From owner-freebsd-stable@FreeBSD.ORG Fri Mar 26 16:48:53 2004 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id CF21616A4CE for ; Fri, 26 Mar 2004 16:48:53 -0800 (PST) Received: from sparcs.kaist.ac.kr (sparcs.kaist.ac.kr [143.248.234.102]) by mx1.FreeBSD.org (Postfix) with ESMTP id 382A143D1D for ; Fri, 26 Mar 2004 16:48:53 -0800 (PST) (envelope-from netj@sparcs.kaist.ac.kr) Received: from localhost ([127.0.0.1] helo=sab.mazic.org) by sparcs.kaist.ac.kr with esmtp (Exim 3.35 #1 (Debian)) id 1B720K-0003EU-00 for ; Sat, 27 Mar 2004 09:48:52 +0900 Received: from netj by sab.mazic.org with local (Exim 4.24) id HV7M9H-0001YC-CJ for freebsd-stable@freebsd.org; Sat, 27 Mar 2004 09:48:53 +0900 Date: Sat, 27 Mar 2004 09:48:53 +0900 From: Jaeho Shin To: freebsd-stable@freebsd.org Message-ID: <20040327004853.GC2948@sab.mazic.org> References: <20040326091948.GA2948@sab.mazic.org> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="nHwqXXcoX0o6fKCv" Content-Disposition: inline In-Reply-To: <20040326091948.GA2948@sab.mazic.org> User-Agent: Mutt/1.4.1i Organization: SPARCS, KAIST Subject: Re: "panic: ffs_blkfree: bad size" with HPT374 IDE RAID X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 27 Mar 2004 00:48:53 -0000 --nHwqXXcoX0o6fKCv Content-Type: text/plain; charset=euc-kr Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Fri, Mar 26, 2004 at 06:19:48PM +0900, Jaeho Shin (netj@sparcs.kaist.ac.= kr) wrote: > Now I have disabled softupdates to check whether it could be a problem. This didn't help. Same panic occurred with softupdates turned off: # gdb -k /usr/obj/usr/src/sys/EGO/kernel.debug /var/crash/vmcore.1 GNU gdb 4.18 (FreeBSD) Copyright 1998 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain condition= s. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "i386-unknown-freebsd"...Deprecated bfd_read cal= led at /usr/src/gnu/usr.bin/binutils/gdb/../../../../contrib/gdb/gdb/dbxrea= d.c line 2627 in elfstab_build_psymtabs Deprecated bfd_read called at /usr/src/gnu/usr.bin/binutils/gdb/../../../..= /contrib/gdb/gdb/dbxread.c line 933 in fill_symbuf SMP 2 cpus IdlePTD at physical address 0x003d2000 initial pcb at physical address 0x0030fc00 panicstr: ffs_blkfree: bad size panic messages: --- panic: ffs_blkfree: bad size mp_lock =3D 01000001; cpuid =3D 1; lapic.id =3D 00000000 boot() called on cpu#1 syncing disks... 27 24 20 15 14 2 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1= =20 giving up on 1 buffers Uptime: 11h48m44s dumping to dev #ad/0x20001, offset 2097449 dump ata0: resetting devices .. done 1023 1022 1021 1020 1019 1018 1017 1016 1015 1014 1013 1012 1011 1010 1009 = 1008 1007 1006 1005 1004 1003 1002 1001 1000 999 998 997 996 995 994 993 99= 2 991 990 989 988 987 986 985 984 983 982 981 980 979 978 977 976 975 974 9= 73 972 971 970 969 968 967 966 965 964 963 962 961 960 959 958 957 956 955 = 954 953 952 951 950 949 948 947 946 945 944 943 942 941 940 939 938 937 936= 935 934 933 932 931 930 929 928 927 926 925 924 923 922 921 920 919 918 91= 7 916 915 914 913 912 911 910 909 908 907 906 905 904 903 902 901 900 899 8= 98 897 896 895 894 893 892 891 890 889 888 887 886 885 884 883 882 881 880 = 879 878 877 876 875 874 873 872 871 870 869 868 867 866 865 864 863 862 861= 860 859 858 857 856 855 854 853 852 851 850 849 848 847 846 845 844 843 84= 2 841 840 839 838 837 836 835 834 833 832 831 830 829 828 827 826 825 824 8= 23 822 821 820 819 818 817 816 815 814 813 812 811 810 809 808 807 806 805 = 804 803 802 801 800 799 798 797 796 795 794 793 792 791 790 789 788 787 786= 785 784 783 782 781 780 779 778 777 776 775 774 773 772 771 770 769 768 76= 7 766 765 764 763 762 761 760 759 758 757 756 755 754 753 752 751 750 749 7= 48 747 746 745 744 743 742 741 740 739 738 737 736 735 734 733 732 731 730 = 729 728 727 726 725 724 723 722 721 720 719 718 717 716 715 714 713 712 711= 710 709 708 707 706 705 704 703 702 701 700 699 698 697 696 695 694 693 69= 2 691 690 689 688 687 686 685 684 683 682 681 680 679 678 677 676 675 674 6= 73 672 671 670 669 668 667 666 665 664 663 662 661 660 659 658 657 656 655 = 654 653 652 651 650 649 648 647 646 645 644 643 642 641 640 639 638 637 636= 635 634 633 632 631 630 629 628 627 626 625 624 623 622 621 620 619 618 61= 7 616 615 614 613 612 611 610 609 608 607 606 605 604 603 602 601 600 599 5= 98 597 596 595 594 593 592 591 590 589 588 587 586 585 584 583 582 581 580 = 579 578 577 576 575 574 573 572 571 570 569 568 567 566 565 564 563 562 561= 560 559 558 557 556 555 554 553 552 551 550 549 548 547 546 545 544 543 54= 2 541 540 539 538 537 536 535 534 533 532 531 530 529 528 527 526 525 524 5= 23 522 521 520 519 518 517 516 515 514 513 512 511 510 509 508 507 506 505 = 504 503 502 501 500 499 498 497 496 495 494 493 492 491 490 489 488 487 486= 485 484 483 482 481 480 479 478 477 476 475 474 473 472 471 470 469 468 46= 7 466 465 464 463 462 461 460 459 458 457 456 455 454 453 452 451 450 449 4= 48 447 446 445 444 443 442 441 440 439 438 437 436 435 434 433 432 431 430 = 429 428 427 426 425 424 423 422 421 420 419 418 417 416 415 414 413 412 411= 410 409 408 407 406 405 404 403 402 401 400 399 398 397 396 395 394 393 39= 2 391 390 389 388 387 386 385 384 383 382 381 380 379 378 377 376 375 374 3= 73 372 371 370 369 368 367 366 365 364 363 362 361 360 359 358 357 356 355 = 354 353 352 351 350 349 348 347 346 345 344 343 342 341 340 339 338 337 336= 335 334 333 332 331 330 329 328 327 326 325 324 323 322 321 320 319 318 31= 7 316 315 314 313 312 311 310 309 308 307 306 305 304 303 302 301 300 299 2= 98 297 296 295 294 293 292 291 290 289 288 287 286 285 284 283 282 281 280 = 279 278 277 276 275 274 273 272 271 270 269 268 267 266 265 264 263 262 261= 260 259 258 257 256 255 254 253 252 251 250 249 248 247 246 245 244 243 24= 2 241 240 239 238 237 236 235 234 233 232 231 230 229 228 227 226 225 224 2= 23 222 221 220 219 218 217 216 215 214 213 212 211 210 209 208 207 206 205 = 204 203 202 201 200 199 198 197 196 195 194 193 192 191 190 189 188 187 186= 185 184 183 182 181 180 179 178 177 176 175 174 173 172 171 170 169 168 16= 7 166 165 164 163 162 161 160 159 158 157 156 155 154 153 152 151 150 149 1= 48 147 146 145 144 143 142 141 140 139 138 137 136 135 134 133 132 131 130 = 129 128 127 126 125 124 123 122 121 120 119 118 117 116 115 114 113 112 111= 110 109 108 107 106 105 104 103 102 101 100 99 98 97 96 95 94 93 92 91 90 = 89 88 87 86 85 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70 69 68 67 66 65 = 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 = 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 = 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0 004 COUNT 3 SHOULD BE 2 <118 --- #0 dumpsys () at /usr/src/sys/kern/kern_shutdown.c:487 487 if (dumping++) { (kgdb) bt #0 dumpsys () at /usr/src/sys/kern/kern_shutdown.c:487 #1 0xc016b987 in boot (howto=3D256) at /usr/src/sys/kern/kern_shutdown.c:3= 16 #2 0xc016bde0 in poweroff_wait (junk=3D0xc02ca895, howto=3D-1070815136) at /usr/src/sys/kern/kern_shutdown.c:595 #3 0xc023096b in ffs_blkfree (ip=3D0xc39e3100, bno=3D782945620, size=3D163= 84) at /usr/src/sys/ufs/ffs/ffs_alloc.c:1415 #4 0xc0232f75 in ffs_indirtrunc (ip=3D0xc39e3100, lbn=3D-16781326,=20 dbn=3D1708093400, lastbn=3D-1, level=3D2, countp=3D0xe4e72d14) at /usr/src/sys/ufs/ffs/ffs_inode.c:511 #5 0xc0232a99 in ffs_truncate (vp=3D0xe534d940, length=3D0, flags=3D0, cre= d=3D0x0,=20 p=3D0xe4518780) at /usr/src/sys/ufs/ffs/ffs_inode.c:327 #6 0xc023d398 in ufs_inactive (ap=3D0xe4e72e40) at /usr/src/sys/ufs/ufs/ufs_inode.c:89 #7 0xc02428a9 in ufs_vnoperate (ap=3D0xe4e72e40) at /usr/src/sys/ufs/ufs/ufs_vnops.c:2376 #8 0xc019acc7 in vput (vp=3D0xe534d940) at vnode_if.h:815 #9 0xc019e8ad in lstat (p=3D0xe4518780, uap=3D0xe4e72f80) at /usr/src/sys/kern/vfs_syscalls.c:1835 #10 0xc0293b21 in syscall2 (frame=3D{tf_fs =3D 47, tf_es =3D -65489,=20 tf_ds =3D -1078001617, tf_edi =3D -1077944963, tf_esi =3D -1077945988= ,=20 tf_ebp =3D -1077946032, tf_isp =3D -454610988, tf_ebx =3D 134622840,= =20 tf_edx =3D 0, tf_ecx =3D -1077942828, tf_eax =3D 190, tf_trapno =3D 7= ,=20 tf_err =3D 2, tf_eip =3D 1210365540, tf_cs =3D 31, tf_eflags =3D 659,= =20 tf_esp =3D -1077946060, tf_ss =3D 47}) at /usr/src/sys/i386/i386/trap= .c:1175 #11 0xc027ea2b in Xint0x80_syscall () cannot read proc at 0 (kgdb) up 3 #3 0xc023096b in ffs_blkfree (ip=3D0xc39e3100, bno=3D782945620, size=3D163= 84) at /usr/src/sys/ufs/ffs/ffs_alloc.c:1415 1415 panic("ffs_blkfree: bad size"); (kgdb) l - 1405 int i, error, cg, blk, frags, bbase; 1406 u_int8_t *blksfree; 1407=09 1408 fs =3D ip->i_fs; 1409 VOP_FREEBLKS(ip->i_devvp, fsbtodb(fs, bno), size); 1410 if ((u_int)size > fs->fs_bsize || fragoff(fs, size) !=3D 0 || 1411 fragnum(fs, bno) + numfrags(fs, size) > fs->fs_frag) { 1412 printf("dev=3D%s, bno =3D %ld, bsize =3D %ld, size =3D %ld, fs =3D %= s\n", 1413 devtoname(ip->i_dev), (long)bno, (long)fs->fs_bsize, size, 1414 fs->fs_fsmnt); (kgdb) l 1415 panic("ffs_blkfree: bad size"); 1416 } 1417 cg =3D dtog(fs, bno); 1418 if ((u_int)bno >=3D fs->fs_size) { 1419 printf("bad block %ld, ino %lu\n", 1420 (long)bno, (u_long)ip->i_number); 1421 ffs_fserr(fs, ip->i_uid, "bad block"); 1422 return; 1423 } 1424 error =3D bread(ip->i_devvp, fsbtodb(fs, cgtod(fs, cg)), (kgdb) p *ip $1 =3D {i_lock =3D {lk_interlock =3D {lock_data =3D 0}, lk_flags =3D 1088,= =20 lk_sharecount =3D 0, lk_waitcount =3D 0, lk_exclusivecount =3D 1, lk_pr= io =3D 8,=20 lk_wmesg =3D 0xc02cc6aa "inode", lk_timo =3D 6, lk_lockholder =3D 92578= },=20 i_hash =3D {le_next =3D 0xc49a9c00, le_prev =3D 0xc31ab458}, i_vnode =3D = 0xe534d940,=20 i_devvp =3D 0xe2d6d780, i_flag =3D 128, i_dev =3D 0xc320d200, i_number = =3D 93806866,=20 i_effnlink =3D 0, inode_u =3D {fs =3D 0xc334d000, e2fs =3D 0xc334d000}, i= _dquot =3D { 0x0, 0x0}, i_modrev =3D 182574389325747, i_lockf =3D 0x0, i_count =3D 0= ,=20 i_endoff =3D 0, i_diroff =3D 0, i_offset =3D 0, i_ino =3D 0, i_reclen =3D= 0,=20 i_spare =3D {0, 0, 0}, i_dirhash =3D 0x0, i_din =3D {di_mode =3D 49611,= =20 di_nlink =3D 0, di_u =3D {oldids =3D {0, 2048}, inumber =3D 134217728},= =20 di_size =3D 19421773393035264, di_atime =3D 262878208,=20 di_atimensec =3D 104857664, di_mtime =3D 1080306466, di_mtimensec =3D 0= ,=20 di_ctime =3D 1080306466, di_ctimensec =3D 0, di_db =3D {197464287, 2768= 45717,=20 -869445504, 16842752, 654313992, 19407478, 20238, 0, 0, 0, 0, 0},=20 di_ib =3D {644218880, 226953992, -1720460298}, di_flags =3D 1734198596,= =20 di_blocks =3D 930847901, di_gen =3D 1359351667, di_uid =3D 961677533,= =20 di_gid =3D 546444409, di_spare =3D {-1960180224, 1342241927}}} (kgdb) q --=20 =BD=C5=C0=E7=C8=A3 | Jaeho Shin | http://netj.org/ System Programmers' Association for Researching Computer Systems Division of Computer Science, Department of EECS, KAIST --nHwqXXcoX0o6fKCv Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.2 (Cygwin) iD8DBQFAZM91eGASkZ411HcRAgFgAKCCBXB4hovRs56b7ivK5EDaPASIsACg33YN nyB/r6tfyeiO/0IG5vD1Zb0= =PXNQ -----END PGP SIGNATURE----- --nHwqXXcoX0o6fKCv--