Killing a defunct process on UNIX system [closed]

Asked 10/12, 2008 at 16:42 Answered 7/12, 2009 at 22:21

I have a defunct process on my system:

abc      22093 19508  0 23:29 pts/4    00:00:00 grep ProcA
abc      31756     1  0 Dec08 ?        00:00:00 [ProcA_my_collect] <defunct>

How can I kill the above process, without a reboot of the machine? I have tried with

kill -9 31756
sudo kill -9 31756

Stibine answered 10/12, 2008 at 16:42 Comment(7)

The fact that the parent process id is 1 means that whatever started it is dead. I'm not sure why "init" hasn't reaped it yet. – Kinaesthesia 10/12, 2008 at 16:46

That's a zombie! Don't worry, he's not harmful and doesn't consume anything. – Shaitan 10/12, 2008 at 17:49

Just saw that on reddit: cs.cornell.edu/Courses/cs414/2007sp/tanenbaum.jpg – Shaitan 10/12, 2008 at 17:51

On solaris there is preap that reap zombie processes, unfortunately not children of init. – Ultraviolet 30/8, 2011 at 12:2

Loki - zombie processes can create problems if they appear in large numbers. The root cause of the zombie process if of great concern. – Sitka 15/6, 2013 at 19:52

@Shaitan DO WORRY! in my case this totally blocks me from restarting my program. I need to restart my computer to be able to do it.. – Janycejanyte 21/4, 2016 at 12:3

How is this off topic? LOL. Anyway see unix.stackexchange.com/questions/5642/… – Kalidasa 30/4, 2019 at 15:15

You have killed the process, but a dead process doesn't disappear from the process table until its parent process performs a task called "reaping" (essentially calling wait(3) for that process to read its exit status). Dead processes that haven't been reaped are called "zombie processes."

The parent process id you see for 31756 is process id 1, which always belongs to init. That process should reap its zombie processes periodically, but if it can't, they will remain zombies in the process table until you reboot.

Conjure answered 10/12, 2008 at 18:7 Comment(4)

Init certainly reaps dead children. Think about the implications of that not being true: Every child process would have to terminate before its parent. – Playroom 10/3, 2009 at 12:14

Restarting init may help - on Linux, telinit u should be able to do that. – Samothrace 15/6, 2009 at 1:21

That last sentence is completely wrong. Reaping children is pretty much the only thing that init does! – Calculable 10/2, 2012 at 18:44

@WilliamPursell, thanks, I have edited the last sentence. Init does reap child processes, but clearly sometimes it can't get rid of zombies. – Conjure 29/1, 2013 at 17:20

Did you check for a child process that may need to be killed first? Sometimes the jam up is down the line... Try ps -ef --forest

to see what may be below it (if anything) then kill that first, then the one you already know about

Leeanneleeboard answered 10/12, 2008 at 17:33 Comment(0)

If kill -9 fails to kill a process the cause is almost always a driver or operating system bug.

The init process has adopted the process, but it cannot reap it. That is to say: when init calls wait(2) that process is not returned. One of the primary purposes of init is to reap dead orphaned children, so the problem is not that its parent died before it was reaped. Think: Otherwise, who reaps the results of a nohup'd process after logout?

Killing children of the defunct process is unlikely to help unless they are somehow related to the particular bug you are seeing.

Playroom answered 10/3, 2009 at 12:7 Comment(2)

"If kill -9 fails to kill a process the cause is almost always a driver or operating system bug." This is true, except for a defunct process. kill -9 is not going to do anything to a defunct process, only sends sends SIGKILL to the kernel about the process, but the kernel does not manage the process table on the basis of this signal. – Sitka 15/6, 2013 at 20:2

@benc: I agree, a zombie process is already dead and will not die any more in response to SIGKILL. However, the rest of my answer stands: There appears to be a bug causing this process to not be reaped by init when it calls wait(). – Playroom 17/6, 2013 at 6:59

You're probably not going to be able to if killing the parent doesn't resolve it. For whatever reason the systems isn't collecting that zombie process.

FWIW, I've seen it quite a bit on the SCO Openserver boxen that I used to administer. Heavy multi-user usage and low system resources, but it didn't seem to hurt anything. Just annoyed me. :)

Denbighshire answered 10/12, 2008 at 17:19 Comment(0)

The process probably hangs in e.g. ignoring signals like SIGPIPE, check with strace -p <pid> what is happening here.

Seguidilla answered 7/12, 2009 at 22:21 Comment(0)

Recommended topics

Hot tags