kern/127951: kernel crash in fsck_ufs

dirk.meyer at dinoex.sub.org dirk.meyer at dinoex.sub.org
Wed Oct 8 18:20:02 UTC 2008


>Number:         127951
>Category:       kern
>Synopsis:       kernel crash in fsck_ufs
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Wed Oct 08 18:20:01 UTC 2008
>Closed-Date:
>Last-Modified:
>Originator:     Dirk Meyer
>Release:        FreeBSD 7.0-STABLE
>Organization:
privat
>Environment:

FreeBSD 7.0-STABLE Sun Aug 17 09:29:19 CEST 2008
Kernel = GENERIC+
options       IPFIREWALL              #firewall
options       IPFIREWALL_VERBOSE      #enable logging to syslogd(8)
options       IPFIREWALL_VERBOSE_LIMIT=100    #limit verbosity
options       IPFIREWALL_FORWARD      #packet destination changes
options       IPFIREWALL_DEFAULT_TO_ACCEPT
options       DUMMYNET


>Description:

	Running background fsck n a 5.5 T ufs2 after power loss.
	The system crashes hard.

GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd"...

Unread portion of the kernel message buffer:


Fatal trap 12: page fault while in kernel mode
cpuid = 0; apic id = 00
fault virtual address	= 0x474e7d94
fault code		= supervisor read, page not present
instruction pointer	= 0x20:0xc09a910e
stack pointer	        = 0x28:0xe9087a14
frame pointer	        = 0x28:0xe9087a74
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, def32 1, gran 1
processor eflags	= interrupt enabled, resume, IOPL = 0
current process		= 1220 (fsck_ufs)
trap number		= 12
panic: page fault
cpuid = 0
Uptime: 3h9m25s
Physical memory: 3059 MB
Dumping 240 MB: 225 209 193 177 161 145 129 113 97 81 65 49 33 17 1

Reading symbols from /boot/kernel/acpi.ko...Reading symbols from /boot/kernel/acpi.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/acpi.ko
Reading symbols from /boot/kernel/nullfs.ko...Reading symbols from /boot/kernel/nullfs.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/nullfs.ko
Reading symbols from /boot/kernel/pf.ko...Reading symbols from /boot/kernel/pf.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/pf.ko
Reading symbols from /boot/kernel/linux.ko...Reading symbols from /boot/kernel/linux.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/linux.ko
#0  doadump () at pcpu.h:195
	in pcpu.h
(kgdb) bt
#0  doadump () at pcpu.h:195
#1  0xc079b1c6 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:418
#2  0xc079b49e in panic (fmt=) at /usr/src/sys/kern/kern_shutdown.c:572
#3  0xc0ac171c in trap_fatal (frame=0xe90879d4, eva=1196326292) at /usr/src/sys/i386/i386/trap.c:899
#4  0xc0ac19ab in trap_pfault (frame=0xe90879d4, usermode=0, eva=1196326292) at /usr/src/sys/i386/i386/trap.c:812
#5  0xc0ac23c5 in trap (frame=0xe90879d4) at /usr/src/sys/i386/i386/trap.c:490
#6  0xc0aa7cab in calltrap () at /usr/src/sys/i386/i386/exception.s:139
#7  0xc09a910e in ffs_snapblkfree (fs=0xc6724800, devvp=0xc680e564, bno=-2147409120, size=16384, inum=2) at /usr/src/sys/ufs/ffs/ffs_snapshot.c:1731
#8  0xc099e890 in ffs_blkfree (ump=0xc685fc00, fs=0xc6724800, devvp=0xc680e564, bno=-2147409120, size=16384, inum=2)
    at /usr/src/sys/ufs/ffs/ffs_alloc.c:1851
#9  0xc09a0b74 in sysctl_ffs_fsck (oidp=0xc0c15dc0, arg1=0xe9087c20, arg2=0, req=0xe9087ba4) at /usr/src/sys/ufs/ffs/ffs_alloc.c:2518
#10 0xc07a4b67 in sysctl_root (oidp=) at /usr/src/sys/kern/kern_sysctl.c:1306
#11 0xc07a4cd1 in userland_sysctl (td=0xc6cfa880, name=0xe9087c14, namelen=3, old=0x0, oldlenp=0x0, inkernel=0, new=0x805df80, newlen=32, 
    retval=0xe9087c10, flags=0) at /usr/src/sys/kern/kern_sysctl.c:1401
#12 0xc07a5a7c in __sysctl (td=0xc6cfa880, uap=0xe9087cfc) at /usr/src/sys/kern/kern_sysctl.c:1336
#13 0xc0ac1d35 in syscall (frame=0xe9087d38) at /usr/src/sys/i386/i386/trap.c:1035
#14 0xc0aa7d10 in Xint0x80_syscall () at /usr/src/sys/i386/i386/exception.s:196
#15 0x00000033 in ?? ()
(kgdb) ~~  thread 
[Current thread is 89 (Thread 100106)]
(kgdb) GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd"...

