Date: Wed, 27 Apr 2005 17:09:04 -0700 From: Kris Kennaway <kris@obsecurity.org> To: Kris Kennaway <kris@obsecurity.org> Cc: current@FreeBSD.org Subject: Re: panic in ufs_remove() on 6.0 Message-ID: <20050428000904.GA4396@xor.obsecurity.org> In-Reply-To: <20050427211113.GA55317@xor.obsecurity.org> References: <20050427211113.GA55317@xor.obsecurity.org>
next in thread | previous in thread | raw e-mail | index | archive | help
--pWyiEgJYm5f9v55/
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
On Wed, Apr 27, 2005 at 02:11:14PM -0700, Kris Kennaway wrote:
> Actually, my last message was not from the e4500 but another SMP
> sparc64 running 6.0. Here's the panic from the e4500 overnight.
> Unfortunately no ktr is available but I have a dump.
>=20
> panic: trap: fast data access mmu miss
> cpuid =3D 10
> KDB: enter: panic
> [thread pid 64968 tid 100313 ]
> Stopped at kdb_enter+0x3c: ta %xcc, 1
> db> wh
> Tracing pid 64968 tid 100313 td 0xfffff800e70f3c80
> panic() at panic+0x16c
> trap() at trap+0x3f0
> -- fast data access mmu miss tar=3D0 %o7=3D0xc0162240 --
> ufs_remove() at ufs_remove+0xc
> VOP_REMOVE_APV() at VOP_REMOVE_APV+0xb4
> kern_unlink() at kern_unlink+0x174
> unlink() at unlink+0xc
> syscall() at syscall+0x2b4
> -- syscall (10, FreeBSD ELF64, unlink) %o7=3D0x101998 --
#9 0x00000000c016bc0c in panic (fmt=3D0xc03bc778 "trap: %s") at /usr/src.6=
/sys/kern/kern_shutdown.c:537
#10 0x00000000c02f1450 in trap (tf=3D0xf7b9b1c0) at /usr/src.6/sys/sparc64/=
sparc64/trap.c:369
#11 0x00000000c02b070c in ufs_remove (ap=3D0xfffff800220a6c78) at /usr/src.=
6/sys/ufs/ufs/ufs_vnops.c:757
#12 0x00000000c0162240 in _mtx_unlock_flags (m=3D0xf7b9b500, opts=3D-106991=
5136,
file=3D0xc03a7030 "/usr/src.6/sys/kern/vfs_vnops.c", line=3D919) at /us=
r/src.6/sys/kern/kern_mutex.c:299
#13 0x00000000c02f3fb4 in VOP_REMOVE_APV (vop=3D0xc03fcf40, a=3D0xf7b9b500)=
at vnode_if.c:1074
#14 0x00000000c01d9c54 in kern_unlink (td=3D0xfffff800e70f3c80, path=3D---C=
an't read userspace from dump, or kernel process---
) at vnode_if.h:563
#15 0x00000000c01d9acc in unlink (td=3D0xfffff800e70f3c80, uap=3D0xf7b9b8c0)
at /usr/src.6/sys/kern/vfs_syscalls.c:1622
(kgdb) frame 11
#11 0x00000000c02b070c in ufs_remove (ap=3D0xfffff800220a6c78) at /usr/src.=
6/sys/ufs/ufs/ufs_vnops.c:757
757 ip =3D VTOI(vp);
(kgdb) print *vp
$2 =3D {v_type =3D 4294965248, v_tag =3D 0xfffff8013e7490a0 "[binary data d=
eleted - KK]", v_op =3D 0x0, v_data =3D 0x0,=20
v_mount =3D 0xf7b9b980, v_nmntvnodes =3D {tqe_next =3D 0x61ef, tqe_prev =
=3D 0x54450ffc704ddc62}, v_un =3D {
