Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 20 Oct 1998 11:33:40 -0500 (CDT)
From:      Eric Haug <ejh@eas.slu.edu>
To:        current@FreeBSD.ORG
Subject:   nfs panic in free()
Message-ID:  <199810201633.LAA06373@mnw.eas.slu.edu>

next in thread | raw e-mail | index | archive | help
Hi all,
I am having a repeatable panic in the nfs server code.
I have a -g compile kernel and a vmcore file.
dmesg output included
Should this be sent via send-pr?
 Anyone else seeing this sort of nfs bug?

Another problem that this system has:
The Promise card has the prom removed, cause the system will not
recognize the disks connected to it when the prom is in there.
I believe that this results in the disk access timing being off
so that transfers are about half of what they could be.

The MBoard is a Matsonic MS6260S running at system clock of 100MHz.
The CPU is rated for more than 300 MHz. i.e. the system
is not overclocked.

The gdb-aout's where command produces:
#0  boot (howto=256) at ../../kern/kern_shutdown.c:268
#1  0xf01389db in panic (fmt=0xf01354a4 "free: multiple frees")
    at ../../kern/kern_shutdown.c:430
#2  0xf0135593 in free (addr=0x0, type=0xf022a380)
    at ../../kern/kern_malloc.c:334
#3  0xf01a0845 in nfsrv_dorec (slp=0xf0a34300, nfsd=0xf087f600, ndp=0xf4184e38)
    at ../../nfs/nfs_socket.c:2235
#4  0xf01a47d0 in nfssvc_nfsd (nsd=0xf4184e94, argp=0x8071afc "", p=0xf414afc0)
    at ../../nfs/nfs_syscalls.c:537
#5  0xf01a43ed in nfssvc (p=0xf414afc0, uap=0xf4184f94)
    at ../../nfs/nfs_syscalls.c:342
#6  0xf01f8d5f in syscall (frame={tf_es = 39, tf_ds = 39, tf_edi = 6, 
      tf_esi = 1, tf_ebp = -272638524, tf_isp = -199733276, tf_ebx = 0, 
      tf_edx = -272638920, tf_ecx = 0, tf_eax = 155, tf_trapno = 12, 
      tf_err = 2, tf_eip = 134519048, tf_cs = 31, tf_eflags = 646, 
      tf_esp = -272638916, tf_ss = 39}) at ../../i386/i386/trap.c:1031
#7  0xf01ef02c in Xint0x80_syscall ()

(kgdb) frame 2
#2  0xf0135593 in free (addr=0x0, type=0xf022a380)
    at ../../kern/kern_malloc.c:334
334                             panic("free: multiple frees");
(kgdb) frame 3
#3  0xf01a0845 in nfsrv_dorec (slp=0xf0a34300, nfsd=0xf087f600, ndp=0xf4184e38)
    at ../../nfs/nfs_socket.c:2235
2235                    FREE(nam, M_SONAME);
(kgdb) frame 4
#4  0xf01a47d0 in nfssvc_nfsd (nsd=0xf4184e94, argp=0x8071afc "", p=0xf414afc0)
    at ../../nfs/nfs_syscalls.c:537
537                                     error = nfsrv_dorec(slp, nfsd, &nd);
(kgdb) frame 5
#5  0xf01a43ed in nfssvc (p=0xf414afc0, uap=0xf4184f94)
    at ../../nfs/nfs_syscalls.c:342
342                     error = nfssvc_nfsd(nsd, uap->argp, p);

