kernel/4602: amap_pp_adjref: negative reference count

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
3 messages Options
Reply | Threaded
Open this post in threaded view
|

kernel/4602: amap_pp_adjref: negative reference count

Manuel Pata
>Number:         4602
>Category:       kernel
>Synopsis:       amap_pp_adjref: negative reference count
>Confidential:   yes
>Severity:       serious
>Priority:       medium
>Responsible:    bugs
>State:          open
>Quarter:        
>Keywords:      
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Sun Nov 06 23:30:01 GMT 2005
>Closed-Date:
>Last-Modified:
>Originator:     Manuel Pata
>Release:        3.8-release
>Organization:
net
>Environment:
        OpenBSD 3.8 (GENERIC) #138: Sat Sep 10 15:41:37 MDT 2005
    [hidden email]:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel Celeron ("GenuineIntel" 686-class, 128KB L2 cache) 501 MHz
cpu0: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR
real mem  = 167354368 (163432K)
avail mem = 145838080 (142420K)
using 2068 buffers containing 8470528 bytes (8272K) of memory
mainbus0 (root)
bios0 at mainbus0: AT/286+(43) BIOS, date 01/05/00, BIOS32 rev. 0 @ 0xfb2d0
apm0 at bios0: Power Management spec V1.2
apm0: AC on, battery charge unknown
apm0: flags 70102 dobusy 1 doidle 1
pcibios0 at bios0: rev 2.1 @ 0xf0000/0xb758
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xfde40/128 (6 entries)
pcibios0: PCI Exclusive IRQs: 5 10 11
pcibios0: PCI Interrupt Router at 000:07:0 ("VIA VT82C596A ISA" rev 0x00)
pcibios0: PCI bus #1 is the last bus
bios0: ROM list: 0xc0000/0x8000 0xc8000/0x800
cpu0 at mainbus0
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 "VIA VT82C691 PCI" rev 0x44
ppb0 at pci0 dev 1 function 0 "VIA VT82C598 AGP" rev 0x00
pci1 at ppb0 bus 1
vga1 at pci1 dev 0 function 0 "S3 Trio3 DX2" rev 0x02
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
pcib0 at pci0 dev 7 function 0 "VIA VT82C596A ISA" rev 0x12
pciide0 at pci0 dev 7 function 1 "VIA VT82C571 IDE" rev 0x06: ATA66, channel 0 configured to compatibility, channel 1 configured to compatibility
wd0 at pciide0 channel 0 drive 0: <WDC AC13200B>
wd0: 16-sector PIO, LBA, 3098MB, 6346368 sectors
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 2
wd1 at pciide0 channel 1 drive 0: <ST320413A>
wd1: 16-sector PIO, LBA, 19092MB, 39102336 sectors
wd1(pciide0:1:0): using PIO mode 4, Ultra-DMA mode 4
uhci0 at pci0 dev 7 function 2 "VIA VT83C572 USB" rev 0x08: irq 11
usb0 at uhci0: USB revision 1.0
uhub0 at usb0
uhub0: VIA UHCI root hub, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
"VIA VT82C596B PM" rev 0x20 at pci0 dev 7 function 3 not configured
xl0 at pci0 dev 9 function 0 "3Com 3c905B 100Base-TX" rev 0x30: irq 10, address 00:10:5a:64:10:ff
exphy0 at xl0 phy 24: 3Com internal media interface
xl1 at pci0 dev 11 function 0 "3Com 3c905C 100Base-TX" rev 0x74: irq 5, address 00:01:02:f7:4c:ac
bmtphy0 at xl1 phy 24: Broadcom 3C905C internal PHY, rev. 6
isa0 at pcib0
isadma0 at isa0
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
pcppi0 at isa0 port 0x61
midi0 at pcppi0: <PC speaker>
spkr0 at pcppi0
sysbeep0 at pcppi0
lpt0 at isa0 port 0x378/4 irq 7
lm0 at isa0 port 0x290/8: W83781D
npx0 at isa0 port 0xf0/16: using exception 16
pccom0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
pccom0: console
pccom1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo
fdc0 at isa0 port 0x3f0/6 irq 6 drq 2
biomask fb45 netmask ff65 ttymask ffe7
pctr: 686-class user-level performance counters enabled
mtrr: Pentium Pro MTRR support
dkcsum: wd0 matches BIOS drive 0x80
dkcsum: wd1 matches BIOS drive 0x81
root on wd0a
rootdev=0x0 rrootdev=0x300 rawdev=0x302
WARNING: / was not properly unmounted

