Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 27 Apr 2003 15:27:28 -0700
From:      Lars Eggert <larse@ISI.EDU>
To:        Florian <flo@einfachsms.de>
Cc:        freebsd-current@freebsd.org
Subject:   Re: Kernel panic during portupdrade [ffs_blkfree: freeing free block]
Message-ID:  <3EAC5950.7040306@isi.edu>
In-Reply-To: <3EAC3B37.8010005@einfachsms.de>
References:  <A410FD9A-78E6-11D7-9D14-0003937E39E0@mac.com> <3EAC3B37.8010005@einfachsms.de>

index | next in thread | previous in thread | raw e-mail

[-- Attachment #1 --]
Hi,

I see somthing similar and have a core dump. Below is a backtrace. This 
did not happen with a 4/17 kernel, by the way. Please let me know if 
there is any other information I can provide.

(kgdb) bt
#0  doadump () at /usr/src/sys/kern/kern_shutdown.c:239
#1  0xc01ca5d2 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:370
#2  0xc01cac85 in panic (
     fmt=0xc037b2bc "bremfree: removing a buffer not on a queue")
     at /usr/src/sys/kern/kern_shutdown.c:543
#3  0xc0211831 in bremfreel () at /usr/src/sys/kern/vfs_bio.c:648
#4  0xc0211704 in bremfree (bp=0x0) at /usr/src/sys/kern/vfs_bio.c:630
#5  0xc021bf19 in vop_stdfsync (ap=0xe916d998)
     at /usr/src/sys/kern/vfs_default.c:758
#6  0xc01926a8 in spec_vnoperate (ap=0x0)
     at /usr/src/sys/fs/specfs/spec_vnops.c:123
#7  0xc02d383c in ffs_sync (mp=0xc64b5000, waitfor=2, cred=0xc2195e80,
     td=0xc03c3a80) at vnode_if.h:612
#8  0xc0229cfb in sync (td=0xc03c3a80, uap=0x0)
     at /usr/src/sys/kern/vfs_syscalls.c:137
#9  0xc01ca5fe in boot (howto=256) at /usr/src/sys/kern/kern_shutdown.c:279
#10 0xc01cac85 in panic (fmt=0x0) at /usr/src/sys/kern/kern_shutdown.c:543
#11 0xc02b9f3f in ffs_blkfree (fs=0xc6885800, devvp=0xc65a3920, bno=754456,
     size=16384, inum=188429) at /usr/src/sys/ufs/ffs/ffs_alloc.c:1768
#12 0xc02cb192 in indir_trunc (freeblks=0xc89b6900, dbn=3017568, level=0,
     lbn=12, countp=0xe916dbe8) at /usr/src/sys/ufs/ffs/ffs_softdep.c:2615
#13 0xc02caf09 in handle_workitem_freeblocks (freeblks=0xc89b6900, flags=0)
     at /usr/src/sys/ufs/ffs/ffs_softdep.c:2480
#14 0xc02c7e33 in process_worklist_item (matchmnt=0x0, flags=0)
     at /usr/src/sys/ufs/ffs/ffs_softdep.c:756
#15 0xc02c7a50 in softdep_process_worklist (matchmnt=0x0)
     at /usr/src/sys/ufs/ffs/ffs_softdep.c:622
#16 0xc0225263 in sched_sync () at /usr/src/sys/kern/vfs_subr.c:1757
#17 0xc01b552a in fork_exit (callout=0xc0224f90 <sched_sync>, arg=0x0,
     frame=0x0) at /usr/src/sys/kern/kern_fork.c:795

(kgdb) up 11
#11 0xc02b9f3f in ffs_blkfree (fs=0xc6885800, devvp=0xc65a3920, bno=754456,
     size=16384, inum=188429) at /usr/src/sys/ufs/ffs/ffs_alloc.c:1768
1768                                    panic("ffs_blkfree: freeing free 
frag");

