Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 2 Oct 2006 23:35:34 -0700
From:      Jos Backus <jos@catnook.com>
To:        freebsd-current@freebsd.org
Subject:   Re: panic: Duplicate free of item 0xffffff002ef51d00 from zone 0xffffff003ffdc840(mbuf_packet)
Message-ID:  <20061003063556.GA23958@lizzy.catnook.local>
In-Reply-To: <20061002162128.GA1034@zaphod.nitro.dk>
References:  <20061002162128.GA1034@zaphod.nitro.dk>

next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, Oct 02, 2006 at 06:21:29PM +0200, Simon L. Nielsen wrote:
> Hey,
> 
> On an amd64 -CURRENT from yesterday I get this panic (now twice)
> shortly after the system has come up in multi user.  It seems related
> to sk(4) which is the active NIC in the system, but it might be the
> problem is elsewhere.
 
Well, I am/was seeing what looks like the same panic but I don't have any
sk(4) hardware (I have em(4) instead). Mine is:

    Slab at 0xc4d1efa8, freei 8 = 0.
    panic: Duplicate free of item 0xc4d1e800 from zone 0xc0c45080(mbuf_packet)

I posted about it previously here: http://docs.freebsd.org/cgi/getmsg.cgi?fetch=60704+0+archive/2006/freebsd-current/20060917.freebsd-current

Jos

> It's currently running OK again on an kernel from Aug 19.  dmesg from
> this old kernel attached.  I can generate dmesg from the new kernel if
> needed.
> 
> Anybody has any ideas of what's going wrong?  I can test patches
> etc. if needed.
> 
> gdb says:
> 
> Unread portion of the kernel message buffer:
> Slab at 0xffffff002ef51f50, freei 13 = 0.
> panic: Duplicate free of item 0xffffff002ef51d00 from zone 0xffffff003ffdc840(mbuf_packet)
> 
> cpuid = 0
> KDB: enter: panic
> Physical memory: 1012 MB
> Dumping 203 MB: 188 172 156 140 124 108 92 76 60 44 28 12
> 
> #0  doadump () at pcpu.h:172
> 172     pcpu.h: No such file or directory.
>         in pcpu.h
> (kgdb) bt
> #0  doadump () at pcpu.h:172
> #1  0xffffffff801af2d4 in db_fncall (dummy1=0, dummy2=0, dummy3=0, dummy4=0x0)
>     at /usr/src/sys/ddb/db_command.c:481
> #2  0xffffffff801af689 in db_command_loop () at /usr/src/sys/ddb/db_command.c:396
> #3  0xffffffff801b1553 in db_trap (type=-1603201104, code=0) at /usr/src/sys/ddb/db_main.c:221
> #4  0xffffffff80450ac8 in kdb_trap (type=3, code=0, tf=0xffffffffa0711930)
>     at /usr/src/sys/kern/subr_kdb.c:502
> #5  0xffffffff806352c2 in trap (frame=
>       {tf_rdi = 0, tf_rsi = -2132733952, tf_rdx = 1, tf_rcx = 1058292, tf_r8 = 1048064, tf_r9 = 10, tf_rax = 18, tf_rbx = -2139976232, tf_rbp = -1603200528, tf_r10 = -1603200768, tf_r11 = 10, tf_r12 = 0, tf_r13 = 256, tf_r14 = -1098480768320, tf_r15 = -1098438031296, tf_trapno = 3, tf_addr = 0, tf_flags = 256, tf_err = 0, tf_rip = -2142960273, tf_cs = 8, tf_rflags = 646, tf_rsp = -1603200528, tf_ss = 16})
>     at /usr/src/sys/amd64/amd64/trap.c:471
> #6  0xffffffff8061fb4b in calltrap () at /usr/src/sys/amd64/amd64/exception.S:168
> #7  0xffffffff8045056f in kdb_enter (msg=0x0) at cpufunc.h:63
> #8  0xffffffff8042b659 in panic (fmt=0xffffffff80728dd8 "Duplicate free of item %p from zone %p(%s)\n")
>     at /usr/src/sys/kern/kern_shutdown.c:549
> #9  0xffffffff805b5f08 in uma_dbg_free (zone=0xffffff003ffdc840, slab=0xffffff002ef51f50, 
>     item=0xffffff002ef51d00) at /usr/src/sys/vm/uma_dbg.c:302
> #10 0xffffffff805b3dc0 in uma_zfree_arg (zone=0xffffff003ffdc840, item=0xffffff002ef51d00, udata=0x0)
>     at /usr/src/sys/vm/uma_core.c:2269
> #11 0xffffffff804785b8 in m_freem (mb=0x12) at mbuf.h:445
> #12 0xffffffff80359d53 in sk_txeof (sc_if=0xffffffff80e56000) at /usr/src/sys/dev/sk/if_sk.c:3233
> #13 0xffffffff8035bc48 in sk_intr (xsc=0x0) at /usr/src/sys/dev/sk/if_sk.c:3459
> #14 0xffffffff8041364e in ithread_loop (arg=0xffffff0000e8b020) at /usr/src/sys/kern/kern_intr.c:662
> #15 0xffffffff8041229a in fork_exit (callout=0xffffffff80413550 <ithread_loop>, arg=0xffffff0000e8b020, 
>     frame=0xffffffffa0711c90) at /usr/src/sys/kern/kern_fork.c:818
> #16 0xffffffff8061feae in fork_trampoline () at /usr/src/sys/amd64/amd64/exception.S:394
> #17 0x0000000000000000 in ?? ()
> #18 0x0000000000000000 in ?? ()
> 
> -- 
> Simon L. Nielsen

