bugzilla-noreply at freebsd.org
2014-Sep-06 08:14 UTC
[Bug 193367] New: [panic] sleeping thread
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=193367
Bug ID: 193367
Summary: [panic] sleeping thread
Product: Base System
Version: 9.1-RELEASE
Hardware: i386
OS: Any
Status: Needs Triage
Severity: Affects Only Me
Priority: Normal
Component: threads
Assignee: freebsd-threads at FreeBSD.org
Reporter: sasamotikomi at gmail.com
CC: stable at FreeBSD.org
panic: sleeping thread
Sleeping thread (tid 102916, pid 16913) owns a non-sleepable lock
KDB: stack backtrace of thread 102916:
#0 0xc0ac8ca9 at mi_switch+0x139
#1 0xc0afddee at sleepq_switch+0xce
#2 0xc0afe95e at sleepq_timedwait+0x3e
#3 0xc0ac92a2 at _sleep+0x2a2
#4 0xc0d1c306 at swap_pager_getpages+0x3e6
#5 0xc0d28291 at vm_fault_hold+0x1031
#6 0xc0d2993b at vm_fault+0x8b
#7 0xc0e2525f at trap_pfault+0x1df
#8 0xc0e260ea at trap+0x44a
#9 0xc0e0f6cc at calltrap+0x6
#10 0xc9fb0b5a at drm_ioctl+0x2ca
#11 0xc09a41aa at devfs_ioctl_f+0x10a
#12 0xc0b05140 at kern_ioctl+0x2a0
#13 0xc0b052b4 at sys_ioctl+0x134
#14 0xc0e257fa at syscall+0x34a
#15 0xc0e0f731 at Xint0x80_syscall+0x21
panic: sleeping thread
cpuid = 0
KDB: stack backtrace:
#0 0xc0af3b1f at kdb_backtrace+0x4f
#1 0xc0ac054f at panic+0x16f
#2 0xc0b01b46 at propagate_priority+0x106
#3 0xc0b02958 at turnstile_wait+0x2c8
#4 0xc0aae71c at _mtx_lock_sleep+0x1ec
#5 0xc0aaeaec at _mtx_lock_flags+0x4c
#6 0xc9fb3f8d at drm_lock+0xad
#7 0xc9fb0bfb at drm_ioctl+0x36b
#8 0xc09a41aa at devfs_ioctl_f+0x10a
#9 0xc0b05140 at kern_ioctl+0x2a0
#10 0xc0b052b4 at sys_ioctl+0x134
#11 0xc0e257fa at syscall+0x34a
#12 0xc0e0f731 at Xint0x80_syscall+0x21
--
You are receiving this mail because:
You are on the CC list for the bug.
bugzilla-noreply at freebsd.org
2014-Sep-06 08:17 UTC
[Bug 193367] [panic] sleeping thread
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=193367 --- Comment #1 from sasamotikomi at gmail.com --- core.txt.12 FreeBSD 9.1-RELEASE-p4 Sleeping thread (tid 104117, pid 95818) owns a non-sleepable lock KDB: stack backtrace of thread 104117: #0 0xc0ac8ca9 at mi_switch+0x139 #1 0xc0afddee at sleepq_switch+0xce #2 0xc0afe95e at sleepq_timedwait+0x3e #3 0xc0ac92a2 at _sleep+0x2a2 #4 0xc0d1c306 at swap_pager_getpages+0x3e6 #5 0xc0d28291 at vm_fault_hold+0x1031 #6 0xc0d2993b at vm_fault+0x8b #7 0xc0e2525f at trap_pfault+0x1df #8 0xc0e260ea at trap+0x44a #9 0xc0e0f6cc at calltrap+0x6 #10 0xcaaacb5a at drm_ioctl+0x2ca #11 0xc09a41aa at devfs_ioctl_f+0x10a #12 0xc0b05140 at kern_ioctl+0x2a0 #13 0xc0b052b4 at sys_ioctl+0x134 #14 0xc0e257fa at syscall+0x34a #15 0xc0e0f731 at Xint0x80_syscall+0x21 panic: sleeping thread cpuid = 0 KDB: stack backtrace: #0 0xc0af3b1f at kdb_backtrace+0x4f #1 0xc0ac054f at panic+0x16f #2 0xc0b01b46 at propagate_priority+0x106 #3 0xc0b02958 at turnstile_wait+0x2c8 #4 0xc0aae71c at _mtx_lock_sleep+0x1ec #5 0xc0aaeaec at _mtx_lock_flags+0x4c #6 0xcaaaff8d at drm_lock+0xad #7 0xcaaacbfb at drm_ioctl+0x36b #8 0xc09a41aa at devfs_ioctl_f+0x10a #9 0xc0b05140 at kern_ioctl+0x2a0 #10 0xc0b052b4 at sys_ioctl+0x134 #11 0xc0e257fa at syscall+0x34a #12 0xc0e0f731 at Xint0x80_syscall+0x21 -- You are receiving this mail because: You are on the CC list for the bug.
