Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 2 Oct 2006 18:21:29 +0200
From:      "Simon L. Nielsen" <simon@FreeBSD.org>
To:        freebsd-current@freebsd.org
Cc:        "Bjoern A. Zeeb" <bz@FreeBSD.org>, yongari@FreeBSD.org
Subject:   panic: Duplicate free of item 0xffffff002ef51d00 from zone 0xffffff003ffdc840(mbuf_packet)
Message-ID:  <20061002162128.GA1034@zaphod.nitro.dk>

next in thread | raw e-mail | index | archive | help

--liOOAslEiF7prFVr
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

Hey,

On an amd64 -CURRENT from yesterday I get this panic (now twice)
shortly after the system has come up in multi user.  It seems related
to sk(4) which is the active NIC in the system, but it might be the
problem is elsewhere.

It's currently running OK again on an kernel from Aug 19.  dmesg from
this old kernel attached.  I can generate dmesg from the new kernel if
needed.

Anybody has any ideas of what's going wrong?  I can test patches
etc. if needed.

gdb says:

Unread portion of the kernel message buffer:
Slab at 0xffffff002ef51f50, freei 13 = 0.
panic: Duplicate free of item 0xffffff002ef51d00 from zone 0xffffff003ffdc840(mbuf_packet)

cpuid = 0
KDB: enter: panic
Physical memory: 1012 MB
Dumping 203 MB: 188 172 156 140 124 108 92 76 60 44 28 12

#0  doadump () at pcpu.h:172
172     pcpu.h: No such file or directory.
        in pcpu.h
(kgdb) bt
#0  doadump () at pcpu.h:172
#1  0xffffffff801af2d4 in db_fncall (dummy1=0, dummy2=0, dummy3=0, dummy4=0x0)
    at /usr/src/sys/ddb/db_command.c:481
#2  0xffffffff801af689 in db_command_loop () at /usr/src/sys/ddb/db_command.c:396
#3  0xffffffff801b1553 in db_trap (type=-1603201104, code=0) at /usr/src/sys/ddb/db_main.c:221
#4  0xffffffff80450ac8 in kdb_trap (type=3, code=0, tf=0xffffffffa0711930)
    at /usr/src/sys/kern/subr_kdb.c:502
#5  0xffffffff806352c2 in trap (frame=
      {tf_rdi = 0, tf_rsi = -2132733952, tf_rdx = 1, tf_rcx = 1058292, tf_r8 = 1048064, tf_r9 = 10, tf_rax = 18, tf_rbx = -2139976232, tf_rbp = -1603200528, tf_r10 = -1603200768, tf_r11 = 10, tf_r12 = 0, tf_r13 = 256, tf_r14 = -1098480768320, tf_r15 = -1098438031296, tf_trapno = 3, tf_addr = 0, tf_flags = 256, tf_err = 0, tf_rip = -2142960273, tf_cs = 8, tf_rflags = 646, tf_rsp = -1603200528, tf_ss = 16})
    at /usr/src/sys/amd64/amd64/trap.c:471
#6  0xffffffff8061fb4b in calltrap () at /usr/src/sys/amd64/amd64/exception.S:168
#7  0xffffffff8045056f in kdb_enter (msg=0x0) at cpufunc.h:63
#8  0xffffffff8042b659 in panic (fmt=0xffffffff80728dd8 "Duplicate free of item %p from zone %p(%s)\n")
    at /usr/src/sys/kern/kern_shutdown.c:549
#9  0xffffffff805b5f08 in uma_dbg_free (zone=0xffffff003ffdc840, slab=0xffffff002ef51f50, 
    item=0xffffff002ef51d00) at /usr/src/sys/vm/uma_dbg.c:302
#10 0xffffffff805b3dc0 in uma_zfree_arg (zone=0xffffff003ffdc840, item=0xffffff002ef51d00, udata=0x0)
    at /usr/src/sys/vm/uma_core.c:2269
#11 0xffffffff804785b8 in m_freem (mb=0x12) at mbuf.h:445
#12 0xffffffff80359d53 in sk_txeof (sc_if=0xffffffff80e56000) at /usr/src/sys/dev/sk/if_sk.c:3233
#13 0xffffffff8035bc48 in sk_intr (xsc=0x0) at /usr/src/sys/dev/sk/if_sk.c:3459
#14 0xffffffff8041364e in ithread_loop (arg=0xffffff0000e8b020) at /usr/src/sys/kern/kern_intr.c:662
#15 0xffffffff8041229a in fork_exit (callout=0xffffffff80413550 <ithread_loop>, arg=0xffffff0000e8b020, 
    frame=0xffffffffa0711c90) at /usr/src/sys/kern/kern_fork.c:818
#16 0xffffffff8061feae in fork_trampoline () at /usr/src/sys/amd64/amd64/exception.S:394
#17 0x0000000000000000 in ?? ()
#18 0x0000000000000000 in ?? ()

