From hsu@mail.clinet.fi  Wed Oct  1 09:18:52 1997
Received: from hauki.clinet.fi (hauki.clinet.fi [194.100.0.1])
          by hub.freebsd.org (8.8.7/8.8.7) with ESMTP id JAA22675
          for <FreeBSD-gnats-submit@freebsd.org>; Wed, 1 Oct 1997 09:17:37 -0700 (PDT)
Received: from katiska.clinet.fi (root@katiska.clinet.fi [194.100.0.4])
	by hauki.clinet.fi (8.8.6/8.8.6) with ESMTP id SAA10705
	for <FreeBSD-gnats-submit@freebsd.org>; Wed, 1 Oct 1997 18:14:19 +0200 (EET)
Received: (root@localhost) by katiska.clinet.fi (8.8.7/8.6.4) id TAA21605; Wed, 1 Oct 1997 19:14:19 +0300 (EEST)
Message-Id: <199710011614.TAA21605@katiska.clinet.fi>
Date: Wed, 1 Oct 1997 19:14:19 +0300 (EEST)
From: Heikki Suonsivu <hsu@mail.clinet.fi>
Reply-To: hsu@mail.clinet.fi
To: FreeBSD-gnats-submit@freebsd.org
Subject: Two panics, now crash dumps, always in reassignbuf
X-Send-Pr-Version: 3.2

>Number:         4673
>Category:       kern
>Synopsis:       Two panics, now crash dumps, always in reassignbuf
>Confidential:   no
>Severity:       critical
>Priority:       high
>Responsible:    freebsd-bugs
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Wed Oct  1 09:20:01 PDT 1997
>Closed-Date:    Tue Jun 6 02:50:41 PDT 2000
>Last-Modified:  Tue Jun 06 02:53:07 PDT 2000
>Originator:     Heikki Suonsivu
>Release:        FreeBSD 2.2-STABLE i386
>Organization:
Clinet, Espoo, Finland
>Environment:

Two user machines, pentiums, mostly nfs disks, local boot disk.

>Description:

Repeating panics in reassignbuf:

hsu#katiska.clinet.fi Wed 120: gdb -k kernel.12 vmcore.12
GDB is free software and you are welcome to distribute copies of it
 under certain conditions; type "show copying" to see the conditions.
There is absolutely no warranty for GDB; type "show warranty" for details.
GDB 4.16 (i386-unknown-freebsd), 
Copyright 1996 Free Software Foundation, Inc...
IdlePTD 278000
current pcb at 2196dc
panic: page fault
#0  boot (howto=260) at ../../kern/kern_shutdown.c:266
266                                     dumppcb.pcb_cr3 = rcr3();
(kgdb) bt
#0  boot (howto=260) at ../../kern/kern_shutdown.c:266
#1  0xf01128f2 in panic (fmt=0xf01d322f "page fault")
    at ../../kern/kern_shutdown.c:390
#2  0xf01d3d96 in trap_fatal (frame=0xefbffa58) at ../../i386/i386/trap.c:742
#3  0xf01d3884 in trap_pfault (frame=0xefbffa58, usermode=0)
    at ../../i386/i386/trap.c:653
#4  0xf01d355f in trap (frame={tf_es = 16, tf_ds = 16, tf_edi = -1073739712, 
      tf_esi = -215228544, tf_ebp = -272631132, tf_isp = -272631168, 
      tf_ebx = -184626164, tf_edx = 0, tf_ecx = -1073739712, 
      tf_eax = -184350504, tf_trapno = 12, tf_err = 2, tf_eip = -267182654, 
      tf_cs = 8, tf_eflags = 66182, tf_esp = -184626164, tf_ss = -184638924})
    at ../../i386/i386/trap.c:311
#5  0xf0131dc2 in reassignbuf (bp=0xf4fed40c, newvp=0xf32bdf80)
    at ../../kern/vfs_subr.c:657
#6  0xf01301a4 in cluster_wbuild (vp=0xf32bdf80, size=8192, start_lbn=361, 
    len=8) at ../../kern/vfs_cluster.c:690
#7  0xf012d249 in vfs_bio_awrite (bp=0xf4fed40c) at ../../kern/vfs_bio.c:833
#8  0xf012d4d0 in getnewbuf (slpflag=0, slptimeo=0, size=8192, maxsize=8192)
    at ../../kern/vfs_bio.c:924
#9  0xf012da05 in getblk (vp=0xf3048e80, blkno=262208, size=8192, slpflag=0, 
    slptimeo=0) at ../../kern/vfs_bio.c:1197
#10 0xf012c55d in bread (vp=0xf3048e80, blkno=262208, size=8192, cred=0x0, 
    bpp=0xefbffbc4) at ../../kern/vfs_bio.c:228
#11 0xf01b1d5f in ffs_update (ap=0xefbffbf0) at ../../ufs/ffs/ffs_inode.c:137
#12 0xf01b53c0 in ffs_fsync (ap=0xefbffc34) at vnode_if.h:1031
#13 0xf01b4020 in ffs_sync (mp=0xf301dc00, waitfor=2, cred=0xf301c400, 
    p=0xf025a778) at vnode_if.h:407
#14 0xf013354b in sync (p=0xf025a778, uap=0x0, retval=0x0)
    at ../../kern/vfs_syscalls.c:357
#15 0xf01124fd in boot (howto=256) at ../../kern/kern_shutdown.c:199
#16 0xf01128f2 in panic (fmt=0xf01d322f "page fault")
    at ../../kern/kern_shutdown.c:390
#17 0xf01d3d96 in trap_fatal (frame=0xefbffd40) at ../../i386/i386/trap.c:742
#18 0xf01d3884 in trap_pfault (frame=0xefbffd40, usermode=0)
    at ../../i386/i386/trap.c:653
#19 0xf01d355f in trap (frame={tf_es = 16, tf_ds = 16, tf_edi = -1073739712, 
      tf_esi = -215228544, tf_ebp = -272630388, tf_isp = -272630424, 
      tf_ebx = -184637384, tf_edx = 0, tf_ecx = 8192, tf_eax = -184626164, 
      tf_trapno = 12, tf_err = 2, tf_eip = -267182654, tf_cs = 8, 
      tf_eflags = 66182, tf_esp = 2916352, tf_ss = 0})
    at ../../i386/i386/trap.c:311
#20 0xf0131dc2 in reassignbuf (bp=0xf4fea838, newvp=0xf32bdf80)
    at ../../kern/vfs_subr.c:657
#21 0xf016573f in nfs_doio (bp=0xf4fea838, cr=0xf3142c00, p=0x0)
    at ../../nfs/nfs_bio.c:1101
#22 0xf018494b in nfssvc_iod (p=0xf30c0a00) at ../../nfs/nfs_syscalls.c:811
#23 0xf018361a in nfssvc (p=0xf30c0a00, uap=0xefbfff94, retval=0xefbfff84)
    at ../../nfs/nfs_syscalls.c:209
#24 0xf01d402f in syscall (frame={tf_es = 39, tf_ds = 39, tf_edi = -272638336, 
      tf_esi = 0, tf_ebp = -272638384, tf_isp = -272629788, tf_ebx = 1, 
      tf_edx = 1, tf_ecx = 1, tf_eax = 155, tf_trapno = 12, tf_err = 7, 
      tf_eip = 9077, tf_cs = 31, tf_eflags = 582, tf_esp = -272638408, 
      tf_ss = 39}) at ../../i386/i386/trap.c:890
#25 0x2375 in ?? ()
#26 0x107f in ?? ()
(kgdb) frame 16
#16 0xf01128f2 in panic (fmt=0xf01d322f "page fault")
    at ../../kern/kern_shutdown.c:390
390             boot(bootopt);
(kgdb) bt
#0  boot (howto=260) at ../../kern/kern_shutdown.c:266
#1  0xf01128f2 in panic (fmt=0xf01d322f "page fault")
    at ../../kern/kern_shutdown.c:390
#2  0xf01d3d96 in trap_fatal (frame=0xefbffa58) at ../../i386/i386/trap.c:742
#3  0xf01d3884 in trap_pfault (frame=0xefbffa58, usermode=0)
    at ../../i386/i386/trap.c:653
#4  0xf01d355f in trap (frame={tf_es = 16, tf_ds = 16, tf_edi = -1073739712, 
      tf_esi = -215228544, tf_ebp = -272631132, tf_isp = -272631168, 
      tf_ebx = -184626164, tf_edx = 0, tf_ecx = -1073739712, 
      tf_eax = -184350504, tf_trapno = 12, tf_err = 2, tf_eip = -267182654, 
      tf_cs = 8, tf_eflags = 66182, tf_esp = -184626164, tf_ss = -184638924})
    at ../../i386/i386/trap.c:311
#5  0xf0131dc2 in reassignbuf (bp=0xf4fed40c, newvp=0xf32bdf80)
    at ../../kern/vfs_subr.c:657
#6  0xf01301a4 in cluster_wbuild (vp=0xf32bdf80, size=8192, start_lbn=361, 
    len=8) at ../../kern/vfs_cluster.c:690
#7  0xf012d249 in vfs_bio_awrite (bp=0xf4fed40c) at ../../kern/vfs_bio.c:833
#8  0xf012d4d0 in getnewbuf (slpflag=0, slptimeo=0, size=8192, maxsize=8192)
    at ../../kern/vfs_bio.c:924
#9  0xf012da05 in getblk (vp=0xf3048e80, blkno=262208, size=8192, slpflag=0, 
    slptimeo=0) at ../../kern/vfs_bio.c:1197
#10 0xf012c55d in bread (vp=0xf3048e80, blkno=262208, size=8192, cred=0x0, 
    bpp=0xefbffbc4) at ../../kern/vfs_bio.c:228
#11 0xf01b1d5f in ffs_update (ap=0xefbffbf0) at ../../ufs/ffs/ffs_inode.c:137
#12 0xf01b53c0 in ffs_fsync (ap=0xefbffc34) at vnode_if.h:1031
#13 0xf01b4020 in ffs_sync (mp=0xf301dc00, waitfor=2, cred=0xf301c400, 
    p=0xf025a778) at vnode_if.h:407
#14 0xf013354b in sync (p=0xf025a778, uap=0x0, retval=0x0)
    at ../../kern/vfs_syscalls.c:357
#15 0xf01124fd in boot (howto=256) at ../../kern/kern_shutdown.c:199
#16 0xf01128f2 in panic (fmt=0xf01d322f "page fault")
    at ../../kern/kern_shutdown.c:390
#17 0xf01d3d96 in trap_fatal (frame=0xefbffd40) at ../../i386/i386/trap.c:742
#18 0xf01d3884 in trap_pfault (frame=0xefbffd40, usermode=0)
    at ../../i386/i386/trap.c:653
#19 0xf01d355f in trap (frame={tf_es = 16, tf_ds = 16, tf_edi = -1073739712, 
      tf_esi = -215228544, tf_ebp = -272630388, tf_isp = -272630424, 
      tf_ebx = -184637384, tf_edx = 0, tf_ecx = 8192, tf_eax = -184626164, 
      tf_trapno = 12, tf_err = 2, tf_eip = -267182654, tf_cs = 8, 
      tf_eflags = 66182, tf_esp = 2916352, tf_ss = 0})
    at ../../i386/i386/trap.c:311
#20 0xf0131dc2 in reassignbuf (bp=0xf4fea838, newvp=0xf32bdf80)
    at ../../kern/vfs_subr.c:657
#21 0xf016573f in nfs_doio (bp=0xf4fea838, cr=0xf3142c00, p=0x0)
    at ../../nfs/nfs_bio.c:1101
#22 0xf018494b in nfssvc_iod (p=0xf30c0a00) at ../../nfs/nfs_syscalls.c:811
#23 0xf018361a in nfssvc (p=0xf30c0a00, uap=0xefbfff94, retval=0xefbfff84)
    at ../../nfs/nfs_syscalls.c:209
#24 0xf01d402f in syscall (frame={tf_es = 39, tf_ds = 39, tf_edi = -272638336, 
      tf_esi = 0, tf_ebp = -272638384, tf_isp = -272629788, tf_ebx = 1, 
      tf_edx = 1, tf_ecx = 1, tf_eax = 155, tf_trapno = 12, tf_err = 7, 
      tf_eip = 9077, tf_cs = 31, tf_eflags = 582, tf_esp = -272638408, 
      tf_ss = 39}) at ../../i386/i386/trap.c:890
#25 0x2375 in ?? ()
#26 0x107f in ?? ()
(kgdb) up
#17 0xf01d3d96 in trap_fatal (frame=0xefbffd40) at ../../i386/i386/trap.c:742
742                     panic(trap_msg[type]);
(kgdb) up
#18 0xf01d3884 in trap_pfault (frame=0xefbffd40, usermode=0)
    at ../../i386/i386/trap.c:653
653                     trap_fatal(frame);
(kgdb) up
#19 0xf01d355f in trap (frame={tf_es = 16, tf_ds = 16, tf_edi = -1073739712, 
      tf_esi = -215228544, tf_ebp = -272630388, tf_isp = -272630424, 
      tf_ebx = -184637384, tf_edx = 0, tf_ecx = 8192, tf_eax = -184626164, 
      tf_trapno = 12, tf_err = 2, tf_eip = -267182654, tf_cs = 8, 
      tf_eflags = 66182, tf_esp = 2916352, tf_ss = 0})
    at ../../i386/i386/trap.c:311
311                             (void) trap_pfault(&frame, FALSE);
(kgdb) up
#20 0xf0131dc2 in reassignbuf (bp=0xf4fea838, newvp=0xf32bdf80)
    at ../../kern/vfs_subr.c:657
657                     bufremvn(bp);
(kgdb) list
652             s = splbio();
653             /*
654              * Delete from old vnode list, if on one.
655              */
656             if (bp->b_vnbufs.le_next != NOLIST)
657                     bufremvn(bp);
658             /*
659              * If dirty, put on list of dirty buffers; otherwise insert onto list
660              * of clean buffers.
661              */
(kgdb) print bp
$1 = (struct buf *) 0xf4fea838
(kgdb) print *bp
$2 = {b_hash = {le_next = 0x0, le_prev = 0x0}, b_vnbufs = {
    le_next = 0xf4fed40c, le_prev = 0x0}, b_freelist = {tqe_next = 0x0, 
    tqe_prev = 0xf3069be8}, b_act = {tqe_next = 0x0, tqe_prev = 0x0}, 
  b_proc = 0x0, b_flags = 1610744022, b_qindex = 0, b_usecount = 0 '\000', 
  b_error = 0, b_bufsize = 8192, b_bcount = 8192, b_resid = 0, 
  b_dev = 4294967295, b_un = {
    b_addr = 0xf6797000 "h\024#\201\2341z\0013\036\216&J\027\021%QS[8\006U2f\r%JiM^\n\230\221\017/\005rc^\2032\e\013b\227\217Dy\aGBz9+/\226WQgqYd\214g\t\020md#9,\236h\027\0271zw\001\2360\027!\tg[JJ\037?FU8\214\036Dffް\027'\0301\n\202qB-\2061R\023\235\201\207U\201.i]H8\213C#x2"...}, 
  b_kvabase = 0xf6797000 "h\024#\201\2341z\0013\036\216&J\027\021%QS[8\006U2f\r%JiM^\n\230\221\017/\005rc^\2032\e\013b\227\217Dy\aGBz9+/\226WQgqYd\214g\t\020md#9,\236h\027\0271zw\001\2360\027!\tg[JJ\037?FU8\214\036Dffް\027'\0301\n\202qB-\2061R\023\235\201\207U\201.i]H8\213C#x2"..., b_kvasize = 8192, b_saveaddr = 0x0, 
  b_lblkno = 356, b_blkno = 5696, b_iodone = 0xf012fc34 <cluster_callback>, 
  b_iodone_chain = 0x0, b_vp = 0xf32bdf80, b_dirtyoff = 0, b_dirtyend = 8192, 
  b_rcred = 0x0, b_wcred = 0xf3142c00, b_validoff = 0, b_validend = 0, 
  b_pblkno = 0, b_savekva = 0x0, b_driver1 = 0x0, b_driver2 = 0x0, 
  b_spc = 0x0, b_cluster = {cluster_head = {tqh_first = 0xf5000f70, 
      tqh_last = 0xf5001000}, cluster_entry = {tqe_next = 0xf5000f70, 
      tqe_prev = 0xf5001000}}, b_pages = {0xf03f34dc, 0xf03f3510, 
    0x0 <repeats 14 times>}, b_npages = 2}
(kgdb) bt
#0  boot (howto=260) at ../../kern/kern_shutdown.c:266
#1  0xf01128f2 in panic (fmt=0xf01d322f "page fault")
    at ../../kern/kern_shutdown.c:390
#2  0xf01d3d96 in trap_fatal (frame=0xefbffa58) at ../../i386/i386/trap.c:742
#3  0xf01d3884 in trap_pfault (frame=0xefbffa58, usermode=0)
    at ../../i386/i386/trap.c:653
#4  0xf01d355f in trap (frame={tf_es = 16, tf_ds = 16, tf_edi = -1073739712, 
