search for: xint0x80_syscall

...8c0c,d8e28c0c) at sysctl_rtsock+0x111 sysctl_root(0,d8e28ca8,6,d8e28c0c,c150e390) at sysctl_root+0x12a userland_sysctl(c150e390,d8e28ca8,6,0,bfbffa9c) at userland_sysctl+0x14d __sysctl(c150e390,d8e28d10,c050a6b5,3fb,6) at __sysctl+0xb0 syscall(bfbf002f,bfbf002f,bfbf002f,0,bfbffa9c) at syscall+0x24e Xint0x80_syscall() at Xint0x80_syscall+0x1d --- syscall (202, FreeBSD ELF32, __sysctl), eip = 0x280be943, esp = 0xbfbff9ec, ebp = 0xbfbffa18 --- db> panic panic: from debugger Debugger("panic") Fatal trap 3: breakpoint instruction fault while in kernel mode instruction pointer = 0x8:0xc047eb34 st...

...0002,e75e1220) at vn_lock+0x9c lookup(e766bed0,0,e766bed0,e766bed0,e75e1220) at lookup+0x81 namei(e766bed0,0,cb9c0a40,e766bed0,e766be18) at namei+0x19d vn_open(e766bed0,1,1a4,3,e75e1220) at vn_open+0x1ed open(e75e1220,e766bf80,0,80e3500,0) at open+0xc4 syscall2(2f,2f,2f,0,80e3500) at syscall2+0x20d Xint0x80_syscall() at Xint0x80_syscall+0x2b It might be here? Cron is waiting on memory: db> t 399 mi_switch(c0350140,c0363440,c0350140,c02d535c,ffffffff) at mi_switch+0x1c8 tsleep(c0350140,2,c031a400,0,c368f228) at tsleep+0x1d1 malloc(100,c0350140,0,c368f228,c35f4300) at malloc+0x1cd ffs_vget(c35dca00,ec17,e...

...f_esi = 672253248, tf_ebp = 2143284976, tf_isp = -1029087276, tf_ebx = 672178060, tf_edx = 672253248, tf_ecx = 16, tf_eax = 5, tf_trapno = 12, tf_err = 2, tf_eip = 672086720, tf_cs = 31, tf_eflags = 535, tf_esp = 2143284932, tf_ss = 47}) at /usr/src/sys/i386/i386/trap.c:1175 #12 0x802299ab in Xint0x80_syscall () #13 0x2807ac6c in ?? () #14 0x2807abf0 in ?? () #15 0x804acbd in ?? () #16 0x8049e1e in ?? () and another one: (kgdb) proc 66479 (kgdb) bt #0 mi_switch () at machine/globals.h:119 #1 0x8014a1f9 in tsleep (ident=0x8a3d2200, priority=8, wmesg=0x80263d4a "inode", timo=0) at /usr/src/s...

...16807b in boot () #2 0xc01684a0 in poweroff_wait () #3 0xc02553f0 in vm_map_entry_create () #4 0xc02555e9 in vm_map_insert () #5 0xc0255810 in vm_map_find () #6 0xc0178cfb in pipespace () #7 0xc0178dd2 in pipe_create () #8 0xc0178b54 in pipe () #9 0xc02c21f5 in syscall2 () #10 0xc02b3875 in Xint0x80_syscall () #11 0x28081e1f in ?? () #12 0x2808135b in ?? () #13 0x28080deb in ?? () #14 0x28080b6e in ?? () #15 0x28086b39 in ?? () #16 0x28086964 in ?? () #17 0x280863fc in ?? () #18 0x2808458a in ?? () #19 0x28081e1f in ?? () #20 0x2808135b in ?? () #21 0x28080deb in ?? () #22 0x28080b6e in ?? () #23 0x28...

