Subject: 'Data modified on freelist' crash in 1.3.2
To: 'port-i386@netbsd.org' <port-i386@netbsd.org>
From: Gunnar Helliesen <gunnar@bitcon.no>
List: port-i386
Date: 08/04/1998 18:02:32
This in on NetBSD/i386 1.3.2

Within minutes after going into production our new server crashed with:


Data modified on freelist: word 0 of object 0xf11c1e00 size 128 previous
type fr
ee (0x1304ff != 0xdeadbeef)
vm_fault(0xf1000800, 0, 1, 0) -> 1
kernel: page fault trap, code=0
Stopped at      _tcp_usrreq+0x7b      movswl  0x4(%ebx),%esi
db> trace
_tcp_userreq(f109fe00,5,0,f11c1e00,0) at _tcp_userreq+0x7b
_soaccept(f109fe00,f11c1e00,0,3) at _soaccept+0x4a
_sys_accept(f0f9d200,fcdb3f88,0,efbfdbac) at _sys_accept+0x1bc
_syscall() at _syscall+0x25c
--- syscall (number 30) ---
0x4011c1d7:
db> 


Anything I can do to prevent this from happening again? What caused it?

dmesg(8) output below.

Gunnar

--
Gunnar Helliesen   | Bergen IT Consult AS  | NetBSD/VAX on a uVAX II
Systems Consultant | Bergen, Norway        | '86 Jaguar Sovereign 4.2
gunnar@bitcon.no   | http://www.bitcon.no/ | '73 Mercedes 280 (240D) 


Copyright (c) 1996, 1997, 1998
    The NetBSD Foundation, Inc.  All rights reserved.
Copyright (c) 1982, 1986, 1989, 1991, 1993
    The Regents of the University of California.  All rights reserved.

NetBSD 1.3.2 (LYONS) #0: Tue Jul 14 20:09:10 CEST 1998
    root@lyons.jag-lovers.org:/usr/src/sys/arch/i386/compile/LYONS
cpu0: family 6 model 5 step 1
cpu0: Intel Pentium Pro (686-class)
real mem  = 536477696
avail mem = 526327808
using 2822 buffers containing 26927104 bytes of memory
mainbus0 (root)
pci0 at mainbus0 bus 0: configuration mode 1
Intel product 0x7190 (host bridge, revision 0x02) at pci0 dev 0 function
0 not c
onfigured
ppb0 at pci0 dev 1 function 0: Intel product 0x7191 (rev. 0x02)
pci1 at ppb0 bus 1
pcib0 at pci0 dev 7 function 0
pcib0: Intel 82371AB PCI-to-ISA Bridge (PIIX4) (rev. 0x02)
Intel 82371AB IDE controller (PIIX4) (IDE mass storage, interface 0x80,
revision
 0x01) at pci0 dev 7 function 1 not configured
Intel 82371AB USB Host Controller (PIIX4) (USB serial bus, revision
0x01) at pci
0 dev 7 function 2 not configured
Intel 82371AB Power Management Controller (PIIX4) (miscellaneous bridge,
revisio
n 0x02) at pci0 dev 7 function 3 not configured
ahc0 at pci0 dev 8 function 0
ahc0: interrupting at irq 10
ahc0: aic7880 Wide Channel, SCSI Id=7, 16 SCBs
scsibus0 at ahc0 channel 0: 16 targets
ahc0: target 0 using 16Bit transfers
ahc0: target 0 synchronous at 20.0MHz, offset = 0x8
sd0 at scsibus0 targ 0 lun 0: <QUANTUM, VIKING II 9.1WLS, 3506> SCSI2
0/direct f
ixed
sd0: 8709MB, 8338 cyl, 10 head, 213 sec, 512 bytes/sect x 17836668
sectors
ahc0: target 1 using 16Bit transfers
ahc0: target 1 synchronous at 20.0MHz, offset = 0x8
sd1 at scsibus0 targ 1 lun 0: <QUANTUM, VIKING II 9.1WLS, 3506> SCSI2
0/direct f
ixed
sd1: 8709MB, 8338 cyl, 10 head, 213 sec, 512 bytes/sect x 17836668
sectors
ahc0: target 2 synchronous at 16.0MHz, offset = 0xf
cd0 at scsibus0 targ 2 lun 0: <PIONEER, CD-ROM DR-U06S, 1.05> SCSI2
5/cdrom remo
vable
ahc0: target 3 synchronous at 4.0MHz, offset = 0x8
st0 at scsibus0 targ 3 lun 0: <TANDBERG, SLR5 4/8GB, =09:> SCSI2
1/sequential re
movable
st0: density code 0x0, 512-byte blocks, write-enabled
S3 product 0x8a01 (VGA display, revision 0x01) at pci0 dev 9 function 0
not conf
igured
de0 at pci0 dev 10 function 0
de0: interrupting at irq 9
de0: DEC DE450-CA 21041 [10Mb/s] pass 1.1
de0: address 00:00:f8:30:fe:b9
isa0 at pcib0
com0 at isa0 port 0x3f8-0x3ff irq 4: ns16550a, working fifo
com1 at isa0 port 0x2f8-0x2ff irq 3: ns16550a, working fifo
lpt0 at isa0 port 0x378-0x37b irq 7
npx0 at isa0 port 0xf0-0xff: using exception 16
pc0 at isa0 port 0x60-0x6f irq 1: color
spkr0 at pc0 port 0x61
pc0: console
fdc0 at isa0 port 0x3f0-0x3f7 irq 6 drq 2
fd0 at fdc0 drive 0: 1.44MB, 80 cyl, 2 head, 18 sec
biomask 440 netmask 640 ttymask 6c2
boot device: sd0
root on sd0a dumps on sd0b
root file system type: ffs
de0: enabling BNC port