bugzilla-noreply at freebsd.org
2014-Sep-06 08:28 UTC
[Bug 193367] [panic] sleeping thread
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=193367 --- Comment #2 from sasamotikomi at gmail.com --- core.txt.15 FreeBSD 9.1-RELEASE-p6 panic: sleeping thread Unread portion of the kernel message buffer: Sleeping thread (tid 100889, pid 3535) owns a non-sleepable lock KDB: stack backtrace of thread 100889: #0 0xc0ac8fe9 at mi_switch+0x139 #1 0xc0afe12e at sleepq_switch+0xce #2 0xc0afec9e at sleepq_timedwait+0x3e #3 0xc0ac95e2 at _sleep+0x2a2 #4 0xc0d1c686 at swap_pager_getpages+0x3e6 #5 0xc0d28611 at vm_fault_hold+0x1031 #6 0xc0d29cbb at vm_fault+0x8b #7 0xc0e255df at trap_pfault+0x1df #8 0xc0e2646a at trap+0x44a #9 0xc0e0fa4c at calltrap+0x6 #10 0xc7fe7b5a at drm_ioctl+0x2ca #11 0xc09a44ea at devfs_ioctl_f+0x10a #12 0xc0b05480 at kern_ioctl+0x2a0 #13 0xc0b055f4 at sys_ioctl+0x134 #14 0xc0e25b7a at syscall+0x34a #15 0xc0e0fab1 at Xint0x80_syscall+0x21 panic: sleeping thread cpuid = 0 KDB: stack backtrace: #0 0xc0af3e5f at kdb_backtrace+0x4f #1 0xc0ac088f at panic+0x16f #2 0xc0b01e86 at propagate_priority+0x106 #3 0xc0b02c98 at turnstile_wait+0x2c8 #4 0xc0aaea5c at _mtx_lock_sleep+0x1ec #5 0xc0aaee2c at _mtx_lock_flags+0x4c #6 0xc7feaf8d at drm_lock+0xad #7 0xc7fe7bfb at drm_ioctl+0x36b #8 0xc09a44ea at devfs_ioctl_f+0x10a #9 0xc0b05480 at kern_ioctl+0x2a0 #10 0xc0b055f4 at sys_ioctl+0x134 #11 0xc0e25b7a at syscall+0x34a #12 0xc0e0fab1 at Xint0x80_syscall+0x21 -- You are receiving this mail because: You are on the CC list for the bug.
bugzilla-noreply at freebsd.org
2014-Sep-06 08:33 UTC
[Bug 193367] [panic] sleeping thread
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=193367 --- Comment #3 from sasamotikomi at gmail.com --- core.txt.18 FreeBSD 9.1-RELEASE-p7 panic: sleeping thread Sleeping thread (tid 100214, pid 93700) owns a non-sleepable lock KDB: stack backtrace of thread 100214: #0 0xc0ac8fe9 at mi_switch+0x139 #1 0xc0afe12e at sleepq_switch+0xce #2 0xc0afec9e at sleepq_timedwait+0x3e #3 0xc0ac95e2 at _sleep+0x2a2 #4 0xc0d1c726 at swap_pager_getpages+0x3e6 #5 0xc0d286b1 at vm_fault_hold+0x1031 #6 0xc0d29d5b at vm_fault+0x8b #7 0xc0e2567f at trap_pfault+0x1df #8 0xc0e2650a at trap+0x44a #9 0xc0e0faec at calltrap+0x6 #10 0xc7fcbb5a at drm_ioctl+0x2ca #11 0xc09a44ea at devfs_ioctl_f+0x10a #12 0xc0b05480 at kern_ioctl+0x2a0 #13 0xc0b055f4 at sys_ioctl+0x134 #14 0xc0e25c1a at syscall+0x34a #15 0xc0e0fb51 at Xint0x80_syscall+0x21 -- You are receiving this mail because: You are on the CC list for the bug.
bugzilla-noreply at freebsd.org
2014-Sep-06 08:48 UTC
[Bug 193367] [panic] sleeping thread
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=193367 --- Comment #4 from sasamotikomi at gmail.com --- *** Bug 182498 has been marked as a duplicate of this bug. *** -- You are receiving this mail because: You are on the CC list for the bug.
bugzilla-noreply at freebsd.org
2014-Sep-08 16:49 UTC
[Bug 193367] [panic] sleeping thread
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=193367
John Baldwin <jhb at FreeBSD.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |jhb at FreeBSD.org
--- Comment #5 from John Baldwin <jhb at FreeBSD.org> ---
In all these crashes, the root bug is a NULL pointer dereference (probably) at
drm_ioctl+0x2ca. Can you provide the kgdb backtrace from a single core.txt
file? It would be good to see what source line corresponds to that address.