...lookup(3911969704,3231462256,198,191,3343637548,...) at lookup+1422 namei(3911969704,3911969608,96,0,3349699312,...) at namei+843 kern_stat(3349699312,672272928,0,3911969816,93,...) at kern_stat+61 stat(3349699312,3911970044,8,3231440732,3231973120,...) at stat+47 syscall(3911970104) at syscall+691 Xint0x80_syscall() at Xint0x80_syscall+32 --- syscall (188, FreeBSD ELF32, stat), eip = 134726611, esp = 3217021740, ebp = 3217021864 --- db> -------------------------------------------------------------------- Mike Tancsa, tel +1 519 651 3400 Sentex Communications,...

...i = 672253248, tf_ebp = 2143284976, tf_isp = -1077747756, tf_ebx = 672178060, tf_edx = 672253248, tf_ecx = 16, tf_eax = 5, tf_trapno = 12, tf_err = 2, tf_eip = 672086720, tf_cs = 31, tf_eflags = 535, tf_esp = 2143284932, tf_ss = 47}) at /usr/src/sys/i386/i386/trap.c:1175 #12 0x802299ab in Xint0x80_syscall () #13 0x2807ac6c in ?? () #14 0x2807abf0 in ?? () #15 0x804acbd in ?? () #16 0x8049e1e in ?? () (kgdb) print *(struct lock *)0x8a4ef600 $1 = {lk_interlock = {lock_data = 0}, lk_flags = 2098240, lk_sharecount = 0, lk_waitcount = 958, lk_exclusivecount = 1, lk_prio = 8, lk_wmesg = 0x80263d4a "...

...06937,c4c2dc00,c4d9a360,c5cca300,c074a4c0) at ifhwioctl+0x9ac ifioctl(c5a4f858,c0206937,c4d9a360,c5cca300,0) at ifioctl+0xc3 soo_ioctl(c59c0750,c0206937,c4d9a360,c5a41a80,c5cca300) at soo_ioctl+0x2db ioctl(c5cca300,ef577d04,3,2,282) at ioctl+0x370 syscall(3b,3b,3b,bfbf90a0,80dc400) at syscall+0x22f Xint0x80_syscall() at Xint0x80_syscall+0x1f --- syscall (54, FreeBSD ELF32, ioctl), eip = 0x482d468f, esp = 0xbfbf906c, ebp = 0xbfbf90e8 --- Ulrich Spoerlein -- PGP Key ID: 20FEE9DD Encrypted mail welcome! Fingerprint: AEC9 AF5E 01AC 4EE1 8F70 6CBD E76E 2227 20FE E9DD Which is worse: ignorance or apathy? Do...

...l=0, new=0x0, newlen=0, retval=0xe766ec10, flags=0) at /usr/src/sys/kern/kern_sysctl.c:1506 #10 0xc05a0064 in __sysctl (td=0xc5374460, uap=0xe766ecfc) at /usr/src/sys/kern/kern_sysctl.c:1443 #11 0xc07f6a85 in syscall (frame=0xe766ed38) at /usr/src/sys/i386/i386/trap.c:1090 #12 0xc07db850 in Xint0x80_syscall () at /usr/src/sys/i386/i386/exception.s:255 #13 0x00000033 in ?? () Previous frame inner to this frame (corrupt stack?) (kgdb) -------------------------------------------------------------------- Mike Tancsa, tel +1 519 651 3400 Sentex Communications,...

...954328, tf_ebp = -1077941708, tf_isp = -657264684, tf_ebx = 686871084, tf_edx = 0, tf_ecx = 15, tf_eax = 5, tf_trapno = 12, tf_err = 2, tf_eip = 686596376, tf_cs = 31, tf_eflags = 663, tf_esp = -1077941752, tf_ss = 47}) at /usr/src/sys/i386/i386/trap.c:1175 #13 0xc03b30a5 in Xint0x80_syscall () #14 0x28ee321f in ?? () #15 0x2920f154 in ?? () #16 0x292036ea in ?? () #17 0x291fbd7d in ?? () #18 0x291fbc8f in ?? () #19 0x29200061 in ?? () #20 0x281b434b in ?? () #21 0x281b05e4 in ?? () #22 0x291f9d97 in ?? () #23 0x804ccba in ?? () #24 0x804d9c0 in ?? () #25 0x804de1c in ?? () #26 0x804ec...

...13 0xc01a2194 in sync () #14 0xc0171c2a in boot () #15 0xc01722b4 in poweroff_wait () #16 0xc023dd1e in trap_fatal () #17 0xc023d6fb in trap () #18 0xc023ceeb in sw1a () #19 0xc0174ff1 in tsleep () #20 0xc016aa78 in wait1 () #21 0xc016a704 in wait4 () #22 0xc023dfcd in syscall2 () #23 0xc022f3f5 in Xint0x80_syscall () cannot read proc at 0 ...the debug-kernel: # gdb -k kernel.debug vmcore.0 GNU gdb 4.18 (FreeBSD) Copyright 1998 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain con...

I get the above panic after nfs clients attach to this nfs server and being read/write ops on it after an unclean shutdown. I've fsck'ed the fs, and it marks it as clean, but I get this every time. It's an NFS share of a GEOM stripe (about 2TB). mode = 0100600, inum = 58456203, fs = /mnt panic: ffs_valloc: dup alloc I do have dumps from two crashes so far. This is

...ad+0xde ffs_read(e78e7b08) at ffs_read+0x25f VOP_READ_APV(c0a65560,e78e7b08) at VOP_READ_APV+0x38 nfsrv_read(c69b3800,c520d900,c532f900,e78e7c98,0,...) at nfsrv_read+0xb16 nfssvc_nfsd(c532f900) at nfssvc_nfsd+0x435 nfssvc(c532f900,e78e7d04) at nfssvc+0x1c0 syscall(3b,3b,3b,1,0,...) at syscall+0x2bf Xint0x80_syscall() at Xint0x80_syscall+0x1f --- syscall (155, FreeBSD ELF32, nfssvc), eip = 0x280bdf17, esp = 0xbfbfeb0c, ebp = 0xbfbfeb28 --- Uptime: 12h24m16s Dumping 1023 MB (2 chunks) chunk 0: 1MB (159 pages) ... ok chunk 1: 1023MB (261840 pages) 1007 991 975 959 943 927 911 895 879 863 847 831 815 799 783...

...nvalbuf+0x395 nfs_vinvalbuf(e95262c0,1,c8c3e280,e95bc1a0,1) at nfs_vinvalbuf+0x108 nfs_open(e9bcadfc,0,c911b440,e9bcaf80,e95262c0) at nfs_open+0xf5 vn_open(e9bcaec8,1,0,e95bc1a0,3) at vn_open+0x3d7 open(e95bc1a0,e9bcaf80,38229dac,0,0) at open+0xb8 syscall2(81c002f,2f,bfbf002f,0,0) at syscall2+0x1f5 Xint0x80_syscall() at Xint0x80_syscall+0x25 db> ps pid proc addr uid ppid pgrp flag stat wmesg wchan cmd 37692 e95bc1a0 e9bc8000 8 727 727 4004004 2 nnrpd 37657 e9bd2e00 e9bd3000 8 37656 37407 004005 2 expireover 37656 e95bf0c0 e9abf000 8 37410 3...

...7943264, tf_isp = -510738476, tf_ebx = 1187677356, tf_edx = 1187677156, tf_ecx = 1187677152, tf_eax = 0, tf_trapno = 7, tf_err = 2, tf_eip = 1187619448, tf_cs = 31, tf_eflags = 642, tf_esp = -1077943324, tf_ss = 47}) at /usr/src/sys/i386/i386/trap.c:174 #10 0xc0268815 in Xint0x80_syscall () #11 0x46c99cf9 in ?? () ... (kgdb) up 6 #6 0xc015c0dd in exit1 (p=0xe18f0c60, rv=41) at /usr/src/sys/kern/kern_exit.c:190 190 if(p->p_leader->p_peers) { (kgdb) p *p $1 = {p_procq = {tqe_next = 0x0, tqe_prev = 0xc0318c88}, p_list = { le_next = 0xe18f0ac0, le_prev = 0xc...

...i = 3584, tf_ebp = -1228979904, tf_isp = -131891244, tf_ebx = 672444300, tf_edx = 141521408, tf_ecx = 1, tf_eax = 196, tf_trapno = 683727476, tf_err = 2, tf_eip = 672125312, tf_cs = 31, tf_eflags = 514, tf_esp = -1228980332, tf_ss = 47}) at /usr/src/sys/i386/i386/trap.c:1175 #27 0xb722876b in Xint0x80_syscall () (kgdb) up 3 #3 0xb71fccd7 in kmem_malloc (map=0xb729d100, size=16384, flags=2) at /usr/src/sys/vm/vm_kern.c:329 329 panic("kmem_malloc(%ld): kmem_map too small: %ld total allocated", (kgdb) list 324 mb_map_full = TRUE; 325...

...= -1077938292, tf_ebp = -1077938272, tf_isp = -682586156, tf_ebx = 134953192, tf_edx = 1537, tf_ecx = 0, tf_eax = 5, tf_trapno = 12, tf_err = 2, tf_eip = 134734140, tf_cs = 31, tf_eflags = 659, tf_esp = -1077938460, tf_ss = 47}) at ../../i386/i386/trap.c:1175 #20 0xc02b0615 in Xint0x80_syscall () #21 0x8052da3 in ?? () #22 0x8052f87 in ?? () #23 0x80535a3 in ?? () #24 0x8053c34 in ?? () ---Type <return> to continue, or q <return> to quit--- #25 0x8052e16 in ?? () #26 0x8052f87 in ?? () #27 0x80534c6 in ?? () #28 0x80534c6 in ?? () #29 0x805c9e1 in ?? () #30 0x805c59e in ?? ()...

...= -1077942016, tf_esi = 1, tf_ebp = -1077942056, tf_isp = -326763164, tf_ebx = -1077941876, tf_edx = 0, tf_ecx = 0, tf_eax = 3, tf_trapno = 0, tf_err = 2, tf_eip = 673128727, tf_cs = 51, tf_eflags = 582, tf_esp = -1077942084, tf_ss = 59}) at /usr/src/sys/i386/i386/trap.c:984 #14 0xc06ffaff in Xint0x80_syscall () at /usr/src/sys/i386/i386/exception.s:200 #15 0x00000033 in ?? () Previous frame inner to this frame (corrupt stack?) 165 __asm __volatile("movl %%fs:0,%0" : "=r" (td)); (kgdb) quit

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-12:08.linux Security Advisory The FreeBSD Project Topic: Linux compatibility layer input validation error Category: core Module: kernel

..._es = 47, tf_ds = 47, tf_edi = 134669512, tf_esi = 134751552, tf_ebp = -1077937216, tf_isp = -397705260, tf_ebx = 1, tf_edx = 134701424, tf_ecx = 0, tf_eax = 22, tf_trapno = 12, tf_err = 2, tf_eip = 134523456, tf_cs = 31, at /usr/src/sys/i386/i386/trap.c:1175 #21 0xc038a9d5 in Xint0x80_syscall () #22 0x804849b in ?? () #23 0x804813e in ?? () (kgdb) list 1577 register caddr_t cp; 1578 register int32_t t1, t2; 1579 caddr_t bpos, dpos, cp2; 1580 int error = 0, wccflag = NFSV3_WCCRATTR; 1581 struct mbuf *mreq, *mrep, *md, *mb, *mb2; 158...

...8,...) at nfs_doio+0x20f nfs_bioread(cd02c220,eba6acb0,0,cc0ab880) at nfs_bioread+0xa64 nfs_readdir(eba6ac90) at nfs_readdir+0xe6 VOP_READDIR_APV(c09ebbc0,eba6ac90) at VOP_READDIR_APV+0x38 getdirentries(cc08b180,eba6ad04) at getdirentries+0x146 syscall(3b,3b,3b,9085f00,9085f00,...) at syscall+0x22f Xint0x80_syscall() at Xint0x80_syscall+0x1f --- syscall (196, FreeBSD ELF32, getdirentries), eip = 0xb825a79b, esp = 0xbfbfa1fc, ebp = 0xbfbfa228 --- Royce -- Royce D. Williams - http://royce.ws/ I don't like that man. I must get to know him better. - A. Lincoln