Date: Tue, 23 May 2006 21:46:27 +0400 (MSD) From: Dmitriy Kirhlarov <dkirhlarov@oilspace.com> To: FreeBSD-gnats-submit@FreeBSD.org, daichi@FreeBSD.org Subject: kern/97699: UNIONFS panic Message-ID: <200605231746.k4NHkRlw006726@dimma.mow.oilspace.com> Resent-Message-ID: <200605231750.k4NHoQ0U066075@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 97699
>Category: kern
>Synopsis: UNIONFS panic
>Confidential: no
>Severity: serious
>Priority: medium
>Responsible: freebsd-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: sw-bug
>Submitter-Id: current-users
>Arrival-Date: Tue May 23 17:50:26 GMT 2006
>Closed-Date:
>Last-Modified:
>Originator: Dmitriy Kirhlarov
>Release: FreeBSD 5.4-STABLE i386
>Organization:
>Environment:
System: FreeBSD jailhost1 6.1-RELEASE FreeBSD 6.1-RELEASE #0: Mon May 22 16:18:16 UTC 2006 root@jailhost1:/usr/obj/usr/src/sys/OILSPACE1DEB i386
>Description:
For jails environment I use unionfs (currently, it's
unionfs6-p11.patch).
Previously, I has panic only, when try umount unionfs. But
it's new -- I get panic, when installing port in jail, or just
write data to disk. It's third jail on this host.
>How-To-Repeat:
backtrace:
--------
[GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"]
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd".
Unread portion of the kernel message buffer:
panic: ufs_direnter: compact2
cpuid = 0
KDB: enter: panic
panic: from debugger
cpuid = 0
Uptime: 24m15s
Dumping 511 MB (2 chunks)
chunk 0: 1MB (159 pages) ... ok
chunk 1: 511MB (130816 pages) 496 480 464 448 432 416 400 384 368 352 336 320 304 288 272 256 240 224 208 192 176 160 144 128 112 96 80 64 48 32 16
#0 doadump () at pcpu.h:165
in pcpu.h
(kgdb) 165 pcpu.h: No such file or directory.
#0 doadump () at pcpu.h:165
No locals.
#1 0xd05fdeec in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:402
first_buf_printf = 1
#2 0xd05fe313 in panic (fmt=0xd07f6b23 "from debugger")
at /usr/src/sys/kern/kern_shutdown.c:558
td = (struct thread *) 0xd3a03180
bootopt = 260
newpanic = 0
ap = 0xd3a03180 "$\206¶ÓÀã>Ó"
buf = "ufs_direnter: compact2", '\0' <repeats 233 times>
#3 0xd0488792 in db_panic (addr=-798892416, have_addr=0, count=-1,
modif=0xeea726c8 "") at /usr/src/sys/ddb/db_command.c:438
No locals.
#4 0xd0488702 in db_command (last_cmdp=0xd08747a4, cmd_table=0x0,
aux_cmd_tablep=0xd0830480, aux_cmd_tablep_end=0xd083049c)
at /usr/src/sys/ddb/db_command.c:350
cmd = (struct command *) 0xd07dcdc0
t = 0
modif = "\000\000\000\000ø\003\000\000ä&§îÖÀxÐø\003\000\000ø\003\000\000\r\000\000\000\020'§î\025ÃxÐø&§îø\003\000\000\000K\000\000\006\000\017\003\vöcÐx\000\000\000 P\207Ð\000\000\000\000('§î\221®HЩ@\201Ð\020«HÐ\000\000\000\000\020\000\000\000\000\000\000\000 P\207Ð&¡HÐ P\207ÐàG\207Ðx\000\000\000\214'§î"
addr = -798892416
count = -1
have_addr = 0
result = 0
#5 0xd0488815 in db_command_loop () at /usr/src/sys/ddb/db_command.c:458
No locals.
#6 0xd048aa45 in db_trap (type=3, code=0) at /usr/src/sys/ddb/db_main.c:221
jb = {{_jb = {-291035252, -291035280, -291035200, 1, 0, -800544282,
0, 0, 0, 0, -291035200, -798891776}}}
prev_jb = (void *) 0x0
bkpt = 0
#7 0xd061e1ae in kdb_trap (type=0, code=0, tf=0xeea72828)
at /usr/src/sys/kern/subr_kdb.c:473
did_stop_cpus = 1
handled = -291035096
#8 0xd07bd058 in trap (frame=
{tf_fs = 8, tf_es = 40, tf_ds = -291045336, tf_edi = 256, tf_esi = 1, tf_ebp = -291035024, tf_isp = -291035052, tf_ebx = -291034960, tf_edx = 0, tf_ecx = -788320256, tf_eax = 18, tf_trapno = 3, tf_err = 0, tf_eip = -798892416, tf_cs = 32, tf_eflags = 646, tf_esp = -796829585, tf_ss = -796835944})
at /usr/src/sys/i386/i386/trap.c:593
td = (struct thread *) 0xd3a03180
p = (struct proc *) 0xd3b68624
sticks = 2048
i = 0
ucode = 0
type = 3
code = 0
eva = 0
#9 0xd07a689a in calltrap () at /usr/src/sys/i386/i386/exception.s:139
No locals.
#10 0xd061de80 in kdb_enter (msg=0x12 <Address 0x12 out of bounds>)
at cpufunc.h:60
No locals.
#11 0xd05fe26e in panic (fmt=0xd082271c "ufs_direnter: compact2")
at /usr/src/sys/kern/kern_shutdown.c:542
td = (struct thread *) 0xd3a03180
bootopt = 256
newpanic = 1
ap = 0xeea728b0 "ä\220µÓü\220µÓü\220µÓ\030"
buf = "ufs_direnter: compact2", '\0' <repeats 233 times>
#12 0xd0738b23 in ufs_direnter (dvp=0xd3b8e330, tvp=0x0, dirp=0xeea729cc,
cnp=0xeea72c34, newdirbp=0x0) at /usr/src/sys/ufs/ufs/ufs_lookup.c:894
cr = (struct ucred *) 0xd3d9be00
td = (struct thread *) 0xd3a03180
newentrysize = 24
dp = (struct inode *) 0xd3b61108
bp = (struct buf *) 0xdd8e6848
dsize = 24
ep = (struct direct *) 0xd3b590fc
nep = (struct direct *) 0xd3b61108
error = 0
ret = 18
blkoff = -743042808
loc = 48
spacefree = 0
flags = -788320256
namlen = 18
dirbuf = 0xd3b590e4 "\001"
#13 0xd073d4e3 in ufs_rename (ap=0xeea72b5c)
at /usr/src/sys/ufs/ufs/ufs_vnops.c:1113
tvp = (struct vnode *) 0x0
tdvp = (struct vnode *) 0xd3b8e330
fvp = (struct vnode *) 0xd3fa0110
fdvp = (struct vnode *) 0xd3b8e330
tcnp = (struct componentname *) 0xeea72c34
fcnp = (struct componentname *) 0xeea72c84
td = (struct thread *) 0xd3a03180
ip = (struct inode *) 0xd3f9f108
xp = (struct inode *) 0x0
dp = (struct inode *) 0xd3b61108
newdir = {d_ino = 1346364, d_reclen = 59655, d_type = 8 '\b',
d_namlen = 13 '\r',
d_name = "sendmail.st.1\000\205Ð\000\000\001\000ô)§î\000\000\000\000\2001 Ó\2001 Ó\000\000\000\000À\223\205ÐX*§î\001\000\000\000 *§îr\031fÐx¢\200Ó\006\000\000\000\234¢\200Ó\2001 Ó8*§îÔx}ÐX*§î\000\000\000\000\000\000\000\000\000p¹Ót*§î|\003ZÐÀ\"\206ÐX*§îh*§î1»sÐ ¢\200Ó ¢\200Ó\2001\207Ð ¢\200Ó\000\000\000\000\2001 Ó\000\000\000\000À\223\205ÐÌ*§îl+§î\220*§îr\031fÐh\001úÓ\006 \000\000\214\001úÓ\2001 Ó¨*§îÔx}ÐÌ*§î"...}
doingdirectory = 0
oldparent = 0
newparent = 1343681
error = -291034676
ioflag = 0
#14 0xd07d73b4 in VOP_RENAME_APV (vop=0xd0862800, a=0xeea72b5c)
at vnode_if.c:1200
rc = -796514304
#15 0xd05a3da0 in union_rename (ap=0x12) at vnode_if.h:624
error = 19
fdvp = (struct vnode *) 0xd3b8e220
fvp = (struct vnode *) 0xd3b97000
fcnp = (struct componentname *) 0xeea72c84
tdvp = (struct vnode *) 0xd3b8e220
tvp = (struct vnode *) 0x0
tcnp = (struct componentname *) 0xeea72c34
td = (struct thread *) 0xd3a03180
rfdvp = (struct vnode *) 0xd3b8e330
rfvp = (struct vnode *) 0xd3fa0110
rtdvp = (struct vnode *) 0xd3b8e330
rtvp = (struct vnode *) 0x0
needwhiteout = 1
um = (struct union_mount *) 0xd398f160
un = (struct union_node *) 0xd3681dc0
#16 0xd07d73b4 in VOP_RENAME_APV (vop=0xd084b4a0, a=0xeea72bcc)
at vnode_if.c:1200
rc = -796609376
#17 0xd0678f30 in kern_rename (td=0xd3a03180,
from=0x12 <Address 0x12 out of bounds>,
to=0x12 <Address 0x12 out of bounds>, pathseg=UIO_USERSPACE)
at vnode_if.h:624
mp = (struct mount *) 0xd3523400
tvp = (struct vnode *) 0x0
fvp = (struct vnode *) 0xd3b97000
tdvp = (struct vnode *) 0xd3b8e220
fromnd = {ni_dirp = 0xcfbfcc40 <Address 0xcfbfcc40 out of bounds>,
ni_segflg = UIO_USERSPACE, ni_startdir = 0xd3b8e220,
ni_rootdir = 0xd39c5550, ni_topdir = 0xd39c5550, ni_vp = 0xd3b97000,
ni_dvp = 0xd3b8e220, ni_pathlen = 1, ni_next = 0xd39b2416 "",
ni_loopcnt = 0, ni_cnd = {cn_nameiop = 2, cn_flags = 50369552,
cn_thread = 0xd3a03180, cn_cred = 0xd3d9be00, cn_lkflags = 2,
cn_pnbuf = 0xd39b2400 "/var/log/sendmail.st.0",
cn_nameptr = 0xd39b2409 "sendmail.st.0", cn_namelen = 13, cn_consume = 0}}
tond = {ni_dirp = 0xcfbfc840 <Address 0xcfbfc840 out of bounds>,
ni_segflg = UIO_USERSPACE, ni_startdir = 0xd3b8e220,
ni_rootdir = 0xd39c5550, ni_topdir = 0xd39c5550, ni_vp = 0x0,
ni_dvp = 0xd3b8e220, ni_pathlen = 1, ni_next = 0xd39b2816 "",
ni_loopcnt = 0, ni_cnd = {cn_nameiop = 3, cn_flags = 50502700,
cn_thread = 0xd3a03180, cn_cred = 0xd3d9be00, cn_lkflags = 2,
cn_pnbuf = 0xd39b2800 "/var/log/sendmail.st.1",
cn_nameptr = 0xd39b2809 "sendmail.st.1", cn_namelen = 13, cn_consume = 0}}
tvfslocked = 1
fvfslocked = 1
error = -291034060
#18 0xd0678c19 in rename (td=0x12, uap=0x0)
at /usr/src/sys/kern/vfs_syscalls.c:3193
No locals.
#19 0xd07bdb30 in syscall (frame=
{tf_fs = 671547451, tf_es = 672989243, tf_ds = -809566149, tf_edi = -809514944, tf_esi = 134560384, tf_ebp = -809507560, tf_isp = -291033756, tf_ebx = 0, tf_edx = -809511872, tf_ecx = 1001, tf_eax = 128, tf_trapno = 12, tf_err = 2, tf_eip = 671889527, tf_cs = 51, tf_eflags = 582, tf_esp = -809518212, tf_ss = 59}) at /usr/src/sys/i386/i386/trap.c:981
params = 0xcfbfbb80 <Address 0xcfbfbb80 out of bounds>
callp = (struct sysent *) 0xd084d760
td = (struct thread *) 0xd3a03180
p = (struct proc *) 0xd3b68624
orig_tf_eflags = 582
sticks = 1
error = 0
narg = 2
args = {-809513920, -809514944, 0, 1, -743012828, -291033812,
-797254491, -291033804}
code = 128
#20 0xd07a68ef in Xint0x80_syscall ()
at /usr/src/sys/i386/i386/exception.s:200
No locals.
#21 0x00000033 in ?? ()
No symbol table info available.
(kgdb) Previous frame inner to this frame (corrupt stack?)
--------
>Fix:
unknown.
>Release-Note:
>Audit-Trail:
>Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200605231746.k4NHkRlw006726>