From owner-freebsd-current@FreeBSD.ORG Sun Apr 14 04:43:13 2013 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by hub.freebsd.org (Postfix) with ESMTP id 6C2AEDC2; Sun, 14 Apr 2013 04:43:13 +0000 (UTC) (envelope-from gleb.kurtsou@gmail.com) Received: from mail-pd0-f182.google.com (mail-pd0-f182.google.com [209.85.192.182]) by mx1.freebsd.org (Postfix) with ESMTP id 3BFF1FA; Sun, 14 Apr 2013 04:43:12 +0000 (UTC) Received: by mail-pd0-f182.google.com with SMTP id 3so1986250pdj.41 for ; Sat, 13 Apr 2013 21:43:12 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:sender:date:from:to:cc:subject:message-id:references :mime-version:content-type:content-disposition:in-reply-to :user-agent; bh=ebm1EF4GfpJVSi0UttD5hl7ZY4dVarY3dFYt4itymgE=; b=Md5PeNsX+dLy6bzfHSrC+8lIYPF4nzRDxRK95+hTtpp9r/6sG7Z08o/nC+zvw7+5kW iQvpgJv6oC8ZoKVrNz30n8nEIhfHHdpq1+OpbXF1kKR51em9QQTJng9xw3AN6ATwFgRu 72sW37AVYF5jvoG+Nn9QpyyBM4R5fRKFKDARt4GpuP3IDDkNNaapOoPLmfL3gLQ33E+7 mXn/GzHcesN95q6KVJgucX6NMuVj887kiDrZvc8TOqCzmcUnfqBAxByiEi05hEwtV7Ji SzhOVCnxfacpeMYAhZws6evKB3UsFUHOANZu+JIP5+6TzmSp/kLLbFw3V8RBLSuAem2B Wg/Q== X-Received: by 10.68.112.1 with SMTP id im1mr23026220pbb.169.1365914592443; Sat, 13 Apr 2013 21:43:12 -0700 (PDT) Received: from localhost (c-67-160-248-74.hsd1.ca.comcast.net. [67.160.248.74]) by mx.google.com with ESMTPS id n6sm67124pbn.6.2013.04.13.21.43.09 (version=TLSv1.2 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Sat, 13 Apr 2013 21:43:10 -0700 (PDT) Sender: Gleb Kurtsou Date: Sat, 13 Apr 2013 21:43:14 -0700 From: Gleb Kurtsou To: Shawn Webb , pjd@freebsd.org Subject: Re: r248583 Kernel panic: negative refcount 0xfffffe0031b59168 Message-ID: <20130414044314.GA1115@reks> References: MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.21 (2010-09-15) Cc: FreeBSD-current X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 14 Apr 2013 04:43:13 -0000 On (22/03/2013 11:51), Shawn Webb wrote: > Hey All, > > I'm not sure if this is a result of r248583 or a different commit, but I > hit a kernel panic when closing Chrome. I've linked to the info and > core.txt files below. If you need me to ship you the vmcore file, let me > know. It's 1.1GB in size. > > Other than the pasted files, I'm not too sure where to go from here. If > there's any other info you need, please let me know. I'm a newb at > submitting this kind of stuff. > > Paste of info file: http://ix.io/4Qo > Paste of core.txt file: http://ix.io/4Qp Shawn, did you find workaround for the problem? I've just upgraded to recent HEAD and see the same panic on closing chrome. Switching back to r247601 just before "Merge Capsicum overhaul" commit makes panic disappear. ~ # kgdb -n 1 GNU gdb 6.1.1 [FreeBSD] Copyright 2004 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "amd64-marcel-freebsd"... Unread portion of the kernel message buffer: VNASSERT failed 0xfffffe0196700760: tag none, type VBAD usecount 0, writecount 0, refcount 0 mountedhere 0 flags (VV_NOSYNC|VI_DOOMED) lock type zfs: UNLOCKED panic: No vop_advlock(0xfffffe0196700760, 0xffffff823adb9908) cpuid = 3 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0x2b/frame 0xffffff823adb9740 kdb_backtrace() at kdb_backtrace+0x39/frame 0xffffff823adb97f0 vpanic() at vpanic+0x127/frame 0xffffff823adb9830 kassert_panic() at kassert_panic+0x136/frame 0xffffff823adb98a0 VOP_ADVLOCK_APV() at VOP_ADVLOCK_APV+0x92/frame 0xffffff823adb98d0 closef() at closef+0x9a/frame 0xffffff823adb9960 closefp() at closefp+0xa0/frame 0xffffff823adb99b0 amd64_syscall() at amd64_syscall+0x1f9/frame 0xffffff823adb9ab0 Xfast_syscall() at Xfast_syscall+0xfb/frame 0xffffff823adb9ab0 --- syscall (6, FreeBSD ELF64, sys_close), rip = 0x80aeaaa8a, rsp = 0x7ffffebf3f38, rbp = 0x7ffffebf3f50 --- [...] (kgdb) fr 0 #0 doadump (textdump=1) at pcpu.h:231 231 pcpu.h: No such file or directory. in pcpu.h (kgdb) up #1 0xffffffff804f5827 in kern_reboot (howto=260) at /freebsd-src/local/sys/kern/kern_shutdown.c:447 447 doadump(TRUE); (kgdb) #2 0xffffffff804f5d36 in vpanic (fmt=, ap=) at /freebsd-src/local/sys/kern/kern_shutdown.c:754 754 kern_reboot(bootopt); (kgdb) #3 0xffffffff804f5bc6 in kassert_panic (fmt=) at /freebsd-src/local/sys/kern/kern_shutdown.c:642 642 vpanic(fmt, ap); (kgdb) #4 0xffffffff80747aa2 in VOP_ADVLOCK_APV (vop=, a=0xffffff823adb9908) at vnode_if.c:2522 2522 VNASSERT(vop != NULL, a->a_vp, ("No vop_advlock(%p, %p)", a->a_vp, a)); (kgdb) #5 0xffffffff804b8eaa in closef (fp=0xfffffe014da8ccd0, td=0xfffffe0014aea920) at vnode_if.h:1041 1041 vnode_if.h: No such file or directory. in vnode_if.h (kgdb) #6 0xffffffff804b7030 in closefp (fdp=0xfffffe001c8c4800, fd=, fp=0xfffffe014da8ccd0, td=0xfffffe0014aea920, holdleaders=) at /freebsd-src/local/sys/kern/kern_descrip.c:1136 1136 error = closef(fp, td); (kgdb) p *fp $5 = {f_data = 0xfffffe0196700760, f_ops = 0xffffffff80a477b8, f_cred = 0xfffffe0067907600, f_vnode = 0xfffffe0196700760, f_type = 1, f_vnread_flags = 0, f_flag = 3, f_count = 0, f_seqcount = 0, f_nextoff = 16388, f_vnun = {fvn_cdevpriv = 0x0, fvn_advice = 0x0}, f_offset = 16388, f_label = 0x0} (kgdb) p *fp $6 = {f_data = 0xfffffe0196700760, f_ops = 0xffffffff80a477b8, f_cred = 0xfffffe0067907600, f_vnode = 0xfffffe0196700760, f_type = 1, f_vnread_flags = 0, f_flag = 3, f_count = 0, f_seqcount = 0, f_nextoff = 16388, f_vnun = {fvn_cdevpriv = 0x0, fvn_advice = 0x0}, f_offset = 16388, f_label = 0x0} (kgdb) p fp->f_vnode $7 = (struct vnode *) 0xfffffe0196700760 (kgdb) p *fp->f_vnode $8 = {v_tag = 0xffffffff807a3e35 "none", v_op = 0x0, v_data = 0x0, v_mount = 0x0, v_nmntvnodes = { tqe_next = 0xfffffe014fd95760, tqe_prev = 0xfffffe011d500958}, v_un = {vu_mount = 0x0, vu_socket = 0x0, vu_cdev = 0x0, vu_fifoinfo = 0x0}, v_hashlist = {le_next = 0x0, le_prev = 0x0}, v_cache_src = { lh_first = 0x0}, v_cache_dst = {tqh_first = 0x0, tqh_last = 0xfffffe01967007b0}, v_cache_dd = 0x0, v_lock = {lock_object = {lo_name = 0xffffffff80dddbb1 "zfs", lo_flags = 91881472, lo_data = 0, lo_witness = 0x0}, lk_lock = 1, lk_exslpfail = 0, lk_timo = 51, lk_pri = 96}, v_interlock = { lock_object = {lo_name = 0xffffffff807bfbb9 "vnode interlock", lo_flags = 16908288, lo_data = 0, lo_witness = 0x0}, mtx_lock = 6}, v_vnlock = 0xfffffe01967007c8, v_actfreelist = { tqe_next = 0xfffffe0031985b10, tqe_prev = 0xfffffe014fd95820}, v_bufobj = {bo_mtx = {lock_object = { lo_name = 0xffffffff807bfbc9 "bufobj interlock", lo_flags = 16908288, lo_data = 0, lo_witness = 0x0}, mtx_lock = 6}, bo_ops = 0xffffffff80a5af10, bo_object = 0x0, bo_synclist = { le_next = 0x0, le_prev = 0x0}, bo_private = 0xfffffe0196700760, __bo_vnode = 0xfffffe0196700760, bo_clean = {bv_hd = {tqh_first = 0x0, tqh_last = 0xfffffe0196700880}, bv_root = 0x0, bv_cnt = 0}, bo_dirty = {bv_hd = {tqh_first = 0x0, tqh_last = 0xfffffe01967008a0}, bv_root = 0x0, bv_cnt = 0}, bo_numoutput = 0, bo_flag = 0, bo_bsize = 131072}, v_pollinfo = 0x0, v_label = 0x0, v_lockf = 0x0, v_rl = {rl_waiters = {tqh_first = 0x0, tqh_last = 0xfffffe01967008e8}, rl_currdep = 0x0}, v_cstart = 0, v_lasta = 0, v_lastw = 0, v_clen = 0, v_holdcnt = 0, v_usecount = 0, v_iflag = 128, v_vflag = 4, v_writecount = 0, v_hash = 26636295, v_type = VBAD} # kgdb -n 0 GNU gdb 6.1.1 [FreeBSD] Copyright 2004 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "amd64-marcel-freebsd"... Unread portion of the kernel message buffer: panic: negative refcount 0xfffffe0059a400c8 cpuid = 0 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0x2b/frame 0xffffff823aff8770 kdb_backtrace() at kdb_backtrace+0x39/frame 0xffffff823aff8820 vpanic() at vpanic+0x127/frame 0xffffff823aff8860 kassert_panic() at kassert_panic+0x136/frame 0xffffff823aff88d0 closef() at closef+0x1ff/frame 0xffffff823aff8960 closefp() at closefp+0xa0/frame 0xffffff823aff89b0 amd64_syscall() at amd64_syscall+0x1f9/frame 0xffffff823aff8ab0 Xfast_syscall() at Xfast_syscall+0xfb/frame 0xffffff823aff8ab0 --- syscall (6, FreeBSD ELF64, sys_close), rip = 0x80aeaaa8a, rsp = 0x7fffffffbd28, rbp = 0x7fffffffbd40 --- Uptime: 21m3s [...] (kgdb) bt #0 doadump (textdump=1) at pcpu.h:231 #1 0xffffffff804f5827 in kern_reboot (howto=260) at /freebsd-src/local/sys/kern/kern_shutdown.c:447 #2 0xffffffff804f5d36 in vpanic (fmt=, ap=) at /freebsd-src/local/sys/kern/kern_shutdown.c:754 #3 0xffffffff804f5bc6 in kassert_panic (fmt=) at /freebsd-src/local/sys/kern/kern_shutdown.c:642 #4 0xffffffff804b900f in closef (fp=, td=) at refcount.h:66 #5 0xffffffff804b7030 in closefp (fdp=0xfffffe018dc79800, fd=, fp=0xfffffe0059a400a0, td=0xfffffe016dfca920, holdleaders=) at /freebsd-src/local/sys/kern/kern_descrip.c:1136 #6 0xffffffff806e26c9 in amd64_syscall (td=0xfffffe016dfca920, traced=0) at subr_syscall.c:134 #7 0xffffffff806cb13b in Xfast_syscall () at exception.S:387 #8 0x000000080aeaaa8a in ?? () Previous frame inner to this frame (corrupt stack?) Current language: auto; currently minimal (kgdb) > > Thanks, > > Shawn Webb > _______________________________________________ > freebsd-current@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-current > To unsubscribe, send any mail to "freebsd-current-unsubscribe@freebsd.org"