Date: Sun, 23 Nov 2008 19:55:37 GMT From: Barbara <barbara.xxx1975@libero.it> To: freebsd-gnats-submit@FreeBSD.org Subject: kern/129098: vinvalbuf: dirty bufs on 6-STABLE Message-ID: <200811231955.mANJtbB1004370@www.freebsd.org> Resent-Message-ID: <200811232000.mANK01tL094633@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 129098
>Category: kern
>Synopsis: vinvalbuf: dirty bufs on 6-STABLE
>Confidential: no
>Severity: serious
>Priority: low
>Responsible: freebsd-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: sw-bug
>Submitter-Id: current-users
>Arrival-Date: Sun Nov 23 20:00:01 UTC 2008
>Closed-Date:
>Last-Modified:
>Originator: Barbara
>Release:
>Organization:
>Environment:
FreeBSD satanasso.local.net 6.4-PRERELEASE FreeBSD 6.4-PRERELEASE #0: Sat Nov 8 02:31:58 CET 2008 root@satanasso.local.net:/usr/obj/usr/src/sys/SATANASSO i386
>Description:
# cat /var/crash/info.6
Dump header from device /dev/ad4s1b
Architecture: i386
Architecture Version: 2
Dump Length: 313995264B (299 MB)
Blocksize: 512
Dumptime: Sun Nov 23 19:30:01 2008
Hostname: satanasso.local.net
Magic: FreeBSD Kernel Dump
Version String: FreeBSD 6.4-PRERELEASE #0: Sat Nov 8 02:31:58 CET 2008
root@satanasso.local.net:/usr/obj/usr/src/sys/SATANASSO
Panic String: vinvalbuf: dirty bufs
Dump Parity: 536727816
Bounds: 6
Dump Status: good
# kgdb kernel.debug /var/crash/vmcore.6
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd"...
Unread portion of the kernel message buffer:
panic: vinvalbuf: dirty bufs
cpuid = 0
Uptime: 1d19h0m42s
Physical memory: 2031 MB
Dumping 299 MB: 284 268 252 236 220 204 188 172 156 140 124 108 92 76 60 44 28 12
Reading symbols from /boot/kernel/linux.ko...done.
Loaded symbols for /boot/kernel/linux.ko
Reading symbols from /boot/modules/nvidia.ko...done.
Loaded symbols for /boot/modules/nvidia.ko
Reading symbols from /boot/kernel/acpi.ko...done.
Loaded symbols for /boot/kernel/acpi.ko
Reading symbols from /boot/kernel/linprocfs.ko...done.
Loaded symbols for /boot/kernel/linprocfs.ko
Reading symbols from /boot/kernel/logo_saver.ko...done.
Loaded symbols for /boot/kernel/logo_saver.ko
Reading symbols from /boot/kernel/aio.ko...done.
Loaded symbols for /boot/kernel/aio.ko
Reading symbols from /boot/modules/kqemu.ko...done.
Loaded symbols for /boot/modules/kqemu.ko
Reading symbols from /boot/kernel/ntfs.ko...done.
Loaded symbols for /boot/kernel/ntfs.ko
#0 doadump () at pcpu.h:165
165 __asm __volatile("movl %%fs:0,%0" : "=r" (td));
(kgdb) bt full
#0 doadump () at pcpu.h:165
No locals.
#1 0xc054d509 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:410
first_buf_printf = 1
#2 0xc054d8d6 in panic (fmt=0xc074d534 "vinvalbuf: dirty bufs") at /usr/src/sys/kern/kern_shutdown.c:566
td = (struct thread *) 0xc7774180
bootopt = 260
newpanic = 0
ap = 0xc7774180 "\220�t��["
buf = "vinvalbuf: dirty bufs", '\0' <repeats 234 times>
#3 0xc05b9015 in bufobj_invalbuf (bo=0xcc199b60, flags=1, td=0x0, slpflag=0, slptimeo=0) at /usr/src/sys/kern/vfs_subr.c:1032
error = 0
#4 0xc05b9362 in vinvalbuf (vp=0xcc199aa0, flags=0, td=0x0, slpflag=0, slptimeo=0) at /usr/src/sys/kern/vfs_subr.c:1099
No locals.
#5 0xc05bc47b in vgonel (vp=0xcc199aa0) at /usr/src/sys/kern/vfs_subr.c:2453
td = (struct thread *) 0xc7774180
oweinact = 0
active = 1
mp = (struct mount *) 0xc6fa5000
#6 0xc05bc358 in vgone (vp=0xcc199aa0) at /usr/src/sys/kern/vfs_subr.c:2408
No locals.
#7 0xc04e6e10 in devfs_delete (dm=0xc6f41380, de=0xc6fa9880, vp_locked=0) at /usr/src/sys/fs/devfs/devfs_devs.c:265
vp = (struct vnode *) 0xcc199aa0
td = (struct thread *) 0xc7774180
#8 0xc04e7146 in devfs_populate_loop (dm=0xc6f41380, cleanup=0) at /usr/src/sys/fs/devfs/devfs_devs.c:384
cdp = (struct cdev_priv *) 0xc6f2e200
de = (struct devfs_dirent *) 0xc6fa9880
dd = (struct devfs_dirent *) 0x0
pdev = (struct cdev *) 0xc6de7dd0
j = 0
q = 0x0
s = 0xc6de7dd0 "\002"
#9 0xc04e7405 in devfs_populate (dm=0xc6f41380) at /usr/src/sys/fs/devfs/devfs_devs.c:486
No locals.
#10 0xc04e9c68 in devfs_lookupx (ap=0x0, dm_unlock=0xeca40a6c) at /usr/src/sys/fs/devfs/devfs_vnops.c:587
cnp = (struct componentname *) 0xeca40c1c
dvp = (struct vnode *) 0xc6de7dd0
vpp = (struct vnode **) 0xeca40c08
td = (struct thread *) 0xc7774180
de = (struct devfs_dirent *) 0x0
dd = (struct devfs_dirent *) 0xc6eaa980
dde = (struct devfs_dirent **) 0x0
dmp = (struct devfs_mount *) 0xc6f41380
cdev = (struct cdev *) 0xeca409fc
error = -324793336
flags = 83935300
nameiop = 0
specname = "\200Aw�\200Aw�\000\000\000\000�9x�x\n��\034\f��4\n����Z�X\200��\006\000\000\000|\200��\200Aw�L\n��\000\200��L\n��x�[�"
pname = 0xc96ca805 "ad4s1a"
#11 0xc04ea126 in devfs_lookup (ap=0xeca40aec) at /usr/src/sys/fs/devfs/devfs_vnops.c:667
j = -324793620
dmp = (struct devfs_mount *) 0xc6f41380
dm_unlock = 1
#12 0xc0724728 in VOP_LOOKUP_APV (vop=0xc0774f40, a=0xeca40aec) at vnode_if.c:99
rc = -1065922752
#13 0xc05b1a63 in lookup (ndp=0xeca40bf4) at vnode_if.h:56
cp = 0xc96ca80b ""
dp = (struct vnode *) 0xc6de7dd0
tdp = (struct vnode *) 0xc6de7dd0
mp = (struct mount *) 0x2
docache = 32
wantparent = 0
rdonly = 0
trailing_slash = 0
error = 0
dpunlocked = 0
cnp = (struct componentname *) 0xeca40c1c
td = (struct thread *) 0xc7774180
vfslocked = 0
dvfslocked = 0
tvfslocked = 2
lkflags_save = 2
#14 0xc05b11d8 in namei (ndp=0xeca40bf4) at /usr/src/sys/kern/vfs_lookup.c:216
fdp = (struct filedesc *) 0xc763a800
cp = 0xc763a800 ""
dp = (struct vnode *) 0xc6de7aa0
aiov = {iov_base = 0x0, iov_len = 0}
auio = {uio_iov = 0x0, uio_iovcnt = 0, uio_offset = 0, uio_resid = 0, uio_segflg = UIO_USERSPACE, uio_rw = UIO_READ, uio_td = 0x0}
error = -958498144
linklen = -958498144
cnp = (struct componentname *) 0xeca40c1c
td = (struct thread *) 0xc7774180
p = (struct proc *) 0x0
vfslocked = 0
#15 0xc05c39ed in kern_stat (td=0xc7774180, path=0x0, pathseg=UIO_USERSPACE, sbp=0x0) at /usr/src/sys/kern/vfs_syscalls.c:2077
nd = {ni_dirp = 0x295c79c0 <Address 0x295c79c0 out of bounds>, ni_segflg = UIO_USERSPACE, ni_startdir = 0x0, ni_rootdir = 0xc6de7aa0, ni_topdir = 0x0, ni_vp = 0x0, ni_dvp = 0xc6de7dd0, ni_pathlen = 1, ni_next = 0xc96ca80b "",
ni_loopcnt = 0, ni_cnd = {cn_nameiop = 0, cn_flags = 83935300, cn_thread = 0xc7774180, cn_cred = 0xc77a2480, cn_lkflags = 2, cn_pnbuf = 0xc96ca800 "/dev/ad4s1a", cn_nameptr = 0xc96ca805 "ad4s1a", cn_namelen = 6, cn_consume = 0}}
sb = {st_dev = 0, st_ino = 0, st_mode = 0, st_nlink = 0, st_uid = 255, st_gid = 0, st_rdev = 0, st_atimespec = {tv_sec = 0, tv_nsec = 0}, st_mtimespec = {tv_sec = 0, tv_nsec = 0}, st_ctimespec = {tv_sec = 0, tv_nsec = 0},
st_size = 0, st_blocks = 0, st_blksize = 0, st_flags = 0, st_gen = 0, st_lspare = 0, st_birthtimespec = {tv_sec = 0, tv_nsec = 0}}
error = -324793240
vfslocked = -324793084
#16 0xc05c397f in stat (td=0x0, uap=0xeca40d04) at /usr/src/sys/kern/vfs_syscalls.c:2061
sb = {st_dev = 3346328720, st_ino = 3226683090, st_mode = 3220, st_nlink = 60580, st_uid = 137125056, st_gid = 8, st_rdev = 0, st_atimespec = {tv_sec = 0, tv_nsec = 0}, st_mtimespec = {tv_sec = 0, tv_nsec = -956277856},
st_ctimespec = {tv_sec = -950781120, tv_nsec = 1227465001}, st_size = -4074371659127028889, st_blocks = -1394975447062199936, st_blksize = 3226682654, st_flags = 683971344, st_gen = 3346481536, st_lspare = -324793032,
st_birthtimespec = {tv_sec = 0, tv_nsec = 0}}
error = 0
#17 0xc07180c3 in syscall (frame=
{tf_fs = 59, tf_es = 59, tf_ds = 59, tf_edi = 693875341, tf_esi = 693926336, tf_ebp = -1077946136, tf_isp = -324792988, tf_ebx = 693907552, tf_edx = -1077946432, tf_ecx = 693926344, tf_eax = 188, tf_trapno = 22, tf_err = 2, tf_eip = 693787271, tf_cs = 51, tf_eflags = 582, tf_esp = -1077946772, tf_ss = 59}) at /usr/src/sys/i386/i386/trap.c:984
params = 0xbfbfd670 <Address 0xbfbfd670 out of bounds>
callp = (struct sysent *) 0xc07785b0
td = (struct thread *) 0xc7774180
p = (struct proc *) 0xc774ec90
orig_tf_eflags = 582
sticks = 0
error = 0
narg = 2
args = {693926336, -1077946256, -948485760, 0, 6, 8, 0, -948638576}
code = 188
#18 0xc06ff56f in Xint0x80_syscall () at /usr/src/sys/i386/i386/exception.s:200
No locals.
#19 0x00000033 in ?? ()
No symbol table info available.
Previous frame inner to this frame (corrupt stack?)
>How-To-Repeat:
>Fix:
>Release-Note:
>Audit-Trail:
>Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200811231955.mANJtbB1004370>