From nobody@FreeBSD.org  Sun Mar 26 20:29:06 2006
Return-Path: <nobody@FreeBSD.org>
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 4F46416A400
	for <freebsd-gnats-submit@FreeBSD.org>; Sun, 26 Mar 2006 20:29:06 +0000 (UTC)
	(envelope-from nobody@FreeBSD.org)
Received: from www.freebsd.org (www.freebsd.org [216.136.204.117])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 1694C43D45
	for <freebsd-gnats-submit@FreeBSD.org>; Sun, 26 Mar 2006 20:29:06 +0000 (GMT)
	(envelope-from nobody@FreeBSD.org)
Received: from www.freebsd.org (localhost [127.0.0.1])
	by www.freebsd.org (8.13.1/8.13.1) with ESMTP id k2QKT5fH071287
	for <freebsd-gnats-submit@FreeBSD.org>; Sun, 26 Mar 2006 20:29:05 GMT
	(envelope-from nobody@www.freebsd.org)
Received: (from nobody@localhost)
	by www.freebsd.org (8.13.1/8.13.1/Submit) id k2QKT5IQ071286;
	Sun, 26 Mar 2006 20:29:05 GMT
	(envelope-from nobody)
Message-Id: <200603262029.k2QKT5IQ071286@www.freebsd.org>
Date: Sun, 26 Mar 2006 20:29:05 GMT
From: Brian Smith <sbs-freebsdlist@nym.hush.com>
To: freebsd-gnats-submit@FreeBSD.org
Subject: Kernel panic during normal server operations
X-Send-Pr-Version: www-2.3

>Number:         94977
>Category:       kern
>Synopsis:       Kernel panic during normal server operations
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    gavin
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sun Mar 26 20:30:19 GMT 2006
>Closed-Date:    Thu Feb 21 12:11:35 UTC 2008
>Last-Modified:  Thu Feb 21 12:11:35 UTC 2008
>Originator:     Brian Smith
>Release:        FreeBSD 6.0-RELEASE-p5 i386
>Organization:
Hushmail
>Environment:
FreeBSD xxxxxxxxxxx 6.0-RELEASE-p5 FreeBSD 6.0-RELEASE-p5 #0: Sun Mar 12 01:59:23 PST 2006     xxxxxxx@xxxxxxxx:/usr/obj/usr/src/sys/SMP  i386

>Description:
The machine panicked while running httpd 2.2.0 (not from ports),
up-imapproxy-1-2-4 (not from ports), postfix-2.3.20060207  (from ports),
php 5.1.2 (not from ports) with eaccelerator 0.5.9-beta-1 (not from ports).

Possibly similar to kern/94380?

Backtrace after crash follows...

su-2.05b# kgdb kernel.debug /var/crash/vmcore.0
GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"]
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd".

Unread portion of the kernel message buffer:
Cannot access memory at address 0xc103c498
(kgdb) bt
#0  doadump () at pcpu.h:165
#1  0xc063aaeb in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:399
#2  0xc063ae11 in panic (fmt=0xc0857082 "%s")
    at /usr/src/sys/kern/kern_shutdown.c:555
#3  0xc080feb8 in trap_fatal (frame=0xe8d2fbcc, eva=36)
    at /usr/src/sys/i386/i386/trap.c:831
#4  0xc080f62e in trap (frame=
      {tf_fs = -1067188216, tf_es = -947781592, tf_ds = -1064173528, tf_edi = -1014856192, tf_esi = -1014856192, tf_ebp = -388826080, tf_isp = -388826120, tf_ebx = -1011790848, tf_edx = -1014856192, tf_ecx = -1011525312, tf_eax = 0, tf_trapno = 12, tf_err = 0, tf_eip = -1067075252, tf_cs = 32, tf_eflags = 65666, tf_esp = 181, tf_ss = 0}) at /usr/src/sys/i386/i386/trap.c:267
#5  0xc07fccba in calltrap () at /usr/src/sys/i386/i386/exception.s:139
#6  0xc065b94c in propagate_priority (td=0xc3828600)
    at /usr/src/sys/kern/subr_turnstile.c:233
#7  0xc065c265 in turnstile_wait (lock=0xc3bd0aa4, owner=0xc3828600)
    at /usr/src/sys/kern/subr_turnstile.c:628
#8  0xc0631fbc in _mtx_lock_sleep (m=0xc3bd0aa4, tid=3283176448, opts=0,
    file=0x0, line=0) at /usr/src/sys/kern/kern_mutex.c:553
#9  0xc06458dc in thread_single (mode=0) at /usr/src/sys/kern/kern_thread.c:789
#10 0xc0623a37 in fork1 (td=0xc3b14c00, flags=20, pages=0, procp=0xe8d2fcd4)
    at /usr/src/sys/kern/kern_fork.c:256
#11 0xc06237f4 in fork (td=0xc3b14c00, uap=0xe8d2fd04)
    at /usr/src/sys/kern/kern_fork.c:96
#12 0xc08101ff in syscall (frame=
      {tf_fs = 137822267, tf_es = 59, tf_ds = -1106378693, tf_edi = 164917248, tf_esi = 0, tf_ebp = -1087414568, tf_isp = -388825756, tf_ebx = 673227964, tf_edx = 673228708, tf_ecx = 673228708, tf_eax = 2, tf_trapno = 12, tf_err = 2, tf_eip = 673518727, tf_cs = 51, tf_eflags = 646, tf_esp = -1087414644, tf_ss = 59})
    at /usr/src/sys/i386/i386/trap.c:976
#13 0xc07fcd0f in Xint0x80_syscall () at /usr/src/sys/i386/i386/exception.s:200
#14 0x00000033 in ?? ()
Previous frame inner to this frame (corrupt stack?)
(kgdb)



>How-To-Repeat:
Unknown
>Fix:

>Release-Note:
>Audit-Trail:
State-Changed-From-To: open->feedback 
State-Changed-By: gavin 
State-Changed-When: Thu Feb 21 11:54:00 UTC 2008 
State-Changed-Why:  
To submitter:  This looks like a likely fixed bug in turnstile handling. 
Does this still occur with recent RELENG_6? 


Responsible-Changed-From-To: freebsd-bugs->gavin 
Responsible-Changed-By: gavin 
Responsible-Changed-When: Thu Feb 21 11:54:00 UTC 2008 
Responsible-Changed-Why:  
Track 

http://www.freebsd.org/cgi/query-pr.cgi?pr=94977 
State-Changed-From-To: feedback->closed 
State-Changed-By: gavin 
State-Changed-When: Thu Feb 21 12:11:08 UTC 2008 
State-Changed-Why:  
Believed fixed.  Submitters email address bounces. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=94977 
>Unformatted:
This looks like a likely fixed bug in turnstile handling. Does this still occur with recent RELENG_6?
