GENERIC 7.0-CURRENT from Aug 23 08:13 UTC, vmcore.1
GDB: no debug ports present
KDB: debugger backends: ddb
KDB: current backend: ddb
Copyright (c) 1992-2005 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
The Regents of the University of California. All rights reserved.
FreeBSD 7.0-CURRENT #1: Tue Aug 23 10:59:48 CEST 2005
pho@crashbox.osted.lan:/usr/src/sys/i386/compile/Generic
WARNING: WITNESS option enabled, expect reduced performance.
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: Intel(R) XEON(TM) CPU 1.80GHz (1799.81-MHz 686-class CPU)
Origin = "GenuineIntel" Id = 0xf24 Stepping = 4
Features=0x3febfbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM>
Hyperthreading: 2 logical CPUs
real memory = 1073676288 (1023 MB)
avail memory = 1041616896 (993 MB)
:
Trying to mount root from ufs:/dev/ad0s1a
fxp0: link state changed to UP
lock order reversal
1st 0xc09811e0 UMA lock (UMA lock) @ vm/uma_core.c:1494
2nd 0xc1060144 system map (system map) @ vm/vm_map.c:2317
KDB: stack backtrace:
kdb_backtrace(0,ffffffff,c0936140,c0936280,c08c0524) at kdb_backtrace+0x29
witness_checkorder(c1060144,9,c087658f,90d) at witness_checkorder+0x564
_mtx_lock_flags(c1060144,0,c0876586,90d) at _mtx_lock_flags+0x5b
_vm_map_lock(c10600c0,c0876586,90d) at _vm_map_lock+0x26
vm_map_remove(c10600c0,c533f000,c5340000,e5143c0c,c07837dd) at vm_map_remove+0x1f
kmem_free(c10600c0,c533f000,1000,e5143c3c,c078318a) at kmem_free+0x25
page_free(c533f000,1000,2) at page_free+0x29
zone_drain(c2632780) at zone_drain+0x26a
zone_foreach(c0782f20,e5143cec,c079510f,e5143c74,246) at zone_foreach+0x37
uma_reclaim(e5143c74,246,0,e5143c80,c062bdad) at uma_reclaim+0x12
vm_pageout_scan(0,c0981640,0,c0877aa7,604) at vm_pageout_scan+0x103
vm_pageout(0,e5143d38,0,c0795f64,0) at vm_pageout+0x2c3
fork_exit(c0795f64,0,e5143d38) at fork_exit+0xa0
fork_trampoline() at fork_trampoline+0x8
--- trap 0x1, eip = 0, esp = 0xe5143d6c, ebp = 0 ---
freebsd4_sigreturn: eflags = 0x0
freebsd4_sigreturn: eflags = 0x0
freebsd4_sigreturn: eflags = 0x0
freebsd4_sigreturn: eflags = 0x0
freebsd4_sigreturn: eflags = 0x0
sigreturn: eflags = 0x0
sigreturn: eflags = 0x0
sigreturn: eflags = 0x0
sigreturn: eflags = 0x0
sigreturn: eflags = 0x0
sigreturn: eflags = 0x0
panic: handle_disk_io_initiation: Unexpected type ???
cpuid = 0
KDB: enter: panic
[thread pid 59249 tid 100906 ]
Stopped at kdb_enter+0x2b: nop
db> where
Tracing pid 59249 tid 100906 td 0xc2da4a80
kdb_enter(c085b435) at kdb_enter+0x2b
panic(c08737dd,c083dbd3,deadc0de,d63b9040,c26baaa0) at panic+0x14b
softdep_disk_io_initiation(d63b9040) at softdep_disk_io_initiation+0x1bd
ffs_geom_strategy(c26bab60,d63b9040) at ffs_geom_strategy+0x32
bufwrite(d63b9040,0,0,e7bf5b88,c0760cc5) at bufwrite+0x146
ffs_bufwrite(d63b9040) at ffs_bufwrite+0x282
ffs_update(c457d330,0,c457d330,c276b800,1) at ffs_update+0x3a5
ufs_inactive(e7bf5bd8) at ufs_inactive+0x16c
VOP_INACTIVE_APV(c08fa740,e7bf5bd8) at VOP_INACTIVE_APV+0x7e
vinactive(c457d330,c2da4a80) at vinactive+0x72
vput(c457d330) at vput+0x154
kern_unlink(c2da4a80,bfbfe930,0,e7bf5d30,c07f329b) at kern_unlink+0x19e
unlink(c2da4a80,e7bf5d04,1,25,296) at unlink+0x12
syscall(3b,3b,3b,2804f288,bfbfeb04) at syscall+0x22f
Xint0x80_syscall() at Xint0x80_syscall+0x1f
--- syscall (10, FreeBSD ELF32, unlink), eip = 0x28118a1b, esp = 0xbfbfe91c, ebp = 0xbfbfe9c8 ---
db> show pcpu0
No such command
db> show pcpu 0
cpuid = 0
curthread = 0xc2da4a80: pid 59249 "creat"
curpcb = 0xe7bf5d90
fpcurthread = none
idlethread = 0xc22d7c00: pid 14 "idle: cpu0"
APIC ID = 0
currentldt = 0x50
spin locks held:
db> call doadump
Dumping 1023 MB (2 chunks)
chunk 0: 1MB (159 pages) ... ok
chunk 1: 1023MB (261872 pages) 1007 991 975 959 943 927 911 895 879 863 847 831 815 799 783 767 751 735 719 703 687 671 655 639 623 607 591 575 559 543 527 511 495 479 463 447 431 415 399 383 367 351 335 319 303 287 271 255 239 223 207 191 175 159 143 127 111 95 79 63 47 31 15 ... ok
Dump complete
= 0xf
db> reset
(kgdb) bt
#0 doadump () at pcpu.h:165
#1 0xc04693cb in db_fncall (dummy1=0x0, dummy2=0x0, dummy3=0x0, dummy4=0xe7bf5930 "\\Y¿ç¼V}ÀHY¿çLY¿ç\220\a")
at ../../../ddb/db_command.c:486
#2 0xc04691d0 in db_command (last_cmdp=0xc090a244, cmd_table=0x0, aux_cmd_tablep=0xc0886b00, aux_cmd_tablep_end=0xc0886b1c)
at ../../../ddb/db_command.c:401
#3 0xc0469298 in db_command_loop () at ../../../ddb/db_command.c:452
#4 0xc046ae39 in db_trap (type=0x3, code=0x0) at ../../../ddb/db_main.c:228
#5 0xc064b9b0 in kdb_trap (type=0x3, code=0x0, tf=0xe7bf5a74) at ../../../kern/subr_kdb.c:473
#6 0xc07f2ab0 in trap (frame=
{tf_fs = 0xe7bf0008, tf_es = 0xc0640028, tf_ds = 0xc0850028, tf_edi = 0xc08737dd, tf_esi = 0x1, tf_ebp = 0xe7bf5ab4, tf_isp = 0xe7bf5aa0, tf_ebx = 0xe7bf5ae0, tf_edx = 0x0, tf_ecx = 0xc1033000, tf_eax = 0x12, tf_trapno = 0x3, tf_err = 0x0, tf_eip = 0xc064b717, tf_cs = 0x20, tf_eflags = 0x296, tf_esp = 0xe7bf5ad4, tf_ss = 0xc0633af3}) at ../../../i386/i386/trap.c:601
