Date: Mon, 19 Jan 1998 21:59:17 +0200 (EET) From: Alexander Litvin <archer@lucky.net> To: current@FreeBSD.ORG Subject: Re: panic: vm_object_deallocate: deallocated too many times Message-ID: <199801191959.VAA04568@grape.carrier.kiev.ua> In-Reply-To: <199801151242.XAA25673@godzilla.zeta.org.au>
next in thread | previous in thread | raw e-mail | index | archive | help
Just the same kind of panic happened to me with the kernel of Saturday. Have a crashdump (though no debugging simbols in kernel). Almost the same backtrace. It was not related with 'umount', the only task the machine was doing was makeworld. -- Litvin Alexander In article <199801151242.XAA25673@godzilla.zeta.org.au> you wrote: > [This may have been lost when hub.freebsd.org was down.] > The following command usually causes a panic when /usr is nfs-mounted: > umount -Af -t nfs > The panic usually occurs when syslogd exits. > Bruce > GDB is free software and you are welcome to distribute copies of it > under certain conditions; type "show copying" to see the conditions. > There is absolutely no warranty for GDB; type "show warranty" for details. > GDB 4.16 (i386-unknown-freebsd), > Copyright 1996 Free Software Foundation, Inc... > IdlePTD 390000 > current pcb at 2302b8 > panicstr: vm_object_deallocate: object deallocated too many times > panic messages: > --- > panic: vm_object_deallocate: object deallocated too many times > syncing disks... done > dumping to dev 401, offset 65536 > dump 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 > --- > #0 boot (howto=256) at ./@/kern/kern_shutdown.c:285 > 285 dumppcb.pcb_cr3 = rcr3(); > (kgdb) where > #0 boot (howto=256) at ./@/kern/kern_shutdown.c:285 > #1 0xf0120557 in panic ( > fmt=0xf01d7f3b "vm_object_deallocate: object deallocated too many times") > at ./@/kern/kern_shutdown.c:425 > #2 0xf01d7fbc in vm_object_deallocate (object=0xf035344c) > at ./@/vm/vm_object.c:295 > #3 0xf01d5a00 in vm_map_entry_delete (map=0xf06a4500, entry=0xf476c828) > at ./@/vm/vm_map.c:1784 > #4 0xf01d5b7c in vm_map_delete (map=0xf06a4500, start=0, end=4022329344) > at ./@/vm/vm_map.c:1877 > #5 0xf01d5c04 in vm_map_remove (map=0xf06a4500, start=0, end=4022329344) > at ./@/vm/vm_map.c:1911 > #6 0xf01195f8 in exit1 (p=0xf06b9400, rv=11) at ./@/kern/kern_exit.c:213 > #7 0xf01217e6 in sigexit (p=0xf06b9400, signum=11) at ./@/kern/kern_sig.c:1222 > #8 0xf01215e3 in postsig (signum=11) at ./@/kern/kern_sig.c:1130 > #9 0xf01ef7d8 in trap (frame={tf_es = 39, tf_ds = 39, tf_edi = -272646808, > tf_esi = 32, tf_ebp = -272638376, tf_isp = -196325404, > tf_ebx = 537455056, tf_edx = -1, tf_ecx = 3, tf_eax = 1, tf_trapno = 12, > tf_err = 1, tf_eip = 7798, tf_cs = 31, tf_eflags = 66118, > tf_esp = -272646880, tf_ss = 39}) at ./@/i386/i386/trap.c:166 > #10 0x1e76 in ?? () > Cannot access memory at address 0xefbfde5c. > (kgdb) up 2 > #2 0xf01d7fbc in vm_object_deallocate (object=0xf035344c) > at ./@/vm/vm_object.c:295 > 295 return; > (kgdb) p *object > $1 = {object_list = {tqe_next = 0xf0352aec, tqe_prev = 0xf47939d8}, > shadow_head = {tqh_first = 0x0, tqh_last = 0xf0353814}, shadow_list = { > tqe_next = 0x0, tqe_prev = 0xf03539fc}, memq = {tqh_first = 0x0, > tqh_last = 0xf0353824}, type = OBJT_DEFAULT, size = 13, ref_count = 0, > shadow_count = -1, pg_color = 5, flags = 392, paging_in_progress = 0, > behavior = 0, resident_page_count = 0, paging_offset = 0x0000000000000000, > backing_object = 0x0, backing_object_offset = 0x0000000000000000, > last_read = 0, page_hint = 0x0, pager_object_list = {tqe_next = 0x0, > tqe_prev = 0x0}, handle = 0x0, un_pager = {vnp = { > vnp_size = 0x0000000000007000}, devp = {devp_pglist = { > tqh_first = 0x7000, tqh_last = 0x0}}, swp = {swp_nblocks = 28672, > swp_allocsize = 0, swp_blocks = 0x0, swp_poip = 0}}} > (kgdb) p *curproc > $2 = {p_procq = {tqe_next = 0xf034459c, tqe_prev = 0x0}, p_list = { > le_next = 0xf06a2000, le_prev = 0xf06b5408}, p_cred = 0xf04df960, > p_fd = 0xf06c0e00, p_stats = 0xf44c3220, p_limit = 0xf06a6400, > p_upages_obj = 0xf0353884, p_sigacts = 0xf44c30f0, p_flag = 8196, > p_stat = 2 '\002', p_pad1 = "\000\000", p_pid = 95, p_hash = { > le_next = 0xf06a2000, le_prev = 0xf0689cfc}, p_pglist = {le_next = 0x0, > le_prev = 0xf04df368}, p_pptr = 0xf06a2e00, p_sibling = { > le_next = 0xf06a2000, le_prev = 0xf06b5448}, p_children = { > lh_first = 0x0}, p_ithandle = {callout = 0xf2683e4c}, p_oppid = 0, > p_dupfd = 0, p_vmspace = 0xf06a4500, p_estcpu = 14, p_cpticks = 14, > p_pctcpu = 0, p_wchan = 0x0, p_wmesg = 0xf0127d99 "select", p_swtime = 241, > p_slptime = 0, p_realtimer = {it_interval = {tv_sec = 0, tv_usec = 0}, > it_value = {tv_sec = 884704028, tv_usec = 512775}}, p_rtime = {tv_sec = 0, > tv_usec = 109914}, p_uticks = 5, p_sticks = 22, p_iticks = 0, > p_sleepend = 0x0, p_traceflag = 0, p_tracep = 0x0, p_siglist = 0, > p_textvp = 0xf06a4a00, p_lock = 0 '\000', p_oncpu = 0 '\000', > p_lastcpu = 0 '\000', p_pad2 = 0 '\000', p_locks = 0, p_simple_locks = 0, > p_stops = 0, p_stype = 0, p_step = 0 '\000', p_pfsflags = 0 '\000', > p_pad3 = "\000", p_retval = {1, -1}, p_sigmask = 0, > p_sigignore = 4294967295, p_sigcatch = 548865, p_priority = 53 '5', > p_usrpri = 53 '5', p_nice = 0 '\000', > p_comm = "syslogd\000\000\000\000\000\000\000\000\000", p_pgrp = 0xf04df360, > p_sysent = 0xf021fdd0, p_rtprio = {type = 1, prio = 0}, p_addr = 0xf44c3000, > p_md = {md_regs = 0xf44c4fbc}, p_xstat = 0, p_acflag = 19, > p_ru = 0xf0715f80, p_nthreads = 0, p_aioinfo = 0x0, p_wakeup = 0, > p_peers = 0x0, p_leader = 0xf06b9400} > (kgdb) q
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199801191959.VAA04568>