panic (page fault) in poll (on pipe)

[Brian F. Feldman]

"Brian F. Feldman" <green at FreeBSD.org> wrote:
> Well, that certainly wasn't the (only?) problem!  This has me stumped.
> After I find that the corrupt selinfo appears to be at 0xc4eb310c, I
> can't tell anything about what object it used to be in.  I've also included 
> all of the UMA allocations, and the object appears that it's in a partially 
> free UMA slab but with no attributes as to the ownership.  You can find it 
> (apparently) in the '256' zone.  Ideas?

Okay, my attachments screwed up, so check:
<URL:http://green.homeunix.org/~green/sel_crash_2.txt>
<URL:http://green.homeunix.org/~green/sel_crash_2_uma.txt>

Note that the first fd (pipe) returned with revents set, and was removed 
from the select queue.  In the select queue there are four valid selinfos 
that correspond exactly with all the sockets being selected on, but then
the last invalid one appears from what I can tell to be from one of these 
objects; it couldn't be in the generic '256' bucket if it wasn't a malloc, 
right?

   NFS daemon     3     2K      2K        3  256,512
NTFS res data    10   130K    130K       15  16,64,128,256
  NTFS ntnode     3     1K      2K        5  256
   NTFS mount     2     3K      3K        2  256,2048
       acpica  1160    66K     68K     7477  16,32,64,128,256,512,1024
          USB    68     7K      7K       69  16,32,64,128,256
      UMAHash     1     8K     12K        6  256,512,1024,2048,4096
    proc-args    94     6K      6K    15146  16,32,64,128,256
       kqueue     8     8K     11K     2326  256,1024
    UFS mount    18    50K     78K       38  64,256,2048,4096
  UFS dirhash   546   141K    356K     4281  16,32,64,128,256,512,1024,2048,4096
     freeblks     1     1K     12K     3204  256
       newblk     1     1K      1K   166455  64,256
     dummynet    16     3K     16K  1303187  16,128,256,512
     routetbl    83    13K     13K      204  16,32,64,128,256
       ifaddr    43    12K     12K       44  16,32,64,256,512,2048
          BPF    12    17K     17K       12  64,128,256,4096
    file desc   170    45K     47K     6445  16,32,256,512,1024,2048
       vnodes    29     7K      7K      155  16,32,64,128,256
  Export Host    12     3K      3K       12  256
        dev_t    95    24K     24K       95  256
     ioctlops     0     0K      4K      473  256,512,1024,2048,4096
    AD driver     2     1K      1K        2  256
         sbuf     0     0K     21K      233  16,32,64,128,256,512,1024,2048,4096
      mbufmgr    74    34K     34K       74  32,64,256,2048,4096
         GEOM   101    12K     15K      371  16,32,64,128,256,512,1024,2048
       bus-sc    58    41K     41K      781  16,32,64,128,256,512,1024,2048,4096
      uidinfo     7     1K      1K      575  32,256
       plimit    31     8K      9K     3506  256
        DEVFS   278    42K     44K      297  16,32,128,256,4096
         temp    27    88K    192K    16436  16,32,64,128,256,512,1024,2048,4096
       devbuf   274  2302K   2558K     2218  16,32,64,128,256,512,1024,2048,4096
       linker   155   645K    650K      378  16,32,64,256,1024,2048,4096


-- 
Brian Fundakowski Feldman                           \'[ FreeBSD ]''''''''''\
  <> green at FreeBSD.org                               \  The Power to Serve! \
 Opinions expressed are my own.                       \,,,,,,,,,,,,,,,,,,,,,,\