From owner-freebsd-bugs@FreeBSD.ORG Tue Apr 17 13:40:02 2007 Return-Path: X-Original-To: freebsd-bugs@hub.freebsd.org Delivered-To: freebsd-bugs@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 90F0716A402 for ; Tue, 17 Apr 2007 13:40:02 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [69.147.83.40]) by mx1.freebsd.org (Postfix) with ESMTP id 72E0313C46C for ; Tue, 17 Apr 2007 13:40:02 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.13.4/8.13.4) with ESMTP id l3HDe2gu069432 for ; Tue, 17 Apr 2007 13:40:02 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.13.4/8.13.4/Submit) id l3HDe2nD069430; Tue, 17 Apr 2007 13:40:02 GMT (envelope-from gnats) Resent-Date: Tue, 17 Apr 2007 13:40:02 GMT Resent-Message-Id: <200704171340.l3HDe2nD069430@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, Alex Mogilnikov Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 868FE16A406 for ; Tue, 17 Apr 2007 13:33:53 +0000 (UTC) (envelope-from alx@alx2.intellectronika.ru) Received: from alx2.intellectronika.ru (alx2.intellectronika.ru [217.106.55.184]) by mx1.freebsd.org (Postfix) with SMTP id ED25813C45A for ; Tue, 17 Apr 2007 13:33:51 +0000 (UTC) (envelope-from alx@alx2.intellectronika.ru) Received: (qmail 5435 invoked by uid 1001); 17 Apr 2007 13:07:09 -0000 Message-Id: <20070417130709.5434.qmail@alx2.intellectronika.ru> Date: 17 Apr 2007 13:07:09 -0000 From: Alex Mogilnikov To: FreeBSD-gnats-submit@FreeBSD.org X-Send-Pr-Version: 3.113 Cc: Subject: kern/111766: "panic: ffs_blkfree: freeing free block" during disk activity X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Alex Mogilnikov List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Apr 2007 13:40:02 -0000 >Number: 111766 >Category: kern >Synopsis: "panic: ffs_blkfree: freeing free block" during disk activity >Confidential: no >Severity: serious >Priority: medium >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Tue Apr 17 13:40:01 GMT 2007 >Closed-Date: >Last-Modified: >Originator: Alex Mogilnikov >Release: FreeBSD 6.2-RELEASE-p3 i386 >Organization: >Environment: System: FreeBSD alx2.intellectronika.ru 6.2-RELEASE-p3 FreeBSD 6.2-RELEASE-p3 #3: Tue Apr 3 03:12:35 YEKST 2007 alx@alx2.intellectronika.ru:/usr/obj/usr/src/sys/MYKERNEL i386 MB: ASUS A8N-VM HDD: Seagate ST320014A 3.07 >Description: panic: ffs_blkfree: freeing free block during heavy disk activity (while converting large video files, doing filesystem dump, etc.) This appears after 6.1-R -> 6.2-RC2 upgrade (with the same hardware). alx2# kgdb kernel.debug /usr/crashdump/vmcore.0 kgdb: kvm_nlist(_stopped_cpus): kgdb: kvm_nlist(_stoppcbs): [GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"] GNU gdb 6.1.1 [FreeBSD] Copyright 2004 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "i386-marcel-freebsd". Unread portion of the kernel message buffer: dev = ad0s1d, block = 67, fs = /var panic: ffs_blkfree: freeing free block Uptime: 13d23h44m54s Dumping 959 MB (2 chunks) chunk 0: 1MB (159 pages) ... ok chunk 1: 959MB (245440 pages) 943 927 911 895 879 863 847 831 815 799 783 767 751 735 719 703 687 671 655 639 623 607 591 575 559 543 527 511 495 479 463 447 431 415 399 383 367 351 335 319 303 287 271 255 239 223 207 191 175 159 143 127 111 95 79 63 47 31 15 #0 doadump () at pcpu.h:165 165 __asm __volatile("movl %%fs:0,%0" : "=r" (td)); (kgdb) bt full #0 doadump () at pcpu.h:165 No locals. #1 0xc06dd3ac in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:409 first_buf_printf = 1 #2 0xc06dd6f9 in panic (fmt=0xc098aa7b "ffs_blkfree: freeing free block") at /usr/src/sys/kern/kern_shutdown.c:565 td = (struct thread *) 0xc5220900 bootopt = 260 newpanic = 0 ap = 0xc5220900 "" buf = "ffs_blkfree: freeing free block", '\0' #3 0xc083f55a in ffs_blkfree (ump=0xc5481200, fs=0xc52f7800, devvp=0xc54ab440, bno=67, size=16384, inum=165) at /usr/src/sys/ufs/ffs/ffs_alloc.c:1869 cgp = (struct cg *) 0xdb68a000 bp = (struct buf *) 0xd87492b8 fragno = 8 cgbno = 67 cgblkno = Unhandled dwarf expression opcode 0x93 (kgdb) list *0xc083f55a 0xc083f55a is in ffs_blkfree (/usr/src/sys/ufs/ffs/ffs_alloc.c:1869). 1864 brelse(bp); 1865 return; 1866 } 1867 printf("dev = %s, block = %jd, fs = %s\n", 1868 devtoname(dev), (intmax_t)bno, fs->fs_fsmnt); 1869 panic("ffs_blkfree: freeing free block"); 1870 } 1871 ffs_setblock(fs, blksfree, fragno); 1872 ffs_clusteracct(ump, fs, cgp, fragno, 1); 1873 cgp->cg_cs.cs_nbfree++; dmesg: Copyright (c) 1992-2007 The FreeBSD Project. Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 The Regents of the University of California. All rights reserved. FreeBSD is a registered trademark of The FreeBSD Foundation. FreeBSD 6.2-RELEASE-p3 #3: Tue Apr 3 03:12:35 YEKST 2007 alx@alx2.intellectronika.ru:/usr/obj/usr/src/sys/MYKERNEL WARNING: MPSAFE network stack disabled, expect reduced performance. Timecounter "i8254" frequency 1193182 Hz quality 0 CPU: AMD Athlon(tm) 64 Processor 3200+ (2009.16-MHz 686-class CPU) Origin = "AuthenticAMD" Id = 0x20ff2 Stepping = 2 Features=0x78bfbff Features2=0x1 AMD Features=0xe2500800 AMD Features2=0x1 real memory = 1006370816 (959 MB) avail memory = 967323648 (922 MB) MPTable: