GENERIC HEAD from Jan 8 08:45 UTC + bmilekic@'s uma_core patch, vmcore.138
GDB: no debug ports present
KDB: debugger backends: ddb
KDB: current backend: ddb
Copyright (c) 1992-2005 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
The Regents of the University of California. All rights reserved.
FreeBSD 6.0-CURRENT #0: Sat Jan 8 10:14:35 CET 2005
pho@current.osted.lan:/usr/src/sys/i386/compile/PHO
WARNING: WITNESS option enabled, expect reduced performance.
ACPI APIC Table: <A M I OEMAPIC >
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: Intel(R) Celeron(R) CPU 1.80GHz (1799.15-MHz 686-class CPU)
Origin = "GenuineIntel" Id = 0xf13 Stepping = 3
Features=0x3febfbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM>
real memory = 267583488 (255 MB)
avail memory = 252448768 (240 MB)
:
mount root from ufs:/dev/ad0s1a
issignal
issignal
:
issignal
sigreturn: eflags = 0x0
sigreturn: eflags = 0x0
:
sigreturn: eflags = 0x0
sigreturn: eflags = 0x0
kern.ipc.maxpipekva exceeded; see tuning(7)
lock order reversal
1st 0xc24b48d8 pipe mutex (pipe mutex) @ kern/sys_pipe.c:1472
2nd 0xc184be54 user map (user map) @ vm/vm_map.c:2994
KDB: stack backtrace:
witness_checkorder(c184be54,9,c08457b0,bb2,cf26eb6c) at witness_checkorder+0x500
_sx_xlock(c184be54,c08457b0,bb2,1000001,cf26eb6c) at _sx_xlock+0x3a
vm_map_lookup(cf26eb6c,0,1,cf26eb70,cf26eb60,cf26eb64,cf26eb47,cf26eb48) at vm_map_lookup+0x24
vm_fault(c184be10,0,1,0,c1dcd450) at vm_fault+0x62
trap_pfault(1c,1c,0,0,0) at trap_pfault+0x126
trap(18,c0820010,10,c082984d,5ab) at trap+0x318
calltrap() at calltrap+0x5
--- trap 0xc, eip = 0xc060a9d0, esp = 0xcf26ec74, ebp = 0xcf26ec80 ---
_mtx_assert(0,1,c082984d,5ab,c24b489c) at _mtx_assert+0x38
knote(c24b489c,0,1) at knote+0x2a
pipeclose(c2462b00,cf26ed40,0,c1dcd450,0) at pipeclose+0x3a3
pipe(c1dcd450,cf26ed14,0,3,292) at pipe+0x50
syscall(2f,2f,2f,896a2df3,5d28afd2) at syscall+0x128
Xint0x80_syscall() at Xint0x80_syscall+0x1f
--- syscall (42, FreeBSD ELF32, pipe), eip = 0x2809a5c9, esp = 0xbfbfeab0, ebp = 0xbfbfeae8 ---
Fatal trap 12: page fault while in kernel mode
cpuid = 0; apic id = 00
fault virtual address = 0x1c
fault code = supervisor read, page not present
instruction pointer = 0x8:0xc060a9d0
stack pointer = 0x10:0xcf26ec74
frame pointer = 0x10:0xcf26ec80
code segment = base 0x0, limit 0xfffff, type 0x1b
= DPL 0, pres 1, def32 1, gran 1
processor eflags = interrupt enabled, resume, IOPL = 0
current process = 1130 (syscall)
[thread pid 1130 tid 100213 ]
Stopped at _mtx_assert+0x38: movl 0x1c(%ebx),%eax
db> where
Tracing pid 1130 tid 100213 td 0xc1dcd450
_mtx_assert(0,1,c082984d,5ab,c24b489c) at _mtx_assert+0x38
knote(c24b489c,0,1) at knote+0x2a
pipeclose(c2462b00,cf26ed40,0,c1dcd450,0) at pipeclose+0x3a3
pipe(c1dcd450,cf26ed14,0,3,292) at pipe+0x50
syscall(2f,2f,2f,896a2df3,5d28afd2) at syscall+0x128
Xint0x80_syscall() at Xint0x80_syscall+0x1f
--- syscall (42, FreeBSD ELF32, pipe), eip = 0x2809a5c9, esp = 0xbfbfeab0, ebp = 0xbfbfeae8 ---
db> call doadump
Dumping 255 MB
16 32 48 64 80 96 112 128 144 160 176 192 208 224 240
Dump complete
0
db> reset
#22 0xc060a9d0 in _mtx_assert (m=0x0, what=0x0, file=0xc082984d "../../../kern/kern_event.c", line=0x5ab) at ../../../kern/kern_mutex.c:756
#23 0xc05f96ce in knote (list=0xc24b489c, hint=0x0, islocked=0x1) at ../../../kern/kern_event.c:1451
#24 0xc0639253 in pipeclose (cpipe=0xc24b4780) at ../../../kern/sys_pipe.c:545
#25 0xc0639340 in pipe (td=0xc1dcd450, uap=0xcf26ed14) at ../../../kern/sys_pipe.c:356
#26 0xc07c1720 in syscall (frame=
{tf_fs = 0x2f, tf_es = 0x2f, tf_ds = 0x2f, tf_edi = 0x896a2df3, tf_esi = 0x5d28afd2, tf_ebp = 0xbfbfeae8, tf_isp = 0xcf26ed74, tf_ebx = 0x4daf2b7c, tf_edx = 0x0, tf_ecx = 0x8048d4b, tf_eax = 0x2a, tf_trapno = 0x16, tf_err = 0x2, tf_eip = 0x2809a5c9, tf_cs = 0x1f, tf_eflags = 0x292, tf_esp = 0xbfbfeab0, tf_ss = 0x2f}) at ../../../i386/i386/trap.c:951
#27 0xc07afcbf in Xint0x80_syscall () at ../../../i386/i386/exception.s:200
(kgdb) frame 23
#23 0xc05f96ce in knote (list=0xc24b489c, hint=0x0, islocked=0x1) at ../../../kern/kern_event.c:1451
1451 mtx_assert(list->kl_lock, islocked ? MA_OWNED : MA_NOTOWNED);
(kgdb) p *list
$1 = {kl_lock = 0x0, kl_list = {slh_first = 0x0}}(kgdb) frame 24
#24 0xc0639253 in pipeclose (cpipe=0xc24b4780) at ../../../kern/sys_pipe.c:545
545 KNOTE_LOCKED(&cpipe->pipe_sel.si_note, 0);
(kgdb) p *cpipe
$5 = {pipe_buffer = {cnt = 0x0, in = 0x0, out = 0x0, size = 0x0, buffer = 0x0}, pipe_map = {cnt = 0x0, pos = 0x0, npages = 0x0, ms = {
0x0 <repeats 17 times>}}, pipe_sel = {si_thrlist = {tqe_next = 0x0, tqe_prev = 0x0}, si_thread = 0x0, si_note = {
kl_lock = 0xc24b48d8, kl_list = {slh_first = 0x0}}, si_flags = 0x0}, pipe_atime = {tv_sec = 0x41dfb91d, tv_nsec = 0x0}, pipe_mtime = {
tv_sec = 0x41dfb91d, tv_nsec = 0x0}, pipe_ctime = {tv_sec = 0x41dfb91d, tv_nsec = 0x0}, pipe_sigio = 0x0, pipe_peer = 0xc24b482c,
pipe_pair = 0xc24b4780, pipe_state = 0x180, pipe_busy = 0x0, pipe_present = 0x1}
(kgdb) frame 25
#25 0xc0639340 in pipe (td=0xc1dcd450, uap=0xcf26ed14) at ../../../kern/sys_pipe.c:356
356 pipeclose(rpipe);
(kgdb) l
351 rpipe = &pp->pp_rpipe;
352 wpipe = &pp->pp_wpipe;
353
354 /* Only the forward direction pipe is backed by default */
355 if (pipe_create(rpipe, 1) || pipe_create(wpipe, 0)) {
356 pipeclose(rpipe);
357 pipeclose(wpipe);
358 return (ENFILE);
359 }
360
(kgdb) info loc
fdp = (struct filedesc *) 0xc2462b00
rf = (struct file *) 0x0
wf = (struct file *) 0xcf26ed40
wpipe = (struct pipe *) 0xc24b482c
fd = 0xc1dcd450
error = 0xc1de5000
(kgdb)