From nobody Sun Dec 15 22:19:00 2024 X-Original-To: freebsd-current@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4YBHY44q7Lz5hNfW for ; Sun, 15 Dec 2024 22:19:04 +0000 (UTC) (envelope-from jfc@mit.edu) Received: from CY3PR05CU001.outbound.protection.outlook.com (mail-westcentralusazon11023092.outbound.protection.outlook.com [40.93.201.92]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "mail.protection.outlook.com", Issuer "DigiCert Cloud Services CA-1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4YBHY35Kkdz4pP5 for ; Sun, 15 Dec 2024 22:19:03 +0000 (UTC) (envelope-from jfc@mit.edu) Authentication-Results: mx1.freebsd.org; dkim=pass header.d=mit.edu header.s=selector2 header.b=iFcKWZuv; spf=pass (mx1.freebsd.org: domain of jfc@mit.edu designates 40.93.201.92 as permitted sender) smtp.mailfrom=jfc@mit.edu; dmarc=pass (policy=none) header.from=mit.edu; arc=pass ("microsoft.com:s=arcselector10001:i=1") ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=An5IyFsv5X0+9xqSXI0cTFML1ucXTvMDZF7ZPd4D3zA1yus+rEGbc8Z/rDZUHJ0mA1LpxArOl4izqks0LKMutdq4p074KMbfo6cP7UMWVdnXumTyoFTDND52XIruDWL/k52MmMsos8HzDLx4xJ/0TnXPclWlO+gHfGd5qjf1a3AKcAlQ0tTnLRixYGtfJ6beA1WVRXjAm372cMBKsbEzYuP9UqSsoeNC1at5HICQg/vackyZalYO8J9CNAPELWin76/uqH52mGdj/X0v1erzjQKSkpOzEK6hfLH+j3IWRBlivBz5YgGKvyIHudvqFtnwff+gEWTbGUdFxoKC4Hua5w== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=OazHt1nPv6Ggb5jldhDyFftSkEIRCoZgqQu7LUBlQhI=; b=LTDPPpXKV7+U3xc9wr9mPiOhx8tFfjp7/8vS3JTripdUDXNFTt+vOynatN+s0yaKwzTb1WVRx9v7mDEvTb4O9GzCCKpYoAjBkeAILGDyk96zNF3+VzMWeCQ7qj+J4N9hxdxv38K3eugDytPA6simX+sU/aOvLz9lS7OcpYo1WIp3OKKSxxCVpQapq0dXZo89H/7WixZwtcv75U+2v//Y8zjXbFmOCon3ifTnBuKVislqBHy0IVkLXjpTTjGSPSC7n4iiKUd2sp+xv0tunMWAb0Gfzwm9NSRZHAvrHlubNhUgWrtdwbDKOfxxW6hgwKh+OaqDUJ7jxwARRXiXzj9/Fw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=mit.edu; dmarc=pass action=none header.from=mit.edu; dkim=pass header.d=mit.edu; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mit.edu; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=OazHt1nPv6Ggb5jldhDyFftSkEIRCoZgqQu7LUBlQhI=; b=iFcKWZuvNvGrGBQNV2VqImoRwpVAjeKykkbroDnTilH4CntMmqKVi6yQDgTnwJB/+XSqjhjpnXslZeT9FndEfAwDbVwQZcOdTXJkE9C8AoByyE1rUKSZX8ZhKQNahCXZ1uqr480f8ZYs6bd4PuLkqKkg2FIITMcKXEqRUxq5tJ8= Received: from SA3PR01MB8450.prod.exchangelabs.com (2603:10b6:806:382::17) by CO1PR01MB8844.prod.exchangelabs.com (2603:10b6:303:272::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8272.8; Sun, 15 Dec 2024 22:19:00 +0000 Received: from SA3PR01MB8450.prod.exchangelabs.com ([fe80::bb39:d8c:f575:6b9d]) by SA3PR01MB8450.prod.exchangelabs.com ([fe80::bb39:d8c:f575:6b9d%5]) with mapi id 15.20.8272.005; Sun, 15 Dec 2024 22:19:00 +0000 From: John F Carr To: FreeBSD Current Subject: panic: Memory modified after free Thread-Topic: panic: Memory modified after free Thread-Index: AQHbTz9X14tJKvesHES0Pi+nC7gUeA== Date: Sun, 15 Dec 2024 22:19:00 +0000 Message-ID: <5AAF5C07-F278-42D6-AE9C-419448CE07A1@mit.edu> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-publictraffictype: Email x-ms-traffictypediagnostic: SA3PR01MB8450:EE_|CO1PR01MB8844:EE_ x-ms-office365-filtering-correlation-id: 6baead10-b926-486d-b08a-08dd1d5679e1 x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0;ARA:13230040|10070799003|366016|1800799024|376014|38070700018; x-microsoft-antispam-message-info: =?us-ascii?Q?uTTjnScsZtR5wvf+2ZIoT4djaP0pcJoEwP+8vNR8GA0KqBQQ58PjjkCaZVhS?= =?us-ascii?Q?OUs6R0EINt9RdMIfYkcg4uakmrYd6F0AXmkj7KA9qDTBIDpjiGgQOSMKby7j?= =?us-ascii?Q?+bCPKmrgt8ePFAFEOoCZlXcU0/PWIKR4T8tExIDKY0SkmVsnIF2hpimhv/Hb?= =?us-ascii?Q?osyMRte7VjtA+IAwotjW7n1aNOu4HGni5xSdeD0fHF14okiBaxz3yS1i0CbK?= =?us-ascii?Q?6rPzn1YXhfgrXp/2qY5GUiPG+rW20g1BRcJEMKnNugAoRMDxl48F48OaFY21?= =?us-ascii?Q?naj0DruSS/6nFYKNn33Eo254rLPuI8WR+Poi3lxNY/BdI+So276/Kyhumx9g?= =?us-ascii?Q?zjdzdEt1utNhM229OpY7yO6GA456NrZOVhRCGmk+x9aIVVNEIXi/f324h4Hd?= =?us-ascii?Q?3skxuN0npT3CsGlUNcCPule6cDJxwYsbT7ufQaxXQCQ4Gst7Q5Ee5FykSW8h?= =?us-ascii?Q?8xMCsWWeydt2xCw0gHctpNijuHAkp2GRIi5Za1N9mFEN0H22aRB39rWOktam?= =?us-ascii?Q?N+3FM6fBBewtS8D4iAL3Hcq5up4uaqvYgI4hIgJNg4XEOaM68mjVs6+OAZNU?= =?us-ascii?Q?a41u/1jYCJ5FfFATTD8+Gbn5T4/GO1TgEqaM5De8sUSmXC+qfGTNc1df8SAi?= =?us-ascii?Q?qG24CHaVHV7cu4oGckdx1bFB6GVuRJfyyMhwv4rGmEylaCWhHTAJV86abBmf?= =?us-ascii?Q?zLGbTNv0iM0ZFBrSSSJ17Uhz8qqCDtRxjJiSTRJ/XtbHyum2kJ3sAyBmvKxw?= =?us-ascii?Q?M1SUX6W0KfVxZCSeOQiIj5gRNLZYKM5aCIGGPPt4P0PytCSXM0TeQ+fVXB52?= =?us-ascii?Q?hZVheYCxH7ZkHeWXwgXMwro/W4sbC9QtqCr7BPUtSeIJAQobTPDN5dJAiw6j?= =?us-ascii?Q?EAZQ8vlF0pxjqh+OMiR7/BVV96K6SnEkqSCk2CRIeoty81UPlvR8dRJH9e2W?= =?us-ascii?Q?FU1byd7qYCdvQlBVcBGRWsVXQUGExK84sY7f0VqEXIzfF6GvPzMgd2aF7ZVc?= =?us-ascii?Q?Y+eWmAbRH//3+82QZ5PgRK2/1PDbISl6wy9JC0cOotrnLBTL9xEITul4r3Lv?= =?us-ascii?Q?UqTG5nT+e0gWYkquhai8vgE19UoOoqaqWxvZah+8+mJO7Psu0cn4naNmpPqa?= =?us-ascii?Q?yXMqEk2mB5lQC2qJe/ds3ngrwC8vgqastPXr6xrDsvIos2+RSIVnGXlOMvKw?