Date: Tue, 21 Jun 2005 09:04:27 +0200 From: Jeremie Le Hen <jeremie@le-hen.org> To: freebsd-stable@FreeBSD.org Cc: jeremie@le-hen.org Subject: panic in RELENG_5 UMA Message-ID: <20050621070427.GA738@obiwan.tataz.chchile.org>
next in thread | raw e-mail | index | archive | help
Hi list,
I caught a panic this night on my RELENG_5. The kernel was compiled on
2005/05/21. Please, feel free to ask for further informations (and
include me explicitely in the recipients list since I'm not subscribed
to this list).
kgdb stacktrace:
%%%
#22 0xc0566d1d in panic (
fmt=0xc0728d5d "Duplicate free of item %p from zone %p(%s)\n")
at ../../../kern/kern_shutdown.c:550
td = (struct thread *) 0xc205ec00
bootopt = 256
newpanic = 1
ap = 0xd6d3f968 ""
buf = "Duplicate free of item 0xc1be8800 from zone 0xc1045ae0(Mbuf)\n",
'\0' <repeats 194 times>
#23 0xc069e280 in uma_dbg_free (zone=0xc1045ae0, slab=0xc1be8fa8,
item=0xc1be8800) at ../../../vm/uma_dbg.c:301
keg = 0xc101f3c0
slabref = 0x0
freei = 8
#24 0xc069cc39 in uma_zfree_arg (zone=0xc1045ae0, item=0xc1be8800, udata=0x0)
at ../../../vm/uma_core.c:2273
keg = 0xc101f3c0
cache = 0xc1045b18
bucket = 0xc1be2000
bflags = 0
cpu = 0
skip = SKIP_DTOR
#25 0xc05a0a0b in m_freem (mb=0x0) at uma.h:304
No locals.
#26 0xc05ee0d5 in arpresolve (ifp=0xc1a5b000, rt0=0xc1d44000, m=0xc1be7200,
dst=0xd6d3fa94, desten=0xd6d3fa2c "/æ]ÀäµwÀ")
at ../../../netinet/if_ether.c:442
la = (struct llinfo_arp *) 0xc1a75a00
sdl = (struct sockaddr_dl *) 0xc2128910
error = -1038972656
rt = (struct rtentry *) 0xc1d44000
#27 0xc05dac65 in ether_output (ifp=0xc1a5b000, m=0xc1be7200, dst=0xd6d3fa94,
rt0=0x0) at ../../../net/if_ethersubr.c:165
type = -10541
error = 50
hdrcmplt = 0
esrc = "K\000\000\000\214z"
edst = "/æ]Àäµ"
eh = (struct ether_header *) 0x32
loop_copy = 0
#28 0xc060150c in ip_output (m=0xc1be7200, opt=0xc1be7240, ro=0xd6d3fa90,
flags=0, imo=0x0, inp=0xc40f7a8c) at ../../../netinet/ip_output.c:770
ip = (struct ip *) 0xc1be7240
ifp = (struct ifnet *) 0xc1a5b000
m0 = (struct mbuf *) 0xc1be7240
hlen = 20
len = 1
error = 0
dst = (struct sockaddr_in *) 0xd6d3fa94
ia = (struct in_ifaddr *) 0xc1c2b300
isbroadcast = 0
sw_csum = 1
iproute = {ro_rt = 0xc1d44000, ro_dst = {sa_len = 16 '\020',
sa_family = 2 '\002',
sa_data = "\000\000Àš\001²\000\000\000\000\000\000\000"}}
odst = {s_addr = 1}
fwd_tag = (struct m_tag *) 0x0
__func__ = "ip_output"
#29 0xc060aba1 in tcp_output (tp=0xc1d75534)
at ../../../netinet/tcp_output.c:1119
so = (struct socket *) 0xc2afe000
len = 144
recwin = 66608
sendwin = -1044483500
flags = 24