       
        System      : OpenBSD 3.8-release
        Architecture: OpenBSD.i386
        Machine     : i386
>Description:


ddb> show panic
amap_pp_adjref: negative reference count
ddb> trace
Debugger(1,0,0,1,d0e00360) at Debugger+0x4
panic(d050dae0,0,1,1,d42ed0a0) at panic+0x63
amap_pp_adjref(d42ed0a0,0,2001,ffffffff) at amap_pp_adjref+0x1a3
uvm_unmap_detach(d4304420,0,0,dd379cec) at uvm_unmap_detach+0x92
uvm_unmap_p(dd37a380,0,cfbfe000,0,dd37a384) at uvm_unmap_p+0xba
uvmspace_exec(dd379cec,0,cfbfe000,1ba40,0) at uvmspace_exec+0x10e
sys_execve(dd379cec,dd4d6f68,dd4d6f58,8544b880,15) at sys_execve+0x433
syscall() at syscall+0x2ee
--- syscall (number 59) ---
0x97e6ce5:
ddb> ps
   PID   PPID   PGRP    UID  S       FLAGS  WAIT       COMMAND
* 5643  22739  32434   1008  7    0x240104             perl
 22739  32514  32434   1008  3     0x44184  piperd     perl
 32514  13517  32434   1002  3      0x4084  wait       qmail-smtpd
 19833   6790  19833   1000  3      0x4086  pause      screen
 17756  18576  18576   1000  2      0x4006             gzip
 18576   2120  18576   1000  3      0x4086  pipewr     tar
  2120  32379   2120   1000  3      0x4082  pause      ksh
 32379  16214  16214   1000  3       0x180  select     sshd
 16214  14244  16214      0  3      0x4180  netio      sshd
  6790   9496   6790   1000  3      0x4082  pause      ksh
  9496  32049  32049   1000  3       0x184  select     sshd
 32049  14244  32049      0  3      0x4180  netio      sshd
 19987  21890  21890     67  3       0x184  semwait    httpd
 19959  21890  21890     67  3       0x184  semwait    httpd
  9686  21890  21890     67  3       0x184  select     httpd
  1795  21890  21890     67  3       0x184  semwait    httpd
 16944  21890  21890     67  3       0x184  semwait    httpd
 13615  10350  32434   1005  3      0x4080  piperd     qmail-clean
 31231  10350  32434   1006  3      0x4080  select     qmail-rspawn
   496  10350  32434      0  3      0x4080  select     qmail-lspawn
 13517  16033  32434   1002  3      0x4184  netcon     tcpserver
 10386  23771  32434   1003  3      0x4084  piperd     multilog
 21572  14213  32434   1003  3      0x4080  piperd     multilog
 10350  25817  32434   1007  3      0x4084  select     qmail-send
 21431      1  21431      0  3      0x4082  ttyin      getty
 16387      1  16387      0  3      0x4082  ttyin      getty
  1136      1   1136      0  3      0x4082  ttyin      getty
 25532      1  25532      0  3      0x4082  ttyin      getty
 31029      1  31029      0  3      0x4082  ttyin      getty
 23771  18114  32434      0  3      0x4084  poll       supervise
 16033  18114  32434      0  3      0x4084  poll       supervise
 14213  18114  32434      0  3      0x4084  poll       supervise
 25817  18114  32434      0  3      0x4084  poll       supervise
 14726  32434  32434      0  3      0x4080  piperd     readproctitle
 18114  32434  32434      0  3      0x4084  nanosleep  svscan
 27805      1  27805      0  3        0x84  select     cron
 32434      1  32434      0  3      0x4082  pause      sh
 16377      1  16377      0  3       0x184  nanosleep  perl
 15771  13216  13216     62  3       0x184  netcon     perl
    72  13216  13216     62  3       0x184  netcon     perl
  5824  13216  13216     62  3       0x184  netcon     perl
 21401  13216  13216     62  3       0x184  netcon     perl
  8898  13216  13216     62  3       0x184  netcon     perl
 31427      1  31427      0  3       0x184  nanosleep  perl
 13216      1  13216     62  3       0x180  pause      perl
 14288    645  14288   1000  2      0x4486             silc
   645      1    645   1000  3        0x84  select     screen
 11626  17721  11626    515  3      0x4084  piperd     unlinkd
 30889  10089  20844    502  3      0x4186  poll       mysqld
  2833      1  17026      0  3      0x4080  piperd     courierlogger
 17026      1  17026      0  3        0x81  select     couriertcpd
  8685  20165   5206      0  3        0x84  select     authdaemond.plai
 26418  20165   5206      0  3        0x84  select     authdaemond.plai
 26219  20165   5206      0  3        0x84  select     authdaemond.plai
 20106  20165   5206      0  3        0x84  select     authdaemond.plai
 21016  20165   5206      0  3        0x84  select     authdaemond.plai
 20165   5206   5206      0  3      0x4084  select     authdaemond.plai
  5206      1   5206      0  3        0x81  piperd     courierlogger
 10089      1  20844      0  3      0x4082  pause      sh
 17721  16781  16781    515  3      0x4184  poll       squid
 16781      1  16781      0  3        0x80  wait       squid
 13418      1  23853      0  3        0x84  select     snmpd
  7290  11261   5727      0  3        0x80  netio      tcpdump
 11261   5727   5727     76  3      0x4184  bpf        tcpdump
  5727      1   5727      0  3        0x80  piperd     spamlogd
 28798  19878  19878     62  3       0x180  piperd     spamd
 31857  19878  19878     62  3       0x184  select     spamd
 19878      1  19878     62  3       0x184  nanosleep  spamd
 22687  21890  21890     67  3       0x184  semwait    httpd
 27997  21890  21890     67  3       0x184  semwait    httpd
 22263  21890  21890     67  3       0x184  semwait    httpd
  2391  21890  21890     67  3       0x184  semwait    httpd
 14772  21890  21890     67  3       0x184  semwait    httpd
 14244      1  14244      0  3        0x84  select     sshd
 32751      1  32751      0  3       0x180  select     inetd
 21890      1  21890     67  3       0x184  select     httpd
 13048  14874  14874     83  3       0x184  poll       ntpd
 14874      1  14874      0  3        0x84  poll       ntpd
  1640  31117  31117     70  3       0x184  select     named
 31117      1  31117      0  3       0x180  netio      named
 13451  20938  20938     74  3       0x184  bpf        pflogd
 20938      1  20938      0  3        0x80  netio      pflogd
 28317  20104  20104     73  3       0x184  poll       syslogd
 20104      1  20104      0  3        0x84  netio      syslogd
    12      0      0      0  3    0x100204  crypto_wa  crypto
    11      0      0      0  3    0x100204  aiodoned   aiodoned
    10      0      0      0  3    0x100204  syncer     update
     9      0      0      0  3    0x100204  cleaner    cleaner
     8      0      0      0  3    0x100204  reaper     reaper
     7      0      0      0  3    0x100204  pgdaemon   pagedaemon
     6      0      0      0  3    0x100204  pftm       pfpurge
     5      0      0      0  3    0x100204  usbtsk     usbtask
     4      0      0      0  3    0x100204  usbevt     usb0
     3      0      0      0  3    0x100204  apmev      apm0
     2      0      0      0  3    0x100204  kmalloc    kmthread
     1      0      1      0  3      0x4084  wait       init
     0     -1      0      0  3     0x80204  scheduler  swapper
ddb> show registers
ds                  0x10
es            0xd0100010        kernel_text+0x10
fs                  0x58
gs                  0x10
edi           0xd050dae0        xfs_vfsops+0x5c0
esi           0xdd4d6bbc        end+0xce5c5ac
ebp           0xdd4d6b90        end+0xce5c580
ebx                    0
edx                    0
ecx           0xd057fa84        kprintf_mutex
eax                  0x1
eip           0xd0338038        Debugger+0x4
cs                  0x50
eflags             0x202
esp           0xdd4d6b90        end+0xce5c580
ss            0xdd4d0010        end+0xce55a00
Debugger+0x4:   leave
ddb> boot dump
syncing disks... 2 2 done
WARNING: not updating battery clock

dumping to dev 1, offset 720639
dump 159 158 157 156 155 154 153 152 151 150 149 148 147 146 145 144 143 142 141 140 139 138 137 136 135 134 133 132 131 130 129 128 127 126 125 124 123 122 121 120 119 118 117 116 115 114 113 112 111 110 109 108 107 106 105 104 103 102 101 100 99 98 97 96 95 94 93 92 91 90 89 88 87 86 85 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70 69 68 67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 succeeded

rebooting...
       
>How-To-Repeat:
       
>Fix:


>Release-Note:
>Audit-Trail:
>Unformatted:

Reply | Threaded
Open this post in threaded view
|

Re: kernel/4602: amap_pp_adjref: negative reference count

Manuel Pata
The same kernel panic happened again while using gzip on a large file
(about 2,5gb), this was common to both panics.

Cores are available to anyone interested.

Thanks.

Gnats wrote:

> Thank you very much for your problem report.
> It has the internal identification `kernel/4602'.
> The individual assigned to look at your
> report is: bugs.
>
>
>>Category:       kernel
>>Responsible:    bugs
>>Synopsis:       amap_pp_adjref: negative reference count
>>Arrival-Date:   Sun Nov 06 23:30:01 GMT 2005

--
Manuel Pata
pata (ate) alface (dote) de

Reply | Threaded
Open this post in threaded view
|

Re: kernel/4602: amap_pp_adjref: negative reference count

Manuel Pata
In reply to this post by Manuel Pata
The following reply was made to PR kernel/4602; it has been noted by GNATS.

From: Manuel Pata <[hidden email]>
To: [hidden email], [hidden email]
Cc:  
Subject: Re: kernel/4602: amap_pp_adjref: negative reference count
Date: Mon, 07 Nov 2005 00:28:33 +0000

 The same kernel panic happened again while using gzip on a large file
 (about 2,5gb), this was common to both panics.
 
 Cores are available to anyone interested.
 
 Thanks.
 
 Gnats wrote:
 > Thank you very much for your problem report.
 > It has the internal identification `kernel/4602'.
 > The individual assigned to look at your
 > report is: bugs.
 >
 >
 >>Category:       kernel
 >>Responsible:    bugs
 >>Synopsis:       amap_pp_adjref: negative reference count
 >>Arrival-Date:   Sun Nov 06 23:30:01 GMT 2005
 
 --
 Manuel Pata
 pata (ate) alface (dote) de