9.1-stable crashes while copying data from a NFS mounted directory

Thu Jan 24 18:04:11 UTC 2013

On Thu, Jan 24, 2013 at 06:05:57PM +0100, Christian Gusenbauer wrote:
> Hi!
> 
> I'm using 9.1 stable svn revision 245605 and I get the panic below if I execute the following commands (as single user):
> 
> # swapon -a
> # dumpon /dev/ada0s3b
> # mount -u /
> # ifconfig age0 inet 192.168.2.2 mtu 6144 up
> # mount -t nfs -o rsize=32768 data:/multimedia /mnt
> # cp /mnt/Movies/test/a.m2ts /tmp
> 
> then the system panics almost immediately. I'll attach the stack trace.
> 
> Note, that I'm using jumbo frames (6144 byte) on a 1Gbit network, maybe that's the cause for the panic, because the bcopy (see 
> stack frame #15) fails.
> 
> Any clues?
I tried a similar operation with the nfs mount of rsize=32768 and mtu
6144, but the machine runs HEAD and em instead of age. I was unable to
reproduce the panic on the copy of the 5GB file from nfs mount.

Show the output of "p *(struct uio *)0xffffff81b2da95a0" in kgdb.

> 
> Ciao,
> Christian.
> 
> #0  doadump (textdump=0)
>     at /spare/tmp/src-stable9/sys/kern/kern_shutdown.c:265
> 265             if (textdump && textdump_pending) {
> (kgdb) #0  doadump (textdump=0)
>     at /spare/tmp/src-stable9/sys/kern/kern_shutdown.c:265
> #1  0xffffffff802a8ba0 in db_dump (dummy=<value optimized out>,
>     dummy2=<value optimized out>, dummy3=<value optimized out>,
>     dummy4=<value optimized out>)
>     at /spare/tmp/src-stable9/sys/ddb/db_command.c:538
> #2  0xffffffff802a84ce in db_command (last_cmdp=0xffffffff808bc5c0,
>     cmd_table=<value optimized out>, dopager=1)
>     at /spare/tmp/src-stable9/sys/ddb/db_command.c:449
> #3  0xffffffff802a8720 in db_command_loop ()
>     at /spare/tmp/src-stable9/sys/ddb/db_command.c:502
> #4  0xffffffff802aa859 in db_trap (type=<value optimized out>,
>     code=<value optimized out>)
>     at /spare/tmp/src-stable9/sys/ddb/db_main.c:231
> #5  0xffffffff803c4918 in kdb_trap (type=3, code=0, tf=0xffffff81b2da8a80)
>     at /spare/tmp/src-stable9/sys/kern/subr_kdb.c:649
> #6  0xffffffff805a02cf in trap (frame=0xffffff81b2da8a80)
>     at /spare/tmp/src-stable9/sys/amd64/amd64/trap.c:579
> #7  0xffffffff8058992f in calltrap ()
>     at /spare/tmp/src-stable9/sys/amd64/amd64/exception.S:228
> #8  0xffffffff803c43cb in kdb_enter (why=0xffffffff806145f3 "panic",
>     msg=0x80 <Address 0x80 out of bounds>) at cpufunc.h:63
> #9  0xffffffff8038f407 in panic (fmt=<value optimized out>)
>     at /spare/tmp/src-stable9/sys/kern/kern_shutdown.c:627
> #10 0xffffffff80568049 in vm_fault_hold (map=0xfffffe0002000000,
>     vaddr=18446743530148802560, fault_type=2 '\002', fault_flags=0,
>     m_hold=0x0) at /spare/tmp/src-stable9/sys/vm/vm_fault.c:285
> #11 0xffffffff80568753 in vm_fault (map=0xfffffe0002000000,
>     vaddr=18446743530148802560, fault_type=<value optimized out>,
>     fault_flags=0) at /spare/tmp/src-stable9/sys/vm/vm_fault.c:229
> #12 0xffffffff805a00c7 in trap_pfault (frame=0xffffff81b2da9170, usermode=0)
>     at /spare/tmp/src-stable9/sys/amd64/amd64/trap.c:771
> #13 0xffffffff805a051e in trap (frame=0xffffff81b2da9170)
>     at /spare/tmp/src-stable9/sys/amd64/amd64/trap.c:463
> #14 0xffffffff8058992f in calltrap ()
>     at /spare/tmp/src-stable9/sys/amd64/amd64/exception.S:228
> #15 0xffffffff8059d7b5 in bcopy ()
>     at /spare/tmp/src-stable9/sys/amd64/amd64/support.S:134
> #16 0xffffffff81c5963b in nfsm_mbufuio (nd=0xffffff81b2da9320,
>     uiop=<value optimized out>, siz=32768)
>     at /spare/tmp/src-stable9/sys/modules/nfscommon/../../fs/nfs/nfs_commonsubs.c:212
> #17 0xffffffff81c19571 in nfsrpc_read (vp=0xfffffe0005ca2000,
>     uiop=0xffffff81b2da95a0, cred=<value optimized out>,
>     p=0xfffffe0005f28000, nap=0xffffff81b2da9480,
>     attrflagp=0xffffff81b2da954c, stuff=0x0)
>     at /spare/tmp/src-stable9/sys/modules/nfscl/../../fs/nfsclient/nfs_clrpcops.c:1343
> #18 0xffffffff81c3aff0 in ncl_readrpc (vp=0xfffffe0005ca2000,
>     uiop=0xffffff81b2da95a0, cred=<value optimized out>)
>     at /spare/tmp/src-stable9/sys/modules/nfscl/../../fs/nfsclient/nfs_clvnops.c:1366
> #19 0xffffffff81c2fed3 in ncl_doio (vp=0xfffffe0005ca2000,
>     bp=0xffffff816fabca20, cr=0xfffffe0002d59e00, td=0xfffffe0005f28000,
>     called_from_strategy=0)
>     at /spare/tmp/src-stable9/sys/modules/nfscl/../../fs/nfsclient/nfs_clbio.c:1605
> #20 0xffffffff81c32aaf in ncl_bioread (vp=0xfffffe0005ca2000,
>     uio=0xffffff81b2da9ad0, ioflag=<value optimized out>,
>     cred=0xfffffe0002d59e00)
>     at /spare/tmp/src-stable9/sys/modules/nfscl/../../fs/nfsclient/nfs_clbio.c:541
> #21 0xffffffff804379c3 in vn_read (fp=0xfffffe0005f3e960,
>     uio=0xffffff81b2da9ad0, active_cred=<value optimized out>,
>     flags=<value optimized out>, td=<value optimized out>) at vnode_if.h:384
> #22 0xffffffff80434d40 in vn_io_fault (fp=0xfffffe0005f3e960,
>     uio=0xffffff81b2da9ad0, active_cred=0xfffffe0002d59e00, flags=0,
>     td=0xfffffe0005f28000) at /spare/tmp/src-stable9/sys/kern/vfs_vnops.c:903
> #23 0xffffffff803d7bd1 in dofileread (td=0xfffffe0005f28000, fd=3,
>     fp=0xfffffe0005f3e960, auio=0xffffff81b2da9ad0,
>     offset=<value optimized out>, flags=0) at file.h:287
> #24 0xffffffff803d7f7c in kern_readv (td=0xfffffe0005f28000, fd=3,
>     auio=0xffffff81b2da9ad0)
>     at /spare/tmp/src-stable9/sys/kern/sys_generic.c:250
> #25 0xffffffff803d8074 in sys_read (td=<value optimized out>,
>     uap=<value optimized out>)
>     at /spare/tmp/src-stable9/sys/kern/sys_generic.c:166
> #26 0xffffffff8059f4f0 in amd64_syscall (td=0xfffffe0005f28000, traced=0)
>     at subr_syscall.c:135
> #27 0xffffffff80589c17 in Xfast_syscall ()
>     at /spare/tmp/src-stable9/sys/amd64/amd64/exception.S:387
> #28 0x00000008009245fc in ?? ()
> Previous frame inner to this frame (corrupt stack?)
> (kgdb)
> _______________________________________________
> freebsd-stable at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-stable
> To unsubscribe, send any mail to "freebsd-stable-unsubscribe at freebsd.org"
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 834 bytes
Desc: not available
URL: <http://lists.freebsd.org/pipermail/freebsd-stable/attachments/20130124/f51a5dee/attachment.sig>