error = -1044483500
m = (struct mbuf *) 0xc1be7200
ip = (struct ip *) 0xc1be7240
th = (struct tcphdr *) 0xc1be7254
opt = "\001\001\b\n\002ä>m\003õJÁ+\001\000\000žà¯ÂÐà¯Â\000à¯Â\204ûÓÖ\203
~ZÀÐà¯Â"
ipoptlen = 0
optlen = 12
hdrlen = 52
idle = 1
sendalot = 0
i = 299
sack_rxmit = 0
sack_bytes_rxmt = 0
p = (struct sackhole *) 0x0
tao = {tao_cc = 767, tao_ccsent = 3228670914, tao_mssopt = 64356}
__func__ = "tcp_output"
#30 0xc061167c in tcp_usr_send (so=0xc2afe000, flags=0, m=0xc1be7600, nam=0x0,
control=0x0, td=0xc205ec00) at ../../../netinet/tcp_usrreq.c:699
error = 0
inp = (struct inpcb *) 0xc40f7a8c
tp = (struct tcpcb *) 0xc1d75534
#31 0xc05a41e8 in sosend (so=0xc2afe000, addr=0x0, uio=0xd6d3fc70,
top=0xc1be7600, control=0x0, flags=0, td=0xc205ec00)
at ../../../kern/uipc_socket.c:835
mp = (struct mbuf **) 0xc1be7600
m = (struct mbuf *) 0xc1be7600
space = 33160
len = 144
resid = 0
clen = -1044482560
error = 0
dontroute = 0
atomic = 0
#32 0xc05928bf in soo_write (fp=0x0, uio=0xd6d3fc70, active_cred=0xc4211e80,
flags=0, td=0xc205ec00) at ../../../kern/sys_socket.c:118
so = (struct socket *) 0xc2afe000
error = 144
#33 0xc058bc0b in dofilewrite (td=0xc205ec00, fp=0xc2aff83c, fd=0, buf=0x0,
nbyte=3228877920, offset=Unhandled dwarf expression opcode 0x93
) at file.h:245
auio = {uio_iov = 0xd6d3fc68, uio_iovcnt = 1, uio_offset = 143,
uio_resid = 0, uio_segflg = UIO_USERSPACE, uio_rw = UIO_WRITE,
uio_td = 0xc205ec00}
aiov = {iov_base = 0x807d090, iov_len = 0}
cnt = 144
error = -1066089376
ktruio = (struct uio *) 0x0
#34 0xc058ba74 in write (td=0xc205ec00, uap=0xd6d3fd04)
at ../../../kern/sys_generic.c:300
fp = (struct file *) 0xc2aff83c
error = 0
#35 0xc06d2a12 in syscall (frame=
{tf_fs = -1078001617, tf_es = 47, tf_ds = -1078001617, tf_edi = 134671528,
tf_esi = 144, tf_ebp = -1077943016, tf_isp = -690750108, tf_ebx = 671922152, tf
_edx = 134671528, tf_ecx = 4, tf_eax = 4, tf_trapno = 12, tf_err = 2, tf_eip = 6
73631499, tf_cs = 31, tf_eflags = 518, tf_esp = -1077943044, tf_ss = 47})
at ../../../i386/i386/trap.c:1009
params = 0xbfbfe500 <Address 0xbfbfe500 out of bounds>
callp = (struct sysent *) 0xc0744960
td = (struct thread *) 0xc205ec00
p = (struct proc *) 0xc2b04a98
orig_tf_eflags = 518
sticks = 113
error = 0
narg = 3
args = {4, 134729728, 144, 0, -1077942928, 0, 113, -1028633960}
code = 4
#36 0xc06c46bf in Xint0x80_syscall () at ../../../i386/i386/exception.s:201
%%%
Regards,
--
Jeremie Le Hen
< jeremie at le-hen dot org >< ttz at chchile dot org >
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050621070427.GA738>