kern/69100: 5.2.1p9 kernel panics when mounting nwfs filesystem

Brandon Hume brandon.hume at dal.ca
Thu Jul 15 07:40:08 PDT 2004


>Number:         69100
>Category:       kern
>Synopsis:       5.2.1p9 kernel panics when mounting nwfs filesystem
>Confidential:   no
>Severity:       critical
>Priority:       low
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Thu Jul 15 14:40:07 GMT 2004
>Closed-Date:
>Last-Modified:
>Originator:     Brandon Hume
>Release:        FreeBSD 5.2.1-RELEASE-p9 i386
>Organization:
Dalhousie University
>Environment:
System: FreeBSD Koyomi.BOFH.Halifax.NS.Ca 5.2.1-RELEASE-p9 FreeBSD 5.2.1-RELEASE-p9 #0: Tue Jul 13 09:10:10 ADT 2004 root at Koyomi.bofh.halifax.ns.ca:/usr/obj/usr/src/sys/KOYOMI i386

Operating system built from CVSUP RELENG_5_2 July 12 23:35 ADT

Machine: Toshiba Satellite Pro 4300, Xircom 10/100 card ethernet

Kernel Configuration:

---------------------------------------------------------------------------
machine		i386
cpu		I686_CPU
ident		KOYOMI

makeoptions	DEBUG=-g		#Build kernel with gdb(1) debug symbols

options 	SCHED_4BSD		#4BSD scheduler
options 	INET			#InterNETworking
options 	INET6			#IPv6 communications protocols
options 	FFS			#Berkeley Fast Filesystem
options 	SOFTUPDATES		#Enable FFS soft updates support
options 	UFS_ACL			#Support for access control lists
options 	UFS_DIRHASH		#Improve performance on big directories
options 	MD_ROOT			#MD is a potential root device
options 	NFSCLIENT		#Network Filesystem Client
options 	MSDOSFS			#MSDOS Filesystem
options 	CD9660			#ISO 9660 Filesystem
options 	PROCFS			#Process filesystem (requires PSEUDOFS)
options 	PSEUDOFS		#Pseudo-filesystem framework
options 	COMPAT_43		#Compatible with BSD 4.3 [KEEP THIS!]
options 	COMPAT_FREEBSD4		#Compatible with FreeBSD4
options 	SCSI_DELAY=15000	#Delay (in ms) before probing SCSI
options 	KTRACE			#ktrace(1) support
options 	SYSVSHM			#SYSV-style shared memory
options 	SYSVMSG			#SYSV-style message queues
options 	SYSVSEM			#SYSV-style semaphores
options 	_KPOSIX_PRIORITY_SCHEDULING #Posix P1003_1B real-time extensions
options 	KBD_INSTALL_CDEV	# install a CDEV entry in /dev

options		DDB

device		isa
device		eisa
device		pci

# Floppy drives
device		fdc

# ATA and ATAPI devices
device		ata
device		atadisk			# ATA disk drives
device		atapicd			# ATAPI CDROM drives
device		atapifd			# ATAPI floppy drives
device		atapist			# ATAPI tape drives
options 	ATA_STATIC_ID		#Static device numbering

device		atkbdc		# AT keyboard controller
device		atkbd		# AT keyboard
device		psm		# PS/2 mouse
device		vga		# VGA video card driver
device		splash		# Splash screen and screen saver support
device		sc

options		VESA
options		SC_PIXEL_MODE

device		agp		# support several AGP chipsets
device		npx

# Power management support (see NOTES for more options)
#device		apm
# Add suspend/resume support for the i8254.
device		pmtimer

# PCCARD (PCMCIA) support
# Pcmcia and cardbus bridge support
device		cbb			# cardbus (yenta) bridge
#device		pcic			# ExCA ISA and PCI bridges
device		pccard			# PC Card (16-bit) bus
device		cardbus			# CardBus (32-bit) bus

# Serial (COM) ports
device		sio		# 8250, 16[45]50 based serial ports

# Parallel port
device		ppc
device		ppbus		# Parallel port bus (required)
device		lpt		# Printer
device		plip		# TCP/IP over parallel
device		ppi		# Parallel port interface device
#device		vpo		# Requires scbus and da

# Pseudo devices - the number indicates how many units to allocate.
device		random		# Entropy device
device		loop		# Network loopback
device		ether		# Ethernet support
device		tun		# Packet tunnel.
device		pty		# Pseudo-ttys (telnet etc)
device		md		# Memory "disks"
device		gif		# IPv6 and IPv4 tunneling
device		faith		# IPv6-to-IPv4 relaying (translation)

# The `bpf' device enables the Berkeley Packet Filter.
# Be aware of the administrative consequences of enabling this!
device		bpf		# Berkeley packet filter
---------------------------------------------------------------------------

Filesystem from /etc/fstab:

/KILFS1:hume/VOL1/Home/hume	/Novell/Home/hume	nwfs	ro,noauto,-A=kilfs1.ucis.dal.ca	0	0

Novell Server is a Novell 6 product, unknown patch level.

>Description:

	Mounting a Novell-served filesystem causes a system crash. 

kgdb output, including dmesg:

This GDB was configured as "i386-unknown-freebsd"...
panic messages:
---
Copyright (c) 1992-2004 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
	The Regents of the University of California. All rights reserved.
FreeBSD 5.2.1-RELEASE-p9 #0: Tue Jul 13 09:10:10 ADT 2004
    root at Koyomi.bofh.halifax.ns.ca:/usr/obj/usr/src/sys/KOYOMI
Preloaded elf kernel "/boot/kernel/kernel" at 0xc07c8000.
Preloaded elf module "/boot/kernel/if_xe.ko" at 0xc07c8294.
Preloaded elf module "/boot/kernel/snd_ds1.ko" at 0xc07c8340.
Preloaded elf module "/boot/kernel/snd_pcm.ko" at 0xc07c83ec.
Preloaded elf module "/boot/kernel/acpi.ko" at 0xc07c8498.
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: Intel Pentium III (646.83-MHz 686-class CPU)
  Origin = "GenuineIntel"  Id = 0x683  Stepping = 3
  Features=0x383f9ff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR,SSE>
real memory  = 201195520 (191 MB)
avail memory = 189964288 (181 MB)
bios32: Bad BIOS32 Service Directory
Pentium Pro MTRR support enabled
VESA: v2.0, 8192k memory, flags:0x0, mode table:0xc06cab62 (1000022)
VESA: S3 Incorporated. M7 BIOS
npx0: [FAST]
npx0: <math processor> on motherboard
npx0: INT 16 interface
acpi0: <TOSHIB 750     > on motherboard
acpi0: Power Button (fixed)
Timecounter "ACPI-safe" frequency 3579545 Hz quality 1000
acpi_timer0: <24-bit timer at 3.579545MHz> port 0xfe08-0xfe0b on acpi0
acpi_cpu0: <CPU> on acpi0
acpi_tz0: <Thermal Zone> on acpi0
pcib0: <ACPI Host-PCI bridge> port 0xcf8-0xcff on acpi0
pci0: <ACPI PCI bus> on pcib0
pcib0: slot 5 INTD is routed to irq 11
pcib0: slot 9 INTA is routed to irq 11
pcib0: slot 12 INTA is routed to irq 11
agp0: <Intel 82443BX (440 BX) host to PCI bridge> mem 0xe0000000-0xe7ffffff at device 0.0 on pci0
pcib1: <ACPI PCI-PCI bridge> at device 1.0 on pci0
pci1: <ACPI PCI bus> on pcib1
pcib1: slot 0 INTA is routed to irq 11
pci1: <display, VGA> at device 0.0 (no driver attached)
isab0: <PCI-ISA bridge> at device 5.0 on pci0
isa0: <ISA bus> on isab0
atapci0: <Intel PIIX4 UDMA33 controller> port 0xfff0-0xffff at device 5.1 on pci0
ata0: at 0x1f0 irq 14 on atapci0
ata0: [MPSAFE]
ata1: at 0x170 irq 15 on atapci0
ata1: [MPSAFE]
pci0: <serial bus, USB> at device 5.2 (no driver attached)
pci0: <bridge, PCI-unknown> at device 5.3 (no driver attached)
pci0: <unknown> at device 9.0 (no driver attached)
cbb0: <ToPIC100 PCI-CardBus Bridge> at device 11.0 on pci0
cardbus0: <CardBus bus> on cbb0
pccard0: <16-bit PCCard bus> on cbb0
pcib0: slot 11 INTA is routed to irq 11
cbb0: [MPSAFE]
cbb1: <ToPIC100 PCI-CardBus Bridge> at device 11.1 on pci0
cardbus1: <CardBus bus> on cbb1
pccard1: <16-bit PCCard bus> on cbb1
pcib0: slot 11 INTB is routed to irq 11
cbb1: [MPSAFE]
pcm0: <Yamaha DS-1E (YMF744)> port 0xfefc-0xfeff,0xff00-0xff3f mem 0xefff8000-0xefffffff irq 11 at device 12.0 on pci0
pcm0: <Asahi Kasei AK4543 AC97 Codec>
acpi_lid0: <Control Method Lid Switch> on acpi0
acpi_cmbat0: <Control Method Battery> on acpi0
acpi_acad0: <AC Adapter> on acpi0
atkbdc0: <Keyboard controller (i8042)> port 0x64,0x60 irq 1 on acpi0
atkbd0: <AT Keyboard> flags 0x1 irq 1 on atkbdc0
kbd0 at atkbd0
psm0: <PS/2 Mouse> irq 12 on atkbdc0
psm0: model IntelliMouse, device ID 3
fdc0: <Enhanced floppy controller (i82077, NE72065 or clone)> port 0x3f7,0x3f0-0x3f5 irq 6 drq 2 on acpi0
fdc0: FIFO enabled, 8 bytes threshold
fd0: <1440-KB 3.5" drive> on fdc0 drive 0
sio0 port 0x3f8-0x3ff irq 4 on acpi0
sio0: type 16550A
ppc0 port 0x778-0x77a,0x378-0x37f irq 7 drq 3 on acpi0
ppc0: Generic chipset (ECP/PS2/NIBBLE) in COMPATIBLE mode
ppc0: FIFO with 16/16/8 bytes threshold
ppbus0: <Parallel port bus> on ppc0
plip0: <PLIP network interface> on ppbus0
lpt0: <Printer> on ppbus0
lpt0: Interrupt-driven port
ppi0: <Parallel I/O> on ppbus0
pmtimer0 on isa0
orm0: <Option ROM> at iomem 0xc0000-0xcbfff on isa0
sc0: <System console> at flags 0x100 on isa0
sc0: VGA <16 virtual consoles, flags=0x300>
sio1: configured irq 3 not in bitmap of probed irqs 0
sio1: port may not be enabled
vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
Timecounter "TSC" frequency 646827008 Hz quality 800
Timecounters tick every 10.000 msec
xe0: <Xircom CreditCard 10/100> at port 0x100-0x10f irq 11 function 0 config 1 on pccard0
xe0: Xircom CE3, version 0x45/0x04, 100Mbps capable
xe0: Ethernet address 00:10:a4:f4:60:f9
GEOM: create disk ad0 dp=0xc2366e60
ad0: 11513MB <TOSHIBA MK1214GAP> [23392/16/63] at ata0-master UDMA33
acd0: DVDROM <DV-28E-0> at ata1-master PIO4
Mounting root from ufs:/dev/ad0s2a
WARNING: / was not properly dismounted
WARNING: /home was not properly dismounted
WARNING: /usr was not properly dismounted
WARNING: /var was not properly dismounted
/var: mount pending error: blocks 4 files 0
/var: superblock summary recomputed
uhci0: <Intel 82371AB/EB (PIIX4) USB controller> port 0xff80-0xff9f irq 11 at device 5.2 on pci0
usb0: <Intel 82371AB/EB (PIIX4) USB controller> on uhci0
usb0: USB revision 1.0
uhub0: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
ncp_load: loaded


Fatal trap 12: page fault while in kernel mode
fault virtual address	= 0x0
fault code		= supervisor write, page not present
instruction pointer	= 0x8:0xc04f0098
stack pointer	        = 0x10:0xd3d6198c
frame pointer	        = 0x10:0xd3d619a4
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, def32 1, gran 1
processor eflags	= interrupt enabled, resume, IOPL = 0
current process		= 639 (mount_nwfs)
Dumping 191 MB
 16 32 48 64 80 96 112 128 144 160 176
---
Reading symbols from /boot/kernel/if_xe.ko...done.
Loaded symbols for /boot/kernel/if_xe.ko
Reading symbols from /boot/kernel/snd_ds1.ko...done.
Loaded symbols for /boot/kernel/snd_ds1.ko
Reading symbols from /boot/kernel/snd_pcm.ko...done.
Loaded symbols for /boot/kernel/snd_pcm.ko
Reading symbols from /usr/obj/usr/src/sys/KOYOMI/modules/usr/src/sys/modules/acpi/acpi.ko.debug...done.
Loaded symbols for /usr/obj/usr/src/sys/KOYOMI/modules/usr/src/sys/modules/acpi/acpi.ko.debug
Reading symbols from /usr/obj/usr/src/sys/KOYOMI/modules/usr/src/sys/modules/ntfs/ntfs.ko.debug...done.
Loaded symbols for /usr/obj/usr/src/sys/KOYOMI/modules/usr/src/sys/modules/ntfs/ntfs.ko.debug
Reading symbols from /usr/obj/usr/src/sys/KOYOMI/modules/usr/src/sys/modules/linprocfs/linprocfs.ko.debug...done.
Loaded symbols for /usr/obj/usr/src/sys/KOYOMI/modules/usr/src/sys/modules/linprocfs/linprocfs.ko.debug
Reading symbols from /usr/obj/usr/src/sys/KOYOMI/modules/usr/src/sys/modules/linux/linux.ko.debug...done.
Loaded symbols for /usr/obj/usr/src/sys/KOYOMI/modules/usr/src/sys/modules/linux/linux.ko.debug
Reading symbols from /usr/obj/usr/src/sys/KOYOMI/modules/usr/src/sys/modules/usb/usb.ko.debug...done.
Loaded symbols for /usr/obj/usr/src/sys/KOYOMI/modules/usr/src/sys/modules/usb/usb.ko.debug
Reading symbols from /usr/obj/usr/src/sys/KOYOMI/modules/usr/src/sys/modules/nwfs/nwfs.ko.debug...done.
Loaded symbols for /usr/obj/usr/src/sys/KOYOMI/modules/usr/src/sys/modules/nwfs/nwfs.ko.debug
Reading symbols from /usr/obj/usr/src/sys/KOYOMI/modules/usr/src/sys/modules/ncp/ncp.ko.debug...done.
Loaded symbols for /usr/obj/usr/src/sys/KOYOMI/modules/usr/src/sys/modules/ncp/ncp.ko.debug
Reading symbols from /usr/obj/usr/src/sys/KOYOMI/modules/usr/src/sys/modules/libmchain/libmchain.ko.debug...done.
Loaded symbols for /usr/obj/usr/src/sys/KOYOMI/modules/usr/src/sys/modules/libmchain/libmchain.ko.debug
#0  doadump () at /usr/src/sys/kern/kern_shutdown.c:240
240		dumping++;
(kgdb) bt
#0  doadump () at /usr/src/sys/kern/kern_shutdown.c:240
#1  0xc042ba15 in db_fncall (dummy1=0, dummy2=0, dummy3=3699, 
    dummy4=0xd3d61794 "\200\rjÀèzlÀ°\027ÖÓ\r")
    at /usr/src/sys/ddb/db_command.c:548
#2  0xc042b762 in db_command (last_cmdp=0xc06a0420, cmd_table=0x0, 
    aux_cmd_tablep=0xc0673b5c, aux_cmd_tablep_end=0xc0673b60)
    at /usr/src/sys/ddb/db_command.c:346
#3  0xc042b8a5 in db_command_loop () at /usr/src/sys/ddb/db_command.c:472
#4  0xc042e8c5 in db_trap (type=12, code=0) at /usr/src/sys/ddb/db_trap.c:73
#5  0xc061e7dc in kdb_trap (type=12, code=0, regs=0xd3d6194c)
    at /usr/src/sys/i386/i386/db_interface.c:171
#6  0xc062f7a6 in trap_fatal (frame=0xd3d6194c, eva=0)
    at /usr/src/sys/i386/i386/trap.c:816
#7  0xc062f472 in trap_pfault (frame=0xd3d6194c, usermode=0, eva=0)
    at /usr/src/sys/i386/i386/trap.c:735
#8  0xc062efcd in trap (frame=
      {tf_fs = -1068826600, tf_es = -740950000, tf_ds = 16777232, tf_edi = 0, tf_esi = -1036515776, tf_ebp = -740943452, tf_isp = -740943496, tf_ebx = -1035641252, tf_edx = -1036515776, tf_ecx = -1035641328, tf_eax = 0, tf_trapno = 12, tf_err = 2, tf_eip = -1068564328, tf_cs = 8, tf_eflags = 66118, tf_esp = -1035641328, tf_ss = 0}) at /usr/src/sys/i386/i386/trap.c:420
#9  0xc06201d8 in calltrap () at {standard input}:94
#10 0xc05069e2 in sopoll (so=0xc2455e5c, events=-1036515776, active_cred=0x0, 
    td=0xc2380640) at /usr/src/sys/kern/uipc_socket.c:1784
#11 0xc27f1322 in ncp_poll (so=0x0, events=0)
    at /usr/src/sys/netncp/ncp_sock.c:192
#12 0xc27f49a7 in ncp_request_int (rqp=0xc2478400)
    at /usr/src/sys/netncp/ncp_rq.c:270
#13 0xc27f1ddf in ncp_ncp_connect (conn=0xc27df800)
    at /usr/src/sys/netncp/ncp_ncp.c:122
#14 0xc27f067b in ncp_conn_reconnect (ncp=0xc27df800)
    at /usr/src/sys/netncp/ncp_conn.c:333
#15 0xc27f359b in sncp_connect (td=0xc2380640, args=0xd3d61c58)
    at /usr/src/sys/netncp/ncp_mod.c:118
#16 0xc27f348b in ncp_ioctl (dev=0xc27de300, cmd=0, data=0x0, flag=3, td=0x0)
    at /usr/src/sys/netncp/ncp_mod.c:87
#17 0xc0484b0b in spec_ioctl (ap=0xc27df800)
    at /usr/src/sys/fs/specfs/spec_vnops.c:351
#18 0xc04841a8 in spec_vnoperate (ap=0x0)
    at /usr/src/sys/fs/specfs/spec_vnops.c:122
#19 0xc0531ba1 in vn_ioctl (fp=0xc23a46e8, com=2148028004, data=0xd3d61c58, 
    active_cred=0xc2798380, td=0xc2380640) at vnode_if.h:503
#20 0xc04eeb68 in ioctl (td=0xc2380640, uap=0xd3d61d14)
    at /usr/src/sys/sys/file.h:261
#21 0xc062fb60 in syscall (frame=
      {tf_fs = 47, tf_es = 47, tf_ds = 47, tf_edi = 5, tf_esi = -1077944448, tf_ebp = -1077944424, tf_isp = -740942476, tf_ebx = 671614864, tf_edx = -1, tf_ecx = 672440608, tf_eax = 54, tf_trapno = 12, tf_err = 2, tf_eip = 671935663, tf_cs = 31, tf_eflags = 530, tf_esp = -1077944468, tf_ss = 47})
    at /usr/src/sys/i386/i386/trap.c:1010
#22 0xc062022d in Xint0x80_syscall () at {standard input}:136
---Can't read userspace from dump, or kernel process---

(kgdb) quit

>How-To-Repeat:

	1. Boot system
	2. Log in as root
	3. Enter command: kldload nwfs
	4. Enter command: mount /Novell/Home/hume
	5. Answer password prompt with Novell password

>Fix:
>Release-Note:
>Audit-Trail:
>Unformatted:


More information about the freebsd-bugs mailing list