kernel panic

[walt <wa1ter@xxxxxxxxxxxxx>]

Since I rebuilt yesterday I've been seeing strange hangs when
shutting down X.  The box will respond to pings, but ssh won't
respond so I have to do a hard reset to recover.  Today I got
a kernel panic after shutting X down:


#0  dumpsys () at /usr/src/sys/kern/kern_shutdown.c:519
#1  0xc019c20c in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:352
#2  0xc019c6e5 in panic (fmt=0xc035b2dd "from debugger")
    at /usr/src/sys/kern/kern_shutdown.c:665
#3  0xc013c77b in db_panic (addr=-1070511973, have_addr=0, count=-1,
modif=0xc800f4c0 "")
    at /usr/src/sys/ddb/db_command.c:449
#4  0xc013c710 in db_command (last_cmdp=0xc03d45d0, cmd_table=0x0,
    aux_cmd_tablep=0xc038bb38, aux_cmd_tablep_end=0xc038bb3c)
    at /usr/src/sys/ddb/db_command.c:345
#5  0xc013c7f0 in db_command_loop () at /usr/src/sys/ddb/db_command.c:471
#6  0xc013f568 in db_trap (type=3, code=0) at /usr/src/sys/ddb/db_trap.c:72
#7  0xc031454a in kdb_trap (type=3, code=0, regs=0xc800f5d4)
    at /usr/src/sys/i386/i386/db_interface.c:161
#8  0xc03257f7 in trap (frame=
      {tf_fs = 24, tf_es = 16, tf_ds = 16, tf_edi = 1, tf_esi = -1070064632,
tf_ebp = -939            461092, tf_isp = -939461120, tf_ebx = 256, tf_edx =
-1072988160, tf_ecx = 32, tf_eax = 18,             tf_trapno = 3, tf_err = 0,
tf_eip = -1070511973, tf_cs = 8, tf_eflags = 662, tf_esp = -10
70143187, tf_ss = -1070208842}) at /usr/src/sys/i386/i386/trap.c:744
#9  0xc031584f in calltrap () at /usr/src/sys/i386/i386/exception.s:776
#10 0x00000018 in ?? ()
#11 0x00000010 in ?? ()
#12 0x00000010 in ?? ()
#13 0x00000001 in ?? ()
#14 0xc0381c08 in ?? ()
#15 0xc800f61c in ?? ()
#16 0xc800f600 in ?? ()
#17 0x00000100 in ?? ()
#18 0xc00b8000 in ?? ()
#19 0x00000020 in ?? ()
#20 0x00000012 in ?? ()
#21 0x00000003 in ?? ()
#22 0x00000000 in ?? ()
#23 0xc031489b in Debugger (msg=0x0) at cpufunc.h:68
#24 0xc019c6dd in panic (fmt=0xc0381c08 "ffs_balloc: vnode %p not exclusively
locked!")
    at /usr/src/sys/kern/kern_shutdown.c:663
#25 0xc0266c4a in ffs_balloc (ap=0xc800f71c) at
/usr/src/sys/vfs/ufs/ffs_balloc.c:99
#26 0xc01f0441 in vop_balloc (ops=0x0, vp=0x0, startoffset=Unhandled dwarf
expression opco            de 0x93
)
    at /usr/src/sys/kern/vfs_vopops.c:969
#27 0xc0272b52 in ffs_write (ap=0xc800f7e0) at ufs_readwrite.c:409
#28 0xc01efe9c in vop_write (ops=0x0, vp=0xceb0d210, uio=0x0, ioflag=0,
cred=0x0)
    at /usr/src/sys/kern/vfs_vopops.c:528
#29 0xc02901b2 in vnode_pager_generic_putpages (vp=0xceb0d210, m=0xc800f980,
    bytecount=8192, flags=12, rtvals=0xc800f940) at
/usr/src/sys/vm/vnode_pager.c:1009
#30 0xc0273220 in ffs_putpages (ap=0x0) at ufs_readwrite.c:646
