From rowi@free.de Thu Oct 4 16:07:03 2007 Return-Path: Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 16BDE16A41B for ; Thu, 4 Oct 2007 16:07:03 +0000 (UTC) (envelope-from rowi@free.de) Received: from smtp.free.de (smtp.free.de [193.28.225.103]) by mx1.freebsd.org (Postfix) with ESMTP id B16AE13C45A for ; Thu, 4 Oct 2007 16:07:00 +0000 (UTC) (envelope-from rowi@free.de) Received: (qmail 38190 invoked by uid 98); 4 Oct 2007 17:40:17 +0200 Received: from 193.28.225.103 by smtp.free.de (envelope-from , uid 82) with qmail-scanner-1.25 (clamdscan: 0.90.1/3618. Clear:RC:1(193.28.225.103):. Processed in 2.531456 secs); 04 Oct 2007 15:40:17 -0000 Received: from smtp.free.de (HELO peanuts.homenet.local) (peanuts@[193.28.225.103]) (envelope-sender ) by smtp.free.de (qmail-ldap-1.03) with AES256-SHA encrypted SMTP for ; 4 Oct 2007 17:40:15 +0200 Received: from peanuts.homenet.local (rowi@localhost [127.0.0.1]) by peanuts.homenet.local (8.14.1/8.14.1) with ESMTP id l94Fe9jc065167 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Thu, 4 Oct 2007 17:40:10 +0200 (CEST) (envelope-from rowi@peanuts.homenet.local) Received: (from rowi@localhost) by peanuts.homenet.local (8.14.1/8.14.1/Submit) id l94Fe9mP065166; Thu, 4 Oct 2007 17:40:09 +0200 (CEST) (envelope-from rowi) Message-Id: <200710041540.l94Fe9mP065166@peanuts.homenet.local> Date: Thu, 4 Oct 2007 17:40:09 +0200 (CEST) From: Rolf Witt Reply-To: Rolf Witt To: FreeBSD-gnats-submit@freebsd.org Cc: Subject: panic: ffs_blkfree: freeing free block X-Send-Pr-Version: 3.113 X-GNATS-Notify: >Number: 116913 >Category: kern >Synopsis: [ffs] [panic] ffs_blkfree: freeing free block >Confidential: no >Severity: serious >Priority: high >Responsible: freebsd-fs >State: closed >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Thu Oct 04 16:10:07 GMT 2007 >Closed-Date: Wed Aug 04 15:41:06 UTC 2010 >Last-Modified: Wed Aug 04 15:41:06 UTC 2010 >Originator: Rolf Witt >Release: FreeBSD 7.0-CURRENT i386 >Organization: >Environment: System: FreeBSD peanuts.homenet.local 7.0-CURRENT FreeBSD 7.0-CURRENT #115: Tue Oct 2 18:43:04 CEST 2007 rowi@peanuts.homenet.local:/usr/obj/usr/src/sys/PEANUTS i386 older PIII Maschine, Sourcen from builddate. Kernconf: # # GENERIC -- Generic kernel configuration file for FreeBSD/i386 # # For more information on this file, please read the handbook section on # Kernel Configuration Files: # # http://www.FreeBSD.org/doc/en_US.ISO8859-1/books/handbook/kernelconfig-conf ig.html # # The handbook is also available locally in /usr/share/doc/handbook # if you've installed the doc distribution, otherwise always see the # FreeBSD World Wide Web server (http://www.FreeBSD.org/) for the # latest information. # # An exhaustive list of options and more detailed explanations of the # device lines is also present in the ../../conf/NOTES and NOTES files. # If you are in doubt as to the purpose or necessity of a line, check first # in NOTES. # # $FreeBSD: src/sys/i386/conf/GENERIC,v 1.429.2.3.2.1 2005/10/28 19:22:41 jhb Ex p $ machine i386 cpu I686_CPU ident PEANUTS # To statically compile in device wiring instead of /boot/device.hints #hints "GENERIC.hints" # Default places to look for devices. makeoptions DEBUG=-g # Build kernel with gdb(1) debug symbols options SCHED_ULE # ULE scheduler # options SCHED_4BSD # 4BSD scheduler options PREEMPTION # Enable kernel thread preemption options INET # InterNETworking options INET6 # IPv6 communications protocols options SCTP # Stream Control Transmission Protocol options FFS # Berkeley Fast Filesystem options SOFTUPDATES # Enable FFS soft updates support options UFS_ACL # Support for access control lists options UFS_DIRHASH # Improve performance on big directories options UFS_GJOURNAL # Enable gjournal-based UFS journaling options MD_ROOT # MD is a potential root device options NFSCLIENT # Network Filesystem Client options NFSSERVER # Network Filesystem Server options NFS_ROOT # NFS usable as /, requires NFSCLIENT # options SMBFS # options NETSMBCRYPTO options MSDOSFS # MSDOS Filesystem options CD9660 # ISO 9660 Filesystem options PROCFS # Process filesystem (requires PSEUDOFS) options PSEUDOFS # Pseudo-filesystem framework options GEOM_PART_GPT # GUID Partition Tables. options GEOM_LABEL # Provides labelization options COMPAT_43 # Compatible with BSD 4.3 [KEEP THIS!] options COMPAT_FREEBSD4 # Compatible with FreeBSD4 options COMPAT_FREEBSD5 # Compatible with FreeBSD5 options COMPAT_FREEBSD6 # Compatible with FreeBSD6 options SCSI_DELAY=5000 # Delay (in ms) before probing SCSI options KTRACE # ktrace(1) support options SYSVSHM # SYSV-style shared memory options SYSVMSG # SYSV-style message queues options SYSVSEM # SYSV-style semaphores options _KPOSIX_PRIORITY_SCHEDULING # POSIX P1003_1B real-time extensions options KBD_INSTALL_CDEV # install a CDEV entry in /dev # options AHC_REG_PRETTY_PRINT # Print register bitfields in debug # output. Adds ~128k to driver. # options AHD_REG_PRETTY_PRINT # Print register bitfields in debug # output. Adds ~215k to driver. options ADAPTIVE_GIANT # Giant mutex is adaptive. options STOP_NMI # Stop CPUS using NMI instead of IPI device apic # I/O APIC # CPU frequency control device cpufreq # Bus support. #device eisa device pci # Floppy drives device fdc # ATA and ATAPI devices device ata device atadisk # ATA disk drives #device ataraid # ATA RAID drives device atapicd # ATAPI CDROM drives #device atapifd # ATAPI floppy drives #device atapist # ATAPI tape drives options ATA_STATIC_ID # Static device numbering # SCSI Controllers #device ahb # EISA AHA1742 family device ahc # AHA2940 and onboard AIC7xxx devices #device ahd # AHA39320/29320 and onboard AIC79xx devices #device amd # AMD 53C974 (Tekram DC-390(T)) #device isp # Qlogic family ##device ispfw # Firmware for QLogic HBAs- normally a module #device mpt # LSI-Logic MPT-Fusion #device ncr # NCR/Symbios Logic device sym # NCR/Symbios Logic (newer chipsets + those of `ncr') #device trm # Tekram DC395U/UW/F DC315U adapters #device adv # Advansys SCSI adapters #device adw # Advansys wide SCSI adapters #device aha # Adaptec 154x SCSI adapters #device aic # Adaptec 15[012]x SCSI adapters, AIC-6[23]60. #device bt # Buslogic/Mylex MultiMaster SCSI adapters #device ncv # NCR 53C500 #device nsp # Workbit Ninja SCSI-3 #device stg # TMC 18C30/18C50 # SCSI peripherals device scbus # SCSI bus (required for SCSI) device ch # SCSI media changers device da # Direct Access (disks) #device sa # Sequential Access (tape etc) device cd # CD device pass # Passthrough device (direct SCSI access) device ses # SCSI Environmental Services (and SAF-TE) # RAID controllers interfaced to the SCSI subsystem #device amr # AMI MegaRAID #device arcmsr # Areca SATA II RAID #device asr # DPT SmartRAID V, VI and Adaptec SCSI RAID #device ciss # Compaq Smart RAID 5* #device dpt # DPT Smartcache III, IV - See NOTES for options #device hptmv # Highpoint RocketRAID 182x #device iir # Intel Integrated RAID #device ips # IBM (Adaptec) ServeRAID #device mly # Mylex AcceleRAID/eXtremeRAID #device twa # 3ware 9000 series PATA/SATA RAID # RAID controllers #device aac # Adaptec FSA RAID #device aacp # SCSI passthrough for aac (requires CAM) #device ida # Compaq Smart RAID #device mlx # Mylex DAC960 family #device pst # Promise Supertrak SX6000 #device twe # 3ware ATA RAID # atkbdc0 controls both the keyboard and the PS/2 mouse device atkbdc # AT keyboard controller device atkbd # AT keyboard device psm # PS/2 mouse device vga # VGA video card driver device splash # Splash screen and screen saver support # syscons is the default console driver, resembling an SCO console device sc # Enable this for the pcvt (VT220 compatible) console driver #device vt #options XSERVER # support for X server on a vt console #options FAT_CURSOR # start with block cursor device agp # support several AGP chipsets # Power management support (see NOTES for more options) # device apm # Add suspend/resume support for the i8254. # device pmtimer # PCCARD (PCMCIA) support # PCMCIA and cardbus bridge support #device cbb # cardbus (yenta) bridge #device pccard # PC Card (16-bit) bus #device cardbus # CardBus (32-bit) bus # Serial (COM) ports device sio # 8250, 16[45]50 based serial ports