(kgdb) list
1763                    for (i = 0; i < frags; i++) {
1764                            if (isset(blksfree, cgbno + i)) {
1765                                    printf("dev = %s, block = %jd, 
fs = %s\n",
1766                                        devtoname(dev), 
(intmax_t)(bno + i),1767 
fs->fs_fsmnt);
1768                                    panic("ffs_blkfree: freeing free 
frag");1769                            }
1770                            setbit(blksfree, cgbno + i);
1771                    }
1772                    cgp->cg_cs.cs_nffree += i;


Florian wrote:
> David Leimbach wrote:
> 
>> Second time this has happened... I figured out a serial console from 
>> my PC to
>> my mac and have a real cut n paste of the panic:
>>
>> db> tr
>> Debugger(c050a8c7,1000000,c051ba51,e0b54b48,1) at Debugger+0x55
>> panic(c051ba51,c62a0c90,6ab668,0,c620b8d4) at panic+0x11f
>> ffs_blkfree(c620b800,c6439000,6ab668,0,4000) at ffs_blkfree+0x4da
>> handle_workitem_freeblocks(c8ea4a00,0,2,c05b0e08,c6419200) at 
>> handle_workitem_fr
>> eeblocks+0x31a
>> process_worklist_item(0,0,3eac2c5a,0,b8) at process_worklist_item+0x20a
>> softdep_process_worklist(0,0,c0511a49,6d7,0) at 
>> softdep_process_worklist+0xc0
>> sched_sync(0,e0b54d48,c0508609,313,0) at sched_sync+0x2ee
>> fork_exit(c036f370,0,e0b54d48) at fork_exit+0xc0
>> fork_trampoline() at fork_trampoline+0x1a
>>
>> Dave
>> On Sunday, April 27, 2003, at 10:08 AM, David Leimbach wrote:
>>
>>> dev = ad1s1a, block = 5271424, fs = /
>>> panic: ffs_blkfree: freeing free block
>>> cpuid = 0; lapic.id = 01000000
>>> Debugger("panic")
>>> Stopped at        Debugger+0x55: xchgl   %ebx,in_Debugger.0
>>> db> tr
>>> Debugger(c050a8c7,10000000,c051ba51ce0b54acc,1) at Debugger+0x55
>>> panic(c051ba51,c640ed90,506f80,0,c620b8d4) at panic+0x11f
>>> ffs_blkfree(c620b800,c6421000,506f80,0,4000) at ffs_blkfree+0x4da
>>> indir_trunc(c6a74900,1418ca0,0,0,c) at indir_trunc+0x32f
>>> handle_workitem_freeblocks(c6a7f900,0,2,c05b0e08,c6411800) at 
>>> handle_workitem_freeblocks+0x225
>>> process_worklist_item(0,0,3eabf009,0,b8) at process_worklist_item+0x20a
>>> softdep_process_worklist(0,0,c0511a49,6d7,0) at 
>>> softdep_process_worklist+0xc0
>>> sched_ync(0,e0b54d48,c0508609,313c0) at sched_sync+0x2ee
>>> fork_exit(c036f370,0,e0b54d48) at fork_exit+0xc0
>>> fork_trampoline() at fork_trampoline+0x1a
>>> ---  trap 0x1, eip = 0, esp = 0xe0b54d7c, ebp = 0 ---
>>>
>>> [could be some errors due to me transcribing this manually from my 
>>> other monitor]
>>>
> 
> I also got this panic several times in the last hour while compiling 
> some ports. I cvsuped sources about 10hours ago and buid a new kernel. 
> Yesterday i was able to build world an mozilla without any problems.
> 
> I don't have debugging on at the moment. I'll try building an new kernel 
> with debugging on. I don't have any experience with debugging. Will an 
> additional traceback show any additional usefull information?
> 
> regards,
> flo
> 
> 
> _______________________________________________
> freebsd-current@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-current
> To unsubscribe, send any mail to "freebsd-current-unsubscribe@freebsd.org"


