2 kernel panics

[Rumko <rumcic@xxxxxxxxx>]

Installed DragonFly BSD 1.3.6-DEVEL from
http://chlamydia.fs.ei.tum.de/pub/DragonFly/snapshots/i386/ISO-IMAGES/2CSNAP-20050917-2330-Devel.iso.bz2:

DragonFly precious.networklinux.net 1.3.6-DEVELOPMENT DragonFly
1.3.6-DEVELOPMENT #0: Sun Sep 18 02:45:21 CEST 2005    
root@xxxxxxxxxxxxxxxxxxxxxx:/usr/obj/usr/src/sys/GENERIC  i386

both memory dumps are at leaf:~rumko/memory_dumps/ ... the first
(kernel.0 and vmcore.0):

panic: from debugger
panic messages:
---
panic: ffs_vfree: freeing free inode
panic: from debugger
Uptime: 8m19s

dumping to dev #ad/0x20001, offset 262144
dump ata0: resetting devices .. done
128 127 126 125 124 123 122 121 120 119 118 117 116 115 114 113 112
111 110 109 108 107 106 105 104 103 102 101 100 99 98 97 96 95 94 93
92 91 90 89 88 87 86 85 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70
69 68 67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47
46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24
23 22 21 20 19 18 17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1
---
#0  dumpsys () at /usr/src/sys/kern/kern_shutdown.c:519
519     /usr/src/sys/kern/kern_shutdown.c: No such file or directory.
        in /usr/src/sys/kern/kern_shutdown.c
dumpsys () at /usr/src/sys/kern/kern_shutdown.c:519
519     in /usr/src/sys/kern/kern_shutdown.c
(kgdb) bt
#0  dumpsys () at /usr/src/sys/kern/kern_shutdown.c:519
#1  0xc02a4989 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:352
#2  0xc02a4e3e in panic (fmt=0xc04eaccc "from debugger")
    at /usr/src/sys/kern/kern_shutdown.c:665
#3  0xc0161afa in db_panic (addr=-1068944442, have_addr=0, count=-1,
modif=0xc8539934 "")
    at /usr/src/sys/ddb/db_command.c:449
#4  0xc0161a8f in db_command (last_cmdp=0xc059e230, cmd_table=0x0,
    aux_cmd_tablep=0xc05427dc, aux_cmd_tablep_end=0xc05427f4)
    at /usr/src/sys/ddb/db_command.c:345
#5  0xc0161b6f in db_command_loop () at /usr/src/sys/ddb/db_command.c:471
#6  0xc0164818 in db_trap (type=3, code=0) at /usr/src/sys/ddb/db_trap.c:72
#7  0xc0493070 in kdb_trap (type=3, code=0, regs=0xc8539a48)
    at /usr/src/sys/i386/i386/db_interface.c:161
#8  0xc04a7512 in trap (frame=
      {tf_fs = 24, tf_es = 16, tf_ds = 16, tf_edi = 1, tf_esi =
-1068484849, tf_ebp = -934045040, tf_isp = -934045068, tf_ebx = 256,
tf_edx = -1072988160, tf_ecx = -1, tf_eax = 18, tf_trapno = 3, tf_err
= 0, tf_eip = -1068944442, tf_cs = -934084600, tf_eflags = 642, tf_esp
= -1068449947, tf_ss = -1068522770}) at
/usr/src/sys/i386/i386/trap.c:742
#9  0xc049434f in calltrap () at /usr/src/sys/i386/i386/exception.s:776
#10 0x00000018 in ?? ()
#11 0x00000010 in ?? ()
#12 0x00000010 in ?? ()
#13 0x00000001 in ?? ()
#14 0xc050370f in ?? ()
---Type <return> to continue, or q <return> to quit---
#15 0xc8539a90 in ?? ()
#16 0xc8539a74 in ?? ()
#17 0x00000100 in ?? ()
#18 0xc00b8000 in ?? ()
#19 0xffffffff in ?? ()
#20 0x00000012 in ?? ()
#21 0x00000003 in ?? ()
#22 0x00000000 in ?? ()
#23 0xc04933c6 in Debugger (msg=0x0) at cpufunc.h:68
#24 0xc02a4e36 in panic (fmt=0xc050370f "ffs_vfree: freeing free inode")
    at /usr/src/sys/kern/kern_shutdown.c:663
#25 0xc03fc248 in ffs_freefile (pvp=0x0, ino=3, mode=17407)
    at /usr/src/sys/vfs/ufs/ffs_alloc.c:1633
#26 0xc040212b in handle_workitem_freefile (freefile=0xc0b520e0)
    at /usr/src/sys/vfs/ufs/ffs_softdep.c:2959
#27 0xc03feda3 in process_worklist_item (matchmnt=0x0, flags=0)
    at /usr/src/sys/vfs/ufs/ffs_softdep.c:742
#28 0xc03feb7c in softdep_process_worklist (matchmnt=0x0)
    at /usr/src/sys/vfs/ufs/ffs_softdep.c:627
#29 0xc02ef757 in sched_sync () at /usr/src/sys/kern/vfs_sync.c:244
#30 0xc029a04b in kthread_create_stk (func=0, arg=0x0, tdp=0xc53a8800,
stksize=0, fmt=0x0)
    at /usr/src/sys/kern/kern_kthread.c:104
Previous frame inner to this frame (corrupt stack?)

the second dump (kernel.1 and vmcore.1):

panic: ufsdirhash_lookup: bad offset in hash array
panic messages:
---
panic: ufsdirhash_lookup: bad offset in hash array

syncing disks... 162 6 1
done
Uptime: 1h0m0s

dumping to dev #ad/0x20001, offset 262144
dump ata0: resetting devices .. done
128 127 126 125 124 123 122 121 120 119 118 117 116 115 114 113 112
111 110 109 108 107 106 105 104 103 102 101 100 99 98 97 96 95 94 93
92 91 90 89 88 87 86 85 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70
69 68 67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47
46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24
23 22 21 20 19 18 17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1
---
#0  dumpsys () at /usr/src/sys/kern/kern_shutdown.c:519
519     /usr/src/sys/kern/kern_shutdown.c: No such file or directory.
        in /usr/src/sys/kern/kern_shutdown.c
dumpsys () at /usr/src/sys/kern/kern_shutdown.c:519
519     in /usr/src/sys/kern/kern_shutdown.c
(kgdb) bt
#0  dumpsys () at /usr/src/sys/kern/kern_shutdown.c:519
#1  0xc02a4989 in boot (howto=256) at /usr/src/sys/kern/kern_shutdown.c:352
#2  0xc02a4e3e in panic (fmt=0xc05386ec "ufsdirhash_lookup: bad offset
in hash array")
    at /usr/src/sys/kern/kern_shutdown.c:665
#3  0xc041098a in ufsdirhash_lookup (ip=0xc8b89800, name=0xc0b8a320
"sirc", namelen=4,
    offp=0x0, bpp=0x0, prevoffp=0x0) at /usr/src/sys/vfs/ufs/ufs_dirhash.c:362
#4  0xc040a49b in ufs_lookup (ap=0xc8e96a58) at
/usr/src/sys/vfs/ufs/ufs_lookup.c:197
#5  0xc0410113 in ufs_vnoperate (ap=0x0) at
/usr/src/sys/vfs/ufs/ufs_vnops.c:2378
#6  0xc02f69c6 in vop_old_lookup (ops=0x0, dvp=0x0, vpp=0x0, cnp=0x0)
    at /usr/src/sys/kern/vfs_vopops.c:339
#7  0xc02e3ba0 in vop_compat_nresolve (ap=0xc8e96af8)
    at /usr/src/sys/kern/vfs_default.c:232
#8  0xc02e3a92 in vop_defaultop (ap=0x0) at /usr/src/sys/kern/vfs_default.c:157
#9  0xc0410113 in ufs_vnoperate (ap=0x0) at
/usr/src/sys/vfs/ufs/ufs_vnops.c:2378
#10 0xc02f75c4 in vop_nresolve (ops=0x0, ncp=0x0, cred=0x0)
    at /usr/src/sys/kern/vfs_vopops.c:1248
#11 0xc02e114b in cache_resolve (ncp=0xc0bdb430, cred=0xc0bf6ed0)
    at /usr/src/sys/kern/vfs_cache.c:1524
#12 0xc02e9955 in nlookup (nd=0xc8e96bbc) at /usr/src/sys/kern/vfs_nlookup.c:409
#13 0xc02f15d1 in kern_chdir (nd=0xc8e96bbc) at
/usr/src/sys/kern/vfs_syscalls.c:1090
#14 0xc02f16de in chdir (uap=0x0) at /usr/src/sys/kern/vfs_syscalls.c:1127
#15 0xc04a7ea8 in syscall2 (frame=
      {tf_fs = 135004207, tf_es = 672071727, tf_ds = -1078001617,
tf_edi = 134999557, tf_esi = 135107233, tf_ebp = -1077938168, tf_isp =
-924226188, tf_ebx = 135107049, tf_edx = 135107---Type <return> to
continue, or q <return> to quit---
232, tf_ecx = 1, tf_eax = 12, tf_trapno = 0, tf_err = 2, tf_eip =
672672516, tf_cs = 31, tf_eflags = 514, tf_esp = -1077938276, tf_ss =
47}) at /usr/src/sys/i386/i386/trap.c:1338
#16 0xc04943da in Xint0x80_syscall () at /usr/src/sys/i386/i386/exception.s:854
#17 0x080c002f in ?? ()
#18 0x280f002f in ?? ()
#19 0xbfbf002f in ?? ()
#20 0x080bee05 in ?? ()
#21 0x080d92a1 in ?? ()
#22 0xbfbff808 in ?? ()
#23 0xc8e96d74 in ?? ()
#24 0x080d91e9 in ?? ()
#25 0x080d92a0 in ?? ()
#26 0x00000001 in ?? ()
#27 0x0000000c in ?? ()
#28 0x00000000 in ?? ()
#29 0x00000002 in ?? ()
#30 0x28182b04 in ?? ()
#31 0x0000001f in ?? ()
#32 0x00000202 in ?? ()
#33 0xbfbff79c in ?? ()
#34 0x0000002f in ?? ()
#35 0x00000000 in ?? ()
#36 0x00000000 in ?? ()
#37 0x00000000 in ?? ()
---Type <return> to continue, or q <return> to quit---
#38 0x00000000 in ?? ()
#39 0x028d3000 in ?? ()
#40 0xc53a6c00 in ?? ()
#41 0xc05ba934 in softclock_pcpu_ary ()
#42 0xc8e968d0 in ?? ()
#43 0xc8e968b0 in ?? ()
#44 0xff800000 in ?? ()
#45 0xc02aa4dd in lwkt_switch () at /usr/src/sys/kern/lwkt_thread.c:720
Previous frame inner to this frame (corrupt stack?)