From owner-freebsd-current@FreeBSD.ORG Sat Jan 28 15:45:12 2006 Return-Path: X-Original-To: current@freebsd.org Delivered-To: freebsd-current@FreeBSD.ORG Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 8FC7616A420 for ; Sat, 28 Jan 2006 15:45:12 +0000 (GMT) (envelope-from bzeeb-lists@lists.zabbadoz.net) Received: from transport.cksoft.de (transport.cksoft.de [62.111.66.27]) by mx1.FreeBSD.org (Postfix) with ESMTP id CE04F43D46 for ; Sat, 28 Jan 2006 15:45:11 +0000 (GMT) (envelope-from bzeeb-lists@lists.zabbadoz.net) Received: from transport.cksoft.de (localhost [127.0.0.1]) by transport.cksoft.de (Postfix) with ESMTP id 14FB21FFDF7 for ; Sat, 28 Jan 2006 16:45:09 +0100 (CET) Received: by transport.cksoft.de (Postfix, from userid 66) id 12CE31FFDF6; Sat, 28 Jan 2006 16:45:06 +0100 (CET) Received: from maildrop.int.zabbadoz.net (maildrop.int.zabbadoz.net [10.111.66.10]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mail.int.zabbadoz.net (Postfix) with ESMTP id 1F83044487E for ; Sat, 28 Jan 2006 15:42:06 +0000 (UTC) Date: Sat, 28 Jan 2006 15:42:06 +0000 (UTC) From: "Bjoern A. Zeeb" X-X-Sender: bz@maildrop.int.zabbadoz.net To: FreeBSD current mailing list Message-ID: <20060128143953.C24703@maildrop.int.zabbadoz.net> MIME-Version: 1.0 Content-Type: MULTIPART/MIXED; BOUNDARY="0-939258737-1138462926=:24703" X-Virus-Scanned: by AMaViS cksoft-s20020300-20031204bz on transport.cksoft.de Cc: Subject: deadc0de panic in geom_io: mount -uw after double read-only mount X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 28 Jan 2006 15:45:12 -0000 This message is in MIME format. The first part should be readable text, while the remaining parts are likely unreadable without MIME-aware tools. --0-939258737-1138462926=:24703 Content-Type: TEXT/PLAIN; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: QUOTED-PRINTABLE Hi, I had for some unknown reason a file system mounted twice (readonly) to the same mount point. So I umounted one instance and after that tried to mount instance left read-write with mount -uw *boom* I guess that this was never supposed to work? In case someone wants to lokk into this the bt full shows some 0xdeadc0dedeadc0de in geom_io.c. db> where Tracing pid 29052 tid 100116 td 0xffffff005e4e2000 g_io_request() at g_io_request+0x89 g_vfs_strategy() at g_vfs_strategy+0x58 ffs_geom_strategy() at ffs_geom_strategy+0xdb bufwrite() at bufwrite+0x1af ffs_bufwrite() at ffs_bufwrite+0x308 ffs_sbupdate() at ffs_sbupdate+0x1ac ffs_mount() at ffs_mount+0xabb vfs_domount() at vfs_domount+0x5c2 vfs_donmount() at vfs_donmount+0x471 nmount() at nmount+0xad syscall() at syscall+0x31a Xfast_syscall() at Xfast_syscall+0xa8 --- syscall (378, FreeBSD ELF64, nmount), rip =3D 0x8006847bc, rsp =3D 0x7f= ffffffd278, rbp =3D 0x8020001b0 --- db> show msgbuf msgbufp =3D 0xffffffff80c20fe0 magic =3D 63062, size =3D 65504, r=3D 40099, w =3D 40509, ptr =3D 0xfffffff= f80c11000, cksum=3D 3107452 Fatal trap 9: general protection fault while in kernel mode cpuid =3D 0; apic id =3D 00 instruction pointer =3D 0x8:0xffffffff803dbbf9 