Date: Wed, 22 Sep 2004 23:50:31 GMT From: Wade Klaver <archeron@wavefire.com> To: freebsd-bugs@FreeBSD.org Subject: Re: kern/71827: Running java applications causes kernel panic. Message-ID: <200409222350.i8MNoVcY049419@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
The following reply was made to PR kern/71827; it has been noted by GNATS.
From: Wade Klaver <archeron@wavefire.com>
To: freebsd-gnats-submit@FreeBSD.org, archeron@wavefire.com
Cc:
Subject: Re: kern/71827: Running java applications causes kernel panic.
Date: Wed, 22 Sep 2004 16:44:55 -0700
New developments.
First, this box has been updated:
Second, I finally have a proper core and backtrace:
root@-/:savecore /opt/crash/ /dev/ad0s1b
savecore: reboot after panic: sched_add: kse 0xc6983cb4 (java) already in run
queue
savecore: unable to open bounds file, using 0
savecore: writing core to vmcore.0
...
Script started on Wed Sep 22 16:40:09 2004
bash-2.05b# ls
-l /opt/crash[3P/opt/crashsavecore /opt/crash/ /dev/ad0s1b
bash-2.05b# [19Pls /opt/crash[4h-l [4l/opt/crash
bash-2.05b# [Kkgdb kernel.debug /opt/crash/vmcore.0
[GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so:
Undefined symbol "ps_pglobal_lookup"]
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd".
doadump () at pcpu.h:159
(kgdb) bt full
#0 doadump () at pcpu.h:159
No locals.
#1 0xc0454b7e in db_fncall (dummy1=0, dummy2=0, dummy3=-1065307904,
dummy4=0xe7795898 "´XyçÔ\204PÀ")
at /usr/src/sys/ddb/db_command.c:531
fn_addr = -1068434840
args = {0 <repeats 11 times>}
nargs = 11
retval = 0
func = (fcn_10args_t *) 0xc050fa68 <doadump>
t = 0
#2 0xc045498c in db_command (last_cmdp=0xc07b4d64, cmd_table=0x0,
aux_cmd_tablep=0xc0778be8, aux_cmd_tablep_end=0xc0778bec)
at /usr/src/sys/ddb/db_command.c:349
cmd = (struct command *) 0xc077f660
t = 0
modif = "´XyçÔ\204PÀ\000±\200À\001\000\000\000
´Xyçø\003\000\000äXyç\000\000\000\000ÐXyçø\003\000\000ÔXyçýÏgÀø\003\000\000ø\003\000\000\r\000\000\000üXyç\002ÒgÀäXyçø\003\000\000\001\000\017\003x\000\000\000`V{À\000\000\000\000\020YyçÜhEÀóþtÀLfEÀ\000\000\000\000`V{Àþ]EÀ"
addr = 0
count = -1065307904
have_addr = 0
result = 0
#3 0xc0454a54 in db_command_loop () at /usr/src/sys/ddb/db_command.c:455
No locals.
#4 0xc04565b9 in db_trap (type=3, code=0) at /usr/src/sys/ddb/db_main.c:221
jb = {{_jb = {-411477680, -411477700, -411477628, -1018255328, 0,
-1069193902, 2, -1018255328, 0, -411477624,
-1068309664, 2}}}
prev_jb = (void *) 0x0
bkpt = 0
#5 0xc05278bf in kdb_trap (type=3, code=0, tf=0x1)
at /usr/src/sys/kern/subr_kdb.c:418
did_stop_cpus = 1
handled = -1018255328
#6 0xc069da60 in trap (frame=
{tf_fs = -411500520, tf_es = -1068367856, tf_ds = -1066074096, tf_edi =
-1066069624, tf_esi = 1, tf_ebp = -411477480, tf_isp = -411477500, tf_ebx =
-411477436, tf_edx = 0, tf_ecx = -1056882688, tf_eax = 18, tf_trapno = 3,
tf_err = 0, tf_eip = -1068337629, tf_cs = 8, tf_eflags = 134, tf_esp =
-411477448, tf_ss = -1068432621}) at /usr/src/sys/i386/i386/trap.c:576
td = (struct thread *) 0xc34ea820
p = (struct proc *) 0xc68f1a80
sticks = 3883489752
i = 0
ucode = 0
type = 3
code = 0
eva = 0
#7 0xc068e27a in calltrap () at /usr/src/sys/i386/i386/exception.s:140
No locals.
#8 0xe7790018 in ?? ()
No symbol table info available.
