Date: Fri, 20 May 2005 20:26:35 GMT From: Tilman Linneweh <arved@arved.at> To: FreeBSD-gnats-submit@FreeBSD.org Subject: kern/81324: panic: "Duplicate free of item %p from zone %p(%s)\n" Message-ID: <200505202026.j4KKQZgd002218@freefall.freebsd.org> Resent-Message-ID: <200505202030.j4KKUB4d002480@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 81324
>Category: kern
>Synopsis: panic: "Duplicate free of item %p from zone %p(%s)\n"
>Confidential: no
>Severity: serious
>Priority: medium
>Responsible: freebsd-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: sw-bug
>Submitter-Id: current-users
>Arrival-Date: Fri May 20 20:30:10 GMT 2005
>Closed-Date:
>Last-Modified:
>Originator: Tilman Linneweh
>Release: FreeBSD 5.4-STABLE i386
>Organization:
>Environment:
System: FreeBSD via.arved.de 5.4-STABLE FreeBSD 5.4-STABLE #12: Sun Apr 24 11:47:55 CEST 2005 root@via.arved.de:/usr/obj/usr/src/sys/VIA i386
>Description:
This bug has been reproducable since 5.3.
The Machine is an ipfilter/ipnat Firewall.
The panic happens when another machine behind a different
Firewall opens an SSH Session to a machine behind the ipnat-Gateway.
and does not terminate it correctly (because it crashed itself,
or because a laptop is put into sleep)
mode)
#22 0xc0532dbb in panic (
fmt=0xc06e28f8 "Duplicate free of item %p from zone %p(%s)\n")
at /usr/src/sys/kern/kern_shutdown.c:550
#23 0xc0657260 in uma_dbg_free (zone=0xc0c6aae0, slab=0xc1355fa8,
item=0xc1355e00) at /usr/src/sys/vm/uma_dbg.c:301
#24 0xc065602f in uma_zfree_arg (zone=0xc0c6aae0, item=0xc1355e00, udata=0x0)
at /usr/src/sys/vm/uma_core.c:2273
#25 0xc0564b82 in m_freem (mb=0x0) at uma.h:304
#26 0xc044f864 in fr_check (ip=0xc1355e50, hlen=25, ifp=0xc1120000, out=0,
mp=0xca869c88) at /usr/src/sys/contrib/ipfilter/netinet/fil.c:1387
#27 0xc0451302 in fr_check_wrapper (arg=0x0, mp=0x0, ifp=0xc1120000, dir=1,
inp=0x0) at /usr/src/sys/contrib/ipfilter/netinet/ip_fil.c:345
#28 0xc059cfad in pfil_run_hooks (ph=0xc0760c20, mp=0xca869cd4,
ifp=0xc1120000, dir=1, inp=0x0) at /usr/src/sys/net/pfil.c:137
#29 0xc05b2dd5 in ip_input (m=0xc1355e00)
---Type <return> to continue, or q <return> to quit---
at /usr/src/sys/netinet/ip_input.c:457
#30 0xc059ba12 in netisr_processqueue (ni=0xc075feb8)
at /usr/src/sys/net/netisr.c:233
#31 0xc059bbc0 in swi_net (dummy=0x0) at /usr/src/sys/net/netisr.c:340
#32 0xc0521088 in ithread_loop (arg=0xc1074400)
at /usr/src/sys/kern/kern_intr.c:547
#33 0xc05204fc in fork_exit (callout=0xc0520f64 <ithread_loop>,
arg=0xc1074400, frame=0xca869d48) at /usr/src/sys/kern/kern_fork.c:790
#34 0xc067a08c in fork_trampoline () at /usr/src/sys/i386/i386/exception.s:209
>How-To-Repeat:
>Fix:
>Release-Note:
>Audit-Trail:
>Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200505202026.j4KKQZgd002218>