From dada@sbox.tugraz.at  Fri Dec  7 02:07:30 2001
Return-Path: <dada@sbox.tugraz.at>
Received: from mailrelay.tugraz.at (mailrelay.tu-graz.ac.at [129.27.3.7])
	by hub.freebsd.org (Postfix) with ESMTP id C8A0037B405
	for <FreeBSD-gnats-submit@freebsd.org>; Fri,  7 Dec 2001 02:07:24 -0800 (PST)
Received: from pluto.tu-graz.ac.at (pluto.tu-graz.ac.at [129.27.41.4])
	by mailrelay.tugraz.at (8.12.1/8.12.1) with ESMTP id fB7A7Geh017379;
	Fri, 7 Dec 2001 11:07:16 +0100 (MET)
Message-Id: <Pine.LNX.4.33.0112071103380.785-100000@pluto.tu-graz.ac.at>
Date: Fri, 7 Dec 2001 11:07:14 +0100 (CET)
From: Martin Kammerhofer <dada@sbox.tugraz.at>
To: <FreeBSD-gnats-submit@freebsd.org>
Cc: <mkamm@gmx.net>
Subject: ufsdirhash_findfree: bad stats

>Number:         32574
>Category:       kern
>Synopsis:       ufsdirhash_findfree: bad stats
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    iedowse
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Fri Dec 07 02:10:00 PST 2001
>Closed-Date:    Tue Dec 11 11:33:05 PST 2001
>Last-Modified:  Tue Dec 11 11:35:12 PST 2001
>Originator:     Martin Kammerhofer
>Release:        FreeBSD 4.4-STABLE i386
>Organization:
Graz Universities
>Environment:
System: FreeBSD homebox.kammerhofer.org 4.4-STABLE FreeBSD 4.4-STABLE #0: Sun Nov 11 20:38:25 CET 2001 toor@homebox.kammerhofer.org:/usr.extra/obj/usr/src/sys/LEND4 i386