      tf_esi = -215228544, tf_ebp = -272631132, tf_isp = -272631168, 
      tf_ebx = -184626164, tf_edx = 0, tf_ecx = -1073739712, 
      tf_eax = -184350504, tf_trapno = 12, tf_err = 2, tf_eip = -267182654, 
      tf_cs = 8, tf_eflags = 66182, tf_esp = -184626164, tf_ss = -184638924})
    at ../../i386/i386/trap.c:311
#5  0xf0131dc2 in reassignbuf (bp=0xf4fed40c, newvp=0xf32bdf80)
    at ../../kern/vfs_subr.c:657
#6  0xf01301a4 in cluster_wbuild (vp=0xf32bdf80, size=8192, start_lbn=361, 
    len=8) at ../../kern/vfs_cluster.c:690
#7  0xf012d249 in vfs_bio_awrite (bp=0xf4fed40c) at ../../kern/vfs_bio.c:833
#8  0xf012d4d0 in getnewbuf (slpflag=0, slptimeo=0, size=8192, maxsize=8192)
    at ../../kern/vfs_bio.c:924
#9  0xf012da05 in getblk (vp=0xf3048e80, blkno=262208, size=8192, slpflag=0, 
    slptimeo=0) at ../../kern/vfs_bio.c:1197
#10 0xf012c55d in bread (vp=0xf3048e80, blkno=262208, size=8192, cred=0x0, 
    bpp=0xefbffbc4) at ../../kern/vfs_bio.c:228
#11 0xf01b1d5f in ffs_update (ap=0xefbffbf0) at ../../ufs/ffs/ffs_inode.c:137
#12 0xf01b53c0 in ffs_fsync (ap=0xefbffc34) at vnode_if.h:1031
#13 0xf01b4020 in ffs_sync (mp=0xf301dc00, waitfor=2, cred=0xf301c400, 
    p=0xf025a778) at vnode_if.h:407
#14 0xf013354b in sync (p=0xf025a778, uap=0x0, retval=0x0)
    at ../../kern/vfs_syscalls.c:357
#15 0xf01124fd in boot (howto=256) at ../../kern/kern_shutdown.c:199
#16 0xf01128f2 in panic (fmt=0xf01d322f "page fault")
    at ../../kern/kern_shutdown.c:390
#17 0xf01d3d96 in trap_fatal (frame=0xefbffd40) at ../../i386/i386/trap.c:742
#18 0xf01d3884 in trap_pfault (frame=0xefbffd40, usermode=0)
    at ../../i386/i386/trap.c:653
#19 0xf01d355f in trap (frame={tf_es = 16, tf_ds = 16, tf_edi = -1073739712, 
      tf_esi = -215228544, tf_ebp = -272630388, tf_isp = -272630424, 
      tf_ebx = -184637384, tf_edx = 0, tf_ecx = 8192, tf_eax = -184626164, 
      tf_trapno = 12, tf_err = 2, tf_eip = -267182654, tf_cs = 8, 
      tf_eflags = 66182, tf_esp = 2916352, tf_ss = 0})
    at ../../i386/i386/trap.c:311
#20 0xf0131dc2 in reassignbuf (bp=0xf4fea838, newvp=0xf32bdf80)
    at ../../kern/vfs_subr.c:657
#21 0xf016573f in nfs_doio (bp=0xf4fea838, cr=0xf3142c00, p=0x0)
    at ../../nfs/nfs_bio.c:1101
#22 0xf018494b in nfssvc_iod (p=0xf30c0a00) at ../../nfs/nfs_syscalls.c:811
#23 0xf018361a in nfssvc (p=0xf30c0a00, uap=0xefbfff94, retval=0xefbfff84)
    at ../../nfs/nfs_syscalls.c:209
#24 0xf01d402f in syscall (frame={tf_es = 39, tf_ds = 39, tf_edi = -272638336, 
      tf_esi = 0, tf_ebp = -272638384, tf_isp = -272629788, tf_ebx = 1, 
      tf_edx = 1, tf_ecx = 1, tf_eax = 155, tf_trapno = 12, tf_err = 7, 
      tf_eip = 9077, tf_cs = 31, tf_eflags = 582, tf_esp = -272638408, 
      tf_ss = 39}) at ../../i386/i386/trap.c:890
#25 0x2375 in ?? ()
#26 0x107f in ?? ()
(kgdb) up
#21 0xf016573f in nfs_doio (bp=0xf4fea838, cr=0xf3142c00, p=0x0)
    at ../../nfs/nfs_bio.c:1101
1101                                    reassignbuf(bp, vp);
(kgdb) list
1096                     * Since for the B_ASYNC case, nfs_bwrite() has reassigned the
1097                     * buffer to the clean list, we have to reassign it back to the
1098                     * dirty one. Ugh.
1099                     */
1100                            if (bp->b_flags & B_ASYNC)
1101                                    reassignbuf(bp, vp);
1102                            else
1103                                    bp->b_flags |= B_EINTR;
1104                    } else {
