Panic - uma_zfree_arg - zone argument is NULL

[Hans Petter Selasky]

On 09/18/14 13:57, Hans Petter Selasky wrote:
> Hi,
>
> Is this a known issue?
>
> Happens when invoking a program over and over again in a loop in from a
> shell.
>
> --HPS
>
> ’

Backtrace got stripped:

FreeBSD 10.0-RELEASE

panic: page fault

Unread portion of the kernel message buffer:
fault virtual address	= 0xd8
fault code		= supervisor read data, page not present
instruction pointer	= 0x20:0xffffffff80b07863
stack pointer	        = 0x28:0xfffffe085d63b3b0
frame pointer	        = 0x28:0xfffffe085d63b420
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags	= interrupt enabled, resume, IOPL = 0
current process		= 5386 (sh)
trap number		= 12
panic: page fault
cpuid = 21
KDB: stack backtrace:
#0 0xffffffff808e7dc0 at kdb_backtrace+0x60
#1 0xffffffff808af8a5 at panic+0x155
#2 0xffffffff80c8e882 at trap_fatal+0x3a2
#3 0xffffffff80c8eb59 at trap_pfault+0x2c9
#4 0xffffffff80c8e2e6 at trap+0x5e6
#5 0xffffffff80c75582 at calltrap+0x8
#6 0xffffffff80898d25 at free+0x75
#7 0xffffffff8085c869 at elf64_load_file+0x379
#8 0xffffffff8085c23e at exec_elf64_imgact+0xa9e
#9 0xffffffff80879f50 at kern_execve+0x690
#10 0xffffffff808796a7 at sys_execve+0x37
#11 0xffffffff80c8f177 at amd64_syscall+0x357
#12 0xffffffff80c7586b at Xfast_syscall+0xfb
Uptime: 1h51m46s

#0  doadump (textdump=<value optimized out>) at pcpu.h:219
219	pcpu.h: No such file or directory.
	in pcpu.h
(kgdb) #0  doadump (textdump=<value optimized out>) at pcpu.h:219
#1  0xffffffff808af520 in kern_reboot (howto=260)
     at /10_release/sys/kern/kern_shutdown.c:447
#2  0xffffffff808af8e4 in panic (fmt=<value optimized out>)
     at /10_release/sys/kern/kern_shutdown.c:754
#3  0xffffffff80c8e882 in trap_fatal (frame=<value optimized out>,
     eva=<value optimized out>)
     at /10_release/sys/amd64/amd64/trap.c:882
#4  0xffffffff80c8eb59 in trap_pfault (frame=0xfffffe085d63b300, usermode=0)
     at /10_release/sys/amd64/amd64/trap.c:699
#5  0xffffffff80c8e2e6 in trap (frame=0xfffffe085d63b300)
     at /10_release/sys/amd64/amd64/trap.c:463
#6  0xffffffff80c75582 in calltrap ()
     at /10_release/sys/amd64/amd64/exception.S:232
#7  0xffffffff80b07863 in uma_zfree_arg (zone=0x0, item=0xfffff800114ee000,
     udata=0xffffffff81484760)
     at /10_release/sys/vm/uma_core.c:2519
#8  0xffffffff80898d25 in free (addr=<value optimized out>,
     mtp=0xffffffff8138df70)
     at /10_release/sys/kern/kern_malloc.c:596
#9  0xffffffff8085c869 in elf64_load_file (p=<value optimized out>,
     file=<value optimized out>, addr=0xfffffe085d63b588,
     entry=0xfffffe085d63b790, pagesize=4096)
     at /10_release/sys/kern/imgact_elf.c:709
#10 0xffffffff8085c23e in exec_elf64_imgact (imgp=0xfffffe085d63b760)
     at /10_release/sys/kern/imgact_elf.c:944
#11 0xffffffff80879f50 in kern_execve (td=0xfffff800114db000,
     args=0xfffffe085d63b958, mac_p=0x0)
     at /10_release/sys/kern/kern_exec.c:501
#12 0xffffffff808796a7 in sys_execve (td=<value optimized out>,
     uap=<value optimized out>)
     at /10_release/sys/kern/kern_exec.c:213
#13 0xffffffff80c8f177 in amd64_syscall (td=0xfffff800114db000, traced=0)
     at subr_syscall.c:134
#14 0xffffffff80c7586b in Xfast_syscall ()
     at /10_release/sys/amd64/amd64/exception.S:391
#15 0x0000000800d38d5a in ?? ()
Previous frame inner to this frame (corrupt stack?)
Current language:  auto; currently minimal
(kgdb)

--HPS