>Number: 6353
>Category: kernel
>Synopsis: pool_do_get(inodedeppl): free list modified
>Confidential: yes
>Severity: serious
>Priority: medium
>Responsible: bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: sw-bug
>Submitter-Id: unknown
>Arrival-Date: Thu Apr 08 08:30:01 GMT 2010
>Closed-Date:
>Last-Modified:
>Originator:
>Release:
>Organization:
>Environment:
System : OpenBSD 4.7
Details : OpenBSD 4.7-current (GENERIC) #587: Sun Apr 4 22:52:16
MDT 2010
[email protected]:/usr/src/sys/arch/i386/compile/GENERIC
Architecture: OpenBSD.i386
Machine : i386
>Description:
kern.bufcachepercent=80
mount points
/dev/wd0a on / type ffs (local, noatime)
/dev/wd0d on /var type ffs (local, noatime)
/dev/wd0e on /tmp type ffs (asynchronous, local, noatime)
/dev/wd0f on /usr type ffs (local, noatime)
/dev/wd0g on /export/home type ffs (local, noatime, softdep)
/dev/wd1a on /export/tfs type ffs (NFS exported, local, noatime, softdep)
/dev/sd0a on /var/squid type ffs (asynchronous, local, noatime, nodev, nosuid)
/dev/sd0d on /export/home/tobiasu/enc type ffs (local, noatime, nodev, nosuid)
/dev/sd1a on /var/snapshots/fs1 type ffs (asynchronous, local, noatime, nodev,
nosuid)
/dev/sd2a on /var/snapshots/fs2 type ffs (asynchronous, local, noatime, nodev,
nosuid)
panic happened while extracting a tarball on /export/tfs. No NFS activity at
that time.
show panic
pool_do_get(inodedeppl): free list modified: page 0xd6db7000; item addr 0xd6db7
7ec; offset 0x18=0xefd2aabb
ddb> trace
Debugger(d7c94be8,0,0,15,d0938340) at Debugger+0x4
panic(d079c140,d07b48e6,d6db7000,d6db77ec,18) at panic+0x55
pool_do_get(d0938340,2,dd2b3db0,d046a019,0) at pool_do_get+0x27f
pool_get(d0938340,2,dd2b3df0,d047418c,d2818600) at pool_get+0x46
inodedep_lookup(d257e800,192e839,1,dd2b3e14,50) at inodedep_lookup+0xd2
softdep_change_linkcnt(d76877e8,0,1c00,d2818600,d7babb70) at softdep_change_lin
kcnt+0x34
ufs_dirremove(d7c94be8,d76877e8,800c,0) at ufs_dirremove+0xb4
ufs_remove(dd2b3e98,0,dd2b3ef0,d0370a00,d08adc0c) at ufs_remove+0x9b
VOP_REMOVE(d7c94be8,d7683158,dd2b3eec,0) at VOP_REMOVE+0x2e
sys_unlink(d79a06e0,dd2b3f68,dd2b3f58,0,0) at sys_unlink+0x5e
syscall() at syscall+0x24e
--- syscall (number 10) ---
0x1c019f0d:
ddb> ps
PID PPID PGRP UID S FLAGS WAIT COMMAND
31531 24994 3540 0 2 0x4002 gzip
*24994 3540 3540 0 7 0x4002 tar
3540 8694 3540 1000 3 0x4082 pause ksh
28646 18358 28646 0 3 0x4082 kqread tail
18358 8032 18358 1000 3 0x4082 pause ksh
20774 8032 20774 1000 3 0x4082 ttyin ksh
12963 8032 12963 1000 3 0x4082 ttyin ksh
8694 25075 8694 1000 3 0x4082 pause ksh
25075 3 25075 0 3 0x4082 pause ksh
32465 9049 32465 0 3 0x4082 pause sh
9049 8032 9049 1000 3 0x4082 pause ksh
8032 1 8032 1000 3 0x80 kqread tmux
11262 873 11262 1000 3 0x4082 kqread tmux
873 6832 873 1000 3 0x4082 pause ksh
6832 19916 19916 1000 3 0x180 select sshd
19916 13815 19916 0 3 0x4180 netio sshd
29851 12138 29851 1000 3 0x4082 ttyin ksh
12138 10134 10134 1000 3 0x180 select sshd
10134 13815 10134 0 3 0x4180 netio sshd
6840 1 6840 1000 2 0x80 mpd
7960 16222 409 515 3 0x4080 piperd unlinkd
16222 409 409 515 3 0x4180 poll squid
409 1 409 0 3 0x80 poll squid
7069 1 7069 0 3 0x4082 ttyin getty
32436 1 32436 0 3 0x4082 ttyin getty
10175 1 10175 0 3 0x4082 ttyin getty
26103 1 26103 0 3 0x4082 ttyin getty
20720 1 20720 0 3 0x4082 ttyin getty
14591 1 14591 0 3 0x4082 ttyin getty
28645 1 28645 0 3 0x40180 select sendmail
9256 1 9256 0 3 0x80 select cron
24721 1 2351 0 3 0x82 nanosleep perl
504 1 504 0 3 0x180 select inetd
25253 1 25253 71 3 0x180 kqread ftp-proxy
19459 1 19459 77 3 0x180 poll dhcpd
13815 1 13815 0 3 0x80 select sshd
3943 1 3943 0 3 0x80 poll ntpd
22468 9817 22468 83 3 0x180 poll ntpd
9817 1 9817 83 3 0x180 poll ntpd
22400 26512 26512 0 3 0x80 nfsd nfsd
10909 26512 26512 0 3 0x80 nfsd nfsd
9764 26512 26512 0 3 0x80 nfsd nfsd
1875 26512 26512 0 3 0x80 nfsd nfsd
26512 1 26512 0 3 0x80 netcon nfsd
26006 1 26006 0 3 0x80 select mountd
9261 1 9261 28 3 0x180 poll portmap
19629 29491 29491 70 3 0x180 select named
29491 1 29491 0 3 0x180 netio named
16555 1748 1748 73 3 0x180 poll syslogd
1748 1 1748 0 3 0x88 netio syslogd
16 0 0 0 3 0x100200 bored crypto
15 0 0 0 3 0x100200 aiodoned aiodoned
14 0 0 0 3 0x100200 syncer update
13 0 0 0 3 0x100200 cleaner cleaner
12 0 0 0 3 0x100200 reaper reaper
11 0 0 0 3 0x100200 pgdaemon pagedaemon
10 0 0 0 3 0x100200 pftm pfpurge
9 0 0 0 3 0x100200 usbevt usb2
8 0 0 0 3 0x100200 usbevt usb1
7 0 0 0 3 0x100200 usbtsk usbtask
6 0 0 0 3 0x100200 usbevt usb0
5 0 0 0 3 0x100200 apmev apm0
4 0 0 0 3 0x100200 bored syswq
3 0 0 0 3 0x40100200 idle0
2 0 0 0 3 0x100200 kmalloc kmthread
1 0 1 0 3 0x4080 wait init
0 -1 0 0 3 0x80200 scheduler swapper
1557 11262 11262 1000 5 0x2002 tmux
ddb> x 0xd6db77ec,0x54
0xd6db77ec: efffaabb d6db7a8c d6db7fd8 efffaabb efffaabb
0xd6db7800: efffaabb efd2aabb efffaabb efffaabb efffaabb
0xd6db7814: efdbaabb efffaabb efffaabb efffaabb efffaabb
0xd6db7828: efffaabb efffaabb efffaabb efffaabb efffaabb
0xd6db783c: efffaabb efffaabb d6db7ae0 d6db75a4 efffaabb
0xd6db7850: efffaabb efffaabb efffaabb efffaabb efffaabb
0xd6db7864: efffaabb efffaabb efffaabb efffaabb efffaabb
0xd6db7878: efffaabb efffaabb efffaabb efffaabb efffaabb
0xd6db788c: efffaabb efffaabb dd378268 dd378288 d0001
0xd6db78a0: ffffffff ffffffff d257e800 192f513 0
0xd6db78b4: 0 ffffffff ffffffff 0 ffffffff
0xd6db78c8: ffffffff 0 0 0 0
0xd6db78dc: d6db78d8 0 d6db78e0 efffaabb ffffffff
0xd6db78f0: d0001 0 d252e160 d257e800 192d999
0xd6db7904: 1 0 efffaabb efffaabb 0
0xd6db7918: ffffffff ffffffff 0 0 0
0xd6db792c: 0 d6db792c 0 d6db7934
ddb> boot sync
syncing disks... uvm_fault(0xd7aefeb4, 0x0, 0, 3) -> e
kernel: page fault trap, code=0
Faulted in DDB; continuing...
ddb> boot sync
sd2 detached
scsibus3 detached
sd1 detached
scsibus2 detached
sd0 detached
scsibus1 detached
rebooting...
>How-To-Repeat:
>Fix:
>Release-Note:
>Audit-Trail:
>Unformatted:
>> OpenBSD/i386 BOOT 3.02
boot>
entry point at 0x200120
[ using 710240 bytes of bsd ELF symbol table ]
Copyright (c) 1982, 1986, 1989, 1991, 1993
The Regents of the University of California. All rights reserved.
Copyright (c) 1995-2010 OpenBSD. All rights reserved. http://www.OpenBSD.org
OpenBSD 4.7-current (GENERIC) #587: Sun Apr 4 22:52:16 MDT 2010
[email protected]:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: AMD Athlon(tm) XP 2500+ ("AuthenticAMD" 686-class, 512KB L2 cache) 1.84
GHz
cpu0:
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR,SSE
real mem = 1610117120 (1535MB)
avail mem = 1549553664 (1477MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 05/17/05, BIOS32 rev. 0 @ 0xfa390,
SMBIOS rev. 2.3 @ 0xf0100 (38 entries)
bios0: vendor Award Software International, Inc. version "F6" date 05/17/2005
bios0: Gigabyte Technology Co., Ltd. GA-7S748
apm0 at bios0: Power Management spec V1.2 (slowidle)
apm0: AC on, battery charge unknown
acpi at bios0 function 0x0 not configured
pcibios0 at bios0: rev 2.1 @ 0xf0000/0xc784
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xfc6f0/144 (7 entries)
pcibios0: PCI Exclusive IRQs: 5 6 9 10 11
pcibios0: PCI Interrupt Router at 000:02:0 ("SiS 85C503 System" rev 0x00)
pcibios0: PCI bus #1 is the last bus
bios0: ROM list: 0xc0000/0xc000 0xcc000/0x8000!
cpu0 at mainbus0: (uniprocessor)
pci0 at mainbus0 bus 0: configuration mode 1 (bios)
pchb0 at pci0 dev 0 function 0 "SiS 746 PCI" rev 0x10
sisagp0 at pchb0
agp0 at sisagp0: aperture at 0xe8000000, size 0x4000000
ppb0 at pci0 dev 1 function 0 "SiS 86C202 VGA" rev 0x00
pci1 at ppb0 bus 1
vga1 at pci1 dev 0 function 0 "ATI Radeon VE" rev 0x00
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
radeondrm0 at vga1: irq 10
drm0 at radeondrm0
pcib0 at pci0 dev 2 function 0 "SiS 85C503 System" rev 0x25
pciide0 at pci0 dev 2 function 5 "SiS 5513 EIDE" rev 0x00: 746: DMA, channel 0
wired to compatibility, channel 1 wired to compatibility
wd0 at pciide0 channel 0 drive 0: <ST3250620A>
wd0: 16-sector PIO, LBA48, 238474MB, 488395055 sectors
wd1 at pciide0 channel 0 drive 1: <ST3250620A>
wd1: 16-sector PIO, LBA48, 238475MB, 488397168 sectors
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 5
wd1(pciide0:0:1): using PIO mode 4, Ultra-DMA mode 5
wd2 at pciide0 channel 1 drive 0: <Hitachi HCP725050GLAT80>
wd2: 16-sector PIO, LBA48, 476940MB, 976773168 sectors
wd3 at pciide0 channel 1 drive 1: <Hitachi HCP725050GLAT80>
wd3: 16-sector PIO, LBA48, 476940MB, 976773168 sectors
wd2(pciide0:1:0): using PIO mode 4, Ultra-DMA mode 6
wd3(pciide0:1:1): using PIO mode 4, Ultra-DMA mode 6
ohci0 at pci0 dev 3 function 0 "SiS 5597/5598 USB" rev 0x0f: irq 10, version
1.0, legacy support
ohci1 at pci0 dev 3 function 1 "SiS 5597/5598 USB" rev 0x0f: irq 11, version
1.0, legacy support
ehci0 at pci0 dev 3 function 3 "SiS 7002 USB" rev 0x00: irq 6
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 "SiS EHCI root hub" rev 2.00/1.00 addr 1
ral0 at pci0 dev 10 function 0 "Ralink RT2561" rev 0x00: irq 5, address
00:80:5a:38:c4:0b
ral0: MAC/BBP RT2661B, RF RT2527
rl0 at pci0 dev 11 function 0 "Realtek 8139" rev 0x10: irq 11, address
00:08:54:01:0a:00
rlphy0 at rl0 phy 0: RTL internal PHY
rl1 at pci0 dev 12 function 0 "Realtek 8139" rev 0x10: irq 10, address
00:05:5d:2b:fa:b4
rlphy1 at rl1 phy 0: RTL internal PHY
cmpci0 at pci0 dev 13 function 0 "C-Media Electronics CMI8738/C3DX Audio" rev
0x10: irq 9
audio0 at cmpci0
opl0 at cmpci0: model OPL3
midi0 at opl0: <CMPCI Yamaha OPL3>
mpu at cmpci0 not configured
isa0 at pcib0
isadma0 at isa0
com0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
com0: console
com1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo
pckbc0 at isa0 port 0x60/5
pcppi0 at isa0 port 0x61
midi1 at pcppi0: <PC speaker>
spkr0 at pcppi0
lpt0 at isa0 port 0x378/4 irq 7
it0 at isa0 port 0x2e/2: IT8705F rev 2, EC port 0x290
npx0 at isa0 port 0xf0/16: reported by CPUID; using exception 16
usb1 at ohci0: USB revision 1.0
uhub1 at usb1 "SiS OHCI root hub" rev 1.00/1.00 addr 1
usb2 at ohci1: USB revision 1.0
uhub2 at usb2 "SiS OHCI root hub" rev 1.00/1.00 addr 1
biomask fd47 netmask fd67 ttymask fdff
mtrr: Pentium Pro MTRR support
vscsi0 at root
scsibus0 at vscsi0: 256 targets
softraid0 at root
root on wd0a swap on wd0b dump on wd0b
WARNING: / was not properly unmounted
