Panic in init_sysctl.c::fill_lwp()

[Juan RP <xtraeme%gmail.com@localhost>]

Hey,

I just got this panic:

(gdb) target kvm /var/crash/netbsd.5.core
#0  0xc05156f2 in cpu_reboot (howto=256, bootstr=0x0) at 
/usr/src/sys/arch/i386/i386/machdep.c:880
880             if ((howto & (RB_DUMP | RB_HALT)) == RB_DUMP)
(gdb) bt
#0  0xc05156f2 in cpu_reboot (howto=256, bootstr=0x0) at 
/usr/src/sys/arch/i386/i386/machdep.c:880
#1  0xc018f739 in db_sync_cmd (addr=-1062684187, have_addr=false, 
count=-1062684192, modif=0xccb2e56c "\234å²Ì㹨À乨Àc")
    at /usr/src/sys/ddb/db_command.c:1366
#2  0xc018fdf8 in db_command (last_cmdp=0xc0a0f47c) at 
/usr/src/sys/ddb/db_command.c:928
#3  0xc019013f in db_command_loop () at /usr/src/sys/ddb/db_command.c:573
#4  0xc0193040 in db_trap (type=1, code=0) at /usr/src/sys/ddb/db_trap.c:101
#5  0xc0510880 in kdb_trap (type=1, code=0, regs=0xccb2e798) at 
/usr/src/sys/arch/i386/i386/db_interface.c:232
#6  0xc0519d98 in trap (frame=0xccb2e798) at 
/usr/src/sys/arch/i386/i386/trap.c:346
#7  0xc010ceaf in calltrap ()
#8  0xc050ef7c in rdtsc ()
#9  0xc0467ff0 in panic (fmt=0xc099f2a7 "LOCKDEBUG") at 
/usr/src/sys/kern/subr_prf.c:260
#10 0xc0460c01 in lockdebug_abort1 (ld=0xc0ad8400, lk=0xc0adc160, func=<value 
optimized out>, msg=0xc099f2c9 "spin lock held", 
    dopanic=true) at /usr/src/sys/kern/subr_lockdebug.c:795
#11 0xc0444194 in rw_vector_enter (rw=0xc0aafaa4, op=RW_READER) at 
/usr/src/sys/kern/kern_rwlock.c:265
#12 0xc03dda91 in vm_map_lock_read (map=0xc0aafaa0) at 
/usr/src/sys/uvm/uvm_map.c:618
#13 0xc03d6ba2 in uvm_fault_internal (orig_map=0xc0aafaa0, vaddr=3434594304, 
access_type=1, fault_flag=0)
    at /usr/src/sys/uvm/uvm_fault_i.h:126
#14 0xc051a16a in trap (frame=0xccb2ea94) at 
/usr/src/sys/arch/i386/i386/trap.c:653
#15 0xc010ceaf in calltrap ()

#16 0xc07644a0 in strncpy (dst=0xccb2ebc0 "wait", src=0xccb7c680 <Address 
0xccb7c680 out of bounds>, n=8)
    at /usr/src/sys/lib/libkern/../../../common/lib/libc/string/strncpy.c:66
#17 0xc041d5b3 in fill_lwp (l=0xccbd4960, kl=0xccb2eb80) at 
/usr/src/sys/kern/init_sysctl.c:3078
#18 0xc041fea6 in sysctl_kern_lwp (name=0xccb2eca4, namelen=3, oldp=0xbb929000, 
oldlenp=0xccb2eccc, newp=0x0, newlen=0, 
    oname=0xccb2ec9c, l=0xccbd4b80, rnode=0xc1e69500) at 
/usr/src/sys/sys/lwp.h:326
#19 0xc044d40f in sysctl_dispatch (name=0xccb2ec9c, namelen=3, oldp=0xbb929000, 
oldlenp=0xccb2eccc, newp=0x0, newlen=0, 
    oname=0xccb2ec9c, l=0xccbd4b80, rnode=0xc1e69500) at 
/usr/src/sys/kern/kern_sysctl.c:446
#20 0xc044d6e6 in sys___sysctl (l=0xccbd4b80, uap=0xccb2ed00, 
retval=0xccb2ed28) at /usr/src/sys/kern/kern_sysctl.c:302
#21 0xc0519685 in syscall (frame=0xccb2ed48) at 
/usr/src/sys/arch/i386/i386/syscall.c:112
#22 0xc0100574 in syscall1 ()
(gdb)

(gdb) f 17
#17 0xc041d5b3 in fill_lwp (l=0xccbd4960, kl=0xccb2eb80) at 
/usr/src/sys/kern/init_sysctl.c:3078
3078                    strncpy(kl->l_wmesg, l->l_wmesg, sizeof(kl->l_wmesg));
(gdb) l
3073                    kl->l_schedflags = 0;
3074            kl->l_holdcnt = l->l_holdcnt;
3075            kl->l_priority = lwp_eprio(l);
3076            kl->l_usrpri = l->l_priority;
3077            if (l->l_wmesg)
3078                    strncpy(kl->l_wmesg, l->l_wmesg, sizeof(kl->l_wmesg));
3079            kl->l_wchan = PTRTOUINT64(l->l_wchan);
3080            kl->l_cpuid = l->l_cpu->ci_cpuid;
3081            bintime2timeval(&l->l_rtime, &tv);
3082            kl->l_rtime_sec = tv.tv_sec;
(gdb) print *l
$4 = {l_runq = {tqe_next = 0x0, tqe_prev = 0xc0ab3680}, l_sched_info = 0x0, 
l_cpu = 0xc0a1e940, l_mutex = 0xcb2db088, 
  l_ctxswtch = 0, l_addr = 0xccc62da0, l_md = {md_regs = 0xccc62d38, md_flags = 
0, md_astpending = 0}, l_flag = 516, l_stat = 5, 
  l_rtime = {sec = 0, frac = 7776446098960392}, l_stime = {sec = 164, frac = 
5625227815927951963}, l_swtime = 9, l_holdcnt = 2, 
  l_biglocks = 0, l_class = 1, l_kpriority = 1, l_kpribase = 64, l_priority = 
96, l_inheritedprio = -1, l_pi_lenders = {
    slh_first = 0x0}, l_ncsw = 6, l_nivcsw = 0, l_cpticks = 0, l_pctcpu = 0, 
l_estcpu = 0, l_psid = 0, l_target_cpu = 0x0, 
  l_swaplock = {u = {mtxa_owner = 4}}, l_lwpctl = 0x0, l_lcpage = 0x0, 
l_affinity = {bits = {0}}, l_ts = 0xcb2e6384, 
  l_syncobj = 0xc0a1c008, l_sleepchain = {tqe_next = 0x0, tqe_prev = 
0xcb2f3dc8}, l_wchan = 0x0, 
  l_wmesg = 0xccb7c680 <Address 0xccb7c680 out of bounds>, l_sleepq = 0x0, 
l_sleeperr = 0, l_slptime = 0, l_timeout_ch = {
    _c_store = {0x0, 0x0, 0xc0447d00, 0xccbd4960, 0x0, 0x0, 0x0, 0x100, 0x0, 
0x0}}, l_list = {le_next = 0xccbd4da0, 
    le_prev = 0xccbd4c6c}, l_ctxlink = 0x0, l_proc = 0xc0a1ba60, l_sibling = 
{le_next = 0xcc7f3920, le_prev = 0xc0a1baf0}, 
  l_waiter = 0, l_waitingfor = 0, l_prflag = 8388608, l_refcnt = 0, l_lid = 44, 
l_selflag = 0, l_selwait = {slh_first = 0x0}, 
  l_selcpu = 0x0, l_name = 0xcc8fbef4 "(zombie)", l_sigrestore = 0, 
l_sigwaitset = {__bits = {0, 0, 0, 0}}, l_sigcv = {
    cv_wmesg = 0xc099ac72 "sigwait", cv_waiters = 0}, l_sigwaited = 0x0, 
l_sigpendset = 0x0, l_sigwaiter = {le_next = 0x0, 
    le_prev = 0x0}, l_sigstk = {ss_sp = 0x0, ss_size = 0, ss_flags = 0}, 
l_sigmask = {__bits = {0, 0, 0, 0}}, l_sigpend = {
    sp_info = {cqh_first = 0xccbd4ad0, cqh_last = 0xccbd4ad0}, sp_set = {__bits 
= {0, 0, 0, 0}}}, l_sigoldmask = {__bits = {0, 
      0, 0, 0}}, l_specdataref = {specdataref_container = 0x0, specdataref_lock 
= {u = {mtxa_owner = 4294967280}}}, l_ktrcsw = {
    tv = {tv_sec = 0, tv_usec = 0}, ts = {tv_sec = 0, tv_nsec = 0}}, l_private 
= 0x0, l_switchto = 0x0, l_cred = 0xcb2e4f00, 
  l_fd = 0xc0acf940, l_emuldata = 0x0, l_cv_signalled = 1, l_shlocks = 0, 
l_exlocks = 0, l_unused = 0, l_blcnt = 0, 
  l_pflag = 32, l_dupfd = 0, l_ru = {ru_utime = {tv_sec = 0, tv_usec = 0}, 
ru_stime = {tv_sec = 0, tv_usec = 0}, ru_maxrss = 0, 
    ru_ixrss = 0, ru_idrss = 0, ru_isrss = 0, ru_minflt = 0, ru_majflt = 0, 
ru_nswap = 0, ru_inblock = 0, ru_oublock = 0, 
    ru_msgsnd = 0, ru_msgrcv = 0, ru_nsignals = 0, ru_nvcsw = 0, ru_nivcsw = 
0}, l_syscall_time = 0, l_syscall_counter = 0x0}
(gdb

Let me know if you need more info. The same panic happened for me in
UP and SMP.

-- 
Juan Romero Pardines - xtraeme at gmail|netbsd dot org
        The NetBSD Project

Make your own NetBSD/x86 Live CD:
http://www.netbsd.org/~xtraeme/mklivecd/