From owner-freebsd-stable@FreeBSD.ORG  Fri May 30 15:34:03 2014
Return-Path: <owner-freebsd-stable@FreeBSD.ORG>
Delivered-To: freebsd-stable@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id 6FCB3B1;
 Fri, 30 May 2014 15:34:03 +0000 (UTC)
Received: from bigwig.baldwin.cx (bigwig.baldwin.cx [IPv6:2001:470:1f11:75::1])
 (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits))
 (Client did not present a certificate)
 by mx1.freebsd.org (Postfix) with ESMTPS id 491132200;
 Fri, 30 May 2014 15:34:03 +0000 (UTC)
Received: from jhbbsd.localnet (unknown [209.249.190.124])
 by bigwig.baldwin.cx (Postfix) with ESMTPSA id 354CEB9AD;
 Fri, 30 May 2014 11:34:02 -0400 (EDT)
From: John Baldwin <jhb@freebsd.org>
To: freebsd-stable@freebsd.org
Subject: Re: Stable/10 panic: uma_zfree: Freeing to non free bucket index.
Date: Fri, 30 May 2014 11:09:42 -0400
User-Agent: KMail/1.13.5 (FreeBSD/8.4-CBSD-20140415; KDE/4.5.5; amd64; ; )
References: <CALCpEUGQvtUytPDHOZeKy__czng7DLY=eVTzA=Tp22JAkgUa3Q@mail.gmail.com>
In-Reply-To: <CALCpEUGQvtUytPDHOZeKy__czng7DLY=eVTzA=Tp22JAkgUa3Q@mail.gmail.com>
MIME-Version: 1.0
Content-Type: Text/Plain;
  charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Message-Id: <201405301109.42870.jhb@freebsd.org>
X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.2.7
 (bigwig.baldwin.cx); Fri, 30 May 2014 11:34:02 -0400 (EDT)
Cc: Jeff Roberson <jeff@freebsd.org>, hiren panchasara <hiren@freebsd.org>
X-BeenThere: freebsd-stable@freebsd.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: Production branch of FreeBSD source code <freebsd-stable.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-stable>,
 <mailto:freebsd-stable-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-stable/>
List-Post: <mailto:freebsd-stable@freebsd.org>
List-Help: <mailto:freebsd-stable-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
 <mailto:freebsd-stable-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 30 May 2014 15:34:03 -0000

On Thursday, May 29, 2014 7:12:02 pm hiren panchasara wrote:
> We are at stable/10 r261579. On a Xeon E5-2670 with 64GB ram, we saw this 
panic:
> 
> Unread portion of the kernel message buffer:
> panic: uma_zfree: Freeing to non free bucket index.

A double free?  When I was at Y! there was a fairly common fdrop panic due to 
the ref count underflowing on 7.  I suspect this is the same bug, just being 
caught differently.  I was never able to find the culprit of the double free. 
:(

-- 
John Baldwin