kern/162228: Panic in ufsdirhash_build()

[dirk.meyer at dinoex.sub.org]

>Number:         162228
>Category:       kern
>Synopsis:       Panic in ufsdirhash_build()
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Tue Nov 01 14:40:11 UTC 2011
>Closed-Date:
>Last-Modified:
>Originator:     Dirk Meyer
>Release:        
>Organization:
privat
>Environment:

CPU: Intel(R) Celeron(R) CPU 2.80GHz (2793.06-MHz 686-class CPU)
  Origin = "GenuineIntel"  Id = 0xf41  Family = f  Model = 4  Stepping = 1
  Features=0xbfebfbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE>
  Features2=0x441d<SSE3,DTES64,MON,DS_CPL,CNXT-ID,xTPR>
  TSC: P-state invariant
real memory  = 1073741824 (1024 MB)
avail memory = 1026256896 (978 MB)

FreeBSD 9.0-RC1

------------------------------------------------
include GENERIC
ident HOME

options IPFIREWALL
options IPFIREWALL_VERBOSE
options IPFIREWALL_VERBOSE_LIMIT=10
options IPFIREWALL_DEFAULT_TO_ACCEPT
options IPFIREWALL_FORWARD
options DUMMYNET

options SC_HISTORY_SIZE=8192

device pf #PF OpenBSD packet-filter firewall
device pflog #logging support interface for PF
device pfsync #synchronization interface for PF

options ALTQ
options ALTQ_CBQ
options ALTQ_RED
options ALTQ_RIO
options ALTQ_HFSC
options ALTQ_PRIQ

options INVARIANTS
options INVARIANT_SUPPORT
options DIAGNOSTIC
options WITNESS

options KDTRACE_HOOKS        # all architectures - enable general DTrace hooks
options DDB_CTF              # all architectures - kernel ELF linker loads CTF data
makeoptions DEBUG="-g"       # amd64? - build kernel with gdb(1) debug symbols
makeoptions WITH_CTF=1
------------------------------------------------



>Description:

Dump header from device /dev/da0s1b
  Architecture: i386
  Architecture Version: 2
  Dump Length: 494489600B (471 MB)
  Blocksize: 512
  Dumptime: Mon Oct 24 19:44:42 2011
  Hostname: t2.dinoex.sub.de
  Magic: FreeBSD Kernel Dump
  Version String: FreeBSD 9.0-RC1 #1: Fri Oct 21 18:58:22 CEST 2011
    root at t2.dinoex.sub.de:/usr/obj/usr/src/sys/HOME
  Panic String: kmem_malloc(4096): kmem_map too small: 344297472 total allocated
  Dump Parity: 1307617394
  Bounds: 0
  Dump Status: good

(kgdb) bt
#0  0xc0a798ae in doadump ()
#1  0xc0a7a143 in kern_reboot ()
#2  0xc0a799fd in panic ()
#3  0xc0cfcff1 in kmem_malloc ()
#4  0xc0cf2137 in page_alloc ()
#5  0xc0cf40c8 in keg_alloc_slab ()
#6  0xc0cf46ce in keg_fetch_slab ()
#7  0xc0cf47dc in zone_fetch_slab ()
#8  0xc0cf5f51 in uma_zalloc_arg ()
#9  0xc0cdf004 in ufsdirhash_build ()
#10 0xc0ce0243 in ufs_lookup_ino ()
#11 0xc0ce0cda in ufs_lookup ()
#12 0xc0decaaa in VOP_CACHEDLOOKUP_APV ()
#13 0xc0affe0d in vfs_cache_lookup ()
#14 0xc0dee022 in VOP_LOOKUP_APV ()
#15 0xc0b07c2b in lookup ()
#16 0xc0b08b0c in namei ()
#17 0xc0b18c0f in kern_statat_vnhook ()
#18 0xc0b18e1c in kern_statat ()
#19 0xc0b18f66 in kern_stat ()
#20 0xc0b1900f in sys_stat ()
#21 0xc0dc9390 in syscall ()
#22 0xc0db2ab1 in Xint0x80_syscall ()
#23 0x00000033 in ?? ()
Previous frame inner to this frame (corrupt stack?)

>How-To-Repeat:

	after boot I was rsync a huge directory tree.
	System crashed with panic after 2 days.
	Not reproducebale each time.

>Fix:
>Release-Note:
>Audit-Trail:
>Unformatted: