Crash while running copy-and-checksum script

Hi

Happened while the copy-and-checksum script was running (look at
recent -current thread with subject "data corruption with current").

Script started on Sun May 11 18:56:23 2003
root:kevad# gdb -k /sys/i386/compile/Kevad/kernel.debug /usr/crash/vmcore.2
GNU gdb 5.2.1 (FreeBSD)
Copyright 2002 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-undermydesk-freebsd"...
panic: free locked buf
panic messages:
---
Fatal trap 12: page fault while in kernel mode
cpuid = 0; lapic.id = 00000000
fault virtual address	= 0x14
fault code		= supervisor write, page not present
instruction pointer	= 0x8:0xc01b1949
stack pointer	        = 0x10:0xdf184904
frame pointer	        = 0x10:0xdf184938
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, def32 1, gran 1
processor eflags	= interrupt enabled, resume, IOPL = 0
current process		= 34 (syncer)
trap number		= 12
panic: page fault
cpuid = 0; lapic.id = 00000000
boot() called on cpu#0

syncing disks, buffers remaining... panic: free locked buf
cpuid = 0; lapic.id = 00000000
boot() called on cpu#0
Uptime: 7h19m51s
Dumping 1023 MB
ata0: resetting devices ..
done
 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 256 272 288 304 320 336 352 368 384 400 416 432 448 464 480 496 512 528 544 560 576 592 608 624 640 656 672 688 704 720 736 752 768 784 800 816 832 848 864 880 896 912 928 944 960 976 992 1008
---
Reading symbols from /usr/src/sys/i386/compile/Kevad/modules/usr/src/sys/modules/vinum/vinum.ko.debug...done.
Loaded symbols for /usr/src/sys/i386/compile/Kevad/modules/usr/src/sys/modules/vinum/vinum.ko.debug
Reading symbols from /usr/src/sys/i386/compile/Kevad/modules/usr/src/sys/modules/ipfw/ipfw.ko.debug...done.
Loaded symbols for /usr/src/sys/i386/compile/Kevad/modules/usr/src/sys/modules/ipfw/ipfw.ko.debug
Reading symbols from /boot/kernel/ng_ether.ko...done.
Loaded symbols for /boot/kernel/ng_ether.ko
Reading symbols from /boot/kernel/netgraph.ko...done.
Loaded symbols for /boot/kernel/netgraph.ko
Reading symbols from /usr/src/sys/i386/compile/Kevad/modules/usr/src/sys/modules/acpi/acpi.ko.debug...done.
Loaded symbols for /usr/src/sys/i386/compile/Kevad/modules/usr/src/sys/modules/acpi/acpi.ko.debug
Reading symbols from /boot/kernel/ng_socket.ko...done.
Loaded symbols for /boot/kernel/ng_socket.ko
Reading symbols from /boot/kernel/ng_iface.ko...done.
Loaded symbols for /boot/kernel/ng_iface.ko
Reading symbols from /boot/kernel/ng_ppp.ko...done.
Loaded symbols for /boot/kernel/ng_ppp.ko
Reading symbols from /boot/kernel/ng_bpf.ko...done.
Loaded symbols for /boot/kernel/ng_bpf.ko
Reading symbols from /boot/kernel/ng_vjc.ko...done.
Loaded symbols for /boot/kernel/ng_vjc.ko
Reading symbols from /boot/kernel/ng_pppoe.ko...done.
Loaded symbols for /boot/kernel/ng_pppoe.ko
#0  doadump () at ../../../kern/kern_shutdown.c:238
238		dumping++;
(kgdb) bt full
#0  doadump () at ../../../kern/kern_shutdown.c:238
No locals.
#1  0xc01e9471 in boot (howto=260) at ../../../kern/kern_shutdown.c:370
No locals.
#2  0xc01e987e in panic () at ../../../kern/kern_shutdown.c:543
	td = (struct thread *) 0xc21cee40
	bootopt = 260
	newpanic = 0
	buf = "free locked buf", '\0' <repeats 240 times>
#3  0xc04cd856 in freerq (rq=0xc6c6af00)
    at /usr/src/sys/dev/vinum/vinuminterrupt.c:252
	rqg = (struct rqgroup *) 0xc63c8400
	nrqg = (struct rqgroup *) 0xc63c8424
	rqno = 0
#4  0xc04cd75a in complete_rqe (bp=0xc63c8024)
    at /usr/src/sys/dev/vinum/vinuminterrupt.c:230
	rqe = (struct rqelement *) 0xc63c8024
	rq = (struct request *) 0xc6c6af00
	rqg = (struct rqgroup *) 0xc63c8000
	ubp = (struct buf *) 0xd2b5fe18
	drive = (struct drive *) 0x0
	sd = (struct sd *) 0xc6369c00
	gravity = 0xc02034ab "\220\215t&"
#5  0xc0236c54 in bufdone (bp=0xc63c8024) at ../../../kern/vfs_bio.c:3086
	biodone = (void (*)(struct buf *)) 0
#6  0xc0236be4 in bufdonebio (bp=0x0) at ../../../kern/vfs_bio.c:3034
No locals.
#7  0xc02369fd in biodone (bp=0xc63c8024) at ../../../kern/vfs_bio.c:2961
No locals.
---Type <return> to continue, or q <return> to quit---
#8  0xc01b18cc in g_dev_done (bp2=0xc66e4000) at ../../../geom/geom_dev.c:379
	bp = (struct bio *) 0xc63c8024
#9  0xc02369fd in biodone (bp=0xc66e4000) at ../../../kern/vfs_bio.c:2961
No locals.
#10 0xc01b4281 in g_io_schedule_up (tp=0xc21cee40)
    at ../../../geom/geom_io.c:365
	bp = (struct bio *) 0xc66e4000
	mymutex = {mtx_object = {lo_class = 0xc03cff4c, 
    lo_name = 0xc038cd01 "g_xup", lo_type = 0xc038cd01 "g_xup", 
    lo_flags = 196608, lo_list = {tqe_next = 0x0, tqe_prev = 0x0}, 
    lo_witness = 0x0}, mtx_lock = 3256675904, mtx_recurse = 0, mtx_blocked = {
    tqh_first = 0x0, tqh_last = 0xdf11acd4}, mtx_contested = {le_next = 0x0, 
    le_prev = 0x0}}
#11 0xc01b4498 in g_up_procbody () at ../../../geom/geom_kern.c:91
	p = (struct proc *) 0x0
	tp = (struct thread *) 0xc21cee40
#12 0xc01d5030 in fork_exit (callout=0xc01b4470 <g_up_procbody>, arg=0x0, 
    frame=0x0) at ../../../kern/kern_fork.c:792
	td = (struct thread *) 0x0
	p = (struct proc *) 0xc21cd1e0
(kgdb) quit
root:kevad# exit
exit

Script done on Sun May 11 18:56:47 2003
-- 
Vallo Kallaste