Re: kern/38956 (rb tree corruption?)

[Izumi Tsutsui <tsutsui%ceres.dti.ne.jp@localhost>]

The following reply was made to PR kern/38956; it has been noted by GNATS.

From: Izumi Tsutsui <tsutsui%ceres.dti.ne.jp@localhost>
To: gnats-bugs%NetBSD.org@localhost
Cc: kern-bug-people%NetBSD.org@localhost, netbsd-bugs%NetBSD.org@localhost, 
gnats-admin%NetBSD.org@localhost,
        yamt%NetBSD.org@localhost, martin%duskware.de@localhost, 
tsutsui%ceres.dti.ne.jp@localhost
Subject: Re: kern/38956 (rb tree corruption?)
Date: Thu, 19 Jun 2008 23:33:43 +0900

 > > please try the latest source.
 
 > news68k gets panic before init(8) invoked:
 
 news68k LOCKDEBUG kernel without DIAGNOSTIC also fails in earlier place:
 ---
 NEWS> bo
 NetBSD/news68k Primary Boot
 NetBSD/news68k Secondary Boot, Revision 1.6
 (tsutsui@mirage, Mon Apr 21 01:18:44 JST 2008)
 Booting hd(0,0,0)
 1714244+40140+315652 [148336+141690]=0x242648
 
 panic: lockdebug_lookup: uninitialized lock (lock=0x15dbe10)
 Stopped in pid 0.1 (system) at  netbsd:cpu_Debugger+0x6:        unlk    a6
 db> tr
 cpu_Debugger(1aa740,15dbe10,0,246e58,246e74) + 6
 panic(192fb7,15dbe10,29f3000,19f3000,1aa740) + 172
 lockdebug_wantlock(15dbe10,b2bc8,0,0) + 120
 mutex_vector_enter(15dbe10,1e1620,246ed0,246ee0,b6164) + 1fa
 uvm_map_reference(15dbe00,29f3000,41727,0,15dbe00) + 12
 uvm_map_submap(1e1620,19f3000,29f3000,15dbe00,15dbe00,19f3000,29f3000,0) + 100
 uvm_km_suballoc(1e1620,246f50,246f4c,1000000,0) + 94
 uvm_pager_init(1488000,ffc00000,246f7c,246f78,1ed3e4) + 24
 uvm_init(243000,3e8000,ffc000,ffeffffc,0) + 68
 uvm_fault(0x1e1620, 0x1450000, 0x1) -> 0xe
   type 8, code [mmu,,ssw]: 402074d
 trap type 8, code = 0x402074d, v = 0x1450ffa
 kernel program counter = 0x159594
 kernel: MMU fault trap
 Caught exception in ddb.
 main() + 1e
 db> show lock 0x15dbe10
 lock address : 0x00000000015dbe10 type     :     sleep/adaptive
 initialized  : 0x00000000000b2cc2
 shared holds :                  0 exclusive:                  0
 shares wanted:                  0 exclusive:                  0
 current cpu  :                  0 last held:                  0
 current lwp  : 0x00000000001aa740 last held: 000000000000000000
 last locked  : 000000000000000000 unlocked : 000000000000000000
 owner field  : 000000000000000000 wait/spin:                0/0
 
 Turnstile chain at 0x1efa20.
 => No active turnstile for this lock.
 db> 
 ---
 The initialized address 0xb2cc2 is mutex_init() in uvm_map_setup()
 so it's certainly initialized.
 
 rb_tree code in subr_lockdebug.c is also problematic?
 ---
 Izumi Tsutsui