Panic - uma_zfree_arg - zone argument is NULL

[Hans Petter Selasky]

On 09/26/14 08:06, Gleb Smirnoff wrote:
> On Fri, Sep 26, 2014 at 07:59:09AM +0200, Hans Petter Selasky wrote:
> H> On 09/26/14 07:51, Hans Petter Selasky wrote:
> H> > On 09/25/14 11:19, Gleb Smirnoff wrote:
> H> >> On Thu, Sep 18, 2014 at 02:03:44PM +0200, Hans Petter Selasky wrote:
> H> >> H> #7  0xffffffff80b07863 in uma_zfree_arg (zone=0x0,
> H> >> item=0xfffff800114ee000,
> H> >> H>      udata=0xffffffff81484760)
> H> >>
> H> >> udata here is uma_slab_t. Can you look at it?
> H> >>
> H> >> btw, is that reproducible on stable/10 or head?
> H> >>
> H> >
> H> > Yes, it is reproducible. I have not tried stable/10 or head yet.
> H> >
> H> > (kgdb) print *(uma_slab_t)udata
> H> > $3 = {
> H> >    us_keg = 0xfffff8085696d680,
>
> Can you print the us_keg, please?
>

(kgdb) print *(*(uma_slab_t)udata).us_keg
$5 = {
   uk_lock = {
     lock_object = {
       lo_name = 0xfffff8085696fd80 "\200\n\227V\b???\200?\226V\b???",
       lo_flags = 2168997728,
       lo_data = 4294967295,
       lo_witness = 0x0
     },
     mtx_lock = 0
   },
   uk_hash = {
     uh_slab_hash = 0x0,
     uh_hashsize = 0,
     uh_hashmask = 0
   },
   uk_zones = {
     lh_first = 0x0
   },
   uk_part_slab = {
     lh_first = 0x224821000
   },
   uk_free_slab = {
     lh_first = 0x0
   },
   uk_full_slab = {
     lh_first = 0xfffff8085696d720
   },
   uk_align = 0,
   uk_pages = 6,
   uk_free = 0,
   uk_reserve = 1,
   uk_size = 131072,
   uk_rsize = 67044352,
   uk_maxpages = 269,
   uk_init = 0,
   uk_fini = 0xffffffff81484760 <vm_phys_free_queues+336>,
   uk_allocf = 0xfffff8085696d7b8,
   uk_freef = 0xfffff80854307748,
   uk_offset = 18446744071584084984,
   uk_kva = 36435,
   uk_slabzone = 0x224822000,
   uk_slabsize = 0,
   uk_pgoff = 0,
   uk_ppera = 0,
   uk_ipers = 0,
   uk_flags = 1452726152,
   uk_name = 0x600000000 <Address 0x600000000 out of bounds>,
   uk_link = {
     le_next = 0x100000001,
     le_prev = 0x3ff040000000000
   }
}

--HPS