[panic] Duplicate free of item ... from zone ... (mbuf_packet)

From: Peter Kostouros <kpeter_at_melbpc.org.au>
Date: Sun, 01 Apr 2007 13:04:05 +1000
Hi

I have attached a debug session I hope someone finds useful in tracking 
the problem. I have noticed intermittent panics for about a month which 
may or may not be related, but the panics seem to occur while 
downloading (and or uploading).

My sources are from 30MAR2007.

Please let me know if I can provide further information.

-- 

Regards

Peter

As always the organisation disavows knowledge of this email


Script started on Sun Apr  1 12:38:04 2007
baron# exitkgdb -c /var/crash/vmcore.159 -f /boot/kernel/kernel

[GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"]
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd".

Unread portion of the kernel message buffer:
Slab at 0xc456bfa8, freei 7 = 0.
panic: Duplicate free of item 0xc456b700 from zone 0xc1462b40(mbuf_packet)

cpuid = 0
Uptime: 2h51m45s
Physical memory: 1011 MB
Dumping 167 MB: 152 136 120 104 88 72 56 40 24 8

#0  doadump () at pcpu.h:172
172	pcpu.h: No such file or directory.
	in pcpu.h
(kgdb) where
#0  doadump () at pcpu.h:172
#1  0xc0787a5a in boot (howto=260) at /mnt/cvs/FreeBSD/usr/src/sys/kern/kern_shutdown.c:409
#2  0xc0787e21 in panic (fmt=0xc0aa836d "Duplicate free of item %p from zone %p(%s)\n")
    at /mnt/cvs/FreeBSD/usr/src/sys/kern/kern_shutdown.c:563
#3  0xc093aaab in uma_dbg_free (zone=0xc1462b40, slab=0xc456bfa8, item=0xc456b700)
    at /mnt/cvs/FreeBSD/usr/src/sys/vm/uma_dbg.c:302
#4  0xc0938bea in uma_zfree_arg (zone=0xc1462b40, item=0xc456b700, udata=0x0)
    at /mnt/cvs/FreeBSD/usr/src/sys/vm/uma_core.c:2261
#5  0xc07dac88 in mb_free_ext (m=0xc456b700) at uma.h:305
#6  0xc07daab0 in m_freem (mb=0x0) at mbuf.h:447
#7  0xc46849f8 in ?? ()
#8  0xc456b700 in ?? ()
#9  0x00000000 in ?? ()
#10 0xe2981c54 in ?? ()
#11 0xc4033000 in ?? ()
#12 0x460f1757 in ?? ()
#13 0xe2981c54 in ?? ()
#14 0xc4684c1f in ?? ()
#15 0xc4033000 in ?? ()
#16 0xc51ca410 in ?? ()
#17 0xffffffff in ?? ()
#18 0xc4691848 in ?? ()
#19 0x00000016 in ?? ()
#20 0xe2981c70 in ?? ()
#21 0xc466aabf in ?? ()
#22 0xc4691ce4 in ?? ()
#23 0x00000000 in ?? ()
#24 0xc468ee5c in ?? ()
#25 0x000003e5 in ?? ()
#26 0x00000000 in ?? ()
#27 0xe2981cb0 in ?? ()
#28 0xc0798a66 in softclock (dummy=0xc4033000) at /mnt/cvs/FreeBSD/usr/src/sys/kern/kern_timeout.c:273
Previous frame inner to this frame (corrupt stack?)
(kgdb) up 3
#3  0xc093aaab in uma_dbg_free (zone=0xc1462b40, slab=0xc456bfa8, item=0xc456b700)
    at /mnt/cvs/FreeBSD/usr/src/sys/vm/uma_dbg.c:302
/mnt/cvs/FreeBSD/usr/src/sys/vm/uma_dbg.c:302:7275:beg:0xc093aaab
(kgdb) l
297			slabref->us_freelist[freei].us_item = 0;
298		} else {
299			if (slab->us_freelist[freei].us_item != 255) {
300				printf("Slab at %p, freei %d = %d.\n",
301				    slab, freei, slab->us_freelist[freei].us_item);
302				panic("Duplicate free of item %p from zone %p(%s)\n",
303				    item, zone, zone->uz_name);
304			}
305	
306			/*
(kgdb) p *zone
$1 = {uz_name = 0xc0a88782 "mbuf_packet", uz_lock = 0xc1474e88, uz_keg = 0xc1474e80, uz_link = {
    le_next = 0x0, le_prev = 0xc146278c}, uz_full_bucket = {lh_first = 0x0}, uz_free_bucket = {
    lh_first = 0x0}, uz_ctor = 0xc077b090 <mb_ctor_pack>, uz_dtor = 0xc077acf0 <mb_dtor_pack>, 
  uz_init = 0xc077afc0 <mb_zinit_pack>, uz_fini = 0xc077b030 <mb_zfini_pack>, uz_allocs = 1151793, 
  uz_frees = 1151409, uz_fails = 0, uz_fills = 0, uz_count = 128, uz_cpu = {{
      uc_freebucket = 0xc5071c48, uc_allocbucket = 0xc145a624, uc_allocs = 281595, uc_frees = 281587}}}
(kgdb) p slab
$2 = 0xc456bfa8
(kgdb) p slab*
$3 = {us_head = {us_keg = 0xc1474e80, us_type = {_us_link = {le_next = 0xc4606fa8, 
        le_prev = 0xc1474eb0}, _us_size = 3294654376}, us_hlink = {sle_next = 0x0}, 
    us_data = 0xc456b000 "", us_flags = 2 '\002', us_freecount = 1 '\001', us_firstfree = 8 '\b'}, 
  us_freelist = {{us_item = 255 'ÿ'}}}
(kgdb) p *slab     freei
$4 = 7
(kgdb) p freei     *slab     slab->        p item
$5 = (void *) 0xc456b700
(kgdb) p item*
Attempt to dereference a generic pointer.
(kgdb) exit    quit
baron# exit

exit

Script done on Sun Apr  1 12:40:45 2007

#
# GENERIC -- Generic kernel configuration file for FreeBSD/i386
#
# For more information on this file, please read the handbook section on
# Kernel Configuration Files:
#
#    http://www.FreeBSD.org/doc/en_US.ISO8859-1/books/handbook/kernelconfig-config.html
#
# The handbook is also available locally in /usr/share/doc/handbook
# if you've installed the doc distribution, otherwise always see the
# FreeBSD World Wide Web server (http://www.FreeBSD.org/) for the
# latest information.
#
# An exhaustive list of options and more detailed explanations of the
# device lines is also present in the ../../conf/NOTES and NOTES files.
# If you are in doubt as to the purpose or necessity of a line, check first
# in NOTES.
#
# $FreeBSD: src/sys/i386/conf/GENERIC,v 1.459 2006/10/26 22:11:35 jb Exp $

cpu		I686_CPU
ident		BARON

# To statically compile in device wiring instead of /boot/device.hints
#hints		"GENERIC.hints"		# Default places to look for devices.

makeoptions	DEBUG=-g		# Build kernel with gdb(1) debug symbols

#options 	SCHED_4BSD		# 4BSD scheduler
options 	SCHED_ULE		# ULE scheduler
options 	PREEMPTION		# Enable kernel thread preemption
options 	INET			# InterNETworking
options 	INET6			# IPv6 communications protocols
options 	FFS			# Berkeley Fast Filesystem
options 	SOFTUPDATES		# Enable FFS soft updates support
options 	UFS_ACL			# Support for access control lists
options 	UFS_DIRHASH		# Improve performance on big directories
options 	MD_ROOT			# MD is a potential root device
options 	NFSCLIENT		# Network Filesystem Client
options 	NFSSERVER		# Network Filesystem Server
options 	NFS_ROOT		# NFS usable as /, requires NFSCLIENT
options 	MSDOSFS			# MSDOS Filesystem
options 	CD9660			# ISO 9660 Filesystem
options 	PROCFS			# Process filesystem (requires PSEUDOFS)
options 	PSEUDOFS		# Pseudo-filesystem framework
options 	GEOM_PART_GPT		# GUID Partition Tables.
options 	GEOM_LABEL		# Provides labelization
options 	COMPAT_43TTY		# BSD 4.3 TTY compat [KEEP THIS!]
options 	COMPAT_FREEBSD4		# Compatible with FreeBSD4
options 	COMPAT_FREEBSD5		# Compatible with FreeBSD5
options 	COMPAT_FREEBSD6		# Compatible with FreeBSD6
options 	SCSI_DELAY=5000		# Delay (in ms) before probing SCSI
options 	KTRACE			# ktrace(1) support
options 	SYSVSHM			# SYSV-style shared memory
options 	SYSVMSG			# SYSV-style message queues
options 	SYSVSEM			# SYSV-style semaphores
options 	_KPOSIX_PRIORITY_SCHEDULING # POSIX P1003_1B real-time extensions
options 	KBD_INSTALL_CDEV	# install a CDEV entry in /dev
options 	ADAPTIVE_GIANT		# Giant mutex is adaptive.
options 	STOP_NMI		# Stop CPUS using NMI instead of IPI

# Debugging for use in -current
options 	KDB			# Enable kernel debugger support.
options 	DDB			# Support DDB.
options 	GDB			# Support remote GDB.
options 	INVARIANTS		# Enable calls of extra sanity checking
options 	INVARIANT_SUPPORT	# Extra sanity checks of internal structures, required by INVARIANTS
options 	WITNESS			# Enable checks to detect deadlocks and cycles
options 	WITNESS_SKIPSPIN	# Don't run witness on spinlocks for speed

# To make an SMP kernel, the next two lines are needed
options 	SMP			# Symmetric MultiProcessor Kernel
device		apic			# I/O APIC

# Bus support.
device		eisa
device		pci

# Floppy drives
device		fdc

# ATA and ATAPI devices
device		ata
device		atadisk		# ATA disk drives
device		ataraid		# ATA RAID drives
device		atapicd		# ATAPI CDROM drives
device		atapifd		# ATAPI floppy drives
device		atapist		# ATAPI tape drives
options 	ATA_STATIC_ID	# Static device numbering

# SCSI Controllers
device		ahb		# EISA AHA1742 family
device		ahc		# AHA2940 and onboard AIC7xxx devices
options 	AHC_REG_PRETTY_PRINT	# Print register bitfields in debug
					# output.  Adds ~128k to driver.
device		ahd		# AHA39320/29320 and onboard AIC79xx devices
options 	AHD_REG_PRETTY_PRINT	# Print register bitfields in debug
					# output.  Adds ~215k to driver.
device		amd		# AMD 53C974 (Tekram DC-390(T))
device		isp		# Qlogic family
#device 	ispfw		# Firmware for QLogic HBAs- normally a module
device		mpt		# LSI-Logic MPT-Fusion
#device		ncr		# NCR/Symbios Logic
device		sym		# NCR/Symbios Logic (newer chipsets + those of `ncr')
device		trm		# Tekram DC395U/UW/F DC315U adapters

device		adv		# Advansys SCSI adapters
device		adw		# Advansys wide SCSI adapters
device		aha		# Adaptec 154x SCSI adapters
device		aic		# Adaptec 15[012]x SCSI adapters, AIC-6[23]60.
device		bt		# Buslogic/Mylex MultiMaster SCSI adapters

device		ncv		# NCR 53C500
device		nsp		# Workbit Ninja SCSI-3
device		stg		# TMC 18C30/18C50

# SCSI peripherals
device		scbus		# SCSI bus (required for SCSI)
device		ch		# SCSI media changers
device		da		# Direct Access (disks)
device		sa		# Sequential Access (tape etc)
device		cd		# CD
device		pass		# Passthrough device (direct SCSI access)
device		ses		# SCSI Environmental Services (and SAF-TE)

# RAID controllers interfaced to the SCSI subsystem
device		amr		# AMI MegaRAID
device		arcmsr		# Areca SATA II RAID
device		asr		# DPT SmartRAID V, VI and Adaptec SCSI RAID
device		ciss		# Compaq Smart RAID 5*
device		dpt		# DPT Smartcache III, IV - See NOTES for options
device		hptmv		# Highpoint RocketRAID 182x
device		rr232x		# Highpoint RocketRAID 232x
device		iir		# Intel Integrated RAID
device		ips		# IBM (Adaptec) ServeRAID
device		mly		# Mylex AcceleRAID/eXtremeRAID
device		twa		# 3ware 9000 series PATA/SATA RAID