1105                            if (error) {
(kgdb) up
#22 0xf018494b in nfssvc_iod (p=0xf30c0a00) at ../../nfs/nfs_syscalls.c:811
811                         (void) nfs_doio(bp, bp->b_wcred, (struct proc *)0);
(kgdb) list
806                         wakeup(&nmp->nm_bufq);
807                     }
808                     if (bp->b_flags & B_READ)
809                         (void) nfs_doio(bp, bp->b_rcred, (struct proc *)0);
810                     else
811                         (void) nfs_doio(bp, bp->b_wcred, (struct proc *)0);
812
813                     /*
814                      * If there are more than one iod on this mount, then defect
815                      * so that the iods can be shared out fairly between the mounts
(kgdb) print bp
$3 = (struct buf *) 0xf4fea838
(kgdb) print *bp
$4 = {b_hash = {le_next = 0x0, le_prev = 0x0}, b_vnbufs = {
    le_next = 0xf4fed40c, le_prev = 0x0}, b_freelist = {tqe_next = 0x0, 
    tqe_prev = 0xf3069be8}, b_act = {tqe_next = 0x0, tqe_prev = 0x0}, 
  b_proc = 0x0, b_flags = 1610744022, b_qindex = 0, b_usecount = 0 '\000', 
  b_error = 0, b_bufsize = 8192, b_bcount = 8192, b_resid = 0, 
  b_dev = 4294967295, b_un = {
    b_addr = 0xf6797000 "h\024#\201\2341z\0013\036\216&J\027\021%QS[8\006U2f\r%JiM^\n\230\221\017/\005rc^\2032\e\013b\227\217Dy\aGBz9+/\226WQgqYd\214g\t\020md#9,\236h\027\0271zw\001\2360\027!\tg[JJ\037?FU8\214\036Dffް\027'\0301\n\202qB-\2061R\023\235\201\207U\201.i]H8\213C#x2"...}, 
  b_kvabase = 0xf6797000 "h\024#\201\2341z\0013\036\216&J\027\021%QS[8\006U2f\r%JiM^\n\230\221\017/\005rc^\2032\e\013b\227\217Dy\aGBz9+/\226WQgqYd\214g\t\020md#9,\236h\027\0271zw\001\2360\027!\tg[JJ\037?FU8\214\036Dffް\027'\0301\n\202qB-\2061R\023\235\201\207U\201.i]H8\213C#x2"..., b_kvasize = 8192, b_saveaddr = 0x0, 
  b_lblkno = 356, b_blkno = 5696, b_iodone = 0xf012fc34 <cluster_callback>, 
  b_iodone_chain = 0x0, b_vp = 0xf32bdf80, b_dirtyoff = 0, b_dirtyend = 8192, 
  b_rcred = 0x0, b_wcred = 0xf3142c00, b_validoff = 0, b_validend = 0, 
  b_pblkno = 0, b_savekva = 0x0, b_driver1 = 0x0, b_driver2 = 0x0, 
  b_spc = 0x0, b_cluster = {cluster_head = {tqh_first = 0xf5000f70, 
      tqh_last = 0xf5001000}, cluster_entry = {tqe_next = 0xf5000f70, 
      tqe_prev = 0xf5001000}}, b_pages = {0xf03f34dc, 0xf03f3510, 
    0x0 <repeats 14 times>}, b_npages = 2}
(kgdb) print nmp
$5 = (struct nfsmount *) 0xf3069a00
(kgdb) print *nmp
$6 = {nm_flag = 68452864, nm_mountp = 0xf3069c00, nm_numgrps = 16, 
  nm_fh = "&\004\000\000\001\000\000\000\f\000\000\000\002\000\000\000U2", '\000' <repeats 43 times>, nm_fhsize = 28, nm_so = 0xf3068900, nm_sotype = 2, 
  nm_soproto = 0, nm_soflags = 3, nm_nam = 0xf1bd2a80, nm_timeo = 100, 
  nm_retry = 10, nm_srtt = {15, 24, 36, 48}, nm_sdrtt = {4, 6, 5, 9}, 
  nm_sent = 256, nm_cwnd = 1150, nm_timeouts = 0, nm_deadthresh = 9, 
  nm_rsize = 8192, nm_wsize = 8192, nm_readdirsize = 8192, nm_readahead = 1, 
  nm_leaseterm = 30, nm_timerhead = {cqh_first = 0xf3069ab0, 
    cqh_last = 0xf3069ab0}, nm_inprog = 0x0, nm_authuid = 0, nm_authtype = 0, 
  nm_authlen = 0, nm_authstr = 0x0, nm_verfstr = 0x0, nm_verflen = 0, 
  nm_verf = "40\205\210\000\004\234", nm_key = "\000", nm_numuids = 0, 
  nm_uidlruhead = {tqh_first = 0x0, tqh_last = 0xf3069ae4}, nm_uidhashtbl = {{
      lh_first = 0x0} <repeats 63 times>}, nm_bufq = {tqh_first = 0x0, 
    tqh_last = 0xf3069be8}, nm_bufqlen = 0, nm_bufqwant = 0, nm_bufqiods = 3}
(kgdb) 

kernels and dumps available on request.

>How-To-Repeat:

Someone/something seems to repeat it very often, 6 times this evening.

>Fix:
	
>Release-Note:
>Audit-Trail:

From: Heikki Suonsivu <hsu@clinet.fi>
To: freebsd-gnats-submit@freebsd.org
Cc: hsu@mail.clinet.fi
Subject: kern/4673 Two panics, now crash dumps, always in reassignbuf
Date: Sat, 28 Mar 1998 04:27:24 +0200 (EET)

 This was greatly reduced by removing writing over NFS.  We were running aub
 on our news server, and it was writing over NFS to save the files
 generated.  Problem mostly disappeared after this NFS load was removed.  It
 is not a fix, but might give a clue of what might be going on. 
 
 Studded@dal.net writes:
  > Greetings, :)
  > 
  > 	I am writing to you in regards to your FreeBSD Problem
  > Report. The FreeBSD project is currently conducting a beta test on
  > version 2.2.6 and feedback as to whether you are still experiencing
  > your problem would be very valuable. 
  > 
  > 	If you are still experiencing the problem you reported, it
  > would help the project track the problem if you could upgrade to the
  > latest snapshot of 2.2.6-Beta (located at releng22.freebsd.org) and
  > test your problem again. 
  > 
  > 	If you have any feedback regarding this Problem Report,
  > whether you are still experiencing the problem or whether the PR can
  > be closed, please mail your response to
  > freebsd-gnats-submit@freebsd.org. Please do not respond directly to
  > me. I am merely a humble volunteer and have no official connection to
  > the FreeBSD project. Therefore I cannot make any changes to the status
  > of your Problem Report. It is also very important that you include 
  > the category and number of your Problem Report (kern/4673)
  > in the subject line of your response.
  > 
  > 	Another option if you need a refresher on the details of your
  > problem or would like to submit a followup is to use the web page
  > interface and look up your PR by number.
  > http://www.freebsd.org/cgi/query-pr-summary.cgi
  > 
  > 	Thank you for helping to make this the greatest release of
  > FreeBSD ever.
  > 
  > Doug
  > 
  > 
  > -- 
  > ***         Chief Operations Officer, DALnet IRC network       ***
  > *** Proud operator, designer and maintainer of the world's largest
  > *** Internet Relay Chat server.  5,328 clients and still growing.
  > *** Try spider.dal.net on ports 6662-4    (Powered by FreeBSD)
  > 
State-Changed-From-To: open->closed 
State-Changed-By: alfred 
State-Changed-When: Tue Jun 6 02:50:41 PDT 2000 
State-Changed-Why:  
Although the traceback and information provided by submitter was verbose 
and helpful this PR dates back from before my time and hasn't had any 
follow-up since 1998.  If the problem still exists in 4.0, the PR should 
be re-opened. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=4673 
>Unformatted:
