From owner-freebsd-current Wed Sep 25 13:49:17 2002 Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 199A437B401 for ; Wed, 25 Sep 2002 13:49:16 -0700 (PDT) Received: from mail.chesapeake.net (chesapeake.net [205.130.220.14]) by mx1.FreeBSD.org (Postfix) with ESMTP id EF97E43E97 for ; Wed, 25 Sep 2002 13:49:14 -0700 (PDT) (envelope-from jroberson@chesapeake.net) Received: from localhost (jroberson@localhost) by mail.chesapeake.net (8.11.6/8.11.6) with ESMTP id g8PKnCI33459; Wed, 25 Sep 2002 16:49:12 -0400 (EDT) (envelope-from jroberson@chesapeake.net) Date: Wed, 25 Sep 2002 16:49:12 -0400 (EDT) From: Jeff Roberson To: David Wolfskill Cc: current@freebsd.org Subject: Re: Panic in VFS subsystem with very recent CURRENT In-Reply-To: <200209251754.g8PHs2Cd069940@bunrab.catwhisker.org> Message-ID: <20020925164705.X97589-100000@mail.chesapeake.net> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-current@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Wed, 25 Sep 2002, David Wolfskill wrote: > panic: vrele: missed vn_close > cpuid = 0; lapic.id = 00000000 > Debugger("panic") > Stopped at Debugger+0x55: xchgl %ebx,in_Debugger.0 > db> tr > Debugger(c036903a,0,c0372831,d7b9cb70,1) at Debugger+0x55 > panic(c0372831,0,c03724c2,810,c4439200) at panic+0x11f > vrele(c44545c8,c039a9c0,c44545c8,3,c4456400) at vrele+0x19b > vn_close(c44545c8,3,c4456400,c4078900,d7b9cc44) at vn_close+0x5d > vn_closefile(c4209078,c4078900,c03657a0,72a,0) at vn_closefile+0x30 > fdrop_locked(c4209078,c4078900,c03657a0,668,c4078900) at fdrop_locked+0x17c > fdrop(c4209078,c4078900,c03ef8c0,c03f1838,246) at fdrop+0x3e > closef(c4209078,c4078900,c03657a0,342,c4209078) at closef+0xac > close(c4078900,d7b9cd10,c03915a9,418,1) at close+0x158 > syscall(bfbf002f,2f,bfbf002f,bfbfedcd,bfbfedfd) at syscall+0x2ee > Xint0x80_syscall() at Xint0x80_syscall+0x1d > --- syscall (6, FreeBSD ELF32, close), eip = 0x280f7a9b, esp = 0xbfbfed9c, ebp = 0xbfbfef38 --- Also from david, vprint output: 0xc44545c8: tag devfs, type VCHR, usecount 1, writecount 1, refcount 0, What's interesting here is that we're about to drop our reference but we have not decremented the writecount. I'm sure it's a simple logic error somewhere. I'll have to wait until tonight to look for it. If anyone finds it in the mean time they are welcome to commit a fix. Thanks, Jeff To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message