Here's a copy of my /var/run/dmesg.boot:
Copyright (c) 1992-2001 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
	The Regents of the University of California. All rights reserved.
FreeBSD 4.4-STABLE #0: Sun Nov 11 20:38:25 CET 2001
    toor@homebox.kammerhofer.org:/usr.extra/obj/usr/src/sys/LEND4
Timecounter "i8254"  frequency 1193182 Hz
CPU: Pentium III/Pentium III Xeon/Celeron (801.82-MHz 686-class CPU)
  Origin = "GenuineIntel"  Id = 0x686  Stepping = 6
  Features=0x383f9ff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR,SSE>
real memory  = 536858624 (524276K bytes)
avail memory = 518320128 (506172K bytes)
Preloaded elf kernel "kernel" at 0xc03e2000.
VESA: v2.0, 8192k memory, flags:0x1, mode table:0xc0371ae2 (1000022)
VESA: Matrox Graphics Inc.
Pentium Pro MTRR support enabled
md0: Malloc disk
Using $PIR table, 7 entries at 0xc00f0d10
apm0: <APM BIOS> on motherboard
apm: found APM BIOS v1.2, connected at v1.2
npx0: <math processor> on motherboard
npx0: INT 16 interface
pcib0: <Intel 82443BX (440 BX) host to PCI bridge> on motherboard
pci0: <PCI bus> on pcib0
pcib1: <Intel 82443BX (440 BX) PCI-PCI (AGP) bridge> at device 1.0 on pci0
pci1: <PCI bus> on pcib1
pci1: <Matrox MGA G200 AGP graphics accelerator> at 0.0 irq 11
isab0: <Intel 82371AB PCI to ISA bridge> at device 4.0 on pci0
isa0: <ISA bus> on isab0
atapci0: <Intel PIIX4 ATA33 controller> port 0xd800-0xd80f at device 4.1 on pci0
ata0: at 0x1f0 irq 14 on atapci0
ata1: at 0x170 irq 15 on atapci0
uhci0: <Intel 82371AB/EB (PIIX4) USB controller> port 0xd400-0xd41f irq 5 at device 4.2 on pci0
usb0: <Intel 82371AB/EB (PIIX4) USB controller> on uhci0
usb0: USB revision 1.0
uhub0: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
ulpt0: Hewlett-Packard DeskJet 930C, rev 1.00/1.00, addr 2, iclass 7/1
chip1: <Intel 82371AB Power management controller> port 0xe800-0xe80f at device 4.3 on pci0
ahc0: <Adaptec aic7890/91 Ultra2 SCSI adapter> port 0xd000-0xd0ff mem 0xe1000000-0xe1000fff irq 5 at device 6.0 on pci0
aic7890/91: Ultra2 Wide Channel A, SCSI Id=7, 32/255 SCBs
orm0: <Option ROM> at iomem 0xc0000-0xc7fff on isa0
atkbdc0: <Keyboard controller (i8042)> at port 0x60,0x64 on isa0
atkbd0: <AT Keyboard> irq 1 on atkbdc0
psm0: <PS/2 Mouse> irq 12 on atkbdc0
psm0: model Generic PS/2 mouse, device ID 0
vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
sc0: <System console> on isa0
sc0: VGA <16 virtual consoles, flags=0x200>
fdc0: <NEC 72065B or clone> at port 0x3f0-0x3f5,0x3f7 irq 6 drq 2 on isa0
fdc0: FIFO enabled, 8 bytes threshold
fd0: <1440-KB 3.5" drive> on fdc0 drive 0
sio0 at port 0x3f8-0x3ff irq 4 flags 0x10 on isa0
sio0: type 16550A
sio1 at port 0x2f8-0x2ff irq 3 on isa0
sio1: type 16550A
pca0 at port 0x40 on isa0
joy0 at port 0x201 on isa0
ppc0: <Parallel port> at port 0x378-0x37f irq 7 on isa0
ppc0: SMC-like chipset (ECP/EPP/PS2/NIBBLE) in COMPATIBLE mode
ppc0: FIFO with 16/16/9 bytes threshold
plip0: <PLIP network interface> on ppbus0
lpt0: <Printer> on ppbus0
lpt0: Interrupt-driven port
ppi0: <Parallel I/O> on ppbus0
sbc0: <Creative ViBRA16X> at port 0x220-0x22f,0x300-0x301,0x388-0x38b irq 9 drq 0,1 on isa0
pcm0: <SB16 DSP 4.16 (ViBRA16X)> on sbc0
joy1: <Generic PnP Joystick> at port 0x200 on isa0
IPFW: MOD_LOAD
IP packet filtering initialized, divert enabled, rule-based forwarding enabled, default to deny, logging limited to 100 packets/entry by default
DUMMYNET initialized (011031)
ad0: 9671MB <IBM-DTTA-351010> [19650/16/63] at ata0-master UDMA33
ad2: 2067MB <IBM-DAQA-32160> [4200/16/63] at ata1-master WDMA2
afd0: 96MB <IOMEGA ZIP 100 ATAPI> [32/64/96] at ata0-slave using PIO0
Waiting 4 seconds for SCSI devices to settle
Mounting root from ufs:/dev/ad0s3a
cd1 at ahc0 bus 0 target 4 lun 0
cd1: <PLEXTOR CD-R   PX-W4220T 1.02> Removable CD-ROM SCSI-2 device 
cd1: 10.000MB/s transfers (10.000MHz, offset 8)
cd1: Attempt to query device size failed: NOT READY, Medium not present - tray closed
WARNING: / was not properly dismounted
cd0 at ahc0 bus 0 target 3 lun 0
cd0: <PLEXTOR CD-ROM PX-32TS 1.03> Removable CD-ROM SCSI-2 device 
cd0: 20.000MB/s transfers (20.000MHz, offset 15)
cd0: cd present [287149 x 2048 byte records]

