From owner-freebsd-bugs  Thu Sep 18 13:24:08 1997
Return-Path: <owner-freebsd-bugs>
Received: (from root@localhost)
          by hub.freebsd.org (8.8.7/8.8.7) id NAA03631
          for bugs-outgoing; Thu, 18 Sep 1997 13:24:08 -0700 (PDT)
Received: from sax.sax.de (sax.sax.de [193.175.26.33])
          by hub.freebsd.org (8.8.7/8.8.7) with SMTP id NAA03610
          for <freebsd-bugs@FreeBSD.ORG>; Thu, 18 Sep 1997 13:24:01 -0700 (PDT)
Received: (from uucp@localhost) by sax.sax.de (8.6.12/8.6.12-s1) with UUCP id WAA14500 for freebsd-bugs@FreeBSD.ORG; Thu, 18 Sep 1997 22:23:59 +0200
Received: (from j@localhost)
	by uriah.heep.sax.de (8.8.7/8.8.5) id WAA08283;
	Thu, 18 Sep 1997 22:11:35 +0200 (MET DST)
Message-ID: <19970918221135.SE56310@uriah.heep.sax.de>
Date: Thu, 18 Sep 1997 22:11:35 +0200
From: j@uriah.heep.sax.de (J Wunsch)
To: joerg_wunsch@interface-business.de (Joerg Wunsch)
Cc: freebsd-bugs@FreeBSD.ORG
Subject: Re: My 2.2-stable panic reproduced
References: <19970908193559.WU22983@ida.interface-business.de> <19970918200521.RX41144@ida.interface-business.de>
X-Mailer: Mutt 0.60_p2-3,5,8-9
Mime-Version: 1.0
X-Phone: +49-351-2012 669
X-PGP-Fingerprint: DC 47 E6 E4 FF A6 E9 8F  93 21 E0 7D F9 12 D6 4E
Reply-To: joerg_wunsch@uriah.heep.sax.de (Joerg Wunsch)
In-Reply-To: <19970918200521.RX41144@ida.interface-business.de>; from J Wunsch on Sep 18, 1997 20:05:21 +0200
Sender: owner-freebsd-bugs@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

I wrote:

> (kgdb) p ipp
> $4 = (struct iso_node **) 0xefbffcec
> (kgdb) p **ipp
> $5 = {i_chain = {0x0, 0x0}, i_vnode = 0x87654321, i_devvp = 0x0, 
>   i_flag = 4069182888, i_dev = 4028788080, i_number = 0, i_mnt = 0xf08a8f94, 
>   i_lockf = 0xf0a6d400, i_endoff = 1049104, i_diroff = 0, i_offset = 0, 
>   i_ino = 28672, i_spare0 = 28672, i_spare1 = 0, iso_extent = 1024, 
>   i_size = -211922944, iso_start = -211922944, inode = {iso_atime = {
>       tv_sec = 65536, tv_nsec = 0}, iso_mtime = {tv_sec = 14888, 
>       tv_nsec = 14888}, iso_ctime = {tv_sec = -267137396, tv_nsec = 0}, 
>     iso_mode = 0, iso_uid = 0, iso_gid = 0, iso_links = 0, iso_rdev = 0}, 
>   i_lockcount = 0}

> So what?  Replace the VREF by a VGET?  The i_vnode value of 0x87654321
> sounds terribly interesting.  See this bug report:
> 
> Subject: Yet another 2.2-stable NFS (client) panic
> X-Mailer: Mutt 0.60_p2-3,5,8-9
> X-Phone: +49-351-31809-14
> X-PGP-Fingerprint: DC 47 E6 E4 FF A6 E9 8F  93 21 E0 7D F9 12 D6 4E
> Organization: interface business GmbH, Dresden
> Reply-To: joerg_wunsch@interface-business.de (Joerg Wunsch)
> 
> Fatal trap 12: page fault while in kernel mode
> fault virtual address   = 0x87654371
> fault code              = supervisor read, page not present
> instruction pointer     = 0x8:0xf013476f
> stack pointer           = 0x10:0xefbffdb0
> 
> Exactly the same bogus value.  So who the heck is dumping 0x87654321's
> all over my memory???

j@uriah 128% find /usr/src/sys -name '*.[ch]' | xargs fgrep 87654321
/usr/src/sys/sys/buf.h:#define NOLIST ((struct buf *)0x87654321)

So what gives?  Who's putting NOLIST when and where?  Why is it
getting dereferenced?

-- 
cheers, J"org

joerg_wunsch@uriah.heep.sax.de -- http://www.sax.de/~joerg/ -- NIC: JW11-RIPE
Never trust an operating system you don't have sources for. ;-)