From owner-freebsd-net@FreeBSD.ORG Wed May 25 19:20:14 2011 Return-Path: Delivered-To: freebsd-net@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id DCA5B106564A for ; Wed, 25 May 2011 19:20:13 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id C1ADC8FC0A for ; Wed, 25 May 2011 19:20:13 +0000 (UTC) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.4/8.14.4) with ESMTP id p4PJKDUG008853 for ; Wed, 25 May 2011 19:20:13 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.4/8.14.4/Submit) id p4PJKDii008852; Wed, 25 May 2011 19:20:13 GMT (envelope-from gnats) Date: Wed, 25 May 2011 19:20:13 GMT Message-Id: <201105251920.p4PJKDii008852@freefall.freebsd.org> To: freebsd-net@FreeBSD.org From: Joerg Wunsch Cc: Subject: Re: kern/157287: re0: INVARIANTS panic (Memory modified after free) X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Joerg Wunsch List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 25 May 2011 19:20:14 -0000 The following reply was made to PR kern/157287; it has been noted by GNATS. From: Joerg Wunsch To: FreeBSD-gnats-submit@freebsd.org, freebsd-bugs@FreeBSD.org Cc: Subject: Re: kern/157287: re0: INVARIANTS panic (Memory modified after free) Date: Wed, 25 May 2011 21:17:30 +0200 Here's a stack trace: db> bt Tracing pid 0 tid 100000 td 0xc088c130 kdb_enter(c07f7e81,c07f7e81,c08173ce,c0c206f8,0,...) at kdb_enter+0x3a panic(c08173ce,c07ef54a,ffc,3403c04e,c6eec880,...) at panic+0x134 mtrash_ctor(c6eec000,1000,0,102,c6f10700,...) at mtrash_ctor+0x77 uma_zalloc_arg(c118a700,0,102,2,102,...) at uma_zalloc_arg+0x109 malloc(1000,c0849170,102,c077cabc,44,...) at malloc+0xe4 bus_dmamem_alloc(c6f10700,c6f230c8,c,c6f230c4,ffffffff,...) at bus_dmamem_alloc+0x8a re_attach(c6f10c00,c6e04860,c0842288,c07faafa,80000000,...) at re_attach+0x118a device_attach(c6f10c00,4,c07fa9dc,a79) at device_attach+0x36f device_probe_and_attach(c6f10c00,c6e5cb00,c0c20900,c0b57614,c6f10c80,...) at device_probe_and_attach+0x4e bus_generic_attach(c6f10c80,c6e2f160,1,c0b57050,0,...) at bus_generic_attach+0x19 acpi_pci_attach(c6f10c80,c6f10c80,ffffffff,c07faafa,80000000,...) at acpi_pci_attach+0x194 device_attach(c6f10c80,4,c07fa9dc,a79) at device_attach+0x36f device_probe_and_attach(c6f10c80,c6e4c380,c0c20998,c0b57944,c6e5cb00,...) at device_probe_and_attach+0x4e bus_generic_attach(c6e5cb00,c0b73688,3,c0c20988,c6e2f160,...) at bus_generic_attach+0x19 acpi_pcib_attach(c6e5cb00,c6f10dd0,3,c0c209b0,c6e2f160,...) at acpi_pcib_attach+0x194 acpi_pcib_pci_attach(c6e5cb00,c6e5cb00,ffffffff,c07faafa,80000000,...) at acpi_pcib_pci_attach+0x9d device_attach(c6e5cb00,4,c07fa9dc,a79) at device_attach+0x36f device_probe_and_attach(c6e5cb00,c6e42680,c0c20a64,c0b57614,c6e4c380,...) at device_probe_and_attach+0x4e bus_generic_attach(c6e4c380,c6e29900,1,c0b57050,0,...) at bus_generic_attach+0x19 acpi_pci_attach(c6e4c380,c6dfe860,c0842288,c07faafa,80000000,...) at acpi_pci_attach+0x194 device_attach(c6e4c380,4,c07fa9dc,a79) at device_attach+0x36f device_probe_and_attach(c6e4c380,c6dae600,c0c20afc,c0b57944,c6e42680,...) at device_probe_and_attach+0x4e bus_generic_attach(c6e42680,c0b73688,0,c0c20aec,c6e29900,...) at bus_generic_attach+0x19 acpi_pcib_attach(c6e42680,c6e544b4,0,c0c20b1c,2,...) at acpi_pcib_attach+0x194 acpi_pcib_acpi_attach(c6e42680,c6e0c860,c0842288,c07faafa,80000000,...) at acpi_pcib_acpi_attach+0x246 device_attach(c6e42680,4,c07fa9dc,a79) at device_attach+0x36f device_probe_and_attach(c6e42680,3,c0c20c18,c0b550d7,c6dae600,...) at device_probe_and_attach+0x4e bus_generic_attach(c6dae600,c0b72e09,100000,dff00000,3,...) at bus_generic_attach+0x19 acpi_attach(c6dae600,c6e00860,c0842288,c07faafa,80000000,...) at acpi_attach+0xc87 device_attach(c6dae600,4,c07fa9dc,a79) at device_attach+0x36f device_probe_and_attach(c6dae600,c6daec00,c0c20ca4,c0b6821e,c6daec00,...) at device_probe_and_attach+0x4e bus_generic_attach(c6daec00,a,c0b730be,0,c6cff435,...) at bus_generic_attach+0x19 nexus_acpi_attach(c6daec00,c6e1e060,c0842288,c07faafa,80000000,...) at nexus_acpi_attach+0x7e device_attach(c6daec00,4,c07fa9dc,a79) at device_attach+0x36f device_probe_and_attach(c6daec00,c6d2a600,c6d2a600,c6d00520,c6d2a600,...) at device_probe_and_attach+0x4e bus_generic_new_pass(c6d2a600,c6dad000,c08421b8,c6cdfd74,fffffff,...) at bus_generic_new_pass+0xc5 bus_set_pass(7fffffff,c0c20d5c,c077a80c,c07f9ced,c0c20d78,...) at bus_set_pass+0x81 root_bus_configure(c07f9ced,c0c20d78,c053425c,0,c1ec00,...) at root_bus_configure+0x12 configure(0,c1ec00,c1ec00,c1e000,c25000,...) at configure+0xc mi_startup() at mi_startup+0xac begin() at begin+0x2c (Taking a coredump for analysis in kgdb is not possible as the dump device has not been configured yet at that point.) -- cheers, J"org .-.-. --... ...-- -.. . DL8DTL http://www.sax.de/~joerg/ NIC: JW11-RIPE Never trust an operating system you don't have sources for. ;-)