From owner-freebsd-stable@FreeBSD.ORG Wed May 25 08:19:43 2005 Return-Path: X-Original-To: stable@freebsd.org Delivered-To: freebsd-stable@FreeBSD.ORG Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 7498816A41C for ; Wed, 25 May 2005 08:19:43 +0000 (GMT) (envelope-from grafan@gmail.com) Received: from wproxy.gmail.com (wproxy.gmail.com [64.233.184.193]) by mx1.FreeBSD.org (Postfix) with ESMTP id 1984843D48 for ; Wed, 25 May 2005 08:19:42 +0000 (GMT) (envelope-from grafan@gmail.com) Received: by wproxy.gmail.com with SMTP id 69so93074wra for ; Wed, 25 May 2005 01:19:42 -0700 (PDT) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:reply-to:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition; b=JUAJ49A8snv+Sek4jvUIJsRt8xjaYnbRKwQXVC+bocNglmP0eWRKIOB65FWzBHPP5SkpaEojh6t1I6weYXJrnmNHHygqaa0QE8M9yVSBPvhVtkIFom3N5dmfKZKTww7qWMrSdDEZIvIjnct0oW73pjyb72nI3rh4pXaga5aEnMs= Received: by 10.54.107.4 with SMTP id f4mr198767wrc; Wed, 25 May 2005 01:19:42 -0700 (PDT) Received: by 10.54.7.20 with HTTP; Wed, 25 May 2005 01:19:42 -0700 (PDT) Message-ID: <6eb82e050525011918e11fb4@mail.gmail.com> Date: Wed, 25 May 2005 16:19:42 +0800 From: Rong-En Fan To: stable@freebsd.org Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline Cc: Subject: panic: ffs_blkfree: freeing free block X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Rong-En Fan List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 25 May 2005 08:19:43 -0000 Hi, I have seen this knid of panic on 5.3/i386 (-p15) and 4.x. Machine is an i386 machine with an external hardware RAID, shared with nfs. There are total 20+ nfs client. When one exported space gets full and some user's program keeping write (probability with remove) data to this space, sometimes after lots of /dev/xxxxx is full message, I got this panic. dev =3D da0s1d, block =3D 44652432, fs =3D /export/b1 panic: ffs_blkfree: freeing free block cpuid =3D 3 KDB: enter: panic [thread 100112] Stopped at kdb_enter+0x30: leave db> wh kdb_enter(c066992d,3,c0672f0b,e4ba6ae0,5) at kdb_enter+0x30 panic(c0672f0b,c22b58a8,2a95790,0,c23638d4) at panic+0x13e ffs_blkfree(c2363800,c23cb318,2a95790,0,4000) at ffs_blkfree+0x3d2 indir_trunc(c2690e00,aa55e20,0,1,80c) at indir_trunc+0x30d handle_workitem_freeblocks(c2690e00,0,2,6,0) at handle_workitem_freeblocks+= 0x20e process_worklist_item(0,0,42935dad,0,0) at process_worklist_item+0x1e1 softdep_process_worklist(0,1e,c1f1a320,0,0) at softdep_process_worklist+0xc= c sched_sync(0,e4ba6d48,0,0,0) at sched_sync+0x5f2 fork_exit(c0541295,0,e4ba6d48) at fork_exit+0x80 fork_trampoline() at fork_trampoline+0x8 --- trap 0x1, eip =3D 0, esp =3D 0xe4ba6d7c, ebp =3D 0 --- The system disk is on ips(4) which does not support dump in 5.3 (supportted in 5.4). So, there is no dump available. I don't exactly know what kind of accessing pattern causes this. Therefore, no idea where to start at. Wonder if this can be fixed or so. Cheers, Rong-En Fan