device uart # Generic UART driver # Parallel port device ppc device ppbus # Parallel port bus (required) device lpt # Printer device plip # TCP/IP over parallel device ppi # Parallel port interface device #device vpo # Requires scbus and da # If you've got a "dumb" serial or parallel PCI card that is # supported by the puc(4) glue driver, uncomment the following # line to enable it (connects to the sio and/or ppc drivers): #device puc # PCI Ethernet NICs. #device de # DEC/Intel DC21x4x (``Tulip'') device em # Intel PRO/1000 adapter Gigabit Ethernet Card #device ixgb # Intel PRO/10GbE Ethernet Card #device txp # 3Com 3cR990 (``Typhoon'') #device vx # 3Com 3c590, 3c595 (``Vortex'') # PCI Ethernet NICs that use the common MII bus controller code. # NOTE: Be sure to keep the 'device miibus' line in order to use these NICs! device miibus # MII bus support #device bfe # Broadcom BCM440x 10/100 Ethernet #device bge # Broadcom BCM570xx Gigabit Ethernet #device dc # DEC/Intel 21143 and various workalikes #device fxp # Intel EtherExpress PRO/100B (82557, 82558) #device lge # Level 1 LXT1001 gigabit Ethernet #device nge # NatSemi DP83820 gigabit Ethernet #device nve # nVidia nForce MCP on-board Ethernet Networking #device pcn # AMD Am79C97x PCI 10/100(precedence over 'lnc') device re # RealTek 8139C+/8169/8169S/8110S #device rl # RealTek 8129/8139 #device sf # Adaptec AIC-6915 (``Starfire'') #device sis # Silicon Integrated Systems SiS 900/SiS 7016 #device sk # SysKonnect SK-984x & SK-982x gigabit Ethernet #device ste # Sundance ST201 (D-Link DFE-550TX) #device ti # Alteon Networks Tigon I/II gigabit Ethernet #device tl # Texas Instruments ThunderLAN #device tx # SMC EtherPower II (83c170 ``EPIC'') #device vge # VIA VT612x gigabit Ethernet #device vr # VIA Rhine, Rhine II #device wb # Winbond W89C840F device xl # 3Com 3c90x (``Boomerang'', ``Cyclone'') # ISA Ethernet NICs. pccard NICs included. #device cs # Crystal Semiconductor CS89x0 NIC # 'device ed' requires 'device miibus' #device ed # NE[12]000, SMC Ultra, 3c503, DS8390 cards #device ex # Intel EtherExpress Pro/10 and Pro/10+ #device ep # Etherlink III based cards #device fe # Fujitsu MB8696x based cards #device ie # EtherExpress 8/16, 3C507, StarLAN 10 etc. #device lnc # NE2100, NE32-VL Lance Ethernet cards #device sn # SMC's 9000 series of Ethernet chips #device xe # Xircom pccard Ethernet # ISA devices that use the old ISA shims #device le # Wireless NIC cards #device wlan # 802.11 support #device an # Aironet 4500/4800 802.11 wireless NICs. #device awi # BayStack 660 and others #device ral # Ralink Technology RT2500 wireless NICs. #device wi # WaveLAN/Intersil/Symbol 802.11 wireless NICs. #device wl # Older non 802.11 Wavelan wireless NIC. # Pseudo devices. device loop # Network loopback device random # Entropy device device ether # Ethernet support #device sl # Kernel SLIP #device ppp # Kernel PPP device tun # Packet tunnel. device pty # Pseudo-ttys (telnet etc) device md # Memory "disks" device gif # IPv6 and IPv4 tunneling device faith # IPv6-to-IPv4 relaying (translation) device firmware # firmware assist module # The `bpf' device enables the Berkeley Packet Filter. # Be aware of the administrative consequences of enabling this! # Note that 'bpf' is required for DHCP. device bpf # Berkeley packet filter # USB support device uhci # UHCI PCI->USB interface device ohci # OHCI PCI->USB interface device ehci # EHCI PCI->USB interface (USB 2.0) device usb # USB Bus (required) #device udbp # USB Double Bulk Pipe devices device ugen # Generic device uhid # "Human Interface Devices" device ukbd # Keyboard device ulpt # Printer device umass # Disks/Mass storage - Requires scbus and da device ums # Mouse #device ural # Ralink Technology RT2500USB wireless NICs #device urio # Diamond Rio 500 MP3 player device uscanner # Scanners # USB Ethernet, requires miibus #device aue # ADMtek USB Ethernet #device axe # ASIX Electronics USB Ethernet #device cdce # Generic USB over Ethernet #device cue # CATC USB Ethernet #device kue # Kawasaki LSI USB Ethernet #device rue # RealTek RTL8150 USB Ethernet # FireWire