> Copyright (c) 1992-2006 The FreeBSD Project.
> Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
> 	The Regents of the University of California. All rights reserved.
> FreeBSD 7.0-CURRENT #1: Sat Aug 19 14:56:13 UTC 2006
>     root@trillian.nitro.dk:/usr/obj/usr/src/sys/GENERIC
> WARNING: WITNESS option enabled, expect reduced performance.
> Timecounter "i8254" frequency 1193182 Hz quality 0
> CPU: AMD Athlon(tm) 64 Processor 3200+ (2009.79-MHz K8-class CPU)
>   Origin = "AuthenticAMD"  Id = 0x20ff2  Stepping = 2
>   Features=0x78bfbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,MMX,FXSR,SSE,SSE2>
>   Features2=0x1<SSE3>
>   AMD Features=0xe2500800<SYSCALL,NX,MMX+,FFXSR,LM,3DNow!+,3DNow!>
>   AMD Features2=0x1<LAHF>
> usable memory  = 1061457920 (1012 MB)
> avail memory = 1023041536 (975 MB)
> ACPI APIC Table: <XPC    AWRDACPI>
> ioapic0 <Version 1.1> irqs 0-23 on motherboard
> kbd1 at kbdmux0
> ath_hal: 0.9.17.2 (AR5210, AR5211, AR5212, RF5111, RF5112, RF2413, RF5413)
> acpi0: <XPC AWRDACPI> on motherboard
> acpi0: Power Button (fixed)
> Timecounter "ACPI-fast" frequency 3579545 Hz quality 1000
> acpi_timer0: <24-bit timer at 3.579545MHz> port 0x4008-0x400b on acpi0
> cpu0: <ACPI CPU> on acpi0
> acpi_button0: <Power Button> on acpi0
> pcib0: <ACPI Host-PCI bridge> port 0xcf8-0xcff,0xcf0-0xcf3 on acpi0
> pci0: <ACPI PCI bus> on pcib0
> agp0: <NVIDIA nForce3-250 AGP Controller> on hostb0
> isab0: <PCI-ISA bridge> at device 1.0 on pci0
> isa0: <ISA bus> on isab0
> pci0: <serial bus, SMBus> at device 1.1 (no driver attached)
> ohci0: <OHCI (generic) USB controller> mem 0xfdfff000-0xfdffffff irq 21 at device 2.0 on pci0
> ohci0: [GIANT-LOCKED]
> usb0: OHCI version 1.0, legacy support
> usb0: SMM does not respond, resetting
> usb0: <OHCI (generic) USB controller> on ohci0
> usb0: USB revision 1.0
> uhub0: <nVidia OHCI root hub, class 9/0, rev 1.00/1.00, addr 1> on usb0
> uhub0: 4 ports with 4 removable, self powered
> ohci1: <OHCI (generic) USB controller> mem 0xfdffe000-0xfdffefff irq 22 at device 2.1 on pci0
> ohci1: [GIANT-LOCKED]
> usb1: OHCI version 1.0, legacy support
> usb1: SMM does not respond, resetting
> usb1: <OHCI (generic) USB controller> on ohci1
> usb1: USB revision 1.0
> uhub1: <nVidia OHCI root hub, class 9/0, rev 1.00/1.00, addr 1> on usb1
> uhub1: 4 ports with 4 removable, self powered
> ehci0: <NVIDIA nForce3 250 USB 2.0 controller> mem 0xfdffd000-0xfdffd0ff irq 23 at device 2.2 on pci0
> ehci0: [GIANT-LOCKED]
> usb2: EHCI version 1.0
> usb2: companion controllers, 4 ports each: usb0 usb1
> usb2: <NVIDIA nForce3 250 USB 2.0 controller> on ehci0
> usb2: USB revision 2.0
> uhub2: <nVidia EHCI root hub, class 9/0, rev 2.00/1.00, addr 1> on usb2
> uhub2: 8 ports with 8 removable, self powered
> pci0: <multimedia, audio> at device 6.0 (no driver attached)
> atapci0: <nVidia nForce3 Pro UDMA133 controller> port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xfa00-0xfa0f at device 8.0 on pci0
> ata0: <ATA channel 0> on atapci0
> ata1: <ATA channel 1> on atapci0
> atapci1: <nVidia nForce3 Pro SATA150 controller> port 0x9f0-0x9f7,0xbf0-0xbf3,0x970-0x977,0xb70-0xb73,0xf500-0xf50f,0xf400-0xf47f irq 22 at device 10.0 on pci0
> ata2: <ATA channel 0> on atapci1
> ata3: <ATA channel 1> on atapci1
> pcib1: <ACPI PCI-PCI bridge> at device 11.0 on pci0
