02c1fe1 in ffs_sync (mp=3D0xc3a2ec00, waitfor=3D2, cred=3D0xc1378e80=
,=20
td=3D0xc03adcc0) at vnode_if.h:627
#16 0xc0246aeb in sync (td=3D0xc03adcc0, uap=3D0x0)
at /usr/src/sys/kern/vfs_syscalls.c:142
---Type <return> to continue, or q <return> to quit---
#17 0xc01e3bff in boot (howto=3D256) at /usr/src/sys/kern/kern_shutdown.c:2=
81
#18 0xc01e4548 in panic () at /usr/src/sys/kern/kern_shutdown.c:550
#19 0xc0322347 in smp_tlb_shootdown (vector=3D0, addr1=3D0, addr2=3D0)
at /usr/src/sys/i386/i386/mp_machdep.c:2397
#20 0xc032264a in smp_invlpg (addr=3D0)
at /usr/src/sys/i386/i386/mp_machdep.c:2516
#21 0xc0324993 in pmap_invalidate_page (pmap=3D0xc03e6640, va=3D3313360896)
at /usr/src/sys/i386/i386/pmap.c:691
#22 0xc03267c9 in pmap_enter (pmap=3D0xc03e6640, va=3D3225314880, m=3D0xc0b=
aac48,=20
prot=3D7 '\a', wired=3D1) at /usr/src/sys/i386/i386/pmap.c:2037
#23 0xc02dba67 in kmem_malloc (map=3D0xc082f0b0, size=3D8192, flags=3D2)
at /usr/src/sys/vm/vm_kern.c:443
#24 0xc02edcd7 in page_alloc (zone=3D0xc134f300, bytes=3D0, pflag=3D0x0, wa=
it=3D0)
at /usr/src/sys/vm/uma_core.c:807
#25 0xc02eda29 in slab_zalloc (zone=3D0xc134f300, wait=3D2)
at /usr/src/sys/vm/uma_core.c:717
#26 0xc02eed68 in uma_zone_slab (zone=3D0xc134f300, flags=3D2)
at /usr/src/sys/vm/uma_core.c:1532
#27 0xc02eefe5 in uma_zalloc_bucket (zone=3D0xc134f300, flags=3D2)
at /usr/src/sys/vm/uma_core.c:1635
#28 0xc02eebd9 in uma_zalloc_arg (zone=3D0xc134f300, udata=3D0x0, flags=3D2)
at /usr/src/sys/vm/uma_core.c:1463
#29 0xc01d774c in malloc (size=3D9, type=3D0xc03852a0, flags=3D2)
at /usr/src/sys/vm/uma.h:229
#30 0xc01b620b in elf32_coredump (td=3D0xc54ff260, vp=3D0xc476a000,=20
limit=3D9223372036854775807) at /usr/src/sys/kern/imgact_elf.c:954
#31 0xc01ea107 in coredump (td=3D0xc54ff260) at /usr/src/sys/kern/kern_sig.=
c:2597
#32 0xc01e9748 in sigexit (td=3D0xc54ff260, sig=3D5)
---Type <return> to continue, or q <return> to quit---
at /usr/src/sys/kern/kern_sig.c:2408
#33 0xc01e7a50 in trapsignal (td=3D0xc54ff260, sig=3D5, code=3D0)
at /usr/src/sys/kern/kern_sig.c:1550
#34 0xc032a1f6 in trap (frame=3D
{tf_fs =3D 134545455, tf_es =3D 47, tf_ds =3D -1078001617, tf_edi =3D=
0, tf_esi =3D 258, tf_ebp =3D -1077941848, tf_isp =3D -601109132, tf_ebx =
=3D 671557976, tf_edx =3D 1, tf_ecx =3D 115, tf_eax =3D 671569624, tf_trapn=
o =3D 3, tf_err =3D 0, tf_eip =3D 671461041, tf_cs =3D 31, tf_eflags =3D 64=
6, tf_esp =3D -1077941908, tf_ss =3D 47})
at /usr/src/sys/i386/i386/trap.c:623
#35 0xc03125f8 in calltrap () at {standard input}:103
---Can't read userspace from dump, or kernel process---
(kgdb) up 32
#32 0xc01e9748 in sigexit (td=3D0xc54ff260, sig=3D5)
at /usr/src/sys/kern/kern_sig.c:2408
2408 if (coredump(td) =3D=3D 0)
(kgdb) p *td
$1 =3D {td_proc =3D 0xc3c77000, td_ksegrp =3D 0xc3c76680, td_plist =3D {
tqe_next =3D 0xc3c465f0, tqe_prev =3D 0xc3e7abe8}, td_kglist =3D {
tqe_next =3D 0xc3c465f0, tqe_prev =3D 0xc3e7abf0}, td_slpq =3D {
tqe_next =3D 0xc3e7abe0, tqe_prev =3D 0xc4247868}, td_lockq =3D {tqe_ne=
xt =3D 0x0,=20
tqe_prev =3D 0xc03b24a4}, td_runq =3D {tqe_next =3D 0x0, tqe_prev =3D 0=
xc3c766a4},=20
td_selq =3D {tqh_first =3D 0x0, tqh_last =3D 0xc54ff290}, td_flags =3D 32=
7682,=20
td_inhibitors =3D 0, td_pflags =3D 0, td_last_kse =3D 0xc3d4b300,=20
td_kse =3D 0xc3d4b300, td_dupfd =3D 0, td_wchan =3D 0x0, td_wmesg =3D 0x0=
,=20
td_lastcpu =3D 1 '\001', td_oncpu =3D 1 '\001', td_locks =3D 0, td_blocke=
d =3D 0x0,=20
td_ithd =3D 0x0, td_lockname =3D 0xc035fa2f "Giant", td_contested =3D {
lh_first =3D 0xc03b2480}, td_sleeplocks =3D 0x0, td_intr_nesting_level =
=3D 0,=20
td_mailbox =3D 0x0, td_ucred =3D 0xc565a180, td_switchin =3D 0,=20
td_standin =3D 0xc3e7a260, td_prticks =3D 0, td_upcall =3D 0xc54fb3c0,=20
td_sticks =3D 7, td_uuticks =3D 1, td_usticks =3D 0, td_intrval =3D 0,=20
td_oldsigmask =3D {__bits =3D {0, 0, 0, 0}}, td_sigmask =3D {__bits =3D {=
4294901503,=20
4294967295, 4294967295, 4294967295}}, td_siglist =3D {__bits =3D {0, =
0, 0,=20
0}}, td_waitset =3D 0x0, td_umtx =3D {tqe_next =3D 0x0, tqe_prev =3D =
0x0},=20
td_base_pri =3D 160 '=A0', td_priority =3D 20 '\024', td_pcb =3D 0xdc2bcd=
a0,=20
td_state =3D TDS_RUNNING, td_retval =3D {0, 134602752}, td_slpcallout =3D=
{
c_links =3D {sle =3D {sle_next =3D 0xc3e7acd0}, tqe =3D {tqe_next =3D 0=
xc3e7acd0,=20
tqe_prev =3D 0xcc9236f8}}, c_time =3D 25933883, c_arg =3D 0xc54ff26=
0,=20
c_func =3D 0, c_flags =3D 8}, td_frame =3D 0xdc2bcd48,=20
td_kstack_obj =3D 0xc4fafa68, td_kstack =3D 3693850624, td_kstack_pages =
=3D 2,=20
td_altkstack_obj =3D 0x0, td_altkstack =3D 0, td_altkstack_pages =3D 0,=
=20
td_critnest =3D 3, td_md =3D <incomplete type>, td_sched =3D 0xc54ff38c}
(kgdb) p *td->td_proc
$2 =3D {p_list =3D {le_next =3D 0xc3cf1b58, le_prev =3D 0xc03b4094}, p_kseg=
rps =3D {
tqh_first =3D 0xc4248f00, tqh_last =3D 0xc3c76684}, p_threads =3D {
tqh_first =3D 0xc3e7abe0, tqh_last =3D 0xc3c46398}, p_suspended =3D {
tqh_first =3D 0x0, tqh_last =3D 0xc3c77018}, p_ucred =3D 0xc565a180,=20
p_fd =3D 0xc4377600, p_fdtol =3D 0x0, p_stats =3D 0xdacef000,=20
p_limit =3D 0xc3ca9200, p_upages_obj =3D 0xc3c6a094, p_sigacts =3D 0xc568=
3000,=20
p_flag =3D 55298, p_sflag =3D 1, p_state =3D PRS_NORMAL, p_pid =3D 56243,=
p_hash =3D {
le_next =3D 0x0, le_prev =3D 0xc137cecc}, p_pglist =3D {le_next =3D 0x0=
,=20
le_prev =3D 0xc5239108}, p_pptr =3D 0xc3cf1b58, p_sibling =3D {le_next =
=3D 0x0,=20
le_prev =3D 0xc3cf1bc0}, p_children =3D {lh_first =3D 0x0}, p_mtx =3D {
mtx_object =3D {lo_class =3D 0xc0386aec, lo_name =3D 0xc035fa40 "proces=
s lock",=20
lo_type =3D 0xc035fa40 "process lock", lo_flags =3D 4390912, lo_list =
=3D {
tqe_next =3D 0x0, tqe_prev =3D 0x0}, lo_witness =3D 0x0}, mtx_lock =
=3D 4,=20
mtx_recurse =3D 0, mtx_blocked =3D {tqh_first =3D 0x0, tqh_last =3D 0xc=
3c77090},=20
mtx_contested =3D {le_next =3D 0x0, le_prev =3D 0xc03b24ac}}, p_oppid =
=3D 56242,=20
p_vmspace =3D 0xc3a91a00, p_swtime =3D 49, p_realtimer =3D {it_interval =
=3D {
tv_sec =3D 0, tv_usec =3D 0}, it_value =3D {tv_sec =3D 0, tv_usec =3D=
0}},=20
p_runtime =3D {sec =3D 3, frac =3D 9877315056620562300}, p_uu =3D 0, p_su=
=3D 4855,=20
p_iu =3D 0, p_uticks =3D 360, p_sticks =3D 82, p_iticks =3D 1, p_profthre=
ads =3D 0,=20
p_maxthrwaits =3D 0, p_traceflag =3D 0, p_tracevp =3D 0x0, p_tracecred =
=3D 0x0,=20
p_textvp =3D 0xc409c7fc, p_siglist =3D {__bits =3D {0, 0, 0, 0}}, p_lock =
=3D 0 '\0',=20
p_klist =3D {slh_first =3D 0x0}, p_sigiolst =3D {slh_first =3D 0x0},=20
p_sigparent =3D 20, p_sig =3D 5, p_code =3D 0, p_stops =3D 0, p_stype =3D=
0,=20
p_step =3D 0 '\0', p_pfsflags =3D 0 '\0', p_nlminfo =3D 0x0, p_aioinfo =
=3D 0x0,=20
p_singlethread =3D 0x0, p_suspcount =3D 0, p_sigstk =3D {ss_sp =3D 0x0, s=
s_size =3D 0,=20
ss_flags =3D 4}, p_magic =3D 3203398350, p_comm =3D "MozillaFirebird-bi=
n",=20
p_pgrp =3D 0xc5239100, p_sysent =3D 0xc039a9a0, p_args =3D 0xc4094d00,=20
p_cpulimit =3D 9223372036854775807, p_xstat =3D 0, p_numthreads =3D 4,=20
---Type <return> to continue, or q <return> to quit---
p_numksegrps =3D 2, p_md =3D {md_ldt =3D 0xc5620e40}, p_itcallout =3D {c_=
links =3D {
sle =3D {sle_next =3D 0x0}, tqe =3D {tqe_next =3D 0x0, tqe_prev =3D 0=
xcc90eb28}},=20
c_time =3D 25923265, c_arg =3D 0xc3c77000, c_func =3D 0, c_flags =3D 8}=
,=20
p_uarea =3D 0xdacef000, p_acflag =3D 24, p_ru =3D 0x0, p_peers =3D 0x0,=
=20
p_leader =3D 0xc3c77000, p_emuldata =3D 0x0, p_label =3D {l_flags =3D 0,=
=20
l_perpolicy =3D {{l_ptr =3D 0x0, l_long =3D 0}, {l_ptr =3D 0x0, l_long =
=3D 0}, {
l_ptr =3D 0x0, l_long =3D 0}, {l_ptr =3D 0x0, l_long =3D 0}}},=20
p_sched =3D 0xc3c771e4}
(kgdb) quit
slurp# exit
exit
Script done on Fri Sep 12 08:50:29 2003
--AqsLC8rIMeq19msA--
--VrqPEDrXMn8OVzN4
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (FreeBSD)
iD8DBQE/YW3CbWe1Cy11WVsRAmg4AKCrq+8lS5cyFMpVB0G4JtKgeRwuvgCdEE71
oDZIatuC6YWtM5n70wWgVMg=
=uBYx
-----END PGP SIGNATURE-----
--VrqPEDrXMn8OVzN4--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030912065458.GA604>