From owner-freebsd-stable Tue Feb 6 18: 2:32 2001 Delivered-To: freebsd-stable@freebsd.org Received: from wall.polstra.com (rtrwan160.accessone.com [206.213.115.74]) by hub.freebsd.org (Postfix) with ESMTP id C911737B491 for ; Tue, 6 Feb 2001 18:02:07 -0800 (PST) Received: from vashon.polstra.com (vashon.polstra.com [206.213.73.13]) by wall.polstra.com (8.11.1/8.11.1) with ESMTP id f17227206691 for ; Tue, 6 Feb 2001 18:02:07 -0800 (PST) (envelope-from jdp@polstra.com) Message-ID: X-Mailer: XFMail 1.3 [p0] on FreeBSD X-Priority: 3 (Normal) Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 8bit MIME-Version: 1.0 Date: Tue, 06 Feb 2001 18:02:06 -0800 (PST) Organization: Polstra & Co., Inc. From: John Polstra To: stable@freebsd.org Subject: panic: free: multiple frees (from allocbuf) Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG I got this panic today on a 4.2-stable system from 29 January when I tried to reboot it with "shutdown -r now": This GDB was configured as "i386-unknown-freebsd"... IdlePTD 3993600 initial pcb at 32bda0 panicstr: free: multiple frees panic messages: --- panic: free: multiple frees Uptime: 18m24s dumping to dev #da/0x20001, offset 541106 dump 128 127 126 125 124 123 122 121 120 119 118 117 116 115 114 113 112 111 110 109 108 107 106 105 104 103 102 101 100 99 98 97 96 95 94 93 92 91 90 89 88 87 86 85 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70 69 68 67 66 65 64 63 62 61 60 59 58 57 56 5 5 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 --- #0 dumpsys () at ../../kern/kern_shutdown.c:469 469 if (dumping++) { (kgdb) where #0 dumpsys () at ../../kern/kern_shutdown.c:469 #1 0xc016d573 in boot (howto=256) at ../../kern/kern_shutdown.c:309 #2 0xc016d909 in panic (fmt=0xc02b317f "free: multiple frees") at ../../kern/kern_shutdown.c:556 #3 0xc0169223 in free (addr=0xc20cec00, type=0xc02ef040) at ../../kern/kern_malloc.c:371 #4 0xc019366d in allocbuf (bp=0xc4862958, size=0) at ../../kern/vfs_bio.c:2334 #5 0xc0191e26 in brelse (bp=0xc4862958) at ../../kern/vfs_bio.c:1005 #6 0xc0198deb in vinvalbuf (vp=0xca7e1980, flags=1, cred=0x0, p=0xc9debe00, slpflag=0, slptimeo=0) at ../../kern/vfs_subr.c:719 #7 0xc0199dff in vclean (vp=0xca7e1980, flags=8, p=0xc9debe00) at ../../kern/vfs_subr.c:1667 #8 0xc019a02b in vgonel (vp=0xca7e1980, p=0xc9debe00) at ../../kern/vfs_subr.c:1847 #9 0xc0199d43 in vflush (mp=0xc1fbc000, skipvp=0x0, flags=2) at ../../kern/vfs_subr.c:1605 #10 0xc023fdad in ffs_flushfiles (mp=0xc1fbc000, flags=2, p=0xc9debe00) at ../../ufs/ffs/ffs_vfsops.c:878 #11 0xc02395af in softdep_flushfiles (oldmnt=0xc1fbc000, flags=2, p=0xc9debe00) at ../../ufs/ffs/ffs_softdep.c:708 #12 0xc023fc79 in ffs_unmount (mp=0xc1fbc000, mntflags=524288, p=0xc9debe00) at ../../ufs/ffs/ffs_vfsops.c:813 #13 0xc019ba36 in dounmount (mp=0xc1fbc000, flags=524288, p=0xc9debe00) at ../../kern/vfs_syscalls.c:484 #14 0xc019a522 in vfs_unmountall () at ../../kern/vfs_subr.c:2216 #15 0xc016d50f in boot (howto=0) at ../../kern/kern_shutdown.c:295 #16 0xc016d134 in reboot (p=0xc9debe00, uap=0xc9df1f80) at ../../kern/kern_shutdown.c:147 #17 0xc0291a75 in syscall2 (frame={tf_fs = 47, tf_es = 47, tf_ds = 47, tf_edi = -1077936612, tf_esi = -1077936624, tf_ebp = -1077936836, tf_isp = -908124204, tf_ebx = -1077936732, tf_edx = -1, tf_ecx = 4, tf_eax = 55, tf_trapno = 7, tf_err = 2, tf_eip = 134536656, tf_cs = 31, tf_eflags = 643, tf_esp = -1077937056, tf_ss = 47}) at ../../i386/i386/trap.c:1150 #18 0xc0285b15 in Xint0x80_syscall () #19 0x8048712 in ?? () #20 0x804849c in ?? () #21 0x8048135 in ?? () I should mention that I had been testing a custom netgraph module prior to that. The module had leaked some mbufs, but otherwise I don't think it did anything nasty. It seems unlikely that it would be related to the panic above. I have a -g kernel and a core dump if anybody wants to look at this. The dmesg output is below. John -- John Polstra jdp@polstra.com John D. Polstra & Co., Inc. Seattle, Washington USA "Disappointment is a good sign of basic intelligence." -- Chögyam Trungpa Copyright (c) 1992-2001 The FreeBSD Project. Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 The Regents of the University of California. All rights reserved. FreeBSD 4.2-STABLE #2: Tue Feb 6 16:56:52 PST 2001 root@vashon.polstra.com:/c/src/sys/compile/VASHON Timecounter "i8254" frequency 1193043 Hz Timecounter "TSC" frequency 400862395 Hz CPU: Pentium II/Pentium II Xeon/Celeron (400.86-MHz 686-class CPU) Origin = "GenuineIntel" Id = 0x651 Stepping = 1 Features=0x183fbff real memory = 134217728 (131072K bytes) sio1: gdb debugging port avail memory = 126877696 (123904K bytes) Preloaded elf kernel "kernel" at 0xc03b0000. Pentium Pro MTRR support enabled npx0: on motherboard npx0: INT 16 interface pcib0: on motherboard pci0: on pcib0 pcib1: at device 1.0 on pci0 pci1: on pcib1 pci1: at 0.0 irq 0 isab0: at device 7.0 on pci0 isa0: on isab0 pci0: at 7.1 pci0: at 7.2 chip1: port 0x440-0x44f at device 7.3 on pci0 pcib2: at device 16.0 on pci0 pci2: on pcib2 fxp0: port 0xef40-0xef5f mem 0xfea00000-0xfeafffff,0xfd0ff000-0xfd0fffff irq 11 at device 17. 0 on pci0 fxp0: Ethernet address 00:e0:81:10:09:c2 ahc0: port 0xe400-0xe4ff mem 0xfebfe000-0xfebfefff irq 10 at device 18.0 on pci0 aic7895C: Wide Channel A, SCSI Id=7, 32/255 SCBs ahc1: port 0xe800-0xe8ff mem 0xfebff000-0xfebfffff irq 10 at device 18.1 on pci0 aic7895C: Wide Channel B, SCSI Id=7, 32/255 SCBs fxp1: port 0xef80-0xef9f mem 0xfe800000-0xfe8fffff,0xfd0fe000-0xfd0fefff irq 9 at device 20.0 on pci0 fxp1: Ethernet address 00:a0:c9:b0:13:df atkbdc0: at port 0x60,0x64 on isa0 atkbd0: flags 0x1 irq 1 on atkbdc0 psm0: irq 12 on atkbdc0 psm0: model Generic PS/2 mouse, device ID 0 vga0: at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0 sc0: at flags 0x100 on isa0 sc0: VGA <16 virtual consoles, flags=0x300> fdc0: at port 0x3f0-0x3f5,0x3f7 irq 6 drq 2 on isa0 fdc0: FIFO enabled, 8 bytes threshold fd0: <1440-KB 3.5" drive> on fdc0 drive 0 sio0 at port 0x3f8-0x3ff irq 4 flags 0x10 on isa0 sio0: type 16550A sio1 at port 0x2f8-0x2ff irq 3 flags 0x80 on isa0 sio1: type 16550A ppc0: at port 0x378-0x37f irq 7 on isa0 ppc0: Generic chipset (EPP/NIBBLE) in COMPATIBLE mode plip0: on ppbus0 sbc0: at port 0x220-0x22f,0x330-0x331,0x388-0x38b irq 5 drq 1,3 on isa0 pcm1: on sbc0 IPsec: Initialized Security Association Processing. Waiting 2 seconds for SCSI devices to settle Mounting root from ufs:/dev/da0s1a da1 at ahc0 bus 0 target 1 lun 0 da1: Fixed Direct Access SCSI-3 device da1: 40.000MB/s transfers (20.000MHz, offset 8, 16bit), Tagged Queueing Enabled da1: 8748MB (17916240 512 byte sectors: 255H 63S/T 1115C) da2 at ahc1 bus 0 target 2 lun 0 da2: Fixed Direct Access SCSI-2 device da2: 40.000MB/s transfers (20.000MHz, offset 8, 16bit), Tagged Queueing Enabled da2: 4357MB (8925000 512 byte sectors: 255H 63S/T 555C) da0 at ahc0 bus 0 target 0 lun 0 da0: Fixed Direct Access SCSI-2 device da0: 40.000MB/s transfers (20.000MHz, offset 8, 16bit), Tagged Queueing Enabled da0: 4357MB (8925000 512 byte sectors: 255H 63S/T 555C) To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message