Re: panic: Duplicate free of item ... [again]

On Friday 25 March 2005 03:15 am, Jeremie Le Hen wrote:
> Hi again list,
>
> I've just rebooted, and tried to update my kernel tree using cvs(1).
> Same kernel as my previous message, from 2005/03/24 with Soren's patch.
> I caught another panic :
>
> %%%
>   Slab at 0x1cc1f70, freei 10 = 0.
>   panic: Duplicate free of item 0x1cc1528 from zone 0xc1045ba0(g_bio)
>
>   KDB: stack backtrace:
>   kdb_backtrace()
>   panic()
>   uma_dbg_free() at uma_dbg_free+0x17b
>   uma_zfree_arg() at uma_zfree_arg+0x131
>   g_destroy_bio() at g_destroy_bio+0x22
>   g_vfs_done() at g_vfs_done+0x6c
>   biodone() at biodone+0x70
>   g_io_schedule_up() at g_io_schedule_up+0x6b
>   g_up_procbody() at g_up_procbody+0x98
>   fork_exit()
>   fork_trampoline()
>   --- trap 0x1, eip = 0, esp = 0xd102fd7c, ebp = 0 ---
> %%%
>
> I'm afraid I won't be able to get a kernel dump since my disk space
> is quite limited and I didn't have time to move the previous one...
> Nevertheless I'll inform you if I manage to get it.

I just got a similar panic but from the mbuf zone while doing a buildworld 
loop:

Slab at 0xc2269fa8, freei 10 = 0.
panic: Duplicate free of item 0xc2269a00 from zone 0xc0c3f840(Mbuf)

cpuid = 0
KDB: enter: panic:
[thread pid 20904 tid 100157 ]
db> tr
Tracing pid 20904 tid 100157 td 0xc290ab80
kdb_enter()
panic()
uma_dbug_free()
uma_zfree_arg()
soreceive()
fifo_read()_f()
dofileread()
read()
syscall()

There's a photo of the panic and a dump of the mbuf at 
http://people.freebsd.org/~jhb/bsdboy_panic_040405.jpg
The machine is still in ddb so I can provide more info if needed.

-- 
John Baldwin <jhb_at_FreeBSD.org>  <><  http://www.FreeBSD.org/~jhb/
"Power Users Use the Power to Serve"  =  http://www.FreeBSD.org