stack pointer =3D 0x10:0xffffffffb4dfd560 frame pointer =3D 0x10:0xffffffffb4dfd5a0 code segment =3D base 0x0, limit 0xfffff, type 0x1b =3D DPL 0, pres 1, long 1, def32 0, gran 1 processor eflags =3D interrupt enabled, resume, IOPL =3D 0 current process =3D 29052 (mount) db> show alllocks Process 29052 (mount) thread 0xffffff005e4e2000 (100116) exclusive sleep mutex Giant r =3D 1 (0xffffffff808ef660) locked @ /local/bu= ilding/freebsd/HEAD/sys/kern/vfs_mount.c:610 0xffffffff803dbbf9 is in g_io_request (/local/building/freebsd/HEAD/sys/geo= m/geom_io.c:287). 282 KASSERT(bp->bio_data !=3D NULL, ("NULL bp->data in g_io_req= uest")); 283 pp =3D cp->provider; 284 KASSERT(pp !=3D NULL, ("consumer not attached in g_io_reque= st")); 285=20 286 if (bp->bio_cmd & (BIO_READ|BIO_WRITE|BIO_DELETE)) { 287 KASSERT(bp->bio_offset % cp->provider->sectorsize = =3D=3D 0, 288 ("wrong offset %jd for sectorsize %u", 289 bp->bio_offset, cp->provider->sectorsize)); 290 KASSERT(bp->bio_length % cp->provider->sectorsize = =3D=3D 0, 291 ("wrong length %jd for sectorsize %u", (kgdb) bt full #0 doadump () at pcpu.h:172 No locals. #1 0xffffffff801dcd11 in db_fncall (dummy1=3D0, dummy2=3D0, dummy3=3D0, du= mmy4=3D0x0) at /local/building/freebsd/HEAD/sys/ddb/db_command.c:489 =09fn_addr =3D -2143170480 =09args =3D {-2138227928, 120, -2138225600, 9, -1260400192, -2145523509, -2138947712, -2140041168, -2140041112, -2138227928} =09nargs =3D 0 =09retval =3D -1260400240 =09t =3D 0 #2 0xffffffff801dca60 in db_command (last_cmdp=3D0xffffffff808d3b28, cmd_table=3D0x0, aux_cmd_tablep=3D0xffffffff80719030, aux_cmd_tablep_end=3D0xffffffff80719068) at /local/building/freebsd/HEAD/sys/ddb/db_command.c:404 =09cmd =3D (struct command *) 0xffffffff808242c0 =09t =3D 0 =09modif =3D " =D2=DF=B4=FF=FF=FF=FF#Ic\200=FF=FF=FF=FF=F8\003\000\000\000= \000\000\000\r\000\000\000\000\000\000\000P=D2=DF=B4=FF=FF=FF=FFNKc\200=FF= =FF=FF=FF\f\000\017\003\v\000\000\000\001\000\000\000\000\000\000\000=C0{\2= 27\200=FF=FF=FF=FF@D\215\200=FF=FF=FF=FFp=D2=DF=B4=FF=FF=FF=FF=AC\037F\200= =FF=FF=FF=FFx\000\000\000\000\000\000\000x\000\000\000\000\000\000\000\200= =D2=DF=B4=FF=FF=FF=FF" =09addr =3D -1260400160 =09count =3D 1021 =09have_addr =3D 0 =09result =3D 0 #3 0xffffffff801dcb87 in db_command_loop () at /local/building/freebsd/HEAD/sys/ddb/db_command.c:455 No locals. #4 0xffffffff801ded9b in db_trap (type=3D-1260399904, code=3D0) at /local/building/freebsd/HEAD/sys/ddb/db_main.c:221 =09jb =3D {{_jb =3D {-1260399904, -1260399928, -1260399792, 0, 9, 1, 0, -2145522386, 9, 1, -1260399792, -2142999036}}} =09prev_jb =3D (void *) 0x0 =09bkpt =3D 0 #5 0xffffffff8043e11c in kdb_trap (type=3D9, code=3D0, tf=3D0xffffffffb4df= d4b0) at /local/building/freebsd/HEAD/sys/kern/subr_kdb.c:485 =09did_stop_cpus =3D 1 =09handled =3D -1260399440 #6 0xffffffff80610a4b in trap_fatal (frame=3D0xffffffffb4dfd4b0, eva=3D0) at /local/building/freebsd/HEAD/sys/amd64/amd64/trap.c:679 =09rflags =3D 514 =09code =3D 514 =09type =3D 9 =09ss =3D 514 =09esp =3D 0 =09softseg =3D {ssd_base =3D 0, ssd_limit =3D 1048575, ssd_type =3D 27, ssd_dpl =3D 0, ssd_p =3D 1, ssd_long =3D 1, ssd_def32 =3D 0, ssd_gran = =3D 1} =09msg =3D 0x0 #7 0xffffffff80610435 in trap (frame=3D {tf_rdi =3D -1097751339008, tf_rsi =3D -2401050962867404578, tf_rdx = =3D -1097929449472, tf_rcx =3D 0, tf_r8 =3D -2140324608, tf_r9 =3D 582, tf_= rax =3D 10240, tf_rbx =3D -1097751339008, tf_rbp =3D -1260399200, tf_r10 = =3D 68719476735, tf_r11 =3D -1097465537792, tf_r12 =3D -1098180438016, tf_r= 13 =3D -2401050962867404578, tf_r14 =3D -1613071048, tf_r15 =3D 0, tf_trapn= o =3D 9, tf_addr =3D 0, tf_flags =3D -1097365179744, tf_err =3D 0, tf_rip = =3D -2143437831, tf_cs =3D 8, tf_rflags =3D 66050, tf_rsp =3D -1260399248, = tf_ss =3D 16}) at /local/building/freebsd/HEAD/sys/amd64/amd64/trap.c:492 =09td =3D (struct thread *) 0xffffff005e4e2000 =09p =3D (struct proc *) 0xffffff0053194000 =09sticks =3D 4294967295 =09i =3D 0 =09ucode =3D 0 =09type =3D 9 =09code =3D 0 =09addr =3D -2138067680 =09ksi =3D {ksi_link =3D {tqe_next =3D 0xffffffff806e0580, tqe_prev =3D 0xffffffff808fad20}, ksi_info =3D {si_signo =3D -12603995= 68, si_errno =3D -1, si_code =3D -2143207168, si_pid =3D -1, si_uid =3D 21= 54694016, si_status =3D -1, si_addr =3D 0xffffff005e7ad0d0, si_value =3D { sival_int =3D -1260399456, sival_ptr =3D 0xffffffffb4dfd4a0}, _reaso= n =3D { _fault =3D {_trapno =3D -2142979170}, _timer =3D {_timerid =3D -2142= 979170, _overrun =3D -1}, _mesgq =3D {_mqd =3D -2142979170}, _poll =3D { _band =3D -2142979170}, __spare__ =3D {__spare1__ =3D -2142979170, __spare2__ =3D {-2140147168, -1, 1582178304, -256, -2138067680, -1= , 915}}}}, ksi_flags =3D 0, ksi_sigq =3D 0xffffffff808fad20} #8 0xffffffff805fc0eb in calltrap () at /local/building/freebsd/HEAD/sys/amd64/amd64/exception.S:168 No locals. #9 0xffffffff803dbbf9 in g_io_request (bp=3D0xffffff0068ebe000, cp=3D0xffffff004f585800) at /local/building/freebsd/HEAD/sys/geom/geom_io.c:287 =09pp =3D (struct g_provider *) 0xdeadc0dedeadc0de ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ #10 0xffffffff803df8d8 in g_vfs_strategy (bo=3D0xffffff0068ebe000, bp=3D0xffffffff9fda7d38) at /local/building/freebsd/HEAD/sys/geom/geom_vfs.c:106 =09cp =3D (struct g_consumer *) 0xffffff004f585800 =09bip =3D (struct bio *) 0xffffff0068ebe000 #11 0xffffffff805ba4bb in ffs_geom_strategy (bo=3D0xffffff005e7ad138, bp=3D0xffffffff9fda7d38) at /local/building/freebsd/HEAD/sys/ufs/ffs/ffs_vfsops.c:1743 =09vp =3D (struct vnode *) 0xffffff005e7ad000 =09error =3D 10240 #12 0xffffffff80477a0f in bufwrite (bp=3D0xffffffff9fda7d38) at buf.h:419 =09oldflags =3D 536870912 #13 0xffffffff805ba3d8 in ffs_bufwrite (bp=3D0xffffffff9fda7d38) at /local/building/freebsd/HEAD/sys/ufs/ffs/ffs_vfsops.c:1712 =09newbp =3D (struct buf *) 0xffffff006140e800 #14 0xffffffff805b9cbc in ffs_sbupdate (mp=3D0xffffff0001186600, waitfor=3D= 1) at buf.h:405 =09fs =3D (struct fs *) 0xffffff006140e800 =09sbbp =3D (struct buf *) 0xffffffff9fea7570 =09bp =3D (struct buf *) 0xffffffff9fda7d38 =09blks =3D 5 =09space =3D (void *) 0xffffffff86fa1800 =09i =3D 0 =09size =3D 10240 =09error =3D 10240 =09allerror =3D 0 #15 0xffffffff805b741b in ffs_mount (mp=3D0xffffff0000fb7c00, td=3D0xffffff005e4e2000) at /local/building/freebsd/HEAD/sys/ufs/ffs/ffs_vfsops.c:304 =09devvp =3D (struct vnode *) 0xffffff005e7ad000 =09ump =3D (struct ufsmount *) 0xffffff0001186600 =09fs =3D (struct fs *) 0xffffff006140e800 =09error =3D 0 =09flags =3D -559038242 =09accessmode =3D 8192 =09ndp =3D {ni_dirp =3D 0xffffff007ff0ee00 "\035=B3m\200=FF=FF=FF=FF\020= =D0=F0\177", ni_segflg =3D 2146488320, ni_startdir =3D 0xffffffffb4dfd820, ni_rootdir =3D 0xffffffff805cea98, ni_topdir =3D 0xffffff0007e7ee08, ni_vp =3D 0x40, ni_dvp =3D 0xffffffffb4dfd820, ni_pathlen =3D 18446744071566332830, ni_next =3D 0x40
, ni_loopcnt =3D 18446742974330563136, ni_cnd =3D { cn_nameiop =3D 18446744072449153104, cn_flags =3D 18446744071566333463= , cn_thread =3D 0xffffffffb4dfd870, cn_cred =3D 0xffffff0007e7ea40, cn_lkflags =3D 2058786432, cn_pnbuf =3D 0xffffff006e675510 "@:=DAa", cn_nameptr =3D 0xffffffffb4dfd870 "=A0=D8=DF=B4=FF=FF=FF=FF", cn_namel= en =3D -2142748113, cn_consume =3D -1099495146496}} =09export =3D {ex_flags =3D 128, ex_root =3D 4294967294, ex_anon =3D { cr_version =3D 2151988126, cr_uid =3D 4294967295, cr_ngroups =3D -1038= 4, cr_groups =3D {4294967295, 2151986960, 4294967295, 2156965056, 4294967= 295, 1582178304, 4294967040, 3034568624, 4294967295, 582, 0, 2156962560, 4294967295, 2146488336, 4294967040, 2273}, _cr_unused1 =3D 0xffffffff806ff010}, ex_addr =3D 0x0, ex_addrlen =3D 6= 4 '@', ex_mask =3D 0xffffffffb4dfd7e0, ex_masklen =3D 244 '=F4', ex_indexfile =3D 0x40
} =09fspec =3D 0xffffff00673312e0 "/dev/ad8s4d" #16 0xffffffff804858a2 in vfs_domount (td=3D0xffffff005e4e2000, fstype=3D0xffffff0000fb7c00 "", fspath=3D0xffffff00795ec300 "/shared", fsflags=3D65536, fsdata=3D0xffffff006e675510) at /local/building/freebsd/HEAD/sys/kern/vfs_mount.c:858 =09vp =3D (struct vnode *) 0xffffff0061a581d8 =09mp =3D (struct mount *) 0xffffff0000fb7c00 =09vfsp =3D (struct vfsconf *) 0xffffff0000fb7c00 =09error =3D 0 =09flag =3D 4097 =09kern_flag =3D 536870912 =09va =3D {va_type =3D 3034569216, va_mode =3D 65535, va_nlink =3D -1, va_uid =3D 2153569984, va_gid =3D 4294967295, va_fsid =3D 3034569216, va_fileid =3D -2143218894, va_size =3D 18446744072449153536, va_blocksize =3D -2142980336, va_atime =3D {tv_sec =3D -1260398064, tv_nsec =3D -2138114464}, va_mtime =3D {tv_sec =3D -1260397968, tv_nsec =3D -2142979682}, va_ctime =3D {tv_sec =3D -1260398032, tv_nsec =3D -2142980336}, va_birthtime =3D {tv_sec =3D 0, tv_nsec =3D -2138114464}, va_gen =3D 18446744072449153648, va_flags =3D 18446744071566573616, va_rdev =3D 2156965056, va_bytes =3D 18446744071571437152, va_filerev =3D 610, va_vaflags =3D 0, va_spare =3D -2140275640} =09nd =3D {ni_dirp =3D 0xffffff00795ec300 "/shared", ni_segflg =3D UIO_SYSSPACE, ni_startdir =3D 0x0, ni_rootdir =3D 0xffffff00277bd3b0, ni_topdir =3D 0x0, ni_vp =3D 0xffffff0061a581d8, ni_dvp =3D 0xffffff00277bd3b0, ni_pathlen = =3D 1, ni_next =3D 0xffffff002ec9a807 "", ni_loopcnt =3D 0, ni_cnd =3D {cn_name= iop =3D 0, cn_flags =3D 49220, cn_thread =3D 0xffffff005e4e2000, cn_cred =3D 0xffffff0034726700, cn_lkflags =3D 2, cn_pnbuf =3D 0xffffff002ec9a800 "/shared", cn_nameptr =3D 0xffffff002ec9a801 "shared", cn_namelen =3D 6, cn_consu= me =3D 0}} =09__func__ =3D "vfs_domount" #17 0xffffffff80485071 in vfs_donmount (td=3D0xffffff005e4e2000, fsflags=3D= 65536, fsoptions=3D0xffffff0013df2300) at /local/building/freebsd/HEAD/sys/kern/vfs_mount.c:611 =09optlist =3D (struct vfsoptlist *) 0xffffff006e675510 =09fstype =3D 0xffffff0067331340 "ufs" =09fspath =3D 0xffffff00795ec300 "/shared" =09errmsg =3D 0xffffffffb4dfdb10 "P=DB=DF=B4=FF=FF=FF=FF\rHH\200=FF=FF=FF= =FFP=DB=DF=B4=FF=FF=FF=FF" =09error =3D 0 =09fstypelen =3D 4 =09fspathlen =3D 8 =09errmsg_len =3D 0 =09errmsg_pos =3D -1 #18 0xffffffff8048480d in nmount (td=3D0xffffff005e4e2000, uap=3D0xffffffffb4dfdc00) at /local/building/freebsd/HEAD/sys/kern/vfs_mount.c:397 =09auio =3D (struct uio *) 0xffffff0013df2300 =09iov =3D (struct iovec *) 0x2800 =09i =3D 1582178304 =09error =3D 6 =09iovcnt =3D 10 #19 0xffffffff80610e2a in syscall (frame=3D {tf_rdi =3D 34393294144, tf_rsi =3D 10, tf_rdx =3D 0, tf_rcx =3D 343= 93293232, tf_r8 =3D 34389085472, tf_r9 =3D -6510615555426900571, tf_rax =3D= 378, tf_rbx =3D 140737488343728, tf_rbp =3D 34393293232, tf_r10 =3D 44, tf= _r11 =3D 34393293392, tf_r12 =3D 140737488343696, tf_r13 =3D 34410068360, t= f_r14 =3D 140737488345936, tf_r15 =3D 140737488344912, tf_trapno =3D 12, tf= _addr =3D 34368322704, tf_flags =3D 0, tf_err =3D 2, tf_rip =3D 34366572476= , tf_cs =3D 43, tf_rflags =3D 518, tf_rsp =3D 140737488343672, tf_ss =3D 35= }) at /local/building/freebsd/HEAD/sys/amd64/amd64/trap.c:818 =09params =3D 0x7fffffffd280
=09callp =3D (struct sysent *) 0xffffffff8088e3f0 =09td =3D (struct thread *) 0xffffff005e4e2000 =09p =3D (struct proc *) 0xffffff0053194000 =09orig_tf_rflags =3D 518 =09sticks =3D 0 =09error =3D 0 =09narg =3D 3 =09args =3D {34393294144, 10, 0, 34393293232, 34389085472, -6510615555426900571, 0, -2137391616} =09argp =3D (register_t *) 0xffffffffb4dfdc00 =09code =3D 378 =09reg =3D -1260397568 =09regcnt =3D 6 =09ksi =3D {ksi_link =3D {tqe_next =3D 0x0, tqe_prev =3D 0x0}, ksi_info = =3D { si_signo =3D -1260397456, si_errno =3D -1, si_code =3D -2141125424, si_pid =3D -1, si_uid =3D 3034569664, si_status =3D -1, si_addr =3D 0x= 80082fc90, si_value =3D {sival_int =3D -2138111104, sival_ptr =3D 0x808f0380}, _r= eason =3D { _fault =3D {_trapno =3D 1394163712}, _timer =3D {_timerid =3D 139416= 3712, _overrun =3D -256}, _mesgq =3D {_mqd =3D 1394163712}, _poll =3D { _band =3D -1098117464064}, __spare__ =3D {__spare1__ =3D -10981174= 64064, __spare2__ =3D {2, 0, -2138111104, -1, -1260397568, -1, 70}}}}, ksi_flags =3D 1, ksi_sigq =3D 0xffffffff808f0380} #20 0xffffffff805fc288 in Xfast_syscall () at /local/building/freebsd/HEAD/sys/amd64/amd64/exception.S:270 No locals. #21 0x00000008006847bc in ?? () No symbol table info available. (kgdb) --=20 Bjoern A. Zeeb=09=09=09=09bzeeb at Zabbadoz dot NeT --0-939258737-1138462926=:24703--