> pci1: <ACPI PCI bus> on pcib1
> vgapci0: <VGA-compatible display> mem 0xfa000000-0xfaffffff,0xe0000000-0xefffffff,0xfb000000-0xfbffffff irq 16 at device 0.0 on pci1
> pcib2: <ACPI PCI-PCI bridge> at device 14.0 on pci0
> pci2: <ACPI PCI bus> on pcib2
> rl0: <RealTek 8139 10/100BaseTX> port 0xdc00-0xdcff mem 0xfdeff000-0xfdeff0ff irq 18 at device 6.0 on pci2
> miibus0: <MII bus> on rl0
> rlphy0: <RealTek internal media interface> on miibus0
> rlphy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
> rl0: Ethernet address: 00:48:54:d0:e4:8c
> fwohci0: <VIA Fire II (VT6306)> port 0xdf00-0xdf7f mem 0xfdefe000-0xfdefe7ff irq 19 at device 7.0 on pci2
> fwohci0: OHCI version 1.0 (ROM=1)
> fwohci0: No. of Isochronous channels is 4.
> fwohci0: EUI64 00:30:1b:b7:00:00:f3:cc
> fwohci0: Phy 1394a available S400, 2 ports.
> fwohci0: Link S400, max_rec 2048 bytes.
> firewire0: <IEEE1394(FireWire) bus> on fwohci0
> fwe0: <Ethernet over FireWire> on firewire0
> if_fwe0: Fake Ethernet address: 02:30:1b:00:f3:cc
> fwe0: Ethernet address: 02:30:1b:00:f3:cc
> fwe0: if_start running deferred for Giant
> sbp0: <SBP-2/SCSI over FireWire> on firewire0
> fwohci0: Initiate bus reset
> fwohci0: node_id=0xc800ffc0, gen=1, CYCLEMASTER mode
> firewire0: 1 nodes, maxhop <= 0, cable IRM = 0 (me)
> firewire0: bus manager 0 (me)
> skc0: <Marvell Gigabit Ethernet> port 0xda00-0xdaff mem 0xfdef8000-0xfdefbfff irq 16 at device 8.0 on pci2
> skc0: Marvell Yukon Lite Gigabit Ethernet rev. (0x9)
> sk0: <Marvell Semiconductor, Inc. Yukon> on skc0
> sk0: Ethernet address: 00:30:1b:b7:f3:68
> miibus1: <MII bus> on sk0
> e1000phy0: <Marvell 88E1000 Gigabit PHY> on miibus1
> e1000phy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseTX-FDX, auto
> acpi_tz0: <Thermal Zone> on acpi0
> fdc0: <floppy drive controller> port 0x3f0-0x3f5,0x3f7 irq 6 drq 2 on acpi0
> fdc0: [FAST]
> fd0: <1440-KB 3.5" drive> on fdc0 drive 0
> sio0: configured irq 4 not in bitmap of probed irqs 0
> sio0: port may not be enabled
> sio0: configured irq 4 not in bitmap of probed irqs 0
> sio0: port may not be enabled
> sio0: <16550A-compatible COM port> port 0x3f8-0x3ff irq 4 flags 0x10 on acpi0
> sio0: type 16550A
> sio0: [FAST]
> ppc0: <Parallel port> port 0x378-0x37f irq 7 on acpi0
> ppc0: Generic chipset (NIBBLE-only) in COMPATIBLE mode
> ppbus0: <Parallel port bus> on ppc0
> plip0: <PLIP network interface> on ppbus0
> lpt0: <Printer> on ppbus0
> lpt0: Interrupt-driven port
> ppi0: <Parallel I/O> on ppbus0
> ppc0: [GIANT-LOCKED]
> atkbdc0: <Keyboard controller (i8042)> port 0x60,0x64 irq 1 on acpi0
> atkbd0: <AT Keyboard> flags 0x1 irq 1 on atkbdc0
> kbd0 at atkbd0
> atkbd0: [GIANT-LOCKED]
> orm0: <ISA Option ROMs> at iomem 0xc0000-0xcefff,0xd0000-0xd3fff,0xd4000-0xd4fff on isa0
> sc0: <System console> at flags 0x100 on isa0
> sc0: VGA <16 virtual consoles, flags=0x300>
> sio1: configured irq 3 not in bitmap of probed irqs 0
> sio1: port may not be enabled
> vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
> Timecounter "TSC" frequency 2009790573 Hz quality 800
> Timecounters tick every 1.000 msec
> acd0: DVDROM <TSSTcorpDVD-ROM SH-D162C/TS02> at ata1-master UDMA33
> ad4: 194481MB <Maxtor 6L200M0 BANC1G10> at ata2-master SATA150
> Trying to mount root from ufs:/dev/ad4s1a
> WARNING: / was not properly dismounted
> sk0: link state changed to UP

