panic on FreeBSD 4.7-RELEASE

Kirill Ponomarew krion at FreeBSD.org
Sun Aug 24 13:48:25 PDT 2003


Hi,

I caught today panic on FreeBSD 4.7-RELEASE.

(kgdb) exec-file /var/crash/kernel.0
(kgdb) core-file /var/crash/vmcore.0
IdlePTD at phsyical address 0x00369000
initial pcb at physical address 0x002d58a0
panicstr: vrele: negative ref cnt
panic messages:
---
panic: vrele: negative ref cnt

syncing disks... 9 done
Uptime: 6d1h21m35s

dumping to dev #twed/0x20001, offset 2097184
dump 1023 1022 1021 1020 1019 1018 1017 1016 1015 1014 1013
1012 1011 1010 1009 1008 1007 1006 1005 1004 1003 1002 1001
1000 999 998 997 996 995 994 993 992 991 990 989 988 987 986
985 984 983 982 981 980 979 978 977 976 975 974 973 972 971 970
969 968 967 966 965 964 963 962 961 960 959 958 957 956 955 954
---
#0  dumpsys () at /usr/src/sys/kern/kern_shutdown.c:487
487             if (dumping++) {
(kgdb) where
#0  dumpsys () at /usr/src/sys/kern/kern_shutdown.c:487
#1  0xc01825ab in boot (howto=256) at
/usr/src/sys/kern/kern_shutdown.c:316
#2  0xc01829e9 in panic (fmt=0xc0284c22 "vrele: negative ref
cnt") at /usr/src/sys/kern/kern_shutdown.c:595
#3  0xc01b06a6 in vrele (vp=0xe04d8f80) at /usr/src/sys/kern/vfs_subr.c:1600
#4  0xc01b5435 in rename (p=0xe011e700, uap=0xe08c2f80) at
/usr/src/sys/kern/vfs_syscalls.c:2742
#5  0xc0257add in syscall2 (frame={tf_fs = 47, tf_es = 47,
tf_ds = 47, tf_edi = -1077944528, 
tf_esi = -1077945552, tf_ebp = -1077949712, tf_isp =
-527683628, tf_ebx = -1077945552, 
tf_edx = 136795648, tf_ecx = 2, tf_eax = 128, tf_trapno =
22, tf_err = 2, 
tf_eip = 673060184, tf_cs = 31, tf_eflags = 659, tf_esp =
-1077949756, tf_ss = 47})
at /usr/src/sys/i386/i386/trap.c:1175
#6  0xc0248815 in Xint0x80_syscall ()
#7  0x806b2da in ?? ()
#8  0x806b7c0 in ?? ()
#9  0x8082686 in ?? ()
#10 0x8082722 in ?? ()
#11 0x808296a in ?? ()
#12 0x80831e3 in ?? ()
#13 0x804c219 in ?? ()
#14 0x804acd9 in ?? ()
(kgdb) up 5
#5  0xc0257add in syscall2 (frame={tf_fs = 47, tf_es = 47,
tf_ds = 47, tf_edi = -1077944528, 
      tf_esi = -1077945552, tf_ebp = -1077949712, tf_isp =
-527683628, tf_ebx = -1077945552, 
      tf_edx = 136795648, tf_ecx = 2, tf_eax = 128, tf_trapno =
22, tf_err = 2, 
      tf_eip = 673060184, tf_cs = 31, tf_eflags = 659, tf_esp =
-1077949756, tf_ss = 47})
    at /usr/src/sys/i386/i386/trap.c:1175
1175            error = (*callp->sy_call)(p, args);
(kgdb) list
1170            p->p_retval[0] = 0;
1171            p->p_retval[1] = frame.tf_edx;
1172
1173            STOPEVENT(p, S_SCE, narg);      /* MP aware */
1174
1175            error = (*callp->sy_call)(p, args);
1176
1177            /*
1178             * MP SAFE (we may or may not have the MP lock at this point)
1179             */
(kgdb) down
#4  0xc01b5435 in rename (p=0xe011e700, uap=0xe08c2f80) at
/usr/src/sys/kern/vfs_syscalls.c:2742
2742                    vrele(fromnd.ni_startdir);
(kgdb) list
2737            ASSERT_VOP_UNLOCKED(fromnd.ni_vp, "rename");
2738            ASSERT_VOP_UNLOCKED(tond.ni_dvp, "rename");
2739            ASSERT_VOP_UNLOCKED(tond.ni_vp, "rename");
2740    out1:
2741            if (fromnd.ni_startdir)
2742                    vrele(fromnd.ni_startdir);
2743            if (error == -1)
2744                    return (0);
2745            return (error);
2746    }
#3  0xc01b06a6 in vrele (vp=0xe04d8f80) at
/usr/src/sys/kern/vfs_subr.c:1600
1600                    panic("vrele: negative ref cnt");
(kgdb) list
1595            } else {
1596    #ifdef DIAGNOSTIC 1597                    vprint("vrele: negative ref count", vp);
1598                    simple_unlock(&vp->v_interlock);
1599    #endif
1600                    panic("vrele: negative ref cnt");
1601            }
1602    }
1603
1604    void

I hope it can help.

-Kirill
-------------- next part --------------
#
# GENERIC -- Generic kernel configuration file for FreeBSD/i386
#
# For more information on this file, please read the handbook section on
# Kernel Configuration Files:
#
#    http://www.FreeBSD.org/handbook/kernelconfig-config.html
#
# The handbook is also available locally in /usr/share/doc/handbook
# if you've installed the doc distribution, otherwise always see the
# FreeBSD World Wide Web server (http://www.FreeBSD.org/) for the
# latest information.
#
# An exhaustive list of options and more detailed explanations of the
# device lines is also present in the ./LINT configuration file. If you are
# in doubt as to the purpose or necessity of a line, check first in LINT.
#
# $FreeBSD: src/sys/i386/conf/GENERIC,v 1.246.2.43 2002/05/23 17:04:01 obrien Exp $

machine		i386
#cpu		I386_CPU
#cpu		I486_CPU
cpu		I586_CPU
cpu		I686_CPU
ident	 	MSINW	
maxusers	0

makeoptions	DEBUG=-g		#Build kernel with gdb(1) debug symbols

options 	MATH_EMULATE		#Support for x87 emulation
options 	INET			#InterNETworking
#options 	INET6			#IPv6 communications protocols
options 	FFS			#Berkeley Fast Filesystem
options 	FFS_ROOT		#FFS usable as root device [keep this!]
options 	SOFTUPDATES		#Enable FFS soft updates support
options 	UFS_DIRHASH		#Improve performance on big directories
options 	MFS			#Memory Filesystem
options 	MD_ROOT			#MD is a potential root device
#options 	NFS			#Network Filesystem
#options 	NFS_ROOT		#NFS usable as root device, NFS required
options 	MSDOSFS			#MSDOS Filesystem
options 	CD9660			#ISO 9660 Filesystem
options		NWFS			#Netware Filesystem
options 	CD9660_ROOT		#CD-ROM usable as root, CD9660 required
options 	PROCFS			#Process filesystem
options 	COMPAT_43		#Compatible with BSD 4.3 [KEEP THIS!]
options 	SCSI_DELAY=3000		#Delay (in ms) before probing SCSI
options 	UCONSOLE		#Allow users to grab the console
options 	USERCONFIG		#boot -c editor
options 	VISUAL_USERCONFIG	#visual boot -c editor
options 	KTRACE			#ktrace(1) support
options 	SYSVSHM			#SYSV-style shared memory
options 	SYSVMSG			#SYSV-style message queues
options 	SYSVSEM			#SYSV-style semaphores
options 	P1003_1B		#Posix P1003_1B real-time extensions
options 	_KPOSIX_PRIORITY_SCHEDULING
options		ICMP_BANDLIM		#Rate limit bad replies
options 	KBD_INSTALL_CDEV	# install a CDEV entry in /dev
options	 	DDB
options 	DDB_UNATTENDED
options         SHMALL=16384
options         SHMMAX="(SHMMAXPGS*PAGE_SIZE+1)"
options         SHMMAXPGS=8192
options         SHMMIN=128
options         SHMMNI=128
options         SHMSEG=96
	

# To make an SMP kernel, the next two are needed
#options 	SMP			# Symmetric MultiProcessor Kernel
#options 	APIC_IO			# Symmetric (APIC) I/O

device		isa
device		eisa
device		pci

# Floppy drives
device		fdc0	at isa? port IO_FD1 irq 6 drq 2
device		fd0	at fdc0 drive 0
device		fd1	at fdc0 drive 1
#
# If you have a Toshiba Libretto with its Y-E Data PCMCIA floppy,
# don't use the above line for fdc0 but the following one:
#device		fdc0

# ATA and ATAPI devices
device		ata0	at isa? port IO_WD1 irq 14
device		ata1	at isa? port IO_WD2 irq 15
device		ata
device		atadisk			# ATA disk drives
device		atapicd			# ATAPI CDROM drives
device		atapifd			# ATAPI floppy drives
device		atapist			# ATAPI tape drives
options 	ATA_STATIC_ID		#Static device numbering

# SCSI Controllers
#device		ahb		# EISA AHA1742 family
device		ahc		# AHA2940 and onboard AIC7xxx devices
#device		amd		# AMD 53C974 (Tekram DC-390(T))
#device		isp		# Qlogic family
#device		ncr		# NCR/Symbios Logic
#device		sym		# NCR/Symbios Logic (newer chipsets)
#options		SYM_SETUP_LP_PROBE_MAP=0x40
				# Allow ncr to attach legacy NCR devices when 
				# both sym and ncr are configured

#device		adv0	at isa?
#device		adw
#device		bt0	at isa?
#device		aha0	at isa?
device		aic0	at isa?

#device		ncv		# NCR 53C500
#device		nsp		# Workbit Ninja SCSI-3
#device		stg		# TMC 18C30/18C50

# SCSI peripherals
device		scbus		# SCSI bus (required)
device		da		# Direct Access (disks)
device		sa		# Sequential Access (tape etc)
device		cd		# CD
device		pass		# Passthrough device (direct SCSI access)

# RAID controllers interfaced to the SCSI subsystem
#device		asr		# DPT SmartRAID V, VI and Adaptec SCSI RAID
#device		dpt		# DPT Smartcache - See LINT for options!
#device          iir             # Intel Integrated RAID
#device		mly		# Mylex AcceleRAID/eXtremeRAID
#device		ciss		# Compaq SmartRAID 5* series

# RAID controllers
#device		aac		# Adaptec FSA RAID, Dell PERC2/PERC3
#device		aacp		# SCSI passthrough for aac (requires CAM)
#device		ida		# Compaq Smart RAID
#device		amr		# AMI MegaRAID
#device		mlx		# Mylex DAC960 family
device		twe		# 3ware Escalade

# atkbdc0 controls both the keyboard and the PS/2 mouse
device		atkbdc0	at isa? port IO_KBD
device		atkbd0	at atkbdc? irq 1 flags 0x1
device		psm0	at atkbdc? irq 12

device		vga0	at isa?

# splash screen/screen saver
pseudo-device	splash

# syscons is the default console driver, resembling an SCO console
device		sc0	at isa? flags 0x100

# Enable this and PCVT_FREEBSD for pcvt vt220 compatible console driver
#device		vt0	at isa?
#options 	XSERVER			# support for X server on a vt console
#options 	FAT_CURSOR		# start with block cursor
# If you have a ThinkPAD, uncomment this along with the rest of the PCVT lines
#options 	PCVT_SCANSET=2		# IBM keyboards are non-std

# Floating point support - do not disable.
device		npx0	at nexus? port IO_NPX irq 13

# Power management support (see LINT for more options)
device		apm0    at nexus? disable flags 0x20 # Advanced Power Management

# PCCARD (PCMCIA) support
#device		card
#device		pcic0	at isa? irq 0 port 0x3e0 iomem 0xd0000
#device		pcic1	at isa? irq 0 port 0x3e2 iomem 0xd4000 disable

# Serial (COM) ports
device		sio0	at isa? port IO_COM1 flags 0x10 irq 4
device		sio1	at isa? port IO_COM2 irq 3
#device		sio2	at isa? disable port IO_COM3 irq 5
#device		sio3	at isa? disable port IO_COM4 irq 9

# Parallel port
device		ppc0	at isa? irq 7
device		ppbus		# Parallel port bus (required)
device		lpt		# Printer
device		plip		# TCP/IP over parallel
device		ppi		# Parallel port interface device
#device		vpo		# Requires scbus and da


# PCI Ethernet NICs.
#device		de		# DEC/Intel DC21x4x (``Tulip'')
device		em		# Intel PRO/1000 adapter Gigabit Ethernet Card (``Wiseman'')
#device		txp		# 3Com 3cR990 (``Typhoon'')
#device		vx		# 3Com 3c590, 3c595 (``Vortex'')

# PCI Ethernet NICs that use the common MII bus controller code.
# NOTE: Be sure to keep the 'device miibus' line in order to use these NICs!
device		miibus		# MII bus support
#device		dc		# DEC/Intel 21143 and various workalikes
device		fxp		# Intel EtherExpress PRO/100B (82557, 82558)
#device		pcn		# AMD Am79C97x PCI 10/100 NICs
#device		rl		# RealTek 8129/8139
#device		sf		# Adaptec AIC-6915 (``Starfire'')
#device		sis		# Silicon Integrated Systems SiS 900/SiS 7016
#device		ste		# Sundance ST201 (D-Link DFE-550TX)
#device		tl		# Texas Instruments ThunderLAN
#device		tx		# SMC EtherPower II (83c170 ``EPIC'')
#device		vr		# VIA Rhine, Rhine II
#device		wb		# Winbond W89C840F
#device		xl		# 3Com 3c90x (``Boomerang'', ``Cyclone'')
#device		bge		# Broadcom BCM570x (``Tigon III'')

# ISA Ethernet NICs.
# 'device ed' requires 'device miibus'
#device		ed0	at isa? port 0x280 irq 10 iomem 0xd8000
#device		ex
#device		ep
#device		fe0	at isa? port 0x300
# Xircom Ethernet
#device		xe
# PRISM I IEEE 802.11b wireless NIC.
#device		awi
# WaveLAN/IEEE 802.11 wireless NICs. Note: the WaveLAN/IEEE really
# exists only as a PCMCIA device, so there is no ISA attachment needed
# and resources will always be dynamically assigned by the pccard code.
#device		wi
# Aironet 4500/4800 802.11 wireless NICs. Note: the declaration below will
# work for PCMCIA and PCI cards, as well as ISA cards set to ISA PnP
# mode (the factory default). If you set the switches on your ISA
# card for a manually chosen I/O address and IRQ, you must specify
# those parameters here.
#device		an
# The probe order of these is presently determined by i386/isa/isa_compat.c.
#device		ie0	at isa? port 0x300 irq 10 iomem 0xd0000
#device		le0	at isa? port 0x300 irq 5 iomem 0xd0000
#device		lnc0	at isa? port 0x280 irq 10 drq 0
#device		cs0	at isa? port 0x300
#device		sn0	at isa? port 0x300 irq 10

# Pseudo devices - the number indicates how many units to allocate.
pseudo-device	loop		# Network loopback
pseudo-device	ether		# Ethernet support
#pseudo-device	sl	1	# Kernel SLIP
#pseudo-device	ppp	1	# Kernel PPP
#pseudo-device	tun		# Packet tunnel.
pseudo-device	pty		# Pseudo-ttys (telnet etc)
#pseudo-device	md		# Memory "disks"
#pseudo-device	gif		# IPv6 and IPv4 tunneling
#pseudo-device	faith	1	# IPv6-to-IPv4 relaying (translation)

# Novell
pseudo-device   ef
options         IPX
options         NCP
options         ETHER_II                # enable Ethernet_II frame
options         ETHER_8023              # enable Ethernet_802.3 (Novell) frame
options         ETHER_8022              # enable Ethernet_802.2 frame
options         ETHER_SNAP              # enable Ethernet_802.2/SNAP frame


# The `bpf' pseudo-device enables the Berkeley Packet Filter.
# Be aware of the administrative consequences of enabling this!
pseudo-device	bpf		#Berkeley packet filter

# USB support
device		uhci		# UHCI PCI->USB interface
device		ohci		# OHCI PCI->USB interface
device		usb		# USB Bus (required)
device		ugen		# Generic
device		uhid		# "Human Interface Devices"
device		ukbd		# Keyboard
device		ulpt		# Printer
device		umass		# Disks/Mass storage - Requires scbus and da
device		ums		# Mouse
device		uscanner	# Scanners
device		urio		# Diamond Rio MP3 Player
# USB Ethernet, requires mii
#device		aue		# ADMtek USB ethernet
#device		cue		# CATC USB ethernet
#device		kue		# Kawasaki LSI USB ethernet
-------------- next part --------------
Copyright (c) 1992-2002 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
	The Regents of the University of California. All rights reserved.
FreeBSD 4.7-RELEASE #0: Thu Mar  6 12:27:11 CET 2003
    root at serv.msi-europe.jis.de:/usr/obj/usr/src/sys/MSINW
Timecounter "i8254"  frequency 1193182 Hz
CPU: AMD Athlon(TM) XP 2400+ (2000.08-MHz 686-class CPU)
  Origin = "AuthenticAMD"  Id = 0x681  Stepping = 1
  Features=0x383fbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR,SSE>
  AMD Features=0xc0400000<AMIE,DSP,3DNow!>
real memory  = 1073725440 (1048560K bytes)
avail memory = 1041793024 (1017376K bytes)
Preloaded elf kernel "kernel" at 0xc034a000.
Pentium Pro MTRR support enabled
Using $PIR table, 10 entries at 0xc00f1bf0
npx0: <math processor> on motherboard
npx0: INT 16 interface
pcib0: <Host to PCI bridge> on motherboard
pci0: <PCI bus> on pcib0
pcib1: <PCI to PCI bridge (vendor=1106 device=b099)> at device 1.0 on pci0
pci1: <PCI bus> on pcib1
pci1: <ATI model 5446 graphics accelerator> at 0.0 irq 11
pci0: <unknown card> (vendor=0x14e4, dev=0x4401) at 9.0 irq 12
twe0: <3ware Storage Controller> port 0xb800-0xb80f mem 0xf1800000-0xf1ffffff,0xf2000000-0xf200000f irq 15 at device 11.0 on pci0
twe0: 8 ports, Firmware FE7X 1.05.00.036, BIOS BE7X 1.08.00.044
fxp0: <Intel Pro 10/100B/100+ Ethernet> port 0xb400-0xb43f mem 0xf0800000-0xf08fffff,0xf1000000-0xf1000fff irq 11 at device 13.0 on pci0
fxp0: Ethernet address 00:02:b3:4c:0b:66
inphy0: <i82555 10/100 media interface> on miibus0
inphy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
fxp1: <Intel Pro 10/100B/100+ Ethernet> port 0xb000-0xb03f mem 0xef800000-0xef81ffff,0xf0000000-0xf0000fff irq 10 at device 14.0 on pci0
fxp1: Ethernet address 00:02:b3:4c:32:12
inphy1: <i82555 10/100 media interface> on miibus1
inphy1:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
ahc0: <Adaptec 19160B Ultra160 SCSI adapter> port 0xa800-0xa8ff mem 0xef000000-0xef000fff irq 12 at device 15.0 on pci0
aic7892: Ultra160 Wide Channel A, SCSI Id=7, 32/253 SCBs
uhci0: <VIA 83C572 USB controller> port 0xa400-0xa41f irq 14 at device 16.0 on pci0
usb0: <VIA 83C572 USB controller> on uhci0
usb0: USB revision 1.0
uhub0: VIA UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
uhci1: <VIA 83C572 USB controller> port 0xa000-0xa01f irq 14 at device 16.1 on pci0
usb1: <VIA 83C572 USB controller> on uhci1
usb1: USB revision 1.0
uhub1: VIA UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub1: 2 ports with 2 removable, self powered
uhci2: <VIA 83C572 USB controller> port 0x9800-0x981f irq 14 at device 16.2 on pci0
usb2: <VIA 83C572 USB controller> on uhci2
usb2: USB revision 1.0
uhub2: VIA UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub2: 2 ports with 2 removable, self powered
pci0: <USB controller> at 16.3 irq 14
isab0: <PCI to ISA bridge (vendor=1106 device=3177)> at device 17.0 on pci0
isa0: <ISA bus> on isab0
atapci0: <VIA 8235 ATA133 controller> at device 17.1 on pci0
atapci0: ATA channel disabled by BIOS
orm0: <Option ROMs> at iomem 0xc0000-0xcffff,0xd0000-0xd17ff,0xd4000-0xd4fff on isa0
fdc0: <NEC 72065B or clone> at port 0x3f0-0x3f5,0x3f7 irq 6 drq 2 on isa0
fdc0: FIFO enabled, 8 bytes threshold
fd0: <1440-KB 3.5" drive> on fdc0 drive 0
ata0 at port 0x1f0-0x1f7,0x3f6 irq 14 on isa0
ata1 at port 0x170-0x177,0x376 irq 15 on isa0
atkbdc0: <Keyboard controller (i8042)> at port 0x60,0x64 on isa0
atkbd0: <AT Keyboard> flags 0x1 irq 1 on atkbdc0
kbd0 at atkbd0
vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
sc0: <System console> at flags 0x100 on isa0
sc0: VGA <16 virtual consoles, flags=0x300>
sio0 at port 0x3f8-0x3ff irq 4 flags 0x10 on isa0
sio0: type 16550A
sio1 at port 0x2f8-0x2ff irq 3 on isa0
sio1: type 16550A
ppc0: <Parallel port> at port 0x378-0x37f irq 7 on isa0
ppc0: Generic chipset (NIBBLE-only) in COMPATIBLE mode
ppbus0: IEEE1284 device found /NIBBLE/ECP
Probing for PnP devices on ppbus0:
ppbus0: <Hewlett-Packard HP LaserJet 5Si> PJL,MLC,PCL
lpt0: <Printer> on ppbus0
lpt0: Interrupt-driven port
ppi0: <Parallel I/O> on ppbus0
plip0: <PLIP network interface> on ppbus0
ncp_load: [210-213]
Waiting 3 seconds for SCSI devices to settle
twed0: <TwinStor, Normal> on twe0
twed0: 117799MB (241252672 sectors)
twed1: <RAID5, Normal> on twe0
twed1: 235598MB (482505216 sectors)
twe0: command interrupt
sa0 at ahc0 bus 0 target 4 lun 0
sa0: <SONY SDX-500C 010c> Removable Sequential Access SCSI-2 device 
sa0: 40.000MB/s transfers (20.000MHz, offset 15, 16bit)
Mounting root from ufs:/dev/twed0s1a
WARNING: / was not properly dismounted
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-stable/attachments/20030824/9951aff3/attachment.bin


More information about the freebsd-stable mailing list