panic: ffs_valloc: dup alloc in 7 GENERIC

[smj%ma.sdf.org@localhost]

Hello, recently we've had an issue with our root filesystem getting some
pretty strange inconsistencies resulting in kernel panics.  fsck must be
run manually and typically result in a lot of noise regarding dupes, but
after a few forced runs the system can be brought back up and runs.  However
recently no matter how many 'marked clean' fscks are run bringing up the
system just results in a kernel panic.  There are no disk errors (its a
250GB allocation on a 23tb RAID) so it was decided to regen the root file
system with a fresh install of the recently released 7.0.1 which seems like
the only real way to go forward.  

We do have crash dumps and the kernel we were using was 7.0 GERNERIC with 
some tweaks in /etc/sysctl.conf.  Because of the sensitivity of the data,
would saitoh or manuel be willing to work with us directly to investigate?

dmode 8180 mode 8180 dgen 2eae3be7 gen 2eae3be7^M
size 3000 blocks 18^M
ino 2830913 ipref 2826056^M
panic: ffs_valloc: dup alloc^M
cpu0: Begin traceback...^M
vpanic() at netbsd:vpanic+0x13c^M
snprintf() at netbsd:snprintf^M
ffs_valloc() at netbsd:ffs_valloc+0x889^M
ufs_makeinode() at netbsd:ufs_makeinode+0x5e^M
ufs_create() at netbsd:ufs_create+0x5b^M
VOP_CREATE() at /ne:t bbsadd: VdOiPr_ CiRnEoA 2T8E+003x13583^M
atv no_fofpseent()  17a1t6 n5:et bmsadn:gvlne_do peenntr+y0^Mx
330^M
do_open() at netbsd:do_open+0x111^M
do_sys_openat() at netbsd:do_sys_openat+0x68^M
sys_open() at netbsd:sys_open+0x24^M
syscall() at netbsd:syscall+0x9a^M
--- syscall (number 5) ---^M
7f7ff5a3c40a:^M
cpu0: End traceback...^M

panic: ffs_valloc: dup alloc^M
cpu1: Begin traceback...^M
vpanic() at netbsd:vpanic+0x13c^M
snprintf() at netbsd:snprintf^M
ffs_valloc() at netbsd:ffs_valloc+0x889^M
ufs_makeinode() at netbsd:ufs_makeinode+0x5e^M
udmfso_dcer e8a1t8e0 (m) oadte  8ne1t80b sdd:geufns _2cc0re3a4t3e7b+0 gx5enb ^M
2VcO0P3_4C37REb^MA
TEs(iz) ea ta 6nede4t bsbld:ocVOkPs _C5R60E^MA
TEi+n0ox 23883^M0
9vn1_5o ippenre(f)  a28t 26n0e5tb6s^M
d:vn_open+0x330^M
do_open() at netbsd:do_open+0x111^M
l^M
See /var/run/do_sys_openat() at netbsd:do_sys_openat+0x68^M
rc.log for more sys_open() at netbsd:sys_open+0x24^M
informsyscall() at netbsd:syscall+0x9a^M
--- syscall (number 5) ---^M
7f7ff5a3c40a:^M
cpu1: End traceback...^M

panic: ffs_blkfree: bad size^M
cpu0: Begin traceback...^M
vpanic() at netbsd:vpanic+0x13c^M
snprintf() at netbsd:snprintf^M
ffs_freefile_common.isra.6() at netbsd:ffs_freefile_common.isra.6^M
ffs_blkfree() at netbsd:ffs_blkfree+0x82^M
ffs_truncate() at netbsd:ffs_truncate+0xe48^M
ufs_truncate() at netbsd:ufs_truncate+0x18d^M
ufs_inactive() at netbsd:ufs_inactive+0x1e1^M
VOP_INACTIVE() at netbsd:VOP_INACTIVE+0x33^M
uvvmr_fealuellt(()0 xatff nffefteb8s1de:v4dre1dlae3l+8,0 x03x50a,^M
2do) _-s>y se_s^M
tfaattaatl( )p aagte n featublstd :dino _ssuypse_rsvtiastaort +0moxd8ef^M^M

stryasp__ t_ylpset a6t 50co(d) e a2t  rneipt bfsfdf:fsfyfs_ff_8_0l5sdtba4t3590 +
c0sx 258 ^Mr
fslyasgcsa l1l0()21 2a tc rne2 tb84s di:lseyvseclal 8l+ r0sxp9 af^Mf
-ff--fe 8s1y0sfca7el1lc 4(8nu^M
mcbuerrl w4p4 1)0x f-f-f-f^M
fe7f817bf6f6764aa770600 ap:i^Md
 c5pu5907:. 1E0n dl otwreascte bkacstka.c..k ^M0

dmode 81b4 mode 81b4 dgen 9b79cb7 gen 9b79cb7^M
size a8 blocks 8^M
ino 2829968 ipref 2826056^M
panic: ffs_valloc: dup alloc^M
cpu0: Begin traceback...^M
vpanic() at netbsd:vpanic+0x13c^M
snprintf() at netbsd:snprintf^M
ffs_valloc() at netbsd:ffs_valloc+0x889^M
ufs_makeinode() at netbsd:ufs_makeinode+0x5e^M
ufs_create() at netbsd:ufs_create+0x5b^M
VOP_CREATE() at netbsd:VOP_CREATE+0x38^M
vn_open() at netbsd:vn_open+0x330^M
do_open() at netbsd:do_open+0x111^M
do_sys_openat() at netbsd:do_sys_openat+0x68^M
sys_open() at netbsd:sys_open+0x24^M
syscall() at netbsd:syscall+0x9a^M
--- syscall (number 5) ---^M
7f7ff5a3c40a:^M
cpu0: End traceback...^M