From owner-freebsd-fs@FreeBSD.ORG Wed Nov 9 11:12:01 2011 Return-Path: Delivered-To: freebsd-fs@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 22DC31065686 for ; Wed, 9 Nov 2011 11:12:01 +0000 (UTC) (envelope-from lists@yamagi.org) Received: from mail.yamagi.org (yamagi.overkill.yamagi.org [178.63.70.121]) by mx1.freebsd.org (Postfix) with ESMTP id 8AE588FC18 for ; Wed, 9 Nov 2011 11:11:53 +0000 (UTC) Received: from happy.home.yamagi.org (unknown [IPv6:2001:5c0:150f:8700:16da:e9ff:fe0f:8071]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mail.yamagi.overkill.yamagi.org (Postfix) with ESMTPSA id 80FC61666333 for ; Wed, 9 Nov 2011 09:47:51 +0100 (CET) Date: Wed, 9 Nov 2011 09:47:44 +0100 From: Yamagi Burmeister To: freebsd-fs@freebsd.org Message-Id: <20111109094744.f7f11220.lists@yamagi.org> X-Mailer: Sylpheed 3.1.2 (GTK+ 2.24.6; amd64-portbld-freebsd8.2) Mime-Version: 1.0 Content-Type: multipart/signed; protocol="application/pgp-signature"; micalg="PGP-SHA1"; boundary="Signature=_Wed__9_Nov_2011_09_47_44_+0100_2O.Gub+MXpHyCqtb" Subject: Panic with SU+J and snapshots on RELENG_9 from november 7 X-BeenThere: freebsd-fs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Filesystems List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Nov 2011 11:12:01 -0000 --Signature=_Wed__9_Nov_2011_09_47_44_+0100_2O.Gub+MXpHyCqtb Content-Type: text/plain; charset=US-ASCII Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Hi, on RELENG_9 built at november 7 it's easy to panic the box by creating snapshots on an SU+J enabled UFS2 file system when there's some load=20 on the filesystem.=20 ---- To reproduce: % mount /dev/ada0p2 on / (ufs, local, journaled soft-updates) # create some load % cp -r /usr/src /tmp # Switch to another tty and create a snapshot % mksnap_ffs / /.snap/foo1 Repeat this until the box crashes. ---- Some information: root@vbox:pts/0 /crash> kgdb /boot/kernel/kernel vmcore.0 GNU gdb 6.1.1 [FreeBSD] Copyright 2004 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "amd64-marcel-freebsd"... Unread portion of the kernel message buffer: panic: snapacct_ufs2: bad block cpuid =3D 0 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0x2a kdb_backtrace() at kdb_backtrace+0x37 panic() at panic+0x187 snapacct_ufs2() at snapacct_ufs2+0x14c indiracct_ufs2() at indiracct_ufs2+0x2d5 indiracct_ufs2() at indiracct_ufs2+0x28a expunge_ufs2() at expunge_ufs2+0x361 ffs_snapshot() at ffs_snapshot+0xe78 ffs_mount() at ffs_mount+0xa24 vfs_donmount() at vfs_donmount+0xddc sys_nmount() at sys_nmount+0x63 amd64_syscall() at amd64_syscall+0x3ac Xfast_syscall() at Xfast_syscall+0xf7 --- syscall (378, FreeBSD ELF64, sys_nmount), rip =3D 0x8008a1ecc, rsp =3D 0x7fffffffd398, rbp =3D 0x7fffffffddf5 --- KDB: enter: panic Dumping 211 out of 2027 MB:..8%..16%..23%..31%..46%..53%..61%..76%..84%..91% Reading symbols from /boot/kernel/vesa.ko...Reading symbols from /boot/kernel/vesa.ko.symbols...done. done. Loaded symbols for /boot/kernel/vesa.ko #0 doadump (textdump=3D2077113264) at /usr/src/sys/kern/kern_shutdown.c:260 260 if (textdump && textdump_pending) { (kgdb) bt #0 doadump (textdump=3D2077113264) at /usr/src/sys/kern/kern_shutdown.c:260 #1 0xffffffff802f95ec in db_fncall (dummy1=3DVariable "dummy1" is not avai= lable. ) at /usr/src/sys/ddb/db_command.c:572 #2 0xffffffff802f9921 in db_command (last_cmdp=3D0xffffffff810ec5c0, cmd_t= able=3DVariable "cmd_table" is not available. ) at /usr/src/sys/ddb/db_command.c:448 #3 0xffffffff802f9b70 in db_command_loop () at /usr/src/sys/ddb/db_command= .c:501 #4 0xffffffff802fbcc9 in db_trap (type=3DVariable "type" is not available. ) at /usr/src/sys/ddb/db_main.c:229 #5 0xffffffff8085b6f1 in kdb_trap (type=3D3, code=3D0, tf=3D0xffffff807bce= 3de0) at /usr/src/sys/kern/subr_kdb.c:620 #6 0xffffffff80b0e756 in trap (frame=3D0xffffff807bce3de0) at /usr/src/sys= /amd64/amd64/trap.c:590 #7 0xffffffff80af8bef in calltrap () at /usr/src/sys/amd64/amd64/exception= .S:228 #8 0xffffffff8085b49b in kdb_enter (why=3D0xffffffff80d2695b "panic", msg= =3D0x80
) at cpufunc.h:63 #9 0xffffffff80825f20 in panic (fmt=3DVariable "fmt" is not available. ) at /usr/src/sys/kern/kern_shutdown.c:599 #10 0xffffffff80a3785c in snapacct_ufs2 (vp=3DVariable "vp" is not availabl= e. ) at /usr/src/sys/ufs/ffs/ffs_snapshot.c:1499 #11 0xffffffff80a37025 in indiracct_ufs2 (snapvp=3D0xfffffe0065a36780, canc= elvp=3D0xfffffe0002930000, level=3D0, blkno=3DVariable "blkno" is not avail= able. ) at /usr/src/sys/ufs/ffs/ffs_snapshot.c:1414 #12 0xffffffff80a36fda in indiracct_ufs2 (snapvp=3D0xfffffe0065a36780, canc= elvp=3D0xfffffe0002930000, level=3D0, blkno=3DVariable "blkno" is not avail= able. ) at /usr/src/sys/ufs/ffs/ffs_snapshot.c:1424 #13 0xffffffff80a37c41 in expunge_ufs2 (snapvp=3D0xfffffe0065a36780, cancel= ip=3D0xfffffe000292adc8, fs=3D0xfffffe00028a9000,=20 acctfunc=3D0xffffffff80a37710 , expungetype=3D2, clearmode=3DVariable "clearmode" is not available. ) at /usr/src/sys/ufs/ffs/ffs_snapshot.c:1346 #14 0xffffffff80a3a6e8 in ffs_snapshot (mp=3D0xfffffe000289dc00, snapfile= =3DVariable "snapfile" is not available. ) at /usr/src/sys/ufs/ffs/ffs_snapshot.c:712 #15 0xffffffff80a55784 in ffs_mount (mp=3D0xfffffe000289dc00) at /usr/src/s= ys/ufs/ffs/ffs_vfsops.c:474 #16 0xffffffff808b89bc in vfs_donmount (td=3DVariable "td" is not available. ) at /usr/src/sys/kern/vfs_mount.c:925 #17 0xffffffff808b9223 in sys_nmount (td=3D0xfffffe0002c22000, uap=3D0xffff= ff807bce4bc0) at /usr/src/sys/kern/vfs_mount.c:410 #18 0xffffffff80b0dacc in amd64_syscall (td=3D0xfffffe0002c22000, traced=3D= 0) at subr_syscall.c:131 #19 0xffffffff80af8ed7 in Xfast_syscall () at /usr/src/sys/amd64/amd64/exce= ption.S:387 #20 0x00000008008a1ecc in ?? () Previous frame inner to this frame (corrupt stack?) (kgdb) frame 10 #10 0xffffffff80a3785c in snapacct_ufs2 (vp=3DVariable "vp" is not availabl= e. ) at /usr/src/sys/ufs/ffs/ffs_snapshot.c:1499 1499 panic("snapacct_ufs2: bad block"); (kgdb) list 1494 if (expungetype =3D=3D BLK_SNAP && *blkp =3D=3D BLK_NOCOPY) { 1495 if (lbn >=3D NDADDR) 1496 brelse(ibp); 1497 } else { 1498 if (*blkp !=3D 0) 1499 panic("snapacct_ufs2: bad block"); 1500 *blkp =3D expungetype; 1501 if (lbn >=3D NDADDR) 1502 bdwrite(ibp); 1503 } ---- A screenshot of the panic can be found here: http://deponie.yamagi.org/freebsd/snapshots_panic/panic2.png I still have the core so further information can be provided, if necessary. Thanks, Yamagi --=20 Homepage: www.yamagi.org XMPP: yamagi@yamagi.org GnuPG/GPG: 0xEFBCCBCB --Signature=_Wed__9_Nov_2011_09_47_44_+0100_2O.Gub+MXpHyCqtb Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.18 (FreeBSD) iEYEARECAAYFAk66PjUACgkQWTjlg++8y8v9wgCeOW5r9s76XerKaHDsUHsZjXRn M0oAn28eOpKVWD4BLCuQ5XpZO8sNcqLp =dFWi -----END PGP SIGNATURE----- --Signature=_Wed__9_Nov_2011_09_47_44_+0100_2O.Gub+MXpHyCqtb--