Re: crash in pipe_create()

[Matthias Drochner <M.Drochner%fz-juelich.de@localhost>]

ad%NetBSD.org@localhost said:
> pagedaemon running != paging. 

It happened again. This time I got a crashdump:

#10 0xc0567b6f in panic (
    fmt=0xc08699dc "kernel %sassertion \"%s\" failed: file \"%s\", line %d")
    at ../../../../kern/subr_prf.c:274
#11 0xc070df6b in __kernassert (t=0xc082933a "diagnostic ",
    f=0xc082931d "../../../../kern/subr_pool.c", l=454,
    e=0xc0829810 "ph == NULL || ((pp->pr_roflags & PR_PHINPAGE) != 0) || ((char
*)ph->ph_page <= (char *)v && (char *)v < (char *)ph->ph_page + pp->pr_alloc->
pa
_pagesz)") at ../../../../../../lib/libkern/__assert.c:50
#12 0xc05642e9 in pr_find_pagehead (pp=0xcafa2000, v=0xe990fa00)
    at ../../../../kern/subr_pool.c:452
#13 0xc0563f19 in pool_do_put (pp=0xcafa2000, v=0xe990fa00, pq=0xcc2eec18)
    at ../../../../kern/subr_pool.c:1218
#14 0xc05645e9 in pool_put (pp=0xcafa2000, v=0xe990fa00)
    at ../../../../kern/subr_pool.c:1342
#15 0xc056639f in pool_cache_destruct_object1 (pc=0xcafa2000,
    object=0xe990fa00) at ../../../../kern/subr_pool.c:2260
#16 0xc056640e in pool_cache_invalidate_groups (pc=0xcafa2000, pcg=0xc2bc6700)
    at ../../../../kern/subr_pool.c:2295
#17 0xc0566544 in pool_cache_invalidate (pc=0xcafa2000)
    at ../../../../kern/subr_pool.c:2330
#18 0xc0564ed6 in pool_reclaim (pp=0xcafa2000)
    at ../../../../kern/subr_pool.c:1629
#19 0xc05651b3 in pool_drain_end (pp=0xcafa2000, where=5886)
    at ../../../../kern/subr_pool.c:1741
#20 0xc067d92a in uvm_pageout (arg=0xcafbb580)
    at ../../../../uvm/uvm_pdaemon.c:346
#21 0xc01002e1 in lwp_trampoline ()

(gdb) print ph
$1 = (struct pool_item_header *) 0xc34a38d8
(gdb) print *ph
$2 = {ph_pagelist = {le_next = 0xc34a3920, le_prev = 0xcafa200c}, ph_node = {
    spe_left = 0xc32e77bc, spe_right = 0xc34a2310}, ph_page = 0xe9546300,
  ph_time = 2703, ph_nmissing = 1, ph_off = 0, ph_u = {phu_normal = {
      phu_itemlist = {lh_first = 0xfffffffe}}, phu_notouch = {phu_bitmap = {
        4294967294}}}}
(gdb) print *pp
$3 = {pr_poollist = {tqe_next = 0xcafa2900, tqe_prev = 0xcafa06c0},
  pr_emptypages = {lh_first = 0xc2375650}, pr_fullpages = {
    lh_first = 0xc34a38d8}, pr_partpages = {lh_first = 0x0},
  pr_curpage = 0xc2375650, pr_phpool = 0xc08ea6dc, pr_cache = 0xcafa2000,
  pr_size = 768, pr_align = 4, pr_itemoffset = 0, pr_minitems = 0,
  pr_minpages = 0, pr_maxpages = 4294967295, pr_npages = 365,
  pr_itemsperpage = 1, pr_slack = 0, pr_nitems = 30, pr_nout = 335,
  pr_hardlimit = 4294967295, pr_refcnt = 1, pr_alloc = 0xc08ea144,
  pr_alloc_list = {tqe_next = 0x0, tqe_prev = 0xc08ea154}, pr_drain_hook = 0,
  pr_drain_hook_arg = 0x0, pr_wchan = 0xc08ea174 "kmem-768", pr_flags = 0,
  pr_roflags = 3072, pr_lock = {u = {mtxa_owner = 3405493632}}, pr_cv = {
    cv_opaque = {0x0, 0xcafa2078, 0xc08ea174}}, pr_ipl = 0, pr_phtree = {
    sph_root = 0xc34a38d8}, pr_maxcolor = 0, pr_curcolor = 0, pr_phoffset = 0,
  pr_hardlimit_warning = 0x0, pr_hardlimit_ratecap = {tv_sec = 0,
    tv_usec = 0}, pr_hardlimit_warning_last = {tv_sec = 0, tv_usec = 0},
  pr_nget = 365, pr_nfail = 0, pr_nput = 30, pr_npagealloc = 365,
  pr_npagefree = 0, pr_hiwat = 365, pr_nidle = 30, pr_log = 0x0,
  pr_curlogentry = 0, pr_logsize = 0, pr_entered_file = 0x0,
  pr_entered_line = 0, pr_reclaimerentry = {ce_q = {tqe_next = 0x0,
      tqe_prev = 0x0}, ce_func = 0, ce_obj = 0x0}, pr_freecheck = 0x0,
  pr_qcache = 0x0}
(gdb) print v
$4 = (void *) 0xe990fa00
(gdb) print *pp->pr_alloc
$5 = {pa_alloc = 0xc055f098 <kmem_poolpage_alloc>,
  pa_free = 0xc055f16e <kmem_poolpage_free>, pa_pagesz = 768, pa_lock = {u = {
      mtxa_owner = 1537}}, pa_list = {tqh_first = 0xcafa2000,
    tqh_last = 0xcafa2058}, pa_flags = 1, pa_pagemask = -768,
  pa_pageshift = 8, pa_backingmap = 0x0, pa_backingmapptr = 0x0, pa_q = {
    sle_next = 0x0}}




-------------------------------------------------------------------
-------------------------------------------------------------------
Forschungszentrum Juelich GmbH
52425 Juelich

Sitz der Gesellschaft: Juelich
Eingetragen im Handelsregister des Amtsgerichts Dueren Nr. HR B 3498
Vorsitzende des Aufsichtsrats: MinDir'in Baerbel Brumme-Bothe
Geschaeftsfuehrung: Prof. Dr. Achim Bachem (Vorsitzender),
Dr. Ulrich Krafft (stellv. Vorsitzender), Prof. Dr. Harald Bolt,
Dr. Sebastian M. Schmidt
-------------------------------------------------------------------
-------------------------------------------------------------------