From owner-freebsd-current@FreeBSD.ORG  Sun Mar  7 11:08:25 2004
Return-Path: <owner-freebsd-current@FreeBSD.ORG>
Delivered-To: freebsd-current@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 915F016A4CE
	for <current@freebsd.org>; Sun,  7 Mar 2004 11:08:25 -0800 (PST)
Received: from troutmask.apl.washington.edu (troutmask.apl.washington.edu
	[128.208.78.105])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 731BA43D3F
	for <current@freebsd.org>; Sun,  7 Mar 2004 11:08:25 -0800 (PST)
	(envelope-from sgk@troutmask.apl.washington.edu)
Received: from troutmask.apl.washington.edu (localhost [127.0.0.1])
	i27J8PID045481;	Sun, 7 Mar 2004 11:08:25 -0800 (PST)
	(envelope-from sgk@troutmask.apl.washington.edu)
Received: (from sgk@localhost)i27J8Plv045480;
	Sun, 7 Mar 2004 11:08:25 -0800 (PST)	(envelope-from sgk)
Date: Sun, 7 Mar 2004 11:08:25 -0800
From: Steve Kargl <sgk@troutmask.apl.washington.edu>
To: Brian Buchanan <bwb@holo.org>
Message-ID: <20040307190825.GA45452@troutmask.apl.washington.edu>
References: <20040307104037.D4952-100000@thought.holo.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20040307104037.D4952-100000@thought.holo.org>
User-Agent: Mutt/1.4.1i
cc: current@freebsd.org
Subject: Re: Reproduceable panic on boot
X-BeenThere: freebsd-current@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Discussions about the use of FreeBSD-current
	<freebsd-current.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-current>
List-Post: <mailto:freebsd-current@freebsd.org>
List-Help: <mailto:freebsd-current-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 07 Mar 2004 19:08:25 -0000

On Sun, Mar 07, 2004 at 10:49:29AM -0800, Brian Buchanan wrote:
> >From this morning's sources, on an IBM ThinkPad T40p:
> 
> Mounting root from ufs:/dev/ad0s1a
> 
> Memory modified after free 0xc45c7800(508) val=1000100 @ 0xc45c7800
> 
> Stopped at     mtrash_ctor+0x3a:       movl     0x20(%eax),%eax
> db> trace
> mtrash_ctor
> uma_zalloc_arg
> malloc
> elf32_load_file
> exec_elf32_imgact
> kern_execve
> execve
> syscall

This looks familiar.

> When I boot with no modules except ACPI, the panic occurs after:

What happens if you boot with no modules including ACPI?

Try changing line 575 of ata-all.c from -1 to 3.

-- 
Steve