3.2/i386 panic with tcfs

From: francisco <frisco(at)blackant.net>
Date: Thu Nov 07 2002 - 14:03:27 EST

using tcfs, i can reproduce a crash when unmounting tcfs filesystem on i386. my kernel config file is 3.2-base i386 GENERIC with only the following line added:
option TCFS

after booting into single user mode using this new kernel, i ran the following (as per http://groups.google.com/groups?oi=djq&selm=an_636500281 ):
mount /home
mkdir /etc/tcfs
tcfsmng adduser
tcfsuse genkey
tcfsuse flags +x /home
umount /home
[panic here]

now i can boot the system, mount /home, and when i umount /home it panics. this will happen in both single user and multiuser.

trace/ps:
# umount /home
panic: lockmgr: LK_RELEASE of unlocked lock Stopped at _Debugger+0x4: leave
RUN AT LEAST 'trace' AND 'ps' AND INCLUDE OUTPUT WHEN REPORTING THIS PANIC!
DO NOT EVEN BOTHER REPORTING THIS WITHOUT INCLUDING THAT INFORMATION! ddb> trace
_Debugger(d67f991c,0,0,0,d67fdc84) at _Debugger+0x4
_panic(d01beea8,200042,d67f4308,d67d5b1c,4) at _panic+0x81
_lockmgr(d67f991c,6,d67f4308,d67d5b1c,d67f991c) at _lockmgr+0x469
_ufs_unlock(d67ffdb8,96a,d67ffd78,d01f838d,d67f43c8) at _ufs_unlock+0x2b
_tcfs_bypass(d67ffdb8,96a,d67ffdb8,d01edce0,d67f43c8) at _tcfs_bypass+0xd1
_tcfs_unlock(d67ffdb8,8,0,d01f3d61,d67f43c8) at _tcfs_unlock+0x16
_VOP_UNLOCK(d67f43c8,0) at _VOP_UNLOCK+0x35
_vclean(d67f43c8,8,d67d5b1c,d01ecaef) at _vclean+0xaf
_vgonel(d67f43c8,d67d5b1c,d67d5b1c,d01ecbee,d67f43c8) at _vgonel+0x42
_vgone(d67f43c8,0,d67ffe88,d01f808f,d67f43c8) at _vgone+0x17
_tcfs_unmount(d07ca600,0,d67d5b1c,d67d5b1c,0) at _tcfs_unmount+0x54
_dounmount(d07ca600,0,d67d5b1c,4,d67d5b1c) at _dounmount+0x6d
_sys_unmount(d67d5b1c,d67fff88,d67fff80,d0301c7b,0) at _sys_unmount+0xd9
_syscall() at _syscall+0x25d

--- syscall (number 22) ---
0x3423:
ddb> ps

   PID   PPID   PGRP    UID  S       FLAGS  WAIT       COMMAND
* 2410  12742   2410      0  2      0x4006             umount
 12742      1  12742      0  3      0x4086  pause      sh
     8      0      0      0  3    0x100204  apmev      apm0
     7      0      0      0  3    0x100204  crypto_wa  crypto
     6      0      0      0  3    0x100204  aiodoned   aiodoned
     5      0      0      0  3    0x100204  syncer     update
     4      0      0      0  3    0x100204  cleaner    cleaner
     3      0      0      0  3    0x100204  reaper     reaper
     2      0      0      0  3    0x100204  pgdaemon   pagedaemon
     1      0      1      0  3      0x4084  wait       init
     0     -1      0      0  3     0x80204  scheduler  swapper




/etc/fstab:
/dev/wd0a / ffs rw 1 1
/dev/wd0g /mnt ffs rw,nodev,nosuid 1 2
/dev/wd0d /usr ffs rw,nodev 1 2

/dev/wd0e /var ffs rw,nodev,nosuid 1 2
/dev/wd0f /var/mail ffs rw,nodev,nosuid 1 2 #/dev/svnd0c /home ffs rw,nodev,nosuid,noauto 0 0 #/mnt /home tcfs rw,nodev,nosuid,noauto,label=default,cipher=2 0 0 /mnt/tcfs /home tcfs rw,noauto,label=default,cipher=2 0 0

dmesg:
OpenBSD 3.2 (GENERICTCFS) #0: Thu Nov 7 05:08:38 EST 2002

    root@huaca-4.wccnet.org:/usr/src/sys/arch/i386/compile/GENERICTCFS

cpu0: F00F bug workaround installed
cpu0: Intel Pentium (P54C) ("GenuineIntel" 586-class) 100 MHz
cpu0: FPU,V86,DE,PSE,TSC,MSR,MCE,CX8

real mem = 66699264 (65136K)
avail mem = 56287232 (54968K)
using 839 buffers containing 3436544 bytes (3356K) of memory mainbus0 (root)
bios0 at mainbus0: AT/286+(6c) BIOS, date 07/08/98, BIOS32 rev. 0 @ 0xf0400
apm0 at bios0: Power Management spec V1.2 (BIOS mgmt disabled) apm0: AC on, battery charge unknown
pcibios0 at bios0: rev. 2.1 @ 0xf0000/0xa22 pcibios0: PCI IRQ Routing Table rev. 1.0 @ 0xf09b0/112 (5 entries) pcibios0: PCI Interrupt Router at 000:07:0 ("Intel 82371FB PCI-ISA" rev 0x00)
pcibios0: PCI bus #0 is the last bus
bios0: ROM list: 0xc0000/0x8000
pci0 at mainbus0 bus 0: configuration mode 1 (bios) pchb0 at pci0 dev 0 function 0 "Intel 82439HX" rev 0x03 pcib0 at pci0 dev 7 function 0 "Intel 82371SB PCI-ISA" rev 0x01 pciide0 at pci0 dev 7 function 1 "Intel 82371SB IDE" rev 0x00: DMA, channel 0 wired to compatibility, channel 1 wired to compatibility wd0 at pciide0 channel 0 drive 0: <QUANTUM FIREBALL_TM3840A> wd0: 16-sector PIO, LBA, 3681MB, 7480 cyl, 16 head, 63 sec, 7539840 sectors
wd0(pciide0:0:0): using PIO mode 4, DMA mode 2 atapiscsi0 at pciide0 channel 1 drive 0
scsibus0 at atapiscsi0: 2 targets
cd0 at scsibus0 targ 0 lun 0: <TOSHIBA, CD-ROM XM-5702B, 2826> SCSI0 5/cdrom removable
cd0(pciide0:1:0): using PIO mode 0, DMA mode 1 vga1 at pci0 dev 9 function 0 "ATI Mach64 GX" rev 0x03 wsdisplay0 at vga1: console (80x25, vt100 emulation) wsdisplay0: screen 1-5 added (80x25, vt100 emulation) rl0 at pci0 dev 12 function 0 "Accton Technology MPX 5030/5038" rev 0x10: irq 11 address 00:e0:29:51:ba:6e
rlphy0 at rl0 phy 0: RTL internal phy
isa0 at pcib0
isadma0 at isa0
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0 pcppi0 at isa0 port 0x61
midi0 at pcppi0: <PC speaker>
sysbeep0 at pcppi0
lpt0 at isa0 port 0x378/4 irq 7
npx0 at isa0 port 0xf0/16: using exception 16 pccom0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo pccom0: console
pccom1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo fdc0 at isa0 port 0x3f0/6 irq 6 drq 2
fd0 at fdc0 drive 0: 1.44MB 80 cyl, 2 head, 18 sec biomask c040 netmask c840 ttymask c8c2
pctr: 586-class performance counters and user-level cycle counter enabled dkcsum: wd0 matched BIOS disk 80
root on wd0a
rootdev=0x0 rrootdev=0x300 rawdev=0x302

if you need more info, let me know.

-f
http://www.blackant.net/ Received on Thu Nov 7 14:09:35 2002