Date: Wed, 27 Apr 2005 17:09:04 -0700 From: Kris Kennaway <kris@obsecurity.org> To: Kris Kennaway <kris@obsecurity.org> Cc: current@FreeBSD.org Subject: Re: panic in ufs_remove() on 6.0 Message-ID: <20050428000904.GA4396@xor.obsecurity.org> In-Reply-To: <20050427211113.GA55317@xor.obsecurity.org> References: <20050427211113.GA55317@xor.obsecurity.org>
next in thread | previous in thread | raw e-mail | index | archive | help
--pWyiEgJYm5f9v55/ Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Wed, Apr 27, 2005 at 02:11:14PM -0700, Kris Kennaway wrote: > Actually, my last message was not from the e4500 but another SMP > sparc64 running 6.0. Here's the panic from the e4500 overnight. > Unfortunately no ktr is available but I have a dump. >=20 > panic: trap: fast data access mmu miss > cpuid =3D 10 > KDB: enter: panic > [thread pid 64968 tid 100313 ] > Stopped at kdb_enter+0x3c: ta %xcc, 1 > db> wh > Tracing pid 64968 tid 100313 td 0xfffff800e70f3c80 > panic() at panic+0x16c > trap() at trap+0x3f0 > -- fast data access mmu miss tar=3D0 %o7=3D0xc0162240 -- > ufs_remove() at ufs_remove+0xc > VOP_REMOVE_APV() at VOP_REMOVE_APV+0xb4 > kern_unlink() at kern_unlink+0x174 > unlink() at unlink+0xc > syscall() at syscall+0x2b4 > -- syscall (10, FreeBSD ELF64, unlink) %o7=3D0x101998 -- #9 0x00000000c016bc0c in panic (fmt=3D0xc03bc778 "trap: %s") at /usr/src.6= /sys/kern/kern_shutdown.c:537 #10 0x00000000c02f1450 in trap (tf=3D0xf7b9b1c0) at /usr/src.6/sys/sparc64/= sparc64/trap.c:369 #11 0x00000000c02b070c in ufs_remove (ap=3D0xfffff800220a6c78) at /usr/src.= 6/sys/ufs/ufs/ufs_vnops.c:757 #12 0x00000000c0162240 in _mtx_unlock_flags (m=3D0xf7b9b500, opts=3D-106991= 5136, file=3D0xc03a7030 "/usr/src.6/sys/kern/vfs_vnops.c", line=3D919) at /us= r/src.6/sys/kern/kern_mutex.c:299 #13 0x00000000c02f3fb4 in VOP_REMOVE_APV (vop=3D0xc03fcf40, a=3D0xf7b9b500)= at vnode_if.c:1074 #14 0x00000000c01d9c54 in kern_unlink (td=3D0xfffff800e70f3c80, path=3D---C= an't read userspace from dump, or kernel process--- ) at vnode_if.h:563 #15 0x00000000c01d9acc in unlink (td=3D0xfffff800e70f3c80, uap=3D0xf7b9b8c0) at /usr/src.6/sys/kern/vfs_syscalls.c:1622 (kgdb) frame 11 #11 0x00000000c02b070c in ufs_remove (ap=3D0xfffff800220a6c78) at /usr/src.= 6/sys/ufs/ufs/ufs_vnops.c:757 757 ip =3D VTOI(vp); (kgdb) print *vp $2 =3D {v_type =3D 4294965248, v_tag =3D 0xfffff8013e7490a0 "[binary data d= eleted - KK]", v_op =3D 0x0, v_data =3D 0x0,=20 v_mount =3D 0xf7b9b980, v_nmntvnodes =3D {tqe_next =3D 0x61ef, tqe_prev = =3D 0x54450ffc704ddc62}, v_un =3D { vu_mount =3D 0x17e9f910000000a, vu_socket =3D 0x17e9f910000000a, vu_cde= v =3D 0x17e9f910000000a,=20 vu_fifoinfo =3D 0x17e9f910000000a}, v_hashlist =3D {le_next =3D 0x40000= 000bff, le_prev =3D 0xea5cda90}, v_hash =3D 0,=20 v_cache_src =3D {lh_first =3D 0x0}, v_cache_dst =3D {tqh_first =3D 0x0, t= qh_last =3D 0x0}, v_dd =3D 0x0,=20 v_cstart =3D 3931962088, v_lasta =3D 0, v_lastw =3D 0, v_clen =3D 0, v_lo= ck =3D {lk_interlock =3D 0xea5cfb08,=20 lk_flags =3D 0, lk_sharecount =3D 0, lk_waitcount =3D 0, lk_exclusiveco= unt =3D 0, lk_prio =3D 0, lk_wmesg =3D 0x0,=20 lk_timo =3D 0, lk_lockholder =3D 0x0, lk_newlock =3D 0x0}, v_interlock = =3D {mtx_object =3D {lo_class =3D 0x0,=20 lo_name =3D 0xea5cfb48 "", lo_type =3D 0x0, lo_flags =3D 0, lo_list = =3D {tqe_next =3D 0x0, tqe_prev =3D 0xea5cfb68},=20 lo_witness =3D 0x0}, mtx_lock =3D 0, mtx_recurse =3D 0, mtx_acqtime = =3D 3931962248, mtx_filename =3D 0x0,=20 mtx_lineno =3D 0, mtx_contest_holding =3D 0, mtx_contest_locking =3D 0}= , v_vnlock =3D 0xea5cfba8, v_holdcnt =3D 0,=20 v_usecount =3D 0, v_vxthread =3D 0x0, v_iflag =3D 0, v_vflag =3D 39319623= 12, v_writecount =3D 0, v_freelist =3D { tqe_next =3D 0x0, tqe_prev =3D 0x0}, v_bufobj =3D {bo_mtx =3D 0xea5cfbe= 8, bo_clean =3D {bv_hd =3D {tqh_first =3D 0x0,=20 tqh_last =3D 0x0}, bv_root =3D 0x0, bv_cnt =3D 0}, bo_dirty =3D {bv= _hd =3D {tqh_first =3D 0x0, tqh_last =3D 0x0},=20 bv_root =3D 0x0, bv_cnt =3D 0}, bo_numoutput =3D 0, bo_flag =3D 0, bo= _ops =3D 0x0, bo_bsize =3D 0, bo_object =3D 0x0,=20 bo_synclist =3D {le_next =3D 0x0, le_prev =3D 0x0}, bo_private =3D 0xea= 5cfc68, __bo_vnode =3D 0x0}, v_pollinfo =3D 0x0,=20 v_label =3D 0x0} (kgdb) frame 12 #12 0x00000000c0162240 in _mtx_unlock_flags (m=3D0xf7b9b500, opts=3D-106991= 5136, file=3D0xc03a7030 "/usr/src.6/sys/kern/vfs_vnops.c", line=3D919) at /us= r/src.6/sys/kern/kern_mutex.c:299 299 mtx_assert(m, MA_OWNED); (kgdb) frame 13 #13 0x00000000c02f3fb4 in VOP_REMOVE_APV (vop=3D0xc03fcf40, a=3D0xf7b9b500)= at vnode_if.c:1074 1074 if (vop->vop_remove !=3D NULL) (kgdb) frame 14 #14 0x00000000c01d9c54 in kern_unlink (td=3D0xfffff800e70f3c80, path=3D---C= an't read userspace from dump, or kernel process--- ) at vnode_if.h:563 563 vnode_if.h: No such file or directory. in vnode_if.h (kgdb) --pWyiEgJYm5f9v55/ Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (FreeBSD) iD8DBQFCcCmfWry0BWjoQKURAsK+AJ9IPTzV/HmSaxcfJ5PM8IaNPDj2vQCfXXUY /n/KCim/6BtdY1FuWdXxTC4= =WNsC -----END PGP SIGNATURE----- --pWyiEgJYm5f9v55/--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050428000904.GA4396>