GENERIC 7.0-CURRENT from Nov 14 16:00 UTC, vmcore.19
Test with corrupted UFS2 file system.
KDB: debugger backends: ddb
KDB: current backend: ddb
Copyright (c) 1992-2005 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
The Regents of the University of California. All rights reserved.
FreeBSD 7.0-CURRENT #16: Mon Nov 14 17:19:26 CET 2005
pho@crashbox.osted.lan:/usr/src/sys/i386/compile/PHO
WARNING: WITNESS option enabled, expect reduced performance.
ACPI APIC Table: <A M I OEMAPIC >
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: Intel(R) XEON(TM) CPU 1.80GHz (1799.80-MHz 686-class CPU)
Origin = "GenuineIntel" Id = 0xf24 Stepping = 4
Features=0x3febfbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM>
Logical CPUs per core: 2
real memory = 1073676288 (1023 MB)
avail memory = 1041006592 (992 MB)
:
Trying to mount root from ufs:/dev/ad0s1a
WARNING: / was not properly dismounted
WARNING: /home was not properly dismounted
WARNING: /tmp was not properly dismounted
WARNING: /usr was not properly dismounted
WARNING: /var was not properly dismounted
fxp0: link state changed to UP
/mnt: mount pending error: blocks 2251799813685248 files 0
/mnt: mount pending error: blocks 0 files 16
panic: getblk: size(536871936) > MAXBSIZE(65536)
cpuid = 0
KDB: enter: panic
[thread pid 3467 tid 100090 ]
Stopped at kdb_enter+0x2b: nop
db> where
Tracing pid 3467 tid 100090 td 0xc4ef6300
kdb_enter(c0872545) at kdb_enter+0x2b
panic(c087a4b5,20000400,10000,c106cdc8,737) at panic+0x14b
getblk(c6041828,d0,0,20000400,0) at getblk+0x24
breadn(c6041828,d0,0,20000400,0) at breadn+0x31
bread(c6041828,d0,0,20000400,c5334b80) at bread+0x20
ffs_mountfs(c6041828,c4caa800,c4ef6300,c4e483d0,0) at ffs_mountfs+0x629
ffs_mount(c4caa800,c4ef6300,0,0,c6030d98) at ffs_mount+0x992
vfs_domount(c4ef6300,c4e48950,c4c0da20,0,c4eedc10) at vfs_domount+0x5b1
vfs_donmount(c4ef6300,0,e75feba8,c604ed80,e) at vfs_donmount+0x135
kernel_mount(c4eed4c0,0,804f030,0,fffffffe) at kernel_mount+0x6d
ffs_cmount(c4eed4c0,bfbfde20,0,c4ef6300,c0913120) at ffs_cmount+0x5d
mount(c4ef6300,e75fed04,c,c4ef6300,e75fed30) at mount+0x156
syscall(3b,3b,3b,804ae3f,bfbfe8e4) at syscall+0x27e
Xint0x80_syscall() at Xint0x80_syscall+0x1f
--- syscall (21, FreeBSD ELF32, mount), eip = 0x280c140f, esp = 0xbfbfddfc, ebp = 0xbfbfde98 ---
db> call doadump
Dumping 1023 MB (2 chunks)
chunk 0: 1MB (159 pages) ... ok
chunk 1: 1023MB (261872 pages) 1007 991 975 959 943 927 911 895 879 863 847 831 815 799 783 767 751 735 719 703 687 671 655 639 623 607 591 575 559 543 527 511 495 479 463 447 431 415 399 383 367 351 335 319 303 287 271 255 239 223 207 191 175 159 143 127 111 95 79 63 47 31 15 ... ok
Dump complete
= 0xf
db> reset
(kgdb) bt
#0 doadump () at pcpu.h:165
#1 0xc046a3a3 in db_fncall (dummy1=0xc09b6e60, dummy2=0x0, dummy3=0x0, dummy4=0xe75fe5e4 "\020æ_ç| \207~Àüå_ç")
at ../../../ddb/db_command.c:489
#2 0xc046a1a8 in db_command (last_cmdp=0xc0923ce4, cmd_table=0x0, aux_cmd_tablep=0xc089e0a4, aux_cmd_tablep_end=0xc089e0c0)
at ../../../ddb/db_command.c:404
#3 0xc046a270 in db_command_loop () at ../../../ddb/db_command.c:455
#4 0xc046be89 in db_trap (type=0x3, code=0x0) at ../../../ddb/db_main.c:228
#5 0xc0660924 in kdb_trap (type=0x3, code=0x0, tf=0xe75fe77c) at ../../../kern/subr_kdb.c:485
#6 0xc0806924 in trap (frame=
{tf_fs = 0xe75f0008, tf_es = 0xc0660028, tf_ds = 0xc0870028, tf_edi = 0xc087a4b5, tf_esi = 0x1, tf_ebp = 0xe75fe7bc, tf_isp = 0xe75fe7a8, tf_ebx = 0xe75fe7e8, tf_edx = 0x0, tf_ecx = 0xc1033000, tf_eax = 0x12, tf_trapno = 0x3, tf_err = 0x0, tf_eip = 0xc066062b, tf_cs = 0x20, tf_eflags = 0x282, tf_esp = 0xe75fe7dc, tf_ss = 0xc064688f}) at ../../../i386/i386/trap.c:612
#7 0xc07f380a in calltrap () at ../../../i386/i386/exception.s:139
#8 0xc066062b in kdb_enter (msg=0x12 <Address 0x12 out of bounds>) at cpufunc.h:60
#9 0xc064688f in panic (fmt=0xc087a4b5 "getblk: size(%d) > MAXBSIZE(%d)\n") at ../../../kern/kern_shutdown.c:549
#10 0xc068fd14 in getblk (vp=0xc6041828, blkno=0xd0, size=0x20000400, slpflag=0x0, slptimeo=0x0, flags=0x0) at ../../../kern/vfs_bio.c:2328
#11 0xc068d02d in breadn (vp=0xc6041828, blkno=0xd0, size=0x20000400, rablkno=0x0, rabsize=0x0, cnt=0x0, cred=0xc5334b80, bpp=0x12)
at ../../../kern/vfs_bio.c:738
#12 0xc068cff8 in bread (vp=0xc6041828, blkno=0xd0, size=0x20000400, cred=0xc5334b80, bpp=0xe75fe8c4) at ../../../kern/vfs_bio.c:719
#13 0xc07845a5 in ffs_mountfs (devvp=0xc6041828, mp=0xc4caa800, td=0xc4ef6300) at ../../../ufs/ffs/ffs_vfsops.c:682
#14 0xc0783866 in ffs_mount (mp=0xc4caa800, td=0xc4ef6300) at ../../../ufs/ffs/ffs_vfsops.c:355
#15 0xc0698915 in vfs_domount (td=0xc4ef6300, fstype=0xc0913120 " \001f\031ufs", fspath=0xc4c0da20 "/mnt", fsflags=0x0, fsdata=0xc4eedc10)
at ../../../kern/vfs_mount.c:776
#16 0xc0698189 in vfs_donmount (td=0xc4ef6300, fsflags=0x0, fsoptions=0xe75feba8) at ../../../kern/vfs_mount.c:529
#17 0xc069a395 in kernel_mount (ma=0xc4eed4c0, flags=0x0) at pcpu.h:162
#18 0xc07838fd in ffs_cmount (ma=0xc4eed4c0, data=0xc1033000, flags=0x0, td=0xc4ef6300) at ../../../ufs/ffs/ffs_vfsops.c:382
#19 0xc0698352 in mount (td=0xc4ef6300, uap=0xe75fed04) at ../../../kern/vfs_mount.c:603
#20 0xc080718a in syscall (frame=
{tf_fs = 0x3b, tf_es = 0x3b, tf_ds = 0x3b, tf_edi = 0x804ae3f, tf_esi = 0xbfbfe8e4, tf_ebp = 0xbfbfde98, tf_isp = 0xe75fed64, tf_ebx = 0x804f050, tf_edx = 0x0, tf_ecx = 0x1, tf_eax = 0x15, tf_trapno = 0xc, tf_err = 0x2, tf_eip = 0x280c140f, tf_cs = 0x33, tf_eflags = 0x246, tf_esp = 0xbfbfddfc, tf_ss = 0x3b}) at ../../../i386/i386/trap.c:1003
#21 0xc07f385f in Xint0x80_syscall () at ../../../i386/i386/exception.s:200
#22 0x00000033 in ?? ()
Previous frame inner to this frame (corrupt stack?)
(kgdb) f 13
#13 0xc07845a5 in ffs_mountfs (devvp=0xc6041828, mp=0xc4caa800, td=0xc4ef6300) at ../../../ufs/ffs/ffs_vfsops.c:682
682 if ((error = bread(devvp, fsbtodb(fs, fs->fs_csaddr + i), size,
(kgdb) info loc
ump = (struct ufsmount *) 0xc519fe00
bp = (struct buf *) 0x0
fs = (struct fs *) 0xc54d2800
dev = (struct cdev *) 0xc605e200
space = (void *) 0xc54ce800
sblockloc = 0x10000
error = 0x0
i = 0x0
blks = 0x1
size = 0x20000400
ronly = 0x0
lp = (int32_t *) 0x0
cred = (struct ucred *) 0xc5334b80
cp = (struct g_consumer *) 0xc5071b80
(kgdb) p *fs
$2 = {fs_firstfield = 0x0, fs_unused_1 = 0x0, fs_sblkno = 0x48, fs_cblkno = 0x50, fs_iblkno = 0x58, fs_dblkno = 0x68,
fs_old_cgoffset = 0x0, fs_old_cgmask = 0x0, fs_old_time = 0x0, fs_old_size = 0x0, fs_old_dsize = 0x0, fs_ncg = 0x4, fs_bsize = 0x2000,
fs_fsize = 0x20000400, fs_frag = 0x8, fs_minfree = 0x8, fs_old_rotdelay = 0x0, fs_old_rps = 0x0, fs_bmask = 0xffffe000,
fs_fmask = 0xfffffc00, fs_bshift = 0xd, fs_fshift = 0xa, fs_maxcontig = 0x10, fs_maxbpg = 0x400, fs_fragshift = 0x3, fs_fsbtodb = 0x1,
fs_sbsize = 0x800, fs_spare1 = {0x0, 0x0}, fs_nindir = 0x400, fs_inopb = 0x20, fs_old_nspf = 0x0, fs_optim = 0x0, fs_old_npsect = 0x0,
fs_old_interleave = 0x0, fs_old_trackskew = 0x0, fs_id = {0x43790ea7, 0xfc5ca960}, fs_old_csaddr = 0x0, fs_cssize = 0x400,
fs_cgsize = 0x400, fs_spare2 = 0x0, fs_old_nsect = 0x0, fs_old_spc = 0x0, fs_old_ncyl = 0x0, fs_old_cpg = 0x0, fs_ipg = 0x40,
fs_fpg = 0x100, fs_old_cstotal = {cs_ndir = 0x0, cs_nbfree = 0x0, cs_nifree = 0x0, cs_nffree = 0x0}, fs_fmod = 0x0, fs_clean = 0x1,
fs_ronly = 0x0, fs_old_flags = 0x80, fs_fsmnt = "/mnt", '\0' <repeats 463 times>, fs_volname = '\0' <repeats 31 times>, fs_swuid = 0x0,
fs_pad = 0x0, fs_cgrotor = 0x0, fs_ocsp = {0x0 <repeats 28 times>},
fs_contigdirs = 0xc60ad410 "ÞÀÞÞÀÞÞÀÞÞÀÞÞÀÞÞÀÞÞÀÞÞÀÞÞÀÞÞÀÞÞÀÞÞÀÞÞÀÞÞÀÞÞÀÞÞÀÞÞÀÞÞÀÞÞÀÞÞÀÞÞÀÞÞÀÞÞÀÞÞÀÞÞÀÞÞÀÞÞÀÞÞÀÞÞÀÞÞÀÞÞÀÞÞÀÞÞÀÞÞÀÞÞÀÞÞÀÞÞÀÞÞÀÞÞÀÞÞÀÞÞÀÞÞÀÞÞÀÞÞÀÞÞÀÞÞÀÞÞÀÞÞÀÞÞÀÞÞÀÞ"..., fs_csp = 0xc54ce800,
fs_maxcluster = 0xc60ad400, fs_active = 0x0, fs_old_cpc = 0x0, fs_maxbsize = 0x2000, fs_sparecon64 = {0x0 <repeats 17 times>},
fs_sblockloc = 0x10000, fs_cstotal = {cs_ndir = 0x2, cs_nbfree = 0x61, cs_nifree = 0xfa, cs_nffree = 0x13, cs_numclusters = 0x0,
cs_spare = {0x0, 0x0, 0x0}}, fs_time = 0x43790ea9, fs_size = 0x3e8, fs_dsize = 0x31f, fs_csaddr = 0x68, fs_pendingblocks = 0x0,
fs_pendinginodes = 0x0, fs_snapinum = {0x0 <repeats 20 times>}, fs_avgfilesize = 0x4000, fs_avgfpdir = 0x40, fs_save_cgsize = 0x0,
fs_sparecon32 = {0x0 <repeats 26 times>}, fs_flags = 0x2, fs_contigsumsize = 0x10, fs_maxsymlinklen = 0x78, fs_old_inodefmt = 0x0,
fs_maxfilesize = 0x80200817fff, fs_qbmask = 0x1fff, fs_qfmask = 0x3ff, fs_state = 0x0, fs_old_postblformat = 0x0, fs_old_nrpos = 0x0,
fs_spare5 = {0x0, 0x0}, fs_magic = 0x19540119}