From owner-freebsd-current@FreeBSD.ORG Sun Jul 18 19:15:48 2004 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id E661F16A4CE for ; Sun, 18 Jul 2004 19:15:47 +0000 (GMT) Received: from fledge.watson.org (fledge.watson.org [204.156.12.50]) by mx1.FreeBSD.org (Postfix) with ESMTP id 8D28243D53 for ; Sun, 18 Jul 2004 19:15:47 +0000 (GMT) (envelope-from robert@fledge.watson.org) Received: from fledge.watson.org (localhost [127.0.0.1]) by fledge.watson.org (8.12.11/8.12.11) with ESMTP id i6IJFJHU037824; Sun, 18 Jul 2004 15:15:19 -0400 (EDT) (envelope-from robert@fledge.watson.org) Received: from localhost (robert@localhost)i6IJFJGi037821; Sun, 18 Jul 2004 15:15:19 -0400 (EDT) (envelope-from robert@fledge.watson.org) Date: Sun, 18 Jul 2004 15:15:18 -0400 (EDT) From: Robert Watson X-Sender: robert@fledge.watson.org To: Willem Jan Withagen In-Reply-To: <103e01c46cf9$0fdacab0$471b3dd4@digiware.nl> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII cc: current@freebsd.org Subject: Re: panic: Duplicate free of item 0xffffff005c4a8600 from zone0xffffff007fed4780(Mbuf) X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 18 Jul 2004 19:15:48 -0000 On Sun, 18 Jul 2004, Willem Jan Withagen wrote: > > Three stikes and out.... > > I'll disable mpsafe now.... > > Does not seem to help.... Not shure if anything should be read in the > fact that it is 3 times in [thread 100007]. Well, the threads involved seem to be the netisr thread and the bge interrupt thread, suggesting we have a problem with mbufs being free'd despite being handed off into the network stack. Up front, it suggests maybe we have an issue with the bge driver freeing or reusing an mbuf inappropriately, or perhaps it's at the TCP layer. Thanks, Robert N M Watson FreeBSD Core Team, TrustedBSD Projects robert@fledge.watson.org Principal Research Scientist, McAfee Research > > --WjW > > > panic: Duplicate free of item 0xffffff00614fb800 from zone 0xffffff007fed > 4780(Mbuf) > > cpuid = 1; > KDB: stack backtrace: > kdb_backtrace() at kdb_backtrace+0x34 > panic() at panic+0x1d2 > uma_dbg_free() at uma_dbg_free+0x112 > uma_zfree_arg() at uma_zfree_arg+0x10a > mb_free_ext() at mb_free_ext+0x96 > m_freem() at m_freem+0x28 > ether_demux() at ether_demux+0x341 > ether_input() at ether_input+0x247 > bge_rxeof() at bge_rxeof+0x36b > bge_intr() at bge_intr+0x15a > ithread_loop() at ithread_loop+0x18d > fork_exit() at fork_exit+0xc9 > fork_trampoline() at fork_trampoline+0xe > --- trap 0, rip = 0, rsp = 0xffffffffb0b7cd00, rbp = 0 --- > KDB: enter: panic > [thread 100007] > Stopped at kdb_enter+0x2e: nop > > And: > > Slab at 0xffffff00612d7fb8, freei 3 = 0. > panic: Duplicate free of item 0xffffff00612d7300 from zone > 0xffffff007fed4780(Mbuf) > > cpuid = 1; > KDB: stack backtrace: > kdb_backtrace() at kdb_backtrace+0x34 > panic() at panic+0x1d2 > uma_dbg_free() at uma_dbg_free+0x112 > uma_zfree_arg() at uma_zfree_arg+0x10a > mb_free_ext() at mb_free_ext+0x96 > m_freem() at m_freem+0x28 > tcp_input() at tcp_input+0x2b24 > ip_input() at ip_input+0x94c > netisr_processqueue() at netisr_processqueue+0x8c > swi_net() at swi_net+0xaf > ithread_loop() at ithread_loop+0x18d > fork_exit() at fork_exit+0xc9 > fork_trampoline() at fork_trampoline+0xe > --- trap 0, rip = 0, rsp = 0xffffffffb0bb5d00, rbp = 0 --- > KDB: enter: panic > [thread 100017] > Stopped at kdb_enter+0x2e: nop > > And: > Slab at 0xffffff005926ffb8, freei 13 = 0. > panic: Duplicate free of item 0xffffff005926fd00 from zone 0xffffff007fed4780(Mb > uf) > > cpuid = 1; > KDB: stack backtrace: > kdb_backtrace() at kdb_backtrace+0x34 > panic() at panic+0x1d2 > uma_dbg_free() at uma_dbg_free+0x112 > uma_zfree_arg() at uma_zfree_arg+0x10a > mb_free_ext() at mb_free_ext+0x96 > m_freem() at m_freem+0x28 > ether_demux() at ether_demux+0x341 > ether_input() at ether_input+0x247 > bge_rxeof() at bge_rxeof+0x36b > bge_intr() at bge_intr+0x15a > ithread_loop() at ithread_loop+0x18d > fork_exit() at fork_exit+0xc9 > fork_trampoline() at fork_trampoline+0xe > --- trap 0, rip = 0, rsp = 0xffffffffb0b7cd00, rbp = 0 --- > KDB: enter: panic > [thread 100007] > Stopped at kdb_enter+0x2e: nop > > _______________________________________________ > freebsd-current@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-current > To unsubscribe, send any mail to "freebsd-current-unsubscribe@freebsd.org" >