kern/120615: hptrr on 6.3-RELEASE/i386 causes filesystem damage and panics

[Josh Paetzel]

The following reply was made to PR kern/120615; it has been noted by GNATS.

From: Josh Paetzel <josh at tcbug.org>
To: bug-followup at freebsd.org
Cc:  
Subject: Re: kern/120615: hptrr on 6.3-RELEASE/i386 causes filesystem damage and panics
Date: Wed, 13 Feb 2008 09:44:03 +0000

 --nextPart5991187.o7z4ISJD9s
 Content-Type: text/plain;
   charset="us-ascii"
 Content-Transfer-Encoding: quoted-printable
 Content-Disposition: inline
 
 =2D- Unread portion of the kernel message buffer:
 mode =3D 0100400, inum =3D 49603, fs =3D /var
 panic: ffs_valloc: dup alloc
 cpuid =3D 1
 Uptime: 10m1s
 Dumping 2029 MB (6 chunks)
   chunk 0: 1MB (152 pages) ... ok
   chunk 1: 2029MB (519200 pages) 2013 1997 1981 1965 1949 1933 1917 1901 18=
 85=20
 1869 1853 1837 1821 1805 1789 1773 1757 1741 1725 1709 1693 1677 1661 1645=
 =20
 1629 1613 1597 1581 1565 1549 1533 1517 1501 1485 1469 1453 1437 1421 1405=
 =20
 1389 1373 1357 1341 1325 1309 1293 1277 1261 1245 1229 1213 1197 1181 1165=
 =20
 1149 1133 1117 1101 1085 1069 1053 1037 1021 1005 989 973 957 941 925 909 8=
 93=20
 877 861 845 829 813 797 781 765 749 733 717 701 685 669 653 637 621 605 589=
 =20
 573 557 541 525 509 493 477 461 445 429 413 397 381 365 349 333 317 301 285=
 =20
 269 253 237 221 205 189 173 157 141 125 109 93 77 61 45 29 13 ... ok
   chunk 2: 2MB (278 pages)
 
 #0  doadump () at pcpu.h:165
 165             __asm __volatile("movl %%fs:0,%0" : "=3Dr" (td));
 
 (kgdb) bt
 #0  doadump () at pcpu.h:165
 #1  0xc04fcd0a in boot (howto=3D260) at /usr/src/sys/kern/kern_shutdown.c:4=
 09
 #2  0xc04fd031 in panic (fmt=3D0xc06fc30a "ffs_valloc: dup alloc")
     at /usr/src/sys/kern/kern_shutdown.c:565
 #3  0xc05f82c4 in ffs_valloc (pvp=3D0xc6f22990, mode=3D33024, cred=3D0xc848=
 be00,
     vpp=3D0xec0598cc) at /usr/src/sys/ufs/ffs/ffs_alloc.c:965
 #4  0xc0621847 in ufs_makeinode (mode=3D33024, dvp=3D0xc6f22990, vpp=3D0xec=
 059be0,
     cnp=3D0xec059bf4) at /usr/src/sys/ufs/ufs/ufs_vnops.c:2214
 #5  0xc061e8bd in ufs_create (ap=3D0x0) at /usr/src/sys/ufs/ufs/ufs_vnops.c=
 :183
 #6  0xc06d409c in VOP_CREATE_APV (vop=3D0x0, a=3D0xec059a5c) at vnode_if.c:=
 204
 #7  0xc0563f1c in vn_open_cred (ndp=3D0xec059bcc, flagp=3D0xec059ccc, cmode=
 =3D256,
     cred=3D0xc848be00, fdidx=3D4) at vnode_if.h:111
 #8  0xc0563d56 in vn_open (ndp=3D0x0, flagp=3D0xec059ccc, cmode=3D256, fdid=
 x=3D4)
     at /usr/src/sys/kern/vfs_vnops.c:91
 #9  0xc055c8ae in kern_open (td=3D0xc7db8a80, path=3D0x0, pathseg=3DUIO_USE=
 RSPACE,
     flags=3D1539, mode=3D438) at /usr/src/sys/kern/vfs_syscalls.c:1016
 #10 0xc055c5e6 in open (td=3D0xc7db8a80, uap=3D0xec059d04)
     at /usr/src/sys/kern/vfs_syscalls.c:971
 #11 0xc06c2bcb in syscall (frame=3D
       {tf_fs =3D 672530491, tf_es =3D 134479931, tf_ds =3D -1078001605, tf_=
 edi =3D=20
 671423368, tf_esi =3D -1077940628, tf_ebp =3D -1077940728, tf_isp =3D -3351=
 76348,=20
 tf_ebx =3D 5, tf_edx =3D 134541315, tf_ecx =3D 0, tf_eax =3D 5, tf_trapno =
 =3D 12,=20
 tf_err =3D 2, tf_eip =3D 672332743, tf_cs =3D 51, tf_eflags =3D 514, tf_esp=
 =20
 =3D -1077940804, tf_ss =3D 59})
     at /usr/src/sys/i386/i386/trap.c:984
 #12 0xc06ada3f in Xint0x80_syscall ()=20
 at /usr/src/sys/i386/i386/exception.s:200
 #13 0x00000033 in ?? ()
 Previous frame inner to this frame (corrupt stack?)
 
 
 That's the limit of my debugging skills, more than willing to follow=20
 instructions or provide remote access.
 
 Thanks,
 
 Josh Paetzel
 
 PGP: 8A48 EF36 5E9F 4EDA 5A8C 11B4 26F9 01F1 27AF AECB
 
 --nextPart5991187.o7z4ISJD9s
 Content-Type: application/pgp-signature; name=signature.asc 
 Content-Description: This is a digitally signed message part.
 
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v2.0.4 (FreeBSD)
 
 iD8DBQBHsrvoJvkB8SevrssRAg/mAJ4l4sHXfscBmFCVWaX/qoMIYcEa9wCeOdca
 jeHlCBS0A/UI5XEAjpcON64=
 =Mqy3
 -----END PGP SIGNATURE-----
 
 --nextPart5991187.o7z4ISJD9s--