Date: Sun, 15 Dec 2024 22:19:00 +0000 From: John F Carr <jfc@mit.edu> To: FreeBSD Current <freebsd-current@freebsd.org> Subject: panic: Memory modified after free Message-ID: <5AAF5C07-F278-42D6-AE9C-419448CE07A1@mit.edu>
next in thread | raw e-mail | index | archive | help
My ARM server crashed while running "make installworld installkernel".
The message is
panic: Memory modified after free 0xffffa00006305e60 (16, malloc-16, devbuf=
) + 0 =3D deadc0dedeadc006
The stack trace goes through tmpfs, which could be an innocent victim.
The other filesystems are ZFS. There are a lot of USB devices connected.
The last commit from main in the kernel is fe291141486acf27ed1c8eed791ba989=
7f84c3f0.
The local changes should not affect the kernel on this machine.
Is there anything likely to be useful in the crash dump?
The rest of the message is the start of core.txt.6.
striatus dumped core - see /var/crash/vmcore.6
Fri Dec 13 19:29:06 EST 2024
FreeBSD striatus 15.0-CURRENT FreeBSD 15.0-CURRENT #3 striatus-n273968-f25f=
d2c8374a: Sun Dec 1 03:17:23 EST 2024 jfc@striatus:/usr/obj/usr/src/ar=
m64.aarch64/sys/STRIATUS arm64
panic: Memory modified after free 0xffffa00006305e60 (16, malloc-16, devbuf=
) + 0 =3D deadc0dedeadc006
Reading symbols from /boot/kernel/kernel...
Reading symbols from /usr/lib/debug//boot/kernel/kernel.debug...
Reading symbols from /boot/kernel/cryptodev.ko...
Reading symbols from /usr/lib/debug//boot/kernel/cryptodev.ko.debug...
Reading symbols from /boot/kernel/ig4.ko...
Reading symbols from /usr/lib/debug//boot/kernel/ig4.ko.debug...
Reading symbols from /boot/kernel/uftdi.ko...
Reading symbols from /usr/lib/debug//boot/kernel/uftdi.ko.debug...
Reading symbols from /boot/kernel/ucom.ko...
Reading symbols from /usr/lib/debug//boot/kernel/ucom.ko.debug...
Reading symbols from /boot/kernel/uchcom.ko...
Reading symbols from /usr/lib/debug//boot/kernel/uchcom.ko.debug...
Reading symbols from /boot/kernel/if_axge.ko...
Reading symbols from /usr/lib/debug//boot/kernel/if_axge.ko.debug...
Reading symbols from /boot/kernel/mac_ntpd.ko...
Reading symbols from /usr/lib/debug//boot/kernel/mac_ntpd.ko.debug...
Reading symbols from /boot/kernel/filemon.ko...
Reading symbols from /usr/lib/debug//boot/kernel/filemon.ko.debug...
Reading symbols from /boot/kernel/nullfs.ko...
Reading symbols from /usr/lib/debug//boot/kernel/nullfs.ko.debug...
Reading symbols from /boot/kernel/fdescfs.ko...
Reading symbols from /usr/lib/debug//boot/kernel/fdescfs.ko.debug...
0xffff0000006ddb88 in doadump (textdump=3D0, textdump@entry=3D3220761328)
at /usr/src/sys/kern/kern_shutdown.c:404
404 dump_savectx();
(kgdb) #0 0xffff0000006ddb88 in doadump (textdump=3D0, textdump@entry=3D32=
20761328)
at /usr/src/sys/kern/kern_shutdown.c:404
error =3D 0
coredump =3D <optimized out>
#1 0xffff0000002f84bc in db_dump (dummy=3D<optimized out>,=20
dummy2=3D<optimized out>, dummy3=3D<optimized out>, dummy4=3D<optimized=
out>)
at /usr/src/sys/ddb/db_command.c:596
error =3D <optimized out>
#2 0xffff0000002f8270 in db_command (last_cmdp=3D<optimized out>,=20
cmd_table=3D<optimized out>, dopager=3Dtrue)
at /usr/src/sys/ddb/db_command.c:508
modif =3D "\000\353\370\277\000\000\377\377\000\353\370\277\000\000=
\377\377\000@\000\001\000\000\377\377\310\377\377\377\000\000\000\000\200\3=
53\370\277\000\000\377\377p\255/\000\000\000\377\377\000\000\000\000\000\00=
0\000\000\000\320!\001\000\000\377\377\200\353\370\277\000\000\377\377|\255=
/\000\000\000\377\377\000\000\000\000\000\000\000\0000\340!\001\000\000\377=
\377\340\353\370\277\000\000\377\377t\260/\000\000\000\377\377\000`\b\001\0=
00\000\377\377"
addr =3D -281474969178324
count =3D -1
have_addr =3D <optimized out>
cmd =3D 0xffff000000faff60 <db_cmds+616>
t =3D <optimized out>
result =3D <optimized out>
#3 0xffff0000002f7f34 in db_command_loop ()
at /usr/src/sys/ddb/db_command.c:555
No locals.
#4 0xffff0000002fbfb4 in db_trap (type=3D<optimized out>, code=3D<optimize=
d out>)
at /usr/src/sys/ddb/db_main.c:267
jb =3D {{_jb =3D {18446462601953602608,=20
-5192240428643675738518913775244240,=20
-5192296467524930435797529359615502,=20
-5192296477290489174466776304776360,=20
-5192296468505116628898160085655552,=20
-5192237445959521374093222199402496,=20
-5192296590745196351457412900733128,=20
-5192237445966900071722702816613136,=20
79228161499693132067762662960,=20
-5192237445966900071722702816613136,=20
79228161499693132067762662960,=20
-5192296800790449699300821084607248,=20
-5192296718864917493094550124040768,=20
-5192296626485486292827088539877369,=20
-5192296728739902317609042133324512,=20
-5192296719202197761738255565787696,=20
-5192296719202197761738258752417864, -184467440771455254527,=
=20
26615710863082138512284773984,=20
-5192296765144699321027431923913328,=20
-5192296765145086702371508068548598,=20
-5192296507247853976218498451492864,=20
-5192296734691486038574397028504128,=20
-5192296734691486038574397028504128,=20
-5192296734691504485036998982107126,=20
-5192296668329914529214643795595728,=20
-5192237445951128105258209394032640,=20
-5192296555040877560468520940077056,=20
-5192237445949910620149344563625983,=20
-5192296718790835368894532564750720,=20
-5192296718790835368894532564750720,=20
-5192296734717680415159064591798720}}}
bkpt =3D false
watchpt =3D false
prev_jb =3D 0x0
why =3D <optimized out>
#5 0xffff00000072fc8c in kdb_trap (type=3D60, code=3D0, tf=3D<optimized ou=
t>)
at /usr/src/sys/kern/subr_kdb.c:790
other_cpus =3D {__bits =3D {18446462598743929896, 18446462601953603=
544,=20
12, 5, 10, 0, 256, 18446462598750552064, 18446462601791911488,=
=20
18446462601953603440, 0, 35088872438672, 35088965921264,=20
18446462601953603952, 13597801529282666180, 1844646260195360376=
0}}
be =3D 0xffff000000fb0b58 <ddb_dbbe>
intr =3D 704
did_stop_cpus =3D <optimized out>
handled =3D <optimized out>
#6 <signal handler called>
No locals.
#7 kdb_enter (why=3D<optimized out>, msg=3D<optimized out>)
at /usr/src/sys/kern/subr_kdb.c:556
No locals.
#8 0xffff0000006dde98 in vpanic (
fmt=3D0xffff000000c4a3ca "Memory modified after free %p (%d, %s, %s) + =
%d =3D %lx\n", ap=3D...) at /usr/src/sys/kern/kern_shutdown.c:967
buf =3D "Memory modified after free 0xffffa00006305e60 (16, malloc-=
16, devbuf) + 0 =3D deadc0dedeadc006\n", '\000' <repeats 162 times>
other_cpus =3D {__bits =3D {11, 0 <repeats 15 times>}}
td =3D 0xffff0000b655b640
newpanic =3D <optimized out>
bootopt =3D 4
#9 0xffff0000006ddc7c in panic (
fmt=3D0x12 <error: Cannot access memory at address 0x12>)
at /usr/src/sys/kern/kern_shutdown.c:892
ap =3D {__stack =3D 0xffff0000bff8f380, __gr_top =3D 0xffff0000bff8=
f330,=20
__vr_top =3D 0x1, __gr_offs =3D -56, __vr_offs =3D 0}
#10 0xffff000000a4873c in mtrash_ctor (mem=3D0xffffa00006305e60,=20
size=3D<optimized out>, arg=3D<optimized out>, flags=3D<optimized out>)
at /usr/src/sys/vm/uma_dbg.c:179
zone =3D <optimized out>
p =3D <optimized out>
osize =3D 16
e =3D 0xffffa00006305e68
ksp =3D 0xffffa00006305e68
off =3D <optimized out>
#11 0xffff000000a4068c in item_ctor (zone=3D0xffff000040405400,=20
uz_flags=3D<optimized out>, size=3D16, udata=3D<optimized out>, flags=
=3D2,=20
item=3D0xffffa00006305e60) at /usr/src/sys/vm/uma_core.c:3515
skipdbg =3D <optimized out>
#12 0xffff0000006acf70 in malloc (size=3Dsize@entry=3D10,=20
mtp=3D0xffff000000ff4788 <M_TMPFSNAME>, flags=3Dflags@entry=3D2)
at /usr/src/sys/kern/kern_malloc.c:663
va =3D 0x0
indx =3D 0
zone =3D 0xffff000040405400
#13 0xffff000000603180 in tmpfs_alloc_dirent (tmp=3D0xffffa00001bb8300,=20
node=3D0xffffa000ec5472d0, name=3D0xffffa00051cb7030 "LC_COLLATE", len=
=3D10,=20
de=3D<optimized out>) at /usr/src/sys/fs/tmpfs/tmpfs_subr.c:914
_size =3D 10
nde =3D 0xffffa0010f011680
_size =3D <optimized out>
_malloc_item =3D <optimized out>
_size =3D <optimized out>
_malloc_item =3D <optimized out>
#14 tmpfs_alloc_file (dvp=3Ddvp@entry=3D0xffffa0004a40c6e0,=20
vpp=3Dvpp@entry=3D0xffff0000bff8f708, vap=3D<optimized out>,=20
cnp=3Dcnp@entry=3D0xffff0000bff8f730, target=3D<optimized out>,=20
target@entry=3D0xffff0000bff8f4c0 "\360", <incomplete sequence \364\370=
\277>)
at /usr/src/sys/fs/tmpfs/tmpfs_subr.c:1245
node =3D 0xffffa000ec5472d0
tmp =3D 0xffffa00001bb8300
dnode =3D <optimized out>
parent =3D <optimized out>
error =3D <optimized out>
de =3D <optimized out>
#15 0xffff0000005fc344 in tmpfs_create (v=3D<optimized out>)
at /usr/src/sys/fs/tmpfs/tmpfs_vnops.c:269
dvp =3D 0xffffa0004a40c6e0
vpp =3D 0xffff0000bff8f708
cnp =3D 0xffff0000bff8f730
vap =3D 0xffff000000d09fc8
error =3D <optimized out>
#16 0xffff000000bdf7d0 in VOP_CREATE_APV (
vop=3D0xffff000000ff3f20 <tmpfs_vnodeop_entries>,=20
a=3Da@entry=3D0xffff0000bff8f600) at vnode_if.c:242
rc =3D <optimized out>
#17 0xffff0000007f19d0 in VOP_CREATE (dvp=3D0xffff00000141015c <vpanic[buf]=
>,=20
vpp=3D0xffff0000bff8f708, cnp=3D0xffff0000bff8f730, vap=3D0xffff0000bff=
8f540)
at ./vnode_if.h:131
a =3D {a_gen =3D {a_desc =3D 0xffff0000010da340 <vop_create_desc>},=
=20
a_dvp =3D 0xffffa0004a40c6e0, a_vpp =3D 0xffff0000bff8f708,=20
a_cnp =3D 0xffff0000bff8f730, a_vap =3D 0xffff0000bff8f540}
#18 vn_open_cred (ndp=3Dndp@entry=3D0xffff0000bff8f6b0, flagp=3D<optimized =
out>,=20
flagp@entry=3D0xffff0000bff8f784, cmode=3D292,=20
vn_open_flags=3Dvn_open_flags@entry=3D16, cred=3D0xffffa0001f692400,=20
fp=3D<optimized out>) at /usr/src/sys/kern/vfs_vnops.c:285
vp =3D 0xffffa0000701a5f0
mp =3D 0xffff0000b6458b80
vat =3D {va_type =3D VREG, va_mode =3D 292, va_padding0 =3D 0,=20
va_uid =3D 4294967295, va_gid =3D 4294967295,=20
va_nlink =3D 18446744073709551615, va_fsid =3D 184467440737095516=
15,=20
va_fileid =3D 18446744073709551615, va_size =3D 18446744073709551=
615,=20
va_blocksize =3D -1, va_atime =3D {tv_sec =3D -1, tv_nsec =3D -1}=
,=20
va_mtime =3D {tv_sec =3D -1, tv_nsec =3D -1}, va_ctime =3D {tv_se=
c =3D -1,=20
tv_nsec =3D -1}, va_birthtime =3D {tv_sec =3D -1, tv_nsec =3D -=
1},=20
va_gen =3D 18446744073709551615, va_flags =3D 1844674407370955161=
5,=20
va_rdev =3D 18446744073709551615, va_bytes =3D 184467440737095516=
15,=20
va_filerev =3D 0, va_vaflags =3D 0, va_spare =3D 0}
first_open =3D false
error =3D <optimized out>
fmode =3D <optimized out>
vap =3D <optimized out>
#19 0xffff0000007e85b0 in openatfp (td=3D0xffff0000b655b640,=20
dirfd=3D<optimized out>,=20
path=3D0x1fe942f24678 <error: Cannot access memory at address 0x1fe942f=
24678>, pathseg=3DUIO_USERSPACE, pathseg@entry=3D(unknown: 0xbff8f800), fla=
gs=3D1538,=20
mode=3D33060, fpp=3D0x0, fpp@entry=3D0xffff0000bff8f800)
at /usr/src/sys/kern/vfs_syscalls.c:1211
fp =3D 0xffffa0000701a5f0
nd =3D {
ni_dirp =3D 0x1fe942f24678 <error: Cannot access memory at addres=
s 0x1fe942f24678>, ni_segflg =3D UIO_USERSPACE, ni_rightsneeded =3D 0xffff0=
000bff8f6a0,=20
ni_startdir =3D 0x0, ni_rootdir =3D 0xffffa00006ecd898, ni_topdir=
=3D 0x0,=20
ni_dirfd =3D -100, ni_lcf =3D 0, ni_filecaps =3D {fc_rights =3D {
cr_rights =3D {0, 0}}, fc_ioctls =3D 0x0, fc_nioctls =3D -1,=
=20
fc_fcntls =3D 0}, ni_vp =3D 0x0, ni_dvp =3D 0xffffa0004a40c6e0,=
=20
ni_resflags =3D 1, ni_debugflags =3D 3, ni_loopcnt =3D 0, ni_path=
len =3D 59,=20
ni_next =3D 0xffffa00051cb703a "", ni_cnd =3D {cn_flags =3D 28131=
3359,=20
cn_cred =3D 0xffffa0001f692400, cn_nameiop =3D CREATE,=20
cn_lkflags =3D 524288,=20
cn_pnbuf =3D 0xffffa00051cb7000 "/tmp/install.KlmLI038ne/locale=
/nl_NL.ISO8859-15/LC_COLLATE", cn_nameptr =3D 0xffffa00051cb7030 "LC_COLLAT=
E",=20
cn_namelen =3D 10}, ni_cap_tracker =3D {
tqh_first =3D 0xffffffffffffffff, tqh_last =3D 0xffffffffffffff=
ff},=20
ni_dvp_seqc =3D 1689292205, ni_vp_seqc =3D 0}
indx =3D -1
p =3D <optimized out>
rights =3D {cr_rights =3D {<optimized out>, 288230376151711744}}
fdp =3D 0xffff0000e701fc90
pdp =3D 0xffffa00006477b00
error =3D <optimized out>
vp =3D <optimized out>
fcaps =3D <optimized out>
cmode =3D <optimized out>
#20 0xffff0000007e8330 in kern_openat (td=3D0x12, dirfd=3D21037404,=20
path=3D0xffff000000d09fc8 "/usr/src/sys/kern/kern_cons.c",=20
pathseg=3DUIO_USERSPACE, flags=3D115, mode=3D7572444)
at /usr/src/sys/kern/vfs_syscalls.c:1316
No locals.
#21 0xffff0000e68f8cac in filemon_wrapper_openat (td=3D0xffff0000b655b640,=
=20
uap=3D0xffff0000b655ba40) at /usr/src/sys/dev/filemon/filemon_wrapper.c=
:229
ret =3D <optimized out>
#22 0xffff000000ac11c8 in syscallenter (td=3D0xffff0000b655b640)
at /usr/src/sys/arm64/arm64/../../kern/subr_syscall.c:189
se =3D 0xffff000001002040 <sysent+15968>
sa =3D 0xffff0000b655ba30
p =3D <optimized out>
error =3D <optimized out>
sy_thr_static =3D true
traced =3D <optimized out>
_audit_entered =3D <optimized out>
#23 svc_handler (td=3D0xffff0000b655b640, frame=3D<optimized out>)
at /usr/src/sys/arm64/arm64/trap.c:198
No locals.
#24 do_el0_sync (td=3D0xffff0000b655b640, frame=3D<optimized out>)
at /usr/src/sys/arm64/arm64/trap.c:658
far =3D <optimized out>
esr =3D <optimized out>
exception =3D <optimized out>
bp_harden =3D <optimized out>
dfsc =3D <optimized out>
#25 <signal handler called>
No locals.
#26 0x00001fe9c95969f0 in ?? ()
No symbol table info available.
#27 0x00001fe9c6f48c0c in ?? ()
No symbol table info available.
Backtrace stopped: previous frame identical to this frame (corrupt stack?)
(kgdb) (kgdb) Tracing command "pagedaemon\000\000\000\000\000\000\000\000\0=
00" pid 8 tid 100107 (CPU 0)
#0 0xffff000000aa7614 in ipi_stop (dummy=3D<optimized out>)
at /usr/src/sys/arm64/arm64/mp_machdep.c:337
#1 0xffff000000a8a748 in arm_gic_intr (arg=3D0xffffa00001baf100,=20
arg@entry=3D<error reading variable: value is not available>)
at /usr/src/sys/arm/arm/gic.c:582
#2 0xffff000000a84410 in intr_irq_handler (tf=3D0xffff0000bfe27240,=20
rootnum=3D<unavailable>) at /usr/src/sys/kern/subr_intr.c:360
#3 <signal handler called>
#4 trash_ctor (mem=3D0xffffa00107fb5000, size=3D4096, arg=3D0x0, flags=3D0=
)
at /usr/src/sys/vm/uma_dbg.c:79
#5 trash_fini (mem=3D0xffffa00107fb5000, size=3D4096)
at /usr/src/sys/vm/uma_dbg.c:133
#6 0xffff000000a465b4 in keg_free_slab (keg=3Dkeg@entry=3D0xffff0000c15868=
00,=20
slab=3D0xffffa000a4032558, start=3D<optimized out>)
at /usr/src/sys/vm/uma_core.c:1621
#7 0xffff000000a464d0 in keg_drain_domain (keg=3Dkeg@entry=3D0xffff0000c15=
86800,=20
domain=3Ddomain@entry=3D0) at /usr/src/sys/vm/uma_core.c:1686
#8 0xffff000000a43220 in keg_drain (keg=3D0xffff0000c1586800,=20
domain=3D<optimized out>) at /usr/src/sys/vm/uma_core.c:1706
#9 zone_reclaim (zone=3Dzone@entry=3D0xffff0000c1588800, domain=3Ddomain@e=
ntry=3D-1,=20
waitok=3D<optimized out>, waitok@entry=3D1, drain=3D<optimized out>)
at /usr/src/sys/vm/uma_core.c:1731
#10 0xffff000000a42748 in uma_zone_reclaim_domain (zone=3D0xffff0000c158880=
0,=20
req=3D3, domain=3D-1) at /usr/src/sys/vm/uma_core.c:3090
#11 uma_reclaim_domain_cb (zone=3D0xffff0000c1588800, arg=3D<optimized out>=
)
at /usr/src/sys/vm/uma_core.c:5310
#12 zone_foreach_unlocked (zfunc=3D<optimized out>, arg=3D<optimized out>)
at /usr/src/sys/vm/uma_core.c:3091
#13 zone_foreach (zfunc=3D<optimized out>, arg=3D<optimized out>)
at /usr/src/sys/vm/uma_core.c:3112
#14 uma_reclaim_domain (req=3Dreq@entry=3D3, domain=3D-1)
at /usr/src/sys/vm/uma_core.c:5334
#15 0xffff000000a4266c in uma_reclaim (req=3D133910528, req@entry=3D3)
at /usr/src/sys/vm/uma_core.c:5317
#16 0xffff000000a71168 in vm_pageout_lowmem ()
at /usr/src/sys/vm/vm_pageout.c:2041
#17 vm_pageout_worker (arg=3D<optimized out>)
at /usr/src/sys/vm/vm_pageout.c:2133
#18 0xffff000000a70d48 in vm_pageout () at /usr/src/sys/vm/vm_pageout.c:236=
6
#19 0xffff00000068e25c in fork_exit (callout=3D0xffff000000a70b60 <vm_pageo=
ut>,=20
arg=3D0x0, frame=3D0xffff0000bfe27a00) at /usr/src/sys/kern/kern_fork.c=
:1151
#20 <signal handler called>
Tracing command "idle\000l", '\000' <repeats 13 times> pid 11 tid 100004 (C=
PU 1)
#0 0xffff000000aa7614 in ipi_stop (dummy=3D<optimized out>)
at /usr/src/sys/arm64/arm64/mp_machdep.c:337
#1 0xffff000000a8a748 in arm_gic_intr (arg=3D0xffffa00001baf100,=20
arg@entry=3D<error reading variable: value is not available>)
at /usr/src/sys/arm/arm/gic.c:582
#2 0xffff000000a84410 in intr_irq_handler (tf=3D0xffff0000bfc1a6e0,=20
rootnum=3D<unavailable>) at /usr/src/sys/kern/subr_intr.c:360
#3 <signal handler called>
#4 cpu_idle (busy=3D<optimized out>) at /usr/src/sys/arm64/arm64/machdep.c=
:282
#5 0xffff000000712680 in sched_idletd (dummy=3Ddummy@entry=3D0x0)
at /usr/src/sys/kern/sched_ule.c:3058
#6 0xffff00000068e25c in fork_exit (
callout=3D0xffff0000007121e0 <sched_idletd>, arg=3D0x0,=20
frame=3D0xffff0000bfc1aa00) at /usr/src/sys/kern/kern_fork.c:1151
#7 <signal handler called>
Tracing command "cp", '\000' <repeats 17 times> pid 73242 tid 100204 (CPU 2=
)
#0 0xffff0000006ddb88 in doadump (textdump=3D0, textdump@entry=3D322076132=
8)
at /usr/src/sys/kern/kern_shutdown.c:404
#1 0xffff0000002f84bc in db_dump (dummy=3D<optimized out>,=20
dummy2=3D<optimized out>, dummy3=3D<optimized out>, dummy4=3D<optimized=
out>)
at /usr/src/sys/ddb/db_command.c:596
#2 0xffff0000002f8270 in db_command (last_cmdp=3D<optimized out>,=20
cmd_table=3D<optimized out>, dopager=3Dtrue)
at /usr/src/sys/ddb/db_command.c:508
#3 0xffff0000002f7f34 in db_command_loop ()
at /usr/src/sys/ddb/db_command.c:555
#4 0xffff0000002fbfb4 in db_trap (type=3D<optimized out>, code=3D<optimize=
d out>)
at /usr/src/sys/ddb/db_main.c:267
#5 0xffff00000072fc8c in kdb_trap (type=3D60, code=3D0, tf=3D<optimized ou=
t>)
at /usr/src/sys/kern/subr_kdb.c:790
#6 <signal handler called>
#7 kdb_enter (why=3D<optimized out>, msg=3D<optimized out>)
at /usr/src/sys/kern/subr_kdb.c:556
#8 0xffff0000006dde98 in vpanic (
fmt=3D0xffff000000c4a3ca "Memory modified after free %p (%d, %s, %s) + =
%d =3D %lx\n", ap=3D...) at /usr/src/sys/kern/kern_shutdown.c:967
#9 0xffff0000006ddc7c in panic (
fmt=3D0x12 <error: Cannot access memory at address 0x12>)
at /usr/src/sys/kern/kern_shutdown.c:892
#10 0xffff000000a4873c in mtrash_ctor (mem=3D0xffffa00006305e60,=20
size=3D<optimized out>, arg=3D<optimized out>, flags=3D<optimized out>)
at /usr/src/sys/vm/uma_dbg.c:179
#11 0xffff000000a4068c in item_ctor (zone=3D0xffff000040405400,=20
uz_flags=3D<optimized out>, size=3D16, udata=3D<optimized out>, flags=
=3D2,=20
item=3D0xffffa00006305e60) at /usr/src/sys/vm/uma_core.c:3515
#12 0xffff0000006acf70 in malloc (size=3Dsize@entry=3D10,=20
mtp=3D0xffff000000ff4788 <M_TMPFSNAME>, flags=3Dflags@entry=3D2)
at /usr/src/sys/kern/kern_malloc.c:663
#13 0xffff000000603180 in tmpfs_alloc_dirent (tmp=3D0xffffa00001bb8300,=20
node=3D0xffffa000ec5472d0, name=3D0xffffa00051cb7030 "LC_COLLATE", len=
=3D10,=20
de=3D<optimized out>) at /usr/src/sys/fs/tmpfs/tmpfs_subr.c:914
#14 tmpfs_alloc_file (dvp=3Ddvp@entry=3D0xffffa0004a40c6e0,=20
vpp=3Dvpp@entry=3D0xffff0000bff8f708, vap=3D<optimized out>,=20
cnp=3Dcnp@entry=3D0xffff0000bff8f730, target=3D<optimized out>,=20
target@entry=3D0xffff0000bff8f4c0 "\360", <incomplete sequence \364\370=
\277>)
at /usr/src/sys/fs/tmpfs/tmpfs_subr.c:1245
#15 0xffff0000005fc344 in tmpfs_create (v=3D<optimized out>)
at /usr/src/sys/fs/tmpfs/tmpfs_vnops.c:269
#16 0xffff000000bdf7d0 in VOP_CREATE_APV (
vop=3D0xffff000000ff3f20 <tmpfs_vnodeop_entries>,=20
a=3Da@entry=3D0xffff0000bff8f600) at vnode_if.c:242
#17 0xffff0000007f19d0 in VOP_CREATE (dvp=3D0xffff00000141015c <vpanic[buf]=
>,=20
vpp=3D0xffff0000bff8f708, cnp=3D0xffff0000bff8f730, vap=3D0xffff0000bff=
8f540)
at ./vnode_if.h:131
#18 vn_open_cred (ndp=3Dndp@entry=3D0xffff0000bff8f6b0, flagp=3D<optimized =
out>,=20
flagp@entry=3D0xffff0000bff8f784, cmode=3D292,=20
vn_open_flags=3Dvn_open_flags@entry=3D16, cred=3D0xffffa0001f692400,=20
fp=3D<optimized out>) at /usr/src/sys/kern/vfs_vnops.c:285
#19 0xffff0000007e85b0 in openatfp (td=3D0xffff0000b655b640,=20
dirfd=3D<optimized out>,=20
path=3D0x1fe942f24678 <error: Cannot access memory at address 0x1fe942f=
24678>, pathseg=3DUIO_USERSPACE, pathseg@entry=3D(unknown: 0xbff8f800), fla=
gs=3D1538,=20
mode=3D33060, fpp=3D0x0, fpp@entry=3D0xffff0000bff8f800)
at /usr/src/sys/kern/vfs_syscalls.c:1211
#20 0xffff0000007e8330 in kern_openat (td=3D0x12, dirfd=3D21037404,=20
path=3D0xffff000000d09fc8 "/usr/src/sys/kern/kern_cons.c",=20
pathseg=3DUIO_USERSPACE, flags=3D115, mode=3D7572444)
at /usr/src/sys/kern/vfs_syscalls.c:1316
#21 0xffff0000e68f8cac in filemon_wrapper_openat (td=3D0xffff0000b655b640,=
=20
uap=3D0xffff0000b655ba40) at /usr/src/sys/dev/filemon/filemon_wrapper.c=
:229
#22 0xffff000000ac11c8 in syscallenter (td=3D0xffff0000b655b640)
at /usr/src/sys/arm64/arm64/../../kern/subr_syscall.c:189
#23 svc_handler (td=3D0xffff0000b655b640, frame=3D<optimized out>)
at /usr/src/sys/arm64/arm64/trap.c:198
#24 do_el0_sync (td=3D0xffff0000b655b640, frame=3D<optimized out>)
at /usr/src/sys/arm64/arm64/trap.c:658
#25 <signal handler called>
#26 0x00001fe9c95969f0 in ?? ()
#27 0x00001fe9c6f48c0c in ?? ()
Backtrace stopped: previous frame identical to this frame (corrupt stack?)
Tracing command "idle\000l", '\000' <repeats 13 times> pid 11 tid 100006 (C=
PU 3)
#0 0xffff000000aa7614 in ipi_stop (dummy=3D<optimized out>)
at /usr/src/sys/arm64/arm64/mp_machdep.c:337
#1 0xffff000000a8a748 in arm_gic_intr (arg=3D0xffffa00001baf100,=20
arg@entry=3D<error reading variable: value is not available>)
at /usr/src/sys/arm/arm/gic.c:582
#2 0xffff000000a84410 in intr_irq_handler (tf=3D0xffff0000bfc106e0,=20
rootnum=3D<unavailable>) at /usr/src/sys/kern/subr_intr.c:360
#3 <signal handler called>
#4 cpu_idle (busy=3D<optimized out>) at /usr/src/sys/arm64/arm64/machdep.c=
:282
#5 0xffff000000712680 in sched_idletd (dummy=3Ddummy@entry=3D0x0)
at /usr/src/sys/kern/sched_ule.c:3058
#6 0xffff00000068e25c in fork_exit (
callout=3D0xffff0000007121e0 <sched_idletd>, arg=3D0x0,=20
frame=3D0xffff0000bfc10a00) at /usr/src/sys/kern/kern_fork.c:1151
#7 <signal handler called>
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?5AAF5C07-F278-42D6-AE9C-419448CE07A1>