From owner-freebsd-current@FreeBSD.ORG Tue Jul 21 15:18:26 2009 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id AC7781065670; Tue, 21 Jul 2009 15:18:26 +0000 (UTC) (envelope-from jhb@freebsd.org) Received: from cyrus.watson.org (cyrus.watson.org [65.122.17.42]) by mx1.freebsd.org (Postfix) with ESMTP id 7D86D8FC13; Tue, 21 Jul 2009 15:18:26 +0000 (UTC) (envelope-from jhb@freebsd.org) Received: from bigwig.baldwin.cx (66.111.2.69.static.nyinternet.net [66.111.2.69]) by cyrus.watson.org (Postfix) with ESMTPSA id 1BF7B46B03; Tue, 21 Jul 2009 11:18:26 -0400 (EDT) Received: from jhbbsd.hudson-trading.com (unknown [209.249.190.8]) by bigwig.baldwin.cx (Postfix) with ESMTPA id 5DFEA8A09C; Tue, 21 Jul 2009 11:18:25 -0400 (EDT) From: John Baldwin To: Kamigishi Rei Date: Tue, 21 Jul 2009 11:14:47 -0400 User-Agent: KMail/1.9.7 References: <4A659F98.2060007@haruhiism.net> <200907211027.06589.jhb@freebsd.org> <4A65D1CD.40006@haruhiism.net> In-Reply-To: <4A65D1CD.40006@haruhiism.net> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200907211114.47691.jhb@freebsd.org> X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.0.1 (bigwig.baldwin.cx); Tue, 21 Jul 2009 11:18:25 -0400 (EDT) X-Virus-Scanned: clamav-milter 0.95.1 at bigwig.baldwin.cx X-Virus-Status: Clean X-Spam-Status: No, score=-2.5 required=4.2 tests=AWL,BAYES_00,RDNS_NONE autolearn=no version=3.2.5 X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on bigwig.baldwin.cx Cc: Lawrence Stewart , freebsd-current@freebsd.org Subject: Re: [follow-up] Fatal trap 12 in r195146+ in netisr_queue_internal X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 21 Jul 2009 15:18:26 -0000 On Tuesday 21 July 2009 10:33:49 am Kamigishi Rei wrote: > John Baldwin wrote: > > Can you print out 'owner' as well? You won't get a panic until you actually > > dereference 'owner' to get 'owner->td_state' even though gdb will show this > > as the faulting line (gdb can sometimes get confused by compiler > > optimization). You are seeing these values because mtx_lock was changed (due > > to either a mtx_unlock() or a mtx_init()) while you were spinning. That > > value of v is not what I have typically seen in these panics. Do you also > > have the original fatal kernel trap messages? > > > Why does v change to a non-kernel address then? From what I see, it > should never get assigned a value that's not MTX_UNOWNED or > 0xfff......(address,flags). However, I can reproduce this trap in all > revisions starting with 195146 up to 195484 (and probably more, didn't > check yet; at 1956xx these traps stop occurring). v didn't change, it was always the busted value. Somehow mtx_lock was corrupted to the value 0x14ee000 perhaps due to a buffer overflow bug or something else. -- John Baldwin