# RAID controllers
device		aac		# Adaptec FSA RAID
device		aacp		# SCSI passthrough for aac (requires CAM)
device		ida		# Compaq Smart RAID
device		mfi		# LSI MegaRAID SAS
device		mlx		# Mylex DAC960 family
device		pst		# Promise Supertrak SX6000
device		twe		# 3ware ATA RAID

# atkbdc0 controls both the keyboard and the PS/2 mouse
device		atkbdc		# AT keyboard controller
device		atkbd		# AT keyboard
device		psm		# PS/2 mouse

device		kbdmux		# keyboard multiplexer

device		vga		# VGA video card driver

device		splash		# Splash screen and screen saver support

# syscons is the default console driver, resembling an SCO console
device		sc

device		agp		# support several AGP chipsets

# Power management support (see NOTES for more options)
#device		apm
# Add suspend/resume support for the i8254.
device		pmtimer

# PCCARD (PCMCIA) support
# PCMCIA and cardbus bridge support
device		cbb		# cardbus (yenta) bridge
device		pccard		# PC Card (16-bit) bus
device		cardbus		# CardBus (32-bit) bus

# Serial (COM) ports
device		sio		# 8250, 16[45]50 based serial ports
device		uart		# Generic UART driver

# Parallel port
device		ppc
device		ppbus		# Parallel port bus (required)
device		lpt		# Printer
device		plip		# TCP/IP over parallel
device		ppi		# Parallel port interface device
#device		vpo		# Requires scbus and da

# If you've got a "dumb" serial or parallel PCI card that is
# supported by the puc(4) glue driver, uncomment the following
# line to enable it (connects to sio, uart and/or ppc drivers):
#device		puc

# PCI Ethernet NICs.
device		de		# DEC/Intel DC21x4x (``Tulip'')
device		em		# Intel PRO/1000 adapter Gigabit Ethernet Card
device		ixgb		# Intel PRO/10GbE Ethernet Card
device		le		# AMD Am7900 LANCE and Am79C9xx PCnet
device		txp		# 3Com 3cR990 (``Typhoon'')
device		vx		# 3Com 3c590, 3c595 (``Vortex'')

# PCI Ethernet NICs that use the common MII bus controller code.
# NOTE: Be sure to keep the 'device miibus' line in order to use these NICs!
device		miibus		# MII bus support
device		bce		# Broadcom BCM5706/BCM5708 Gigabit Ethernet
device		bfe		# Broadcom BCM440x 10/100 Ethernet
device		bge		# Broadcom BCM570xx Gigabit Ethernet
device		dc		# DEC/Intel 21143 and various workalikes
device		fxp		# Intel EtherExpress PRO/100B (82557, 82558)
device		lge		# Level 1 LXT1001 gigabit Ethernet
device		nge		# NatSemi DP83820 gigabit Ethernet
device		nve		# nVidia nForce MCP on-board Ethernet Networking
device		pcn		# AMD Am79C97x PCI 10/100 (precedence over 'le')
device		re		# RealTek 8139C+/8169/8169S/8110S
device		rl		# RealTek 8129/8139
device		sf		# Adaptec AIC-6915 (``Starfire'')
device		sis		# Silicon Integrated Systems SiS 900/SiS 7016
device		sk		# SysKonnect SK-984x & SK-982x gigabit Ethernet
device		ste		# Sundance ST201 (D-Link DFE-550TX)
device		stge		# Sundance/Tamarack TC9021 gigabit Ethernet
device		ti		# Alteon Networks Tigon I/II gigabit Ethernet
device		tl		# Texas Instruments ThunderLAN
device		tx		# SMC EtherPower II (83c170 ``EPIC'')
device		vge		# VIA VT612x gigabit Ethernet
device		vr		# VIA Rhine, Rhine II
device		wb		# Winbond W89C840F
device		xl		# 3Com 3c90x (``Boomerang'', ``Cyclone'')

