From owner-freebsd-stable@FreeBSD.ORG Tue Jun 21 07:04:13 2005 Return-Path: X-Original-To: freebsd-stable@FreeBSD.org Delivered-To: freebsd-stable@FreeBSD.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id D756316A41C for ; Tue, 21 Jun 2005 07:04:13 +0000 (GMT) (envelope-from tataz@tataz.chchile.org) Received: from postfix3-1.free.fr (postfix3-1.free.fr [213.228.0.44]) by mx1.FreeBSD.org (Postfix) with ESMTP id 6931A43D4C for ; Tue, 21 Jun 2005 07:04:13 +0000 (GMT) (envelope-from tataz@tataz.chchile.org) Received: from tatooine.tataz.chchile.org (vol75-8-82-233-239-98.fbx.proxad.net [82.233.239.98]) by postfix3-1.free.fr (Postfix) with ESMTP id 69F5D1734B8 for ; Tue, 21 Jun 2005 09:04:12 +0200 (CEST) Received: by tatooine.tataz.chchile.org (Postfix, from userid 1000) id 4EBDB405B; Tue, 21 Jun 2005 09:04:27 +0200 (CEST) Date: Tue, 21 Jun 2005 09:04:27 +0200 From: Jeremie Le Hen To: freebsd-stable@FreeBSD.org Message-ID: <20050621070427.GA738@obiwan.tataz.chchile.org> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit User-Agent: Mutt/1.5.9i Cc: jeremie@le-hen.org Subject: panic in RELENG_5 UMA X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 21 Jun 2005 07:04:14 -0000 Hi list, I caught a panic this night on my RELENG_5. The kernel was compiled on 2005/05/21. Please, feel free to ask for further informations (and include me explicitely in the recipients list since I'm not subscribed to this list). kgdb stacktrace: %%% #22 0xc0566d1d in panic ( fmt=0xc0728d5d "Duplicate free of item %p from zone %p(%s)\n") at ../../../kern/kern_shutdown.c:550 td = (struct thread *) 0xc205ec00 bootopt = 256 newpanic = 1 ap = 0xd6d3f968 "" buf = "Duplicate free of item 0xc1be8800 from zone 0xc1045ae0(Mbuf)\n", '\0' #23 0xc069e280 in uma_dbg_free (zone=0xc1045ae0, slab=0xc1be8fa8, item=0xc1be8800) at ../../../vm/uma_dbg.c:301 keg = 0xc101f3c0 slabref = 0x0 freei = 8 #24 0xc069cc39 in uma_zfree_arg (zone=0xc1045ae0, item=0xc1be8800, udata=0x0) at ../../../vm/uma_core.c:2273 keg = 0xc101f3c0 cache = 0xc1045b18 bucket = 0xc1be2000 bflags = 0 cpu = 0 skip = SKIP_DTOR #25 0xc05a0a0b in m_freem (mb=0x0) at uma.h:304 No locals. #26 0xc05ee0d5 in arpresolve (ifp=0xc1a5b000, rt0=0xc1d44000, m=0xc1be7200, dst=0xd6d3fa94, desten=0xd6d3fa2c "/æ]ÀäµwÀ") at ../../../netinet/if_ether.c:442 la = (struct llinfo_arp *) 0xc1a75a00 sdl = (struct sockaddr_dl *) 0xc2128910 error = -1038972656 rt = (struct rtentry *) 0xc1d44000 #27 0xc05dac65 in ether_output (ifp=0xc1a5b000, m=0xc1be7200, dst=0xd6d3fa94, rt0=0x0) at ../../../net/if_ethersubr.c:165 type = -10541 error = 50 hdrcmplt = 0 esrc = "K\000\000\000\214z" edst = "/æ]Àäµ" eh = (struct ether_header *) 0x32 loop_copy = 0 #28 0xc060150c in ip_output (m=0xc1be7200, opt=0xc1be7240, ro=0xd6d3fa90, flags=0, imo=0x0, inp=0xc40f7a8c) at ../../../netinet/ip_output.c:770 ip = (struct ip *) 0xc1be7240 ifp = (struct ifnet *) 0xc1a5b000 m0 = (struct mbuf *) 0xc1be7240 hlen = 20 len = 1 