= =?us-ascii?Q?IbJvjdy11DmqEfAwLDdd//yhzGE1Yc7+L8CELv5RfRdvLyjuF0tbkzuPOqnG?= =?us-ascii?Q?w3cs7SrvmTLvK/PHxTE31i7M2tpORgjWhws3ulfu+LRU173+Roeu+ZFJINrr?= =?us-ascii?Q?eeSxXY6JmdJth3/1dd9QjaC2VKnGqR161ISFPBWDMPf+pSmAExtnbDQ8mCT9?= =?us-ascii?Q?/XEqc9plg43Jhx/dqUCZiLhfvlcynByjYreXuxHe8EYIv3/qlloCm0ftneSI?= =?us-ascii?Q?B/YgVziAaSeEHDfcCm0zq9/HKciKA0Wh?= x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:SA3PR01MB8450.prod.exchangelabs.com;PTR:;CAT:NONE;SFS:(13230040)(10070799003)(366016)(1800799024)(376014)(38070700018);DIR:OUT;SFP:1102; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?us-ascii?Q?Q643m9D9W9MTZupUuagsjLRwyLxQVp+mjP05/PS3ABgw7Vh3znEQfbSOlps0?= =?us-ascii?Q?fq9EBkxBGTlrF2mjJuN6e9c50Amvq4c6ZhK7Hht5XnFRY8ENEEgQsR7XE/7o?= =?us-ascii?Q?a1qwph8ddbTYPlaWTn5Lrrr2wbcsQbaec3AJQ+RPRCHVkj1fOD7zrzqkadGt?= =?us-ascii?Q?GOUFTAZ6fbinBT/id9yIluAOkEljWV9JwRCNZRWMfoo07dDIzH2FftVwVpS+?= =?us-ascii?Q?wZo97q46e3PMbaUoyG7o6g1Hwd9l70x9ILIgPK1wzlGNsV8j6dztOsyfwUTL?= =?us-ascii?Q?Z1dS5u95lcQ9BeKM5LMT4FAJ34xyuL0TDi66QmPajlotOkrYJ8qDogGKyBkt?= =?us-ascii?Q?OdlsR2dAJrPcBJwF2vNhq5CkABvPj51WvInkwK6bM8Lr+V7Xnb+rA4/csMJd?= =?us-ascii?Q?oiE35a9TQLwAQqzu3090QFdc6LoZkY0i5gfXiCO74+tIBMNXR+txmo0R7azC?= =?us-ascii?Q?jKxg/CNb4VOuYuHAZ/r2jxzODoUDAC1sUmXOIVREU6x0KZlA8Q+img8jima8?= =?us-ascii?Q?MbnVOonOmhLuTlwF5EHILsknkr9HScGJnlaSKJcP1xX/SskyAnNG0TNKSmQ1?= =?us-ascii?Q?V2+9qIyh9QEP/JiP4QJ1a10CUaasLjUKfFEHk0+VOAhnTuCkmp3MpP1UIUtc?= =?us-ascii?Q?8ZmLcWautKBKhVCHlwzDHRQoS49eMnNSW/Rv+AebQE0Qrzft4R3jvX/zXwCO?= =?us-ascii?Q?zjS4AiSaGxp2PFCGdA/aymHCCWz1dacHFTc65P4dP8m37fZrp11zJoeJNoog?= =?us-ascii?Q?U6VmBwvR/ouzRJnudI+MDf8S9O1cAVlhK8UfC+FXDC3VKGBP7JLExrOoQnVV?= =?us-ascii?Q?CUuozvad4D2Cg6wYPIx13SGkX0n3Eu8t7xNFoiawxSSbUVso2tJvPrln6qek?= =?us-ascii?Q?JR3bPuIL12/2xts50ZLR3/s2wMVGkKHhw5ejlRuk/FrsXP1rcNDRAOLQ588f?= =?us-ascii?Q?2NPk2KtScM/u6AAMy5mkv1YF0DXWIuOL6QZKR8gU2Xr/ZjRXXW8FUAF2eG+h?= =?us-ascii?Q?QVvFRufA7cDxlb0wtLqE5lYddbL6QF76lpytLD4DBPPycbOlqxvi5cEDdTp8?= =?us-ascii?Q?2BL9Bqm11ihXWeqEJkRvTXz4C8hCjwHQ/11u5FwM5wcI6K7zoQTfbaApTL6M?= =?us-ascii?Q?/EB1VRQLfb+KUNvPmTjjhmviaX5Nz+UUwsOMxHtAnYvMKr8y/ClxEpCG6oX0?= =?us-ascii?Q?FFuU+mLOHjHQaMtNgsNt1CorC/dCQ49g63T5xOH5X8orjVsS7bdiNnJ2I7PE?= =?us-ascii?Q?xvAoTvBEW8XPl3QZf6PsRVxtQcIN2MXjX1UzEegDNssNl1S67+D+9ES5VUSf?= =?us-ascii?Q?KKquBlIJ7HIeo4qe3jvk/4pylwmJS2VP+zUSCchLouUayE/AHMmwat/1ZGAt?= =?us-ascii?Q?7e0G3R9G+s0DKRX1PunP987JtSkacrYBwoBwA8SAV40F6YMUflFZoQjJJg/U?= =?us-ascii?Q?3EiadgYFUYKq0Xtmtl+Bbr4nB7I7dPVqSNbVQhLuaVuKd4pbEHn8A9l/3UVs?= =?us-ascii?Q?8O9RVV/QlDMdqCVk8n0Kua68+iuJKP51NPQ9ZP/fdEEC5rL6DQEsGlCqbgim?= =?us-ascii?Q?ILSJfc/WqnXShQgsOjn+I2pGCz0mJvoNPWzCc7NUxDwwn3TtvGFX+tbngftc?= =?us-ascii?Q?DmzrzQrKC+XtyYUAtILVO/OsYDKd2dAUkdpBpv+zeaZv?= Content-Type: text/plain; charset="us-ascii" Content-ID: <6F6BA5057CCE1D4092E8926036436D03@prod.exchangelabs.com> Content-Transfer-Encoding: quoted-printable List-Id: Discussions about the use of FreeBSD-current List-Archive: https://lists.freebsd.org/archives/freebsd-current List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-current@FreeBSD.org MIME-Version: 1.0 X-OriginatorOrg: mit.edu X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: SA3PR01MB8450.prod.exchangelabs.com X-MS-Exchange-CrossTenant-Network-Message-Id: 6baead10-b926-486d-b08a-08dd1d5679e1 X-MS-Exchange-CrossTenant-originalarrivaltime: 15 Dec 2024 22:19:00.5633 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: r+x60lbE0D64T6xPS+5nD4e76E5DsGBfBGWNDgZwKjaBbmh+c/AWKRIoceLgftN0 X-MS-Exchange-Transport-CrossTenantHeadersStamped: CO1PR01MB8844 X-Spamd-Result: default: False [-6.00 / 15.00]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; NEURAL_HAM_LONG(-1.00)[-1.000]; DWL_DNSWL_LOW(-1.00)[mit.edu:dkim]; ARC_ALLOW(-1.00)[microsoft.com:s=arcselector10001:i=1]; NEURAL_HAM_SHORT(-1.00)[-0.999]; DMARC_POLICY_ALLOW(-0.50)[mit.edu,none]; R_SPF_ALLOW(-0.20)[+ip4:40.92.0.0/15]; R_DKIM_ALLOW(-0.20)[mit.edu:s=selector2]; MIME_GOOD(-0.10)[text/plain]; MISSING_XM_UA(0.00)[]; MIME_TRACE(0.00)[0:+]; RCPT_COUNT_ONE(0.00)[1]; ASN(0.00)[asn:8075, ipnet:40.80.0.0/12, country:US]; MID_RHS_MATCH_FROM(0.00)[]; MLMMJ_DEST(0.00)[freebsd-current@freebsd.org]; FROM_EQ_ENVFROM(0.00)[]; FROM_HAS_DN(0.00)[]; RCVD_IN_DNSWL_NONE(0.00)[40.93.201.92:from]; RCVD_COUNT_TWO(0.00)[2]; TO_DN_ALL(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; RCVD_TLS_LAST(0.00)[]; DKIM_TRACE(0.00)[mit.edu:+] X-Rspamd-Queue-Id: 4YBHY35Kkdz4pP5 X-Spamd-Bar: ----- My ARM server crashed while running "make installworld installkernel". The message is panic: Memory modified after free 0xffffa00006305e60 (16, malloc-16, devbuf= ) + 0 =3D deadc0dedeadc006 The stack trace goes through tmpfs, which could be an innocent victim. The other filesystems are ZFS. There are a lot of USB devices connected. The last commit from main in the kernel is fe291141486acf27ed1c8eed791ba989= 7f84c3f0. The local changes should not affect the kernel on this machine. Is there anything likely to be useful in the crash dump? The rest of the message is the start of core.txt.6. striatus dumped core - see /var/crash/vmcore.6 Fri Dec 13 19:29:06 EST 2024 FreeBSD striatus 15.0-CURRENT FreeBSD 15.0-CURRENT #3 striatus-n273968-f25f= d2c8374a: Sun Dec 1 03:17:23 EST 2024 jfc@striatus:/usr/obj/usr/src/ar= m64.aarch64/sys/STRIATUS arm64 panic: Memory modified after free 0xffffa00006305e60 (16, malloc-16, devbuf= ) + 0 =3D deadc0dedeadc006 Reading symbols from /boot/kernel/kernel... Reading symbols from /usr/lib/debug//boot/kernel/kernel.debug... Reading symbols from /boot/kernel/cryptodev.ko... Reading symbols from /usr/lib/debug//boot/kernel/cryptodev.ko.debug... Reading symbols from /boot/kernel/ig4.ko... Reading symbols from /usr/lib/debug//boot/kernel/ig4.ko.debug... Reading symbols from /boot/kernel/uftdi.ko... Reading symbols from /usr/lib/debug//boot/kernel/uftdi.ko.debug... Reading symbols from /boot/kernel/ucom.ko... Reading symbols from /usr/lib/debug//boot/kernel/ucom.ko.debug... Reading symbols from /boot/kernel/uchcom.ko... Reading symbols from /usr/lib/debug//boot/kernel/uchcom.ko.debug... Reading symbols from /boot/kernel/if_axge.ko... Reading symbols from /usr/lib/debug//boot/kernel/if_axge.ko.debug... Reading symbols from /boot/kernel/mac_ntpd.ko... Reading symbols from /usr/lib/debug//boot/kernel/mac_ntpd.ko.debug... Reading symbols from /boot/kernel/filemon.ko... Reading symbols from /usr/lib/debug//boot/kernel/filemon.ko.debug... Reading symbols from /boot/kernel/nullfs.ko... Reading symbols from /usr/lib/debug//boot/kernel/nullfs.ko.debug... Reading symbols from /boot/kernel/fdescfs.ko... Reading symbols from /usr/lib/debug//boot/kernel/fdescfs.ko.debug... 0xffff0000006ddb88 in doadump (textdump=3D0, textdump@entry=3D3220761328) at /usr/src/sys/kern/kern_shutdown.c:404 404 dump_savectx(); (kgdb) #0 0xffff0000006ddb88 in doadump (textdump=3D0, textdump@entry=3D32= 20761328) at /usr/src/sys/kern/kern_shutdown.c:404 error =3D 0 coredump =3D #1 0xffff0000002f84bc in db_dump (dummy=3D,=20 dummy2=3D, dummy3=3D, dummy4=3D) at /usr/src/sys/ddb/db_command.c:596 error =3D #2 0xffff0000002f8270 in db_command (last_cmdp=3D,=20 cmd_table=3D, dopager=3Dtrue) at /usr/src/sys/ddb/db_command.c:508 modif =3D "\000\353\370\277\000\000\377\377\000\353\370\277\000\000= \377\377\000@\000\001\000\000\377\377\310\377\377\377\000\000\000\000\200\3= 53\370\277\000\000\377\377p\255/\000\000\000\377\377\000\000\000\000\000\00= 0\000\000\000\320!\001\000\000\377\377\200\353\370\277\000\000\377\377|\255= /\000\000\000\377\377\000\000\000\000\000\000\000\0000\340!\001\000\000\377= \377\340\353\370\277\000\000\377\377t\260/\000\000\000\377\377\000`\b\001\0= 00\000\377\377" addr =3D -281474969178324 count =3D -1 have_addr =3D cmd =3D 0xffff000000faff60 t =3D result =3D #3 0xffff0000002f7f34 in db_command_loop () at /usr/src/sys/ddb/db_command.c:555 No locals. #4 0xffff0000002fbfb4 in db_trap (type=3D, code=3D) at /usr/src/sys/ddb/db_main.c:267 jb =3D {{_jb =3D {18446462601953602608,=20 -5192240428643675738518913775244240,=20 -5192296467524930435797529359615502,=20 -5192296477290489174466776304776360,=20 -5192296468505116628898160085655552,=20 -5192237445959521374093222199402496,=20 -5192296590745196351457412900733128,=20 -5192237445966900071722702816613136,=20 79228161499693132067762662960,=20 -5192237445966900071722702816613136,=20 79228161499693132067762662960,=20 -5192296800790449699300821084607248,=20 -5192296718864917493094550124040768,=20 -5192296626485486292827088539877369,=20 -5192296728739902317609042133324512,=20 -5192296719202197761738255565787696,=20 -5192296719202197761738258752417864, -184467440771455254527,= =20 26615710863082138512284773984,=20 -5192296765144699321027431923913328,=20 -5192296765145086702371508068548598,=20 -5192296507247853976218498451492864,=20 -5192296734691486038574397028504128,=20 -5192296734691486038574397028504128,=20 -5192296734691504485036998982107126,=20 -5192296668329914529214643795595728,=20 -5192237445951128105258209394032640,=20 -5192296555040877560468520940077056,=20 -5192237445949910620149344563625983,=20 -5192296718790835368894532564750720,=20 -5192296718790835368894532564750720,=20 -5192296734717680415159064591798720}}} bkpt =3D false watchpt =3D false prev_jb =3D 0x0 why =3D #5 0xffff00000072fc8c in kdb_trap (type=3D60, code=3D0, tf=3D) at /usr/src/sys/kern/subr_kdb.c:790 other_cpus =3D {__bits =3D {18446462598743929896, 18446462601953603= 544,=20 12, 5, 10, 0, 256, 18446462598750552064, 18446462601791911488,= =20 18446462601953603440, 0, 35088872438672, 35088965921264,=20 18446462601953603952, 13597801529282666180, 1844646260195360376= 0}} be =3D 0xffff000000fb0b58 intr =3D 704 did_stop_cpus =3D handled =3D #6 No locals. #7 kdb_enter (why=3D, msg=3D) at /usr/src/sys/kern/subr_kdb.c:556 No locals. #8 0xffff0000006dde98 in vpanic ( fmt=3D0xffff000000c4a3ca "Memory modified after free %p (%d, %s, %s) + = %d =3D %lx\n", ap=3D...) at /usr/src/sys/kern/kern_shutdown.c:967 buf =3D "Memory modified after free 0xffffa00006305e60 (16, malloc-= 16, devbuf) + 0 =3D deadc0dedeadc006\n", '\000' other_cpus =3D {__bits =3D {11, 0 }} td =3D 0xffff0000b655b640 newpanic =3D bootopt =3D 4 #9 0xffff0000006ddc7c in panic ( fmt=3D0x12 ) at /usr/src/sys/kern/kern_shutdown.c:892 ap =3D {__stack =3D 0xffff0000bff8f380, __gr_top =3D 0xffff0000bff8= f330,=20 __vr_top =3D 0x1, __gr_offs =3D -56, __vr_offs =3D 0} #10 0xffff000000a4873c in mtrash_ctor (mem=3D0xffffa00006305e60,=20 size=3D, arg=3D, flags=3D) at /usr/src/sys/vm/uma_dbg.c:179 zone =3D p =3D osize =3D 16 e =3D 0xffffa00006305e68 ksp =3D 0xffffa00006305e68 off =3D #11 0xffff000000a4068c in item_ctor (zone=3D0xffff000040405400,=20 uz_flags=3D, size=3D16, udata=3D, flags= =3D2,=20 item=3D0xffffa00006305e60) at /usr/src/sys/vm/uma_core.c:3515 skipdbg =3D #12 0xffff0000006acf70 in malloc (size=3Dsize@entry=3D10,=20 mtp=3D0xffff000000ff4788 , flags=3Dflags@entry=3D2) at /usr/src/sys/kern/kern_malloc.c:663 va =3D 0x0 indx =3D 0 zone =3D 0xffff000040405400 #13 0xffff000000603180 in tmpfs_alloc_dirent (tmp=3D0xffffa00001bb8300,=20 node=3D0xffffa000ec5472d0, name=3D0xffffa00051cb7030 "LC_COLLATE", len= =3D10,=20 de=3D) at /usr/src/sys/fs/tmpfs/tmpfs_subr.c:914 _size =3D 10 nde =3D 0xffffa0010f011680 _size =3D _malloc_item =3D _size =3D _malloc_item =3D #14 tmpfs_alloc_file (dvp=3Ddvp@entry=3D0xffffa0004a40c6e0,=20 vpp=3Dvpp@entry=3D0xffff0000bff8f708, vap=3D,=20 cnp=3Dcnp@entry=3D0xffff0000bff8f730, target=3D,=20 target@entry=3D0xffff0000bff8f4c0 "\360", ) at /usr/src/sys/fs/tmpfs/tmpfs_subr.c:1245 node =3D 0xffffa000ec5472d0 tmp =3D 0xffffa00001bb8300 dnode =3D parent =3D error =3D de =3D #15 0xffff0000005fc344 in tmpfs_create (v=3D) at /usr/src/sys/fs/tmpfs/tmpfs_vnops.c:269 dvp =3D 0xffffa0004a40c6e0 vpp =3D 0xffff0000bff8f708 cnp =3D 0xffff0000bff8f730 vap =3D 0xffff000000d09fc8 error =3D #16 0xffff000000bdf7d0 in VOP_CREATE_APV ( vop=3D0xffff000000ff3f20 ,=20 a=3Da@entry=3D0xffff0000bff8f600) at vnode_if.c:242 rc =3D #17 0xffff0000007f19d0 in VOP_CREATE (dvp=3D0xffff00000141015c ,=20 vpp=3D0xffff0000bff8f708, cnp=3D0xffff0000bff8f730, vap=3D0xffff0000bff= 8f540) at ./vnode_if.h:131 a =3D {a_gen =3D {a_desc =3D 0xffff0000010da340 },= =20 a_dvp =3D 0xffffa0004a40c6e0, a_vpp =3D 0xffff0000bff8f708,=20 