-- 
Simon L. Nielsen

--liOOAslEiF7prFVr
Content-Type: text/plain; charset=us-ascii
Content-Disposition: attachment; filename="trillian.dmesg"

Copyright (c) 1992-2006 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
	The Regents of the University of California. All rights reserved.
FreeBSD 7.0-CURRENT #1: Sat Aug 19 14:56:13 UTC 2006
    root@trillian.nitro.dk:/usr/obj/usr/src/sys/GENERIC
WARNING: WITNESS option enabled, expect reduced performance.
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: AMD Athlon(tm) 64 Processor 3200+ (2009.79-MHz K8-class CPU)
  Origin = "AuthenticAMD"  Id = 0x20ff2  Stepping = 2
  Features=0x78bfbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,MMX,FXSR,SSE,SSE2>
  Features2=0x1<SSE3>
  AMD Features=0xe2500800<SYSCALL,NX,MMX+,FFXSR,LM,3DNow!+,3DNow!>
  AMD Features2=0x1<LAHF>
usable memory  = 1061457920 (1012 MB)
avail memory = 1023041536 (975 MB)
ACPI APIC Table: <XPC    AWRDACPI>
ioapic0 <Version 1.1> irqs 0-23 on motherboard
kbd1 at kbdmux0
ath_hal: 0.9.17.2 (AR5210, AR5211, AR5212, RF5111, RF5112, RF2413, RF5413)
acpi0: <XPC AWRDACPI> on motherboard
acpi0: Power Button (fixed)
Timecounter "ACPI-fast" frequency 3579545 Hz quality 1000
acpi_timer0: <24-bit timer at 3.579545MHz> port 0x4008-0x400b on acpi0
cpu0: <ACPI CPU> on acpi0
acpi_button0: <Power Button> on acpi0
pcib0: <ACPI Host-PCI bridge> port 0xcf8-0xcff,0xcf0-0xcf3 on acpi0
pci0: <ACPI PCI bus> on pcib0
agp0: <NVIDIA nForce3-250 AGP Controller> on hostb0
isab0: <PCI-ISA bridge> at device 1.0 on pci0
isa0: <ISA bus> on isab0
pci0: <serial bus, SMBus> at device 1.1 (no driver attached)
ohci0: <OHCI (generic) USB controller> mem 0xfdfff000-0xfdffffff irq 21 at device 2.0 on pci0
ohci0: [GIANT-LOCKED]
usb0: OHCI version 1.0, legacy support
usb0: SMM does not respond, resetting
usb0: <OHCI (generic) USB controller> on ohci0
usb0: USB revision 1.0
uhub0: <nVidia OHCI root hub, class 9/0, rev 1.00/1.00, addr 1> on usb0
uhub0: 4 ports with 4 removable, self powered
ohci1: <OHCI (generic) USB controller> mem 0xfdffe000-0xfdffefff irq 22 at device 2.1 on pci0
ohci1: [GIANT-LOCKED]
usb1: OHCI version 1.0, legacy support
usb1: SMM does not respond, resetting
usb1: <OHCI (generic) USB controller> on ohci1
usb1: USB revision 1.0
uhub1: <nVidia OHCI root hub, class 9/0, rev 1.00/1.00, addr 1> on usb1
uhub1: 4 ports with 4 removable, self powered
ehci0: <NVIDIA nForce3 250 USB 2.0 controller> mem 0xfdffd000-0xfdffd0ff irq 23 at device 2.2 on pci0
ehci0: [GIANT-LOCKED]
usb2: EHCI version 1.0
usb2: companion controllers, 4 ports each: usb0 usb1
usb2: <NVIDIA nForce3 250 USB 2.0 controller> on ehci0
usb2: USB revision 2.0
uhub2: <nVidia EHCI root hub, class 9/0, rev 2.00/1.00, addr 1> on usb2
uhub2: 8 ports with 8 removable, self powered
pci0: <multimedia, audio> at device 6.0 (no driver attached)
atapci0: <nVidia nForce3 Pro UDMA133 controller> port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xfa00-0xfa0f at device 8.0 on pci0
ata0: <ATA channel 0> on atapci0
ata1: <ATA channel 1> on atapci0
atapci1: <nVidia nForce3 Pro SATA150 controller> port 0x9f0-0x9f7,0xbf0-0xbf3,0x970-0x977,0xb70-0xb73,0xf500-0xf50f,0xf400-0xf47f irq 22 at device 10.0 on pci0
ata2: <ATA channel 0> on atapci1
ata3: <ATA channel 1> on atapci1
pcib1: <ACPI PCI-PCI bridge> at device 11.0 on pci0
pci1: <ACPI PCI bus> on pcib1
vgapci0: <VGA-compatible display> mem 0xfa000000-0xfaffffff,0xe0000000-0xefffffff,0xfb000000-0xfbffffff irq 16 at device 0.0 on pci1
pcib2: <ACPI PCI-PCI bridge> at device 14.0 on pci0
pci2: <ACPI PCI bus> on pcib2
rl0: <RealTek 8139 10/100BaseTX> port 0xdc00-0xdcff mem 0xfdeff000-0xfdeff0ff irq 18 at device 6.0 on pci2
miibus0: <MII bus> on rl0
rlphy0: <RealTek internal media interface> on miibus0
rlphy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
rl0: Ethernet address: 00:48:54:d0:e4:8c
fwohci0: <VIA Fire II (VT6306)> port 0xdf00-0xdf7f mem 0xfdefe000-0xfdefe7ff irq 19 at device 7.0 on pci2
fwohci0: OHCI version 1.0 (ROM=1)
fwohci0: No. of Isochronous channels is 4.
fwohci0: EUI64 00:30:1b:b7:00:00:f3:cc
fwohci0: Phy 1394a available S400, 2 ports.
fwohci0: Link S400, max_rec 2048 bytes.
firewire0: <IEEE1394(FireWire) bus> on fwohci0
fwe0: <Ethernet over FireWire> on firewire0
if_fwe0: Fake Ethernet address: 02:30:1b:00:f3:cc
fwe0: Ethernet address: 02:30:1b:00:f3:cc
fwe0: if_start running deferred for Giant
sbp0: <SBP-2/SCSI over FireWire> on firewire0
fwohci0: Initiate bus reset
fwohci0: node_id=0xc800ffc0, gen=1, CYCLEMASTER mode
firewire0: 1 nodes, maxhop <= 0, cable IRM = 0 (me)
firewire0: bus manager 0 (me)
skc0: <Marvell Gigabit Ethernet> port 0xda00-0xdaff mem 0xfdef8000-0xfdefbfff irq 16 at device 8.0 on pci2
skc0: Marvell Yukon Lite Gigabit Ethernet rev. (0x9)
sk0: <Marvell Semiconductor, Inc. Yukon> on skc0
sk0: Ethernet address: 00:30:1b:b7:f3:68
miibus1: <MII bus> on sk0
e1000phy0: <Marvell 88E1000 Gigabit PHY> on miibus1
e1000phy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseTX-FDX, auto
acpi_tz0: <Thermal Zone> on acpi0
fdc0: <floppy drive controller> port 0x3f0-0x3f5,0x3f7 irq 6 drq 2 on acpi0
fdc0: [FAST]
fd0: <1440-KB 3.5" drive> on fdc0 drive 0
sio0: configured irq 4 not in bitmap of probed irqs 0
sio0: port may not be enabled
sio0: configured irq 4 not in bitmap of probed irqs 0
sio0: port may not be enabled
sio0: <16550A-compatible COM port> port 0x3f8-0x3ff irq 4 flags 0x10 on acpi0
sio0: type 16550A
sio0: [FAST]
ppc0: <Parallel port> port 0x378-0x37f irq 7 on acpi0
ppc0: Generic chipset (NIBBLE-only) in COMPATIBLE mode
ppbus0: <Parallel port bus> on ppc0
plip0: <PLIP network interface> on ppbus0
lpt0: <Printer> on ppbus0
lpt0: Interrupt-driven port
ppi0: <Parallel I/O> on ppbus0
ppc0: [GIANT-LOCKED]
atkbdc0: <Keyboard controller (i8042)> port 0x60,0x64 irq 1 on acpi0
atkbd0: <AT Keyboard> flags 0x1 irq 1 on atkbdc0
kbd0 at atkbd0
atkbd0: [GIANT-LOCKED]
orm0: <ISA Option ROMs> at iomem 0xc0000-0xcefff,0xd0000-0xd3fff,0xd4000-0xd4fff on isa0
sc0: <System console> at flags 0x100 on isa0
sc0: VGA <16 virtual consoles, flags=0x300>
sio1: configured irq 3 not in bitmap of probed irqs 0
sio1: port may not be enabled
vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
Timecounter "TSC" frequency 2009790573 Hz quality 800
Timecounters tick every 1.000 msec
acd0: DVDROM <TSSTcorpDVD-ROM SH-D162C/TS02> at ata1-master UDMA33
ad4: 194481MB <Maxtor 6L200M0 BANC1G10> at ata2-master SATA150
Trying to mount root from ufs:/dev/ad4s1a
WARNING: / was not properly dismounted
sk0: link state changed to UP