And here's a copy of my kernel config file:
machine		i386
ident		LEND4
options		HZ=400
maxusers	128
options		PQ_CACHESIZE=512	# color for 512k/16k cache
options 	INCLUDE_CONFIG_FILE     # Include this file in kernel
cpu		I686_CPU		# aka Pentium Pro(tm)
options         CPU_ENABLE_SSE
options 	CPU_SUSP_HLT
options 	NO_F00F_HACK
options 	COMPAT_43
options 	USER_LDT		#allow user-level control of i386 ldt
options 	SYSVSHM		# include support for shared memory
options 	SYSVSEM		# include support for semaphores
options 	SYSVMSG		# include support for message queues
options 	DDB
options 	KTRACE			#kernel tracing
options 	INVARIANTS
options 	INVARIANT_SUPPORT
options 	PERFMON
options 	UCONSOLE
options 	USERCONFIG		#boot -c editor
options 	VISUAL_USERCONFIG	#visual boot -c editor
options 	INET			#Internet communications protocols
pseudo-device	ether			#Generic Ethernet
pseudo-device	loop			#Network loopback device
pseudo-device	bpf			#Berkeley packet filter
pseudo-device	disc			#Discard device (ds0, ds1, etc)
pseudo-device	tun			#Tunnel driver (ppp(8), nos-tun(8))
options 	IPFIREWALL		#firewall
options 	IPFIREWALL_VERBOSE	#print information about
options 	IPFIREWALL_FORWARD	#enable transparent proxy support
options 	IPFIREWALL_VERBOSE_LIMIT=100	#limit verbosity
options 	IPDIVERT		#divert sockets
options 	IPSTEALTH		#support for stealth forwarding
options 	TCPDEBUG
options		RANDOM_IP_ID
options                ACCEPT_FILTER_DATA
options                ACCEPT_FILTER_HTTP
options 	ICMP_BANDLIM
options 	DUMMYNET
options 	FFS			#Fast filesystem
options 	MFS			#Memory File System
options 	NFS			#Network File System
options 	CD9660			#ISO 9660 filesystem
options 	FDESC			#File descriptor filesystem
options 	KERNFS			#Kernel filesystem
options 	MSDOSFS			#MS DOS File System
options 	PROCFS			#Process filesystem
options 	FFS_ROOT		#FFS usable as root device
options 	SOFTUPDATES
options		UFS_DIRHASH
options 	MD_ROOT
options 	MD_NSECT=40000
options 	NSWAPDEV=5
options 	QUOTA			#enable disk quotas
options 	SUIDDIR
options 	EXT2FS
options 	P1003_1B
options 	_KPOSIX_PRIORITY_SCHEDULING
options 	_KPOSIX_VERSION=199309L
device		scbus			#base SCSI code
device		da			#SCSI direct access devices (aka disks)
device		cd			#SCSI CD-ROMs
device		pass			#CAM passthrough driver
options 	SCSI_DELAY=4000	# Be pessimistic about Joe SCSI device
pseudo-device	pty		#Pseudo ttys
pseudo-device	speaker		#Play IBM BASIC-style noises out your speaker
pseudo-device	gzip		#Exec gzipped a.out's
pseudo-device	vn		#Vnode driver (turns a file into a device)
pseudo-device	md		#Memory/malloc disk
pseudo-device	snp	3	#Snoop device - to look at pty/vty/etc..
options 	LIBICONV
options 	MSGBUF_SIZE=40960
device		isa
device		atkbdc0	at isa? port IO_KBD
device		atkbd0	at atkbdc? irq 1
options 	ATKBD_DFLT_KEYMAP	# specify the built-in keymap
makeoptions	ATKBD_DFLT_KEYMAP="german.iso"
device		psm0	at atkbdc? irq 12
device		vga0	at isa?
options 	VGA_WIDTH90		# support 90 column modes
options 	VESA
pseudo-device	splash
device		sc0	at isa?
options 	MAXCONS=16		# number of virtual consoles
options 	SC_DFLT_FONT		# compile font in
makeoptions	SC_DFLT_FONT=iso
options 	SC_HISTORY_SIZE=2000	# number of history buffer lines
options 	SC_PIXEL_MODE		# add support for the raster text mode
options 	SC_NORM_ATTR="(FG_GREEN|BG_BLACK)"
options 	SC_NORM_REV_ATTR="(FG_YELLOW|BG_GREEN)"
options 	SC_KERNEL_CONS_ATTR="(FG_YELLOW|BG_BLACK)"
options 	SC_KERNEL_CONS_REV_ATTR="(FG_YELLOW|BG_BLUE)"
device		npx0	at nexus? port IO_NPX flags 0x0 irq 13
device		ata
device		atadisk		# ATA disk drives
device		atapicd		# ATAPI CDROM drives
device		atapifd		# ATAPI floppy drives
device		atapist		# ATAPI tape drives
options 	ATA_STATIC_ID
options 	IDE_DELAY=4000	# Be optimistic about Joe IDE device
device		fdc0	at isa? port IO_FD1 irq 6 drq 2
device		fd0	at fdc0 drive 0
device		fd1	at fdc0 drive 1
device		sio0	at isa? port IO_COM1 flags 0x10 irq 4
device		sio1	at isa? port IO_COM2            irq 3
device		pcm
device		sbc
device		pca0 at isa? port IO_TIMER1
device		apm0
device		joy0	at isa? port IO_GAME
device		pci
device		ahc		# AHA2940 and onboard AIC7xxx devices
device		ppc0	at isa? irq 7
device		ppbus
device		vpo
device		lpt
device		plip
device		ppi
device		uhci
device		ohci
device		usb
device		ugen
device		ukbd
device		ulpt
device		ums
device		uscanner
options 	ENABLE_VFS_IOOPT
options 	SHOW_BUSYBUFS	# List buffers that prevent root unmount

>Description:
PANIC during "make -j8 buildworld"

Transscript of panic message:
	panic: ufs_dirhash_findfree: bad stats

Stack trace (function names only):
	Debugger
	panic
	ufs_dirhash_findfree
	ufs_lookup
	ufs_vnoperate
	ufs_cache_lookup
	ufs_vnoperate
	lookup
	namei
	vn_open
	open
	syscall2
	Xint0x80_syscall
	
>How-To-Repeat:
	Not known.
>Fix:
	Removing "options UFS_DIRHASH" from
	the kernel configuration will help.

>Release-Note:
>Audit-Trail:
Responsible-Changed-From-To: freebsd-bugs->iedowse 
Responsible-Changed-By: sheldonh 
Responsible-Changed-When: Fri Dec 7 03:06:44 PST 2001 
Responsible-Changed-Why:  
Ian's the UFS_DIRHASH man. 

http://www.FreeBSD.org/cgi/query-pr.cgi?pr=32574 

From: Ian Dowse <iedowse@maths.tcd.ie>
To: Martin Kammerhofer <dada@sbox.tugraz.at>
Cc: FreeBSD-gnats-submit@freebsd.org, mkamm@gmx.net
Subject: Re: kern/32574: ufsdirhash_findfree: bad stats 
Date: Fri, 07 Dec 2001 11:09:56 +0000

 In message <Pine.LNX.4.33.0112071103380.785-100000@pluto.tu-graz.ac.at>, Martin
  Kammerhofer writes:
 
 >PANIC during "make -j8 buildworld"
 >
 >Transscript of panic message:
 >	panic: ufs_dirhash_findfree: bad stats
 >
 >Stack trace (function names only):
 >	Debugger
 >	panic
 >	ufs_dirhash_findfree
 >	ufs_lookup
 
 Thanks for the problem report - is this repeatable? If so, could
 you try to get a crash dump and a corresponding debug kernel? I'd
 be particularly interested in the values of the various variables
 used in the ufsdirhash_findfree() function (e.g *dh, dh->dh_blkfree[],
 dh->dh_firstfree[]).
 
 The panic is a dirhash-internal consistency check, so either there
 is a dirhash bug, or something has corrupted memory.
 
 >options 	ENABLE_VFS_IOOPT
 
 Have you enabled "vfs.ioopt"? It was mentioned on a mailing list
 recently that there are problems with this optimisation. It's
 unlikely to be the cause of the panic, but worth knowing.
 
 Ian

From: Ian Dowse <iedowse@maths.tcd.ie>
To: Martin Kammerhofer <Martin.Kammerhofer@kfunigraz.ac.at>
Cc: Martin Kammerhofer <dada@sbox.tugraz.at>,
	FreeBSD-gnats-submit@freebsd.org
Subject: Re: kern/32574: ufsdirhash_findfree: bad stats 
Date: Tue, 11 Dec 2001 18:47:57 +0000

 In message <Pine.BSF.4.21.0112111929540.57263-100000@homebox.kammerhofer.org>, 
 Martin Kammerhofer writes:
 >Em - I'm really sorry, but further investigation has revealed, that this
 >panic was caused by a memory module. It coincidently went dodgy shortly
 >after I compiled a kernel with UFS_DIRHASH.
 >
 >Sorry again about the false alarm. Please close this PR.
 
 Phew! Thanks for the update. I'll close the PR, but if it happens
 again or you have any reason to suspect that there is a real dirahsh
 bug, then please let me know.
 
 Thanks,
 
 Ian
State-Changed-From-To: open->closed 
State-Changed-By: iedowse 
State-Changed-When: Tue Dec 11 11:33:05 PST 2001 
State-Changed-Why:  

Closed at the submitter's request; the problem was apparently caused 
by bad memory. 

http://www.FreeBSD.org/cgi/query-pr.cgi?pr=32574 
>Unformatted:
