Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 10 Apr 2000 23:50:27 +0800 (CST)
From:      jdli@freebsd.csie.nctu.edu.tw
To:        FreeBSD-gnats-submit@freebsd.org
Subject:   kern/17905: 4.0-STABLE keep on crashing every 3 days
Message-ID:  <200004101550.XAA08715@FreeBSD.csie.NCTU.edu.tw>

next in thread | raw e-mail | index | archive | help

>Number:         17905
>Category:       kern
>Synopsis:       4.0-SNAP keep on crashing every 3 days
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Mon Apr 10 09:00:01 PDT 2000
>Closed-Date:
>Last-Modified:
>Originator:     Ryan Jian-Da Li
>Release:        FreeBSD 4.0-STABLE i386, date Apr 8
>Organization:
NCTU CSIE FreeBSD Server
>Environment:

FreeBSD 4.0-STABLE #3: Sat Apr  8 00:38:48 CST 2000
Timecounter "i8254"  frequency 1193182 Hz
Timecounter "TSC"  frequency 463553568 Hz
CPU: Pentium III/Pentium III Xeon (463.55-MHz 686-class CPU)
  Origin = "GenuineIntel"  Id = 0x673  Stepping = 3
  Features=0x383f9ff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR,XMM>
real memory  = 402640896 (393204K bytes)
avail memory = 388415488 (379312K bytes)
Preloaded elf kernel "kernel" at 0xc02cd000.
ccd0: Concatenated disk driver
Pentium Pro MTRR support enabled
npx0: <math processor> on motherboard
npx0: INT 16 interface
pcib0: <Intel 82443BX (440 BX) host to PCI bridge> on motherboard
pci0: <PCI bus> on pcib0
pcib1: <Intel 82443BX (440 BX) PCI-PCI (AGP) bridge> at device 1.0 on pci0
pci1: <PCI bus> on pcib1
isab0: <Intel 82371AB PCI to ISA bridge> at device 4.0 on pci0
isa0: <ISA bus> on isab0
atapci0: <Intel PIIX4 ATA33 controller> port 0xd800-0xd80f at device 4.1 on pci0
ata0: at 0x1f0 irq 14 on atapci0
pci0: <Intel 82371AB/EB (PIIX4) USB controller> at 4.2
chip1: <Intel 82371AB Power management controller> port 0xe800-0xe80f at device 4.3 on pci0
fxp0: <Intel EtherExpress Pro 10/100B Ethernet> port 0xd000-0xd01f mem 0xe2800000-0xe28fffff,0xe3800000-0xe3800fff irq 5 at device 9.0 on pci0
fxp0: Ethernet address 00:e0:18:00:7f:6b
pci0: <S3 Trio graphics accelerator> at 10.0 irq 12
ahc0: <Adaptec 2940 Ultra SCSI adapter> port 0xb800-0xb8ff mem 0xdb800000-0xdb800fff irq 10 at device 11.0 on pci0
ahc0: aic7880 Wide Channel A, SCSI Id=7, 16/255 SCBs
amr0: <AMI MegaRAID> port 0xb400-0xb47f irq 11 at device 12.0 on pci0
amr0: firmware UF80 bios 1.61  64MB memory
amrd0: <MegaRAID logical drive> on amr0
amrd0: 34860MB (71393280 sectors) RAID 5 (optimal)
amrd1: <MegaRAID logical drive> on amr0
amrd1: 8268MB (16932864 sectors) RAID 5 (optimal)
fdc0: <NEC 72065B or clone> at port 0x3f0-0x3f5,0x3f7 irq 6 drq 2 on isa0
atkbdc0: <Keyboard controller (i8042)> at port 0x60,0x64 on isa0
atkbd0: <AT Keyboard> irq 1 on atkbdc0
sc0: <System console> on isa0
sc0: VGA <16 virtual consoles, flags=0x200>
vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
sio0 at port 0x3f8-0x3ff irq 4 flags 0x10 on isa0
sio0: type 16550A
sio1 at port 0x2f8-0x2ff irq 3 on isa0
sio1: type 16550A
IP packet filtering initialized, divert enabled, rule-based forwarding enabled, default to accept, unlimited logging
ad0: 32634MB <IBM-DPTA-373420> [66305/16/63] at ata0-master using UDMA33
Waiting 5 seconds for SCSI devices to settle
Mounting root from ufs:/dev/da0s1a
da1 at ahc0 bus 0 target 1 lun 0
da1: <IBM DCAS-34330W S65A> Fixed Direct Access SCSI-2 device 
da1: 40.000MB/s transfers (20.000MHz, offset 8, 16bit)
da1: 4134MB (8467200 512 byte sectors: 255H 63S/T 527C)
da0 at ahc0 bus 0 target 0 lun 0
da0: <IBM DCAS-34330W S61A> Fixed Direct Access SCSI-2 device 
da0: 40.000MB/s transfers (20.000MHz, offset 8, 16bit)
da0: 4134MB (8467200 512 byte sectors: 255H 63S/T 527C)

>Description:

	This machine was stable for years, but is experiencing constantly
	crash every 3 days after upgrading to 4.0-STABLE.
	This is a heavy-loaded server for all kinds of FreeBSD service.
	
	The panic message is "vrele: negative ref cnt", but previous 2
	panic messages were both "vdrop: holdcnt".
	
	gdb output is followed :

GNU gdb 4.18
IdlePTD 3010560
initial pcb at 26eb40
panicstr: vrele: negative ref cnt
panic messages:
---
panic: vrele: negative ref cnt

syncing disks... 43 1
done
Uptime: 2d21h6m5s
amrd0: still open, can't shutdown

dumping to dev #da/0x20001, offset 262168
dump 383 382 381 380 379 ... ... ... ... 5 4 3 2 1 0
---
#0  boot (howto=256) at ../../kern/kern_shutdown.c:304
304			dumppcb.pcb_cr3 = rcr3();

(kgdb) where
#0  boot (howto=256) at ../../kern/kern_shutdown.c:304
#1  0xc01504c0 in poweroff_wait (junk=0xc023a7a2, howto=-756391072)
    at ../../kern/kern_shutdown.c:554
#2  0xc0179966 in vrele (vp=0xd2d46b60) at ../../kern/vfs_subr.c:1445
#3  0xc01f47bc in vm_object_vndeallocate (object=0xd2ea6360)
    at ../../vm/vm_object.c:278
#4  0xc01f47e0 in vm_object_deallocate (object=0xd2ea6360)
    at ../../vm/vm_object.c:301
#5  0xc01f2003 in vm_map_entry_delete (map=0xd3b6f700, entry=0xd3bc1ba0)
    at ../../vm/vm_map.c:1727
#6  0xc01f2185 in vm_map_delete (map=0xd3b6f700, start=672231424,
    end=672317440) at ../../vm/vm_map.c:1830
#7  0xc01f2212 in vm_map_remove (map=0xd3b6f700, start=672231424,
    end=672317440) at ../../vm/vm_map.c:1855
#8  0xc01f3d44 in munmap (p=0xd32d5f20, uap=0xd3918f80)
    at ../../vm/vm_mmap.c:555
#9  0xc021f11a in syscall (frame={tf_fs = 47, tf_es = 47, tf_ds = 136314927,
      tf_edi = 136367164, tf_esi = 136366632, tf_ebp = 136366596,
      tf_isp = -745435180, tf_ebx = 134740992, tf_edx = 672231424,
      tf_ecx = 135438220, tf_eax = 73, tf_trapno = 22, tf_err = 2,
      tf_eip = 135194692, tf_cs = 31, tf_eflags = 518, tf_esp = 136366576,
      tf_ss = 47}) at ../../i386/i386/trap.c:1073
#10 0xc0214006 in Xint0x80_syscall ()
#11 0x8093979 in ?? ()
#12 0x80a5598 in ?? ()
#13 0x805abfe in ?? ()
#14 0x80529ab in ?? ()
#15 0x8050516 in ?? ()
#16 0x804fc85 in ?? ()
#17 0x80d8398 in ?? ()
#18 0x80d81aa in ?? ()
#19 0xbfbff968 in ?? ()
Cannot access memory at address 0x13150274.
(kgdb) quit

	
>How-To-Repeat:

	Keep the machine up for days....and wait.  :)

>Fix:

	No idea.

>Release-Note:
>Audit-Trail:
>Unformatted:


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-bugs" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200004101550.XAA08715>