Subject: kern/28828: panic trying to kill proc using SA
To: None <,,>
From: None <>
List: netbsd-bugs
Date: 01/01/2005 16:45:00
>Number:         28828
>Category:       kern
>Synopsis:       panic trying to kill proc using SA
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Sat Jan 01 16:45:00 +0000 2005
>Originator:     Jesse Off
>Release:        2.99.11
NetBSD/evbarm (TS7200)
running the command "nslookup" with no args prints the following error messages and then hangs:

# nslookup
sa_switchcall(351.16 flag d00004): Not enough stacks.
sa_setwoken(351.2) vp lwp 16 LSSUSPENDED
sa_setwoken(351.3) vp lwp 16 LSSUSPENDED
sa_setwoken(351.4) vp lwp 16 LSSUSPENDED
sa_setwoken(351.5) vp lwp 16 LSSUSPENDED
sa_setwoken(351.6) vp lwp 16 LSSUSPENDED
sa_setwoken(351.7) vp lwp 16 LSSUSPENDED
sa_setwoken(351.8) vp lwp 16 LSSUSPENDED
sa_setwoken(351.9) vp lwp 16 LSSUSPENDED
sa_setwoken(351.10) vp lwp 16 LSSUSPENDED
sa_setwoken(351.11) vp lwp 16 LSSUSPENDED
sa_setwoken(351.12) vp lwp 16 LSSUSPENDED
sa_setwoken(351.13) vp lwp 16 LSSUSPENDED
sa_setwoken(351.14) vp lwp 16 LSSUSPENDED
sa_setwoken(351.15) vp lwp 16 LSSUSPENDED

... Then backgrounding the process and kill -9'ing it causes the following kernel panic:

^Z[1] + Stopped              nslookup
# bg
[1] nslookup
# kill -9 %1
# nslookup: libpthread: sa_register failed
: Protocol not supported
panic: kernel diagnostic assertion "p->p_nrlwps == 0" failed: file "/home/joff/NetBSD-current/sys/kern/kern_exit.c", line 780
Stopped in pid 349.1 (ksh) at   0xc034abf0:     mov     r15, r14
db> bt
        scp=0xc02eccb4 rlv=0xc039c5a8 (netbsd:__assert+0x34)
        rsp=0xc2c78e5c rfp=0xc2c78e70
        r7=0xc03caa6c r6=0xc23cdcc0
        r5=0xc23cde58 r4=0x0000030c
        scp=0xc039c584 rlv=0xc02cb694 (0xc02cb694)
        rsp=0xc2c78e74 rfp=0xc2c78ec0
        scp=0xc02cb4a4 rlv=0xc02cb2ac (netbsd:sys_wait4+0xfc)
        rsp=0xc2c78ec4 rfp=0xc2c78ee0
        r7=0xc03caa6c r6=0xc2c78fb4
        r5=0xc2c78ee4 r4=0xc2c78fb8
        scp=0xc02cb1c0 rlv=0xc034f048 (0xc034f048)
        rsp=0xc2c78ee4 rfp=0xc2c78f60
        r5=0x00000004 r4=0xefa00007
        scp=0xc034ef08 rlv=0xc034ee84 (0xc034ee84)
        rsp=0xc2c78f64 rfp=0xc2c78fb0
        r10=0x0003d4c0 r9=0x00000004

see above