Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 24 Jan 2013 20:03:59 +0200
From:      Konstantin Belousov <kostikbel@gmail.com>
To:        Christian Gusenbauer <c47g@gmx.at>
Cc:        freebsd-fs@freebsd.org, freebsd-stable@freebsd.org
Subject:   Re: 9.1-stable crashes while copying data from a NFS mounted directory
Message-ID:  <20130124180359.GH2522@kib.kiev.ua>
In-Reply-To: <201301241805.57623.c47g@gmx.at>
References:  <201301241805.57623.c47g@gmx.at>

next in thread | previous in thread | raw e-mail | index | archive | help

--vxNpRqk6sR1V+qwt
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Thu, Jan 24, 2013 at 06:05:57PM +0100, Christian Gusenbauer wrote:
> Hi!
>=20
> I'm using 9.1 stable svn revision 245605 and I get the panic below if I e=
xecute the following commands (as single user):
>=20
> # swapon -a
> # dumpon /dev/ada0s3b
> # mount -u /
> # ifconfig age0 inet 192.168.2.2 mtu 6144 up
> # mount -t nfs -o rsize=3D32768 data:/multimedia /mnt
> # cp /mnt/Movies/test/a.m2ts /tmp
>=20
> then the system panics almost immediately. I'll attach the stack trace.
>=20
> Note, that I'm using jumbo frames (6144 byte) on a 1Gbit network, maybe t=
hat's the cause for the panic, because the bcopy (see=20
> stack frame #15) fails.
>=20
> Any clues?
I tried a similar operation with the nfs mount of rsize=3D32768 and mtu
6144, but the machine runs HEAD and em instead of age. I was unable to
reproduce the panic on the copy of the 5GB file from nfs mount.

Show the output of "p *(struct uio *)0xffffff81b2da95a0" in kgdb.

>=20
> Ciao,
> Christian.
>=20
> #0  doadump (textdump=3D0)
>     at /spare/tmp/src-stable9/sys/kern/kern_shutdown.c:265
> 265             if (textdump && textdump_pending) {
> (kgdb) #0  doadump (textdump=3D0)
>     at /spare/tmp/src-stable9/sys/kern/kern_shutdown.c:265
> #1  0xffffffff802a8ba0 in db_dump (dummy=3D<value optimized out>,
>     dummy2=3D<value optimized out>, dummy3=3D<value optimized out>,
>     dummy4=3D<value optimized out>)
>     at /spare/tmp/src-stable9/sys/ddb/db_command.c:538
> #2  0xffffffff802a84ce in db_command (last_cmdp=3D0xffffffff808bc5c0,
>     cmd_table=3D<value optimized out>, dopager=3D1)
>     at /spare/tmp/src-stable9/sys/ddb/db_command.c:449
> #3  0xffffffff802a8720 in db_command_loop ()
>     at /spare/tmp/src-stable9/sys/ddb/db_command.c:502
> #4  0xffffffff802aa859 in db_trap (type=3D<value optimized out>,
>     code=3D<value optimized out>)
>     at /spare/tmp/src-stable9/sys/ddb/db_main.c:231
> #5  0xffffffff803c4918 in kdb_trap (type=3D3, code=3D0, tf=3D0xffffff81b2=
da8a80)
>     at /spare/tmp/src-stable9/sys/kern/subr_kdb.c:649
> #6  0xffffffff805a02cf in trap (frame=3D0xffffff81b2da8a80)
>     at /spare/tmp/src-stable9/sys/amd64/amd64/trap.c:579
> #7  0xffffffff8058992f in calltrap ()
>     at /spare/tmp/src-stable9/sys/amd64/amd64/exception.S:228
> #8  0xffffffff803c43cb in kdb_enter (why=3D0xffffffff806145f3 "panic",
>     msg=3D0x80 <Address 0x80 out of bounds>) at cpufunc.h:63
> #9  0xffffffff8038f407 in panic (fmt=3D<value optimized out>)
>     at /spare/tmp/src-stable9/sys/kern/kern_shutdown.c:627
> #10 0xffffffff80568049 in vm_fault_hold (map=3D0xfffffe0002000000,
>     vaddr=3D18446743530148802560, fault_type=3D2 '\002', fault_flags=3D0,
>     m_hold=3D0x0) at /spare/tmp/src-stable9/sys/vm/vm_fault.c:285
> #11 0xffffffff80568753 in vm_fault (map=3D0xfffffe0002000000,
>     vaddr=3D18446743530148802560, fault_type=3D<value optimized out>,
>     fault_flags=3D0) at /spare/tmp/src-stable9/sys/vm/vm_fault.c:229
> #12 0xffffffff805a00c7 in trap_pfault (frame=3D0xffffff81b2da9170, usermo=
de=3D0)
>     at /spare/tmp/src-stable9/sys/amd64/amd64/trap.c:771
> #13 0xffffffff805a051e in trap (frame=3D0xffffff81b2da9170)
>     at /spare/tmp/src-stable9/sys/amd64/amd64/trap.c:463
> #14 0xffffffff8058992f in calltrap ()
>     at /spare/tmp/src-stable9/sys/amd64/amd64/exception.S:228
> #15 0xffffffff8059d7b5 in bcopy ()
>     at /spare/tmp/src-stable9/sys/amd64/amd64/support.S:134
> #16 0xffffffff81c5963b in nfsm_mbufuio (nd=3D0xffffff81b2da9320,
>     uiop=3D<value optimized out>, siz=3D32768)
>     at /spare/tmp/src-stable9/sys/modules/nfscommon/../../fs/nfs/nfs_comm=
onsubs.c:212
> #17 0xffffffff81c19571 in nfsrpc_read (vp=3D0xfffffe0005ca2000,
>     uiop=3D0xffffff81b2da95a0, cred=3D<value optimized out>,
>     p=3D0xfffffe0005f28000, nap=3D0xffffff81b2da9480,
>     attrflagp=3D0xffffff81b2da954c, stuff=3D0x0)
>     at /spare/tmp/src-stable9/sys/modules/nfscl/../../fs/nfsclient/nfs_cl=
rpcops.c:1343
> #18 0xffffffff81c3aff0 in ncl_readrpc (vp=3D0xfffffe0005ca2000,
>     uiop=3D0xffffff81b2da95a0, cred=3D<value optimized out>)
>     at /spare/tmp/src-stable9/sys/modules/nfscl/../../fs/nfsclient/nfs_cl=
vnops.c:1366
> #19 0xffffffff81c2fed3 in ncl_doio (vp=3D0xfffffe0005ca2000,
>     bp=3D0xffffff816fabca20, cr=3D0xfffffe0002d59e00, td=3D0xfffffe0005f2=
8000,
>     called_from_strategy=3D0)
>     at /spare/tmp/src-stable9/sys/modules/nfscl/../../fs/nfsclient/nfs_cl=
bio.c:1605
> #20 0xffffffff81c32aaf in ncl_bioread (vp=3D0xfffffe0005ca2000,
>     uio=3D0xffffff81b2da9ad0, ioflag=3D<value optimized out>,
>     cred=3D0xfffffe0002d59e00)
>     at /spare/tmp/src-stable9/sys/modules/nfscl/../../fs/nfsclient/nfs_cl=
bio.c:541
> #21 0xffffffff804379c3 in vn_read (fp=3D0xfffffe0005f3e960,
>     uio=3D0xffffff81b2da9ad0, active_cred=3D<value optimized out>,
>     flags=3D<value optimized out>, td=3D<value optimized out>) at vnode_i=
f.h:384
> #22 0xffffffff80434d40 in vn_io_fault (fp=3D0xfffffe0005f3e960,
>     uio=3D0xffffff81b2da9ad0, active_cred=3D0xfffffe0002d59e00, flags=3D0,
>     td=3D0xfffffe0005f28000) at /spare/tmp/src-stable9/sys/kern/vfs_vnops=
=2Ec:903
> #23 0xffffffff803d7bd1 in dofileread (td=3D0xfffffe0005f28000, fd=3D3,
>     fp=3D0xfffffe0005f3e960, auio=3D0xffffff81b2da9ad0,
>     offset=3D<value optimized out>, flags=3D0) at file.h:287
> #24 0xffffffff803d7f7c in kern_readv (td=3D0xfffffe0005f28000, fd=3D3,
>     auio=3D0xffffff81b2da9ad0)
>     at /spare/tmp/src-stable9/sys/kern/sys_generic.c:250
> #25 0xffffffff803d8074 in sys_read (td=3D<value optimized out>,
>     uap=3D<value optimized out>)
>     at /spare/tmp/src-stable9/sys/kern/sys_generic.c:166
> #26 0xffffffff8059f4f0 in amd64_syscall (td=3D0xfffffe0005f28000, traced=
=3D0)
>     at subr_syscall.c:135
> #27 0xffffffff80589c17 in Xfast_syscall ()
>     at /spare/tmp/src-stable9/sys/amd64/amd64/exception.S:387
> #28 0x00000008009245fc in ?? ()
> Previous frame inner to this frame (corrupt stack?)
> (kgdb)
> _______________________________________________
> freebsd-stable@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-stable
> To unsubscribe, send any mail to "freebsd-stable-unsubscribe@freebsd.org"

--vxNpRqk6sR1V+qwt
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.19 (FreeBSD)
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=K3q3
-----END PGP SIGNATURE-----

--vxNpRqk6sR1V+qwt--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20130124180359.GH2522>