vu_mount =3D 0x17e9f910000000a, vu_socket =3D 0x17e9f910000000a, vu_cde=
v =3D 0x17e9f910000000a,=20
vu_fifoinfo =3D 0x17e9f910000000a}, v_hashlist =3D {le_next =3D 0x40000=
000bff, le_prev =3D 0xea5cda90}, v_hash =3D 0,=20
v_cache_src =3D {lh_first =3D 0x0}, v_cache_dst =3D {tqh_first =3D 0x0, t=
qh_last =3D 0x0}, v_dd =3D 0x0,=20
v_cstart =3D 3931962088, v_lasta =3D 0, v_lastw =3D 0, v_clen =3D 0, v_lo=
ck =3D {lk_interlock =3D 0xea5cfb08,=20
lk_flags =3D 0, lk_sharecount =3D 0, lk_waitcount =3D 0, lk_exclusiveco=
unt =3D 0, lk_prio =3D 0, lk_wmesg =3D 0x0,=20
lk_timo =3D 0, lk_lockholder =3D 0x0, lk_newlock =3D 0x0}, v_interlock =
=3D {mtx_object =3D {lo_class =3D 0x0,=20
lo_name =3D 0xea5cfb48 "", lo_type =3D 0x0, lo_flags =3D 0, lo_list =
=3D {tqe_next =3D 0x0, tqe_prev =3D 0xea5cfb68},=20
lo_witness =3D 0x0}, mtx_lock =3D 0, mtx_recurse =3D 0, mtx_acqtime =
=3D 3931962248, mtx_filename =3D 0x0,=20
mtx_lineno =3D 0, mtx_contest_holding =3D 0, mtx_contest_locking =3D 0}=
, v_vnlock =3D 0xea5cfba8, v_holdcnt =3D 0,=20
v_usecount =3D 0, v_vxthread =3D 0x0, v_iflag =3D 0, v_vflag =3D 39319623=
12, v_writecount =3D 0, v_freelist =3D {
tqe_next =3D 0x0, tqe_prev =3D 0x0}, v_bufobj =3D {bo_mtx =3D 0xea5cfbe=
8, bo_clean =3D {bv_hd =3D {tqh_first =3D 0x0,=20
tqh_last =3D 0x0}, bv_root =3D 0x0, bv_cnt =3D 0}, bo_dirty =3D {bv=
_hd =3D {tqh_first =3D 0x0, tqh_last =3D 0x0},=20
bv_root =3D 0x0, bv_cnt =3D 0}, bo_numoutput =3D 0, bo_flag =3D 0, bo=
_ops =3D 0x0, bo_bsize =3D 0, bo_object =3D 0x0,=20
bo_synclist =3D {le_next =3D 0x0, le_prev =3D 0x0}, bo_private =3D 0xea=
5cfc68, __bo_vnode =3D 0x0}, v_pollinfo =3D 0x0,=20
v_label =3D 0x0}
(kgdb) frame 12
#12 0x00000000c0162240 in _mtx_unlock_flags (m=3D0xf7b9b500, opts=3D-106991=
5136,
file=3D0xc03a7030 "/usr/src.6/sys/kern/vfs_vnops.c", line=3D919) at /us=
r/src.6/sys/kern/kern_mutex.c:299
299 mtx_assert(m, MA_OWNED);
(kgdb) frame 13
#13 0x00000000c02f3fb4 in VOP_REMOVE_APV (vop=3D0xc03fcf40, a=3D0xf7b9b500)=
at vnode_if.c:1074
1074 if (vop->vop_remove !=3D NULL)
(kgdb) frame 14
#14 0x00000000c01d9c54 in kern_unlink (td=3D0xfffff800e70f3c80, path=3D---C=
an't read userspace from dump, or kernel process---
) at vnode_if.h:563
563 vnode_if.h: No such file or directory.
in vnode_if.h
(kgdb)
--pWyiEgJYm5f9v55/
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (FreeBSD)
iD8DBQFCcCmfWry0BWjoQKURAsK+AJ9IPTzV/HmSaxcfJ5PM8IaNPDj2vQCfXXUY
/n/KCim/6BtdY1FuWdXxTC4=
=WNsC
-----END PGP SIGNATURE-----
--pWyiEgJYm5f9v55/--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050428000904.GA4396>