From owner-freebsd-current@FreeBSD.ORG Tue Oct 15 21:19:39 2013 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id AC55F165; Tue, 15 Oct 2013 21:19:39 +0000 (UTC) (envelope-from jhb@freebsd.org) Received: from bigwig.baldwin.cx (bigwig.baldwin.cx [IPv6:2001:470:1f11:75::1]) (using TLSv1 with cipher ADH-CAMELLIA256-SHA (256/256 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 7DD32296C; Tue, 15 Oct 2013 21:19:39 +0000 (UTC) Received: from jhbbsd.localnet (unknown [209.249.190.124]) by bigwig.baldwin.cx (Postfix) with ESMTPSA id 612EDB980; Tue, 15 Oct 2013 17:19:38 -0400 (EDT) From: John Baldwin To: freebsd-ia64@freebsd.org, mexas@bris.ac.uk Subject: Re: panic: uma_zfree: Freeing to non free bucket index. Date: Tue, 15 Oct 2013 17:10:02 -0400 User-Agent: KMail/1.13.5 (FreeBSD/8.4-CBSD-20130906; KDE/4.5.5; amd64; ; ) References: <201310140844.r9E8iSYM015098@mech-cluster241.men.bris.ac.uk> In-Reply-To: <201310140844.r9E8iSYM015098@mech-cluster241.men.bris.ac.uk> MIME-Version: 1.0 Content-Type: Text/Plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <201310151710.02551.jhb@freebsd.org> X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.2.7 (bigwig.baldwin.cx); Tue, 15 Oct 2013 17:19:38 -0400 (EDT) Cc: freebsd-current@freebsd.org X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Oct 2013 21:19:39 -0000 On Monday, October 14, 2013 4:44:28 am Anton Shterenlikht wrote: > > BTW, I see in dmesg: > > Starting ddb. > ddb: sysctl: debug.ddb.scripting.scripts: Invalid argument > /etc/rc: WARNING: failed to start ddb > > What is that about? > > > panic: uma_zfree: Freeing to non free bucket index. > cpuid = 0 > KDB: stack backtrace: > db_trace_self(0x9ffc000000158380) at db_trace_self+0x40 > db_trace_self_wrapper(0x9ffc000000607370) at db_trace_self_wrapper+0x70 > kdb_backtrace(0x9ffc000000ed0e10, 0x9ffc00000058e660, 0x40c, 0x9ffc0000010a44a0) at kdb_backtrace+0xc0 > vpanic(0x9ffc000000dfc468, 0xa0000000e26e0fd8, 0x9ffc000000ef9670, 0x9ffc000000ed0bc0) at vpanic+0x260 > kassert_panic(0x9ffc000000dfc468, 0xe000000015e25f90, 0xe000000015e243e0, 0xe00000027ffd5200) at kassert_panic+0x120 > uma_zfree_arg(0xe00000027ffccfc0, 0xe000000015e243e0, 0x0) at uma_zfree_arg+0x2d0 > g_destroy_bio(0xe000000015e243e0, 0x9ffc0000004ad4a0, 0x30a, 0x30a) at g_destroy_bio+0x30 > g_disk_done(0xe000000015e243e0, 0xe000000015e15d10, 0xe000000012672700, 0x9ffc0000006b18c0) at g_disk_done+0x140 > biodone(0xe000000015e243e0, 0x9ffc000000e0e150, 0xe000000010c24030, 0x0, 0x0, 0x0, 0x9ffc000000066890, 0x614) at biodone+0x180 > dadone(0xe000000012672600, 0xe000000012541000, 0xe000000015e243e0, 0x7) at dadone+0x620 > camisr_runqueue(0xe000000011a2dc00, 0xe000000012541054, 0xe000000012541000, 0x135d) at camisr_runqueue+0x6c0 > camisr(0xe000000011a2dc20, 0xe000000011a2dc00, 0x9ffc000000bee9d0, 0xa0000000e26e1548) at camisr+0x260 > intr_event_execute_handlers(0xe0000000111764a0, 0xe00000001118d998, 0xe000000011191c00, 0x0) at intr_event_execute_handlers+0x280 > ithread_loop(0xe000000011192f00, 0xa0000000e26e1550, 0xe000000011192f14, 0xe00000001118d99c) at ithread_loop+0x1b0 > fork_exit(0x9ffc000000e12a90, 0xe000000011192f00, 0xa0000000e26e1550) at fork_exit+0x120 > enter_userland() at enter_userland > KDB: enter: panic > [ thread pid 12 tid 100015 ] > Stopped at kdb_enter+0x92: [I2] addl r14=0xffffffffffe2c990,gp ;; > db> > > db> scripts > lockinfo=show locks; show alllocks; show lockedvnods > db> run lockinfo > db:0:lockinfo> show locks > db:0:locks> show alllocks > db:0:alllocks> show lockedvnods > Locked vnodes > > 0xe00000001ab39ba8: tag ufs, type VDIR > usecount 1, writecount 0, refcount 3 mountedhere 0 > flags (VI_ACTIVE) > v_object 0xe00000001cd30900 ref 0 pages 0 > lock type ufs: EXCL by thread 0xe0000000183d9680 (pid 41389, cpdup, tid 100121) > ino 5467932, on dev da5p1 > > 0xe000000015ed3ba8: tag ufs, type VDIR > usecount 1, writecount 0, refcount 3 mountedhere 0 > flags (VI_ACTIVE) > v_object 0xe00000001cd33e00 ref 0 pages 0 > lock type ufs: EXCL by thread 0xe000000012a28900 (pid 41421, cpdup, tid 100092) > ino 5467948, on dev da5p1 > > 0xe00000001ab16938: tag ufs, type VREG > usecount 1, writecount 0, refcount 3 mountedhere 0 > flags (VI_ACTIVE) > v_object 0xe00000001cd98a00 ref 0 pages 1 > lock type ufs: EXCL by thread 0xe000000018494000 (pid 41337, cpdup, tid 100137) > ino 5469420, on dev da5p1 > > 0xe00000001b2503b0: tag ufs, type VREG > usecount 1, writecount 0, refcount 1 mountedhere 0 > flags (VI_ACTIVE) > lock type ufs: EXCL by thread 0xe000000012a28900 (pid 41421, cpdup, tid 100092) > ino 5469421, on dev da5p1 > > 0xe00000001ab2a760: tag ufs, type VREG > usecount 1, writecount 0, refcount 1 mountedhere 0 > flags (VI_ACTIVE) > lock type ufs: EXCL by thread 0xe0000000183d9680 (pid 41389, cpdup, tid 100121) > ino 5469422, on dev da5p1 > db> > db> script zzz=textdump set; capture on; run lockinfo; show pcpu; bt; ps; alltrace; capture off; reset > db> run zzz I think 'reset' is going to reset without doing a dump? -- John Baldwin