GENERIC 7.0-CURRENT from Aug 19 04:42 UTC, vmcore.0

Disk full page fault, as reported by others, in tty_subr.c:418

GDB: no debug ports present
KDB: debugger backends: ddb
KDB: current backend: ddb
Copyright (c) 1992-2005 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
        The Regents of the University of California. All rights reserved.
FreeBSD 7.0-CURRENT #2: Fri Aug 19 06:51:24 CEST 2005
    pho@crashbox.osted.lan:/usr/src/sys/i386/compile/PHO
WARNING: WITNESS option enabled, expect reduced performance.
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: Intel(R) XEON(TM) CPU 1.80GHz (1799.81-MHz 686-class CPU)
  Origin = "GenuineIntel"  Id = 0xf24  Stepping = 4
  Features=0x3febfbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM>
  Hyperthreading: 2 logical CPUs
real memory  = 1073676288 (1023 MB)
avail memory = 1041051648 (992 MB)
:
Trying to mount root from ufs:/dev/ad0s1a
fxp0: link state changed to UP
lock order reversal
 1st 0xc09b8a60 UMA lock (UMA lock) @ vm/uma_core.c:1494
 2nd 0xc1060144 system map (system map) @ vm/vm_map.c:2317
KDB: stack backtrace:
kdb_backtrace(0,ffffffff,c096d920,c096da60,c08c3c44) at kdb_backtrace+0x29
witness_checkorder(c1060144,9,c087983e,90d) at witness_checkorder+0x564
_mtx_lock_flags(c1060144,0,c0879835,90d) at _mtx_lock_flags+0x5b
_vm_map_lock(c10600c0,c0879835,90d) at _vm_map_lock+0x26
vm_map_remove(c10600c0,c2d86000,c2d87000,e51cdc0c,c0784e95) at vm_map_remove+0x1f
kmem_free(c10600c0,c2d86000,1000,e51cdc3c,c0784842) at kmem_free+0x25
page_free(c2d86000,1000,2) at page_free+0x29
zone_drain(c103d1e0) at zone_drain+0x26a
zone_foreach(c07845d8,e51cdcec,c07967eb,e51cdc74,246) at zone_foreach+0x37
uma_reclaim(e51cdc74,246,0,e51cdc80,c062c2bd) at uma_reclaim+0x12
vm_pageout_scan(0,c09b8ec0,0,c087ad56,604) at vm_pageout_scan+0x107
vm_pageout(0,e51cdd38,0,c0797644,0) at vm_pageout+0x2c3
fork_exit(c0797644,0,e51cdd38) at fork_exit+0xa0
fork_trampoline() at fork_trampoline+0x8
--- trap 0x1, eip = 0, esp = 0xe51cdd6c, ebp = 0 ---


Fatal trap 12: page fault while in kernel mode
cpuid = 2; apic id = 06
fault virtual address   = 0x0
fault code              = supervisor write, page not present
instruction pointer     = 0x20:0xc0668bfa
stack pointer           = 0x28:0xe51b878c
frame pointer           = 0x28:xe51b8798
code segment    = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, def32 1, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 541 (bsdtar)
[thread pid 541 tid 100109 ]
Stopped at      putc+0x16e:     movb    %dl,0(%eax)
db> where
Tracing pid 541 tid 100109 td 0xc2398000
putc(20,c2481838) at putc+0x16e
ttyoutput(20,c2481800,2,e51b88c4,e51b87e4) at ttyoutput+0x15c
tputchar(20,c2481800) at tputchar+0x2f
putchar(20,e51b88c4) at putchar+0x68
kvprintf(c0875437,c064d7b8,e51b88c4,a,e51b88ec) at kvprintf+0x77
uprintf(c0875437,c263a8d4,c263a800,7f61,c0875427) at uprintf+0xf3
ffs_realloccg(c32ca210,0,0,2ad7d,0) at ffs_realloccg+0x7a6
