Subject: kern/21661: mozilla on SMP crashes
To: None <gnats-bugs@gnats.netbsd.org>
From: None <kochi@netbsd.org>
List: netbsd-bugs
Date: 05/24/2003 17:52:22
>Number:         21661
>Category:       kern
>Synopsis:       mozilla on SMP crashes
>Confidential:   no
>Severity:       critical
>Priority:       medium
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Sat May 24 17:53:03 UTC 2003
>Closed-Date:
>Last-Modified:
>Originator:     Takayoshi Kochi
>Release:        NetBSD-current (around May 22 2003)
>Organization:
>Environment:
NetBSD xxxxx 1.6T NetBSD 1.6T (DUAL) #0: Sat May 24 22:21:51 JST 2003  k
ochi@xxxxx:/home/kochi/conf/kernel/p3via i386
with userland around May 22 2003
>Description:
When mozilla (1.3.1, built from pkgsrc) is invoked, the kernel
crashes immediately.
The mozilla runs fine under a kernel without "options MULTIPROCESSOR".

These crashes may sound similar to PR/21391 (mozilla crashes SMP
machines imediately) but showed different backtraces.

There are two patterns of crashing.

Case 1:
panic: SA VP 355.3 is in state 7, not running or sleeping

Stopped in pid 355.1 (mozilla-bin) at   netbsd:cpu_Debugger+0x4:        leave
db{0}> bt
cpu_Debugger(e4e5f804,0,e4ecf938,c020afc2,c03c12a0) at netbsd:cpu_Debugger+0x4
panic(c0343100,163,3,7,e4ecf938) at netbsd:panic+0xb8
sa_vp_repossess(e4e5f704,1,e4f26d40,c0250db3,e4ecf938) at netbsd:sa_vp_repossess
+0xd3
sa_upcall_userret(e4e5f704,48c27000,0,1,0) at netbsd:sa_upcall_userret+0x154
trap() at netbsd:trap+0x865
--- trap (number 6) ---
0x48c270f0:
db{0}> ps
 PID           PPID     PGRP        UID S   FLAGS LWPS          COMMAND    WAIT
>How-To-Repeat:
Install recent -current environment on SMP platform and build mozilla
and run.

>Fix:
N/A
>Release-Note:
>Audit-Trail:
>Unformatted:
 >355            734      355       1000 2  0x4402    3      mozilla-bin       *
  734            537      734       1000 2  0x4002    1              zsh   pause
  537            731      731       1000 2  0x4102    1            kterm  select
  731            304      731       1000 2  0x4002    1              twm  select
  565            304      565       1000 2  0x4100    1          XFree86  select
  304            820      820       1000 2  0x4002    1            xinit    wait
  820            233      820       1000 2  0x4002    1               sh    wait
  819            239      819       1000 2  0x4002    1              zsh   ttyin
  239            701      701       1000 2   0x100    1             sshd  select
  701            561      701          0 2   0x101    1             sshd   netio
  235              1      235          0 2  0x4002    1            getty   ttyin
  232              1      232          0 2  0x4002    1            getty   ttyin
  228              1      228          0 2  0x4002    1            getty   ttyin
  233              1      233       1000 2  0x4003    1              zsh   pause
  234              1        1          0 2  0x4000    1            getty nanosle
  229              1      229          0 2       0    1             cron nanosle
  224              1      224          0 2       0    1            inetd  kqread
  733              1      733          0 2     0x1    1             nmbd  select
  724              1      724          0 2     0x1    1             smbd  select
  434            174      174         12 2  0x4100    1             qmgr  select
  657            174      174         12 2  0x4100    1           pickup  select
  174              1      174          0 2  0x4108    1           master  select
  561              1      561          0 2       0    1             sshd  select
  476              1      476          0 2       0    1           powerd  kqread
  507              1      507          0 2       0    1             ntpd   pause
  313              0        0          0 2 0x20200    1            nfsio  nfsidl
  274              0        0          0 2 0x20200    1            nfsio  nfsidl
  277              0        0          0 2 0x20200    1            nfsio  nfsidl
  278              0        0          0 2 0x20200    1            nfsio  nfsidl
  216              1      216          0 2       0    1          syslogd  select
  154              1      154          0 2       0    1         dhclient  select
  15               0        0          0 2 0x20200    1         aiodoned aiodone
  14               0        0          0 2 0x20200    1          ioflush  syncer
  13               0        0          0 2 0x20200    1           reaper  reaper
  12               0        0          0 2 0x20200    1       pagedaemon pgdaemo
  11               0        0          0 2 0x20200    1         scsibus0  sccomp
  10               0        0          0 2 0x20200    1             usb4  usbevt
  9                0        0          0 2 0x20200    1             usb3  usbevt
  8                0        0          0 2 0x20200    1             usb2  usbevt
  7                0        0          0 2 0x20200    1             usb1  usbevt
  6                0        0          0 2 0x20200    1          usbtask  usbtsk
  5                0        0          0 2 0x20200    1             usb0  usbevt
  4                0        0          0 2 0x20200    1        atapibus1  sccomp
  3                0        0          0 2 0x20200    1        atapibus0  sccomp
  2                0        0          0 2 0x20200    1     sysmon taskq smtaskq
  1                0        1          0 2  0x4000    1             init    wait
  0               -1        0          0 2 0x20200    1          swapper schedul
 db{0}> show registers
 ds          0x10
 es          0x10
 fs          0x30
 gs          0x10
 edi         0xc0343100  proclists+0x1100
 esi         0x100
 ebp         0xe4f26b70
 ebx         0xe4f26b9c
 edx         0xc038e620  cpu_info_primary
 ecx         0
 eax         0x3a5e
 eip         0xc0282b04  cpu_Debugger+0x4
 cs          0x8
 eflags      0x202
 esp         0xe4f26b70
 ss          0x10
 netbsd:cpu_Debugger+0x4:        leave
 db{0}>
 
 
 Case 2:
 
 panic: remrunqueue
 Stopped in pid 537.2 (mozilla-bin) at   netbsd:cpu_Debugger+0x4:        leave
 db{0}> bt
 cpu_Debugger(20000,e4e61684,e4ef73bc,c02880e2,c038c090) at netbsd:cpu_Debugger+0x4
 panic(c0343c8d,c038e620,e4ef73bc,0,e4c7c270) at netbsd:panic+0xb8
 remrunqueue(e4e61684,c0343ac0,e4f2fd50,c0216c2a,e4e61684) at netbsd:remrunqueue+0x31
 mi_switch(e4e61604,e4e61684,e4f2fd90,c020a831,e4e61604) at netbsd:mi_switch+0x1f8
 sa_switch(e4e61604,2,1a8,c0229a13,e4e61604) at netbsd:sa_switch+0x266
 ltsleep(c03c31c8,118,c0346b20,0,0) at netbsd:ltsleep+0x3ad
 sys_poll(e4e61604,e4f2ff80,e4f2ff78,c028fbd7,e4e61604) at netbsd:sys_poll+0x280
 syscall_plain(ffff002b,bfbc002b,2b,483f002b,ffffffff) at netbsd:syscall_plain+0xc0
 db{0}> ps
  PID           PPID     PGRP        UID S   FLAGS LWPS          COMMAND    WAIT
 >537            300      537       1000 2  0x4402    3      mozilla-bin       *
  300             80      300       1000 2  0x4002    1              zsh   ttyin
  80             295      295       1000 2  0x4102    1            kterm  select
  295            671      295       1000 2  0x4002    1              twm  select
  289            671      289       1000 2  0x4100    1          XFree86
  671            502      502       1000 2  0x4002    1            xinit    wait
  502            233      502       1000 2  0x4002    1               sh    wait
  235              1      235          0 2  0x4002    1            getty   ttyin
  232              1      232          0 2  0x4002    1            getty   ttyin
  228              1      228          0 2  0x4002    1            getty   ttyin
  233              1      233       1000 2  0x4003    1              zsh   pause
  234              1        1          0 2  0x4000    1            getty nanosle
  229              1      229          0 2       0    1             cron nanosle
  224              1      224          0 2       0    1            inetd  kqread
  733              1      733          0 2     0x1    1             nmbd  select
  724              1      724          0 2     0x1    1             smbd  select
  434            174      174         12 2  0x4100    1             qmgr  select
  657            174      174         12 2  0x4100    1           pickup  select
  174              1      174          0 2  0x4108    1           master  select
  561              1      561          0 2       0    1             sshd  select
  476              1      476          0 2       0    1           powerd  kqread
  507              1      507          0 2       0    1             ntpd   pause
  313              0        0          0 2 0x20200    1            nfsio  nfsidl
  274              0        0          0 2 0x20200    1            nfsio  nfsidl
  277              0        0          0 2 0x20200    1            nfsio  nfsidl
  278              0        0          0 2 0x20200    1            nfsio  nfsidl
  216              1      216          0 2       0    1          syslogd  select
  154              1      154          0 2       0    1         dhclient  select
  15               0        0          0 2 0x20200    1         aiodoned aiodone
  14               0        0          0 2 0x20200    1          ioflush  syncer
  13               0        0          0 2 0x20200    1           reaper  reaper
  12               0        0          0 2 0x20200    1       pagedaemon pgdaemo
  11               0        0          0 2 0x20200    1         scsibus0  sccomp
  10               0        0          0 2 0x20200    1             usb4  usbevt
  9                0        0          0 2 0x20200    1             usb3  usbevt
  8                0        0          0 2 0x20200    1             usb2  usbevt
  7                0        0          0 2 0x20200    1             usb1  usbevt
  6                0        0          0 2 0x20200    1          usbtask  usbtsk
  5                0        0          0 2 0x20200    1             usb0  usbevt
  4                0        0          0 2 0x20200    1        atapibus1  sccomp
  3                0        0          0 2 0x20200    1        atapibus0  sccomp
  2                0        0          0 2 0x20200    1     sysmon taskq smtaskq
  1                0        1          0 2  0x4000    1             init    wait
  0               -1        0          0 2 0x20200    1          swapper schedul
 db{0}> show registers
 ds          0x10
 es          0x10
 fs          0x30
 gs          0x10
 edi         0xc0343c8d  sig_filtops+0x5ed
 esi         0x100
 ebp         0xe4f2fcc0
 ebx         0xe4f2fcec
 edx         0xc038e620  cpu_info_primary
 ecx         0
 eax         0x3a36
 eip         0xc0282b04  cpu_Debugger+0x4
 cs          0x8
 eflags      0x3202
 esp         0xe4f2fcc0
 ss          0x10
 netbsd:cpu_Debugger+0x4:        leave
 db{0}>