Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 1 Nov 2003 11:56:05 +0100 (CET)
From:      Soren Schmidt <sos@spider.deepcore.dk>
To:        Sean Chittenden <sean@chittenden.org>
Cc:        current@FreeBSD.ORG
Subject:   Re: NULL td passed to propagate_priority() when using xmms...
Message-ID:  <200311011056.hA1Au5mh013787@spider.deepcore.dk>
In-Reply-To: <20031031224022.GB46143@perrin.nxad.com>

next in thread | previous in thread | raw e-mail | index | archive | help
It seems Sean Chittenden wrote:
> Howdy.  I'm not sure if this is a ULE bug or a KSE bug, or both, but,
> for those interested (this is using ule 1.67, rebuilding world now),
> here's my stack.  I couldn't figure out where td was being set to
> NULL.  :( Oh!  Where is TD_SET_LOCK defined?  egrep -r didn't turn up
> anything.  -sc

Its not ULE, I'm running 4BSD and has gotten this on boot for over a
week now, rendering -current totally useless...

> 
> (kgdb) bt
> #0  doadump () at /usr/src/sys/kern/kern_shutdown.c:240
> #1  0xc0530569 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:372
> #2  0xc0530948 in panic () at /usr/src/sys/kern/kern_shutdown.c:550
> #3  0xc06e6bc6 in trap_fatal (frame=0xd675dc2c, eva=0)
>     at /usr/src/sys/i386/i386/trap.c:820
> #4  0xc06e6203 in trap (frame=
>       {tf_fs = -881065960, tf_es = 16, tf_ds = -881065968, tf_edi = 0, tf_esi = -871763664, tf_ebp = -696918912, tf_isp = -696918952, tf_ebx = 24, tf_edx = 24, tf_ecx = -871763664, tf_eax = -879614080, tf_trapno = 12, tf_err = 0, tf_eip = -1068208110, tf_cs = 8, tf_eflags = 66051, tf_esp = -874093984, tf_ss = 0})
>     at /usr/src/sys/i386/i386/trap.c:252
> #5  0xc06d6a68 in calltrap () at {standard input}:102
> #6  0xc05257ac in propagate_priority (td=0x0)
>     at /usr/src/sys/kern/kern_mutex.c:152
> #7  0xc0525bf9 in _mtx_lock_sleep (m=0xc0796b40, opts=0, file=0x0, line=0)
>     at /usr/src/sys/kern/kern_mutex.c:635
> #8  0xc051a2c4 in ithread_loop (arg=0xcb7a6b00)
>     at /usr/src/sys/kern/kern_intr.c:539
> #9  0xc0518f51 in fork_exit (callout=0xc051a100 <ithread_loop>, arg=0x0,
>     frame=0x0) at /usr/src/sys/kern/kern_fork.c:796
> (kgdb) frame 9
> #9  0xc0518f51 in fork_exit (callout=0xc051a100 <ithread_loop>, arg=0x0,
>     frame=0x0) at /usr/src/sys/kern/kern_fork.c:796
> 796             callout(arg, frame);
> (kgdb) list
> 791              * cpu_set_fork_handler intercepts this function call to
> 792              * have this call a non-return function to stay in kernel mode.
> 793              * initproc has its own fork handler, but it does return.
> 794              */
> 795             KASSERT(callout != NULL, ("NULL callout in fork_exit"));
> 796             callout(arg, frame);
> 797
> 798             /*
> 799              * Check if a kernel thread misbehaved and returned from its main
> 800              * function.
> (kgdb) frame 8
> #8  0xc051a2c4 in ithread_loop (arg=0xcb7a6b00)
>     at /usr/src/sys/kern/kern_intr.c:539
> 539                                          mtx_lock(&Giant);
> (kgdb) list
> 534                                             wakeup(ih);
> 535                                             mtx_unlock(&ithd->it_lock);
> 536                                             goto restart;
> 537                                     }
> 538                                     if ((ih->ih_flags & IH_MPSAFE) == 0)
> 539                                             mtx_lock(&Giant);
> 540                                     ih->ih_handler(ih->ih_argument);
> 541                                     if ((ih->ih_flags & IH_MPSAFE) == 0)
> 542                                             mtx_unlock(&Giant);
> 543                             }
> (kgdb) frame 7
> #7  0xc0525bf9 in _mtx_lock_sleep (m=0xc0796b40, opts=0, file=0x0, line=0)
>     at /usr/src/sys/kern/kern_mutex.c:635
> 635                     propagate_priority(td);
> (kgdb) list
> 630                      * Save who we're blocked on.
> 631                      */
> 632                     td->td_blocked = m;
> 633                     td->td_lockname = m->mtx_object.lo_name;
> 634                     TD_SET_LOCK(td);
> 635                     propagate_priority(td);
> 636
> 637                     if (LOCK_LOG_TEST(&m->mtx_object, opts))
> 638                             CTR3(KTR_LOCK,
> 639                                 "_mtx_lock_sleep: p %p blocked on [%p] %s", td, m,
> (kgdb) frame 6
> #6  0xc05257ac in propagate_priority (td=0x0)
>     at /usr/src/sys/kern/kern_mutex.c:152
> 152                             sched_prio(td, pri);
> (kgdb) list
> 147                      * XXXKSE this gets a lot more complicated under threads
> 148                      * but try anyhow.
> 149                      */
> 150                     if (TD_ON_RUNQ(td)) {
> 151                             MPASS(td->td_blocked == NULL);
> 152                             sched_prio(td, pri);
> 153                             return;
> 154                     }
> 155                     /*
> 156                      * Adjust for any other cases.
> ---
> panic: page fault
> panic messages:
> ---
> Fatal trap 12: page fault while in kernel mode
> fault virtual address   = 0x38
> fault code              = supervisor read, page not present
> instruction pointer     = 0x8:0xc0547012
> stack pointer           = 0x10:0xd6763c6c
> frame pointer           = 0x10:0xd6763c80
> code segment            = base 0x0, limit 0xfffff, type 0x1b
>                         = DPL 0, pres 1, def32 1, gran 1
> processor eflags        = interrupt enabled, resume, IOPL = 0
> current process         = 33 (irq12: psm0)
> trap number             = 12
> panic: page fault
> 
> syncing disks, buffers remaining...
> 
> Fatal trap 12: page fault while in kernel mode
> fault virtual address   = 0x38
> fault code              = supervisor read, page not present
> instruction pointer     = 0x8:0xc0547012
> stack pointer           = 0x10:0xd675dc6c
> frame pointer           = 0x10:0xd675dc80
> code segment            = base 0x0, limit 0xfffff, type 0x1b
>                         = DPL 0, pres 1, def32 1, gran 1
> processor eflags        = interrupt enabled, resume, IOPL = 0
> current process         = 31 (irq5: pcm0)
> trap number             = 12
> panic: page fault
> Uptime: 12h5m43s
> Dumping 255 MB
>  16 32[CTRL-C to abort]  48 64 80 96 112[CTRL-C to abort] [CTRL-C to abort] [CTRL-C to abort] [CTRL-C to abort] [CTRL-C to abort] [CTRL-C to abort]  128 144 160 176 192 208 224 240
> ---
> Reading symbols from /boot/kernel/snd_maestro3.ko...done.
> Loaded symbols for /boot/kernel/snd_maestro3.ko
> Reading symbols from /boot/kernel/snd_pcm.ko...done.
> Loaded symbols for /boot/kernel/snd_pcm.ko
> Reading symbols from /usr/obj/usr/src/sys/DELLAPTOP/modules/usr/src/sys/modules/acpi/acpi.ko.debug...done.
> Loaded symbols for /usr/obj/usr/src/sys/DELLAPTOP/modules/usr/src/sys/modules/acpi/acpi.ko.debug
> #0  doadump () at /usr/src/sys/kern/kern_shutdown.c:240
> 240             dumping++;
> 
> -sc
> 
> -- 
> Sean Chittenden
> _______________________________________________
> freebsd-current@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-current
> To unsubscribe, send any mail to "freebsd-current-unsubscribe@freebsd.org"
> 

-Søren



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200311011056.hA1Au5mh013787>