From owner-freebsd-current@FreeBSD.ORG Sun Jun 30 07:21:48 2013 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by hub.freebsd.org (Postfix) with ESMTP id 8470DEBC; Sun, 30 Jun 2013 07:21:48 +0000 (UTC) (envelope-from koobs.freebsd@gmail.com) Received: from mail-pb0-x236.google.com (mail-pb0-x236.google.com [IPv6:2607:f8b0:400e:c01::236]) by mx1.freebsd.org (Postfix) with ESMTP id 5CB8E15D9; Sun, 30 Jun 2013 07:21:48 +0000 (UTC) Received: by mail-pb0-f54.google.com with SMTP id ro2so3724427pbb.41 for ; Sun, 30 Jun 2013 00:21:47 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:reply-to:user-agent:mime-version:to:cc:subject :x-enigmail-version:content-type:content-transfer-encoding; bh=llxFqLi3PjrhiO1R0BWvFv6krToC4eB1izy7yQ9OM3s=; b=PkWtWbyVwKCw4m2tNzM7AhUz2cNMj/tKHYveNo7EPs84UDt1x+yckS4WCotZuJ7sEJ 0fpHACVoX4he8O9rUAEvV2FeC5Gey/E+KWfa6pgfZfiWKF+tyXXgQPp8ZBcxGU2ob6W6 VVDKoZsVwEfGasxYRNjJYWJ3oFiXTQhKlqJ7nuVj4Sq/g9bPJsp0Kis5hm0XVlgR2lS2 KU5QAi0mUJjlFIURZ2B1hpc378jinI3cehjyiFOQvvoJILhbuBZccrIKrnezGRbQ5ayF js6Zz/WtDcaSgIF4RDxSn8t5+lnU+tB87gqDMqShQmX20TyT1x0qXHtcF+Fxw3bz4tq9 q2Ew== X-Received: by 10.68.197.33 with SMTP id ir1mr18599786pbc.197.1372576907633; Sun, 30 Jun 2013 00:21:47 -0700 (PDT) Received: from [192.168.1.7] (ppp59-167-128-11.static.internode.on.net. [59.167.128.11]) by mx.google.com with ESMTPSA id at1sm16214030pbc.10.2013.06.30.00.21.45 for (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Sun, 30 Jun 2013 00:21:46 -0700 (PDT) Message-ID: <51CFDC86.2040506@FreeBSD.org> Date: Sun, 30 Jun 2013 17:21:42 +1000 From: Kubilay Kocak User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/20130509 Thunderbird/17.0.6 MIME-Version: 1.0 To: freebsd-current@FreeBSD.org Subject: Re: r248583 Kernel panic: negative refcount 0xfffffe0031b59168 X-Enigmail-Version: 1.5.1 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list Reply-To: koobs@FreeBSD.org List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 30 Jun 2013 07:21:48 -0000 I'm seeing what I believe is related panic, reliably being generated by the Python regression test suite on a newly created FreeBSD 10-CURRENT buildbot. Symptoms first seen in an freebsd.org FTP snapshot dated "Thu May 30 20:01:46 UTC 2013" and also reproducible on a freshly updated r252400 It is additionally reproducible after checking out pure upstream python sources, using the following steps: hg clone http://hg.python.org/cpython cd cpython && configure && make buildbottest An interesting possible correlation is that it seems to drop out during/around "test_socket" Backtrace below: > koobs@10-CURRENT-amd64:~ % sudo kgdb /boot/kernel/kernel /var/crash/vmcore.1 > GNU gdb 6.1.1 [FreeBSD] > Copyright 2004 Free Software Foundation, Inc. > GDB is free software, covered by the GNU General Public License, and you are > welcome to change it and/or distribute copies of it under certain conditions. > Type "show copying" to see the conditions. > There is absolutely no warranty for GDB. Type "show warranty" for details. > This GDB was configured as "amd64-marcel-freebsd"... > > Unread portion of the kernel message buffer: > panic: negative refcount 0xfffffe0009316de8 > cpuid = 0 > KDB: enter: panic > > Reading symbols from /boot/kernel/zfs.ko.symbols...done. > Loaded symbols for /boot/kernel/zfs.ko.symbols > Reading symbols from /boot/kernel/opensolaris.ko.symbols...done. > Loaded symbols for /boot/kernel/opensolaris.ko.symbols > #0 doadump (textdump=114425856) at pcpu.h:236 > 236 pcpu.h: No such file or directory. > in pcpu.h > (kgdb) bt > #0 doadump (textdump=114425856) at pcpu.h:236 > #1 0xffffffff80338a75 in db_fncall (dummy1=, dummy2=, dummy3=, dummy4=) > at /usr/src/sys/ddb/db_command.c:578 > #2 0xffffffff8033875d in db_command (cmd_table=) at /usr/src/sys/ddb/db_command.c:449 > #3 0xffffffff803384d4 in db_command_loop () at /usr/src/sys/ddb/db_command.c:502 > #4 0xffffffff8033ae80 in db_trap (type=, code=0) at /usr/src/sys/ddb/db_main.c:231 > #5 0xffffffff808ec1b3 in kdb_trap (type=3, code=0, tf=) at /usr/src/sys/kern/subr_kdb.c:654 > #6 0xffffffff80c4cadb in trap (frame=0xffffff80978a7880) at /usr/src/sys/amd64/amd64/trap.c:579 > #7 0xffffffff80c35ca2 in calltrap () at /usr/src/sys/amd64/amd64/exception.S:232 > #8 0xffffffff808eb98e in kdb_enter (why=0xffffffff80f10487 "panic", msg=) at cpufunc.h:63 > #9 0xffffffff808b5a76 in vpanic (fmt=, ap=) at /usr/src/sys/kern/kern_shutdown.c:747 > #10 0xffffffff808b5926 in kassert_panic (fmt=) at /usr/src/sys/kern/kern_shutdown.c:642 > #11 0xffffffff80875b4f in closef (fp=, td=) at refcount.h:66 > #12 0xffffffff80873890 in closefp (fdp=0xfffffe0009652000, fd=, fp=0xfffffe0009316dc0, td=0xfffffe0009337490, holdleaders=) > at /usr/src/sys/kern/kern_descrip.c:1140 > #13 0xffffffff80c4d725 in amd64_syscall (td=0xfffffe0009337490, traced=0) at subr_syscall.c:134 > #14 0xffffffff80c35f8b in Xfast_syscall () at /usr/src/sys/amd64/amd64/exception.S:391 > #15 0x000000080119b00a in ?? () > Previous frame inner to this frame (corrupt stack?) > Current language: auto; currently minimal > (kgdb) -- koobs