From fanf@dotat.at  Sat Feb 23 08:31:39 2002
Return-Path: <fanf@dotat.at>
Received: from hand.dotat.at (host217-35-46-127.in-addr.btopenworld.com [217.35.46.127])
	by hub.freebsd.org (Postfix) with ESMTP id F37A037B402
	for <FreeBSD-gnats-submit@freebsd.org>; Sat, 23 Feb 2002 08:31:37 -0800 (PST)
Received: from fanf by hand.dotat.at with local (Exim 3.35 #1)
	id 16ef5H-00007p-00; Sat, 23 Feb 2002 16:31:39 +0000
Message-Id: <E16ef5H-00007p-00@hand.dotat.at>
Date: Sat, 23 Feb 2002 16:31:39 +0000
From: Tony Finch <dot@dotat.at>
Reply-To: Tony Finch <dot@dotat.at>
To: FreeBSD-gnats-submit@freebsd.org
Cc: Tony Finch <dot@dotat.at>
Subject: panic: ffs_valloc: dup alloc
X-Send-Pr-Version: 3.113
X-GNATS-Notify:

>Number:         35248
>Category:       kern
>Synopsis:       panic: ffs_valloc: dup alloc
>Confidential:   no
>Severity:       serious
>Priority:       low
>Responsible:    freebsd-bugs
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sat Feb 23 08:40:01 PST 2002
>Closed-Date:    Sat Jul 12 15:15:16 PDT 2003
>Last-Modified:  Sat Jul 12 15:15:16 PDT 2003
>Originator:     Tony Finch <dot@dotat.at>
>Release:        FreeBSD 4.5-STABLE-20020220 i386
>Organization:
dotat labs
>Environment:
System: FreeBSD hand.dotat.at 4.5-STABLE-20020220 FreeBSD 4.5-STABLE-20020220 #15: Wed Feb 20 07:46:52 GMT 2002 fanf@hand.dotat.at:/FreeBSD/obj/FreeBSD/releng4/sys/SHARP i386

>Description:
I was using pkg_delete to remove a load of packages, and shortly after it
started the machine crashed as follows...

root@hand.dotat.at:~
: 0 ; gdb -k /boot/SHARP/kernel.debug /var/crash/vmcore.0
GNU gdb 4.18
Copyright 1998 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-unknown-freebsd"...
IdlePTD at phsyical address 0x003f5000
initial pcb at physical address 0x00346480
panicstr: ffs_valloc: dup alloc
panic messages:
---
panic: ffs_valloc: dup alloc

syncing disks... 27 
done
Uptime: 4h1m29s

dumping to dev #ad/0x20001, offset 1344484
dump ata0: resetting devices .. ata0: mask=01 ostat0=50 ostat2=00
ata0-master: ATAPI probe a=00 b=00
ata0-slave: ATAPI probe a=00 b=00
ata0: mask=01 status0=50 status1=00
ata0-master: ATA probe a=01 b=a5
ata0: devices=01
ata0-master: success setting PIO4 on generic chip
done
127 126 125 124 123 122 121 120 119 118 117 116 115 114 113 112 111 110 109 108 107 106 105 104 103 102 101 100 99 98 [CTRL-C to abort] [CTRL-C to abort] [CTRL-C to abort] 97 96 [CTRL-C to abort] [CTRL-C to abort] [CTRL-C to abort] 95 94 93 92 91 90 89 88 87 86 85 84 83 [CTRL-C to abort] [CTRL-C to abort] [CTRL-C to abort] 82 81 80 79 78 77 76 75 74 73 72 71 70 69 68 67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0 
---
#0  dumpsys () at /FreeBSD/releng4/sys/kern/kern_shutdown.c:485

warning: Source file is more recent than executable.

485
(kgdb) bt
#0  dumpsys () at /FreeBSD/releng4/sys/kern/kern_shutdown.c:485
#1  0xc0163e64 in boot (howto=256) at /FreeBSD/releng4/sys/kern/kern_shutdown.c:314
#2  0xc0164298 in poweroff_wait (junk=0xc02f94a1, howto=-1070623616)
    at /FreeBSD/releng4/sys/kern/kern_shutdown.c:593
#3  0xc0246217 in ffs_valloc (pvp=0xc8b34400, mode=33152, cred=0xc0fe7a00, vpp=0xc8d92ca0)
    at /FreeBSD/releng4/sys/ufs/ffs/ffs_alloc.c:620
#4  0xc02592b8 in ufs_makeinode (mode=33152, dvp=0xc8b34400, vpp=0xc8d92edc, cnp=0xc8d92ef0)
    at /FreeBSD/releng4/sys/ufs/ufs/ufs_vnops.c:2115
#5  0xc025686c in ufs_create (ap=0xc8d92dfc) at /FreeBSD/releng4/sys/ufs/ufs/ufs_vnops.c:195
#6  0xc0259615 in ufs_vnoperate (ap=0xc8d92dfc) at /FreeBSD/releng4/sys/ufs/ufs/ufs_vnops.c:2422
#7  0xc0199b3e in vn_open (ndp=0xc8d92ec8, fmode=2563, cmode=384) at vnode_if.h:106
#8  0xc0195b68 in open (p=0xc8c353c0, uap=0xc8d92f80) at /FreeBSD/releng4/sys/kern/vfs_syscalls.c:1006
#9  0xc02bcaf9 in syscall2 (frame={tf_fs = 47, tf_es = 47, tf_ds = 47, tf_edi = -1077944852, 
      tf_esi = -1077944826, tf_ebp = -1077944980, tf_isp = -925290540, tf_ebx = 1209030340, 
      tf_edx = -1077944812, tf_ecx = 16605606, tf_eax = 5, tf_trapno = 12, tf_err = 2, 
      tf_eip = 1208938768, tf_cs = 31, tf_eflags = 659, tf_esp = -1077945136, tf_ss = 47})
    at /FreeBSD/releng4/sys/i386/i386/trap.c:1167
#10 0xc02b0575 in Xint0x80_syscall ()
#11 0x480ecf34 in ?? ()
#12 0x804a603 in ?? ()
#13 0x804a4ea in ?? ()
#14 0x8049e0d in ?? ()
#15 0x8049c05 in ?? ()
#16 0x804993d in ?? ()
(kgdb) 

>How-To-Repeat:
>Fix:
>Release-Note:
>Audit-Trail:
State-Changed-From-To: open->feedback 
State-Changed-By: iedowse 
State-Changed-When: Sun Dec 8 09:23:28 PST 2002 
State-Changed-Why:  

Was this just a once-off panic or was it repeatable? Usually it is 
some sort of data corruption that triggers these panics. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=35248 
State-Changed-From-To: feedback->closed 
State-Changed-By: kris 
State-Changed-When: Sat Jul 12 15:13:29 PDT 2003 
State-Changed-Why:  
Feedback timeout.  FWIW, I see this panic regularly on 
the bento cluster because of hardware failure with the IDE 
drives.  Scrubbing the disk with dd if=/dev/zero of=/dev/ad0 
periodically causes the drive to remap/reset bad or marginal 
sectors and the problem goes way. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=35248 
>Unformatted:
