GENERIC HEAD from Mar 22 20:39 UTC, vmcore.245
GDB: no debug ports present
KDB: debugger backends: ddb
KDB: current backend: ddb
Copyright (c) 1992-2005 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
The Regents of the University of California. All rights reserved.
FreeBSD 6.0-CURRENT #0: Tue Mar 22 22:11:18 CET 2005
pho@current.osted.lan:/usr/src/sys/i386/compile/PHO
WARNING: WITNESS option enabled, expect reduced performance.
ACPI APIC Table: <A M I OEMAPIC >
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: Intel(R) Celeron(R) CPU 1.80GHz (1799.15-MHz 686-class CPU)
Origin = "GenuineIntel" Id = 0xf13 Stepping = 3
Features=0x3febfbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM>
real memory = 267583488 (255 MB)
avail memory = 252354560 (240 MB)
:
Trying to mount root from ufs:/dev/ad0s1a
WARNING: / was not properly dismounted
WARNING: /tmp was not properly dismounted
/tmp: mount pending error: blocks 1008 files 15230
WARNING: /usr was not properly dismounted
WARNING: /var was not properly dismounted
rl0: link state changed to DOWN
Memory modified after free 0xc2343d80(124) val=c2495a00 @ 0xc2343de4
panic: Most recently used by inodedep
cpuid = 0
KDB: enter: panic
[thread pid 9046 tid 100154 ]
Stopped at kdb_enter+0x2b: nop
db> where
Tracing pid 9046 tid 100154 td 0xc1d0c450
kdb_enter(c08339c5) at kdb_enter+0x2b
panic(c084d906,c084b9c1,c084d8d7,c2343d80,7c) at panic+0x14b
mtrash_ctor(c2343d80,80,0,402) at mtrash_ctor+0x4d
uma_zalloc_arg(c10526e0,0,402) at uma_zalloc_arg+0x14c
malloc(68,c08ce740,402,c096cf20,0) at malloc+0xae
inodedep_lookup(c1728800,181e8,1,cf44dbd8,c096cf20) at inodedep_lookup+0xa7
softdep_change_linkcnt(c1b218c4,c7930000,c6644620,c1b218c4,c17f0a00) at softdep_change_linkcnt+0x31
ufs_dirremove(c1c0fc80,c1b218c4,100800c,0,c08dddc0) at ufs_dirremove+0x11e
ufs_remove(cf44dc4c) at ufs_remove+0x43
VOP_REMOVE_APV(c08cf800,cf44dc4c) at VOP_REMOVE_APV+0x7e
kern_unlink(c1d0c450,bfbfe930,0,cf44dd40,c07cc7b3) at kern_unlink+0x167
unlink(c1d0c450,cf44dd14,1,100,296) at unlink+0x12
syscall(2804002f,bfbf002f,bfbf002f,2804f24c,bfbfeafc) at syscall+0x213
Xint0x80_syscall() at Xint0x80_syscall+0x1f
--- syscall (10, FreeBSD ELF32, unlink), eip = 0x280b6fdb, esp = 0xbfbfe91c, ebp = 0xbfbfe9c8 ---
db> x panic_pid
panic_pid: 2356
db> show pcpu
cpuid = 0
curthread = 0xc1d0c450: pid 9046 "creat"
curpcb = 0xcf44dda0
fpcurthread = none
idlethread = 0xc15225c0: pid 11 "idle: cpu0"
APIC ID = 0
currentldt = 0x30
spin locks held:
db> call doadump
Dumping 255 MB
16 32 48 64 80 96 112 128 144 160 176 192 208 224 240
Dump complete
0xf
db> reset
#11 0xc07674e1 in mtrash_ctor (mem=0xc2343d80, size=0x0, arg=0x0, flags=0x402) at ../../../vm/uma_dbg.c:136
#12 0xc0765de4 in uma_zalloc_arg (zone=0xc10526e0, udata=0x0, flags=0x402) at ../../../vm/uma_core.c:1855
#13 0xc060cd3e in malloc (size=0x70, type=0xc08ce740, flags=0x402) at uma.h:276
#14 0xc074981b in inodedep_lookup (fs=0xc1728800, inum=0x181e8, flags=0x1, inodedeppp=0xcf44dbd8) at ../../../ufs/ffs/ffs_softdep.c:1151
#15 0xc074ceb1 in softdep_change_linkcnt (ip=0xc1b218c4) at ../../../ufs/ffs/ffs_softdep.c:3310
#16 0xc075b5f2 in ufs_dirremove (dvp=0xc1c0fc80, ip=0xc1b218c4, flags=0x100800c, isrmdir=0x0) at ../../../ufs/ufs/ufs_lookup.c:1041
#17 0xc075e0e7 in ufs_remove (ap=0x0) at ../../../ufs/ufs/ufs_vnops.c:763
#18 0xc07dfd22 in VOP_REMOVE_APV (vop=0x0, a=0xcf44dc4c) at vnode_if.c:1075
#19 0xc066e7df in kern_unlink (td=0xc1d0c450, path=---Can't read userspace from dump, or kernel process---
) at vnode_if.h:563
#20 0xc066e676 in unlink (td=0xc1d0c450, uap=0x0) at ../../../kern/vfs_syscalls.c:1622
#21 0xc07cc7b3 in syscall (frame=
{tf_fs = 0x2804002f, tf_es = 0xbfbf002f, tf_ds = 0xbfbf002f, tf_edi = 0x2804f24c, tf_esi = 0xbfbfeafc, tf_ebp = 0xbfbfe9c8, tf_isp = 0xcf44dd74, tf_ebx = 0x1, tf_edx = 0xbfbfe93c, tf_ecx = 0x0, tf_eax = 0xa, tf_trapno = 0x0, tf_err = 0x2, tf_eip = 0x280b6fdb, tf_cs = 0x1f, tf_eflags = 0x296, tf_esp = 0xbfbfe91c, tf_ss = 0x2f}) at ../../../i386/i386/trap.c:951
#22 0xc07ba13f in Xint0x80_syscall () at ../../../i386/i386/exception.s:200
(kgdb) f 12
#12 0xc0765de4 in uma_zalloc_arg (zone=0xc10526e0, udata=0x0, flags=0x402) at ../../../vm/uma_core.c:1855
1855 if (zone->uz_ctor(item, zone->uz_keg->uk_size,
(kgdb) p *zone
$2 = {uz_name = 0xc07f907e "128", uz_lock = 0xc1064aa8, uz_keg = 0xc1064aa0, uz_link = {le_next = 0x0, le_prev = 0xc1064ad8},
uz_full_bucket = {lh_first = 0x0}, uz_free_bucket = {lh_first = 0x0}, uz_ctor = 0xc0767494 <mtrash_ctor>,
uz_dtor = 0xc07674f8 <mtrash_dtor>, uz_init = 0, uz_fini = 0, uz_allocs = 0x72b98, uz_fills = 0x0, uz_count = 0x80, uz_cpu = {{
uc_freebucket = 0x0, uc_allocbucket = 0xc1f1020c, uc_allocs = 0x25}}}
(kgdb) p *zone->uz_keg
$3 = {uk_link = {le_next = 0xc1064a00, le_prev = 0xc1064b40}, uk_lock = {mtx_object = {lo_class = 0xc0895a88, lo_name = 0xc07f907e "128",
lo_type = 0xc084d415 "UMA zone", lo_flags = 0x430000, lo_list = {tqe_next = 0xc1064b48, tqe_prev = 0xc1064a18},
lo_witness = 0xc0922e20}, mtx_lock = 0x4, mtx_recurse = 0x0}, uk_hash = {uh_slab_hash = 0x0, uh_hashsize = 0x0, uh_hashmask = 0x0},
uk_zones = {lh_first = 0xc10526e0}, uk_part_slab = {lh_first = 0xc2314f6c}, uk_free_slab = {lh_first = 0x0}, uk_full_slab = {
lh_first = 0xc2343f6c}, uk_recurse = 0x0, uk_align = 0x3, uk_pages = 0x320, uk_free = 0xa3b, uk_size = 0x80, uk_rsize = 0x80,
uk_maxpages = 0x0, uk_init = 0xc076751c <mtrash_init>, uk_fini = 0xc0767548 <mtrash_fini>, uk_allocf = 0xc0764f20 <page_alloc>,
uk_freef = 0xc076508c <page_free>, uk_obj = 0x0, uk_kva = 0x0, uk_slabzone = 0x0, uk_pgoff = 0xf6c, uk_ppera = 0x1, uk_ipers = 0x1e,
uk_flags = 0x10}