GENERIC HEAD from Jan 15 11:21 UTC + jhb@'s spinlock.patch, vmcore.144
GDB: no debug ports present
KDB: debugger backends: ddb
KDB: current backend: ddb
Copyright (c) 1992-2005 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
The Regents of the University of California. All rights reserved.
FreeBSD 6.0-CURRENT #0: Sat Jan 15 13:02:23 CET 2005
pho@current.osted.lan:/usr/src/sys/i386/compile/PHO
WARNING: WITNESS option enabled, expect reduced performance.
ACPI APIC Table: <A M I OEMAPIC >
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: Intel(R) Celeron(R) CPU 1.80GHz (1799.14-MHz 686-class CPU)
Origin = "GenuineIntel" Id = 0xf13 Stepping = 3
Features=0x3febfbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM>
real memory = 267583488 (255 MB)
avail memory = 252448768 (240 MB)
:
mount root from ufs:/dev/ad0s1a
freebsd4_sigreturn: eflags = 0x0
freebsd4_sigreturn: eflags = 0x0
:
freebsd4_sigreturn: eflags = 0x0
freebsd4_sigreturn: eflags = 0x0
dev = ad0s1e, block = 386872, fs = /tmp
panic: ffs_blkfree: freeing free block
cpuid = 0
KDB: enter: panic
[thread pid 56 tid 100077 ]
Stopped at kdb_enter+0x2c: leave
db> where
Tracing pid 56 tid 100077 td 0xc1759a10
kdb_enter(c0823373,100,c1759a10,16f940,523) at kdb_enter+0x2c
panic(c0838cff,c0838cdf,c173a880,5e738,0) at panic+0x190
ffs_blkfree(c1789800,c17b533c,5e738,0,4000) at ffs_blkfree+0x390
indir_trunc(174760,0,0,c,0,ce769c4c) at indir_trunc+0x1bf
handle_workitem_freeblocks(0,0,0,73,0) at handle_workitem_freeblocks+0x2e6
process_worklist_item(41ea3a6c,0,0,c16a3708,c16a370c) at process_worklist_item+0x1c0
softdep_process_worklist(0,8e,41ea3a6c,1,0) at softdep_process_worklist+0x6a
sched_sync(0,ce769d48,0,c0661de4,0) at sched_sync+0x4b0
fork_exit(c0661de4,0,ce769d48) at fork_exit+0x79
fork_trampoline() at fork_trampoline+0x8
--- trap 0x1, eip = 0, esp = 0xce769d7c, ebp = 0 ---
db> show pcpu
cpuid = 0
curthread = 0xc1759a10: pid 56 "syncer"
curpcb = 0xce769da0
fpcurthread = none
idlethread = 0xc151f5c0: pid 11 "idle: cpu0"
APIC ID = 0
currentldt = 0x28
spin locks held:
db> call doadump
Dumping 255 MB
16 32 48 64 80 96 112 128 144 160 176 192 208 224 240
Dump complete
0x1d
db> reset
(kgdb) bt
#0 doadump () at pcpu.h:159
#1 0xc04652d6 in db_fncall (dummy1=0xc0628484, dummy2=0x0, dummy3=0xffffffff, dummy4=0xce76998c "") at ../../../ddb/db_command.c:531
#2 0xc046566c in db_command_loop () at ../../../ddb/db_command.c:349
#3 0xc0467098 in db_trap (type=0x3, code=0x0) at ../../../ddb/db_main.c:228
#4 0xc062884a in kdb_trap (type=0x3, code=0x0, tf=0xce769ab4) at ../../../kern/subr_kdb.c:421
#5 0xc07b68bc in trap (frame=
{tf_fs = 0xce760018, tf_es = 0xc0620010, tf_ds = 0xc0820010, tf_edi = 0xc0838cff, tf_esi = 0x1, tf_ebp = 0xce769af4, tf_isp = 0xce769ae0, tf_ebx = 0xce769b20, tf_edx = 0xc0823373, tf_ecx = 0xc08e8200, tf_eax = 0xc082550d, tf_trapno = 0x3, tf_err = 0x0, tf_eip = 0xc0628484, tf_cs = 0x8, tf_eflags = 0x286, tf_esp = 0xce769b14, tf_ss = 0xc0610a54}) at ../../../i386/i386/trap.c:573
#6 0xc07a51aa in calltrap () at ../../../i386/i386/exception.s:139
#7 0xce760018 in ?? ()
#8 0xc0620010 in MD5Transform (state=0x1, block=0x0) at ../../../kern/md5c.c:311
#9 0xc0610a54 in panic (fmt=---Can't read userspace from dump, or kernel process---
) at ../../../kern/kern_shutdown.c:548
#10 0xc0732710 in ffs_blkfree (fs=0xc1789800, devvp=0xc17b533c, bno=0x5e738, size=0x4000, inum=0x174af) at ../../../ufs/ffs/ffs_alloc.c:1791
#11 0xc0740ddb in indir_trunc (freeblks=0xc277c500, dbn=0x174760, level=0x0, lbn=0xc, countp=0xce769c4c)
at ../../../ufs/ffs/ffs_softdep.c:2626
#12 0xc07411fe in handle_workitem_freeblocks (freeblks=0xc277c500, flags=0x0) at ../../../ufs/ffs/ffs_softdep.c:2481
#13 0xc0743268 in process_worklist_item (matchmnt=0x0, flags=0x0) at ../../../ufs/ffs/ffs_softdep.c:757
#14 0xc0745d86 in softdep_process_worklist (matchmnt=0x0) at ../../../ufs/ffs/ffs_softdep.c:623
#15 0xc0662294 in sched_sync () at ../../../kern/vfs_subr.c:1594
#16 0xc05fe135 in fork_exit (callout=0xc0661de4 <sched_sync>, arg=0x0, frame=0xce769d48) at ../../../kern/kern_fork.c:788
#17 0xc07a520c in fork_trampoline () at ../../../i386/i386/exception.s:208
(kgdb) f 10
#10 0xc0732710 in ffs_blkfree (fs=0xc1789800, devvp=0xc17b533c, bno=0x5e738, size=0x4000, inum=0x174af) at ../../../ufs/ffs/ffs_alloc.c:1791
1791 panic("ffs_blkfree: freeing free frag");
(kgdb) l
1786 for (i = 0; i < frags; i++) {
1787 if (isset(blksfree, cgbno + i)) {
1788 printf("dev = %s, block = %jd, fs = %s\n",
1789 devtoname(dev), (intmax_t)(bno + i),
1790 fs->fs_fsmnt);
1791 panic("ffs_blkfree: freeing free frag");
1792 }
1793 setbit(blksfree, cgbno + i);
1794 }
1795 cgp->cg_cs.cs_nffree += i;
(kgdb) info loc
cgp = (struct cg *) 0xc861a000
bp = (struct buf *) 0xc66774c0
fragno = 0x523
cgbno = 0x2918
cgblkno = Unhandled dwarf expression opcode 0x93