-- 
Lars Eggert <larse@isi.edu>           USC Information Sciences Institute

[-- Attachment #2 --]
0	*H
010	+0	*H
	080fErtcvE.0
	*H
010	UZA10UWestern Cape10U	Cape Town10U
Thawte Consulting1(0&UCertification Services Division1$0"UThawte Personal Freemail CA1+0)	*H
	personal-freemail@thawte.com0
000830000000Z
040827235959Z010	UZA10UWestern Cape10U	Cape Town10
U
Thawte10UCertificate Services1(0&UPersonal Freemail RSA 2000.8.3000
	*H
032c	%E>nx'gڈD)c5*mp<ܮto034qmOe
KaU5u'rװ|CBPQ<9TIf-	kiN0L0)U"0 010UPrivateLabel1-2970U00U0
	*H
1KG]qSl]y=&b""I'{9$
*8PUl
LGlX1B	li+@]jy.%݊
Z<D&iHΥbb090%A0
	*H
010	UZA10UWestern Cape10U	Cape Town10
U
Thawte10UCertificate Services1(0&UPersonal Freemail RSA 2000.8.300
020824185339Z
030824185339Z0T10
UEggert1
0U*Lars10ULars Eggert10	*H
	
larse@isi.edu0"0
	*H
0
6Fxΰ7aED&0+Dj)ֽXCUcnleijmz~S0JjWV~	1^({IݛLjӖ
ao:bP}WLVܱ욗cDɖ_Kv.A(W49;Z8-uXE
6b
@_0%#d`Rto5 L0R`w@7
r	Hcc	U3%7N_oV0T0*+e!000L2uMyffBNUbNJJcdZ2s0U0
larse@isi.edu0U00
	*H
]Ȕ,fK<cjRZeLan@Z6,=
fK?yO#8+	Ni*LSfpQg<(aӒ$kTx_AL1>ގ|S090%A0
	*H
010	UZA10UWestern Cape10U	Cape Town10
U
Thawte10UCertificate Services1(0&UPersonal Freemail RSA 2000.8.300
020824185339Z
030824185339Z0T10
UEggert1
0U*Lars10ULars Eggert10	*H
	
larse@isi.edu0"0
	*H
0
6Fxΰ7aED&0+Dj)ֽXCUcnleijmz~S0JjWV~	1^({IݛLjӖ
ao:bP}WLVܱ욗cDɖ_Kv.A(W49;Z8-uXE
6b
@_0%#d`Rto5 L0R`w@7
r	Hcc	U3%7N_oV0T0*+e!000L2uMyffBNUbNJJcdZ2s0U0
larse@isi.edu0U00
	*H
]Ȕ,fK<cjRZeLan@Z6,=
fK?yO#8+	Ni*LSfpQg<(aӒ$kTx_AL1>ގ|S100010	UZA10UWestern Cape10U	Cape Town10
U
Thawte10UCertificate Services1(0&UPersonal Freemail RSA 2000.8.30%A0	+0	*H
	1	*H
0	*H
	1
030427222728Z0#	*H
	1y('\0R	*H
	1E0C0
*H
0*H
0
*H
@0+0
*H
(0	+710010	UZA10UWestern Cape10U	Cape Town10
U
Thawte10UCertificate Services1(0&UPersonal Freemail RSA 2000.8.30%A0*H
	1010	UZA10UWestern Cape10U	Cape Town10
U
Thawte10UCertificate Services1(0&UPersonal Freemail RSA 2000.8.30%A0
	*H
VpviW:[K#'F<ڵޅFxqDz/+>J5{mdpIZk[;r܌ ,R>r[GFݰG;TyfsFreIن$RPO5LقUp4VD"ًav}6/B/1
vMf:Iдu'8g #@(/.f{t%ggû'LzgZ
help

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3EAC5950.7040306>