Re: Kernel panic during portupdrade [ffs_blkfree: freeing free block]

Hi,

I see somthing similar and have a core dump. Below is a backtrace. This 
did not happen with a 4/17 kernel, by the way. Please let me know if 
there is any other information I can provide.

(kgdb) bt
#0  doadump () at /usr/src/sys/kern/kern_shutdown.c:239
#1  0xc01ca5d2 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:370
#2  0xc01cac85 in panic (
     fmt=0xc037b2bc "bremfree: removing a buffer not on a queue")
     at /usr/src/sys/kern/kern_shutdown.c:543
#3  0xc0211831 in bremfreel () at /usr/src/sys/kern/vfs_bio.c:648
#4  0xc0211704 in bremfree (bp=0x0) at /usr/src/sys/kern/vfs_bio.c:630
#5  0xc021bf19 in vop_stdfsync (ap=0xe916d998)
     at /usr/src/sys/kern/vfs_default.c:758
#6  0xc01926a8 in spec_vnoperate (ap=0x0)
     at /usr/src/sys/fs/specfs/spec_vnops.c:123
#7  0xc02d383c in ffs_sync (mp=0xc64b5000, waitfor=2, cred=0xc2195e80,
     td=0xc03c3a80) at vnode_if.h:612
#8  0xc0229cfb in sync (td=0xc03c3a80, uap=0x0)
     at /usr/src/sys/kern/vfs_syscalls.c:137
#9  0xc01ca5fe in boot (howto=256) at /usr/src/sys/kern/kern_shutdown.c:279
#10 0xc01cac85 in panic (fmt=0x0) at /usr/src/sys/kern/kern_shutdown.c:543
#11 0xc02b9f3f in ffs_blkfree (fs=0xc6885800, devvp=0xc65a3920, bno=754456,
     size=16384, inum=188429) at /usr/src/sys/ufs/ffs/ffs_alloc.c:1768
#12 0xc02cb192 in indir_trunc (freeblks=0xc89b6900, dbn=3017568, level=0,
     lbn=12, countp=0xe916dbe8) at /usr/src/sys/ufs/ffs/ffs_softdep.c:2615
#13 0xc02caf09 in handle_workitem_freeblocks (freeblks=0xc89b6900, flags=0)
     at /usr/src/sys/ufs/ffs/ffs_softdep.c:2480
#14 0xc02c7e33 in process_worklist_item (matchmnt=0x0, flags=0)
     at /usr/src/sys/ufs/ffs/ffs_softdep.c:756
#15 0xc02c7a50 in softdep_process_worklist (matchmnt=0x0)
     at /usr/src/sys/ufs/ffs/ffs_softdep.c:622
#16 0xc0225263 in sched_sync () at /usr/src/sys/kern/vfs_subr.c:1757
#17 0xc01b552a in fork_exit (callout=0xc0224f90 <sched_sync>, arg=0x0,
     frame=0x0) at /usr/src/sys/kern/kern_fork.c:795

(kgdb) up 11
#11 0xc02b9f3f in ffs_blkfree (fs=0xc6885800, devvp=0xc65a3920, bno=754456,
     size=16384, inum=188429) at /usr/src/sys/ufs/ffs/ffs_alloc.c:1768
1768                                    panic("ffs_blkfree: freeing free 
frag");

(kgdb) list
1763                    for (i = 0; i < frags; i++) {
1764                            if (isset(blksfree, cgbno + i)) {
1765                                    printf("dev = %s, block = %jd, 
fs = %s\n",
1766                                        devtoname(dev), 
(intmax_t)(bno + i),1767 
fs->fs_fsmnt);
1768                                    panic("ffs_blkfree: freeing free 
frag");1769                            }
1770                            setbit(blksfree, cgbno + i);
1771                    }
1772                    cgp->cg_cs.cs_nffree += i;


Florian wrote:
> David Leimbach wrote:
> 
>> Second time this has happened... I figured out a serial console from 
>> my PC to
>> my mac and have a real cut n paste of the panic:
>>
>> db> tr
>> Debugger(c050a8c7,1000000,c051ba51,e0b54b48,1) at Debugger+0x55
>> panic(c051ba51,c62a0c90,6ab668,0,c620b8d4) at panic+0x11f
>> ffs_blkfree(c620b800,c6439000,6ab668,0,4000) at ffs_blkfree+0x4da
>> handle_workitem_freeblocks(c8ea4a00,0,2,c05b0e08,c6419200) at 
>> handle_workitem_fr
>> eeblocks+0x31a
>> process_worklist_item(0,0,3eac2c5a,0,b8) at process_worklist_item+0x20a
>> softdep_process_worklist(0,0,c0511a49,6d7,0) at 
>> softdep_process_worklist+0xc0
>> sched_sync(0,e0b54d48,c0508609,313,0) at sched_sync+0x2ee
>> fork_exit(c036f370,0,e0b54d48) at fork_exit+0xc0
>> fork_trampoline() at fork_trampoline+0x1a
>>
>> Dave
>> On Sunday, April 27, 2003, at 10:08 AM, David Leimbach wrote:
>>
>>> dev = ad1s1a, block = 5271424, fs = /
>>> panic: ffs_blkfree: freeing free block
>>> cpuid = 0; lapic.id = 01000000
>>> Debugger("panic")
>>> Stopped at        Debugger+0x55: xchgl   %ebx,in_Debugger.0
>>> db> tr
>>> Debugger(c050a8c7,10000000,c051ba51ce0b54acc,1) at Debugger+0x55
>>> panic(c051ba51,c640ed90,506f80,0,c620b8d4) at panic+0x11f
>>> ffs_blkfree(c620b800,c6421000,506f80,0,4000) at ffs_blkfree+0x4da
>>> indir_trunc(c6a74900,1418ca0,0,0,c) at indir_trunc+0x32f
>>> handle_workitem_freeblocks(c6a7f900,0,2,c05b0e08,c6411800) at 
>>> handle_workitem_freeblocks+0x225
>>> process_worklist_item(0,0,3eabf009,0,b8) at process_worklist_item+0x20a
>>> softdep_process_worklist(0,0,c0511a49,6d7,0) at 
>>> softdep_process_worklist+0xc0
>>> sched_ync(0,e0b54d48,c0508609,313c0) at sched_sync+0x2ee
>>> fork_exit(c036f370,0,e0b54d48) at fork_exit+0xc0
>>> fork_trampoline() at fork_trampoline+0x1a
>>> ---  trap 0x1, eip = 0, esp = 0xe0b54d7c, ebp = 0 ---
>>>
>>> [could be some errors due to me transcribing this manually from my 
>>> other monitor]
>>>
> 
> I also got this panic several times in the last hour while compiling 
> some ports. I cvsuped sources about 10hours ago and buid a new kernel. 
> Yesterday i was able to build world an mozilla without any problems.
> 
> I don't have debugging on at the moment. I'll try building an new kernel 
> with debugging on. I don't have any experience with debugging. Will an 
> additional traceback show any additional usefull information?
> 
> regards,
> flo
> 
> 
> _______________________________________________
> freebsd-current_at_freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-current
> To unsubscribe, send any mail to "freebsd-current-unsubscribe_at_freebsd.org"


-- 
Lars Eggert <larse_at_isi.edu>           USC Information Sciences Institute