Date: Sat, 27 Mar 2004 09:48:53 +0900 From: Jaeho Shin <netj@sparcs.kaist.ac.kr> To: freebsd-stable@freebsd.org Subject: Re: "panic: ffs_blkfree: bad size" with HPT374 IDE RAID Message-ID: <20040327004853.GC2948@sab.mazic.org> In-Reply-To: <20040326091948.GA2948@sab.mazic.org> References: <20040326091948.GA2948@sab.mazic.org>
next in thread | previous in thread | raw e-mail | index | archive | help
--nHwqXXcoX0o6fKCv
Content-Type: text/plain; charset=euc-kr
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
On Fri, Mar 26, 2004 at 06:19:48PM +0900, Jaeho Shin (netj@sparcs.kaist.ac.=
kr) wrote:
> Now I have disabled softupdates to check whether it could be a problem.
This didn't help. Same panic occurred with softupdates turned off:
# gdb -k /usr/obj/usr/src/sys/EGO/kernel.debug /var/crash/vmcore.1
GNU gdb 4.18 (FreeBSD)
Copyright 1998 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain condition=
s.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for details.
This GDB was configured as "i386-unknown-freebsd"...Deprecated bfd_read cal=
led at /usr/src/gnu/usr.bin/binutils/gdb/../../../../contrib/gdb/gdb/dbxrea=
d.c line 2627 in elfstab_build_psymtabs
Deprecated bfd_read called at /usr/src/gnu/usr.bin/binutils/gdb/../../../..=
/contrib/gdb/gdb/dbxread.c line 933 in fill_symbuf
SMP 2 cpus
IdlePTD at physical address 0x003d2000
initial pcb at physical address 0x0030fc00
panicstr: ffs_blkfree: bad size
panic messages:
---
panic: ffs_blkfree: bad size
mp_lock =3D 01000001; cpuid =3D 1; lapic.id =3D 00000000
boot() called on cpu#1
syncing disks... 27 24 20 15 14 2 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1=
=20
giving up on 1 buffers
Uptime: 11h48m44s
dumping to dev #ad/0x20001, offset 2097449
dump ata0: resetting devices .. done
1023 1022 1021 1020 1019 1018 1017 1016 1015 1014 1013 1012 1011 1010 1009 =
1008 1007 1006 1005 1004 1003 1002 1001 1000 999 998 997 996 995 994 993 99=
2 991 990 989 988 987 986 985 984 983 982 981 980 979 978 977 976 975 974 9=
73 972 971 970 969 968 967 966 965 964 963 962 961 960 959 958 957 956 955 =
954 953 952 951 950 949 948 947 946 945 944 943 942 941 940 939 938 937 936=
935 934 933 932 931 930 929 928 927 926 925 924 923 922 921 920 919 918 91=
7 916 915 914 913 912 911 910 909 908 907 906 905 904 903 902 901 900 899 8=
98 897 896 895 894 893 892 891 890 889 888 887 886 885 884 883 882 881 880 =
879 878 877 876 875 874 873 872 871 870 869 868 867 866 865 864 863 862 861=
860 859 858 857 856 855 854 853 852 851 850 849 848 847 846 845 844 843 84=
2 841 840 839 838 837 836 835 834 833 832 831 830 829 828 827 826 825 824 8=
23 822 821 820 819 818 817 816 815 814 813 812 811 810 809 808 807 806 805 =
804 803 802 801 800 799 798 797 796 795 794 793 792 791 790 789 788 787 786=
785 784 783 782 781 780 779 778 777 776 775 774 773 772 771 770 769 768 76=
7 766 765 764 763 762 761 760 759 758 757 756 755 754 753 752 751 750 749 7=
48 747 746 745 744 743 742 741 740 739 738 737 736 735 734 733 732 731 730 =
729 728 727 726 725 724 723 722 721 720 719 718 717 716 715 714 713 712 711=
710 709 708 707 706 705 704 703 702 701 700 699 698 697 696 695 694 693 69=
2 691 690 689 688 687 686 685 684 683 682 681 680 679 678 677 676 675 674 6=
73 672 671 670 669 668 667 666 665 664 663 662 661 660 659 658 657 656 655 =
654 653 652 651 650 649 648 647 646 645 644 643 642 641 640 639 638 637 636=
635 634 633 632 631 630 629 628 627 626 625 624 623 622 621 620 619 618 61=
7 616 615 614 613 612 611 610 609 608 607 606 605 604 603 602 601 600 599 5=
98 597 596 595 594 593 592 591 590 589 588 587 586 585 584 583 582 581 580 =
579 578 577 576 575 574 573 572 571 570 569 568 567 566 565 564 563 562 561=
560 559 558 557 556 555 554 553 552 551 550 549 548 547 546 545 544 543 54=
2 541 540 539 538 537 536 535 534 533 532 531 530 529 528 527 526 525 524 5=
23 522 521 520 519 518 517 516 515 514 513 512 511 510 509 508 507 506 505 =
504 503 502 501 500 499 498 497 496 495 494 493 492 491 490 489 488 487 486=
485 484 483 482 481 480 479 478 477 476 475 474 473 472 471 470 469 468 46=
7 466 465 464 463 462 461 460 459 458 457 456 455 454 453 452 451 450 449 4=
48 447 446 445 444 443 442 441 440 439 438 437 436 435 434 433 432 431 430 =
429 428 427 426 425 424 423 422 421 420 419 418 417 416 415 414 413 412 411=
410 409 408 407 406 405 404 403 402 401 400 399 398 397 396 395 394 393 39=
2 391 390 389 388 387 386 385 384 383 382 381 380 379 378 377 376 375 374 3=
73 372 371 370 369 368 367 366 365 364 363 362 361 360 359 358 357 356 355 =
354 353 352 351 350 349 348 347 346 345 344 343 342 341 340 339 338 337 336=
335 334 333 332 331 330 329 328 327 326 325 324 323 322 321 320 319 318 31=
7 316 315 314 313 312 311 310 309 308 307 306 305 304 303 302 301 300 299 2=
98 297 296 295 294 293 292 291 290 289 288 287 286 285 284 283 282 281 280 =
279 278 277 276 275 274 273 272 271 270 269 268 267 266 265 264 263 262 261=
260 259 258 257 256 255 254 253 252 251 250 249 248 247 246 245 244 243 24=
2 241 240 239 238 237 236 235 234 233 232 231 230 229 228 227 226 225 224 2=
23 222 221 220 219 218 217 216 215 214 213 212 211 210 209 208 207 206 205 =
204 203 202 201 200 199 198 197 196 195 194 193 192 191 190 189 188 187 186=
185 184 183 182 181 180 179 178 177 176 175 174 173 172 171 170 169 168 16=
7 166 165 164 163 162 161 160 159 158 157 156 155 154 153 152 151 150 149 1=
48 147 146 145 144 143 142 141 140 139 138 137 136 135 134 133 132 131 130 =
129 128 127 126 125 124 123 122 121 120 119 118 117 116 115 114 113 112 111=
110 109 108 107 106 105 104 103 102 101 100 99 98 97 96 95 94 93 92 91 90 =
89 88 87 86 85 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70 69 68 67 66 65 =
64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 =
39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 =
14 13 12 11 10 9 8 7 6 5 4 3 2 1 0 004 COUNT 3 SHOULD BE 2
<118
---
#0 dumpsys () at /usr/src/sys/kern/kern_shutdown.c:487
487 if (dumping++) {
(kgdb) bt
#0 dumpsys () at /usr/src/sys/kern/kern_shutdown.c:487
#1 0xc016b987 in boot (howto=3D256) at /usr/src/sys/kern/kern_shutdown.c:3=
16
#2 0xc016bde0 in poweroff_wait (junk=3D0xc02ca895, howto=3D-1070815136)
at /usr/src/sys/kern/kern_shutdown.c:595
#3 0xc023096b in ffs_blkfree (ip=3D0xc39e3100, bno=3D782945620, size=3D163=
84)
at /usr/src/sys/ufs/ffs/ffs_alloc.c:1415
#4 0xc0232f75 in ffs_indirtrunc (ip=3D0xc39e3100, lbn=3D-16781326,=20
dbn=3D1708093400, lastbn=3D-1, level=3D2, countp=3D0xe4e72d14)
at /usr/src/sys/ufs/ffs/ffs_inode.c:511
#5 0xc0232a99 in ffs_truncate (vp=3D0xe534d940, length=3D0, flags=3D0, cre=
d=3D0x0,=20
p=3D0xe4518780) at /usr/src/sys/ufs/ffs/ffs_inode.c:327
#6 0xc023d398 in ufs_inactive (ap=3D0xe4e72e40)
at /usr/src/sys/ufs/ufs/ufs_inode.c:89
#7 0xc02428a9 in ufs_vnoperate (ap=3D0xe4e72e40)
at /usr/src/sys/ufs/ufs/ufs_vnops.c:2376
#8 0xc019acc7 in vput (vp=3D0xe534d940) at vnode_if.h:815
#9 0xc019e8ad in lstat (p=3D0xe4518780, uap=3D0xe4e72f80)
at /usr/src/sys/kern/vfs_syscalls.c:1835
#10 0xc0293b21 in syscall2 (frame=3D{tf_fs =3D 47, tf_es =3D -65489,=20
tf_ds =3D -1078001617, tf_edi =3D -1077944963, tf_esi =3D -1077945988=
,=20
tf_ebp =3D -1077946032, tf_isp =3D -454610988, tf_ebx =3D 134622840,=
=20
tf_edx =3D 0, tf_ecx =3D -1077942828, tf_eax =3D 190, tf_trapno =3D 7=
,=20
tf_err =3D 2, tf_eip =3D 1210365540, tf_cs =3D 31, tf_eflags =3D 659,=
=20
tf_esp =3D -1077946060, tf_ss =3D 47}) at /usr/src/sys/i386/i386/trap=
.c:1175
#11 0xc027ea2b in Xint0x80_syscall ()
cannot read proc at 0
(kgdb) up 3
#3 0xc023096b in ffs_blkfree (ip=3D0xc39e3100, bno=3D782945620, size=3D163=
84)
at /usr/src/sys/ufs/ffs/ffs_alloc.c:1415
1415 panic("ffs_blkfree: bad size");
(kgdb) l -
1405 int i, error, cg, blk, frags, bbase;
1406 u_int8_t *blksfree;
1407=09
1408 fs =3D ip->i_fs;
1409 VOP_FREEBLKS(ip->i_devvp, fsbtodb(fs, bno), size);
1410 if ((u_int)size > fs->fs_bsize || fragoff(fs, size) !=3D 0 ||
1411 fragnum(fs, bno) + numfrags(fs, size) > fs->fs_frag) {
1412 printf("dev=3D%s, bno =3D %ld, bsize =3D %ld, size =3D %ld, fs =3D %=
s\n",
1413 devtoname(ip->i_dev), (long)bno, (long)fs->fs_bsize, size,
1414 fs->fs_fsmnt);
(kgdb) l
1415 panic("ffs_blkfree: bad size");
1416 }
1417 cg =3D dtog(fs, bno);
1418 if ((u_int)bno >=3D fs->fs_size) {
1419 printf("bad block %ld, ino %lu\n",
1420 (long)bno, (u_long)ip->i_number);
1421 ffs_fserr(fs, ip->i_uid, "bad block");
1422 return;
1423 }
1424 error =3D bread(ip->i_devvp, fsbtodb(fs, cgtod(fs, cg)),
(kgdb) p *ip
$1 =3D {i_lock =3D {lk_interlock =3D {lock_data =3D 0}, lk_flags =3D 1088,=
=20
lk_sharecount =3D 0, lk_waitcount =3D 0, lk_exclusivecount =3D 1, lk_pr=
io =3D 8,=20
lk_wmesg =3D 0xc02cc6aa "inode", lk_timo =3D 6, lk_lockholder =3D 92578=
},=20
i_hash =3D {le_next =3D 0xc49a9c00, le_prev =3D 0xc31ab458}, i_vnode =3D =
0xe534d940,=20
i_devvp =3D 0xe2d6d780, i_flag =3D 128, i_dev =3D 0xc320d200, i_number =
=3D 93806866,=20
i_effnlink =3D 0, inode_u =3D {fs =3D 0xc334d000, e2fs =3D 0xc334d000}, i=
_dquot =3D {
0x0, 0x0}, i_modrev =3D 182574389325747, i_lockf =3D 0x0, i_count =3D 0=
,=20
i_endoff =3D 0, i_diroff =3D 0, i_offset =3D 0, i_ino =3D 0, i_reclen =3D=
0,=20
i_spare =3D {0, 0, 0}, i_dirhash =3D 0x0, i_din =3D {di_mode =3D 49611,=
=20
di_nlink =3D 0, di_u =3D {oldids =3D {0, 2048}, inumber =3D 134217728},=
=20
di_size =3D 19421773393035264, di_atime =3D 262878208,=20
di_atimensec =3D 104857664, di_mtime =3D 1080306466, di_mtimensec =3D 0=
,=20
di_ctime =3D 1080306466, di_ctimensec =3D 0, di_db =3D {197464287, 2768=
45717,=20
-869445504, 16842752, 654313992, 19407478, 20238, 0, 0, 0, 0, 0},=20
di_ib =3D {644218880, 226953992, -1720460298}, di_flags =3D 1734198596,=
=20
di_blocks =3D 930847901, di_gen =3D 1359351667, di_uid =3D 961677533,=
=20
di_gid =3D 546444409, di_spare =3D {-1960180224, 1342241927}}}
(kgdb) q
--=20
=BD=C5=C0=E7=C8=A3 | Jaeho Shin <netj@sparcs.kaist.ac.kr> | http://netj.org/
System Programmers' Association for Researching Computer Systems
Division of Computer Science, Department of EECS, KAIST
--nHwqXXcoX0o6fKCv
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (Cygwin)
iD8DBQFAZM91eGASkZ411HcRAgFgAKCCBXB4hovRs56b7ivK5EDaPASIsACg33YN
nyB/r6tfyeiO/0IG5vD1Zb0=
=PXNQ
-----END PGP SIGNATURE-----
--nHwqXXcoX0o6fKCv--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040327004853.GC2948>