6.0BETA4: panic: unrhdr has 9 allocations

[Robert Watson]

On Mon, 12 Sep 2005, Rene Ladan wrote:

> Hi,
>
> on

Could you file a PR on this?  It sounds like a bug in one of three places: 
the unit allocation routines, procfs, or vfs.  If I had to guess, procfs 
or VFS, but you never know.

Thanks,

Robert N M Watson

>
> FreeBSD 6.0-BETA4 #10: Sun Sep  4 22:19:26 CEST 2005 /usr/obj/usr/src/sys/RENE
>
> I saw this panic after the following:
>
> # mount_procfs procfs /proc
>  (loads procfs.ko and pseudofs.ko)
> <play with truss>
> # umount /proc
> # kldunload procfs
>
> I'll leave the dump around for a while.
>
> #0  doadump () at pcpu.h:165
> 165	pcpu.h: No such file or directory.
> 	in pcpu.h
> (kgdb) bt f
> #0  doadump () at pcpu.h:165
> No locals.
> #1  0xc044c9a6 in db_fncall (dummy1=0, dummy2=0, dummy3=1999,
>    dummy4=0xcf174a3c " ßuÀ") at /usr/src/sys/ddb/db_command.c:489
> 	fn_addr = -1068248576
> 	args = {0, -820557304, -1066944787, -1065639616, 28, -820557304,
>  -1069226763, 32, -1066234688, 2}
> 	nargs = 0
> 	retval = 544973344
> 	t = 0
> #2  0xc044c722 in db_command (last_cmdp=0xc075d624, cmd_table=0x0,
>    aux_cmd_tablep=0xc07235f0, aux_cmd_tablep_end=0xc07235f4)
>    at /usr/src/sys/ddb/db_command.c:349
> 	cmd = (struct command *) 0xc0728e40
> 	t = 0
> 	modif = " ßuÀ\000\000\000\000XJ\027Ï\r\000\000\000 Ø|À\r\000\000\000\001\000\000\000xJ\027ÏÆÙiÀ@¡{À\aK\000 $Ù|ÀÀ\037{À ßuÀx\000\000\000 ßuÀ\000\000\000\000\234J\027ÏñíDÀÇ\005pÀpêDÀ\000\000\000\000\020\000\000\000\000\000\000\000 ßuÀ\206àDÀ ßuÀØÖuÀx\000\000\000\000K\027Ï"
> 	addr = 0
> 	count = 1999
> 	have_addr = 0
> 	result = 0
> #3  0xc044c835 in db_command_loop () at /usr/src/sys/ddb/db_command.c:455
> No locals.
> #4  0xc044e9a5 in db_trap (type=3, code=0) at /usr/src/sys/ddb/db_main.c:221
> 	jb = {{_jb = {-820557056, -820557084, -820557004, -1042394752, 0,
>      -1069225658, 0, 0, 0, 0, -820557004, -1068123920}}}
> 	prev_jb = (void *) 0x0
> 	bkpt = 0
> #5  0xc055b977 in kdb_trap (type=0, code=0, tf=0xcf174b94)
>    at /usr/src/sys/kern/subr_kdb.c:473
> 	handled = -820556908
> #6  0xc06be108 in trap (frame=
>      {tf_fs = -1066401784, tf_es = 40, tf_ds = -820576216, tf_edi = 1, tf_esi = -1066387444, tf_ebp = -820556836, tf_isp = -820556864, tf_ebx = -820556780, tf_edx = 0, tf_ecx = -1056878592, tf_eax = 18, tf_trapno = 3, tf_err = 0, tf_eip = -1068124560, tf_cs = 32, tf_eflags = 642, tf_esp = -1066392053, tf_ss = -1066400620}) at /usr/src/sys/i386/i386/trap.c:601
> 	td = (struct thread *) 0xc1de5180
> 	p = (struct proc *) 0xc16d520c
> 	sticks = 3229006976
> 	i = 0
> 	ucode = 0
> 	type = 3
> 	code = 0
> 	eva = 0
> #7  0xc06ab72a in calltrap () at /usr/src/sys/i386/i386/exception.s:139
> No locals.
> #8  0xc0700008 in ?? ()
> No symbol table info available.
> #9  0x00000028 in ?? ()
> No symbol table info available.
> #10 0xcf170028 in ?? ()
> No symbol table info available.
> #11 0x00000001 in ?? ()
> No symbol table info available.
> #12 0xc070380c in ?? ()
> No symbol table info available.
> #13 0xcf174bdc in ?? ()
> No symbol table info available.
> #14 0xcf174bc0 in ?? ()
> No symbol table info available.
> #15 0xcf174c14 in ?? ()
> No symbol table info available.
> #16 0x00000000 in ?? ()
> No symbol table info available.
> #17 0xc1015000 in ?? ()
> No symbol table info available.
> #18 0x00000012 in ?? ()
> No symbol table info available.
> #19 0x00000003 in ?? ()
> No symbol table info available.
> #20 0x00000000 in ?? ()
> No symbol table info available.
> #21 0xc055b670 in kdb_enter (msg=0x0) at cpufunc.h:60
> No locals.
> #22 0xc053dab5 in panic (fmt=0xc070380c "unrhdr has %u allocations")
>    at /usr/src/sys/kern/kern_shutdown.c:537
> 	td = (struct thread *) 0xc1de5180
> 	bootopt = 256
> 	newpanic = 1
> 	ap = 0xcf174c14 "\t"
> 	buf = "unrhdr has 9 allocations", '\0' <repeats 231 times>
> #23 0xc0565e62 in delete_unrhdr (uh=0x0) at /usr/src/sys/kern/subr_unit.c:321
> No locals.
> #24 0xc271f54a in ?? ()
> No symbol table info available.
> #25 0xc21dfa80 in ?? ()
> No symbol table info available.
> #26 0xc07659dc in lockbuilder_pool ()
> No symbol table info available.
> #27 0xc26457a0 in ?? ()
> No symbol table info available.
> #28 0xc26457a0 in ?? ()
> No symbol table info available.
> #29 0xcf174c40 in ?? ()
> No symbol table info available.
> #30 0xc2644089 in ?? ()
> No symbol table info available.
> #31 0xc2645840 in ?? ()
> No symbol table info available.
> #32 0xc26457a0 in ?? ()
> No symbol table info available.
> #33 0xcf174c54 in ?? ()
> No symbol table info available.
> #34 0xc059dbab in vfs_unregister (vfc=0xc26457a0)
>    at /usr/src/sys/kern/vfs_init.c:265
> 	vfsp = (struct vfsconf *) 0xc2645840
> 	error = 0
> 	maxtypenum = 0
> Previous frame inner to this frame (corrupt stack?)
> (kgdb) q
> -- 
> GPG fingerprint = 5FFA 3959 3377 C697 8428  24D0 BF3E F4A9 AE33 5DCC
>
> "It won't fit on the line."
> 		-- me, 2001
>