support #device firewire # FireWire bus code #device sbp # SCSI over FireWire (Requires scbus and da) #device fwe # Ethernet over FireWire (non-standard!) # options TCP_DROP_SYNFIN maxusers 0 options SUIDDIR device acpi device drm device mgadrm device radeondrm options DEVICE_POLLING device sppp # AVM Fritz PCI device ifpi # protocol stack device "i4bq921" device "i4bq931" device "i4b" # control devices device "i4btrc" options NI4BTRC=4 device "i4bctl" device "i4brbch" options NI4BRBCH=4 device "i4btel" options NI4BTEL=2 # IP over raw HDLC # options IPR_VJ # device "i4bipr" # options NI4BIPR=4 # kernel sppp/isppp # device "i4bisppp" # options NI4BISPPP=4 ## Netgraph interface ##options NETGRAPH ##device "i4bing" 4 device sound device snd_solo device snd_emu10k1 # options VESA # options SC_PIXEL_MODE # # options HZ=2000 options HZ=1000 # options IPFIREWALL # options IPFIREWALL_VERBOSE # options IPFIREWALL_VERBOSE_LIMIT=100 options IPFIREWALL_FORWARD #enable transparent proxy support options IPFIREWALL_VERBOSE_LIMIT=100 #limit verbosity # options IPFIREWALL # options IPFIREWALL_VERBOSE # options IPFIREWALL_VERBOSE_LIMIT=100 options IPFIREWALL_FORWARD #enable transparent proxy support options IPFIREWALL_VERBOSE_LIMIT=100 #limit verbosity options IPFIREWALL_DEFAULT_TO_ACCEPT # options ATKBD_DFLT_KEYMAP makeoptions ATKBD_DFLT_KEYMAP="german.iso" # options AUTO_EOI_1 options IPDIVERT # options CPU_SUSP_HLT options CPU_FASTER_5X86_FPU # options CPU_UPGRADE_HW_CACHE device atapicam options ACCEPT_FILTER_HTTP # options CLK_CALIBRATION_LOOP # options CLK_USE_I8254_CALIBRATION options NULLFS demesg output: Copyright (c) 1992-2007 The FreeBSD Project. Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 The Regents of the University of California. All rights reserved. FreeBSD is a registered trademark of The FreeBSD Foundation. FreeBSD 7.0-CURRENT #115: Tue Oct 2 18:43:04 CEST 2007 rowi@peanuts.homenet.local:/usr/obj/usr/src/sys/PEANUTS Timecounter "i8254" frequency 1193182 Hz quality 0 CPU: Pentium III/Pentium III Xeon/Celeron (548.32-MHz 686-class CPU) Origin = "GenuineIntel" Id = 0x673 Stepping = 3 Features=0x383f9ff real memory = 671076352 (639 MB) avail memory = 647245824 (617 MB) acpi0: on motherboard acpi0: [ITHREAD] acpi0: Power Button (fixed) Timecounter "ACPI-safe" frequency 3579545 Hz quality 850 acpi_timer0: <24-bit timer at 3.579545MHz> port 0xf0c8-0xf0cb on acpi0 cpu0: on acpi0 acpi_button0: on acpi0 pcib0: port 0xcf8-0xcff on acpi0 pci0: on pcib0 agp0: on hostb0 pcib1: at device 1.0 on pci0 pci1: on pcib1 vgapci0: port 0x2800-0x28ff mem 0xe0000000-0xefffffff,0xfece0000-0xfeceffff irq 11 at device 0.0 on pci1 drm0: on vgapci0 info: [drm] AGP at 0xf8000000 64MB info: [drm] Initialized radeon 1.25.0 20060524 isab0: at device 7.0 on pci0 isa0: on isab0 atapci0: port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0x7cf0-0x7cff at device 7.1 on pci0 ata0: on atapci0 ata0: [ITHREAD] ata1: on atapci0 ata1: [ITHREAD] uhci0: port 0x7800-0x781f irq 9 at device 7.2 on pci0 uhci0: [GIANT-LOCKED] uhci0: [ITHREAD] usb0: on uhci0 usb0: USB revision 1.0 uhub0: on usb0 uhub0: 2 ports with 2 removable, self powered pci0: at device 7.3 (no driver attached) ahc0: port 0x7400-0x74ff mem 0xfedff000-0xfedfffff irq 11 at device 10.0 on pci0 ahc0: [ITHREAD] aic7880: Ultra Single Channel A, SCSI Id=7, 16/253 SCBs pcm0: port 0x5800-0x583f,0x6000-0x600f,0x6400-0x640f,0x6800-0x6803,0x7000-0x7003 irq 10 at device 12.0 on pci0 pcm0: [ITHREAD] em0: port 0x5400-0x543f mem 0xfeda0000-0xfedbffff,0xfedc0000-0xfeddffff irq 5 at device 14.0 on pci0 em0: Ethernet address: 00:1b:21:04:2b:5e em0: [ITHREAD] ifpi0: port 0x5000-0x501f mem 0xfedfec00-0xfedfec1f irq 9 at device 16.0 on pci0 ifpi0: [GIANT-LOCKED] ifpi0: [ITHREAD] ifpi0: ISAC 2085 Version A1/A2 or 2086/2186 Version 1.1 (IOM-2) ifpi0: passive stack unit 0 atapci1: port 0x3400-0x3407,0x3800-0x3803,0x4000-0x4007,0x4400-0x4403,0x4800-0x480f mem 0xfedfe800-0xfedfe8ff irq 11 at device 18.0 on pci0 atapci1: [ITHREAD] ata2: on atapci1 ata2: [ITHREAD] ata3: on atapci1 ata3: [ITHREAD] atkbdc0: port 0x60,0x64 irq 1 on acpi0 