> hostb0@pci0:0:0:	class=0x060000 card=0xa5511297 chip=0x00e110de rev=0xa1 hdr=0x00
>     vendor   = 'NVIDIA Corporation'
>     device   = 'nforce3 CPU to PCI Bridge'
>     class    = bridge
>     subclass = HOST-PCI
> isab0@pci0:1:0:	class=0x060100 card=0xa5511297 chip=0x00e010de rev=0xa2 hdr=0x00
>     vendor   = 'NVIDIA Corporation'
>     device   = 'nForce3 CPU to ISA Bridge'
>     class    = bridge
>     subclass = PCI-ISA
> none0@pci0:1:1:	class=0x0c0500 card=0xa5511297 chip=0x00e410de rev=0xa1 hdr=0x00
>     vendor   = 'NVIDIA Corporation'
>     device   = 'nForce PCI SMB Controller'
>     class    = serial bus
>     subclass = SMBus
> ohci0@pci0:2:0:	class=0x0c0310 card=0xa5511297 chip=0x00e710de rev=0xa1 hdr=0x00
>     vendor   = 'NVIDIA Corporation'
>     device   = 'nForce OHCI USB Controller'
>     class    = serial bus
>     subclass = USB
> ohci1@pci0:2:1:	class=0x0c0310 card=0xa5511297 chip=0x00e710de rev=0xa1 hdr=0x00
>     vendor   = 'NVIDIA Corporation'
>     device   = 'nForce OHCI USB Controller'
>     class    = serial bus
>     subclass = USB
> ehci0@pci0:2:2:	class=0x0c0320 card=0xa5511297 chip=0x00e810de rev=0xa2 hdr=0x00
>     vendor   = 'NVIDIA Corporation'
>     device   = 'nForce EHCI USB 2.0 Controller'
>     class    = serial bus
>     subclass = USB
> none1@pci0:6:0:	class=0x040100 card=0xa5511297 chip=0x00ea10de rev=0xa1 hdr=0x00
>     vendor   = 'NVIDIA Corporation'
>     device   = 'nForce AC'97 Audio Codec Interface'
>     class    = multimedia
>     subclass = audio
> atapci0@pci0:8:0:	class=0x01018a card=0xa5511297 chip=0x00e510de rev=0xa2 hdr=0x00
>     vendor   = 'NVIDIA Corporation'
>     device   = 'nForce ATA Controller'
>     class    = mass storage
>     subclass = ATA
> atapci1@pci0:10:0:	class=0x010185 card=0xa5511297 chip=0x00e310de rev=0xa2 hdr=0x00
>     vendor   = 'NVIDIA Corporation'
>     device   = 'nforce SATA Controller'
>     class    = mass storage
>     subclass = ATA
> pcib1@pci0:11:0:	class=0x060400 card=0x00000000 chip=0x00e210de rev=0xa2 hdr=0x01
>     vendor   = 'NVIDIA Corporation'
>     device   = 'nForce3 PCI to AGP Bridge'
>     class    = bridge
>     subclass = PCI-PCI
> pcib2@pci0:14:0:	class=0x060400 card=0x00000000 chip=0x00ed10de rev=0xa2 hdr=0x01
>     vendor   = 'NVIDIA Corporation'
>     device   = 'nForce PCI to PCI Bridge'