#7 0xc07e057a in calltrap () at ../../../i386/i386/exception.s:139
#8 0xe7bf0008 in ?? ()
#9 0xc0640028 in do_unlock (td=0xc085b435, umtx=0x100, id=0xc2da4a80) at ../../../kern/kern_umtx.c:595
#10 0xc0633af3 in panic (fmt=0x296 <Address 0x296 out of bounds>) at ../../../kern/kern_shutdown.c:547
#11 0xc076c741 in softdep_disk_io_initiation (bp=0xd63b9040) at ../../../ufs/ffs/ffs_softdep.c:3614
#12 0xc0773aca in ffs_geom_strategy (bo=0xc26bab60, bp=0xd63b9040) at buf.h:422
#13 0xc067764e in bufwrite (bp=0xd63b9040) at buf.h:415
#14 0xc0773a8a in ffs_bufwrite (bp=0xd63b9040) at ../../../ufs/ffs/ffs_vfsops.c:1665
#15 0xc0760cc5 in ffs_update (vp=0xc457d330, waitfor=0x0) at buf.h:401
#16 0xc0778bfc in ufs_inactive (ap=0x0) at ../../../ufs/ufs/ufs_inode.c:118
#17 0xc08030a2 in VOP_INACTIVE_APV (vop=0x0, a=0xe7bf5bd8) at vnode_if.c:1535
#18 0xc06874ae in vinactive (vp=0xc457d330, td=0x0) at vnode_if.h:795
#19 0xc0687310 in vput (vp=0xc457d330) at ../../../kern/vfs_subr.c:2090
#20 0xc068c30a in kern_unlink (td=0xc2da4a80, path=0xbfbfe930 <Address 0xbfbfe930 out of bounds>, pathseg=UIO_USERSPACE)
at ../../../kern/vfs_syscalls.c:1683
#21 0xc068c16a in unlink (td=0xc2da4a80, uap=0x0) at ../../../kern/vfs_syscalls.c:1621
#22 0xc07f329b in syscall (frame=
{tf_fs = 0x3b, tf_es = 0x3b, tf_ds = 0x3b, tf_edi = 0x2804f288, tf_esi = 0xbfbfeb04, tf_ebp = 0xbfbfe9c8, tf_isp = 0xe7bf5d64, tf_ebx = 0x1, tf_edx = 0xbfbfe93c, tf_ecx = 0x0, tf_eax = 0xa, tf_trapno = 0x0, tf_err = 0x2, tf_eip = 0x28118a1b, tf_cs = 0x33, tf_eflags = 0x296, tf_esp = 0xbfbfe91c, tf_ss = 0x3b}) at ../../../i386/i386/trap.c:986
#23 0xc07e05cf in Xint0x80_syscall () at ../../../i386/i386/exception.s:200
(kgdb) f 11
#11 0xc076c741 in softdep_disk_io_initiation (bp=0xd63b9040) at ../../../ufs/ffs/ffs_softdep.c:3614
3614 panic("handle_disk_io_initiation: Unexpected type %s",
(kgdb) l
3609 case D_ALLOCDIRECT:
3610 case D_ALLOCINDIR:
3611 continue;
3612
3613 default:
3614 panic("handle_disk_io_initiation: Unexpected type %s",
3615 TYPENAME(wk->wk_type));
3616 /* NOTREACHED */
3617 }
3618 }
(kgdb) info loc
wk = (struct worklist *) 0x0
nextwk = (struct worklist *) 0xdeadc0de
indirdep = (struct indirdep *) 0xd63b9040
inodedep = (struct inodedep *) 0x0
(kgdb) p *indirdep
$1 = {ir_list = {wk_list = {le_next = 0xc26bab60, le_prev = 0x4000}, wk_type = 0x0, wk_state = 0x0},
ir_saveddata = 0xd7cb8000 "°\201\001", ir_savebp = 0x0, ir_donehd = {lh_first = 0x202}, ir_deplisthd = {lh_first = 0xbaac000}}
