Re: kern/51254: uvm assertion failed

[Martin Husemann <martin%duskware.de@localhost>]

The following reply was made to PR kern/51254; it has been noted by GNATS.

From: Martin Husemann <martin%duskware.de@localhost>
To: gnats-bugs%NetBSD.org@localhost
Cc: Chuck Silvers <chuq%chuq.com@localhost>
Subject: Re: kern/51254: uvm assertion failed
Date: Sat, 9 Jul 2016 09:37:04 +0200

 I reproduced it with UVMHIST on and got the output below, which is either
 puzzling (missing the log from right before the KASSERT) - or points
 at a gcc issue. Or did I misread the code?
 
 Martin
 
 panic: kernel diagnostic assertion "!topdown || hint <= orig_hint" failed: file "../../../../uvm/uvm_map.c", line 2116 hint: fffffffff7ffc000, orig_hint: ffffffff91b16000
 db{1}> show kernhist maphist
 1468019688.316420 uvm_anon_dispose#17626051@0: (anon=0xbd27bc0)
 1468019688.316422 uvm_anon_dispose#17626051@0: anon 0xbd27bc0, page 0x1842e50: f
 reed now!
 1468019688.316422 uvm_anon_dropswap#17626200@0: called!
 1468019688.316422 uvm_anon_dispose#17626051@0: <- done!
 1468019688.316422 uvm_anon_dispose#17626052@0: called!
 1468019688.316423 uvm_anon_dispose#17626052@0: (anon=0xbef96a0)
 1468019688.316424 uvm_anon_dispose#17626052@0: anon 0xbef96a0, page 0x1b0f1d8: f
 reed now!
 1468019688.316424 uvm_anon_dropswap#17626201@0: called!
 1468019688.316424 uvm_anon_dispose#17626052@0: <- done!
 1468019688.316425 amap_free#1231406@0: called!
 1468019688.316428 amap_free#1231406@0: <- done, freed amap = 0xbcab770
 1468019688.316428 amap_wipeout#1231390@0: <- done!
 1468019688.316429 amap_unref#1262721@0: <- done (was last ref)!
 1468019688.316429 uvm_mapent_free#3549407@0: called!
 1468019688.316429 uvm_mapent_free#3549407@0: <- freeing map entry=0x10bb2f0f0 [f
 lags=0]
 1468019688.316430 uvm_unmap_detach#1036330@0:   detach 0x10bd15330: amap=0x10b95
 f9a0, obj=0x104922540, submap?=0
 1468019688.316430 amap_unref#1262722@0: called!
 1468019688.316430 amap_unref#1262722@0:   amap=0xb95f9a0  refs=1, nused=1
 1468019688.316431 amap_wipeout#1231391@0: called!
 1468019688.316431 amap_wipeout#1231391@0: (amap=0xb95f9a0)
 1468019688.316432 amap_wipeout#1231391@0:   processing anon 0xbf242e0, ref=1
 1468019688.316432 uvm_anon_dispose#17626053@0: called!
 1468019688.316432 uvm_anon_dispose#17626053@0: (anon=0xbf242e0)
 1468019688.316434 uvm_anon_dispose#17626053@0: anon 0xbf242e0, page 0x169c060: f
 reed now!
 1468019688.316435 uvm_anon_dropswap#17626202@0: called!
 1468019688.316435 uvm_anon_dispose#17626053@0: <- done!
 1468019688.316435 amap_free#1231407@0: called!
 1468019688.316437 amap_free#1231407@0: <- done, freed amap = 0xb95f9a0
 1468019688.316437 amap_wipeout#1231391@0: <- done!
 1468019688.316437 amap_unref#1262722@0: <- done (was last ref)!
 1468019688.316438 uvm_mapent_free#3549408@0: called!
 1468019688.316438 uvm_mapent_free#3549408@0: <- freeing map entry=0x10bd15330 [f
 lags=0]
 1468019688.316438 uvm_unmap_detach#1036330@0:   detach 0x10bd154e0: amap=0x0, ob
 j=0x104922540, submap?=0
 1468019688.316438 uvm_mapent_free#3549409@0: called!
 1468019688.316439 uvm_mapent_free#3549409@0: <- freeing map entry=0x10bd154e0 [f
 lags=0]
 1468019688.316439 uvm_unmap_detach#1036330@0: <- done
 1468019688.320246 uvm_pagermapout#113903@0: called!
 1468019688.320247 uvm_pagermapout#113903@0:  (kva=0xaf2b0000, npages=8)
 1468019688.320311 uvm_unmap_remove#1036331@0: called!
 1468019688.320311 uvm_unmap_remove#1036331@0: (map=0x103b05e08, start=0x1af2b000
 0, end=0x1af2c0000)
 1468019688.320312 uvm_map_lookup_entry#31606530@0: called!
 1468019688.320313 uvm_map_lookup_entry#31606530@0: (map=0x103b05e08,addr=0x1af2b
 0000,ent=0x1b1a91ab8)
 1468019688.320314 uvm_map_lookup_entry#31606530@0: <- search got it (0x1065d74e0
 )
 1468019688.320315 uvm_km_pgremove_intrsafe#389133@0: called!
 1468019688.320321 uvm_unmap_remove#1036331@0:   removed map entry 0x10595c390
 1468019688.320326 uvm_unmap_remove#1036331@0: <- done!
 1468019688.320327 uvm_unmap_detach#1036331@0: called!
 1468019688.320327 uvm_unmap_detach#1036331@0:   detach 0x10595c390: amap=0x0, ob
 j=0x0, submap?=0
 1468019688.320328 uvm_mapent_free#3549410@0: called!
 1468019688.320328 uvm_mapent_free#3549410@0: <- freeing map entry=0x10595c390 [f
 lags=8]
 1468019688.320329 uvm_unmap_detach#1036331@0: <- done
 1468019688.320329 uvm_pagermapout#113903@0: <- done
 1468019688.325047 uvm_pagermapout#113904@0: called!
 1468019688.325047 uvm_pagermapout#113904@0:  (kva=0xaf1f0000, npages=8)
 1468019688.325111 uvm_unmap_remove#1036332@0: called!
 1468019688.325112 uvm_unmap_remove#1036332@0: (map=0x103b05e08, start=0x1af1f000
 0, end=0x1af200000)
 1468019688.325112 uvm_map_lookup_entry#31606531@0: called!
 1468019688.325113 uvm_map_lookup_entry#31606531@0: (map=0x103b05e08,addr=0x1af1f
 0000,ent=0x1b1a91ab8)
 1468019688.325114 uvm_map_lookup_entry#31606531@0: <- search got it (0x1065eb850
 )
 1468019688.325114 uvm_km_pgremove_intrsafe#389134@0: called!
 1468019688.325120 uvm_unmap_remove#1036332@0:   removed map entry 0x106500820
 1468019688.325123 uvm_unmap_remove#1036332@0: <- done!
 1468019688.325123 uvm_unmap_detach#1036332@0: called!
 1468019688.325124 uvm_unmap_detach#1036332@0:   detach 0x106500820: amap=0x0, ob
 j=0x0, submap?=0
 1468019688.325124 uvm_mapent_free#3549411@0: called!
 1468019688.325125 uvm_mapent_free#3549411@0: <- freeing map entry=0x106500820 [f
 lags=8]
 1468019688.325126 uvm_unmap_detach#1036332@0: <- done
 1468019688.325127 uvm_pagermapout#113904@0: <- done
 1468019688.330127 uvm_pagermapout#113905@0: called!
 1468019688.330127 uvm_pagermapout#113905@0:  (kva=0xaf220000, npages=8)
 1468019688.330193 uvm_unmap_remove#1036333@0: called!
 1468019688.330193 uvm_unmap_remove#1036333@0: (map=0x103b05e08, start=0x1af22000
 0, end=0x1af230000)
 1468019688.330194 uvm_map_lookup_entry#31606532@0: called!
 1468019688.330194 uvm_map_lookup_entry#31606532@0: (map=0x103b05e08,addr=0x1af22
 0000,ent=0x1b1a91ab8)
 1468019688.330195 uvm_map_lookup_entry#31606532@0: <- search got it (0x1058fa550
 )
 1468019688.330195 uvm_km_pgremove_intrsafe#389135@0: called!
 1468019688.330202 uvm_unmap_remove#1036333@0:   removed map entry 0x10591ea30
 1468019688.330204 uvm_unmap_remove#1036333@0: <- done!
 1468019688.330204 uvm_unmap_detach#1036333@0: called!
 1468019688.330205 uvm_unmap_detach#1036333@0:   detach 0x10591ea30: amap=0x0, ob
 j=0x0, submap?=0
 1468019688.330205 uvm_mapent_free#3549412@0: called!
 1468019688.330205 uvm_mapent_free#3549412@0: <- freeing map entry=0x10591ea30 [f
 lags=8]
 1468019688.330206 uvm_unmap_detach#1036333@0: <- done
 1468019688.330206 uvm_pagermapout#113905@0: <- done
 1468019688.336577 uvm_pagermapout#113906@0: called!
 1468019688.336578 uvm_pagermapout#113906@0:  (kva=0xaf20a000, npages=8)
 1468019688.336643 uvm_unmap_remove#1036334@0: called!
 1468019688.336644 uvm_unmap_remove#1036334@0: (map=0x103b05e08, start=0x1af20a00
 0, end=0x1af21a000)
 1468019688.336644 uvm_map_lookup_entry#31606533@0: called!
 1468019688.336645 uvm_map_lookup_entry#31606533@0: (map=0x103b05e08,addr=0x1af20
 a000,ent=0x1b1a91ab8)
 1468019688.336645 uvm_map_lookup_entry#31606533@0: <- got it via hint (0x106501e
 10)
 1468019688.336646 uvm_km_pgremove_intrsafe#389136@0: called!
 1468019688.336652 uvm_unmap_remove#1036334@0:   removed map entry 0x106501e10
 1468019688.336655 uvm_unmap_remove#1036334@0: <- done!
 1468019688.336655 uvm_unmap_detach#1036334@0: called!
 1468019688.336656 uvm_unmap_detach#1036334@0:   detach 0x106501e10: amap=0x0, ob
 j=0x0, submap?=0
 1468019688.336656 uvm_mapent_free#3549413@0: called!
 1468019688.336656 uvm_mapent_free#3549413@0: <- freeing map entry=0x106501e10 [f
 lags=8]
 1468019688.336657 uvm_unmap_detach#1036334@0: <- done
 1468019688.336657 uvm_pagermapout#113906@0: <- done