From owner-freebsd-current@FreeBSD.ORG  Fri Feb  4 02:38:11 2005
Return-Path: <owner-freebsd-current@FreeBSD.ORG>
Delivered-To: freebsd-current@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 4D24716A4CE
	for <current@freeBSD.org>; Fri,  4 Feb 2005 02:38:11 +0000 (GMT)
Received: from obsecurity.dyndns.org
	(CPE0050040655c8-CM00111ae02aac.cpe.net.cable.rogers.com [69.199.47.57])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 19C0143D49
	for <current@freeBSD.org>; Fri,  4 Feb 2005 02:38:11 +0000 (GMT)
	(envelope-from kris@obsecurity.org)
Received: by obsecurity.dyndns.org (Postfix, from userid 1000)
	id 296CC512AF; Thu,  3 Feb 2005 18:38:10 -0800 (PST)
Date: Thu, 3 Feb 2005 18:38:10 -0800
From: Kris Kennaway <kris@obsecurity.org>
To: Jeff Roberson <jroberson@chesapeake.net>, current@freeBSD.org
Message-ID: <20050204023809.GA39071@xor.obsecurity.org>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="x+6KMIRAuhnl3hBn"
Content-Disposition: inline
User-Agent: Mutt/1.4.2.1i
Subject: panic: splay lookup failed in remove
X-BeenThere: freebsd-current@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Discussions about the use of FreeBSD-current
	<freebsd-current.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-current>
List-Post: <mailto:freebsd-current@freebsd.org>
List-Help: <mailto:freebsd-current-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 04 Feb 2005 02:38:11 -0000


--x+6KMIRAuhnl3hBn
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

I ran 4 fsx instances in parallel on a dual-cpu machine with
mpsafevfs=1 and up-to-date sources, and it panicked after a few
seconds with:

panic: splay lookup failed in remove
cpuid = 1
KDB: enter: panic
[thread pid 3 tid 100121 ]
Stopped at      kdb_enter+0x30: leave
db> tr
Tracing pid 3 tid 100121 td 0xc570c170
kdb_enter(c06fb771,1,c0704ec6,eec1eac4,c570c170) at kdb_enter+0x30
panic(c0704ec6,0,22,de81406c,c5a5a9f4) at panic+0x13e
buf_vlist_remove(de71cab4,0,c0704cf2,572,de71cab4) at buf_vlist_remove+0x94
brelvp(de71cab4,0,4e6,c0703728,de71cab4) at brelvp+0xbe
brelse(de71cab4,c0703392,c72,c0703c55,de71cab4) at brelse+0x1ed
bufdone(de71cab4,0,c0703392,3c6) at bufdone+0x59c
vfs_backgroundwritedone(de71cab4,0,c0703392,c84,de71cab4) at vfs_backgroundwritedone+0x13f
bufdone(de71cab4,bdb,0,cc12b18c,cc12b18c) at bufdone+0x1c7
g_vfs_done(cc12b18c,0,c0703392,bdb) at g_vfs_done+0xa2
biodone(cc12b18c,c06f63e0,1e8,c06f67c1,cc12b18c) at biodone+0x72
g_io_schedule_up(c570c170,0,c06f68ac,5d,0) at g_io_schedule_up+0x1a2
g_up_procbody(0,eec1ed48,c06f8a14,30e,c570c170) at g_up_procbody+0x93
fork_exit(c04edba8,0,eec1ed48) at fork_exit+0x11b
fork_trampoline() at fork_trampoline+0x8
--- trap 0x1, eip = 0, esp = 0xeec1ed7c, ebp = 0 ---

Kris
--x+6KMIRAuhnl3hBn
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (FreeBSD)

iD8DBQFCAuARWry0BWjoQKURAspTAJ9uA0wwA0jedJ3aKNVSF2B5pyIw8wCggO0f
nLdoFELRjCPslb6yAeIR+rU=
=StQb
-----END PGP SIGNATURE-----

--x+6KMIRAuhnl3hBn--