(kgdb) p *bp
$1 = {b_bufobj = 0xc26bab60, b_bcount = 0x4000, b_caller1 = 0x0, b_data = 0xd7cb8000 "°\201\001", b_error = 0x0, b_iocmd = 0x2,
b_ioflags = 0x2, b_iooffset = 0xbaac000, b_resid = 0x0, b_iodone = 0, b_blkno = 0x5d560, b_offset = 0xbaac000, b_bobufs = {
tqe_next = 0xd655b958, tqe_prev = 0xd63977a0}, b_left = 0xd6566e00, b_right = 0xd655b958, b_vflags = 0x0, b_freelist = {
tqe_next = 0xd64129f8, tqe_prev = 0xd65015ac}, b_qindex = 0x2, b_flags = 0xa0020020, b_xflags = 0x2, b_lock = {
lk_interlock = 0xc0924c28, lk_flags = 0x2040000, lk_sharecount = 0x0, lk_waitcount = 0x8, lk_exclusivecount = 0x1, lk_prio = 0x50,
lk_wmesg = 0xc0862f35 "getblk", lk_timo = 0x0, lk_lockholder = 0xc2da4a80, lk_newlock = 0x0}, b_bufsize = 0x4000,
b_runningbufspace = 0x4000, b_kvabase = 0xd7cb8000 "°\201\001", b_kvasize = 0x4000, b_lblkno = 0x5d560, b_vp = 0xc26baaa0,
b_dirtyoff = 0x0, b_dirtyend = 0x0, b_rcred = 0x0, b_wcred = 0x0, b_saveaddr = 0xd7cb8000, b_pager = {pg_reqpage = 0x0}, b_cluster = {
cluster_head = {tqh_first = 0xd64c31d8, tqh_last = 0xd63bcaa0}, cluster_entry = {tqe_next = 0xd64c31d8, tqe_prev = 0xd63bcaa0}},
b_pages = {0xc18f62b8, 0xc20f0100, 0xc1935348, 0xc1f91190, 0x0 <repeats 28 times>}, b_npages = 0x4, b_dep = {lh_first = 0xc4ff8180}}
(kgdb) p *(struct vnode *)0xc457d330
$2 = {v_type = VREG, v_tag = 0xc086238b "ufs", v_op = 0xc08fa740, v_data = 0xc49f14a4, v_mount = 0xc276b800, v_nmntvnodes = {
tqe_next = 0xc30d0110, tqe_prev = 0xc4e54344}, v_un = {vu_mount = 0x0, vu_socket = 0x0, vu_cdev = 0x0, vu_fifoinfo = 0x0},
v_hashlist = {le_next = 0x0, le_prev = 0xc25aaed0}, v_hash = 0x88d5, v_cache_src = {lh_first = 0x0}, v_cache_dst = {tqh_first = 0x0,
tqh_last = 0xc457d360}, v_dd = 0x0, v_cstart = 0x0, v_lasta = 0x0, v_lastw = 0x0, v_clen = 0x0, v_lock = {lk_interlock = 0xc092485c,
lk_flags = 0x40040, lk_sharecount = 0x0, lk_waitcount = 0x0, lk_exclusivecount = 0x1, lk_prio = 0x50, lk_wmesg = 0xc086238b "ufs",
lk_timo = 0x33, lk_lockholder = 0xc2da4a80, lk_newlock = 0x0}, v_interlock = {mtx_object = {lo_class = 0xc08c0524,
lo_name = 0xc085ecb9 "vnode interlock", lo_type = 0xc085ecb9 "vnode interlock", lo_flags = 0x30000, lo_list = {
tqe_next = 0xc30d018c, tqe_prev = 0xc4e543bc}, lo_witness = 0xc0936230}, mtx_lock = 0x4, mtx_recurse = 0x0},
v_vnlock = 0xc457d388, v_holdcnt = 0x1, v_usecount = 0x0, v_iflag = 0x800, v_vflag = 0x4, v_writecount = 0x0, v_freelist = {
tqe_next = 0xc44e6110, tqe_prev = 0xc3279c68}, v_bufobj = {bo_mtx = 0xc457d3ac, bo_clean = {bv_hd = {tqh_first = 0x0,
tqh_last = 0xc457d3f4}, bv_root = 0x0, bv_cnt = 0x0}, bo_dirty = {bv_hd = {tqh_first = 0x0, tqh_last = 0xc457d404},
bv_root = 0x0, bv_cnt = 0x0}, bo_numoutput = 0x0, bo_flag = 0x0, bo_ops = 0xc08c7444, bo_bsize = 0x4000, bo_object = 0xc56669cc,
bo_synclist = {le_next = 0x0, le_prev = 0x0}, bo_private = 0xc457d330, __bo_vnode = 0xc457d330}, v_pollinfo = 0x0, v_label = 0x0}
(kgdb) p bp->b_dep->lh_first
$11 = (struct worklist *) 0xc4ff8180
(kgdb) pworklist 0xc4ff8180
$1 = {wk_list = {le_next = 0xc3866480, le_prev = 0xd63b9184}, wk_type = 0x1, wk_state = 0x8601}
$2 = {wk_list = {le_next = 0xc4969280, le_prev = 0xc4ff8180}, wk_type = 0x1, wk_state = 0x8201}
$3 = {wk_list = {le_next = 0xc5177a80, le_prev = 0xc3866480}, wk_type = 0x1, wk_state = 0x8401}
$4 = {wk_list = {le_next = 0xc510bb80, le_prev = 0xc4969280}, wk_type = 0x1, wk_state = 0x8401}
$5 = {wk_list = {le_next = 0xc479d980, le_prev = 0xc5177a80}, wk_type = 0x1, wk_state = 0x8001}
$6 = {wk_list = {le_next = 0xc5177500, le_prev = 0xc510bb80}, wk_type = 0x1, wk_state = 0x8001}
$7 = {wk_list = {le_next = 0xc5f8b580, le_prev = 0xc479d980}, wk_type = 0x1, wk_state = 0x8001}
$8 = {wk_list = {le_next = 0xc5baa100, le_prev = 0xc5177500}, wk_type = 0x1, wk_state = 0x8001}
$9 = {wk_list = {le_next = 0xc5163a00, le_prev = 0xc5f8b580}, wk_type = 0x1, wk_state = 0x8401}
$10 = {wk_list = {le_next = 0xc3297600, le_prev = 0xc5baa100}, wk_type = 0x1, wk_state = 0x8001}
$11 = {wk_list = {le_next = 0xc3f6a600, le_prev = 0xc5163a00}, wk_type = 0x1, wk_state = 0x8001}
$12 = {wk_list = {le_next = 0xc46e1c80, le_prev = 0xc3297600}, wk_type = 0x1, wk_state = 0x8401}
$13 = {wk_list = {le_next = 0xc63f0180, le_prev = 0xc3f6a600}, wk_type = 0x1, wk_state = 0x8001}
$14 = {wk_list = {le_next = 0xc5d40980, le_prev = 0xc46e1c80}, wk_type = 0x1, wk_state = 0x8001}
$15 = {wk_list = {le_next = 0xc6426400, le_prev = 0xc63f0180}, wk_type = 0x1, wk_state = 0x8001}
$16 = {wk_list = {le_next = 0xc3122080, le_prev = 0xc5d40980}, wk_type = 0x1, wk_state = 0x8001}
$17 = {wk_list = {le_next = 0xc3817000, le_prev = 0xc6426400}, wk_type = 0x1, wk_state = 0x8001}
$18 = {wk_list = {le_next = 0xc4f14480, le_prev = 0xc3122080}, wk_type = 0x1, wk_state = 0x8401}
$19 = {wk_list = {le_next = 0xc30e7300, le_prev = 0xc3817000}, wk_type = 0x1, wk_state = 0x8001}
$20 = {wk_list = {le_next = 0xc5c35a80, le_prev = 0xc4f14480}, wk_type = 0x1, wk_state = 0x8001}
$21 = {wk_list = {le_next = 0xc6009d80, le_prev = 0xc30e7300}, wk_type = 0x1, wk_state = 0x8001}
$22 = {wk_list = {le_next = 0x0, le_prev = 0xc5c35a80}, wk_type = 0x1, wk_state = 0x8001}