--liOOAslEiF7prFVr
Content-Type: text/plain; charset=us-ascii
Content-Disposition: attachment; filename="trillian-pciconf.txt"

hostb0@pci0:0:0:	class=0x060000 card=0xa5511297 chip=0x00e110de rev=0xa1 hdr=0x00
    vendor   = 'NVIDIA Corporation'
    device   = 'nforce3 CPU to PCI Bridge'
    class    = bridge
    subclass = HOST-PCI
isab0@pci0:1:0:	class=0x060100 card=0xa5511297 chip=0x00e010de rev=0xa2 hdr=0x00
    vendor   = 'NVIDIA Corporation'
    device   = 'nForce3 CPU to ISA Bridge'
    class    = bridge
    subclass = PCI-ISA
none0@pci0:1:1:	class=0x0c0500 card=0xa5511297 chip=0x00e410de rev=0xa1 hdr=0x00
    vendor   = 'NVIDIA Corporation'
    device   = 'nForce PCI SMB Controller'
    class    = serial bus
    subclass = SMBus
ohci0@pci0:2:0:	class=0x0c0310 card=0xa5511297 chip=0x00e710de rev=0xa1 hdr=0x00
    vendor   = 'NVIDIA Corporation'
    device   = 'nForce OHCI USB Controller'
    class    = serial bus
    subclass = USB
ohci1@pci0:2:1:	class=0x0c0310 card=0xa5511297 chip=0x00e710de rev=0xa1 hdr=0x00
    vendor   = 'NVIDIA Corporation'
    device   = 'nForce OHCI USB Controller'
    class    = serial bus
    subclass = USB
ehci0@pci0:2:2:	class=0x0c0320 card=0xa5511297 chip=0x00e810de rev=0xa2 hdr=0x00
    vendor   = 'NVIDIA Corporation'
    device   = 'nForce EHCI USB 2.0 Controller'
    class    = serial bus
    subclass = USB
none1@pci0:6:0:	class=0x040100 card=0xa5511297 chip=0x00ea10de rev=0xa1 hdr=0x00
    vendor   = 'NVIDIA Corporation'
    device   = 'nForce AC'97 Audio Codec Interface'
    class    = multimedia
    subclass = audio
atapci0@pci0:8:0:	class=0x01018a card=0xa5511297 chip=0x00e510de rev=0xa2 hdr=0x00
    vendor   = 'NVIDIA Corporation'
    device   = 'nForce ATA Controller'
    class    = mass storage
    subclass = ATA
atapci1@pci0:10:0:	class=0x010185 card=0xa5511297 chip=0x00e310de rev=0xa2 hdr=0x00
    vendor   = 'NVIDIA Corporation'
    device   = 'nforce SATA Controller'
    class    = mass storage
    subclass = ATA
pcib1@pci0:11:0:	class=0x060400 card=0x00000000 chip=0x00e210de rev=0xa2 hdr=0x01
    vendor   = 'NVIDIA Corporation'
    device   = 'nForce3 PCI to AGP Bridge'
    class    = bridge
    subclass = PCI-PCI