ffs_balloc_ufs2(c2ef2828,eba,0,1041,c2952780) at ffs_balloc_ufs2+0xd9f
ffs_write(e51b8bf4,0,0,c0803486,e51b8b48) at ffs_write+0x2ac
VOP_WRITE_APV(c08fdee0,e51b8bf4) at VOP_WRITE_APV+0x132
vn_write(c26dfca8,e51b8cbc,c2952780,0,c2398000) at vn_write+0x1ee
dofilewrite(c2398000,4,c26dfca8,e51b8cbc,ffffffff) at dofilewrite+0x77
kern_writev(c2398000,4,e51b8cbc,8063eba,1041) at kern_writev+0x3b
write(c2398000,e51b8d04,3,35a3,287) at write+0x45
syscall(bfbf003b,bfbf003b,bfbf003b,0,eba) at syscall+0x22f
Xint0x80_syscall() at Xint0x80_syscall+0x1f
--- syscall (4, FreeBSD ELF32, write), eip = 0x2816ab9b, esp = 0xbfbfe95c, ebp = 0xbfbfe9a8 ---
db> call doadump
Dumping 1023 MB (2 chunks)
  chunk 0: 1MB (159 pages) ... ok
  chunk 1: 1023MB (261872 pages) 1007 991 975 959 943 927 911 895 879 863 847 831 815 799 783 767 751 735 719 703 687 671 655 639 623 607 591 575 559 543 527 511 495 479 463 447 431 415 399 383 367 351 335 319 303 287 271 255 239 223 207 191 175 159 143 127 111 95 79 63 47 31 15 ... ok

Dump complete
= 0xf
db> reset

(kgdb) bt
#0  doadump () at pcpu.h:165
#1  0xc046966b in db_fncall (dummy1=0, dummy2=0, dummy3=0, dummy4=0xe51b85b0 "Ü\205\033åÌm}ÀÈ\205\033åÌ\205\033å\220\a")
    at ../../../ddb/db_command.c:486
#2  0xc0469470 in db_command (last_cmdp=0xc090d9e4, cmd_table=0x0, aux_cmd_tablep=0xc088a034, aux_cmd_tablep_end=0xc088a050)
    at ../../../ddb/db_command.c:401
#3  0xc0469538 in db_command_loop () at ../../../ddb/db_command.c:452
#4  0xc046b0dd in db_trap (type=12, code=0) at ../../../ddb/db_main.c:228
#5  0xc064bef4 in kdb_trap (type=12, code=0, tf=0xe51b874c) at ../../../kern/subr_kdb.c:473
#6  0xc07f46bc in trap_fatal (frame=0xe51b874c, eva=0) at ../../../i386/i386/trap.c:832
#7  0xc07f4403 in trap_pfault (frame=0xe51b874c, usermode=0, eva=0) at ../../../i386/i386/trap.c:752
#8  0xc07f404d in trap (frame=
      {tf_fs = 8, tf_es = -1030488024, tf_ds = -451215320, tf_edi = 52, tf_esi = -1035462600, tf_ebp = -451180648, tf_isp = -451180680, tf_ebx = -1023421696, tf_edx = 32, tf_ecx = 0, tf_eax = 0, tf_trapno = 12, tf_err = 2, tf_eip = -1067021318, tf_cs = 32, tf_eflags = 66118, tf_esp = 32, tf_ss = -1035462656}) at ../../../i386/i386/trap.c:442
#9  0xc07e1c8a in calltrap () at ../../../i386/i386/exception.s:139
#10 0x00000008 in ?? ()
#11 0xc2940028 in ?? ()
#12 0xe51b0028 in ?? ()
#13 0x00000034 in ?? ()
#14 0xc2481838 in ?? ()
#15 0xe51b8798 in ?? ()
#16 0xe51b8778 in ?? ()
#17 0xc2ffd300 in ?? ()
#18 0x00000020 in ?? ()
#19 0x00000000 in ?? ()
#20 0x00000000 in ?? ()
#21 0x0000000c in ?? ()
#22 0x00000002 in ?? ()
#23 0xc0668bfa in putc (chr=32, clistp=0xc2481838) at ../../../kern/tty_subr.c:418
#24 0xc066222c in ttyoutput (c=32, tp=0xc2481800) at ../../../kern/tty.c:760
#25 0xc0665287 in tputchar (c=32, tp=0xc2481800) at ../../../kern/tty.c:2753
#26 0xc064d820 in putchar (c=32, arg=0xe51b88c4) at ../../../kern/subr_prf.c:341
#27 0xc064da5f in kvprintf (fmt=0xc0875458 "full\n", func=0xc064d7b8 <putchar>, arg=0xe51b88c4, radix=10, ap=0xe51b88ec "")
    at ../../../kern/subr_prf.c:523
#28 0xc064d467 in uprintf (fmt=0xc0875437 "\n%s: write failed, filesystem is full\n") at ../../../kern/subr_prf.c:149
#29 0xc075ab36 in ffs_realloccg (ip=0xc32ca210, lbprev=0, bprev=175485, bpref=94096, osize=4096, nsize=8192, cred=0xc2952780,
    bpp=0xe51b8a10) at ../../../ufs/ffs/ffs_alloc.c:402
#30 0xc0760e43 in ffs_balloc_ufs2 (vp=0xc2ef2828, startoffset=Unhandled dwarf expression opcode 0x93
) at ../../../ufs/ffs/ffs_balloc.c:655
#31 0xc0775afc in ffs_write (ap=0xe51b8bf4) at ../../../ufs/ffs/ffs_vnops.c:662
#32 0xc0804176 in VOP_WRITE_APV (vop=0xc08fdee0, a=0xe51b8bf4) at vnode_if.c:698
#33 0xc0692e22 in vn_write (fp=0xc26dfca8, uio=0xe51b8cbc, active_cred=0xc2952780, flags=0, td=0xc2398000) at vnode_if.h:372
#34 0xc065793f in dofilewrite (td=0xc2398000, fd=4, fp=0xc26dfca8, auio=0xe51b8cbc, offset=Unhandled dwarf expression opcode 0x93
) at file.h:246
#35 0xc06577e3 in kern_writev (td=0xc2398000, fd=4, auio=0xe51b8cbc) at ../../../kern/sys_generic.c:402
#36 0xc0657709 in write (td=0xc2398000, uap=0x0) at ../../../kern/sys_generic.c:326
#37 0xc07f49ab in syscall (frame=
      {tf_fs = -1078001605, tf_es = -1078001605, tf_ds = -1078001605, tf_edi = 0, tf_esi = 3770, tf_ebp = -1077941848, tf_isp = -451179164, tf_ebx = 671701892, tf_edx = 0, tf_ecx = 134574080, tf_eax = 4, tf_trapno = 4260885, tf_err = 2, tf_eip = 672574363, tf_cs = 51, tf_eflags

(kgdb) f 23
#23 0xc0668bfa in putc (chr=32, clistp=0xc2481838) at ../../../kern/tty_subr.c:418
418             *clistp->c_cl++ = chr;
(kgdb) info loc
cblockp = (struct cblock *) 0xc2ffd300
(kgdb) p *clistp
$1 = {c_cc = 0, c_cbcount = 0, c_cbmax = 22, c_cbreserved = 22, c_cf = 0x0, c_cl = 0x0}
(kgdb) up
#24 0xc066222c in ttyoutput (c=32, tp=0xc2481800) at ../../../kern/tty.c:760
760             if (!ISSET(tp->t_lflag, FLUSHO) && putc(c, &tp->t_outq))
(kgdb) p *tp
$3 = {t_rawq = {c_cc = 0, c_cbcount = 0, c_cbmax = 77, c_cbreserved = 77, c_cf = 0x0, c_cl = 0x0}, t_rawcc = 0, t_canq = {c_cc = 0,
    c_cbcount = 0, c_cbmax = 77, c_cbreserved = 6, c_cf = 0x0, c_cl = 0x0}, t_cancc = 83, t_outq = {c_cc = 0, c_cbcount = 0,
    c_cbmax = 22, c_cbreserved = 22, c_cf = 0x0, c_cl = 0x0}, t_outcc = 2148109, t_line = 0, t_dev = 0xc2780b00, t_mdev = 0x0,
  t_devunit = 0, t_state = 131112, t_flags = 0, t_timeout = 300000, t_pgrp = 0xc26e8b00, t_session = 0xc294c900, t_sigio = 0x0, t_rsel = {
    si_thrlist = {tqe_next = 0x0, tqe_prev = 0x0}, si_thread = 0x0, si_note = {kl_list = {slh_first = 0x0},
      kl_lock = 0xc061c3b0 <knlist_mtx_lock>, kl_unlock = 0xc061c3cc <knlist_mtx_unlock>, kl_locked = 0xc061c3e8 <knlist_mtx_locked>,
      kl_lockarg = 0xc24819ec}, si_flags = 0}, t_wsel = {si_thrlist = {tqe_next = 0x0, tqe_prev = 0x0}, si_thread = 0x0, si_note = {
      kl_list = {slh_first = 0x0}, kl_lock = 0xc061c3b0 <knlist_mtx_lock>, kl_unlock = 0xc061c3cc <knlist_mtx_unlock>,
      kl_locked = 0xc061c3e8 <knlist_mtx_locked>, kl_lockarg = 0xc24819ec}, si_flags = 0}, t_termios = {c_iflag = 770, c_oflag = 3,
    c_cflag = 19200, c_lflag = 1487, c_cc = "\004ÿ\000\b\027\025\022\b\003\034\032\031\021\023\026\017\001\000ÿÿ", c_ispeed = 38400,
    c_ospeed = 38400}, t_init_in = {c_iflag = 11010, c_oflag = 3, c_cflag = 19200, c_lflag = 1483,
    c_cc = "\004ÿÿ\177\027\025\022\b\003\034\032\031\021\023\026\017\001\000\024ÿ", c_ispeed = 9600, c_ospeed = 9600}, t_init_out = {
    c_iflag = 11010, c_oflag = 3, c_cflag = 19200, c_lflag = 1483,
    c_cc = "\004ÿÿ\177\027\025\022\b\003\034\032\031\021\023\026\017\001\000\024ÿ", c_ispeed = 9600, c_ospeed = 9600}, t_lock_in = {
    c_iflag = 0, c_oflag = 0, c_cflag = 0, c_lflag = 0, c_cc = '\0' <repeats 19 times>, c_ispeed = 0, c_ospeed = 0}, t_lock_out = {
    c_iflag = 0, c_oflag = 0, c_cflag = 0, c_lflag = 0, c_cc = '\0' <repeats 19 times>, c_ispeed = 0, c_ospeed = 0}, t_winsize = {
    ws_row = 48, ws_col = 139, ws_xpixel = 992, ws_ypixel = 628}, t_sc = 0xc294a680, t_lsc = 0x0, t_column = 29, t_rocount = 0,
  t_rocol = 2, t_ififosize = 512, t_ihiwat = 7680, t_ilowat = 6720, t_ispeedwat = 0, t_ohiwat = 2052, t_olowat = 256, t_ospeedwat = 0,
  t_gen = 0, t_list = {tqe_next = 0xc24ff800, tqe_prev = 0xc2508ddc}, t_actout = 0, t_wopeners = 0, t_mtx = {mtx_object = {
      lo_class = 0xc08c3c44, lo_name = 0xc0861904 "tty", lo_type = 0xc0861904 "tty", lo_flags = 196608, lo_list = {tqe_next = 0xc29baba8,
        tqe_prev = 0xc29bad14}, lo_witness = 0xc096cb60}, mtx_lock = 4, mtx_recurse = 0}, t_refcnt = 3, t_hotchar = 0, t_dtr_wait = 3000,
  t_do_timestamp = 0, t_timestamp = {tv_sec = 0, tv_usec = 0}, t_pps = 0x0, t_oproc = 0xc0667c00 <ptsstart>,
  t_stop = 0xc0667ef0 <ptsstop>, t_param = 0, t_modem = 0, t_break = 0, t_ioctl = 0, t_open = 0, t_purge = 0, t_close = 0, t_cioctl = 0}
(kgdb) up
#25 0xc0665287 in tputchar (c=32, tp=0xc2481800) at ../../../kern/tty.c:2753
2753            (void)ttyoutput(c, tp);
(kgdb) l
2748                    splx(s);
2749                    return (-1);
2750            }
2751            if (c == '\n')
2752                    (void)ttyoutput('\r', tp);
2753            (void)ttyoutput(c, tp);
2754            ttstart(tp);
2755            splx(s);
2756            return (0);
2757    }
(kgdb) up
#26 0xc064d820 in putchar (c=32, arg=0xe51b88c4) at ../../../kern/subr_prf.c:341
341                             tputchar(c, tp);
(kgdb) up
#27 0xc064da5f in kvprintf (fmt=0xc0875458 "full\n", func=0xc064d7b8 <putchar>, arg=0xe51b88c4, radix=10, ap=0xe51b88ec "")
    at ../../../kern/subr_prf.c:523
523                             PCHAR(ch);
(kgdb) up
#28 0xc064d467 in uprintf (fmt=0xc0875437 "\n%s: write failed, filesystem is full\n") at ../../../kern/subr_prf.c:149
149             retval = kvprintf(fmt, putchar, &pca, 10, ap);