kern/136714: panic after mdconfig and double mount and single umount

Andreas Longwitz longwitz at incore.de
Mon Jul 13 14:20:01 UTC 2009 

>Number:         136714
>Category:       kern
>Synopsis:       panic after mdconfig and double mount and single umount
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Mon Jul 13 14:20:00 UTC 2009
>Closed-Date:
>Last-Modified:
>Originator:     Andreas Longwitz
>Release:        6.4-STABLE
>Organization:
Data Service Stockelsdorf
>Environment:
FreeBSD loserver.longwitz 6.4-STABLE FreeBSD 6.4-STABLE #1: Sat Jun  6 00:31:43 CEST 2009     root at loserver.longwitz:/usr/src/sys/i386/compile/LOSERVER  i386
>Description:
In /var/floppies/V64 I have a copy of the FreeBSD 64 floppy imagefiles.

cd /var/floppies/V64
mkdir -p mnt
mdconfig -a -t vnode -f boot.flp -u 1
mount -v -r /dev/md1c mnt
<-- /dev/md1c on /var/floppies/V64/mnt (ufs, local, read-only, fsid 0d412d49e141550b)
mount -v -r /dev/md1c mnt
<-- /dev/md1c on /var/floppies/V64/mnt (ufs, local, read-only, fsid 0aff000505000000)
umount -v mnt
<-- /dev/md1c: unmount from /var/floppies/V64/mnt
ls -laFo
<-- total 7341
    drwxr-xr-x  3 root  wheel  -     512 13 Jul 00:37 ./
    drwxr-xr-x  4 root  wheel  -     512 12 Jul 17:21 ../
    -r--r--r--  1 root  wheel  -   55809 26 Nov  2008 README.TXT
    -r--r--r--  1 root  wheel  - 1474560 26 Nov  2008 boot.flp
    -r--r--r--  1 root  wheel  - 1474560 26 Nov  2008 fixit.flp
    -r--r--r--  1 root  wheel  - 1474560 26 Nov  2008 kern1.flp
    -r--r--r--  1 root  wheel  - 1474560 26 Nov  2008 kern2.flp
    -r--r--r--  1 root  wheel  - 1474560 26 Nov  2008 kern3.flp
    drwxr-xr-x  4 root  wheel  -     512 26 Nov  2008 mnt/
ls -laFo mnt ==> PANIC

Fatal trap 12: page fault while in kernel mode
cpuid = 0; apic id = 00
fault virtual address   = 0x0
fault code              = supervisor read, page not present
instruction pointer     = 0x20:0xc053858a
stack pointer           = 0x28:0xe8f5da4c
frame pointer           = 0x28:0xe8f5da60
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, def32 1, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 86044 (ls)
trap number             = 12
panic: page fault
cpuid = 0
KDB: stack backtrace:
kdb_backtrace(100,c6c7b780,28,e8f5da0c,c,...) at kdb_backtrace+0x29
panic(c078c5e2,c07c58f3,0,fffff,c6c7ea9b,...) at panic+0x114
trap_fatal(e8f5da0c,0,c6c7b780,c63d3000,c,...) at trap_fatal+0x2ce
trap_pfault(e8f5da0c,0,0) at trap_pfault+0x1d7
trap(cb5e0008,e8f50028,28,c99c2180,0,...) at trap+0x2fd
calltrap() at calltrap+0x5
--- trap 0xc, eip = 0xc053858a, esp = 0xe8f5da4c, ebp = 0xe8f5da60 ---
g_io_request(c7168738,c99c2180,da586d60,da586d60,e8f5da94,...) at g_io_request+0x16
g_vfs_strategy(caf901d0,da586d60,da586d60,0,c69f1420,...) at g_vfs_strategy+0x49
ffs_geom_strategy(caf901d0,da586d60,48,0,c08005e0,...) at ffs_geom_strategy+0x141
ufs_strategy(e8f5dadc) at ufs_strategy+0xb5
VOP_STRATEGY_APV(c07ffee0,e8f5dadc) at VOP_STRATEGY_APV+0x51
bufstrategy(cb5ee3f0,da586d60) at bufstrategy+0x28
breadn(cb5ee330,0,0,200,0,...) at breadn+0xb9
bread(cb5ee330,0,0,200,0,...) at bread+0x20
ffs_read(e8f5dc10) at ffs_read+0x21b
VOP_READ_APV(c07ffee0,e8f5dc10) at VOP_READ_APV+0x38
ufs_readdir(e8f5dc6c) at ufs_readdir+0xd1
VOP_READDIR_APV(c07ffee0,e8f5dc6c) at VOP_READDIR_APV+0x38
kern_getdirentries(c6c7b780,5,8057000,1000,e8f5dcd4) at kern_getdirentries+0x1d3
getdirentries(c6c7b780,e8f5dd04) at getdirentries+0x1e
syscall(3b,3b,3b,8050080,1,...) at syscall+0x2d7
Xint0x80_syscall() at Xint0x80_syscall+0x1f
--- syscall (196, FreeBSD ELF32, getdirentries), eip = 0x88171eb3, esp = 0xbfbfe1fc, ebp = 0xbfbfe228 ---
Uptime: 8d12h37m4s
Dumping 2038 MB (2 chunks)
  chunk 0: 1MB (159 pages) ... ok
  chunk 1: 2039MB (521776 pages) 2023 2007 ... 23 7

#0  doadump () at pcpu.h:165
165     pcpu.h: No such file or directory.
        in pcpu.h
(kgdb) where
#0  doadump () at pcpu.h:165
#1  0xc0596579 in boot (howto=260) at ../../../kern/kern_shutdown.c:410
#2  0xc05968d1 in panic (fmt=0xc078c5e2 "%s") at ../../../kern/kern_shutdown.c:566
#3  0xc075cbe6 in trap_fatal (frame=0xe8f5da0c, eva=0) at ../../../i386/i386/trap.c:838
#4  0xc075c8ef in trap_pfault (frame=0xe8f5da0c, usermode=0, eva=0) at ../../../i386/i386/trap.c:745
#5  0xc075c505 in trap (frame=
      {tf_fs = -883032056, tf_es = -386596824, tf_ds = 40, tf_edi = -912514688, tf_esi = 0, tf_ebp = -386540960,
       tf_isp = -386541000, tf_ebx = -954824904, tf_edx = 512, tf_ecx = 0, tf_eax = 1, tf_trapno = 12,
       tf_err = 0, tf_eip = -1068268150, tf_cs = 32, tf_eflags = 66182, tf_esp = 1, tf_ss = -889650928})
    at ../../../i386/i386/trap.c:435
#6  0xc07473ea in calltrap () at ../../../i386/i386/exception.s:139
#7  0xc053858a in g_io_request (bp=0xc7168738, cp=0xc99c2180) at ../../../geom/geom_io.c:275
#8  0xc053ab55 in g_vfs_strategy (bo=0x1, bp=0xda586d60) at ../../../geom/geom_vfs.c:107
#9  0xc06eedb9 in ffs_geom_strategy (bo=0xcaf901d0, bp=0xda586d60) at ../../../ufs/ffs/ffs_vfsops.c:1801
#10 0xc06fcc21 in ufs_strategy (ap=0x1) at ../../../ufs/ufs/ufs_vnops.c:1994
#11 0xc0769cbd in VOP_STRATEGY_APV (vop=0xc08005e0, a=0xe8f5dadc) at vnode_if.c:1796
#12 0xc05e6f3c in bufstrategy (bo=0xcb5ee3f0, bp=0x1) at vnode_if.h:928
#13 0xc05e1761 in breadn (vp=0xcb5ee330, blkno=0, size=512, rablkno=0x0, rabsize=0x0, cnt=0, cred=0x0,
    bpp=0x1) at buf.h:426
#14 0xc05e16a4 in bread (vp=0xcb5ee330, blkno=0, size=512, cred=0x0, bpp=0xe8f5db9c)
    at ../../../kern/vfs_bio.c:723
#15 0xc06ef557 in ffs_read (ap=0x1) at ../../../ufs/ffs/ffs_vnops.c:494
#16 0xc0769344 in VOP_READ_APV (vop=0x1, a=0x200) at vnode_if.c:643
#17 0xc06fc8e5 in ufs_readdir (ap=0xe8f5dc6c) at vnode_if.h:343
#18 0xc07699c8 in VOP_READDIR_APV (vop=0x1, a=0x200) at vnode_if.c:1427
#19 0xc05fe833 in kern_getdirentries (td=0xc6c7b780, fd=0, buf=0x8057000 <Address 0x8057000 out of bounds>,
    count=4096, basep=0x1) at vnode_if.h:746
#20 0xc05fe632 in getdirentries (td=0xc6c7b780, uap=0xe8f5dd04) at ../../../kern/vfs_syscalls.c:3694
#21 0xc075cf43 in syscall (frame=
      {tf_fs = 59, tf_es = 59, tf_ds = 59, tf_edi = 134545536, tf_esi = 1, tf_ebp = -1077943768, tf_isp = -386540188,
       tf_ebx = -2011598528, tf_edx = 0, tf_ecx = -2011598528, tf_eax = 196, tf_trapno = 12, tf_err = 2,
       tf_eip = -2011750733, tf_cs = 51, tf_eflags = 582, tf_esp = -1077943812, tf_ss = 59})
    at ../../../i386/i386/trap.c:984
#22 0xc074743f in Xint0x80_syscall () at ../../../i386/i386/exception.s:200
#23 0x00000033 in ?? ()
Previous frame inner to this frame (corrupt stack?)
(kgdb) quit
>How-To-Repeat:

>Fix:


>Release-Note:
>Audit-Trail:
>Unformatted:

More information about the freebsd-bugs mailing list