Re: kernel panic at shutdown with freebsd 7.0 current snapshot (oct-2007)

On 10/24/07, Patrick Dung <patrick_dkt_at_yahoo.com.hk> wrote:
> Hi
>
> I have ZFS (and snapshot) mounted.
> Then shutdown by `shutdown -p now`.
>
> There is the dump:
>
> # kgdb /boot/kernel/kernel.symbols vmcore.0
> [GDB will not be able to debug user-mode threads:
> /usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"]
> GNU gdb 6.1.1 [FreeBSD]
> Copyright 2004 Free Software Foundation, Inc.
> GDB is free software, covered by the GNU General Public License, and
> you are
> welcome to change it and/or distribute copies of it under certain
> conditions.
> Type "show copying" to see the conditions.
> There is absolutely no warranty for GDB.  Type "show warranty" for
> details.
> This GDB was configured as "i386-marcel-freebsd".
>
> Unread portion of the kernel message buffer:
> panic: vrele: negative ref cnt
> cpuid = 0
> KDB: enter: panic
> panic: from debugger
> cpuid = 0
> Uptime: 8h44m12s
> Physical memory: 507 MB
> Dumping 120 MB: 105 89 73 57 41 25 9
>
> #0  doadump () at pcpu.h:195
> 195     pcpu.h: No such file or directory.
>        in pcpu.h
> (kgdb) where
> #0  doadump () at pcpu.h:195
> #1  0xc074d98e in boot (howto=260) at
> /usr/src/sys/kern/kern_shutdown.c:409
> #2  0xc074dc4b in panic (fmt=Variable "fmt" is not available.
> ) at /usr/src/sys/kern/kern_shutdown.c:563
> #3  0xc048cab7 in db_panic (addr=Could not find the frame base for
> "db_panic".
> ) at /usr/src/sys/ddb/db_command.c:433
> #4  0xc048d4a5 in db_command_loop () at
> /usr/src/sys/ddb/db_command.c:401
> #5  0xc048ec15 in db_trap (type=3, code=0) at
> /usr/src/sys/ddb/db_main.c:222
> #6  0xc07748e6 in kdb_trap (type=3, code=0, tf=0xd53d7984) at
> /usr/src/sys/kern/subr_kdb.c:502
> #7  0xc0a02dfb in trap (frame=0xd53d7984) at
> /usr/src/sys/i386/i386/trap.c:621
> #8  0xc09e87eb in calltrap () at /usr/src/sys/i386/i386/exception.s:139
> #9  0xc0774a62 in kdb_enter (msg=0xc0a996bc "panic") at cpufunc.h:60
> #10 0xc074dc34 in panic (fmt=0xc0aa528a "vrele: negative ref cnt") at
> /usr/src/sys/kern/kern_shutdown.c:547
> #11 0xc07cb0a1 in vrele (vp=0xc2fccaa0) at
> /usr/src/sys/kern/vfs_subr.c:2117
> #12 0xc0725905 in fdfree (td=0xc2f29a50) at
> /usr/src/sys/kern/kern_descrip.c:1694
> #13 0xc072ea53 in exit1 (td=0xc2f29a50, rv=1) at
> /usr/src/sys/kern/kern_exit.c:272
> #14 0xc07508bf in sigexit (td=Variable "td" is not available.
> ) at /usr/src/sys/kern/kern_sig.c:2876
> #15 0xc0750c99 in postsig (sig=1) at /usr/src/sys/kern/kern_sig.c:2748
> #16 0xc077eb78 in ast (framep=0xd53d7d38) at
> /usr/src/sys/kern/subr_trap.c:250
> #17 0xc09e910d in doreti_ast () at
> /usr/src/sys/i386/i386/exception.s:290
> #18 0xd53d7d38 in ?? ()
> #19 0x0000003b in ?? ()
> #20 0x0000003b in ?? ()
> #21 0x0000003b in ?? ()
> #22 0x00000000 in ?? ()
> #23 0xffffffff in ?? ()
> #24 0xbfbfee58 in ?? ()
> #25 0xd53d7d64 in ?? ()
> #26 0x00000000 in ?? ()
> #27 0x0804fb20 in ?? ()
> #28 0x00000000 in ?? ()
> #29 0x00000004 in ?? ()
> #30 0x0000000c in ?? ()
> #31 0x00000002 in ?? ()
> #32 0x28167553 in ?? ()
> #33 0x00000033 in ?? ()
> #34 0x00000247 in ?? ()
> #35 0xbfbfee1c in ?? ()
> #36 0x0000003b in ?? ()
> #37 0x00000000 in ?? ()
> #38 0x00000000 in ?? ()
> #39 0x00000000 in ?? ()
> #40 0x00000000 in ?? ()
> #41 0x0116c000 in ?? ()
> #42 0xc2f5bd48 in ?? ()
> ---Type <return> to continue, or q <return> to quit---
> #43 0xc31e1000 in ?? ()
> #44 0xd53d7878 in ?? ()
> #45 0xd53d7854 in ?? ()
> #46 0xc2f29a50 in ?? ()
> #47 0xc076a756 in sched_switch (td=0x0, newtd=0xffffffff, flags=Cannot
> access memory at address 0xbfbfee68
> ) at /usr/src/sys/kern/sched_4bsd.c:907
> Previous frame inner to this frame (corrupt stack?)
> (kgdb)
>
> Regards
> Patrick
>

I got exactly the same panic today.

--niki