From owner-freebsd-bugs@FreeBSD.ORG Wed Feb 13 15:50:03 2008 Return-Path: Delivered-To: freebsd-bugs@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 02D4B16A417 for ; Wed, 13 Feb 2008 15:50:03 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id EF1ED13C4E3 for ; Wed, 13 Feb 2008 15:50:02 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.2/8.14.2) with ESMTP id m1DFo2wB072964 for ; Wed, 13 Feb 2008 15:50:02 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.2/8.14.1/Submit) id m1DFo2jD072963; Wed, 13 Feb 2008 15:50:02 GMT (envelope-from gnats) Date: Wed, 13 Feb 2008 15:50:02 GMT Message-Id: <200802131550.m1DFo2jD072963@freefall.freebsd.org> To: freebsd-bugs@FreeBSD.org From: Josh Paetzel Cc: Subject: Re: kern/120615: hptrr on 6.3-RELEASE/i386 causes filesystem damage and panics X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Josh Paetzel List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Feb 2008 15:50:03 -0000 The following reply was made to PR kern/120615; it has been noted by GNATS. From: Josh Paetzel To: bug-followup@freebsd.org Cc: Subject: Re: kern/120615: hptrr on 6.3-RELEASE/i386 causes filesystem damage and panics Date: Wed, 13 Feb 2008 09:44:03 +0000 --nextPart5991187.o7z4ISJD9s Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Content-Disposition: inline =2D- Unread portion of the kernel message buffer: mode =3D 0100400, inum =3D 49603, fs =3D /var panic: ffs_valloc: dup alloc cpuid =3D 1 Uptime: 10m1s Dumping 2029 MB (6 chunks) chunk 0: 1MB (152 pages) ... ok chunk 1: 2029MB (519200 pages) 2013 1997 1981 1965 1949 1933 1917 1901 18= 85=20 1869 1853 1837 1821 1805 1789 1773 1757 1741 1725 1709 1693 1677 1661 1645= =20 1629 1613 1597 1581 1565 1549 1533 1517 1501 1485 1469 1453 1437 1421 1405= =20 1389 1373 1357 1341 1325 1309 1293 1277 1261 1245 1229 1213 1197 1181 1165= =20 1149 1133 1117 1101 1085 1069 1053 1037 1021 1005 989 973 957 941 925 909 8= 93=20 877 861 845 829 813 797 781 765 749 733 717 701 685 669 653 637 621 605 589= =20 573 557 541 525 509 493 477 461 445 429 413 397 381 365 349 333 317 301 285= =20 269 253 237 221 205 189 173 157 141 125 109 93 77 61 45 29 13 ... ok chunk 2: 2MB (278 pages) #0 doadump () at pcpu.h:165 165 __asm __volatile("movl %%fs:0,%0" : "=3Dr" (td)); (kgdb) bt #0 doadump () at pcpu.h:165 #1 0xc04fcd0a in boot (howto=3D260) at /usr/src/sys/kern/kern_shutdown.c:4= 09 #2 0xc04fd031 in panic (fmt=3D0xc06fc30a "ffs_valloc: dup alloc") at /usr/src/sys/kern/kern_shutdown.c:565 #3 0xc05f82c4 in ffs_valloc (pvp=3D0xc6f22990, mode=3D33024, cred=3D0xc848= be00, vpp=3D0xec0598cc) at /usr/src/sys/ufs/ffs/ffs_alloc.c:965 #4 0xc0621847 in ufs_makeinode (mode=3D33024, dvp=3D0xc6f22990, vpp=3D0xec= 059be0, cnp=3D0xec059bf4) at /usr/src/sys/ufs/ufs/ufs_vnops.c:2214 #5 0xc061e8bd in ufs_create (ap=3D0x0) at /usr/src/sys/ufs/ufs/ufs_vnops.c= :183 #6 0xc06d409c in VOP_CREATE_APV (vop=3D0x0, a=3D0xec059a5c) at vnode_if.c:= 204 #7 0xc0563f1c in vn_open_cred (ndp=3D0xec059bcc, flagp=3D0xec059ccc, cmode= =3D256, cred=3D0xc848be00, fdidx=3D4) at vnode_if.h:111 #8 0xc0563d56 in vn_open (ndp=3D0x0, flagp=3D0xec059ccc, cmode=3D256, fdid= x=3D4) at /usr/src/sys/kern/vfs_vnops.c:91 #9 0xc055c8ae in kern_open (td=3D0xc7db8a80, path=3D0x0, pathseg=3DUIO_USE= RSPACE, flags=3D1539, mode=3D438) at /usr/src/sys/kern/vfs_syscalls.c:1016 #10 0xc055c5e6 in open (td=3D0xc7db8a80, uap=3D0xec059d04) at /usr/src/sys/kern/vfs_syscalls.c:971 #11 0xc06c2bcb in syscall (frame=3D {tf_fs =3D 672530491, tf_es =3D 134479931, tf_ds =3D -1078001605, tf_= edi =3D=20 671423368, tf_esi =3D -1077940628, tf_ebp =3D -1077940728, tf_isp =3D -3351= 76348,=20 tf_ebx =3D 5, tf_edx =3D 134541315, tf_ecx =3D 0, tf_eax =3D 5, tf_trapno = =3D 12,=20 tf_err =3D 2, tf_eip =3D 672332743, tf_cs =3D 51, tf_eflags =3D 514, tf_esp= =20 =3D -1077940804, tf_ss =3D 59}) at /usr/src/sys/i386/i386/trap.c:984 #12 0xc06ada3f in Xint0x80_syscall ()=20 at /usr/src/sys/i386/i386/exception.s:200 #13 0x00000033 in ?? () Previous frame inner to this frame (corrupt stack?) That's the limit of my debugging skills, more than willing to follow=20 instructions or provide remote access. Thanks, Josh Paetzel PGP: 8A48 EF36 5E9F 4EDA 5A8C 11B4 26F9 01F1 27AF AECB --nextPart5991187.o7z4ISJD9s Content-Type: application/pgp-signature; name=signature.asc Content-Description: This is a digitally signed message part. -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.4 (FreeBSD) iD8DBQBHsrvoJvkB8SevrssRAg/mAJ4l4sHXfscBmFCVWaX/qoMIYcEa9wCeOdca jeHlCBS0A/UI5XEAjpcON64= =Mqy3 -----END PGP SIGNATURE----- --nextPart5991187.o7z4ISJD9s--