--
You are receiving this mail because:
You are on the CC list for the bug.
bugzilla-noreply at freebsd.org
2014-Sep-11 03:40 UTC
[Bug 193367] [panic] sleeping thread
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=193367 --- Comment #6 from sasamotikomi at gmail.com --- (In reply to John Baldwin from comment #5)> In all these crashes, the root bug is a NULL pointer dereference (probably) > at drm_ioctl+0x2ca. Can you provide the kgdb backtrace from a single > core.txt file? It would be good to see what source line corresponds to that > address.I still have old GENERIC kernel (/boot/kernel.old.9.1/kernel) how to do that? I new for kernel debugging. -- You are receiving this mail because: You are on the CC list for the bug.
bugzilla-noreply at freebsd.org
2014-Sep-12 17:43 UTC
[Bug 193367] [panic] sleeping thread
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=193367 --- Comment #7 from John Baldwin <jhb at FreeBSD.org> --- Do you have core.txt.N files in /var/crash? They will contain the kgdb backtrace if so. -- You are receiving this mail because: You are on the CC list for the bug.
bugzilla-noreply at freebsd.org
2015-Jan-19 00:47 UTC
[Bug 193367] [panic] sleeping thread
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=193367 --- Comment #17 from sasamotikomi at gmail.com --- (In reply to Eygene Ryabinkin from comment #16) Yes, I use 10.1-RELEASE now and KMS+VT (also I soon switch to STABLE because it's has AGP support). -- You are receiving this mail because: You are on the CC list for the bug.
bugzilla-noreply at freebsd.org
2015-Apr-28 12:38 UTC
[Bug 193367] [panic] sleeping thread
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=193367 --- Comment #18 from commit-hook at freebsd.org --- A commit references this bug: Author: dumbbell Date: Tue Apr 28 12:37:10 UTC 2015 New revision: 282141 URL: https://svnweb.freebsd.org/changeset/base/282141 Log: DRM2: fix off-by-one overflow in ioctl processing Call to the driver-specific ioctl used to process ioctl number that will lead to the out-of-bounds access to the ioctl handler array. PR: 193367 Approved by: kib MFC of: r275209 (original commit by rea) Changes: _U stable/10/ stable/10/sys/dev/drm2/drm_drv.c -- You are receiving this mail because: You are on the CC list for the bug.
bugzilla-noreply at freebsd.org
2018-May-28 19:40 UTC
[Bug 193367] [panic] sleeping thread
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=193367
Eitan Adler <eadler at FreeBSD.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|In Progress |Open
--- Comment #19 from Eitan Adler <eadler at FreeBSD.org> ---
batch change:
For bugs that match the following
- Status Is In progress
AND
- Untouched since 2018-01-01.
AND
- Affects Base System OR Documentation
DO:
Reset to open status.
Note:
I did a quick pass but if you are getting this email it might be worthwhile to
double check to see if this bug ought to be closed.
--
You are receiving this mail because:
You are on the CC list for the bug.
bugzilla-noreply at freebsd.org
2018-May-28 20:07 UTC
[Bug 193367] [panic] sleeping thread
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=193367
Eugene Grosbein <eugen at freebsd.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |eugen at freebsd.org
Status|Open |In Progress
--- Comment #20 from Eugene Grosbein <eugen at freebsd.org> ---
The fix seems to be present in all of head, stable/10 and stable/11 branches.
If so, this should be closed.
--
You are receiving this mail because:
You are on the CC list for the bug.
bugzilla-noreply at freebsd.org
2018-Sep-03 19:07 UTC
[Bug 193367] [panic] sleeping thread
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=193367
Rene Ladan <rene at FreeBSD.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Assignee|rea at FreeBSD.org |bugs at FreeBSD.org
--
You are receiving this mail because:
You are on the CC list for the bug.
bugzilla-noreply at freebsd.org
2018-Sep-03 19:08 UTC
[Bug 193367] [panic] sleeping thread
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=193367
Rene Ladan <rene at FreeBSD.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |rene at FreeBSD.org
--- Comment #21 from Rene Ladan <rene at FreeBSD.org> ---
Maintainer reset.
--
You are receiving this mail because:
You are on the CC list for the bug.
bugzilla-noreply at freebsd.org
2018-Sep-03 19:15 UTC
[Bug 193367] [panic] sleeping thread
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=193367
Eugene Grosbein <eugen at freebsd.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|In Progress |Closed
Resolution|--- |FIXED
--- Comment #22 from Eugene Grosbein <eugen at freebsd.org> ---
Feedback timeout. Also, this is believed to be fixed in all supported branches.
--
You are receiving this mail because:
You are on the CC list for the bug.