Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 19 Aug 2018 17:22:13 +0000
From:      bugzilla-noreply@freebsd.org
To:        fs@FreeBSD.org
Subject:   [Bug 230752] panic: excl->share in newnfs_request
Message-ID:  <bug-230752-3630@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D230752

            Bug ID: 230752
           Summary: panic: excl->share in newnfs_request
           Product: Base System
           Version: CURRENT
          Hardware: amd64
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: kern
          Assignee: fs@FreeBSD.org
          Reporter: dim@FreeBSD.org

Created attachment 196354
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D196354&action=
=3Dedit
Text dump of newnfs_request -> witness panic

I recently got a few similar panics, seemingly originating from newnfs_requ=
est.
 The panic goes like this:

shared lock of (lockmgr) ufs @ /usr/src/sys/kern/vfs_lookup.c:671
while exclusively locked from /usr/src/sys/kern/vfs_subr.c:2590
panic: excl->share
cpuid =3D 2
time =3D 1534686985
...
#1  doadump (textdump=3D<optimized out>)
    at /usr/src/sys/kern/kern_shutdown.c:366
#2  0xffffffff8044906b in db_dump (dummy=3D<optimized out>,=20
    dummy2=3D<unavailable>, dummy3=3D<unavailable>, dummy4=3D<unavailable>)
    at /usr/src/sys/ddb/db_command.c:574
#3  0xffffffff80448e39 in db_command (last_cmdp=3D<optimized out>,=20
    cmd_table=3D<optimized out>, dopager=3D1) at /usr/src/sys/ddb/db_comman=
d.c:481
#4  0xffffffff80448bb4 in db_command_loop ()
    at /usr/src/sys/ddb/db_command.c:534
#5  0xffffffff8044bd7f in db_trap (type=3D<optimized out>, code=3D<optimize=
d out>)
    at /usr/src/sys/ddb/db_main.c:252
#6  0xffffffff80be79d5 in kdb_trap (type=3D3, code=3D0, tf=3D<optimized out=
>)
    at /usr/src/sys/kern/subr_kdb.c:693
#7  0xffffffff81084c3a in trap (frame=3D0xfffffe0000582fc0)
    at /usr/src/sys/amd64/amd64/trap.c:605
#8  <signal handler called>
#9  kdb_enter (why=3D0xffffffff8131179d "panic", msg=3D<optimized out>)
    at /usr/src/sys/kern/subr_kdb.c:479
#10 0xffffffff80b9d7b1 in vpanic (fmt=3D<optimized out>, ap=3D0xfffffe00005=
83130)
    at /usr/src/sys/kern/kern_shutdown.c:852
#11 0xffffffff80b9d550 in kassert_panic (fmt=3D0xffffffff812a3ed5 "excl->sh=
are")
    at /usr/src/sys/kern/kern_shutdown.c:749
#12 0xffffffff80c083a8 in witness_checkorder (lock=3D0xfffff80004190ba8,=20
    flags=3D1, file=3D0xffffffff8130d3f0 "/usr/src/sys/kern/vfs_lookup.c",=
=20
    line=3D<optimized out>,=20
    interlock=3D0xffffffff81f64e2c <w_locklistdata+264684>)
    at /usr/src/sys/kern/subr_witness.c:1176
#13 0xffffffff80b70c3e in lockmgr_slock_hard (lk=3D<optimized out>,=20
    flags=3D2106368, ilk=3D0xfffff80004190bd8, file=3D<optimized out>,=20
    line=3D<optimized out>, lwa=3D<optimized out>)
    at /usr/src/sys/kern/kern_lock.c:567
#14 0xffffffff80b71d5b in __lockmgr_args (lk=3D<optimized out>,=20
    flags=3D<optimized out>, ilk=3D<optimized out>, wmesg=3D<optimized out>=
,=20
    pri=3D<optimized out>, timo=3D<optimized out>,=20
    file=3D0xffffffff8130d3f0 "/usr/src/sys/kern/vfs_lookup.c", line=3D671)
    at /usr/src/sys/kern/kern_lock.c:1195
#15 0xffffffff80ec6a05 in _lockmgr_args (lk=3D0xfffff80004190ba8,=20
    flags=3D2106368, ilk=3D<optimized out>, wmesg=3D<optimized out>, prio=
=3D0,=20
    timo=3D0, file=3D<optimized out>, line=3D18) at /usr/src/sys/sys/lockmg=
r.h:104
#16 ffs_lock (ap=3D0xfffffe00005833c8) at /usr/src/sys/ufs/ffs/ffs_vnops.c:=
428
#17 0xffffffff81208059 in VOP_LOCK1_APV (
    vop=3D0xffffffff81b62d50 <ffs_vnodeops2>, a=3D0xfffffe00005833c8)
    at vnode_if.c:2087
#18 0xffffffff80c86927 in VOP_LOCK1 (vp=3D<optimized out>, flags=3D2106368,=
=20
    file=3D<optimized out>, line=3D671) at ./vnode_if.h:859
#19 _vn_lock (vp=3D0xfffff80004190b40, flags=3D2106368,=20
    file=3D0xffffffff8130d3f0 "/usr/src/sys/kern/vfs_lookup.c", line=3D671)
    at /usr/src/sys/kern/vfs_vnops.c:1531
