Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 12 Dec 2002 11:34:00 -0500 (EST)
From:      John Baldwin <jhb@FreeBSD.org>
To:        Kris Kennaway <kris@obsecurity.org>
Cc:        current@FreeBSD.org, alpha@FreeBSD.org
Subject:   RE: UMA panic under load
Message-ID:  <XFMail.20021212113400.jhb@FreeBSD.org>
In-Reply-To: <20021212093620.GA96248@rot13.obsecurity.org>

next in thread | previous in thread | raw e-mail | index | archive | help

On 12-Dec-2002 Kris Kennaway wrote:
> I got this on an alpha tonight.  It was under heavy load at the time
> (18 simultaneous package builds had just been spawned on the machine).
> Any ideas?
> 
> Slab at 0xfffffc00042d3fb8, freei 2 = 0.
> panic: Duplicate free of item 0xfffffc00042d22e0 from zone 0xfffffc0007d31800(VMSPACE)
> 
> db_print_backtrace() at db_print_backtrace+0x18
> panic() at panic+0x104
> uma_dbg_free() at uma_dbg_free+0x170
> uma_zfree_arg() at uma_zfree_arg+0x150
> vmspace_free() at vmspace_free+0xe4
> swapout_procs() at swapout_procs+0x428
> vm_daemon() at vm_daemon+0x74
> fork_exit() at fork_exit+0xe0
> exception_return() at exception_return
> --- root of call graph ---
> panic
> Stopped at      Debugger+0x34:  zapnot  v0,#0xf,v0      <v0=0x0>
> db>

I have seen this on a couple of different arch's I think.  A vmspace
shouldn't be free'd here, it's refcount should not be that low.
I wonder if something is free'ing the vmspace w/o dropping the refcount?

-- 

John Baldwin <jhb@FreeBSD.org>  <><  http://www.FreeBSD.org/~jhb/
"Power Users Use the Power to Serve!"  -  http://www.FreeBSD.org/

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?XFMail.20021212113400.jhb>