#9 0xc0520010 in sched_class (kg=0xc0751188, class=256)
at /usr/src/sys/kern/sched_ule.c:1433
kseq = (struct kseq *) 0x1
ke = (struct td_sched *) 0x0
td = (struct thread *) 0xe7795a44
nclass = 0
oclass = 3
#10 0xc0510313 in panic (fmt=0x86 <Address 0x86 out of bounds>)
at /usr/src/sys/kern/kern_shutdown.c:537
---Type <return> to continue, or q <return> to quit---
td = (struct thread *) 0xc34ea820
bootopt = 256
newpanic = 8
ap = 0xc0527623 "\220ÉÃ\211öU\211åWVSÇ\005Ào|À"
buf = "sched_add: kse 0xc6983cb4 (java) already in run queue", '\0' <repeats
202 times>
#11 0xc052054d in sched_add_internal (td=0xc6983b60, preemptive=1)
at /usr/src/sys/kern/sched_ule.c:1692
kseq = (struct kseq *) 0xc07c0260
kg = (struct ksegrp *) 0x0
ke = (struct td_sched *) 0xc6983cb4
canmigrate = -1065622656
class = 0
#12 0xc05204d8 in sched_add (td=0x0, flags=0)
at /usr/src/sys/kern/sched_ule.c:1672
No locals.
#13 0xc0520b61 in slot_fill (kg=0xc68f2af0) at kern_switch.c:217
td = (struct thread *) 0x0
#14 0xc051fcb8 in sched_switch (td=0xc34ea820, newtd=0x0, flags=1)
at /usr/src/sys/kern/sched_ule.c:1277
ke = (struct td_sched *) 0xc34ea974
#15 0xc0515ee4 in mi_switch (flags=1, newtd=0x0)
at /usr/src/sys/kern/kern_synch.c:340
new_switchtime = {sec = 109174, frac = 7524514413860760694}
td = (struct thread *) 0xc34ea820
p = (struct proc *) 0xc68f1a80
__func__ = "mi_switch"
#16 0xc052fa9c in turnstile_wait (ts=0xc2aec0c0, lock=0xc07be3c0,
owner=0xc23799c0) at /usr/src/sys/kern/subr_turnstile.c:562
tc = (struct turnstile_chain *) 0xc07c9938
td = (struct thread *) 0xc34ea820
td1 = (struct thread *) 0xc34eab60
#17 0xc05086fb in _mtx_lock_sleep (m=0xc07be3c0, td=0xc34ea820, opts=0,
file=0xc074c79b "/usr/src/sys/kern/kern_condvar.c",
line=334) at /usr/src/sys/kern/kern_mutex.c:551
ts = (struct turnstile *) 0xc2aec0c0
owner = (struct thread *) 0xc23799c0
v = 0
#18 0xc05082e9 in _mtx_lock_flags (m=0xc07be3c0, opts=0, file=0xc074c79b
"/usr/src/sys/kern/kern_condvar.c", line=334)
at /usr/src/sys/kern/kern_mutex.c:264
No locals.
#19 0xc04efb36 in cv_timedwait_sig (cvp=0xc07ee8c4, mp=0xc07ee8a0, timo=90001)
at /usr/src/sys/kern/kern_condvar.c:334
_giantcnt = 0
Giant__wf = 0xc0753b81 "/usr/src/sys/kern/sys_generic.c"
Giant__wl = 864
sq = (struct sleepqueue *) 0xc3736220
td = (struct thread *) 0xc34ea820
rval = 0
sig = 0
mp__wf = 0xc0753b81 "/usr/src/sys/kern/sys_generic.c"
mp__wl = 912
__func__ = "cv_timedwait_sig"
#20 0xc0533a4b in poll (td=0xc34ea820, uap=0xe7795d14)
at /usr/src/sys/kern/sys_generic.c:937
bits = (struct pollfd *) 0xe7795be0
smallbits = {{fd = 119, events = 9, revents = 0}, {fd = -1068463931, events =
-7296, revents = -16261}, {fd = 0,
events = -3832, revents = -16268}, {fd = 711, events = -7232, revents =
-16261}, {fd = 762, events = 24891,
revents = -16267}, {fd = -411476948, events = -31844, revents = -16304},
{fd = -1065622592, events = 0, revents = 0}, {
fd = -1066049221, events = 762, revents = 0}, {fd = 0, events = 23756,
revents = -6279}, {fd = -1018255328,
events = 23676, revents = -6279}, {fd = -411476936, events = -23360,
revents = -16241}, {fd = -411476884,
events = 31919, revents = -16303}, {fd = -1064247360, events = -14608,
revents = 26849}, {fd = 42608563,
events = -12974, revents = -10772}, {fd = -411476796, events = 23692,
revents = -6279}, {fd = 1091337, events = 7936,
---Type <return> to continue, or q <return> to quit---
revents = -16263}, {fd = -411476852, events = -22496, revents = -15538},
{fd = -1028354832, events = 23680,
revents = -6279}, {fd = -1068401236, events = 23692, revents = -6279}, {fd
= -411476808, events = -22496,
revents = -15538}, {fd = -411476832, events = 32261, revents = -16303},
{fd = -411476852, events = 6784,
revents = -14705}, {fd = -1028354832, events = -22496, revents = -15538},
{fd = -1068500367, events = 23736,
revents = -6279}, {fd = 134546372, events = 8, revents = 0}, {fd =
-411476808, events = 0, revents = 0}, {fd = 0,
events = 10992, revents = -14705}, {fd = 1095893493, events = 11994,
revents = 353}, {fd = 0, events = 6784,
revents = -14705}, {fd = 0, events = -22496, revents = -15538}, {fd =
-963700096, events = 23872, revents = -6279}, {
fd = -1068500705, events = -1717, revents = -16305}}
atv = {tv_sec = 110072, tv_usec = 962453}
rtv = {tv_sec = 109172, tv_usec = 962453}
ttv = {tv_sec = 900, tv_usec = 0}
error = 0
timo = 90001
ncoll = 15592
nfds = 1
ni = 8
#21 0xc069e1f7 in syscall (frame=
{tf_fs = 138149935, tf_es = 47, tf_ds = -1082523601, tf_edi = 139359744,
tf_esi = 139359232, tf_ebp = -1095568936, tf_isp = -411476620, tf_ebx =
1208629308, tf_edx = 136764896, tf_ecx = 0, tf_eax = 209, tf_trapno = 22,
tf_err = 2, tf_eip = 1208956675, tf_cs = 31, tf_eflags = 642, tf_esp =
-1095568980, tf_ss = 47}) at /usr/src/sys/i386/i386/trap.c:1001
params = 0xbeb2f1b0 <Address 0xbeb2f1b0 out of bounds>
callp = (struct sysent *) 0xc078cc88
td = (struct thread *) 0xc34ea820
p = (struct proc *) 0xc68f1a80
orig_tf_eflags = 642
sticks = 5
error = 0
narg = 3
args = {-1095568880, 1, 900000, 0, 0, 0, 5, -963700096}
code = 209
#22 0xc068e2cf in Xint0x80_syscall ()
at /usr/src/sys/i386/i386/exception.s:201
No locals.
#23 0x083c002f in ?? ()
No symbol table info available.
#24 0x0000002f in ?? ()
No symbol table info available.
#25 0xbf7a002f in ?? ()
No symbol table info available.
#26 0x084e7600 in ?? ()
No symbol table info available.
#27 0x084e7400 in ?? ()
No symbol table info available.
#28 0xbeb2f1d8 in ?? ()
No symbol table info available.
#29 0xe7795d74 in ?? ()
No symbol table info available.
#30 0x480a383c in ?? ()
No symbol table info available.
#31 0x0826dde0 in ?? ()
No symbol table info available.
#32 0x00000000 in ?? ()
No symbol table info available.
#33 0x000000d1 in ?? ()
No symbol table info available.
---Type <return> to continue, or q <return> to quit---
#34 0x00000016 in ?? ()
No symbol table info available.
#35 0x00000002 in ?? ()
No symbol table info available.
#36 0x480f3703 in ?? ()
No symbol table info available.
#37 0x0000001f in ?? ()
No symbol table info available.
#38 0x00000282 in ?? ()
No symbol table info available.
#39 0xbeb2f1ac in ?? ()
No symbol table info available.
#40 0x0000002f in ?? ()
No symbol table info available.
#41 0x00000000 in ?? ()
No symbol table info available.
#42 0x00000000 in ?? ()
No symbol table info available.
#43 0x00000000 in ?? ()
No symbol table info available.
#44 0x00000000 in ?? ()
No symbol table info available.
#45 0x12031000 in ?? ()
No symbol table info available.
#46 0xc34ea974 in ?? ()
No symbol table info available.
#47 0xc32a3000 in ?? ()
No symbol table info available.
#48 0xe7795a98 in ?? ()
No symbol table info available.
#49 0xe7795a80 in ?? ()
No symbol table info available.
#50 0xc34ea820 in ?? ()
No symbol table info available.
#51 0xc051fcff in sched_switch (td=0x480a383c, newtd=0x84e7400, flags=Cannot
access memory at address 0xbeb2f1e8
) at /usr/src/sys/kern/sched_ule.c:1286
ke = (struct td_sched *) 0x84e7600
Previous frame inner to this frame (corrupt stack?)
(kgdb) q
bash-2.05b# exit
Script done on Wed Sep 22 16:40:43 2004
FreeBSD arch.wavefire.com 5.3-BETA5 FreeBSD 5.3-BETA5 #2: Mon Sep 20 17:10:46
PDT 2004 root@arch.wavefire.com:/usr/obj/usr/src/sys/WORKSTATION-5.0-SMP
i386
I am hearing that sched_ule is not a priority for now so I shall leave this as
my final post on this subject. If anyone wants more info, please let me
know.
-Wade Klaver
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200409222350.i8MNoVcY049419>