Date: Tue, 06 Feb 2001 18:02:06 -0800 (PST) From: John Polstra <jdp@polstra.com> To: stable@freebsd.org Subject: panic: free: multiple frees (from allocbuf) Message-ID: <XFMail.010206180206.jdp@polstra.com>
next in thread | raw e-mail | index | archive | help
I got this panic today on a 4.2-stable system from 29 January when I
tried to reboot it with "shutdown -r now":
This GDB was configured as "i386-unknown-freebsd"...
IdlePTD 3993600
initial pcb at 32bda0
panicstr: free: multiple frees
panic messages:
---
panic: free: multiple frees
Uptime: 18m24s
dumping to dev #da/0x20001, offset 541106
dump 128 127 126 125 124 123 122 121 120 119 118 117 116 115 114 113 112 111 110 109
108 107 106 105 104 103 102 101 100 99 98
97 96 95 94 93 92 91 90 89 88 87 86 85 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70
69 68 67 66 65 64 63 62 61 60 59 58 57 56 5
5 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28
27 26 25 24 23 22 21 20 19 18 17 16 15 14 13
12 11 10 9 8 7 6 5 4 3 2 1
---
#0 dumpsys () at ../../kern/kern_shutdown.c:469
469 if (dumping++) {
(kgdb) where
#0 dumpsys () at ../../kern/kern_shutdown.c:469
#1 0xc016d573 in boot (howto=256) at ../../kern/kern_shutdown.c:309
#2 0xc016d909 in panic (fmt=0xc02b317f "free: multiple frees")
at ../../kern/kern_shutdown.c:556
#3 0xc0169223 in free (addr=0xc20cec00, type=0xc02ef040)
at ../../kern/kern_malloc.c:371
#4 0xc019366d in allocbuf (bp=0xc4862958, size=0) at ../../kern/vfs_bio.c:2334
#5 0xc0191e26 in brelse (bp=0xc4862958) at ../../kern/vfs_bio.c:1005
#6 0xc0198deb in vinvalbuf (vp=0xca7e1980, flags=1, cred=0x0, p=0xc9debe00,
slpflag=0, slptimeo=0) at ../../kern/vfs_subr.c:719
#7 0xc0199dff in vclean (vp=0xca7e1980, flags=8, p=0xc9debe00)
at ../../kern/vfs_subr.c:1667
#8 0xc019a02b in vgonel (vp=0xca7e1980, p=0xc9debe00)
at ../../kern/vfs_subr.c:1847
#9 0xc0199d43 in vflush (mp=0xc1fbc000, skipvp=0x0, flags=2)
at ../../kern/vfs_subr.c:1605
#10 0xc023fdad in ffs_flushfiles (mp=0xc1fbc000, flags=2, p=0xc9debe00)
at ../../ufs/ffs/ffs_vfsops.c:878
#11 0xc02395af in softdep_flushfiles (oldmnt=0xc1fbc000, flags=2, p=0xc9debe00)
at ../../ufs/ffs/ffs_softdep.c:708
#12 0xc023fc79 in ffs_unmount (mp=0xc1fbc000, mntflags=524288, p=0xc9debe00)
at ../../ufs/ffs/ffs_vfsops.c:813
#13 0xc019ba36 in dounmount (mp=0xc1fbc000, flags=524288, p=0xc9debe00)
at ../../kern/vfs_syscalls.c:484
#14 0xc019a522 in vfs_unmountall () at ../../kern/vfs_subr.c:2216
#15 0xc016d50f in boot (howto=0) at ../../kern/kern_shutdown.c:295
#16 0xc016d134 in reboot (p=0xc9debe00, uap=0xc9df1f80)
at ../../kern/kern_shutdown.c:147
#17 0xc0291a75 in syscall2 (frame={tf_fs = 47, tf_es = 47, tf_ds = 47,
tf_edi = -1077936612, tf_esi = -1077936624, tf_ebp = -1077936836,
tf_isp = -908124204, tf_ebx = -1077936732, tf_edx = -1, tf_ecx = 4,
tf_eax = 55, tf_trapno = 7, tf_err = 2, tf_eip = 134536656, tf_cs = 31,
tf_eflags = 643, tf_esp = -1077937056, tf_ss = 47})
at ../../i386/i386/trap.c:1150
#18 0xc0285b15 in Xint0x80_syscall ()
#19 0x8048712 in ?? ()
#20 0x804849c in ?? ()
#21 0x8048135 in ?? ()
I should mention that I had been testing a custom netgraph module
prior to that. The module had leaked some mbufs, but otherwise I
don't think it did anything nasty. It seems unlikely that it would be
related to the panic above.
I have a -g kernel and a core dump if anybody wants to look at this.
The dmesg output is below.
John
--
John Polstra jdp@polstra.com
John D. Polstra & Co., Inc. Seattle, Washington USA
"Disappointment is a good sign of basic intelligence." -- Chögyam Trungpa
Copyright (c) 1992-2001 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
The Regents of the University of California. All rights reserved.
FreeBSD 4.2-STABLE #2: Tue Feb 6 16:56:52 PST 2001
root@vashon.polstra.com:/c/src/sys/compile/VASHON
Timecounter "i8254" frequency 1193043 Hz
Timecounter "TSC" frequency 400862395 Hz
CPU: Pentium II/Pentium II Xeon/Celeron (400.86-MHz 686-class CPU)
Origin = "GenuineIntel" Id = 0x651 Stepping = 1
Features=0x183fbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,
PSE36,MMX,FXSR>
real memory = 134217728 (131072K bytes)
sio1: gdb debugging port
avail memory = 126877696 (123904K bytes)
Preloaded elf kernel "kernel" at 0xc03b0000.
Pentium Pro MTRR support enabled
npx0: <math processor> on motherboard
npx0: INT 16 interface
pcib0: <Intel 82443BX (440 BX) host to PCI bridge> on motherboard
pci0: <PCI bus> on pcib0
pcib1: <Intel 82443BX (440 BX) PCI-PCI (AGP) bridge> at device 1.0 on pci0
pci1: <PCI bus> on pcib1
pci1: <Matrox MGA Millennium II 2164WA-B AG graphics accelerator> at 0.0 irq 0
isab0: <Intel 82371AB PCI to ISA bridge> at device 7.0 on pci0
isa0: <ISA bus> on isab0
pci0: <Intel PIIX4 ATA controller> at 7.1
pci0: <Intel 82371AB/EB (PIIX4) USB controller> at 7.2
chip1: <Intel 82371AB Power management controller> port 0x440-0x44f at device 7.3 on
pci0
pcib2: <DEC 21152 PCI-PCI bridge> at device 16.0 on pci0
pci2: <PCI bus> on pcib2
fxp0: <Intel Pro 10/100B/100+ Ethernet> port 0xef40-0xef5f mem
0xfea00000-0xfeafffff,0xfd0ff000-0xfd0fffff irq 11 at device 17.
0 on pci0
fxp0: Ethernet address 00:e0:81:10:09:c2
ahc0: <Adaptec aic7895 Ultra SCSI adapter> port 0xe400-0xe4ff mem
0xfebfe000-0xfebfefff irq 10 at device 18.0 on pci0
aic7895C: Wide Channel A, SCSI Id=7, 32/255 SCBs
ahc1: <Adaptec aic7895 Ultra SCSI adapter> port 0xe800-0xe8ff mem
0xfebff000-0xfebfffff irq 10 at device 18.1 on pci0
aic7895C: Wide Channel B, SCSI Id=7, 32/255 SCBs
fxp1: <Intel Pro 10/100B/100+ Ethernet> port 0xef80-0xef9f mem
0xfe800000-0xfe8fffff,0xfd0fe000-0xfd0fefff irq 9 at device 20.0
on pci0
fxp1: Ethernet address 00:a0:c9:b0:13:df
atkbdc0: <Keyboard controller (i8042)> at port 0x60,0x64 on isa0
atkbd0: <AT Keyboard> flags 0x1 irq 1 on atkbdc0
psm0: <PS/2 Mouse> irq 12 on atkbdc0
psm0: model Generic PS/2 mouse, device ID 0
vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
sc0: <System console> at flags 0x100 on isa0
sc0: VGA <16 virtual consoles, flags=0x300>
fdc0: <NEC 72065B or clone> at port 0x3f0-0x3f5,0x3f7 irq 6 drq 2 on isa0
fdc0: FIFO enabled, 8 bytes threshold
fd0: <1440-KB 3.5" drive> on fdc0 drive 0
sio0 at port 0x3f8-0x3ff irq 4 flags 0x10 on isa0
sio0: type 16550A
sio1 at port 0x2f8-0x2ff irq 3 flags 0x80 on isa0
sio1: type 16550A
ppc0: <Parallel port> at port 0x378-0x37f irq 7 on isa0
ppc0: Generic chipset (EPP/NIBBLE) in COMPATIBLE mode
plip0: <PLIP network interface> on ppbus0
sbc0: <Creative ViBRA16X> at port 0x220-0x22f,0x330-0x331,0x388-0x38b irq 5 drq 1,3
on isa0
pcm1: <SB DSP 4.16 (ViBRA16X)> on sbc0
IPsec: Initialized Security Association Processing.
Waiting 2 seconds for SCSI devices to settle
Mounting root from ufs:/dev/da0s1a
da1 at ahc0 bus 0 target 1 lun 0
da1: <IBM DNES-309170W SA30> Fixed Direct Access SCSI-3 device
da1: 40.000MB/s transfers (20.000MHz, offset 8, 16bit), Tagged Queueing Enabled
da1: 8748MB (17916240 512 byte sectors: 255H 63S/T 1115C)
da2 at ahc1 bus 0 target 2 lun 0
da2: <IBM DDRS-34560W S97B> Fixed Direct Access SCSI-2 device
da2: 40.000MB/s transfers (20.000MHz, offset 8, 16bit), Tagged Queueing Enabled
da2: 4357MB (8925000 512 byte sectors: 255H 63S/T 555C)
da0 at ahc0 bus 0 target 0 lun 0
da0: <IBM DDRS-34560W S92A> Fixed Direct Access SCSI-2 device
da0: 40.000MB/s transfers (20.000MHz, offset 8, 16bit), Tagged Queueing Enabled
da0: 4357MB (8925000 512 byte sectors: 255H 63S/T 555C)
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?XFMail.010206180206.jdp>