[kris@obsecurity.org: Re: panic: uma_small_alloc: free page still has mappings!]

[Kris Kennaway]

This is apparently a sparc-specific problem - can someone please look
into it?  Cores are available.

Kris

----- Forwarded message from Kris Kennaway <kris at obsecurity.org> -----

Date: Wed, 14 Sep 2005 16:59:48 -0400
From: Kris Kennaway <kris at obsecurity.org>
To: Kris Kennaway <kris at obsecurity.org>
Cc: current at FreeBSD.org
Subject: Re: panic: uma_small_alloc: free page still has mappings!
In-Reply-To: <20050910201924.GA96706 at xor.obsecurity.org>
User-Agent: Mutt/1.4.2.1i

On Sat, Sep 10, 2005 at 04:19:25PM -0400, Kris Kennaway wrote:
> sparc64 SMP machine running 7.0 panicked a few minutes after adding
> load with:
> 
> panic: uma_small_alloc: free page still has mappings!
> cpuid = 0
> KDB: enter: panic
> [thread pid 9124 tid 100318 ]
> Stopped at      kdb_enter+0x3c: ta              %xcc, 1
> db> wh
> Tracing pid 9124 tid 100318 td 0xfffff800f6fb2720
> panic() at panic+0x164
> uma_small_alloc() at uma_small_alloc+0x9c
> slab_zalloc() at slab_zalloc+0x98
> uma_zone_slab() at uma_zone_slab+0x12c
> uma_zalloc_bucket() at uma_zalloc_bucket+0x16c
> uma_zalloc_arg() at uma_zalloc_arg+0x374
> malloc() at malloc+0x114
> allocbuf() at allocbuf+0x208
> getblk() at getblk+0x598
> breadn() at breadn+0x58
> bread() at bread+0x20
> ffs_blkatoff() at ffs_blkatoff+0x64
> ufs_direnter() at ufs_direnter+0x444
> ufs_makeinode() at ufs_makeinode+0x460
> ufs_create() at ufs_create+0x30
> VOP_CREATE_APV() at VOP_CREATE_APV+0xb4
> vn_open_cred() at vn_open_cred+0x188
> vn_open() at vn_open+0x18
> kern_open() at kern_open+0x8c
> open() at open+0x14
> syscall() at syscall+0x2dc
> -- syscall (5, FreeBSD ELF64, open) %o7=0x4034d5b8 --

Another one:

panic: uma_small_alloc: free page still has mappings!
db> wh
Tracing pid 19131 tid 100434 td 0xfffff800cf40a000
panic() at panic+0x164
uma_small_alloc() at uma_small_alloc+0x9c
slab_zalloc() at slab_zalloc+0x98
uma_zone_slab() at uma_zone_slab+0x12c
uma_zalloc_bucket() at uma_zalloc_bucket+0x16c
uma_zalloc_arg() at uma_zalloc_arg+0x374
malloc() at malloc+0x114
sigacts_alloc() at sigacts_alloc+0x10
fork1() at fork1+0x5dc
fork() at fork+0x10
syscall() at syscall+0x2dc
-- syscall (2, FreeBSD ELF64, fork) %o7=0x40481bc8 --

Kris




----- End forwarded message -----
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-sparc64/attachments/20050914/0e0fdbfd/attachment.bin