From owner-freebsd-hackers@freebsd.org Wed Dec 14 16:38:16 2016 Return-Path: Delivered-To: freebsd-hackers@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 90876C80896 for ; Wed, 14 Dec 2016 16:38:16 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from smtp.infracaninophile.co.uk (smtp.infracaninophile.co.uk [81.2.117.100]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "smtp.infracaninophile.co.uk", Issuer "infracaninophile.co.uk" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 371041F7B for ; Wed, 14 Dec 2016 16:38:16 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from host-4-75.office.adestra.com (unknown [85.199.232.226]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: m.seaman@infracaninophile.co.uk) by smtp.infracaninophile.co.uk (Postfix) with ESMTPSA id E05E27BBE for ; Wed, 14 Dec 2016 16:38:08 +0000 (UTC) Authentication-Results: smtp.infracaninophile.co.uk; dmarc=none header.from=FreeBSD.org Authentication-Results: smtp.infracaninophile.co.uk/E05E27BBE; dkim=none; dkim-atps=neutral Subject: Re: ZFS - directory entry To: freebsd-hackers@freebsd.org References: From: Matthew Seaman Message-ID: <08cf61a1-d1ff-66e9-81e7-371bb47eec34@FreeBSD.org> Date: Wed, 14 Dec 2016 16:38:01 +0000 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:45.0) Gecko/20100101 Thunderbird/45.5.1 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="COjCLCtdVp4jrOpsl240HElpCKFDuVJmC" X-Spam-Status: No, score=0.9 required=5.0 tests=BAYES_00,RCVD_IN_RP_RNBL, RDNS_NONE,SPF_SOFTFAIL autolearn=no autolearn_force=no version=3.4.1 X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on smtp.infracaninophile.co.uk X-BeenThere: freebsd-hackers@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: Technical Discussions relating to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Dec 2016 16:38:16 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --COjCLCtdVp4jrOpsl240HElpCKFDuVJmC Content-Type: multipart/mixed; boundary="WVX3CJwwNL5Lgqw5HAEm83cljO1aX9LhG"; protected-headers="v1" From: Matthew Seaman To: freebsd-hackers@freebsd.org Message-ID: <08cf61a1-d1ff-66e9-81e7-371bb47eec34@FreeBSD.org> Subject: Re: ZFS - directory entry References: In-Reply-To: --WVX3CJwwNL5Lgqw5HAEm83cljO1aX9LhG Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable On 2016/12/14 16:14, Alan Somers wrote: > On Wed, Dec 14, 2016 at 8:27 AM, Dirk-Willem van Gulik > wrote: >> A rather odd directory entry (in /root, the home dir of root/toor) app= eared on a bog standard FreeBSD 10.2 (p18) lightly loaded machine under Z= FS during/post a backup: >> >> $ ls -la /root | tail -q >> ---------- 1 root wheel 9223372036854775807 Jan 1 1970 ?%+?kD?H?= ??x,?5?Dh;*s!?h???jw??????\h?:????????``?13?@?????OA????????Puux????> >> OS and ZFS is installed with a bog standard sysinstall. =E2=80=98SMART= =E2=80=99 nor smartd have reported anything. nothing in dmesg, syslog of = boot log. Any suggestions as how to debug or get to the root of this ? >> >> And in particular - what is a risk of a reboot (to get a kernel with d= ebug, etc) causing the issue to =E2=80=98go away=E2=80=99 - and hence sto= pping the forensic ? >> >> Dw. >> >> sudo zpool list -v >> NAME SIZE ALLOC FREE EXPANDSZ FRAG CAP DEDUP HEALTH= ALTROOT >> tank 25.2T 9.27T 16.0T - 17% 36% 1.53x ONLINE= - >> raidz3 25.2T 9.27T 16.0T - 17% 36% >> ada0p3 - - - - - - >> ada1p3 - - - - - - >> ada2p3 - - - - - - >> ada3p3 - - - - - - >> ada4p3 - - - - - - >> ada5p3 - - - - - - >> ada6p3 - - - - - - >=20 > Two things to try: > 1) zpool scrub. This will reveal any corrupt metadata objects > 2) Maybe the filename is created in an encoding not supported by your > current terminal. Try "LANG=3Den_US.UTF-8 ls -l" > 3) Use zdb to examine the file. First, do "ls -li /root" to get the > object id. It's the same as the inode number. Then, assuming /root > is in the tank/root filesystem, do "zdb -ddddd tank/root ". > That might reveal some clues. >=20 That file size is one less than 8192 PiB or 0x7fffffffffffffff bytes. That would be pretty impressive, if it was real. Cheers, Matthew --WVX3CJwwNL5Lgqw5HAEm83cljO1aX9LhG-- --COjCLCtdVp4jrOpsl240HElpCKFDuVJmC Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQJ8BAEBCgBmBQJYUXVvXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQxOUYxNTRFQ0JGMTEyRTUwNTQ0RTNGMzAw MDUxM0YxMEUwQTlFNEU3AAoJEABRPxDgqeTnhBAP/iCNU2aU5UK4mtALfoFwH8GB Jsd7XyISWPMvNABG8jYQH1BWq9f90QpnuVsGmBm8BIFpxR1jIQaYBF6QHxdaRGLv nfOXbuIdpvTbbH7JMYkbZQzelaPdQIw6aOtKgoJ/4j7Hs97Bii4HpIzLhJKjp5HB uotp7sXzWsS6MhmDW922X4b1I0HekfuMQe1K7xXeLSPkRYzYybR8HpaY11IqSQp8 eaZYZOtrO62XI4rzcNrUG4utDyVP50/VVAwauMTLY4evweVn8CwhMGQz08qXvQ4a YjFqaLIsPYq49FBe4p23ih+zSiIUC1yfG8ihte9ZVVk5JdDAS4MVZhTEKU948eRT H5Y9IDdovNdTVpif3dCBICH4NSP6R4U7Zt8yvyHe1eLblkbJDvsL4wYWUkU2YIbG n5hlcwQwX7560bjaNczlvIY0MT46HQZj4Vr6nVMr6XIy7cBFRyQgCQHDMdMlluga 1kBmI32NBejcBEGmUN34lMC+1KGp0C++1DMeMSKP7D5KU3mwDY7nTdPxJLCx1H/f YrBfotI/w7u6MWTFotuWinNjt+IZt4ZPDSQreH4QCmAoXrXptz5SFiWFZH1yO8OB vPrhGzIDaTS0KPHg8P9X0ICBkHWT+/yehbUQGjIGv2vmCRpcrVG3NSkQPO0N+sJf B0nBZO3faXeXMhD2Ibp0 =FdXz -----END PGP SIGNATURE----- --COjCLCtdVp4jrOpsl240HElpCKFDuVJmC--