vr0 and kernel panic

Hi, I'm running -CURRENT on an i386 box where it runs marcus_at_'s
tinderbox.  (Ports building similar to pointyhat.)  Since my last update
on June 4 I can't get through an entire build of all ports without a
kernel panic.  Below is the backtrace from the latest crash.  It only
happens while building ports in the tinderbox and it happens fairly
reliably.  I think the NFS usage between this box and the OpenBSD 3.6
NFS server is bringing this bug out.  Please let me know if I can
provide anything else.  Thanks.

Tom


FreeBSD current.straycat.dhs.org 6.0-CURRENT FreeBSD 6.0-CURRENT #0: Sat
Jun  4 21:31:32 EDT 2005
root_at_current.straycat.dhs.org:/usr/obj/usr/src/sys/GENERIC  i386


(kgdb) bt full
#0  doadump () at pcpu.h:165
No locals.
#1  0xc0631c40 in boot (howto=260)
at /usr/src/sys/kern/kern_shutdown.c:397
        first_buf_printf = 1
#2  0xc0631f55 in panic (
    fmt=0xc086ff1f "Duplicate free of item %p from zone %p(%s)\n")
    at /usr/src/sys/kern/kern_shutdown.c:553
        td = (struct thread *) 0xc19bb180
        bootopt = 260
        newpanic = 1
        ap = 0xd44b1aa4 ""
        buf = "Duplicate free of item 0xc2412800 from zone
0xc10429a0(Mbuf)\n", '\0' <repeats 194 times>
#3  0xc0782fbc in uma_dbg_free (zone=0xc10429a0, slab=0xc2412fa8,
    item=0xc2412800) at /usr/src/sys/vm/uma_dbg.c:301
        keg = 0xc199b3c0
        slabref = 0x0
        freei = 8
#4  0xc0781daa in uma_zfree_arg (zone=0xc10429a0, item=0xc2412800,
udata=0x0)
    at /usr/src/sys/vm/uma_core.c:2257
        keg = 0xc199b3c0
        cache = 0x5ea
        bucket = 0xc2414100
        bflags = 0
        cpu = 0
#5  0xc0667c56 in m_freem (mb=0x0) at uma.h:304
No locals.
#6  0xc0669462 in m_defrag (m0=0xc2412800, how=1)
    at /usr/src/sys/kern/uipc_mbuf.c:1237
        m_new = (struct mbuf *) 0x0
        m_final = (struct mbuf *) 0xc3380300
        progress = 1514
        length = 1514
        __func__ = "m_defrag"
#7  0xc074a141 in vr_encap (sc=0xc1b0d000, c=0xc1b0d6a0,
m_head=0xc2412800)
    at /usr/src/sys/pci/if_vr.c:1344
        f = (struct vr_desc *) 0xc1b0d000
        m = (struct mbuf *) 0x0
#8  0xc074a43a in vr_start_locked (ifp=0xc1b0d000)
    at /usr/src/sys/pci/if_vr.c:1404
        sc = (struct vr_softc *) 0xc1b0d000
        m_head = (struct mbuf *) 0xc2412800
        cur_tx = (struct vr_chain *) 0xc1b0d6a0
        __func__ = "vr_start_locked"
#9  0xc074a240 in vr_start (ifp=0xc1b0d000)
at /usr/src/sys/pci/if_vr.c:1383
No locals.
#10 0xc069765b in if_start (ifp=0xc1b0d000)
at /usr/src/sys/net/if.c:2044
No locals.
#11 0xc0698819 in ether_output_frame (ifp=0xc1b0d000, m=0xc2412800)
    at /usr/src/sys/net/if_ethersubr.c:388
        len = 1514
        mflags = -30718
        rule = (struct ip_fw *) 0x0
        error = 0
#12 0xc0698638 in ether_output (ifp=0xc1b0d000, m=0xc2412800,
dst=0xc24b2900,
    rt0=0x0) at /usr/src/sys/net/if_ethersubr.c:341
        type = 8
        error = -1035917262
        hdrcmplt = 0
        esrc = "￿ ￿￿\001"
        edst = "\000\t[\vx￿"
        eh = (struct ether_header *) 0xc2412832
        loop_copy = 0
        __func__ = "ether_output"
#13 0xc06b8e9a in in_arpinput (m=0xc3bc1b00)
    at /usr/src/sys/netinet/if_ether.c:732
        ah = (struct arphdr *) 0xc3bc1b50
        ifp = (struct ifnet *) 0xc1b0d000
        th = (struct iso88025_header *) 0xc096b3c0
        trld = (struct iso88025_sockaddr_dl_data *) 0xc0653dae
        la = (struct llinfo_arp *) 0xc2bf4100
        rt = (struct rtentry *) 0xc1cb2084
        ifa = (struct ifaddr *) 0x0
        ia = (struct in_ifaddr *) 0x0
        sdl = (struct sockaddr_dl *) 0xc24b2910
        sa = {sa_len = 132 '\204', sa_family = 160 '￿',
  sa_data = "b￿\224￿\226￿\001\000\000\000￿M\205￿"}
        isaddr = {s_addr = 33663168}
        itaddr = {s_addr = 838969536}
        myaddr = {s_addr = 838969536}
        enaddr = (u_int8_t *) 0xc19adcab ""
        op = 2
        rif_len = -1064153312
        req_len = 0
#14 0xc06b88e6 in arpintr (m=0xc3bc1b00)
at /usr/src/sys/netinet/if_ether.c:505
        ar = (struct arphdr *) 0x0
#15 0xc069fd12 in netisr_processqueue (ni=0xc096c6b8)
    at /usr/src/sys/net/netisr.c:235
        m = (struct mbuf *) 0xc3bc1b00
#16 0xc069fef6 in swi_net (dummy=0x0) at /usr/src/sys/net/netisr.c:348
        ni = (struct netisr *) 0xc096c6b8
        bits = 0
        i = 0
#17 0xc061fd3c in ithread_loop (arg=0xc19fa580)
    at /usr/src/sys/kern/kern_intr.c:546
        ithd = (struct ithd *) 0xc19fa580
        ih = (struct intrhand *) 0xc1a18000
        td = (struct thread *) 0xc19bb180
        p = (struct proc *) 0xc1a01c00
        count = 0
        warned = 0
        storming = 0
        __func__ = "ithread_loop"
#18 0xc061f16c in fork_exit (callout=0xc061fc1c <ithread_loop>,
    arg=0xc19fa580, frame=0xd44b1d38)
at /usr/src/sys/kern/kern_fork.c:789
        p = (struct proc *) 0xc1a01c00
        td = (struct thread *) 0x0
#19 0xc07d84bc in fork_trampoline ()
at /usr/src/sys/i386/i386/exception.s:208
No locals.


-- 
BSD# Project - Mono on FreeBSD
http://www.mono-project.com/Mono:FreeBSD