From owner-freebsd-bugs@FreeBSD.ORG Sun Nov 23 20:00:02 2008 Return-Path: Delivered-To: freebsd-bugs@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 464901065676 for ; Sun, 23 Nov 2008 20:00:02 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 207578FC1A for ; Sun, 23 Nov 2008 20:00:02 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.3/8.14.3) with ESMTP id mANK02tx094634 for ; Sun, 23 Nov 2008 20:00:02 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.3/8.14.3/Submit) id mANK01tL094633; Sun, 23 Nov 2008 20:00:01 GMT (envelope-from gnats) Resent-Date: Sun, 23 Nov 2008 20:00:01 GMT Resent-Message-Id: <200811232000.mANK01tL094633@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, Barbara Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id B79871065670 for ; Sun, 23 Nov 2008 19:55:38 +0000 (UTC) (envelope-from nobody@FreeBSD.org) Received: from www.freebsd.org (www.freebsd.org [IPv6:2001:4f8:fff6::21]) by mx1.freebsd.org (Postfix) with ESMTP id A45838FC20 for ; Sun, 23 Nov 2008 19:55:38 +0000 (UTC) (envelope-from nobody@FreeBSD.org) Received: from www.freebsd.org (localhost [127.0.0.1]) by www.freebsd.org (8.14.3/8.14.3) with ESMTP id mANJtc3r004384 for ; Sun, 23 Nov 2008 19:55:38 GMT (envelope-from nobody@www.freebsd.org) Received: (from nobody@localhost) by www.freebsd.org (8.14.3/8.14.3/Submit) id mANJtbB1004370; Sun, 23 Nov 2008 19:55:37 GMT (envelope-from nobody) Message-Id: <200811231955.mANJtbB1004370@www.freebsd.org> Date: Sun, 23 Nov 2008 19:55:37 GMT From: Barbara To: freebsd-gnats-submit@FreeBSD.org X-Send-Pr-Version: www-3.1 Cc: Subject: kern/129098: vinvalbuf: dirty bufs on 6-STABLE X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 23 Nov 2008 20:00:02 -0000 >Number: 129098 >Category: kern >Synopsis: vinvalbuf: dirty bufs on 6-STABLE >Confidential: no >Severity: serious >Priority: low >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Sun Nov 23 20:00:01 UTC 2008 >Closed-Date: >Last-Modified: >Originator: Barbara >Release: >Organization: >Environment: FreeBSD satanasso.local.net 6.4-PRERELEASE FreeBSD 6.4-PRERELEASE #0: Sat Nov 8 02:31:58 CET 2008 root@satanasso.local.net:/usr/obj/usr/src/sys/SATANASSO i386 >Description: # cat /var/crash/info.6 Dump header from device /dev/ad4s1b Architecture: i386 Architecture Version: 2 Dump Length: 313995264B (299 MB) Blocksize: 512 Dumptime: Sun Nov 23 19:30:01 2008 Hostname: satanasso.local.net Magic: FreeBSD Kernel Dump Version String: FreeBSD 6.4-PRERELEASE #0: Sat Nov 8 02:31:58 CET 2008 root@satanasso.local.net:/usr/obj/usr/src/sys/SATANASSO Panic String: vinvalbuf: dirty bufs Dump Parity: 536727816 Bounds: 6 Dump Status: good # kgdb kernel.debug /var/crash/vmcore.6 GNU gdb 6.1.1 [FreeBSD] Copyright 2004 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "i386-marcel-freebsd"... Unread portion of the kernel message buffer: panic: vinvalbuf: dirty bufs cpuid = 0 Uptime: 1d19h0m42s Physical memory: 2031 MB Dumping 299 MB: 284 268 252 236 220 204 188 172 156 140 124 108 92 76 60 44 28 12 Reading symbols from /boot/kernel/linux.ko...done. Loaded symbols for /boot/kernel/linux.ko Reading symbols from /boot/modules/nvidia.ko...done. Loaded symbols for /boot/modules/nvidia.ko Reading symbols from /boot/kernel/acpi.ko...done. Loaded symbols for /boot/kernel/acpi.ko Reading symbols from /boot/kernel/linprocfs.ko...done. Loaded symbols for /boot/kernel/linprocfs.ko Reading symbols from /boot/kernel/logo_saver.ko...done. Loaded symbols for /boot/kernel/logo_saver.ko Reading symbols from /boot/kernel/aio.ko...done. Loaded symbols for /boot/kernel/aio.ko Reading symbols from /boot/modules/kqemu.ko...done. Loaded symbols for /boot/modules/kqemu.ko Reading symbols from /boot/kernel/ntfs.ko...done. Loaded symbols for /boot/kernel/ntfs.ko #0 doadump () at pcpu.h:165 165 __asm __volatile("movl %%fs:0,%0" : "=r" (td)); (kgdb) bt full #0 doadump () at pcpu.h:165 No locals. #1 0xc054d509 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:410 first_buf_printf = 1 #2 0xc054d8d6 in panic (fmt=0xc074d534 "vinvalbuf: dirty bufs") at /usr/src/sys/kern/kern_shutdown.c:566 td = (struct thread *) 0xc7774180 bootopt = 260 newpanic = 0 ap = 0xc7774180 "\220�t��[" buf = "vinvalbuf: dirty bufs", '\0' #3 0xc05b9015 in bufobj_invalbuf (bo=0xcc199b60, flags=1, td=0x0, slpflag=0, slptimeo=0) at /usr/src/sys/kern/vfs_subr.c:1032 error = 0 #4 0xc05b9362 in vinvalbuf (vp=0xcc199aa0, flags=0, td=0x0, slpflag=0, slptimeo=0) at /usr/src/sys/kern/vfs_subr.c:1099 No locals. #5 0xc05bc47b in vgonel (vp=0xcc199aa0) at /usr/src/sys/kern/vfs_subr.c:2453 td = (struct thread *) 0xc7774180 oweinact = 0 active = 1 mp = (struct mount *) 0xc6fa5000 #6 0xc05bc358 in vgone (vp=0xcc199aa0) at /usr/src/sys/kern/vfs_subr.c:2408 No locals. #7 0xc04e6e10 in devfs_delete (dm=0xc6f41380, de=0xc6fa9880, vp_locked=0) at /usr/src/sys/fs/devfs/devfs_devs.c:265 vp = (struct vnode *) 0xcc199aa0 td = (struct thread *) 0xc7774180 #8 0xc04e7146 in devfs_populate_loop (dm=0xc6f41380, cleanup=0) at /usr/src/sys/fs/devfs/devfs_devs.c:384 cdp = (struct cdev_priv *) 0xc6f2e200 de = (struct devfs_dirent *) 0xc6fa9880 dd = (struct devfs_dirent *) 0x0 pdev = (struct cdev *) 0xc6de7dd0 j = 0 q = 0x0 s = 0xc6de7dd0 "\002" #9 0xc04e7405 in devfs_populate (dm=0xc6f41380) at /usr/src/sys/fs/devfs/devfs_devs.c:486 No locals. #10 0xc04e9c68 in devfs_lookupx (ap=0x0, dm_unlock=0xeca40a6c) at /usr/src/sys/fs/devfs/devfs_vnops.c:587 cnp = (struct componentname *) 0xeca40c1c dvp = (struct vnode *) 0xc6de7dd0 vpp = (struct vnode **) 0xeca40c08 td = (struct thread *) 0xc7774180 de = (struct devfs_dirent *) 0x0 dd = (struct devfs_dirent *) 0xc6eaa980 dde = (struct devfs_dirent **) 0x0 dmp = (struct devfs_mount *) 0xc6f41380 cdev = (struct cdev *) 0xeca409fc error = -324793336 flags = 83935300 nameiop = 0 specname = "\200Aw�\200Aw�\000\000\000\000�9x�x\n��\034\f��4\n����Z�X\200��\006\000\000\000|\200��\200Aw�L\n��\000\200��L\n��x�[�" pname = 0xc96ca805 "ad4s1a" #11 0xc04ea126 in devfs_lookup (ap=0xeca40aec) at /usr/src/sys/fs/devfs/devfs_vnops.c:667 j = -324793620 dmp = (struct devfs_mount *) 0xc6f41380 dm_unlock = 1 #12 0xc0724728 in VOP_LOOKUP_APV (vop=0xc0774f40, a=0xeca40aec) at vnode_if.c:99 rc = -1065922752 #13 0xc05b1a63 in lookup (ndp=0xeca40bf4) at vnode_if.h:56 cp = 0xc96ca80b "" dp = (struct vnode *) 0xc6de7dd0 tdp = (struct vnode *) 0xc6de7dd0 mp = (struct mount *) 0x2 docache = 32 wantparent = 0 rdonly = 0 trailing_slash = 0 error = 0 dpunlocked = 0 cnp = (struct componentname *) 0xeca40c1c td = (struct thread *) 0xc7774180 vfslocked = 0 dvfslocked = 0 tvfslocked = 2 lkflags_save = 2 #14 0xc05b11d8 in namei (ndp=0xeca40bf4) at /usr/src/sys/kern/vfs_lookup.c:216 fdp = (struct filedesc *) 0xc763a800 cp = 0xc763a800 "" dp = (struct vnode *) 0xc6de7aa0 aiov = {iov_base = 0x0, iov_len = 0} auio = {uio_iov = 0x0, uio_iovcnt = 0, uio_offset = 0, uio_resid = 0, uio_segflg = UIO_USERSPACE, uio_rw = UIO_READ, uio_td = 0x0} error = -958498144 linklen = -958498144 cnp = (struct componentname *) 0xeca40c1c td = (struct thread *) 0xc7774180 p = (struct proc *) 0x0 vfslocked = 0 #15 0xc05c39ed in kern_stat (td=0xc7774180, path=0x0, pathseg=UIO_USERSPACE, sbp=0x0) at /usr/src/sys/kern/vfs_syscalls.c:2077 nd = {ni_dirp = 0x295c79c0
, ni_segflg = UIO_USERSPACE, ni_startdir = 0x0, ni_rootdir = 0xc6de7aa0, ni_topdir = 0x0, ni_vp = 0x0, ni_dvp = 0xc6de7dd0, ni_pathlen = 1, ni_next = 0xc96ca80b "", ni_loopcnt = 0, ni_cnd = {cn_nameiop = 0, cn_flags = 83935300, cn_thread = 0xc7774180, cn_cred = 0xc77a2480, cn_lkflags = 2, cn_pnbuf = 0xc96ca800 "/dev/ad4s1a", cn_nameptr = 0xc96ca805 "ad4s1a", cn_namelen = 6, cn_consume = 0}} sb = {st_dev = 0, st_ino = 0, st_mode = 0, st_nlink = 0, st_uid = 255, st_gid = 0, st_rdev = 0, st_atimespec = {tv_sec = 0, tv_nsec = 0}, st_mtimespec = {tv_sec = 0, tv_nsec = 0}, st_ctimespec = {tv_sec = 0, tv_nsec = 0}, st_size = 0, st_blocks = 0, st_blksize = 0, st_flags = 0, st_gen = 0, st_lspare = 0, st_birthtimespec = {tv_sec = 0, tv_nsec = 0}} error = -324793240 vfslocked = -324793084 #16 0xc05c397f in stat (td=0x0, uap=0xeca40d04) at /usr/src/sys/kern/vfs_syscalls.c:2061 sb = {st_dev = 3346328720, st_ino = 3226683090, st_mode = 3220, st_nlink = 60580, st_uid = 137125056, st_gid = 8, st_rdev = 0, st_atimespec = {tv_sec = 0, tv_nsec = 0}, st_mtimespec = {tv_sec = 0, tv_nsec = -956277856}, st_ctimespec = {tv_sec = -950781120, tv_nsec = 1227465001}, st_size = -4074371659127028889, st_blocks = -1394975447062199936, st_blksize = 3226682654, st_flags = 683971344, st_gen = 3346481536, st_lspare = -324793032, st_birthtimespec = {tv_sec = 0, tv_nsec = 0}} error = 0 #17 0xc07180c3 in syscall (frame= {tf_fs = 59, tf_es = 59, tf_ds = 59, tf_edi = 693875341, tf_esi = 693926336, tf_ebp = -1077946136, tf_isp = -324792988, tf_ebx = 693907552, tf_edx = -1077946432, tf_ecx = 693926344, tf_eax = 188, tf_trapno = 22, tf_err = 2, tf_eip = 693787271, tf_cs = 51, tf_eflags = 582, tf_esp = -1077946772, tf_ss = 59}) at /usr/src/sys/i386/i386/trap.c:984 params = 0xbfbfd670
callp = (struct sysent *) 0xc07785b0 td = (struct thread *) 0xc7774180 p = (struct proc *) 0xc774ec90 orig_tf_eflags = 582 sticks = 0 error = 0 narg = 2 args = {693926336, -1077946256, -948485760, 0, 6, 8, 0, -948638576} code = 188 #18 0xc06ff56f in Xint0x80_syscall () at /usr/src/sys/i386/i386/exception.s:200 No locals. #19 0x00000033 in ?? () No symbol table info available. Previous frame inner to this frame (corrupt stack?) >How-To-Repeat: >Fix: >Release-Note: >Audit-Trail: >Unformatted: