Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 02 Aug 2022 06:30:09 +0000
From:      bugzilla-noreply@freebsd.org
To:        bugs@FreeBSD.org
Subject:   [Bug 265569] [panic] Fatal trap 9: general protection fault while in kernel mode arc_reap
Message-ID:  <bug-265569-227-J2QuX5GveY@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-265569-227@https.bugs.freebsd.org/bugzilla/>
References:  <bug-265569-227@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D265569

--- Comment #1 from Charlie Stanley <postmaster@willardstanley.com> ---
I was doing some more debugging and the call chain looks sane until the slab
address is computed. The slab pointer seems to be at an odd offset, and whe=
n I
dereference it, the data looks like garbage to my limited understanding.

(kgdb) frame 8
#8  zone_release (arg=3D0xfffffe015a7c8000, bucket=3D0xfffff80f4784e410,
cnt=3D<optimized out>) at /usr/src/sys/vm/uma_core.c:4730
4730                    slab_free_item(zone, slab, item);
(kgdb) print zone
$19 =3D (uma_zone_t) 0xfffffe015a7c8000
(kgdb) print slab
$20 =3D (uma_slab_t) 0xfffff80e00000158
(kgdb) print *zone
$21 =3D {uz_flags =3D 10551296, uz_size =3D 4096, uz_ctor =3D 0x0, uz_dtor =
=3D 0x0,
uz_smr =3D 0x0, uz_max_items =3D 0, uz_bucket_max =3D 18446744073709551615,
uz_bucket_size =3D 80, uz_bucket_size_max =3D 254, uz_sleepers =3D 0, uz_xd=
omain =3D
0xfffffe01d3cb4590, uz_keg =3D 0xfffff80005f13a80,=20
  uz_import =3D 0xffffffff80f4a370 <zone_import>, uz_release =3D 0xffffffff=
80f465e0
<zone_release>, uz_arg =3D 0xfffffe015a7c8000, uz_init =3D 0x0, uz_fini =3D=
 0x0,
uz_items =3D 0, uz_sleeps =3D 0, uz_link =3D {le_next =3D 0x0, le_prev =3D
0xfffff80005f13a90}, uz_allocs =3D 0xfffffe01d3cb45a8,=20
  uz_frees =3D 0xfffffe01d3cb45a0, uz_fails =3D 0xfffffe01d3cb4598, uz_name=
 =3D
0xfffff80005f0a180 "abd_chunk", uz_ctlname =3D 0xfffff80005f18de0 "abd_chun=
k",
uz_namecnt =3D 0, uz_bucket_size_min =3D 2, uz_reclaimers =3D 1, uz_oid =3D
0xfffff80005f07b80, uz_warning =3D 0x0, uz_ratecheck =3D {
    tv_sec =3D 0, tv_usec =3D 0}, uz_maxaction =3D {ta_link =3D {stqe_next =
=3D 0x0},
ta_pending =3D 0, ta_priority =3D 0 '\000', ta_flags =3D 0 '\000', ta_func =
=3D 0x0,
ta_context =3D 0x0}, uz_cross_lock =3D {lock_object =3D {lo_name =3D 0xffff=
ffff812a0598
"UMA Cross", lo_flags =3D 16973824,=20
      lo_data =3D 0, lo_witness =3D 0x0}, mtx_lock =3D 0}, uz_cpu =3D
0xfffffe015a7c8180}
(kgdb) print *slab
$22 =3D {us_link =3D {le_next =3D 0xda39576285989539, le_prev =3D 0x732ca6f=
15f8ff3dc},
us_freecount =3D 4147, us_flags =3D 27 '\033', us_domain =3D 120 'x', us_fr=
ee =3D
{__bits =3D 0xfffff80e00000170}}

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-265569-227-J2QuX5GveY>