dmesg produces:
    ejh@tds.eas.slu.edu:/usr/src/sys/compile/GG
Timecounter "i8254"  frequency 1193182 Hz  cost 1443 ns
Timecounter "TSC"  frequency 300682610 Hz  cost 78 ns
CPU: AMD-K6(tm) 3D processor (300.68-MHz 586-class CPU)
  Origin = "AuthenticAMD"  Id = 0x580  Stepping=0
  Features=0x8001bf<FPU,VME,DE,PSE,TSC,MSR,MCE,CX8,MMX>
real memory  = 67108864 (65536K bytes)
avail memory = 62853120 (61380K bytes)
Bad DMI table checksum!
Probing for devices on PCI bus 0:
chip0: <Host to PCI bridge (vendor=10b9 device=1541)> rev 0x04 on pci0.0.0
chip1: <PCI to PCI bridge (vendor=10b9 device=5243)> rev 0x04 on pci0.1.0
chip2: <PCI to 0x80 bridge (vendor=10b9 device=7101)> rev 0x00 on pci0.3.0
chip3: <PCI to ISA bridge (vendor=10b9 device=1533)> rev 0xb4 on pci0.7.0
ide_pci0: <PCI IDE controller (busmaster capable)> rev 0x20 int a irq 0 on pci0.15.0
ide_pci: controller is simplex, no DMA on secondary channel
ide_pci1: <Promise Ultra/33 IDE controller> rev 0x01 int a irq 10 on pci0.16.0
ide_pci1: adding drives to controller 4: 4 5 6 7
tx0: <SMC 83c170> rev 0x06 int a irq 11 on pci0.18.0
tx0: address 00:e0:29:24:4f:18, type SMC9432TX, Auto-Neg 10Mbps 
vga0: <S3 ViRGE graphics accelerator> rev 0x06 int a irq 0 on pci0.20.0
Probing for devices on PCI bus 1:
Probing for devices on the ISA bus:
sc0 at 0x60-0x6f irq 1 on motherboard
sc0: VGA color <16 virtual consoles, flags=0x0>
sio0 at 0x3f8-0x3ff irq 4 flags 0x10 on isa
sio0: type 16550A
sio1 at 0x2f8-0x2ff irq 3 on isa
sio1: type 16550A
lpt0 at 0x378-0x37f irq 7 on isa
lpt0: Interrupt-driven port
lp0: TCP/IP capable interface
psm0 not found at 0x60
fdc0 at 0x3f0-0x3f7 irq 6 drq 2 on isa
fdc0: FIFO enabled, 8 bytes threshold
fd0: 1.44MB 3.5in
wdc0 at 0x1f0-0x1f7 irq 14 on isa
wdc0: unit 0 (wd0): <Maxtor 91190D7>
wd0: 11349MB (23243472 sectors), 23059 cyls, 16 heads, 63 S/T, 512 B/S
wdc1 not found at 0x170
wdc2 at 0xdfa0-0xdfa7 flags 0xa0ffa0ff on isa
ide_pci: generic_dmainit dfa0:1: warning, IDE controller timing not set
wdc2: unit 0 (wd4): <Maxtor 91190D7>, DMA, 32-bit, multi-block-16
wd4: 11349MB (23243472 sectors), 23059 cyls, 16 heads, 63 S/T, 512 B/S
ide_pci: generic_dmainit dfa0:1: warning, IDE controller timing not set
wdc2: unit 1 (wd5): <Maxtor 91190D7>, DMA, 32-bit, multi-block-16
wd5: 11349MB (23243472 sectors), 23059 cyls, 16 heads, 63 S/T, 512 B/S
wdc3 at 0xdf90-0xdf97 flags 0xa0ffa0ff on isa
ide_pci: generic_dmainit df90:1: warning, IDE controller timing not set
wdc3: unit 0 (wd6): <Maxtor 91190D7>, DMA, 32-bit, multi-block-16
wd6: 11349MB (23243472 sectors), 23059 cyls, 16 heads, 63 S/T, 512 B/S
ide_pci: generic_dmainit df90:1: warning, IDE controller timing not set
wdc3: unit 1 (wd7): <Maxtor 91190D7>, DMA, 32-bit, multi-block-16
wd7: 11349MB (23243472 sectors), 23059 cyls, 16 heads, 63 S/T, 512 B/S
adv0 not found at 0x330
npx0 on motherboard
npx0: INT 16 interface
ccd0-3: Concatenated disk drivers
changing root device to wd0s1a
WARNING: / was not properly dismounted
ffs_mountfs: superblock updated
ffs_mountfs: superblock updated
ffs_mountfs: superblock updated
ffs_mountfs: superblock updated
ffs_mountfs: superblock updated
ffs_mountfs: superblock updated

---
eric haug
Saint Louis Univ.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199810201633.LAA06373>