ufs mv panic

[Thomas Nikolajsen]

Hi,

Using HEAD I get this panic using GENERIC on UP machine.
Panic is immediate; reproduced by: /usr/src on ufs:
cd /usr/src; mkdir XXX; mv * XXX

Panic was first seen after this commit:
http://leaf.dragonflybsd.org/mailarchive/commits/2006-03/msg00168.html

 -thomas
--
panic: getblk: vnode 0xd1dc5790 has no object!
mp_lock = 00000000; cpuid = 0; lapic.id = 00000000
panic: from debugger
mp_lock = 00000000; cpuid = 0; lapic.id = 00000000
. .
(kgdb) bt
#0  dumpsys () at thread.h:81
#1  0xc01b818b in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:365
#2  0xc01b8731 in panic (fmt=0xc0387ad8 "from debugger") at /usr/src/sys/kern/kern_shutdown.c:679
#3  0xc013da76 in db_panic (addr=-1070329405, have_addr=0, count=-1, modif=0xd1f66660 "") at /usr/src/sys/ddb/db_command.c:447
#4  0xc013da0b in db_command (last_cmdp=0xc040d790, cmd_table=0x0, aux_cmd_tablep=0xc03bebe0, aux_cmd_tablep_end=0xc03bebe4) at /usr/src/sys/ddb/db_command.c:343
#5  0xc013daeb in db_command_loop () at /usr/src/sys/ddb/db_command.c:469
#6  0xc01407cc in db_trap (type=3, code=0) at /usr/src/sys/ddb/db_trap.c:71
#7  0xc0340def in kdb_trap (type=3, code=0, regs=0xd1f66780) at /usr/src/sys/i386/i386/db_interface.c:150
#8  0xc0357def in trap (frame={tf_fs = 24, tf_es = 16, tf_ds = 16, tf_edi = 1, tf_esi = -1069888820, tf_ebp = -772380728, tf_isp = -772380756, tf_ebx = 256, tf_edx = -1069223488, tf_ecx = 0, tf_eax = 18, tf_trapno = 3, tf_err = 0, tf_eip = -1070329405, tf_cs = 8, tf_eflags = 662, tf_esp = -1069947617, tf_ss = -1070019966}) at /usr/src/sys/i386/i386/trap.c:811
#9  0xc034214f in calltrap () at /usr/src/sys/i386/i386/exception.s:774
#10 0xc03411c3 in Debugger (msg=0x12 <Address 0x12 out of bounds>) at cpufunc.h:68
#11 0xc01b8729 in panic (fmt=0xc03acacc "getblk: vnode %p has no object!") at /usr/src/sys/kern/kern_shutdown.c:677
#12 0xc01f3cab in getblk (vp=0xd1dc5790, loffset=Unhandled dwarf expression opcode 0x93
) at /usr/src/sys/kern/vfs_bio.c:2157
#13 0xc01f188f in bread (vp=0xd1dc5790, loffset=Unhandled dwarf expression opcode 0x93
) at /usr/src/sys/kern/vfs_bio.c:599
#14 0xc02ab2bf in ffs_blkatoff (vp=0xd1dc5790, offset=12, res=0xd1f66888, bpp=0xd1f6688c) at /usr/src/sys/vfs/ufs/ffs_subr.c:81
#15 0xc02b0b7f in ufs_dirrewrite (dp=0xd1df6600, oip=0xd1df6200, newinum=109161, newtype=-1069223488, isrmdir=18) at /usr/src/sys/vfs/ufs/ufs_lookup.c:1028
#16 0xc02b3e09 in ufs_rename (ap=0xd1f66a2c) at /usr/src/sys/vfs/ufs/ufs_vnops.c:1270
#17 0xc02b536b in ufs_vnoperate (ap=0xc044f1c0) at /usr/src/sys/vfs/ufs/ufs_vnops.c:2420
#18 0xc020dc66 in vop_old_rename (ops=0xc044f1c0, fdvp=0x12, fvp=0x12, fcnp=0x12, tdvp=0x12, tvp=0x12, tcnp=0x12) at /usr/src/sys/kern/vfs_vopops.c:684
#19 0xc01fbbab in vop_compat_nrename (ap=0xd1f66b04) at /usr/src/sys/kern/vfs_default.c:1091
#20 0xc01fa5fe in vop_defaultop (ap=0xc044f1c0) at /usr/src/sys/kern/vfs_default.c:155
#21 0xc02b536b in ufs_vnoperate (ap=0xc044f1c0) at /usr/src/sys/vfs/ufs/ufs_vnops.c:2420
#22 0xc020e616 in vop_nrename (ops=0x12, fncp=0xd1dab178, tncp=0xd1dabda8, cred=0xc044f1c0) at /usr/src/sys/kern/vfs_vopops.c:1446
#23 0xc020ae40 in kern_rename (fromnd=0xd1f66bb0, tond=0xd1f66b80) at /usr/src/sys/kern/vfs_syscalls.c:2758
#24 0xc020aec5 in rename (uap=0xd1f66b80) at /usr/src/sys/kern/vfs_syscalls.c:2781
#25 0xc035893c in syscall2 (frame={tf_fs = 47, tf_es = 47, tf_ds = 47, tf_edi = -1077937529, tf_esi = -1077938872, tf_ebp = -1077939064, tf_isp = -772379276, tf_ebx = -1077938868, tf_edx = -1, tf_ecx = 134754048, tf_eax = 128, tf_trapno = 12, tf_err = 2, tf_eip = 134520276, tf_cs = 31, tf_eflags = 646, tf_esp = -1077940548, tf_ss = 47}) at /usr/src/sys/i386/i386/trap.c:1420
#26 0xc03421da in Xint0x80_syscall () at /usr/src/sys/i386/i386/exception.s:852
#27 0x0000001f in ?? ()
#28 0x0000002f in ?? ()
#29 0x00000000 in ?? ()
#30 0x00000000 in ?? ()
#31 0x00000000 in ?? ()
#32 0x00000000 in ?? ()
#33 0x0718f000 in ?? ()
#34 0x00000002 in ?? ()
#35 0xc040f214 in intr_info_ary ()
#36 0xd1f66628 in ?? ()
#37 0xd1f6660c in ?? ()
#38 0xc5872700 in ?? ()
#39 0xc01bebc9 in lwkt_preempt (ntd=0xbfbff488, critpri=31) at /usr/src/sys/kern/lwkt_thread.c:861
Previous frame inner to this frame (corrupt stack?)