Date: Mon, 01 Feb 2016 15:10:14 +0000 From: bugzilla-noreply@freebsd.org To: freebsd-bugs@FreeBSD.org Subject: [Bug 206820] [ext2fs] Panic when writing to ext3fs mounted as ext2fs Message-ID: <bug-206820-8-GSCdjHu4Ko@https.bugs.freebsd.org/bugzilla/> In-Reply-To: <bug-206820-8@https.bugs.freebsd.org/bugzilla/> References: <bug-206820-8@https.bugs.freebsd.org/bugzilla/>
next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D206820 --- Comment #3 from Arrigo Marchiori <ardovm@yahoo.it> --- The panic is also reproducible when writing to a md(4) instead of a USB dri= ve. The stack trace is analogous. (kgdb) bt #0 doadump (textdump=3D1) at pcpu.h:250 #1 0xc0aed3ae in kern_reboot (howto=3D260) at /usr/src/sys/kern/kern_shutdown.c:454 #2 0xc0aed6a5 in panic (fmt=3D<value optimized out>) at /usr/src/sys/kern/kern_shutdown.c:642 #3 0xc0d70ede in vm_fault_hold (map=3D0xc1b8d000, vaddr=3D3799322624,=20 fault_type=3D2 '\002', fault_flags=3D0, m_hold=3D0x0) at /usr/src/sys/vm/vm_fault.c:289 #4 0xc0d7355b in vm_fault (map=3D0xc1b8d000, vaddr=3D3799322624,=20 fault_type=3D<value optimized out>, fault_flags=3D0) at /usr/src/sys/vm/vm_fault.c:229 #5 0xc0fb619f in trap_pfault (frame=3D0xf0a8c964, usermode=3D0, eva=3D3799= 322628) at /usr/src/sys/i386/i386/trap.c:932 #6 0xc0fb744b in trap (frame=3D0xf0a8c964) at /usr/src/sys/i386/i386/trap.= c:553 #7 0xc0f9fee7 in calltrap () at /usr/src/sys/i386/i386/exception.s:173 #8 0xcc966759 in ext2_i2ei (ip=3D0xc7ba8300, ei=3D0xe2750f80) at /usr/src/sys/modules/ext2fs/../../fs/ext2fs/ext2_inode_cnv.c:152 #9 0xcc965a56 in ext2_update (vp=3D0xc99c5470, waitfor=3D1) at /usr/src/sys/modules/ext2fs/../../fs/ext2fs/ext2_inode.c:91 #10 0xcc96bd12 in ext2_makeinode (mode=3D8, dvp=3D0xc99c46a8, vpp=3D0xf0a8c= b88,=20 cnp=3D0xf0a8cb9c) at /usr/src/sys/modules/ext2fs/../../fs/ext2fs/ext2_vnops.c:1586 #11 0xc0fdd612 in VOP_CREATE_APV (vop=3D0xcc96f3a0, a=3D0xf0a8cae8) at vnode_if.c:260 #12 0xc0b9d989 in vn_open_cred (ndp=3D0xf0a8cb5c, flagp=3D0xf0a8cc24,=20 cmode=3D<value optimized out>, vn_open_flags=3D0, cred=3D0xc8bcf600,=20 fp=3D0xc940bdc8) at vnode_if.h:109 #13 0xc0b9de6b in vn_open (ndp=3D0xf0a8cb5c, flagp=3D0xf0a8cc24, cmode=3D49= 3,=20 fp=3D0xc940bdc8) at /usr/src/sys/kern/vfs_vnops.c:113 #14 0xc0b99460 in kern_openat (td=3D0xca383900, fd=3D-100,=20 path=3D0x284a61a0 <Address 0x284a61a0 out of bounds>, pathseg=3DUIO_USE= RSPACE,=20 flags=3D2562, mode=3D493) at /usr/src/sys/kern/vfs_syscalls.c:1128 #15 0xc0b998b5 in kern_open (td=3D0xca383900,=20 path=3D0x284a61a0 <Address 0x284a61a0 out of bounds>, pathseg=3DUIO_USE= RSPACE,=20 flags=3D2561, mode=3D493) at /usr/src/sys/kern/vfs_syscalls.c:1079 #16 0xc0b998f0 in sys_open (td=3D0xca383900, uap=3D0xf0a8cccc) at /usr/src/sys/kern/vfs_syscalls.c:1055 #17 0xc0fb6869 in syscall (frame=3D0xf0a8cd08) at subr_syscall.c:142 #18 0xc0f9ff8c in Xint0x80_syscall () at /usr/src/sys/i386/i386/exception.s= :279 (kgdb) frame 8 #8 0xcc966759 in ext2_i2ei (ip=3D0xc7ba8300, ei=3D0xe2750f80) at /usr/src/sys/modules/ext2fs/../../fs/ext2fs/ext2_inode_cnv.c:152 152 ei->e2di_ctime_extra =3D NSEC_TO_XTIME(ip->i_ctimensec); (kgdb) print *ip $1 =3D {i_vnode =3D 0xc99c5470, i_ump =3D 0xc7b92380, i_flag =3D 0, i_numbe= r =3D 49160,=20 i_e2fs =3D 0xc7858c00, i_modrev =3D 18475684767084, i_count =3D 0, i_endo= ff =3D 0,=20 i_diroff =3D 0, i_offset =3D 0, i_block_group =3D 24, i_next_alloc_block = =3D 0,=20 i_next_alloc_goal =3D 0, i_mode =3D 33261, i_nlink =3D 1, i_uid =3D 0, i_= gid =3D 0,=20 i_size =3D 0, i_blocks =3D 0, i_atime =3D 1454338085, i_mtime =3D 1454338= 085,=20 i_ctime =3D 1454338085, i_birthtime =3D 1454338085, i_mtimensec =3D 52281= 0000,=20 i_atimensec =3D 522810000, i_ctimensec =3D 522810000, i_birthnsec =3D 522= 809000,=20 i_gen =3D 679956546, i_flags =3D 0, i_db =3D {0 <repeats 12 times>}, i_ib= =3D {0, 0,=20 0}, i_ext_cache =3D {ec_start =3D 0, ec_blk =3D 0, ec_len =3D 0, ec_typ= e =3D 0}} (kgdb) print *ei Cannot access memory at address 0xe2750f80 (kgdb) frame 9 #9 0xcc965a56 in ext2_update (vp=3D0xc99c5470, waitfor=3D1) at /usr/src/sys/modules/ext2fs/../../fs/ext2fs/ext2_inode.c:91 91 ext2_i2ei(ip, (struct ext2fs_dinode *)((char *)bp->b_data + (kgdb) print *vp $2 =3D {v_type =3D VREG, v_tag =3D 0xcc96e830 "ext2fs", v_op =3D 0xcc96f3a0= ,=20 v_data =3D 0xc7ba8300, v_mount =3D 0xc7dc77ec, v_nmntvnodes =3D {tqe_next= =3D 0x0,=20 tqe_prev =3D 0xc99c56bc}, v_un =3D {vu_mount =3D 0x0, vu_socket =3D 0x0= ,=20 vu_cdev =3D 0x0, vu_fifoinfo =3D 0x0}, v_hashlist =3D {le_next =3D 0x0,= =20 le_prev =3D 0xc793f988}, v_hash =3D 49160, v_cache_src =3D {lh_first = =3D 0x0},=20 v_cache_dst =3D {tqh_first =3D 0x0, tqh_last =3D 0xc99c54a0}, v_cache_dd = =3D 0x0,=20 v_cstart =3D 0, v_lasta =3D 0, v_lastw =3D 0, v_clen =3D 0, v_lock =3D {l= ock_object =3D { lo_name =3D 0xcc96e830 "ext2fs", lo_flags =3D 108199944, lo_data =3D = 0,=20 lo_witness =3D 0x0}, lk_lock =3D 3392682240, lk_exslpfail =3D 0, lk_t= imo =3D 51,=20 lk_pri =3D 96}, v_interlock =3D {lock_object =3D { lo_name =3D 0xc11003e9 "vnode interlock", lo_flags =3D 16973824,=20 lo_data =3D 0, lo_witness =3D 0x0}, mtx_lock =3D 4}, v_vnlock =3D 0xc= 99c54c8,=20 v_holdcnt =3D 1, v_usecount =3D 1, v_iflag =3D 512, v_vflag =3D 0, v_writ= ecount =3D 0,=20 v_actfreelist =3D {tqe_next =3D 0xc99c56a8, tqe_prev =3D 0xc7dc782c}, v_b= ufobj =3D { bo_mtx =3D {lock_object =3D {lo_name =3D 0xc11003f9 "bufobj interlock",= =20 lo_flags =3D 16973824, lo_data =3D 0, lo_witness =3D 0x0}, mtx_lock= =3D 4},=20 bo_clean =3D {bv_hd =3D {tqh_first =3D 0x0, tqh_last =3D 0xc99c5530},=20 bv_root =3D 0x0, bv_cnt =3D 0}, bo_dirty =3D {bv_hd =3D {tqh_first = =3D 0x0,=20 tqh_last =3D 0xc99c5540}, bv_root =3D 0x0, bv_cnt =3D 0}, bo_numout= put =3D 0,=20 bo_flag =3D 0, bo_ops =3D 0xc1371e80, bo_bsize =3D 1024, bo_object =3D = 0x0,=20 bo_synclist =3D {le_next =3D 0x0, le_prev =3D 0x0}, bo_private =3D 0xc9= 9c5470,=20 __bo_vnode =3D 0xc99c5470}, v_pollinfo =3D 0x0, v_label =3D 0x0, v_lock= f =3D 0x0,=20 v_rl =3D {rl_waiters =3D {tqh_first =3D 0x0, tqh_last =3D 0xc99c5580},=20 rl_currdep =3D 0x0}} --=20 You are receiving this mail because: You are the assignee for the bug.=
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-206820-8-GSCdjHu4Ko>