From owner-freebsd-current Thu Dec 12 8:34:11 2002 Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 8FC8D37B401 for ; Thu, 12 Dec 2002 08:34:10 -0800 (PST) Received: from mail.speakeasy.net (mail15.speakeasy.net [216.254.0.215]) by mx1.FreeBSD.org (Postfix) with ESMTP id 3F8D043E4A for ; Thu, 12 Dec 2002 08:34:09 -0800 (PST) (envelope-from jhb@FreeBSD.org) Received: (qmail 1539 invoked from network); 12 Dec 2002 16:34:11 -0000 Received: from unknown (HELO server.baldwin.cx) ([216.27.160.63]) (envelope-sender ) by mail15.speakeasy.net (qmail-ldap-1.03) with DES-CBC3-SHA encrypted SMTP for ; 12 Dec 2002 16:34:11 -0000 Received: from laptop.baldwin.cx (gw1.twc.weather.com [216.133.140.1]) by server.baldwin.cx (8.12.6/8.12.6) with ESMTP id gBCGXxuH069898; Thu, 12 Dec 2002 11:34:03 -0500 (EST) (envelope-from jhb@FreeBSD.org) Message-ID: X-Mailer: XFMail 1.5.2 on FreeBSD X-Priority: 3 (Normal) Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 8bit MIME-Version: 1.0 In-Reply-To: <20021212093620.GA96248@rot13.obsecurity.org> Date: Thu, 12 Dec 2002 11:34:00 -0500 (EST) From: John Baldwin To: Kris Kennaway Subject: RE: UMA panic under load Cc: current@FreeBSD.org, alpha@FreeBSD.org Sender: owner-freebsd-current@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On 12-Dec-2002 Kris Kennaway wrote: > I got this on an alpha tonight. It was under heavy load at the time > (18 simultaneous package builds had just been spawned on the machine). > Any ideas? > > Slab at 0xfffffc00042d3fb8, freei 2 = 0. > panic: Duplicate free of item 0xfffffc00042d22e0 from zone 0xfffffc0007d31800(VMSPACE) > > db_print_backtrace() at db_print_backtrace+0x18 > panic() at panic+0x104 > uma_dbg_free() at uma_dbg_free+0x170 > uma_zfree_arg() at uma_zfree_arg+0x150 > vmspace_free() at vmspace_free+0xe4 > swapout_procs() at swapout_procs+0x428 > vm_daemon() at vm_daemon+0x74 > fork_exit() at fork_exit+0xe0 > exception_return() at exception_return > --- root of call graph --- > panic > Stopped at Debugger+0x34: zapnot v0,#0xf,v0 > db> I have seen this on a couple of different arch's I think. A vmspace shouldn't be free'd here, it's refcount should not be that low. I wonder if something is free'ing the vmspace w/o dropping the refcount? -- John Baldwin <>< http://www.FreeBSD.org/~jhb/ "Power Users Use the Power to Serve!" - http://www.FreeBSD.org/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message