# ISA Ethernet NICs.  pccard NICs included.
device		cs		# Crystal Semiconductor CS89x0 NIC
# 'device ed' requires 'device miibus'
device		ed		# NE[12]000, SMC Ultra, 3c503, DS8390 cards
device		ex		# Intel EtherExpress Pro/10 and Pro/10+
device		ep		# Etherlink III based cards
device		fe		# Fujitsu MB8696x based cards
device		ie		# EtherExpress 8/16, 3C507, StarLAN 10 etc.
device		sn		# SMC's 9000 series of Ethernet chips
device		xe		# Xircom pccard Ethernet

# Wireless NIC cards
device		wlan		# 802.11 support
device		wlan_wep	# 802.11 WEP support
device		wlan_ccmp	# 802.11 CCMP support
device		wlan_tkip	# 802.11 TKIP support
device		an		# Aironet 4500/4800 802.11 wireless NICs.
device		ath		# Atheros pci/cardbus NIC's
device		ath_hal		# Atheros HAL (Hardware Access Layer)
device		ath_rate_sample	# SampleRate tx rate control for ath
device		awi		# BayStack 660 and others
device		ral		# Ralink Technology RT2500 wireless NICs.
device		wi		# WaveLAN/Intersil/Symbol 802.11 wireless NICs.
#device		wl		# Older non 802.11 Wavelan wireless NIC.

# Pseudo devices.
device		loop		# Network loopback
device		random		# Entropy device
device		ether		# Ethernet support
device		sl		# Kernel SLIP
device		ppp		# Kernel PPP
device		tun		# Packet tunnel.
device		pty		# Pseudo-ttys (telnet etc)
device		md		# Memory "disks"
device		gif		# IPv6 and IPv4 tunneling
device		faith		# IPv6-to-IPv4 relaying (translation)
device		firmware	# firmware assist module

# The `bpf' device enables the Berkeley Packet Filter.
# Be aware of the administrative consequences of enabling this!
# Note that 'bpf' is required for DHCP.
device		bpf		# Berkeley packet filter

# USB support
device		uhci		# UHCI PCI->USB interface
device		ohci		# OHCI PCI->USB interface
device		ehci		# EHCI PCI->USB interface (USB 2.0)
device		usb		# USB Bus (required)
#device		udbp		# USB Double Bulk Pipe devices
device		ugen		# Generic
device		uhid		# "Human Interface Devices"
device		ukbd		# Keyboard
device		ulpt		# Printer
device		umass		# Disks/Mass storage - Requires scbus and da
device		ums		# Mouse
device		ural		# Ralink Technology RT2500USB wireless NICs
device		urio		# Diamond Rio 500 MP3 player
device		uscanner	# Scanners
# USB Ethernet, requires miibus
device		aue		# ADMtek USB Ethernet
device		axe		# ASIX Electronics USB Ethernet
device		cdce		# Generic USB over Ethernet
device		cue		# CATC USB Ethernet
device		kue		# Kawasaki LSI USB Ethernet
device		rue		# RealTek RTL8150 USB Ethernet

# FireWire support
device		firewire	# FireWire bus code
device		sbp		# SCSI over FireWire (Requires scbus and da)
device		fwe		# Ethernet over FireWire (non-standard!)

# BARON

device          sound
device          snd_emu10kx

options         P1003_1B_MQUEUE

options         ALTQ
options         ALTQ_CBQ
options         ALTQ_RED
options         ALTQ_RIO
options         ALTQ_HFSC
options         ALTQ_CDNR
options         ALTQ_PRIQ
options         ALTQ_NOPCC
options         ALTQ_DEBUG


# options         DEBUG

#
# Options to enable ATAPI devices to be accessed through SCSI subsystem 
#
device          atapicam
device          ata
device          scbus
device          cd
device          pass

device          iicbus
device          iicbb

#
# Hardware performance monitoring counter support.
#
options         HWPMC_HOOKS
device          hwpmc
Received on Sun Apr 01 2007 - 01:36:08 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:39:07 UTC