#31 0xc01f0500 in vop_putpages (ops=0x0, vp=0xceb0d210, m=0x0, count=0, sync=0,
    rtvals=0x0, offset=Unhandled dwarf expression opcode 0x93
) at /usr/src/sys/kern/vfs_vopops.c:1024
#32 0xc028ffc9 in vnode_pager_putpages (object=0x0, m=0xc800f980, count=0,
sync=12,
    rtvals=0xc800f940) at /usr/src/sys/vm/vnode_pager.c:902
#33 0xc028c68b in vm_pageout_flush (mc=0xc800f980, count=2, flags=12) at
vm_pager.h:146
#34 0xc0288acd in vm_object_page_collect_flush (object=0xcea06ea0, p=0x2,
    curgeneration=137, pagerflags=12) at /usr/src/sys/vm/vm_object.c:828
#35 0xc0288548 in vm_object_page_clean (object=0xcea06ea0, start=0, end=0,
flags=4)
    at /usr/src/sys/vm/vm_object.c:607
#36 0xc01e5aaa in vfs_msync_scan2 (mp=0x0, vp=0xceb0d210, data=0x2)
    at /usr/src/sys/kern/vfs_subr.c:1832
#37 0xc01e76b2 in vmntvnodescan (mp=0xccde68e0, flags=3,
    fastfunc=0xc01e5969 <vfs_msync_scan1>, slowfunc=0xc01e5a14
<vfs_msync_scan2>,
    data=0x2) at /usr/src/sys/kern/vfs_mount.c:939
#38 0xc01e5967 in vfs_msync (mp=0x0, flags=0) at
/usr/src/sys/kern/vfs_subr.c:1787
#39 0xc01e9295 in sync_callback (mp=0xccde68e0, data=0x0)
    at /usr/src/sys/kern/vfs_syscalls.c:640
#40 0xc01e73b1 in mountlist_scan (callback=0xc01e9264 <sync_callback>, data=0x0,
how=1)
    at /usr/src/sys/kern/vfs_mount.c:772
#41 0xc01e925d in sync (uap=0xc800fc24) at /usr/src/sys/kern/vfs_syscalls.c:620
#42 0xc0326163 in syscall2 (frame=
      {tf_fs = 47, tf_es = 47, tf_ds = 47, tf_edi = 2, tf_esi = -1077937420,
tf_ebp = -1077937800, tf_isp = -939459212, tf_ebx = -1077937544, tf_edx = -1,
tf_ecx = 134954400, tf_eax = 36, tf_trapno = 12, tf_err = 2, tf_eip = 134553684,
tf_cs = 31, tf_eflags = 514, tf_esp = -1077938020, tf_ss = 47}) at
/usr/src/sys/i386/i386/trap.c:1341
#43 0xc03158da in Xint0x80_syscall () at /usr/src/sys/i386/i386/exception.s:854
#44 0x0000002f in ?? ()
#45 0x0000002f in ?? ()
#46 0x0000002f in ?? ()
#47 0x00000002 in ?? ()
#48 0xbfbffaf4 in ?? ()
#49 0xbfbff978 in ?? ()
#50 0xc800fd74 in ?? ()
#51 0xbfbffa78 in ?? ()
#52 0xffffffff in ?? ()
#53 0x080b3da0 in ?? ()
#54 0x00000024 in ?? ()
#55 0x0000000c in ?? ()
#56 0x00000002 in ?? ()
#57 0x08052054 in ?? ()
#58 0x0000001f in ?? ()
#59 0x00000202 in ?? ()
#60 0xbfbff89c in ?? ()
#61 0x0000002f in ?? ()
#62 0x00000000 in ?? ()
#63 0x00000000 in ?? ()
#64 0x00000000 in ?? ()
#65 0x00000000 in ?? ()
#66 0x1f607000 in ?? ()
#67 0xc800cf00 in ?? ()
#68 0xc800bc00 in ?? ()
#69 0xc800fbf0 in ?? ()
#70 0xc800fbd0 in ?? ()
#71 0xff800000 in ?? ()
#72 0xc01a1e80 in lwkt_switch () at /usr/src/sys/kern/lwkt_thread.c:720
Previous frame inner to this frame (corrupt stack?)