>     class    = bridge
>     subclass = PCI-PCI
> hostb1@pci0:24:0:	class=0x060000 card=0x00000000 chip=0x11001022 rev=0x00 hdr=0x00
>     vendor   = 'Advanced Micro Devices (AMD)'
>     device   = 'Athlon 64 / Opteron HyperTransport Technology Configuration'
>     class    = bridge
>     subclass = HOST-PCI
> hostb2@pci0:24:1:	class=0x060000 card=0x00000000 chip=0x11011022 rev=0x00 hdr=0x00
>     vendor   = 'Advanced Micro Devices (AMD)'
>     device   = 'Athlon 64 / Opteron Address Map'
>     class    = bridge
>     subclass = HOST-PCI
> hostb3@pci0:24:2:	class=0x060000 card=0x00000000 chip=0x11021022 rev=0x00 hdr=0x00
>     vendor   = 'Advanced Micro Devices (AMD)'
>     device   = 'Athlon 64 / Opteron DRAM Controller'
>     class    = bridge
>     subclass = HOST-PCI
> hostb4@pci0:24:3:	class=0x060000 card=0x00000000 chip=0x11031022 rev=0x00 hdr=0x00
>     vendor   = 'Advanced Micro Devices (AMD)'
>     device   = 'Athlon 64 / Opteron Miscellaneous Control'
>     class    = bridge
>     subclass = HOST-PCI
> vgapci0@pci1:0:0:	class=0x030000 card=0x0000196d chip=0x00f210de rev=0xa2 hdr=0x00
>     vendor   = 'NVIDIA Corporation'
>     device   = 'GeForce 6600 GT [NV43]'
>     class    = display
>     subclass = VGA
> rl0@pci2:6:0:	class=0x020000 card=0x813910ec chip=0x813910ec rev=0x10 hdr=0x00
>     vendor   = 'Realtek Semiconductor'
>     device   = 'RT8139 (A/B/C/810x/813x/C+) Fast Ethernet Adapter'
>     class    = network
>     subclass = ethernet
> fwohci0@pci2:7:0:	class=0x0c0010 card=0x30441106 chip=0x30441106 rev=0x80 hdr=0x00
>     vendor   = 'VIA Technologies Inc'
>     device   = 'VT6306 VIA Fire II IEEE-1394 OHCI Link Layer Controller'
>     class    = serial bus
>     subclass = FireWire
> skc0@pci2:8:0:	class=0x020000 card=0xc2311297 chip=0x432011ab rev=0x13 hdr=0x00
>     vendor   = 'Marvell Semiconductor (Was: Galileo Technology Ltd)'
>     device   = '88E8001/8003/8010 Gigabit Ethernet Controller with Integrated PHY (copper)'
>     class    = network
>     subclass = ethernet

> _______________________________________________
> freebsd-current@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-current
> To unsubscribe, send any mail to "freebsd-current-unsubscribe@freebsd.org"


-- 
Jos Backus
jos at catnook.com



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20061003063556.GA23958>