From owner-freebsd-bugs Thu Feb 6 13:45:10 2003 Delivered-To: freebsd-bugs@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 0D88E37B401 for ; Thu, 6 Feb 2003 13:45:08 -0800 (PST) Received: from cobra.acceleratedweb.net (cobra-gw.acceleratedweb.net [207.99.79.37]) by mx1.FreeBSD.org (Postfix) with SMTP id 13E3A43FAF for ; Thu, 6 Feb 2003 13:45:07 -0800 (PST) (envelope-from simon@optinet.com) Received: (qmail 51450 invoked by uid 106); 6 Feb 2003 21:48:27 -0000 Received: from 24-90-127-16.nyc.rr.com (HELO win2kpc1) (24.90.127.16) by cobra.acceleratedweb.net with SMTP; 6 Feb 2003 21:48:27 -0000 From: "Simon" To: "freebsd-bugs@FreeBSD.ORG" Date: Thu, 06 Feb 2003 16:44:24 -0500 X-Mailer: PMMail 2000 Professional (2.20.2661) For Windows 2000 (5.0.2195;3) MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Subject: Disk Quota bug causing panic Message-Id: <20030206214507.13E3A43FAF@mx1.FreeBSD.org> Sender: owner-freebsd-bugs@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hi, There seems to be a disk quota related bug which causes FBSD to crash when working with many, 80,000+, inodes per user. I am able to duplicate the problem both on FBSD 4.7-R and 4.7-R-p3 on different machines. I've a kernel core dump which is 2GB in size... Below is what I get from debugger using 4.7-R kernel. If that's not enough to see the bug, please tell me what is needed for someone to debug it. Please help, I thank you very much in advance. -Simon Fatal trap 12: page fault while in kernel mode mp_lock = 00000002; cpuid = 0; lapic.id = 00000000 fault virtual address = 0x0 fault code = supervisor write, page not present instruction pointer = 0x8:0xc01cc212 stack pointer = 0x10:0xf0207c08 frame pointer = 0x10:0xf0207c58 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, def32 1, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 275 (perl) interrupt mask = none <- SMP: XXX trap number = 12 panic: page fault mp_lock = 00000002; cpuid = 0; lapic.id = 00000000 boot() called on cpu#0 #13 0xc0206549 in syscall2 (frame={tf_fs = 47, tf_es = 47, tf_ds = -1078001617, tf_edi = 8, tf_esi = 1209875424, tf_ebp = -1077937732, tf_isp = -266305580, tf_ebx = 1209800268, tf_edx = 1209875424, tf_ecx = 16, tf_eax = 5, tf_trapno = 7, tf_err = 2, tf_eip = 1209708800, tf_cs = 31, tf_eflags = 663, tf_esp = -1077937776, tf_ss = 47}) at ../../i386/i386/trap.c:1175 1175 error = (*callp->sy_call)(p, args); #12 0xc018f380 in open (p=0xe9417860, uap=0xf0207f80) at ../../kern/vfs_syscalls.c:1028 1028 error = vn_open(&nd, flags, cmode); #11 0xc01931b0 in vn_open (ndp=0xf0207ec4, fmode=1538, cmode=420) at vnode_if.h:106 106 rc = VCALL(dvp, VOFFSET(vop_create), &a); #10 0xc01cf7c9 in ufs_vnoperate (ap=0xf0207df8) at ../../ufs/ufs/ufs_vnops.c:2422 2422 return (VOCALL(ufs_vnodeop_p, ap->a_desc->vdesc_offset, ap)); #9 0xc01ccaa0 in ufs_create (ap=0xf0207df8) at ../../ufs/ufs/ufs_vnops.c:195 195 error = #8 0xc01cf480 in ufs_makeinode (mode=33188, dvp=0xf0f1d940, vpp=0xf0207ed8, cnp=0xf0207eec) at ../../ufs/ufs/ufs_vnops.c:2167 2167 if ((error = getinoquota(ip)) || #7 0xc01cb5d2 in getinoquota (ip=0xce212000) at ../../ufs/ufs/ufs_quota.c:95 95 if (ip->i_dquot[USRQUOTA] == NODQUOT && #6 0xc01cc212 in dqget (vp=0xf0f1d700, id=1001, ump=0xcacbbc00, type=0, dqp=0xce212044) at ../../ufs/ufs/ufs_quota.c:763 763 TAILQ_REMOVE(&dqfreelist, dq, dq_freelist); #5 0xc0205a47 in trap (frame={tf_fs = -381616104, tf_es = 1744830480, tf_ds = 16, tf_edi = -276421056, tf_esi = -890009540, tf_ebp = -266306472, tf_isp = -266306572, tf_ebx = -887662464, tf_edx = 0, tf_ecx = -887736320, tf_eax = 0, tf_trapno = 12, tf_err = 2, tf_eip = -1071857134, tf_cs = 8, tf_eflags = 66118, tf_esp = -836689920, tf_ss = -252586240}) at ../../i386/i386/trap.c:466 466 (void) trap_pfault(&frame, FALSE, eva); #4 0xc0205ea9 in trap_pfault (frame=0xf0207bc8, usermode=0, eva=0) at ../../i386/i386/trap.c:867 867 trap_fatal(frame, eva); #3 0xc0206218 in trap_fatal (frame=0xf0207bc8, eva=0) at ../../i386/i386/trap.c:974 974 panic("%s", trap_msg[type]); To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-bugs" in the body of the message