vrele: negative ref cnt (panic)
Robin P. Blanchard
robin.blanchard at gactr.uga.edu
Mon Oct 27 11:42:59 PST 2003
Got this panic on a uni-processor 4bsd kernel with sources of this morning
(~8.30EST) upon attempting to reboot.
---
panic: vrele: negative ref cnt
Stack backtrace:
panic: from debugger
Uptime: 2m2s
Dumping 255 MB
16 32 48 64 80 96 112 128 144 160 176 192 208 224 240
---
#0 doadump () at /usr/src/sys/kern/kern_shutdown.c:240
No locals.
#1 0xc04b0d3c in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:372
No locals.
#2 0xc04b1067 in panic () at /usr/src/sys/kern/kern_shutdown.c:550
td = (struct thread *) 0xc2c01d10
bootopt = 260
newpanic = 0
ap = 0xd2f369b0 "hjóÒRGDÀÔ\225ZÀ"
buf = "vrele: negative ref cnt", '\0' <repeats 232 times>
#3 0xc04447f2 in db_panic () at /usr/src/sys/ddb/db_command.c:450
No locals.
#4 0xc0444752 in db_command (last_cmdp=0xc06288e0, cmd_table=0x0,
aux_cmd_tablep=0xc06012fc,
aux_cmd_tablep_end=0xc0601300) at /usr/src/sys/ddb/db_command.c:346
cmd = (struct command *) 0xc05d1d3c
t = 0
modif =
"\0\222bÀ(\034iÀøióÒ\r\0\0\0 \ahÀ\r\0\0\0\001\0\0\0\030jóÒfúYÀ`ífÀ\aK\0
$\bhÀ\0\037fÀ@\222bÀx\0\0\0@\222bÀ(\034iÀ<jóÒqfDÀÚã]À
dDÀ\0\0\0\0\020\0\0\0(\034iÀ@\222bÀ\206]DÀ@\222bÀ\200\211bÀx\0\0\0\003\0\0"
addr = -1067805228
count = -1
have_addr = 0
result = 0
#5 0xc0444895 in db_command_loop () at /usr/src/sys/ddb/db_command.c:472
No locals.
#6 0xc0447895 in db_trap (type=3, code=0) at /usr/src/sys/ddb/db_trap.c:73
bkpt = 0
#7 0xc05a931c in kdb_trap (type=3, code=0, regs=0xd2f36b30) at
/usr/src/sys/i386/i386/db_interface.c:171
ef = 70
ddb_mode = 1
#8 0xc05b9c5a in trap (frame=
{tf_fs = 24, tf_es = 16, tf_ds = 16, tf_edi = 1, tf_esi = -1067508642,
tf_ebp = -755799172, tf_isp = -755799204, tf_ebx = 0, tf_edx = 0, tf_ecx =
32, tf_eax = 18, tf_trapno = 3, tf_err = 0, tf_eip = -1067805228, tf_cs = 8,
tf_eflags = 658, tf_esp = -1067471388, tf_ss = -1067534120}) at
/usr/src/sys/i386/i386/trap.c:579
td = (struct thread *) 0xc2c01d10
p = (struct proc *) 0xc2cc15ac
sticks = 3539168040
i = 0
ucode = 0
type = 3
code = 0
eva = 0
#9 0xc05aacc8 in calltrap () at {standard input}:102
No locals.
#10 0xc04b0ff5 in panic (fmt=0xc05f1c5e "vrele: negative ref cnt") at
/usr/src/sys/kern/kern_shutdown.c:534
td = (struct thread *) 0xc2c01d10
bootopt = 256
newpanic = 1
ap = 0x0
buf = "vrele: negative ref cnt", '\0' <repeats 232 times>
#11 0xc050889e in vrele () at /usr/src/sys/kern/vfs_subr.c:2220
td = (struct thread *) 0xc2c01d10
#12 0xc055e569 in ffs_unmount (mp=0xc2a05000, mntflags=524288, td=0xc2c01d10)
at /usr/src/sys/ufs/ffs/ffs_vfsops.c:997
ump = (struct ufsmount *) 0xc2a39800
fs = (struct fs *) 0xc2c01d10
error = -1029181440
flags = 0
#13 0xc0503f14 in dounmount (mp=0xc2a05000, flags=524288, td=0xc2c01d10) at
/usr/src/sys/kern/vfs_mount.c:1339
coveredvp = (struct vnode *) 0x0
fsrootvp = (struct vnode *) 0xc2a7fc8c
error = 0
async_flag = 0
#14 0xc050a12e in vfs_unmountall () at /usr/src/sys/kern/vfs_subr.c:3175
mp = (struct mount *) 0xc2a05000
td = (struct thread *) 0xc2c01d10
error = 0
#15 0xc04b0c49 in boot (howto=0) at /usr/src/sys/kern/kern_shutdown.c:357
bp = (struct buf *) 0xc7b12fe8
iter = 2
nbusy = 0
pbusy = 11
subiter = 0
#16 0xc04b0556 in reboot (td=0x0, uap=0x0) at
/usr/src/sys/kern/kern_shutdown.c:178
error = 0
#17 0xc05ba570 in syscall (frame=
{tf_fs = 47, tf_es = 47, tf_ds = 47, tf_edi = 0, tf_esi = 0, tf_ebp =
-1077937072, tf_isp = -755798668, tf_ebx = 2, tf_edx = -1, tf_ecx =
672426276, tf_eax = 55, tf_trapno = 12, tf_err = 2, tf_eip = 671765307, tf_cs
= 31, tf_eflags = 582, tf_esp = -1077937140, tf_ss = 47}) at
/usr/src/sys/i386/i386/trap.c:1009
params = 0xbfbffc10---Can't read userspace from dump, or kernel
process---
---------------------------------------
Robin P. Blanchard
Systems Integration Specialist
Georgia Center for Continuing Education
fon: 706.542.2404 < > fax: 706.542.6546
---------------------------------------
More information about the freebsd-current
mailing list