Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 27 Oct 2003 14:42:56 -0500
From:      "Robin P. Blanchard" <robin.blanchard@gactr.uga.edu>
To:        <current@freebsd.org>
Subject:   vrele: negative ref cnt (panic)
Message-ID:  <EE3D3FBAFFCAED448C21C398FDAD91AC2376C9@EBE1.gc.nat>

next in thread | raw e-mail | index | archive | help
Got this panic on a uni-processor 4bsd kernel with sources of this =
morning
(~8.30EST) upon attempting to reboot.

---
panic: vrele: negative ref cnt
Stack backtrace:
panic: from debugger
Uptime: 2m2s
Dumping 255 MB
 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240
---
#0  doadump () at /usr/src/sys/kern/kern_shutdown.c:240
No locals.
#1  0xc04b0d3c in boot (howto=3D260) at =
/usr/src/sys/kern/kern_shutdown.c:372
No locals.
#2  0xc04b1067 in panic () at /usr/src/sys/kern/kern_shutdown.c:550
        td =3D (struct thread *) 0xc2c01d10
        bootopt =3D 260
        newpanic =3D 0
        ap =3D 0xd2f369b0 "hj=F3=D2RGD=C0=D4\225Z=C0"
        buf =3D "vrele: negative ref cnt", '\0' <repeats 232 times>
#3  0xc04447f2 in db_panic () at /usr/src/sys/ddb/db_command.c:450
No locals.
#4  0xc0444752 in db_command (last_cmdp=3D0xc06288e0, cmd_table=3D0x0,
aux_cmd_tablep=3D0xc06012fc,=20
    aux_cmd_tablep_end=3D0xc0601300) at =
/usr/src/sys/ddb/db_command.c:346
        cmd =3D (struct command *) 0xc05d1d3c
        t =3D 0
        modif =3D
"\0\222b=C0(\034i=C0=F8i=F3=D2\r\0\0\0=A0\ah=C0\r\0\0\0\001\0\0\0\030j=F3=
=D2f=FAY=C0`=EDf=C0\aK\0
$\bh=C0\0\037f=C0@\222b=C0x\0\0\0@\222b=C0(\034i=C0<j=F3=D2qfD=C0=DA=E3]=C0=

dD=C0\0\0\0\0\020\0\0\0(\034i=C0@\222b=C0\206]D=C0@\222b=C0\200\211b=C0x\=
0\0\0\003\0\0"
        addr =3D -1067805228
        count =3D -1
        have_addr =3D 0
        result =3D 0
#5  0xc0444895 in db_command_loop () at =
/usr/src/sys/ddb/db_command.c:472
No locals.
#6  0xc0447895 in db_trap (type=3D3, code=3D0) at =
/usr/src/sys/ddb/db_trap.c:73
        bkpt =3D 0
#7  0xc05a931c in kdb_trap (type=3D3, code=3D0, regs=3D0xd2f36b30) at
/usr/src/sys/i386/i386/db_interface.c:171
        ef =3D 70
        ddb_mode =3D 1
#8  0xc05b9c5a in trap (frame=3D
      {tf_fs =3D 24, tf_es =3D 16, tf_ds =3D 16, tf_edi =3D 1, tf_esi =
=3D -1067508642,
tf_ebp =3D -755799172, tf_isp =3D -755799204, tf_ebx =3D 0, tf_edx =3D =
0, tf_ecx =3D
32, tf_eax =3D 18, tf_trapno =3D 3, tf_err =3D 0, tf_eip =3D =
-1067805228, tf_cs =3D 8,
tf_eflags =3D 658, tf_esp =3D -1067471388, tf_ss =3D -1067534120}) at
/usr/src/sys/i386/i386/trap.c:579
        td =3D (struct thread *) 0xc2c01d10
        p =3D (struct proc *) 0xc2cc15ac
        sticks =3D 3539168040
        i =3D 0
        ucode =3D 0
        type =3D 3
        code =3D 0
        eva =3D 0
#9  0xc05aacc8 in calltrap () at {standard input}:102
No locals.
#10 0xc04b0ff5 in panic (fmt=3D0xc05f1c5e "vrele: negative ref cnt") at
/usr/src/sys/kern/kern_shutdown.c:534
        td =3D (struct thread *) 0xc2c01d10
        bootopt =3D 256
        newpanic =3D 1
        ap =3D 0x0
        buf =3D "vrele: negative ref cnt", '\0' <repeats 232 times>
#11 0xc050889e in vrele () at /usr/src/sys/kern/vfs_subr.c:2220
        td =3D (struct thread *) 0xc2c01d10
#12 0xc055e569 in ffs_unmount (mp=3D0xc2a05000, mntflags=3D524288, =
td=3D0xc2c01d10)
    at /usr/src/sys/ufs/ffs/ffs_vfsops.c:997
        ump =3D (struct ufsmount *) 0xc2a39800
        fs =3D (struct fs *) 0xc2c01d10
        error =3D -1029181440
        flags =3D 0
#13 0xc0503f14 in dounmount (mp=3D0xc2a05000, flags=3D524288, =
td=3D0xc2c01d10) at
/usr/src/sys/kern/vfs_mount.c:1339
        coveredvp =3D (struct vnode *) 0x0
        fsrootvp =3D (struct vnode *) 0xc2a7fc8c
        error =3D 0
        async_flag =3D 0
#14 0xc050a12e in vfs_unmountall () at /usr/src/sys/kern/vfs_subr.c:3175
        mp =3D (struct mount *) 0xc2a05000
        td =3D (struct thread *) 0xc2c01d10
        error =3D 0
#15 0xc04b0c49 in boot (howto=3D0) at =
/usr/src/sys/kern/kern_shutdown.c:357
        bp =3D (struct buf *) 0xc7b12fe8
        iter =3D 2
        nbusy =3D 0
        pbusy =3D 11
        subiter =3D 0
#16 0xc04b0556 in reboot (td=3D0x0, uap=3D0x0) at
/usr/src/sys/kern/kern_shutdown.c:178
        error =3D 0
#17 0xc05ba570 in syscall (frame=3D
      {tf_fs =3D 47, tf_es =3D 47, tf_ds =3D 47, tf_edi =3D 0, tf_esi =
=3D 0, tf_ebp =3D
-1077937072, tf_isp =3D -755798668, tf_ebx =3D 2, tf_edx =3D -1, tf_ecx =
=3D
672426276, tf_eax =3D 55, tf_trapno =3D 12, tf_err =3D 2, tf_eip =3D =
671765307, tf_cs
=3D 31, tf_eflags =3D 582, tf_esp =3D -1077937140, tf_ss =3D 47}) at
/usr/src/sys/i386/i386/trap.c:1009
        params =3D 0xbfbffc10---Can't read userspace from dump, or =
kernel
process---

---------------------------------------
Robin P. Blanchard
Systems Integration Specialist
Georgia Center for Continuing Education
fon: 706.542.2404 < > fax: 706.542.6546
---------------------------------------



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?EE3D3FBAFFCAED448C21C398FDAD91AC2376C9>