NetBSD-Bugs archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

port-amd64/50969: Xen 4.5 Dom0 7_STABLE/amd64 panic: vrelel: bad ref count in vnddoclear



>Number:         50969
>Category:       port-amd64
>Synopsis:       Xen 4.5  Dom0 7_STABLE/amd64 panic: vrelel: bad ref count in vnddoclear
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    port-amd64-maintainer
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Tue Mar 15 03:15:00 +0000 2016
>Originator:     MOCHIDA Shuji
>Release:        7.0_STABLE Dom0/amd64 of Jan 31, Xen xenkernel45-4.5.2 from pkg
>Organization:
NETside
>Environment:
NetBSD beak 7.0_STABLE NetBSD 7.0_STABLE (RAY_D01-noagp) #0: Mon Feb  1 14:08:17 JST 2016  xxxx@xxx:/xx/obj-kern/amd64-XEN3_DOM0-1.103.2.4/RAY_D01-noagp amd64

>Description:
panic when using MS Windows7/MS Windows 2008 Server R2 DomU(HVM).
vnd related? DomUs use sparse disk image files. (dd with seek=)

panic: vrelel: bad ref count
fatal breakpoint trap in supervisor mode
trap type 1 code 0 rip ffffffff801f18b5 cs e030 rflags 246 cr2 7f7ff70ce790 ilevel 0 rsp ffffa0005ce92850
curlwp 0xffffa00006f00160 pid 3048.1 lowest kstack 0xffffa0005ce902c0
Stopped in pid 3048.1 (vnconfig) at     netbsd:breakpoint+0x5:  leave
breakpoint() at netbsd:breakpoint+0x5
vpanic() at netbsd:vpanic+0x13c
vnpanic() at netbsd:vnpanic+0x41
vrelel() at netbsd:vrelel+0x33b
vrevoke() at netbsd:vrevoke+0x84
genfs_revoke() at netbsd:genfs_revoke+0xd
VOP_REVOKE() at netbsd:VOP_REVOKE+0x53
vdevgone() at netbsd:vdevgone+0x4f
vnddoclear() at netbsd:vnddoclear+0xb2
vndioctl() at netbsd:vndioctl+0x54f
layer_bypass() at netbsd:layer_bypass+0xb3
VOP_IOCTL() at netbsd:VOP_IOCTL+0x59
vn_ioctl() at netbsd:vn_ioctl+0xa6
sys_ioctl() at netbsd:sys_ioctl+0x17e
syscall() at netbsd:syscall+0x9a
--- syscall (number 54) ---
7f7ff70ce79a:
ds          2818
es          2860
fs          8
gs          220d
rdi         0
rsi         1
rbp         ffffa0005ce92850
rbx         104
rdx         0
rcx         0
rax         1
r8          ffffa0005ce92800
r9          ffffa00006dbd380
r10         ffffa00006f00160
r11         73
r12         ffffffff8090e4d6    ostype+0x2c750
r13         ffffa0005ce92888
r14         e00
r15         23
rip         ffffffff801f18b5    breakpoint+0x5
cs          e030
rflags      246
rsp         ffffa0005ce92850
ss          e02b
netbsd:breakpoint+0x5:  leave
db> ps
PID    LID S CPU     FLAGS       STRUCT LWP *               NAME WAIT
3048 >   1 7   0         0   ffffa00006f00160           vnconfig
1231     1 3   0         0   ffffa00006ecc520                 sh netio
1360     1 2   0         0   ffffa00006ee5120                 sh
2068     1 2   0         0   ffffa00006ef7980                 sh
1294     1 3   0        80   ffffa00006ef7140               smbd select
1988     1 3   0        80   ffffa000073065a0               smbd select
2028     1 3   0        80   ffffa00006f00580               tail kqueue
537      1 3   0        80   ffffa00005d134a0                ssh select
1996     1 3   0        80   ffffa00006e1e920              httpd socket
662      2 3   0        80   ffffa000073069c0                 xl netio
662      1 3   0        80   ffffa00007306180                 xl select
1201     1 3   0        80   ffffa00006f009a0                zsh ttyraw
1264     1 3   0        80   ffffa00006ecc940               sshd select
878      1 3   0        80   ffffa000049d9a00               sshd select
681      2 3   0        80   ffffa00006ee5540                 xl netio
681      1 3   0        80   ffffa00006ef7560                 xl parked
495      1 3   0        80   ffffa00006e1e500               smbd select
310      1 3   0        80   ffffa00005d1f8e0               smbd select
1226     1 3   0        80   ffffa00005cec8a0                zsh pause
1960     1 3   0        80   ffffa00005c8d460               sshd select
1819     1 3   0        80   ffffa00005d13080               sshd select
1061     1 3   0        80   ffffa000047a55c0               smbd select
143      1 3   0        80   ffffa000047a51a0                zsh ttyraw
145      1 3   0        80   ffffa000049f6600               sshd select
1548     1 3   0        80   ffffa000047a59e0               sshd select
686      1 3   0        80   ffffa000049d95e0                zsh pause
922      1 3   0        80   ffffa000049d91c0               sshd select
247      1 3   0        80   ffffa00005d138c0               sshd select
870      1 3   0        80   ffffa00004a51660               smbd select
1447     1 3   0        80   ffffa0000461b940              getty ttyraw
890      1 3   0        80   ffffa00005d1f4c0               cron nanoslp
761      1 3   0        80   ffffa00005e344e0              inetd kqueue
947      1 3   0        80   ffffa00005e34900               qmgr kqueue
875      1 3   0        80   ffffa00005d1f0a0             pickup kqueue
1502     1 3   0        80   ffffa00005e340c0             master kqueue
1108     1 3   0        80   ffffa00005cec480               sshd select
415      1 3   0        80   ffffa00005cec060             powerd kqueue
1101     1 3   0        80   ffffa00005c8d040                lpd select
649      2 3   0        80   ffffa00004a78260        xenconsoled netio
649      1 3   0        80   ffffa00004a19620        xenconsoled select
1124     1 3   0        80   ffffa00005c48860              httpd socket
1155     1 3   0        80   ffffa00005c1b000              httpd socket
98       1 3   0        80   ffffa00005c1b420              httpd socket
97       1 3   0        80   ffffa00005c1b840              httpd socket
96       1 3   0        80   ffffa00005bd9360              httpd socket
1141     1 3   0        80   ffffa00005bd9780              httpd socket
1069     1 2   0         0   ffffa00005bd9ba0          xenstored
1086     1 3   0        80   ffffa000059fd760              httpd select
1028     1 3   0        80   ffffa000059fdb80        cannaserver select
1012     1 3   0        80   ffffa0000596b720               smbd select
839      1 3   0        80   ffffa000059f5740        dbus-daemon select
861      1 3   0        80   ffffa000059f5320               smbd select
700      1 3   0        80   ffffa000059f5b60               nmbd pipe_rd
773      1 3   0        80   ffffa00005931700               nmbd select
594      1 2   0         0   ffffa0000596bb40                amd
617      7 3   0        80   ffffa00005c8d880              slapd parked
617      6 3   0        80   ffffa00005c48020              slapd parked
617      5 3   0        80   ffffa00005c48440              slapd parked
617      4 3   0        80   ffffa000059312e0              slapd parked
617      3 3   0        80   ffffa0000596b300              slapd parked
617      2 3   0        80   ffffa0000559f2c0              slapd select
617      1 3   0        80   ffffa0000559d2a0              slapd parked
217      1 3   0        80   ffffa0000559f6e0          rpc.lockd select
331      1 3   0        80   ffffa0000559fb00          rpc.statd select
403      5 3   0        80   ffffa0000559d6c0              slave nfsd
403      4 3   0        80   ffffa0000559dae0              slave nfsd
403      3 3   0        80   ffffa00004a8a280              slave nfsd
403      2 3   0        80   ffffa00004a19a40              slave nfsd
403      1 3   0        80   ffffa00004a8a6a0             master select
383      1 3   0        80   ffffa00004a51240             mountd select
262      1 3   0        80   ffffa00004a37640            rpcbind select
312      1 2   0         0   ffffa00004a78680            syslogd
1        1 3   0        80   ffffa0000461c540               init wait
0       67 3   0       200   ffffa0000730c5c0        xbdb2i51712 xbdb2i51712
0       66 3   0       200   ffffa0000730c9e0               vnd3 vndbp
0       65 3   0       200   ffffa00006ecc100               vnd1 vndbp
0       64 3   0       200   ffffa00006e1e0e0               vnd0 vndbp
0       63 3   0       200   ffffa0000432d4c0               vnd2 vndbp
0       60 3   0       200   ffffa000059fd340        xen_balloon xen_balloon
0       59 3   0       200   ffffa00005931b20              ipmi0 ipmi0
0       58 3   0       200   ffffa00004a8aac0              nfsio nfsiod
0       57 3   0       200   ffffa00004a78aa0              nfsio nfsiod
0       56 3   0       200   ffffa00004a37220              nfsio nfsiod
0       55 3   0       200   ffffa000049f6a20              nfsio nfsiod
0       54 3   0       200   ffffa00004a51a80            physiod physiod
0       53 3   0       200   ffffa00004a37a60            raidio1 raidiow
0       52 3   0       200   ffffa000049f61e0              raid1 rfnodeq
0       51 3   0       200   ffffa00004a19200            raidio0 raidiow
0       50 3   0       200   ffffa0000461e160              raid0 rfnodeq
0       49 3   0       200   ffffa00004788180           aiodoned aiodoned
0       48 3   0       200   ffffa000047885a0            ioflush syncer
0       47 3   0       200   ffffa000047889c0           pgdaemon pgdaemon
0       44 3   0       200   ffffa0000461e580          atapibus0 sccomp
0       41 3   0       200   ffffa000046110e0               usb1 usbevt
0       40 3   0       200   ffffa0000461b520               usb0 usbevt
0       39 3   0       200   ffffa0000461b100              npfgc npfgccv
0       38 3   0       200   ffffa0000461c960          cryptoret crypto_w
0       37 3   0       200   ffffa0000461c120              unpgc unpgc
0       36 3   0       200   ffffa0000461d980        vmem_rehash vmem_rehash
0       35 3   0       200   ffffa0000461e9a0             xenbus rdst
0       34 3   0       200   ffffa0000461d140           xenwatch evtsq
0       33 3   0       200   ffffa0000461d560               mfi0 mfi0
0       24 3   0       200   ffffa00004611500            atabus1 atath
0       23 3   0       200   ffffa00004611920            atabus0 atath
0       22 3   0       200   ffffa000043cc0c0           scsibus0 sccomp
0       21 3   0       200   ffffa000043cc4e0             mfi0wq mfi0wq
0       20 3   0       200   ffffa000043cc900         usbtask-dr usbtsk
0       19 3   0       200   ffffa0000432d0a0         usbtask-hc usbtsk
0       17 3   0       200   ffffa0000432d8e0               ipmi ipmipoll
0       16 3   0       200   ffffa00003eb6080             sysmon smtaskq
0       15 3   0       200   ffffa00003eb64a0         pmfsuspend pmfsuspend
0       14 3   0       200   ffffa00003eb68c0           pmfevent pmfevent
0       13 3   0       200   ffffa00003a18060         sopendfree sopendfr
0       12 3   0       200   ffffa00003a18480           nfssilly nfssilly
0       11 3   0       200   ffffa00003a188a0            cachegc cachegc
0       10 3   0       200   ffffa00003a16040              vrele vrele
0        9 3   0       200   ffffa00003a16460             vdrain vdrain
0        8 3   0       200   ffffa00003a16880          modunload mod_unld
0        7 3   0       200   ffffa00003a0d020            xcall/0 xcall
0        6 1   0       200   ffffa00003a0d440          softser/0
0        5 1   0       200   ffffa00003a0d860          softclk/0
0        4 1   0       200   ffffa00003a0b000          softbio/0
0        3 1   0       200   ffffa00003a0b420          softnet/0
0        2 1   0       201   ffffa00003a0b840             idle/0
0        1 3   0       200   ffffffff80bcce80            swapper uvm
db>   


>How-To-Repeat:
Use MS Windows 7 or Server 2008 R2 HVM guest on NetBSD-7/amd64 Dom0 + Xen4.5.

I use PV guests, NetBSD-5/i386 and OmniOS(OpenSolaris) at same time,
but they never trigger that panic. they also use sparse disk images.
>Fix:



Home | Main Index | Thread Index | Old Index