Unread portion of the kernel message buffer:


Fatal trap 12: page fault while in kernel mode
cpuid = 0; apic id = 00
fault virtual address	= 0x473c6794
fault code		= supervisor read, page not present
instruction pointer	= 0x20:0xc09a910e
stack pointer	        = 0x28:0xe907ea14
frame pointer	        = 0x28:0xe907ea74
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, def32 1, gran 1
processor eflags	= interrupt enabled, resume, IOPL = 0
current process		= 1161 (fsck_ufs)
trap number		= 12
panic: page fault
cpuid = 0
Uptime: 2h54m42s
Physical memory: 3059 MB
Dumping 288 MB: 273 257 241 225 209 193 177 161 145 129 113 97 81 65 49 33 17 1

Reading symbols from /boot/kernel/acpi.ko...Reading symbols from /boot/kernel/acpi.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/acpi.ko
Reading symbols from /boot/kernel/nullfs.ko...Reading symbols from /boot/kernel/nullfs.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/nullfs.ko
Reading symbols from /boot/kernel/pf.ko...Reading symbols from /boot/kernel/pf.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/pf.ko
Reading symbols from /boot/kernel/linux.ko...Reading symbols from /boot/kernel/linux.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/linux.ko
#0  doadump () at pcpu.h:195
	in pcpu.h
(kgdb) bt
#0  doadump () at pcpu.h:195
#1  0xc079b1c6 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:418
#2  0xc079b49e in panic (fmt=) at /usr/src/sys/kern/kern_shutdown.c:572
#3  0xc0ac171c in trap_fatal (frame=0xe907e9d4, eva=1195141012) at /usr/src/sys/i386/i386/trap.c:899
#4  0xc0ac19ab in trap_pfault (frame=0xe907e9d4, usermode=0, eva=1195141012) at /usr/src/sys/i386/i386/trap.c:812
#5  0xc0ac23c5 in trap (frame=0xe907e9d4) at /usr/src/sys/i386/i386/trap.c:490
#6  0xc0aa7cab in calltrap () at /usr/src/sys/i386/i386/exception.s:139
#7  0xc09a910e in ffs_snapblkfree (fs=0xc6722000, devvp=0xc6811678, bno=-2147409120, size=16384, inum=2) at /usr/src/sys/ufs/ffs/ffs_snapshot.c:1731
#8  0xc099e890 in ffs_blkfree (ump=0xc6785600, fs=0xc6722000, devvp=0xc6811678, bno=-2147409120, size=16384, inum=2)
    at /usr/src/sys/ufs/ffs/ffs_alloc.c:1851
#9  0xc09a0b74 in sysctl_ffs_fsck (oidp=0xc0c15dc0, arg1=0xe907ec20, arg2=0, req=0xe907eba4) at /usr/src/sys/ufs/ffs/ffs_alloc.c:2518
#10 0xc07a4b67 in sysctl_root (oidp=) at /usr/src/sys/kern/kern_sysctl.c:1306
#11 0xc07a4cd1 in userland_sysctl (td=0xc685f880, name=0xe907ec14, namelen=3, old=0x0, oldlenp=0x0, inkernel=0, new=0x805df80, newlen=32, 
    retval=0xe907ec10, flags=0) at /usr/src/sys/kern/kern_sysctl.c:1401
#12 0xc07a5a7c in __sysctl (td=0xc685f880, uap=0xe907ecfc) at /usr/src/sys/kern/kern_sysctl.c:1336
#13 0xc0ac1d35 in syscall (frame=0xe907ed38) at /usr/src/sys/i386/i386/trap.c:1035
#14 0xc0aa7d10 in Xint0x80_syscall () at /usr/src/sys/i386/i386/exception.s:196
#15 0x00000033 in ?? ()
(kgdb) GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd"...

