Re: Re: kern/58422: kernel crash when using the iscsi initiator

[6bone%6bone.informatik.uni-leipzig.de@localhost]

The following reply was made to PR kern/58422; it has been noted by GNATS.

From: 6bone%6bone.informatik.uni-leipzig.de@localhost
To: gnats-bugs%netbsd.org@localhost
Cc: kern-bug-people%netbsd.org@localhost, gnats-admin%netbsd.org@localhost, netbsd-bugs%netbsd.org@localhost
Subject: Re: Re: kern/58422: kernel crash when using the iscsi initiator
Date: Sat, 27 Jul 2024 18:52:12 +0200 (CEST)

 The next crash. The kernel contains the patch from the case.
 
 dmesg -M netbsd.49.core
 ....
 [ 95493.709585] S3C1: freeing UNUSED pdu
 [ 95499.766892] S3C1: freeing UNUSED pdu
 [ 95500.317270] S3C1: freeing UNUSED pdu
 [ 95506.245037] S3C1: freeing UNUSED pdu
 [ 95511.421411] S3C1: freeing UNUSED pdu
 [ 95512.393054] Received Reject PDU, reason = 4, data_len = 48
 [ 95512.393054] S3C1: *** Connection Error, status=25, logout=1, state=3
 [ 95512.393054] sd3(iscsi0:0:0:11): generic HBA error
 [ 95512.393054] sd3d: error writing fsbn 34674059682 of 34674059682-34674059745 (sd3 bn 34674059682; cn 16930693 tn 13 sn 2)
 [ 95519.402427] sd3d: error writing fsbn 35353610530 of 35353610530-35353610593 (sd3 bn 35353610530; cn 17262505 tn 9 sn 2)
 [ 95522.475421] S3C1: *** Connection Error, status=24, logout=-1, state=5
 [ 95524.408023] sd3d: error reading fsbn 33006352546 of 33006352546-33006352609 (sd3 bn 33006352546; cn 16116383 tn 5 sn 2)
 [ 95524.498026] S3C1: Resend ccb 0xffffc280676b72b8 (37) - updating CmdSN old 21405452, new 21405454
 [ 95524.498026] S3C1: Connection ReCreated successfully - status 0
 [ 95525.691696] panic: ufsdirhash_findfree: free mismatch
 [ 95525.691696] cpu2: Begin traceback...
 [ 95525.691696] vpanic() at netbsd:vpanic+0x183
 [ 95525.691696] panic() at netbsd:panic+0x3c
 [ 95525.691696] ufsdirhash_findfree() at netbsd:ufsdirhash_findfree+0x240
 [ 95525.691696] ufs_lookup() at netbsd:ufs_lookup+0x6ac
 [ 95525.701692] VOP_LOOKUP() at netbsd:VOP_LOOKUP+0x44
 [ 95525.701692] lookup_once() at netbsd:lookup_once+0x1a6
 [ 95525.701692] namei_tryemulroot() at netbsd:namei_tryemulroot+0xb00
 [ 95525.701692] namei() at netbsd:namei+0x29
 [ 95525.701692] vn_open() at netbsd:vn_open+0x133
 [ 95525.701692] do_open() at netbsd:do_open+0xc3
 [ 95525.711693] do_sys_openat() at netbsd:do_sys_openat+0x74
 [ 95525.711693] sys_open() at netbsd:sys_open+0x24
 [ 95525.711693] syscall() at netbsd:syscall+0x196
 [ 95525.711693] --- syscall (number 5) ---
 [ 95525.711693] netbsd:syscall+0x196:
 [ 95525.711693] cpu2: End traceback...
 
 [ 95525.711693] dumping to dev 4,1 (offset=22227071, size=12581616):
 [ 95525.711693] dump S3C1: *** Connection Error, status=24, logout=-1, 
 state=3
 
