kernel panic at shutdown with freebsd 7.0 current snapshot (oct-2007)

Hi

I have ZFS (and snapshot) mounted.
Then shutdown by `shutdown -p now`.

There is the dump:

# kgdb /boot/kernel/kernel.symbols vmcore.0
[GDB will not be able to debug user-mode threads:
/usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"]
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and
you are
welcome to change it and/or distribute copies of it under certain
conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for
details.
This GDB was configured as "i386-marcel-freebsd".

Unread portion of the kernel message buffer:
panic: vrele: negative ref cnt
cpuid = 0
KDB: enter: panic
panic: from debugger
cpuid = 0
Uptime: 8h44m12s
Physical memory: 507 MB
Dumping 120 MB: 105 89 73 57 41 25 9

#0  doadump () at pcpu.h:195
195     pcpu.h: No such file or directory.
        in pcpu.h
(kgdb) where
#0  doadump () at pcpu.h:195
#1  0xc074d98e in boot (howto=260) at
/usr/src/sys/kern/kern_shutdown.c:409
#2  0xc074dc4b in panic (fmt=Variable "fmt" is not available.
) at /usr/src/sys/kern/kern_shutdown.c:563
#3  0xc048cab7 in db_panic (addr=Could not find the frame base for
"db_panic".
) at /usr/src/sys/ddb/db_command.c:433
#4  0xc048d4a5 in db_command_loop () at
/usr/src/sys/ddb/db_command.c:401
#5  0xc048ec15 in db_trap (type=3, code=0) at
/usr/src/sys/ddb/db_main.c:222
#6  0xc07748e6 in kdb_trap (type=3, code=0, tf=0xd53d7984) at
/usr/src/sys/kern/subr_kdb.c:502
#7  0xc0a02dfb in trap (frame=0xd53d7984) at
/usr/src/sys/i386/i386/trap.c:621
#8  0xc09e87eb in calltrap () at /usr/src/sys/i386/i386/exception.s:139
#9  0xc0774a62 in kdb_enter (msg=0xc0a996bc "panic") at cpufunc.h:60
#10 0xc074dc34 in panic (fmt=0xc0aa528a "vrele: negative ref cnt") at
/usr/src/sys/kern/kern_shutdown.c:547
#11 0xc07cb0a1 in vrele (vp=0xc2fccaa0) at
/usr/src/sys/kern/vfs_subr.c:2117
#12 0xc0725905 in fdfree (td=0xc2f29a50) at
/usr/src/sys/kern/kern_descrip.c:1694
#13 0xc072ea53 in exit1 (td=0xc2f29a50, rv=1) at
/usr/src/sys/kern/kern_exit.c:272
#14 0xc07508bf in sigexit (td=Variable "td" is not available.
) at /usr/src/sys/kern/kern_sig.c:2876
#15 0xc0750c99 in postsig (sig=1) at /usr/src/sys/kern/kern_sig.c:2748
#16 0xc077eb78 in ast (framep=0xd53d7d38) at
/usr/src/sys/kern/subr_trap.c:250
#17 0xc09e910d in doreti_ast () at
/usr/src/sys/i386/i386/exception.s:290
#18 0xd53d7d38 in ?? ()
#19 0x0000003b in ?? ()
#20 0x0000003b in ?? ()
#21 0x0000003b in ?? ()
#22 0x00000000 in ?? ()
#23 0xffffffff in ?? ()
#24 0xbfbfee58 in ?? ()
#25 0xd53d7d64 in ?? ()
#26 0x00000000 in ?? ()
#27 0x0804fb20 in ?? ()
#28 0x00000000 in ?? ()
#29 0x00000004 in ?? ()
#30 0x0000000c in ?? ()
#31 0x00000002 in ?? ()
#32 0x28167553 in ?? ()
#33 0x00000033 in ?? ()
#34 0x00000247 in ?? ()
#35 0xbfbfee1c in ?? ()
#36 0x0000003b in ?? ()
#37 0x00000000 in ?? ()
#38 0x00000000 in ?? ()
#39 0x00000000 in ?? ()
#40 0x00000000 in ?? ()
#41 0x0116c000 in ?? ()
#42 0xc2f5bd48 in ?? ()
---Type <return> to continue, or q <return> to quit---
#43 0xc31e1000 in ?? ()
#44 0xd53d7878 in ?? ()
#45 0xd53d7854 in ?? ()
#46 0xc2f29a50 in ?? ()
#47 0xc076a756 in sched_switch (td=0x0, newtd=0xffffffff, flags=Cannot
access memory at address 0xbfbfee68
) at /usr/src/sys/kern/sched_4bsd.c:907
Previous frame inner to this frame (corrupt stack?)
(kgdb)

Regards
Patrick

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com