pcib2@pci0:14:0:	class=0x060400 card=0x00000000 chip=0x00ed10de rev=0xa2 hdr=0x01
    vendor   = 'NVIDIA Corporation'
    device   = 'nForce PCI to PCI Bridge'
    class    = bridge
    subclass = PCI-PCI
hostb1@pci0:24:0:	class=0x060000 card=0x00000000 chip=0x11001022 rev=0x00 hdr=0x00
    vendor   = 'Advanced Micro Devices (AMD)'
    device   = 'Athlon 64 / Opteron HyperTransport Technology Configuration'
    class    = bridge
    subclass = HOST-PCI
hostb2@pci0:24:1:	class=0x060000 card=0x00000000 chip=0x11011022 rev=0x00 hdr=0x00
    vendor   = 'Advanced Micro Devices (AMD)'
    device   = 'Athlon 64 / Opteron Address Map'
    class    = bridge
    subclass = HOST-PCI
hostb3@pci0:24:2:	class=0x060000 card=0x00000000 chip=0x11021022 rev=0x00 hdr=0x00
    vendor   = 'Advanced Micro Devices (AMD)'
    device   = 'Athlon 64 / Opteron DRAM Controller'
    class    = bridge
    subclass = HOST-PCI
hostb4@pci0:24:3:	class=0x060000 card=0x00000000 chip=0x11031022 rev=0x00 hdr=0x00
    vendor   = 'Advanced Micro Devices (AMD)'
    device   = 'Athlon 64 / Opteron Miscellaneous Control'
    class    = bridge
    subclass = HOST-PCI
vgapci0@pci1:0:0:	class=0x030000 card=0x0000196d chip=0x00f210de rev=0xa2 hdr=0x00
    vendor   = 'NVIDIA Corporation'
    device   = 'GeForce 6600 GT [NV43]'
    class    = display
    subclass = VGA
rl0@pci2:6:0:	class=0x020000 card=0x813910ec chip=0x813910ec rev=0x10 hdr=0x00
    vendor   = 'Realtek Semiconductor'
    device   = 'RT8139 (A/B/C/810x/813x/C+) Fast Ethernet Adapter'
    class    = network
    subclass = ethernet
fwohci0@pci2:7:0:	class=0x0c0010 card=0x30441106 chip=0x30441106 rev=0x80 hdr=0x00
    vendor   = 'VIA Technologies Inc'
    device   = 'VT6306 VIA Fire II IEEE-1394 OHCI Link Layer Controller'
    class    = serial bus
    subclass = FireWire
skc0@pci2:8:0:	class=0x020000 card=0xc2311297 chip=0x432011ab rev=0x13 hdr=0x00
    vendor   = 'Marvell Semiconductor (Was: Galileo Technology Ltd)'
    device   = '88E8001/8003/8010 Gigabit Ethernet Controller with Integrated PHY (copper)'
    class    = network
    subclass = ethernet

--liOOAslEiF7prFVr--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20061002162128.GA1034>