Re: Re: kern/58422: kernel crash when using the iscsi initiator

[6bone%6bone.informatik.uni-leipzig.de@localhost]

The next crash. The kernel contains the patch from the case.

dmesg -M netbsd.49.core
....
[ 95493.709585] S3C1: freeing UNUSED pdu
[ 95499.766892] S3C1: freeing UNUSED pdu
[ 95500.317270] S3C1: freeing UNUSED pdu
[ 95506.245037] S3C1: freeing UNUSED pdu
[ 95511.421411] S3C1: freeing UNUSED pdu
[ 95512.393054] Received Reject PDU, reason = 4, data_len = 48
[ 95512.393054] S3C1: *** Connection Error, status=25, logout=1, state=3
[ 95512.393054] sd3(iscsi0:0:0:11): generic HBA error
[ 95512.393054] sd3d: error writing fsbn 34674059682 of 34674059682-34674059745 (sd3 bn 34674059682; cn 16930693 tn 13 sn 2)
[ 95519.402427] sd3d: error writing fsbn 35353610530 of 35353610530-35353610593 (sd3 bn 35353610530; cn 17262505 tn 9 sn 2)
[ 95522.475421] S3C1: *** Connection Error, status=24, logout=-1, state=5
[ 95524.408023] sd3d: error reading fsbn 33006352546 of 33006352546-33006352609 (sd3 bn 33006352546; cn 16116383 tn 5 sn 2)
[ 95524.498026] S3C1: Resend ccb 0xffffc280676b72b8 (37) - updating CmdSN old 21405452, new 21405454
[ 95524.498026] S3C1: Connection ReCreated successfully - status 0
[ 95525.691696] panic: ufsdirhash_findfree: free mismatch
[ 95525.691696] cpu2: Begin traceback...
[ 95525.691696] vpanic() at netbsd:vpanic+0x183
[ 95525.691696] panic() at netbsd:panic+0x3c
[ 95525.691696] ufsdirhash_findfree() at netbsd:ufsdirhash_findfree+0x240
[ 95525.691696] ufs_lookup() at netbsd:ufs_lookup+0x6ac
[ 95525.701692] VOP_LOOKUP() at netbsd:VOP_LOOKUP+0x44
[ 95525.701692] lookup_once() at netbsd:lookup_once+0x1a6
[ 95525.701692] namei_tryemulroot() at netbsd:namei_tryemulroot+0xb00
[ 95525.701692] namei() at netbsd:namei+0x29
[ 95525.701692] vn_open() at netbsd:vn_open+0x133
[ 95525.701692] do_open() at netbsd:do_open+0xc3
[ 95525.711693] do_sys_openat() at netbsd:do_sys_openat+0x74
[ 95525.711693] sys_open() at netbsd:sys_open+0x24
[ 95525.711693] syscall() at netbsd:syscall+0x196
[ 95525.711693] --- syscall (number 5) ---
[ 95525.711693] netbsd:syscall+0x196:
[ 95525.711693] cpu2: End traceback...

[ 95525.711693] dumping to dev 4,1 (offset=22227071, size=12581616):
[ 95525.711693] dump S3C1: *** Connection Error, status=24, logout=-1, 
state=3


Reading symbols from /netbsd...
(gdb) target kvm netbsd.49.core
0xffffffff80237015 in cpu_reboot (howto=howto@entry=260,
    bootstr=bootstr@entry=0x0) at 
/usr/src/sys/arch/amd64/amd64/machdep.c:717
717                     dumpsys();
(gdb) bt
#0  0xffffffff80237015 in cpu_reboot (howto=howto@entry=260, 
bootstr=bootstr@entry=0x0) at /usr/src/sys/arch/amd64/amd64/machdep.c:717
#1  0xffffffff80d9da24 in kern_reboot (howto=howto@entry=260, 
bootstr=bootstr@entry=0x0) at /usr/src/sys/kern/kern_reboot.c:73
#2  0xffffffff80de7d8d in vpanic (fmt=fmt@entry=0xffffffff814b5c80 
"ufsdirhash_findfree: free mismatch", ap=ap@entry=0xffffc28c97682908) at 
/usr/src/sys/kern/subr_prf.c:291
#3  0xffffffff80de7e62 in panic (fmt=fmt@entry=0xffffffff814b5c80 
"ufsdirhash_findfree: free mismatch") at /usr/src/sys/kern/subr_prf.c:208
#4  0xffffffff80d16d61 in ufsdirhash_findfree 
(ip=ip@entry=0xffffe5b4c53e07f8, slotneeded=60, 
slotsize=slotsize@entry=0xffffc28c97682a54)
    at /usr/src/sys/ufs/ufs/ufs_dirhash.c:585
#5  0xffffffff80d1ae04 in slot_findfree (dp=0xffffe5b4c53e07f8, 
slot=0xffffc28c97682a4c) at /usr/src/sys/ufs/ufs/ufs_lookup.c:134
#6  ufs_lookup (v=<optimized out>) at 
/usr/src/sys/ufs/ufs/ufs_lookup.c:451
#7  0xffffffff80e67c1c in VOP_LOOKUP (dvp=dvp@entry=0xffffe5b4c66b2040, 
vpp=vpp@entry=0xffffc28c97682b38, cnp=cnp@entry=0xffffc28c97682d70) at 
/usr/src/sys/kern/vnode_if.c:443
#8  0xffffffff80e440f0 in lookup_once 
(state=state@entry=0xffffc28c97682cc0, searchdir=<optimized out>, 
newsearchdir_ret=newsearchdir_ret@entry=0xffffc28c97682c18,
    foundobj_ret=foundobj_ret@entry=0xffffc28c97682c20, 
newsearchdir_locked_ret=newsearchdir_locked_ret@entry=0xffffc28c97682c17) 
at /usr/src/sys/kern/vfs_lookup.c:1150
#9  0xffffffff80e45277 in namei_oneroot (isnfsd=0, inhibitmagic=0, 
neverfollow=0, state=<optimized out>) at 
/usr/src/sys/kern/vfs_lookup.c:1545
#10 namei_tryemulroot (state=state@entry=0xffffc28c97682cc0, 
neverfollow=neverfollow@entry=0, inhibitmagic=inhibitmagic@entry=0, 
isnfsd=isnfsd@entry=0)
    at /usr/src/sys/kern/vfs_lookup.c:1905
#11 0xffffffff80e4724c in namei (ndp=ndp@entry=0xffffc28c97682d20) at 
/usr/src/sys/kern/vfs_lookup.c:1941
#12 0xffffffff80e5f40c in vn_open (at_dvp=at_dvp@entry=0x0, 
pb=pb@entry=0xffffe5b6f4a7d340, nmode=nmode@entry=16, 
fmode=fmode@entry=2563, cmode=384,
    ret_vp=ret_vp@entry=0xffffc28c97682ec8, 
ret_domove=ret_domove@entry=0xffffc28c97682eb7, 
ret_fd=ret_fd@entry=0xffffc28c97682eb8) at 
/usr/src/sys/kern/vfs_vnops.c:219
#13 0xffffffff80e520af in do_open (l=l@entry=0xffffe5b7ea77f5c0, dvp=0x0, 
pb=0xffffe5b6f4a7d340, open_flags=open_flags@entry=2562, 
open_mode=open_mode@entry=384,
    fd=fd@entry=0xffffc28c97682f7c) at 
/usr/src/sys/kern/vfs_syscalls.c:1752
#14 0xffffffff80e521cb in do_sys_openat (l=0xffffe5b7ea77f5c0, 
fdat=fdat@entry=-100, path=<optimized out>, flags=2562, mode=384, 
fd=fd@entry=0xffffc28c97682f7c)
    at /usr/src/sys/kern/vfs_syscalls.c:1835
#15 0xffffffff80e52319 in sys_open (l=<optimized out>, uap=<optimized 
out>, retval=0xffffc28c97682fb0) at /usr/src/sys/kern/vfs_syscalls.c:1856
#16 0xffffffff8058b8e5 in sy_call (rval=0xffffc28c97682fb0, 
uap=0xffffc28c97683000, l=0xffffe5b7ea77f5c0, sy=0xffffffff8187d1d8 
<sysent+120>)
    at /usr/src/sys/sys/syscallvar.h:65
#17 sy_invoke (code=5, rval=0xffffc28c97682fb0, uap=0xffffc28c97683000, 
l=0xffffe5b7ea77f5c0, sy=0xffffffff8187d1d8 <sysent+120>) at 
/usr/src/sys/sys/syscallvar.h:94
#18 syscall (frame=0xffffc28c97683000) at 
/usr/src/sys/arch/x86/x86/syscall.c:138
#19 0xffffffff8020e6bd in handle_syscall ()
#20 0x00007f7fffdb42e0 in ?? ()
#21 0x0000000000000a02 in ?? ()
#22 0x0000000000000180 in ?? ()
#23 0x000072709817957a in ?? ()
#24 0x0000000000000000 in ?? ()



Regards
Uwe