panic: vm_object_deallocate: object deallocated too many times: 0 (with ral(4)

[Max Herrgard]

DragonFly v2.9.1.1087.gcddcf3-DEVELOPMENT #97: Mon Apr 11 19:53:26 CEST 2011

This happens when ral(4) is used for wireless. In my case with wlans_ral0="wlan0"
ifconfig_wlan0="WPA DHCP" in rc.conf.

kernel and dump are available as .18 in leaf~mh/crash.

panic: vm_object_deallocate: object deallocated too many times: 0
Trace beginning at frame 0xffffffe002fbfa90
panic() at panic+0x136
panic() at panic+0x136
vm_object_deallocate_locked() at vm_object_deallocate_locked+0x131
vm_object_deallocate() at vm_object_deallocate+0x20
link_elf_obj_unload_file() at link_elf_obj_unload_file+0x1ad
linker_file_unload() at linker_file_unload+0x352
linker_release_module() at linker_release_module+0xab
unloadentry() at unloadentry+0xb4
taskqueue_run() at taskqueue_run+0xb1
taskqueue_thread_loop() at taskqueue_thread_loop+0x49
Debugger("panic")
panic: from debugger

(kgdb) bt
#0  _get_mycpu (di=<value optimized out>) at ./machine/thread.h:69
#1  md_dumpsys (di=<value optimized out>) at /usr/src/sys/platform/pc64/x86_64/dump_machdep.c:263
#2  0xffffffff80473ea3 in dumpsys () at /usr/src/sys/kern/kern_shutdown.c:893
#3  0xffffffff8047449b in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:388
#4  0xffffffff80474674 in panic (fmt=0xffffffff80731464 "from debugger") at /usr/src/sys/kern/kern_shutdown.c:799
#5  0xffffffff80293885 in db_panic (addr=<value optimized out>, have_addr=0, count=0, modif=0x0) at /usr/src/sys/ddb/db_command.c:448
#6  0xffffffff80293f4f in db_command () at /usr/src/sys/ddb/db_command.c:344
#7  db_command_loop () at /usr/src/sys/ddb/db_command.c:470
#8  0xffffffff80296d41 in db_trap (type=<value optimized out>, code=<value optimized out>) at /usr/src/sys/ddb/db_trap.c:71
#9  0xffffffff807018b4 in kdb_trap (type=<value optimized out>, code=<value optimized out>, regs=<value optimized out>)
    at /usr/src/sys/platform/pc64/x86_64/db_interface.c:176
#10 0xffffffff80707158 in trap (frame=0xffffffe002fbf9c8) at /usr/src/sys/platform/pc64/x86_64/trap.c:700
#11 0xffffffff806fffae in calltrap () at /usr/src/sys/platform/pc64/x86_64/exception.S:187
#12 0xffffffff8070178f in breakpoint (msg=<value optimized out>) at ./cpu/cpufunc.h:73
#13 Debugger (msg=<value optimized out>) at /usr/src/sys/platform/pc64/x86_64/db_interface.c:361
#14 0xffffffff8047466d in panic (fmt=0xffffffff807bf310 "vm_object_deallocate: object deallocated too many times: %d")
    at /usr/src/sys/kern/kern_shutdown.c:790
#15 0xffffffff806783b0 in vm_object_deallocate_locked (object=0xffffffff80bea7d0) at /usr/src/sys/vm/vm_object.c:317
#16 0xffffffff80678682 in vm_object_deallocate (object=0xffffffff80bea7d0) at /usr/src/sys/vm/vm_object.c:299
#17 0xffffffff806fa5e8 in link_elf_obj_unload_file (file=<value optimized out>) at /usr/src/sys/kern/link_elf_obj.c:917
#18 0xffffffff80450b7a in linker_file_unload (file=0xffffffe0268f08f0) at /usr/src/sys/kern/kern_linker.c:529
#19 0xffffffff804512e2 in linker_release_module (modname=0x0, verinfo=0x0, lf=0xffffffe0268f08f0) at /usr/src/sys/kern/kern_linker.c:1123
#20 0xffffffff80496e00 in unloadentry (unused1=<value optimized out>, unused2=<value optimized out>) at /usr/src/sys/kern/subr_firmware.c:466
#21 0xffffffff8049dd8e in taskqueue_run (queue=0xffffffe00297bb58, lock_held=1) at /usr/src/sys/kern/subr_taskqueue.c:271
#22 0xffffffff8049de93 in taskqueue_thread_loop (arg=<value optimized out>) at /usr/src/sys/kern/subr_taskqueue.c:375
#23 0xffffffff8047d813 in lwkt_deschedule_self (td=0x0) at /usr/src/sys/kern/lwkt_thread.c:283