error = 0 dst = (struct sockaddr_in *) 0xd6d3fa94 ia = (struct in_ifaddr *) 0xc1c2b300 isbroadcast = 0 sw_csum = 1 iproute = {ro_rt = 0xc1d44000, ro_dst = {sa_len = 16 '\020', sa_family = 2 '\002', sa_data = "\000\000Àš\001²\000\000\000\000\000\000\000"}} odst = {s_addr = 1} fwd_tag = (struct m_tag *) 0x0 __func__ = "ip_output" #29 0xc060aba1 in tcp_output (tp=0xc1d75534) at ../../../netinet/tcp_output.c:1119 so = (struct socket *) 0xc2afe000 len = 144 recwin = 66608 sendwin = -1044483500 flags = 24 error = -1044483500 m = (struct mbuf *) 0xc1be7200 ip = (struct ip *) 0xc1be7240 th = (struct tcphdr *) 0xc1be7254 opt = "\001\001\b\n\002ä>m\003õJÁ+\001\000\000žà¯ÂÐà¯Â\000à¯Â\204ûÓÖ\203 ~ZÀÐà¯Â" ipoptlen = 0 optlen = 12 hdrlen = 52 idle = 1 sendalot = 0 i = 299 sack_rxmit = 0 sack_bytes_rxmt = 0 p = (struct sackhole *) 0x0 tao = {tao_cc = 767, tao_ccsent = 3228670914, tao_mssopt = 64356} __func__ = "tcp_output" #30 0xc061167c in tcp_usr_send (so=0xc2afe000, flags=0, m=0xc1be7600, nam=0x0, control=0x0, td=0xc205ec00) at ../../../netinet/tcp_usrreq.c:699 error = 0 inp = (struct inpcb *) 0xc40f7a8c tp = (struct tcpcb *) 0xc1d75534 #31 0xc05a41e8 in sosend (so=0xc2afe000, addr=0x0, uio=0xd6d3fc70, top=0xc1be7600, control=0x0, flags=0, td=0xc205ec00) at ../../../kern/uipc_socket.c:835 mp = (struct mbuf **) 0xc1be7600 m = (struct mbuf *) 0xc1be7600 space = 33160 len = 144 resid = 0 clen = -1044482560 error = 0 dontroute = 0 atomic = 0 #32 0xc05928bf in soo_write (fp=0x0, uio=0xd6d3fc70, active_cred=0xc4211e80, flags=0, td=0xc205ec00) at ../../../kern/sys_socket.c:118 so = (struct socket *) 0xc2afe000 error = 144 #33 0xc058bc0b in dofilewrite (td=0xc205ec00, fp=0xc2aff83c, fd=0, buf=0x0, nbyte=3228877920, offset=Unhandled dwarf expression opcode 0x93 ) at file.h:245 auio = {uio_iov = 0xd6d3fc68, uio_iovcnt = 1, uio_offset = 143, uio_resid = 0, uio_segflg = UIO_USERSPACE, uio_rw = UIO_WRITE, uio_td = 0xc205ec00} aiov = {iov_base = 0x807d090, iov_len = 0} cnt = 144 error = -1066089376 ktruio = (struct uio *) 0x0 #34 0xc058ba74 in write (td=0xc205ec00, uap=0xd6d3fd04) at ../../../kern/sys_generic.c:300 fp = (struct file *) 0xc2aff83c error = 0 #35 0xc06d2a12 in syscall (frame= {tf_fs = -1078001617, tf_es = 47, tf_ds = -1078001617, tf_edi = 134671528, tf_esi = 144, tf_ebp = -1077943016, tf_isp = -690750108, tf_ebx = 671922152, tf _edx = 134671528, tf_ecx = 4, tf_eax = 4, tf_trapno = 12, tf_err = 2, tf_eip = 6 73631499, tf_cs = 31, tf_eflags = 518, tf_esp = -1077943044, tf_ss = 47}) at ../../../i386/i386/trap.c:1009 params = 0xbfbfe500
callp = (struct sysent *) 0xc0744960 td = (struct thread *) 0xc205ec00 p = (struct proc *) 0xc2b04a98 orig_tf_eflags = 518 sticks = 113 error = 0 narg = 3 args = {4, 134729728, 144, 0, -1077942928, 0, 113, -1028633960} code = 4 #36 0xc06c46bf in Xint0x80_syscall () at ../../../i386/i386/exception.s:201 %%% Regards, -- Jeremie Le Hen < jeremie at le-hen dot org >< ttz at chchile dot org >