panic: ffs_blkfree: freeing free block

[Tim Bishop]

On Mon, Oct 15, 2007 at 03:56:38PM +0100, Tim Bishop wrote:
> On Sun, Sep 30, 2007 at 02:03:07PM -0400, Joe Marcus Clarke wrote:
> > dev = ad6s1e, block = 22287592, fs = /space
> > panic: ffs_blkfree: freeing free block
> > cpuid = 0
> > KDB: enter: panic
> > Physical memory: 2038 MB
> > Dumping 351 MB: 336 320 304 288 272 256 240 224 208 192 176 160 144 128
> > 112 96 80 64 48 32 16
> 
> I'll helpfully add a "me too" here. But my system can't even manage a
> dump:
> 
> dev = mirror/gm0s1f, block = 2754352, fs = /u1
> panic: ffs_blkfree: freeing free block
> cpuid = 1
> Uptime: 3h24m58s
> Physical memory: 1013 MB
> Dumping 202 MB:
> Fatal double fault:
> eip = 0xc073e8b9
> esp = 0xe415dfd4
> ebp = 0xe415e048
> cpuid = 0; apic id = 00

After changing my dump device to a spare disk rather than a mirror I
have the following dump:

Unread portion of the kernel message buffer:
dev = mirror/gm0s1f, block = 2752640, fs = /u1
panic: ffs_blkfree: freeing free block
cpuid = 0
Uptime: 55m54s
Physical memory: 1013 MB
Dumping 161 MB: 146 130 114 98 82 66 50 34 18 2

#0  doadump () at pcpu.h:195
195             __asm __volatile("movl %%fs:0,%0" : "=r" (td));
(kgdb) bt
#0  doadump () at pcpu.h:195
#1  0xc05167a7 in boot (howto=260) at
/usr/src/sys/kern/kern_shutdown.c:409
#2  0xc0516a69 in panic (fmt=Variable "fmt" is not available.
) at /usr/src/sys/kern/kern_shutdown.c:563
#3  0xc06a2124 in ffs_blkfree (ump=0xc3d81200, fs=0xc3da9800,
    devvp=0xc3e4dcc0, bno=2752640, size=16384, inum=615921)
    at /usr/src/sys/ufs/ffs/ffs_alloc.c:1893
#4  0xc06b6321 in handle_workitem_freefrag (freefrag=0xc7b2f1a0)
    at /usr/src/sys/ufs/ffs/ffs_softdep.c:1825
#5  0xc06b7569 in process_worklist_item (mp=0xc3dc6d0c, flags=Variable "flags" is not available.
)
    at /usr/src/sys/ufs/ffs/ffs_softdep.c:968
#6  0xc06b8582 in softdep_process_worklist (mp=0xc3dc6d0c, full=0)
    at /usr/src/sys/ufs/ffs/ffs_softdep.c:847
#7  0xc06baa4d in softdep_flush () at /usr/src/sys/ufs/ffs/ffs_softdep.c:758
#8  0xc04f6d89 in fork_exit (callout=0xc06ba5d0 <softdep_flush>, arg=0x0,
    frame=0xe415fd38) at /usr/src/sys/kern/kern_fork.c:796
#9  0xc071a2b0 in fork_trampoline () at /usr/src/sys/i386/i386/exception.s:205

Tim.

-- 
Tim Bishop
http://www.bishnet.net/tim/
PGP Key: 0x5AE7D984