atkbd0: irq 1 on atkbdc0 kbd0 at atkbd0 atkbd0: [GIANT-LOCKED] atkbd0: [ITHREAD] fdc0: port 0x3f0-0x3f5,0x3f7 irq 6 drq 2 on acpi0 fdc0: [FILTER] fd0: <1440-KB 3.5" drive> on fdc0 drive 0 ppc0: port 0x378-0x37b irq 7 on acpi0 ppc0: Generic chipset (EPP/NIBBLE) in COMPATIBLE mode ppbus0: on ppc0 plip0: on ppbus0 lpt0: on ppbus0 lpt0: Interrupt-driven port ppi0: on ppbus0 ppc0: [GIANT-LOCKED] ppc0: [ITHREAD] sio0: <16550A-compatible COM port> port 0x3f8-0x3ff irq 4 flags 0x10 on acpi0 sio0: type 16550A sio0: [FILTER] sio1: <16550A-compatible COM port> port 0x2f8-0x2ff irq 3 on acpi0 sio1: type 16550A sio1: [FILTER] orm0: at iomem 0xc0000-0xccfff,0xcd000-0xcdfff,0xd2800-0xd2fff pnpid ORM0000 on isa0 sc0: at flags 0x100 on isa0 sc0: VGA <16 virtual consoles, flags=0x300> vga0: at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0 ums0: on uhub0 ums0: 3 buttons and Z dir. Timecounter "TSC" frequency 548316580 Hz quality 800 Timecounters tick every 1.000 msec i4btel: 2 ISDN telephony interface device(s) attached i4bctl: ISDN system control port attached i4b: ISDN call control device attached i4btrc: 4 ISDN trace device(s) attached i4brbch: 4 raw B channel access device(s) attached ipfw2 (+ipv6) initialized, divert enabled, rule-based forwarding enabled, default to accept, logging disabled acd0: DVDROM at ata1-master UDMA33 ad4: 76319MB at ata2-master UDMA100 ad5: 76319MB at ata2-slave UDMA100 acd0: FAILURE - INQUIRY ILLEGAL REQUEST asc=0x24 ascq=0x00 cd0 at ahc0 bus 0 target 1 lun 0 cd0: Removable CD-ROM SCSI-2 device cd0: 20.000MB/s transfers (20.000MHz, offset 15) cd0: Attempt to query device size failed: NOT READY, Medium not present cd2 at ata1 bus 0 target 0 lun 0 cd2: Removable CD-ROM SCSI-0 device cd2: 33.000MB/s transfers cd2: Attempt to query device size failed: NOT READY, Medium not present cd1 at ahc0 bus 0 target 3 lun 0 cd1: Removable CD-ROM SCSI-2 device cd1: 10.000MB/s transfers (10.000MHz, offset 15) cd1: Attempt to query device size failed: NOT READY, Medium not present Trying to mount root from ufs:/dev/ad4s1a WARNING: / was not properly dismounted WARNING: /tmp was not properly dismounted WARNING: /usr was not properly dismounted /usr: mount pending error: blocks 153376 files 0 WARNING: /var was not properly dismounted /var: mount pending error: blocks 14660 files 60 WARNING: /data was not properly dismounted >Description: panic: ffs_blkfree: freeing free block # kgdb kernel.debug /var/crash/vmcore.0 kgdb: kvm_nlist(_stopped_cpus): kgdb: kvm_nlist(_stoppcbs): [GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"] GNU gdb 6.1.1 [FreeBSD] Copyright 2004 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "i386-marcel-freebsd". Unread portion of the kernel message buffer: dev = ad4s1f, block = 26012752, fs = /usr panic: ffs_blkfree: freeing free block Uptime: 1d5h6m39s Physical memory: 631 MB Dumping 152 MB: 137 121 105 89 73 57 41 25 9 #0 doadump () at pcpu.h:195 195 __asm __volatile("movl %%fs:0,%0" : "=r" (td)); (kgdb) backtrace #0 doadump () at pcpu.h:195 #1 0xc06328d3 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:409 #2 0xc0632ad4 in panic (fmt=Variable "fmt" is not available. ) at /usr/src/sys/kern/kern_shutdown.c:563 #3 0xc07d48f0 in ffs_blkfree (ump=0xc323ab00, fs=0xc321c800, devvp=0xc328add0, bno=26012752, size=16384, inum=6506870) at /usr/src/sys/ufs/ffs/ffs_alloc.c:1893 #4 0xc07e8168 in indir_trunc (freeblks=0xc3c1bd00, dbn=103948864, level=0, lbn=12, countp=0xd9177c4c) at /usr/src/sys/ufs/ffs/ffs_softdep.c:2896 #5 0xc07e8430 in handle_workitem_freeblocks (freeblks=0xc3c1bd00, flags=0) at /usr/src/sys/ufs/ffs/ffs_softdep.c:2746 #6 0xc07e9cb8 in process_worklist_item (mp=0xc324b7d4, flags=Variable "flags" is not available. ) at /usr/src/sys/ufs/ffs/ffs_softdep.c:963 #7 0xc07ead71 in softdep_process_worklist (mp=0xc324b7d4, full=0) at /usr/src/sys/ufs/ffs/ffs_softdep.c:847 #8 0xc07ed2ea in softdep_flush () at /usr/src/sys/ufs/ffs/ffs_softdep.c:758 #9 0xc0612211 in fork_exit (callout=0xc07ece70 , arg=0x0, frame=0xd9177d38) at /usr/src/sys/kern/kern_fork.c:796 #10 0xc084fd50 in fork_trampoline () at /usr/src/sys/i386/i386/exception.s:205 (kgdb) >How-To-Repeat: This can forced by portsnap activities (update, extract) >Fix: none >Release-Note: >Audit-Trail: From: Rolf Witt To: bug-followup@FreeBSD.org, rowi@free.de Cc: Subject: Re: kern/116913: panic: ffs_blkfree: freeing free block Date: Sat, 13 Oct 2007 20:29:20 +0200 New Panic: Backtrace from crash tonight (after portsnap cron update): # kgdb kernel.debug /var/crash/vmcore.1 kgdb: kvm_nlist(_stopped_cpus): kgdb: kvm_nlist(_stoppcbs): [GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so: Unde fined symbol "ps_pglobal_lookup"] GNU gdb 6.1.1 [FreeBSD] Copyright 2004 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "i386-marcel-freebsd". Unread portion of the kernel message buffer: dev = ad4s1f, block = 26098960, fs = /usr panic: ffs_blkfree: freeing free block Uptime: 1d10h32m17s Physical memory: 631 MB Dumping 150 MB: 135 119 103 87 71 55 39 23 7 #0 doadump () at pcpu.h:195 195 __asm __volatile("movl %%fs:0,%0" : "=r" (td)); (kgdb) backtrace #0 doadump () at pcpu.h:195 #1 0xc06328a3 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:409 #2 0xc0632aa4 in panic (fmt=Variable "fmt" is not available. ) at /usr/src/sys/kern/kern_shutdown.c:563 #3 0xc07d4d10 in ffs_blkfree (ump=0xc323ab00, fs=0xc321c800, devvp=0xc328add0, bno=26098960, size=16384, inum=6500370) at /usr/src/sys/ufs/ffs/ffs_alloc.c:1893 #4 0xc07e8588 in indir_trunc (freeblks=0xc3e12500, dbn=103954304, level=0, lbn=12, countp=0xd9177c4c) at /usr/src/sys/ufs/ffs/ffs_softdep.c:2896 #5 0xc07e8850 in handle_workitem_freeblocks (freeblks=0xc3e12500, flags=0) at /usr/src/sys/ufs/ffs/ffs_softdep.c:2746 #6 0xc07ea0d8 in process_worklist_item (mp=0xc324b7d4, flags=Variable "flags" is not available. ) at /usr/src/sys/ufs/ffs/ffs_softdep.c:963 #7 0xc07eb191 in softdep_process_worklist (mp=0xc324b7d4, full=0) at /usr/src/sys/ufs/ffs/ffs_softdep.c:847 #8 0xc07ed70a in softdep_flush () at /usr/src/sys/ufs/ffs/ffs_softdep.c:758 #9 0xc06121d1 in fork_exit (callout=0xc07ed290 , arg=0x0, frame=0xd9177d38) at /usr/src/sys/kern/kern_fork.c:796 #10 0xc0850170 in fork_trampoline () at /usr/src/sys/i386/i386/exception.s:205 (kgdb) # uname -a FreeBSD peanuts.homenet.local 7.0-PRERELEASE FreeBSD 7.0-PRERELEASE #121: Thu Oct 11 16:29:05 CEST 2007 rowi@peanuts.homenet.local:/usr/obj/usr/src/sys/PEANUTS i386 Sources from Builddate. I will try this patch: -- Diese Email ist ungeeignet für seelisch labile Persönlichkeiten. From: Rolf Witt To: bug-followup@FreeBSD.org, rowi@free.de Cc: Subject: Re: kern/116913: panic: ffs_blkfree: freeing free block Date: Mon, 19 Nov 2007 19:24:24 +0100 I can no longer reproduce it any more. -- Diese Email ist ungeeignet für seelisch labile Persönlichkeiten. State-Changed-From-To: open->closed State-Changed-By: remko State-Changed-When: Mon Nov 19 20:24:17 UTC 2007 State-Changed-Why: No longer reproducable (as per the submitter) http://www.freebsd.org/cgi/query-pr.cgi?pr=116913 From: Oliver Fromme To: freebsd-bugs@FreeBSD.ORG, rowi@free.de, remko@FreeBSD.ORG, bug-followup@FreeBSD.ORG Cc: Subject: Re: kern/116913: panic: ffs_blkfree: freeing free block Date: Wed, 28 Nov 2007 16:03:33 +0100 (CET) Hello Remko, hello Rolf, remko@freebsd.org wrote: > State-Changed-From-To: open->closed > [...] > State-Changed-Why: > No longer reproducable (as per the submitter) I assume that the submitter meant that he can no longer reproduce it after applying the patch that he mentioned (for sys/ufs/ffs/ffs_softdep.c). So I think this PR should stay open until that patch (or a better one) is comitted. By the way, I got the same panic on a RELENG_7 machine two days ago (without the patch). Best regards Oliver -- Oliver Fromme, secnetix GmbH & Co. KG, Marktplatz 29, 85567 Grafing b. M. Handelsregister: Registergericht Muenchen, HRA 74606, Geschäftsfuehrung: secnetix Verwaltungsgesellsch. mbH, Handelsregister: Registergericht Mün- chen, HRB 125758, Geschäftsführer: Maik Bachmann, Olaf Erb, Ralf Gebhart FreeBSD-Dienstleistungen, -Produkte und mehr: http://www.secnetix.de/bsd "C++ is to C as Lung Cancer is to Lung." -- Thomas Funke State-Changed-From-To: closed->open State-Changed-By: remko State-Changed-When: Wed Nov 28 15:11:10 UTC 2007 State-Changed-Why: This might not be fixed yet as per feedback from Oliver Fromme. http://www.freebsd.org/cgi/query-pr.cgi?pr=116913 From: Rolf Witt To: bug-followup@FreeBSD.org, rowi@free.de Cc: Subject: Re: kern/116913: panic: ffs_blkfree: freeing free block Date: Wed, 28 Nov 2007 17:20:52 +0100 Oliver Fromme wrote: > I assume that the submitter meant that he can no longer > reproduce it after applying the patch that he mentioned > (for sys/ufs/ffs/ffs_softdep.c). > > So I think this PR should stay open until that patch (or > a better one) is comitted. No, this patch do nothing, this was a try by Eric Anderson to get more informations for debugging. But after the commit to sys/vm/vm_object.c (revision 1.386 date: 2007/10/18 23:02:18) i have seen no more panics. -- Diese Email ist ungeeignet für seelisch labile Persönlichkeiten. From: Oliver Fromme To: Rolf Witt , bug-followup@FreeBSD.org Cc: Subject: Re: kern/116913: panic: ffs_blkfree: freeing free block Date: Thu, 29 Nov 2007 12:42:33 +0100 (CET) Rolf Witt wrote: > Oliver Fromme wrote: > > I assume that the submitter meant that he can no longer > > reproduce it after applying the patch that he mentioned > > (for sys/ufs/ffs/ffs_softdep.c). > > > > So I think this PR should stay open until that patch (or > > a better one) is comitted. > > No, this patch do nothing, this was a try by Eric Anderson to get more > informations for debugging. OK, thanks for clarifying. > But after the commit to sys/vm/vm_object.c (revision 1.386 > date: 2007/10/18 23:02:18) i have seen no more panics. Are you sure that patch was the culprit? I cannot reproduce the panic easily; it appeared only once after 5 weeks uptime on our machine. I notice this machine still has rev. 1.385 (the last update was just one day before the commit). So maybe it's time for the next update. Thanks again for the information. Best regards Oliver -- Oliver Fromme, secnetix GmbH & Co. KG, Marktplatz 29, 85567 Grafing b. M. Handelsregister: Registergericht Muenchen, HRA 74606, Geschäftsfuehrung: secnetix Verwaltungsgesellsch. mbH, Handelsregister: Registergericht Mün- chen, HRB 125758, Geschäftsführer: Maik Bachmann, Olaf Erb, Ralf Gebhart FreeBSD-Dienstleistungen, -Produkte und mehr: http://www.secnetix.de/bsd "Documentation is like sex; when it's good, it's very, very good, and when it's bad, it's better than nothing." -- Dick Brandon From: Stephan Eisvogel To: bug-followup@FreeBSD.org, rowi@free.de Cc: Subject: Re: kern/116913: [ffs] [panic] ffs_blkfree: freeing free block Date: Sun, 3 Aug 2008 17:41:44 +0200 I can confirm that when panicking the automatic dump to swap and auto reboot does work as advertised. ;-) Kernel: FreeBSD 7.0-STABLE #43 r181188M: Sat Aug 2 19:31:50 CEST 2008 The box has /etc + /usr/local/etc + /home mounted through unionfs on /mnt/flash. Box is an AMD LX800 with a 2 GB compact flash running soft updates and noatime to lower write count. Nothing really special was going on when the panic occured, I tried to finish up an smbpasswd -a for some tests which did not complete. Regards, Stephan --- GNU gdb 6.1.1 [FreeBSD] Copyright 2004 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "i386-marcel-freebsd"... Unread portion of the kernel message buffer: dev = ad0s1g, block = 51945, fs = /mnt/flash panic: ffs_blkfree: freeing free frag cpuid = 0 KDB: stack backtrace: db_trace_self_wrapper(c0be4f94) at db_trace_self_wrapper+0x25 kdb_backtrace(0,cd29163c,c23090d4,cae9,0,...) at kdb_backtrace+0x24 panic(c0c09d1b,c0c09cdb,c2348a78,cae9,0,...) at panic+0xf9 ffs_blkfree(c2364800,c2309000,c239878c,cae9,0,...) at ffs_blkfree+0x4e4 ffs_truncate(c2ba778c,200,0,880,c25fc200,c2590660) at ffs_truncate+0x13f2 ufs_direnter(c2ba778c,c26a5564,cd2918e0,cd291bb0,0,c298a980,cd291bb0,cd2918e0) at ufs_direnter+0x7cb ufs_makeinode(cd291bb0,1e,cd291a34,cd291a1c,c0b38b6e,...) at ufs_makeinode+0x48a ufs_create(cd291a34) at ufs_create+0x2a VOP_CREATE_APV(c0d03b20,cd291a34) at VOP_CREATE_APV+0x3e unionfs_create(cd291a9c) at unionfs_create+0x56 VOP_CREATE_APV(c0cd6900,cd291a9c,c0cd6900,cd291a9c,0,...) at VOP_CREATE_APV+0x3e vn_open_cred(cd291b88,cd291c84,1a4,c25fc200,c237a1f8,...) at vn_open_cred+0x1c4 vn_open(cd291b88,cd291c84,1a4,c237a1f8,c2bfa600,...) at vn_open+0x1e kern_open(c2590660,208270,0,20b,1b6,...) at kern_open+0xdb open(c2590660,cd291cfc) at open+0x18 syscall(cd291d38) at syscall+0x2be Xint0x80_syscall() at Xint0x80_syscall+0x20 --- syscall (5, FreeBSD ELF32, open), eip = 0x2039ce47, esp = 0xbfbfde7c, ebp = 0xbfbfdeb8 --- Uptime: 14h16m32s Physical memory: 243 MB Dumping 46 MB: 31 15 #0 doadump () at pcpu.h:195 195 pcpu.h: No such file or directory. in pcpu.h (kgdb) backtrace #0 doadump () at pcpu.h:195 #1 0xc07fcbdd in boot (howto=260) at /home/build/src/sys/kern/kern_shutdown.c:418 #2 0xc07fce8b in panic (fmt=Variable "fmt" is not available. ) at /home/build/src/sys/kern/kern_shutdown.c:572 #3 0xc0a59df4 in ffs_blkfree (ump=0xc2364800, fs=0xc2309000, devvp=0xc239878c, bno=51945, size=512, inum=3264) at /home/build/src/sys/ufs/ffs/ffs_alloc.c:1918 #4 0xc0a62972 in ffs_truncate (vp=0xc2ba778c, length=512, flags=Variable "flags" is not available. ) at /home/build/src/sys/ufs/ffs/ffs_inode.c:476 #5 0xc0a7f4fb in ufs_direnter (dvp=0xc2ba778c, tvp=0xc26a5564, dirp=0xcd2918e0, cnp=0xcd291bb0, newdirbp=0x0) at /home/build/src/sys/ufs/ufs/ufs_lookup.c:959 #6 0xc0a8491a in ufs_makeinode (mode=33188, dvp=0xc2ba778c, vpp=0xcd291a48, cnp=0xcd291bb0) at /home/build/src/sys/ufs/ufs/ufs_vnops.c:2403 #7 0xc0a84b8a in ufs_create (ap=0xcd291a34) at /home/build/src/sys/ufs/ufs/ufs_vnops.c:193 #8 0xc0b38b6e in VOP_CREATE_APV (vop=0xc0d03b20, a=0xcd291a34) at vnode_if.c:206 #9 0xc07a0d86 in unionfs_create (ap=0xcd291a9c) at vnode_if.h:112 #10 0xc0b38b6e in VOP_CREATE_APV (vop=0xc0cd6900, a=0xcd291a9c) at vnode_if.c:206 #11 0xc0875d74 in vn_open_cred (ndp=0xcd291b88, flagp=0xcd291c84, cmode=Variable "cmode" is not available. ) at vnode_if.h:112 #12 0xc08760de in vn_open (ndp=0xcd291b88, flagp=0xcd291c84, cmode=420, fp=0xc237a1f8) at /home/build/src/sys/kern/vfs_vnops.c:94 #13 0xc08742bb in kern_open (td=0xc2590660, path=0x208270
, pathseg=UIO_USERSPACE, flags=523, mode=438) at /home/build/src/sys/kern/vfs_syscalls.c:1028 #14 0xc0874758 in open (td=0xc2590660, uap=0xcd291cfc) at /home/build/src/sys/kern/vfs_syscalls.c:995 #15 0xc0b1844e in syscall (frame=0xcd291d38) at /home/build/src/sys/i386/i386/trap.c:1035 #16 0xc0b00840 in Xint0x80_syscall () at /home/build/src/sys/i386/i386/exception.s:196 #17 0x00000033 in ?? () Previous frame inner to this frame (corrupt stack?) (kgdb) Responsible-Changed-From-To: freebsd-bugs->freebsd-fs Responsible-Changed-By: linimon Responsible-Changed-When: Mon May 18 03:07:17 UTC 2009 Responsible-Changed-Why: Over to maintainer(s). http://www.freebsd.org/cgi/query-pr.cgi?pr=116913 From: Oliver Fromme To: bug-followup@FreeBSD.org, freebsd-fs@FreeBSD.org, rowi@free.de Cc: Subject: Re: kern/116913: [ffs] [panic] ffs_blkfree: freeing free block Date: Wed, 4 Aug 2010 15:30:16 +0200 (CEST) Hello Rolf, I just stumbled across this old PR. If I'm not mistaken, this particular problem was fixed long ago. It certainly didn't happen anymore to me after rev. 1.386 of sys/vm/vm_object.c, almost 3 years ago. Do you agree that the PR can be closed? Best regards Oliver http://www.freebsd.org/cgi/query-pr.cgi?pr=kern/116913 -- Oliver Fromme, secnetix GmbH & Co. KG, Marktplatz 29, 85567 Grafing b. M. Handelsregister: Registergericht Muenchen, HRA 74606, Geschäftsfuehrung: secnetix Verwaltungsgesellsch. mbH, Handelsregister: Registergericht Mün- chen, HRB 125758, Geschäftsführer: Maik Bachmann, Olaf Erb, Ralf Gebhart FreeBSD-Dienstleistungen, -Produkte und mehr: http://www.secnetix.de/bsd "C++ is over-complicated nonsense. And Bjorn Shoestrap's book a danger to public health. I tried reading it once, I was in recovery for months." -- Cliff Sarginson State-Changed-From-To: open->closed State-Changed-By: olli State-Changed-When: Wed Aug 4 15:40:10 UTC 2010 State-Changed-Why: Originator agrees that the problem is fixed. http://www.freebsd.org/cgi/query-pr.cgi?pr=116913 >Unformatted: