GENERIC 7.0-CURRENT from Sep 6 20:49 UTC compiled without the "-o" flag, vmcore.23

panic: clist reservation botch

GDB: no debug ports present
KDB: debugger backends: ddb
KDB: current backend: ddb
Copyright (c) 1992-2005 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
        The Regents of the University of California. All rights reserved.
FreeBSD 7.0-CURRENT #1: Tue Sep  6 22:59:22 CEST 2005
    pho@crashbox.osted.lan:/usr/src/sys/i386/compile/PHO
WARNING: WITNESS option enabled, expect reduced performance.
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: Intel(R) XEON(TM) CPU 1.80GHz (1799.81-MHz 686-class CPU)
  Origin = "GenuineIntel"  Id = 0xf24  Stepping = 4
  Features=0x3febfbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM>
  Hyperthreading: 2 logical CPUs
real memory  = 1073676288 (1023 MB)
avail memory = 1036865536 (988 MB)
:
Trying to mount root from ufs:/dev/ad0s1a
fxp0: link state changed to UP
lock order reversal
 1st 0xc0acd260 UMA lock (UMA lock) @ vm/uma_core.c:1494
 2nd 0xc1460144 system map (system map) @ vm/vm_map.c:2317
KDB: stack backtrace:
kdb_backtrace(0,c096934b,698,0,ffffffff) at kdb_backtrace+0x2e
witness_checkorder(c1460144,9,c098891c,90d) at witness_checkorder+0x691
_mtx_lock_flags(c1460144,0,c0988913,90d) at _mtx_lock_flags+0x5e
_vm_map_lock(c14600c0,c0988913,90d) at _vm_map_lock+0x25
vm_map_remove(c14600c0,c3398000,c3399000) at vm_map_remove+0x18
kmem_free(c14600c0,c3398000,1000) at kmem_free+0x25
page_free(c3398000,1000,2) at page_free+0x3e
zone_drain(c2a325a0) at zone_drain+0x36f
zone_foreach(c08688d0) at zone_foreach+0x46
uma_reclaim(c06a9ddb,c26d12c0,0,c26d4a00,c06c97de) at uma_reclaim+0x12
vm_pageout_scan(0) at vm_pageout_scan+0x1a2
vm_pageout(0,e5563d38) at vm_pageout+0x312
fork_exit(c08818c8,0,e5563d38) at fork_exit+0xd8
fork_trampoline() at fork_trampoline+0x8
--- trap 0x1, eip = 0, esp = 0xe5563d6c, ebp = 0 ---
p7ppiid3 d452 101422 0(8c1r eoa4t )n,(  ucirde a1/0t0t1 mi)n,upm b:eur  i1o9u6d0 3t21  o0no 0/1tfm p :i ionuumtn boefo ridn oed7ess

4
7/3t4m
p :/ ocnr e/atttem/mspy:mpl i:nck  ofrauieltead ,o tnfoe  iin/ondseosy dfmrleeeink
s failed, no inodes free


/tmp: create/symlink failed, no inodes freea
nic: clist reservation botch
cpuid = 0
KDB: enter: panic
[thread pid 42077 tid 100476 ]
Stopped at      breakpoint+0x4: leave
db> where
Tracing pid 42077 tid 100476 td 0xc4ea2300
breakpoint(e7f416d0,c06b3a78,c0964ef2,0,296) at breakpoint+0x4
kdb_enter(c0964ef2) at kdb_enter+0x30
panic(c096c5ee,0,e7f41728,c06f7f54,c0a766e4) at panic+0x160
cblock_alloc(c0a766e4,0,c0968316,fa,c0a766e0) at cblock_alloc+0x1e
putc(2f,c2a4b838) at putc+0xe4
ttyoutput(2f,c2a4b800) at ttyoutput+0x235
tputchar(2f,c2a4b800) at tputchar+0x4f
putchar(2f,e7f4189c) at putchar+0x92
kvprintf(c0983e82,c06d496c,e7f4189c,a,e7f418c8) at kvprintf+0x948
uprintf(c0983e7f,c2a408d4) at uprintf+0x13f
ffs_valloc(c421bc3c,81b0,c2d42080,e7f4192c) at ffs_valloc+0x3b7
ufs_makeinode(81b0,c421bc3c,e7f41bb8,e7f41bcc) at ufs_makeinode+0x58
ufs_create(e7f41a88) at ufs_create+0x37
VOP_CREATE_APV(c0a12be0,e7f41a88) at VOP_CREATE_APV+0xbf
VOP_CREATE(c421bc3c,e7f41bb8,e7f41bcc,e7f41ae0) at VOP_CREATE+0x34
vn_open_cred(e7f41ba4,e7f41cc0,1b0,c2d42080,3) at vn_open_cred+0x1ea
vn_open(e7f41ba4,e7f41cc0,1b0,3) at vn_open+0x29
kern_open(c4ea2300,bfbfe8e0,0,602,1b0) at kern_open+0xd4
open(c4ea2300,e7f41cf0) at open+0x22
syscall(2805003b,bfbf003b,bfbf003b,28050288,bfbfeab0) at syscall+0x2cf
Xint0x80_syscall() at Xint0x80_syscall+0x1f
--- syscall (5, FreeBSD ELF32, open), eip = 0x2811c1c3, esp = 0xbfbfe8ac, ebp = 0xbfbfe8c8 ---
db> x panic_pid
panic_pid:      a45d
db> call doadump
Dumping 1023 MB (2 chunks)
  chunk 0: 1MB (159 pages) ... ok
  chunk 1: 1023MB (261872 pages) 1007 991 975 959 943 927 911 895 879 863 847 831 815 799 783 767 751 735 719 703 687 671 655 639 623 607 591 575 559 543 527 511 495 479 463 447 431 415 399 383 367 351 335 319 303 287 271 255 239 223 207 191 175 159 143 127 111 95 79 63 47 31 15 ... ok

Dump complete
= 0xf
db> reset

(kgdb) bt
#0  0xc06b3034 in doadump () at ../../../kern/kern_shutdown.c:235
#1  0xc0475d26 in db_fncall_generic (addr=0xc06b2ffc, rv=0xe7f4149c, nargs=0x0, args=0xe7f414a4) at ../../../ddb/db_command.c:486
#2  0xc0475c91 in db_fncall (dummy1=0xe7f41518, dummy2=0x0, dummy3=0x0, dummy4=0xe7f41504 "y\214\003")
    at ../../../ddb/db_command.c:537
#3  0xc0475a99 in db_command (last_cmdp=0xc0a221a4, cmd_table=0x0, aux_cmd_tablep=0xc099e6c8, aux_cmd_tablep_end=0xc099e6e4)
    at ../../../ddb/db_command.c:401
#4  0xc0475b63 in db_command_loop () at ../../../ddb/db_command.c:452
#5  0xc0477c36 in db_trap (type=0x3, code=0x0) at ../../../ddb/db_main.c:228
#6  0xc06d2729 in kdb_trap (type=0x3, code=0x0, tf=0xe7f41660) at ../../../kern/subr_kdb.c:473
#7  0xc08f83b1 in trap (frame=
      {tf_fs = 0xe7f40008, tf_es = 0xc06d0028, tf_ds = 0xc0960028, tf_edi = 0x28050288, tf_esi = 0xbfbfeab0, tf_ebp = 0xe7f416a0, tf_isp = 0xe7f4168c, tf_ebx = 0x28136448, tf_edx = 0xc1435ae8, tf_ecx = 0xa, tf_eax = 0x12, tf_trapno = 0x3, tf_err = 0x0, tf_eip = 0xc06d236c, tf_cs = 0x20, tf_eflags = 0x282, tf_esp = 0xe7f416a8, tf_ss = 0xc06d2364}) at ../../../i386/i386/trap.c:601
#8  0xc08e05aa in calltrap () at ../../../i386/i386/exception.s:139
#9  0xe7f40008 in ?? ()
#10 0xc06d0028 in devstat_new_entry (dev_name=0xe7f416d0, unit_number=0xc06b3a78, block_size=0xc0964ef2, flags=DEVSTAT_ALL_SUPPORTED,
    device_type=662, priority=DEVSTAT_PRIORITY_MIN) at ../../../kern/subr_devstat.c:75
#11 0xc06d2364 in kdb_enter (msg=0xc0964ef2 "panic") at ../../../kern/subr_kdb.c:268
#12 0xc06b3a78 in panic (fmt=0xc096c5ee "clist reservation botch") at ../../../kern/kern_shutdown.c:547
#13 0xc06f7a62 in cblock_alloc () at ../../../kern/tty_subr.c:104
#14 0xc06f7f54 in putc (chr=0x2f, clistp=0xc2a4b838) at ../../../kern/tty_subr.c:398
#15 0xc06eec2d in ttyoutput (c=0x2f, tp=0xc2a4b800) at ../../../kern/tty.c:760
#16 0xc06f2eaf in tputchar (c=0x2f, tp=0xc2a4b800) at ../../../kern/tty.c:2753
#17 0xc06d49fe in putchar (c=0x2f, arg=0xe7f4189c) at ../../../kern/subr_prf.c:341
#18 0xc06d5560 in kvprintf (fmt=0xc0983e82 ": create/symlink failed, no inodes free\n", func=0xc06d496c <putchar>, arg=0xe7f4189c,
    radix=0xa, ap=0xe7f418c8 "") at ../../../kern/subr_prf.c:685
#19 0xc06d4533 in uprintf (fmt=0xc0983e7f "\n%s: create/symlink failed, no inodes free\n") at ../../../kern/subr_prf.c:149
#20 0xc0834a13 in ffs_valloc (pvp=0xc421bc3c, mode=0x81b0, cred=0xc2d42080, vpp=0xe7f4192c) at ../../../ufs/ffs/ffs_alloc.c:957
#21 0xc086373c in ufs_makeinode (mode=0x81b0, dvp=0xc421bc3c, vpp=0xe7f41bb8, cnp=0xe7f41bcc) at ../../../ufs/ufs/ufs_vnops.c:2165
#22 0xc085fdcb in ufs_create (ap=0xe7f41a88) at ../../../ufs/ufs/ufs_vnops.c:171
#23 0xc090a34b in VOP_CREATE_APV (vop=0xc0a12be0, a=0xe7f41a88) at vnode_if.c:204
#24 0xc072c0d4 in VOP_CREATE (dvp=0xc421bc3c, vpp=0xe7f41bb8, cnp=0xe7f41bcc, vap=0xe7f41ae0) at vnode_if.h:112
#25 0xc072bc92 in vn_open_cred (ndp=0xe7f41ba4, flagp=0xe7f41cc0, cmode=0x1b0, cred=0xc2d42080, fdidx=0x3)
    at ../../../kern/vfs_vnops.c:150
#26 0xc072baa1 in vn_open (ndp=0xe7f41ba4, flagp=0xe7f41cc0, cmode=0x1b0, fdidx=0x3) at ../../../kern/vfs_vnops.c:91
#27 0xc0724910 in kern_open (td=0xc4ea2300, path=0xbfbfe8e0 <Address 0xbfbfe8e0 out of bounds>, pathseg=UIO_USERSPACE, flags=0x602,
    mode=0x1b0) at ../../../kern/vfs_syscalls.c:979
#28 0xc07247f2 in open (td=0xc4ea2300, uap=0xe7f41cf0) at ../../../kern/vfs_syscalls.c:945
#29 0xc08f8ea7 in syscall (frame=
      {tf_fs = 0x2805003b, tf_es = 0xbfbf003b, tf_ds = 0xbfbf003b, tf_edi = 0x28050288, tf_esi = 0xbfbfeab0, tf_ebp = 0xbfbfe8c8, tf_isp = 0xe7f41d64, tf_ebx = 0x28136448, tf_edx = 0xbfbfe8ec, tf_ecx = 0x0, tf_eax = 0x5, tf_trapno = 0x0, tf_err = 0x2, tf_eip = 0x2811c1c3, tf_cs = 0x33, tf_eflags = 0x216, tf_esp = 0xbfbfe8ac, tf_ss = 0x3b}) at ../../../i386/i386/trap.c:986
#30 0xc08e05ff in Xint0x80_syscall () at ../../../i386/i386/exception.s:200
(kgdb) f 13
#13 0xc06f7a62 in cblock_alloc () at ../../../kern/tty_subr.c:104
104                     panic("clist reservation botch");
(kgdb) l
99      {
100             struct cblock *cblockp;
101
102             cblockp = cfreelist;
103             if (cblockp == NULL)
104                     panic("clist reservation botch");
105             cfreelist = cblockp->c_next;
106             cblockp->c_next = NULL;
107             cfreecount -= CBSIZE;
108             return (cblockp);
(kgdb) up
#14 0xc06f7f54 in putc (chr=0x2f, clistp=0xc2a4b838) at ../../../kern/tty_subr.c:398
398                             cblockp = cblock_alloc();
(kgdb) info loc
prev = (struct cblock *) 0xc3682680
cblockp = (struct cblock *) 0xc3682700
s = 0x0
(kgdb) p *cblockp
$2 = {c_next = 0xc5049600, c_quote = '\0' <repeats 15 times>,
  c_info = "failed, no inodes free\r\r\ncreat: \r\r\n/tmp: ccreat(p42100.02309)\r\r\nr/etamtpe: 7/ scyrmelaitnek/ sfyamilliNo spa"}
(kgdb) p *prev
$3 = {c_next = 0x0, c_quote = '\0' <repeats 15 times>,
  c_info = "y\n /mfltaimipnlk:e d f,ca inloer di,ne anoodt eisneo/ dferssy efermele\r\r\n\r\r\nink failed, no inodes free\r\r\n\r\r\n"}
(kgdb) p cfreecount
$4 = 0x2325c
(kgdb) p cslushcount
$5 = 0x32
(kgdb) p ctotcount
$6 = 0x547
(kgdb) p *clistp
$7 = {c_cc = 0x72c, c_cbcount = 0x12, c_cbmax = 0x16, c_cbreserved = 0x16,
  c_cf = 0xc3682614 "\r\r\n/tmp: create/symlink failed, no ino\r\r\nd/etsm p\r\r\nf:/r tcemrpe:\r\r\n ceraetaet/es/ysmylmilnikn kf afialielde", c_cl = 0xc3682700 ""}