Unread portion of the kernel message buffer:


Fatal trap 12: page fault while in kernel mode
cpuid = 0; apic id = 00
fault virtual address	= 0x47428794
fault code		= supervisor read, page not present
instruction pointer	= 0x20:0xc09a910e
stack pointer	        = 0x28:0xe8faaa14
frame pointer	        = 0x28:0xe8faaa74
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, def32 1, gran 1
processor eflags	= interrupt enabled, resume, IOPL = 0
current process		= 1153 (fsck_ufs)
trap number		= 12
panic: page fault
cpuid = 0
Uptime: 3h9m40s
Physical memory: 3059 MB
Dumping 216 MB: 201 185 169 153 137 121 105 89 73 57 41 25 9

Reading symbols from /boot/kernel/acpi.ko...Reading symbols from /boot/kernel/acpi.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/acpi.ko
Reading symbols from /boot/kernel/nullfs.ko...Reading symbols from /boot/kernel/nullfs.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/nullfs.ko
Reading symbols from /boot/kernel/pf.ko...Reading symbols from /boot/kernel/pf.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/pf.ko
Reading symbols from /boot/kernel/linux.ko...Reading symbols from /boot/kernel/linux.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/linux.ko
#0  doadump () at pcpu.h:195
	in pcpu.h
(kgdb) bt
#0  doadump () at pcpu.h:195
#1  0xc079b1c6 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:418
#2  0xc079b49e in panic (fmt=) at /usr/src/sys/kern/kern_shutdown.c:572
#3  0xc0ac171c in trap_fatal (frame=0xe8faa9d4, eva=1195542420) at /usr/src/sys/i386/i386/trap.c:899
#4  0xc0ac19ab in trap_pfault (frame=0xe8faa9d4, usermode=0, eva=1195542420) at /usr/src/sys/i386/i386/trap.c:812
#5  0xc0ac23c5 in trap (frame=0xe8faa9d4) at /usr/src/sys/i386/i386/trap.c:490
#6  0xc0aa7cab in calltrap () at /usr/src/sys/i386/i386/exception.s:139
#7  0xc09a910e in ffs_snapblkfree (fs=0xc671f000, devvp=0xc678b450, bno=-2147409120, size=16384, inum=2) at /usr/src/sys/ufs/ffs/ffs_snapshot.c:1731
#8  0xc099e890 in ffs_blkfree (ump=0xc673ae00, fs=0xc671f000, devvp=0xc678b450, bno=-2147409120, size=16384, inum=2)
    at /usr/src/sys/ufs/ffs/ffs_alloc.c:1851
#9  0xc09a0b74 in sysctl_ffs_fsck (oidp=0xc0c15dc0, arg1=0xe8faac20, arg2=0, req=0xe8faaba4) at /usr/src/sys/ufs/ffs/ffs_alloc.c:2518
#10 0xc07a4b67 in sysctl_root (oidp=) at /usr/src/sys/kern/kern_sysctl.c:1306
#11 0xc07a4cd1 in userland_sysctl (td=0xc6538660, name=0xe8faac14, namelen=3, old=0x0, oldlenp=0x0, inkernel=0, new=0x805df80, newlen=32, 
    retval=0xe8faac10, flags=0) at /usr/src/sys/kern/kern_sysctl.c:1401
#12 0xc07a5a7c in __sysctl (td=0xc6538660, uap=0xe8faacfc) at /usr/src/sys/kern/kern_sysctl.c:1336
#13 0xc0ac1d35 in syscall (frame=0xe8faad38) at /usr/src/sys/i386/i386/trap.c:1035
#14 0xc0aa7d10 in Xint0x80_syscall () at /usr/src/sys/i386/i386/exception.s:196
#15 0x00000033 in ?? ()
(kgdb) GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd"...

Unread portion of the kernel message buffer:


Fatal trap 12: page fault while in kernel mode
cpuid = 0; apic id = 00
fault virtual address	= 0x471de994
fault code		= supervisor read, page not present
instruction pointer	= 0x20:0xc09a910e
stack pointer	        = 0x28:0xe8f82a14
frame pointer	        = 0x28:0xe8f82a74
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, def32 1, gran 1
processor eflags	= interrupt enabled, resume, IOPL = 0
current process		= 1218 (fsck_ufs)
trap number		= 12
panic: page fault
cpuid = 0
Uptime: 3h9m19s
Physical memory: 3059 MB
Dumping 216 MB: 201 185 169 153 137 121 105 89 73 57 41 25 9

Reading symbols from /boot/kernel/acpi.ko...Reading symbols from /boot/kernel/acpi.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/acpi.ko
Reading symbols from /boot/kernel/nullfs.ko...Reading symbols from /boot/kernel/nullfs.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/nullfs.ko
Reading symbols from /boot/kernel/pf.ko...Reading symbols from /boot/kernel/pf.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/pf.ko
Reading symbols from /boot/kernel/linux.ko...Reading symbols from /boot/kernel/linux.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/linux.ko
#0  doadump () at pcpu.h:195
	in pcpu.h
(kgdb) bt
#0  doadump () at pcpu.h:195
#1  0xc079b1c6 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:418
#2  0xc079b49e in panic (fmt=) at /usr/src/sys/kern/kern_shutdown.c:572
#3  0xc0ac171c in trap_fatal (frame=0xe8f829d4, eva=1193142676) at /usr/src/sys/i386/i386/trap.c:899
#4  0xc0ac19ab in trap_pfault (frame=0xe8f829d4, usermode=0, eva=1193142676) at /usr/src/sys/i386/i386/trap.c:812
#5  0xc0ac23c5 in trap (frame=0xe8f829d4) at /usr/src/sys/i386/i386/trap.c:490
#6  0xc0aa7cab in calltrap () at /usr/src/sys/i386/i386/exception.s:139
#7  0xc09a910e in ffs_snapblkfree (fs=0xc6727000, devvp=0xc6816000, bno=-2147409120, size=16384, inum=2) at /usr/src/sys/ufs/ffs/ffs_snapshot.c:1731
#8  0xc099e890 in ffs_blkfree (ump=0xc6717200, fs=0xc6727000, devvp=0xc6816000, bno=-2147409120, size=16384, inum=2)
    at /usr/src/sys/ufs/ffs/ffs_alloc.c:1851
#9  0xc09a0b74 in sysctl_ffs_fsck (oidp=0xc0c15dc0, arg1=0xe8f82c20, arg2=0, req=0xe8f82ba4) at /usr/src/sys/ufs/ffs/ffs_alloc.c:2518
#10 0xc07a4b67 in sysctl_root (oidp=) at /usr/src/sys/kern/kern_sysctl.c:1306
#11 0xc07a4cd1 in userland_sysctl (td=0xc6752cc0, name=0xe8f82c14, namelen=3, old=0x0, oldlenp=0x0, inkernel=0, new=0x805df80, newlen=32, 
    retval=0xe8f82c10, flags=0) at /usr/src/sys/kern/kern_sysctl.c:1401
#12 0xc07a5a7c in __sysctl (td=0xc6752cc0, uap=0xe8f82cfc) at /usr/src/sys/kern/kern_sysctl.c:1336
#13 0xc0ac1d35 in syscall (frame=0xe8f82d38) at /usr/src/sys/i386/i386/trap.c:1035
#14 0xc0aa7d10 in Xint0x80_syscall () at /usr/src/sys/i386/i386/exception.s:196
#15 0x00000033 in ?? ()
(kgdb) q

>How-To-Repeat:


>Fix:

	Running fsck manually solved the problem.
	A big snapshotfile was removed by fsck.


>Release-Note:
>Audit-Trail:
>Unformatted:


More information about the freebsd-bugs mailing list