#20 0xffffffff80c68fe6 in lookup (ndp=3D0xfffffe00005835a0)
    at /usr/src/sys/kern/vfs_lookup.c:669
#21 0xffffffff80c68aad in namei (ndp=3D0xfffffe00005835a0)
    at /usr/src/sys/kern/vfs_lookup.c:450
#22 0xffffffff80c49b85 in unp_connectat (fd=3D<optimized out>,=20
    so=3D<optimized out>, nam=3D<optimized out>, td=3D0xfffff800036f2000)
    at /usr/src/sys/kern/uipc_usrreq.c:1554
#23 0xffffffff80c3bc98 in soconnectat (fd=3D<optimized out>,=20
    so=3D<optimized out>, nam=3D0xfffff8000367d800,=20
    td=3D0xffffffff80b7d390 <_mtx_init+144>)
    at /usr/src/sys/kern/uipc_socket.c:1230
#24 0xffffffff80e611b9 in clnt_vc_create (so=3D0xfffff80004c316d0,=20
    raddr=3D0xfffff800035fc020, prog=3D553713921, vers=3D1, sendsz=3D4096,=
=20
    recvsz=3D4096, intrflag=3D0) at /usr/src/sys/rpc/clnt_vc.c:159
#25 0xffffffff80e60439 in clnt_reconnect_connect (cl=3D0xfffff80003372840)
    at /usr/src/sys/rpc/clnt_rc.c:193
#26 clnt_reconnect_call (cl=3D0xfffff80003372840, ext=3D0xfffffe0000583ab0,=
=20
    proc=3D1, args=3D0xfffff800048dda00, resultsp=3D0xfffffe0000583c28,=20
    utimeout=3D...) at /usr/src/sys/rpc/clnt_rc.c:265
#27 0xffffffff80a637ec in newnfs_request (nd=3D0xfffffe0000583c28, nmp=3D0x=
0,=20
    clp=3D0x0, nrp=3D0xffffffff82021a18 <nfsrv_nfsuserdsock>, vp=3D0x0, td=
=3D0x0,=20
    cred=3D0xfffff80003e65000, prog=3D553713921, vers=3D1, retsum=3D0x0, to=
plevel=3D0,=20
    xidp=3D0x0, dssep=3D0x0) at /usr/src/sys/fs/nfs/nfs_commonkrpc.c:818
#28 0xffffffff80a6d5f9 in nfsrv_getuser (procnum=3D1, uid=3D<optimized out>=
,=20
    gid=3D<optimized out>, name=3D0x0, p=3D0xfffffe0000582ce0)
    at /usr/src/sys/fs/nfs/nfs_commonsubs.c:3616
#29 0xffffffff80a6d71a in nfsrv_getgrpscred (oldcred=3D0xfffff80003deec00)
    at /usr/src/sys/fs/nfs/nfs_commonsubs.c:3150
#30 0xffffffff80acf53e in nfsd_excred (nd=3D0xfffffe0000583ff8,=20
    exp=3D<optimized out>, credanon=3D0xfffffe0000582f80)
    at /usr/src/sys/fs/nfsserver/nfs_nfsdport.c:2932
#31 0xffffffff80aa8104 in nfsrvd_compound (nd=3D<optimized out>, isdgram=3D=
0,=20
    tag=3D0x10 <error: Cannot access memory at address 0x10>,=20
    taglen=3D<optimized out>, minorvers=3D<optimized out>, p=3D<optimized o=
ut>)
    at /usr/src/sys/fs/nfsserver/nfs_nfsdsocket.c:1008
#32 nfsrvd_dorpc (nd=3D0xfffffe0000583ff8, isdgram=3D0,=20
    tag=3D0x10 <error: Cannot access memory at address 0x10>, taglen=3D7,=20
    minorvers=3D<optimized out>, p=3D0xfffff800036f2000)
    at /usr/src/sys/fs/nfsserver/nfs_nfsdsocket.c:560
#33 0xffffffff80abc3a7 in nfs_proc (xid=3D<optimized out>,=20
    xprt=3D<optimized out>, nd=3D<optimized out>, rpp=3D<optimized out>)
    at /usr/src/sys/fs/nfsserver/nfs_nfsdkrpc.c:387
#34 nfssvc_program (rqst=3D0xfffff8004d1d5800, xprt=3D0xfffff800035fb600)
    at /usr/src/sys/fs/nfsserver/nfs_nfsdkrpc.c:272
#35 0xffffffff80e68499 in svc_executereq (rqstp=3D<optimized out>)
    at /usr/src/sys/rpc/svc.c:1031
#36 svc_run_internal (grp=3D<optimized out>, ismaster=3D1)
    at /usr/src/sys/rpc/svc.c:1306
#37 0xffffffff80e6785e in svc_run (pool=3D<optimized out>)
    at /usr/src/sys/rpc/svc.c:1385
#38 0xffffffff80abca06 in nfsrvd_nfsd (td=3D<optimized out>,=20
    args=3D0xfffffe0000584510) at /usr/src/sys/fs/nfsserver/nfs_nfsdkrpc.c:=
542
#39 0xffffffff80ad298b in nfssvc_nfsd (td=3D0xfffff800036f2000,=20
    uap=3D<optimized out>) at /usr/src/sys/fs/nfsserver/nfs_nfsdport.c:3451
#40 0xffffffff80e45eeb in sys_nfssvc (td=3D0xfffff800036f2000,=20
    uap=3D0xfffff800036f23c0) at /usr/src/sys/nfs/nfs_nfssvc.c:111
#41 0xffffffff810859ef in syscallenter (td=3D0xfffff800036f2000)
    at /usr/src/sys/amd64/amd64/../../kern/subr_syscall.c:135
#42 amd64_syscall (td=3D0xfffff800036f2000, traced=3D0)
    at /usr/src/sys/amd64/amd64/trap.c:1029
#43 <signal handler called>
#44 0x00000008002dee8a in ?? ()

I'm adding core.txt.2 for reference.  Full core dump available on request.

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-230752-3630>