HEADS UP: SUJ Going in to head today - panic on rename()

[Jeff Roberson]

On Mon, 26 Apr 2010, Vladimir Grebenschikov wrote:

> Hi
>
> First, many thanks for this effort, it is really very appreciated,
>
> Panic on Gnome starting:

Thank you for the report with stack.  That was very helpful.  I know how 
to fix this bug but it will take me a day or two as my primary test 
machine seems to have died.

For now you will have to tunefs -j disable on that volume.

Thanks,
Jeff

>
> # kgdb -q /usr/obj/usr/src/sys/VBOOK/kernel.debug /var/crash/vmcore.12
> ...
> #0  doadump () at pcpu.h:246
> 246	pcpu.h: No such file or directory.
> 	in pcpu.h
> (kgdb) x/s panicstr
> 0xc07c2160 <buf.13793>:	 "remove_from_journal: 0xc581ec40 is not in journal"
> (kgdb) bt
> #0  doadump () at pcpu.h:246
> #1  0xc056b883 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:416
> #2  0xc056babd in panic (fmt=Variable "fmt" is not available.
> ) at /usr/src/sys/kern/kern_shutdown.c:590
> #3  0xc0488ba9 in db_fncall (dummy1=1, dummy2=0, dummy3=-1065321792, dummy4=0xd90d572c "") at /usr/src/sys/ddb/db_command.c:548
> #4  0xc0488fa1 in db_command (last_cmdp=0xc07abb1c, cmd_table=0x0, dopager=1) at /usr/src/sys/ddb/db_command.c:445
> #5  0xc04890fa in db_command_loop () at /usr/src/sys/ddb/db_command.c:498
> #6  0xc048af7d in db_trap (type=3, code=0) at /usr/src/sys/ddb/db_main.c:229
> #7  0xc0597f54 in kdb_trap (type=3, code=0, tf=0xd90d58c4) at /usr/src/sys/kern/subr_kdb.c:535
> #8  0xc06f842e in trap (frame=0xd90d58c4) at /usr/src/sys/i386/i386/trap.c:694
> #9  0xc06dcf7b in calltrap () at /usr/src/sys/i386/i386/exception.s:165
> #10 0xc05980ba in kdb_enter (why=0xc0747a43 "panic", msg=0xc0747a43 "panic") at cpufunc.h:71
> #11 0xc056baa1 in panic (fmt=0xc0755fee "remove_from_journal: %p is not in journal") at /usr/src/sys/kern/kern_shutdown.c:573
> #12 0xc0672135 in remove_from_journal (wk=0xc0c3ec2f) at /usr/src/sys/ufs/ffs/ffs_softdep.c:2204
> #13 0xc067e273 in cancel_jaddref (jaddref=0xc581ec40, inodedep=0xc5c58700, wkhd=0xc5c5875c) at /usr/src/sys/ufs/ffs/ffs_softdep.c:3336
> #14 0xc067f163 in softdep_revert_link (dp=0xc681f9f8, ip=0xc681f910) at /usr/src/sys/ufs/ffs/ffs_softdep.c:3871
> #15 0xc0697fd0 in ufs_rename (ap=0xd90d5c1c) at /usr/src/sys/ufs/ufs/ufs_vnops.c:1546
> #16 0xc070ead6 in VOP_RENAME_APV (vop=0xc0796340, a=0xd90d5c1c) at vnode_if.c:1474
> #17 0xc05f2902 in kern_renameat (td=0xc586e8c0, oldfd=-100, old=0x4856ca30 <Address 0x4856ca30 out of bounds>, newfd=-100,
>    new=0x4856ca90 <Address 0x4856ca90 out of bounds>, pathseg=UIO_USERSPACE) at vnode_if.h:636
> #18 0xc05f29b6 in kern_rename (td=0xc586e8c0, from=0x4856ca30 <Address 0x4856ca30 out of bounds>, to=0x4856ca90 <Address 0x4856ca90 out of bounds>, pathseg=UIO_USERSPACE)
>    at /usr/src/sys/kern/vfs_syscalls.c:3574
> #19 0xc05f29e9 in rename (td=0xc586e8c0, uap=0xd90d5cf8) at /usr/src/sys/kern/vfs_syscalls.c:3551
> #20 0xc06f7c49 in syscall (frame=0xd90d5d38) at /usr/src/sys/i386/i386/trap.c:1113
> #21 0xc06dcfe0 in Xint0x80_syscall () at /usr/src/sys/i386/i386/exception.s:261
> #22 0x00000033 in ?? ()
> Previous frame inner to this frame (corrupt stack?)
> (kgdb)
>
>
> Just after fsck -y && tunefs -j enable for both / and /usr in
> single-user mode and then usual boot
>
> panic is reproducible
>
>
> -- 
> Vladimir B. Grebenschikov
> vova at fbsd.ru
>