 
 Reading symbols from /netbsd...
 (gdb) target kvm netbsd.49.core
 0xffffffff80237015 in cpu_reboot (howto=howto@entry=260,
      bootstr=bootstr@entry=0x0) at 
 /usr/src/sys/arch/amd64/amd64/machdep.c:717
 717                     dumpsys();
 (gdb) bt
 #0  0xffffffff80237015 in cpu_reboot (howto=howto@entry=260, 
 bootstr=bootstr@entry=0x0) at /usr/src/sys/arch/amd64/amd64/machdep.c:717
 #1  0xffffffff80d9da24 in kern_reboot (howto=howto@entry=260, 
 bootstr=bootstr@entry=0x0) at /usr/src/sys/kern/kern_reboot.c:73
 #2  0xffffffff80de7d8d in vpanic (fmt=fmt@entry=0xffffffff814b5c80 
 "ufsdirhash_findfree: free mismatch", ap=ap@entry=0xffffc28c97682908) at 
 /usr/src/sys/kern/subr_prf.c:291
 #3  0xffffffff80de7e62 in panic (fmt=fmt@entry=0xffffffff814b5c80 
 "ufsdirhash_findfree: free mismatch") at /usr/src/sys/kern/subr_prf.c:208
 #4  0xffffffff80d16d61 in ufsdirhash_findfree 
 (ip=ip@entry=0xffffe5b4c53e07f8, slotneeded=60, 
 slotsize=slotsize@entry=0xffffc28c97682a54)
      at /usr/src/sys/ufs/ufs/ufs_dirhash.c:585
 #5  0xffffffff80d1ae04 in slot_findfree (dp=0xffffe5b4c53e07f8, 
 slot=0xffffc28c97682a4c) at /usr/src/sys/ufs/ufs/ufs_lookup.c:134
 #6  ufs_lookup (v=<optimized out>) at 
 /usr/src/sys/ufs/ufs/ufs_lookup.c:451
 #7  0xffffffff80e67c1c in VOP_LOOKUP (dvp=dvp@entry=0xffffe5b4c66b2040, 
 vpp=vpp@entry=0xffffc28c97682b38, cnp=cnp@entry=0xffffc28c97682d70) at 
 /usr/src/sys/kern/vnode_if.c:443
 #8  0xffffffff80e440f0 in lookup_once 
 (state=state@entry=0xffffc28c97682cc0, searchdir=<optimized out>, 
 newsearchdir_ret=newsearchdir_ret@entry=0xffffc28c97682c18,
      foundobj_ret=foundobj_ret@entry=0xffffc28c97682c20, 
 newsearchdir_locked_ret=newsearchdir_locked_ret@entry=0xffffc28c97682c17) 
 at /usr/src/sys/kern/vfs_lookup.c:1150
 #9  0xffffffff80e45277 in namei_oneroot (isnfsd=0, inhibitmagic=0, 
 neverfollow=0, state=<optimized out>) at 
 /usr/src/sys/kern/vfs_lookup.c:1545
 #10 namei_tryemulroot (state=state@entry=0xffffc28c97682cc0, 
 neverfollow=neverfollow@entry=0, inhibitmagic=inhibitmagic@entry=0, 
 isnfsd=isnfsd@entry=0)
      at /usr/src/sys/kern/vfs_lookup.c:1905
 #11 0xffffffff80e4724c in namei (ndp=ndp@entry=0xffffc28c97682d20) at 
 /usr/src/sys/kern/vfs_lookup.c:1941
 #12 0xffffffff80e5f40c in vn_open (at_dvp=at_dvp@entry=0x0, 
 pb=pb@entry=0xffffe5b6f4a7d340, nmode=nmode@entry=16, 
 fmode=fmode@entry=2563, cmode=384,
      ret_vp=ret_vp@entry=0xffffc28c97682ec8, 
 ret_domove=ret_domove@entry=0xffffc28c97682eb7, 
 ret_fd=ret_fd@entry=0xffffc28c97682eb8) at 
 /usr/src/sys/kern/vfs_vnops.c:219
 #13 0xffffffff80e520af in do_open (l=l@entry=0xffffe5b7ea77f5c0, dvp=0x0, 
 pb=0xffffe5b6f4a7d340, open_flags=open_flags@entry=2562, 
 open_mode=open_mode@entry=384,
      fd=fd@entry=0xffffc28c97682f7c) at 
 /usr/src/sys/kern/vfs_syscalls.c:1752
 #14 0xffffffff80e521cb in do_sys_openat (l=0xffffe5b7ea77f5c0, 
 fdat=fdat@entry=-100, path=<optimized out>, flags=2562, mode=384, 
 fd=fd@entry=0xffffc28c97682f7c)
      at /usr/src/sys/kern/vfs_syscalls.c:1835
 #15 0xffffffff80e52319 in sys_open (l=<optimized out>, uap=<optimized 
 out>, retval=0xffffc28c97682fb0) at /usr/src/sys/kern/vfs_syscalls.c:1856
 #16 0xffffffff8058b8e5 in sy_call (rval=0xffffc28c97682fb0, 
 uap=0xffffc28c97683000, l=0xffffe5b7ea77f5c0, sy=0xffffffff8187d1d8 
 <sysent+120>)
      at /usr/src/sys/sys/syscallvar.h:65
 #17 sy_invoke (code=5, rval=0xffffc28c97682fb0, uap=0xffffc28c97683000, 
 l=0xffffe5b7ea77f5c0, sy=0xffffffff8187d1d8 <sysent+120>) at 
 /usr/src/sys/sys/syscallvar.h:94
 #18 syscall (frame=0xffffc28c97683000) at 
 /usr/src/sys/arch/x86/x86/syscall.c:138
 #19 0xffffffff8020e6bd in handle_syscall ()
 #20 0x00007f7fffdb42e0 in ?? ()
 #21 0x0000000000000a02 in ?? ()
 #22 0x0000000000000180 in ?? ()
 #23 0x000072709817957a in ?? ()
 #24 0x0000000000000000 in ?? ()
 
 
 
 Regards
 Uwe