a_cnp =3D 0xffff0000bff8f730, a_vap =3D 0xffff0000bff8f540} #18 vn_open_cred (ndp=3Dndp@entry=3D0xffff0000bff8f6b0, flagp=3D,=20 flagp@entry=3D0xffff0000bff8f784, cmode=3D292,=20 vn_open_flags=3Dvn_open_flags@entry=3D16, cred=3D0xffffa0001f692400,=20 fp=3D) at /usr/src/sys/kern/vfs_vnops.c:285 vp =3D 0xffffa0000701a5f0 mp =3D 0xffff0000b6458b80 vat =3D {va_type =3D VREG, va_mode =3D 292, va_padding0 =3D 0,=20 va_uid =3D 4294967295, va_gid =3D 4294967295,=20 va_nlink =3D 18446744073709551615, va_fsid =3D 184467440737095516= 15,=20 va_fileid =3D 18446744073709551615, va_size =3D 18446744073709551= 615,=20 va_blocksize =3D -1, va_atime =3D {tv_sec =3D -1, tv_nsec =3D -1}= ,=20 va_mtime =3D {tv_sec =3D -1, tv_nsec =3D -1}, va_ctime =3D {tv_se= c =3D -1,=20 tv_nsec =3D -1}, va_birthtime =3D {tv_sec =3D -1, tv_nsec =3D -= 1},=20 va_gen =3D 18446744073709551615, va_flags =3D 1844674407370955161= 5,=20 va_rdev =3D 18446744073709551615, va_bytes =3D 184467440737095516= 15,=20 va_filerev =3D 0, va_vaflags =3D 0, va_spare =3D 0} first_open =3D false error =3D fmode =3D vap =3D #19 0xffff0000007e85b0 in openatfp (td=3D0xffff0000b655b640,=20 dirfd=3D,=20 path=3D0x1fe942f24678 , pathseg=3DUIO_USERSPACE, pathseg@entry=3D(unknown: 0xbff8f800), fla= gs=3D1538,=20 mode=3D33060, fpp=3D0x0, fpp@entry=3D0xffff0000bff8f800) at /usr/src/sys/kern/vfs_syscalls.c:1211 fp =3D 0xffffa0000701a5f0 nd =3D { ni_dirp =3D 0x1fe942f24678 , ni_segflg =3D UIO_USERSPACE, ni_rightsneeded =3D 0xffff0= 000bff8f6a0,=20 ni_startdir =3D 0x0, ni_rootdir =3D 0xffffa00006ecd898, ni_topdir= =3D 0x0,=20 ni_dirfd =3D -100, ni_lcf =3D 0, ni_filecaps =3D {fc_rights =3D { cr_rights =3D {0, 0}}, fc_ioctls =3D 0x0, fc_nioctls =3D -1,= =20 fc_fcntls =3D 0}, ni_vp =3D 0x0, ni_dvp =3D 0xffffa0004a40c6e0,= =20 ni_resflags =3D 1, ni_debugflags =3D 3, ni_loopcnt =3D 0, ni_path= len =3D 59,=20 ni_next =3D 0xffffa00051cb703a "", ni_cnd =3D {cn_flags =3D 28131= 3359,=20 cn_cred =3D 0xffffa0001f692400, cn_nameiop =3D CREATE,=20 cn_lkflags =3D 524288,=20 cn_pnbuf =3D 0xffffa00051cb7000 "/tmp/install.KlmLI038ne/locale= /nl_NL.ISO8859-15/LC_COLLATE", cn_nameptr =3D 0xffffa00051cb7030 "LC_COLLAT= E",=20 cn_namelen =3D 10}, ni_cap_tracker =3D { tqh_first =3D 0xffffffffffffffff, tqh_last =3D 0xffffffffffffff= ff},=20 ni_dvp_seqc =3D 1689292205, ni_vp_seqc =3D 0} indx =3D -1 p =3D rights =3D {cr_rights =3D {, 288230376151711744}} fdp =3D 0xffff0000e701fc90 pdp =3D 0xffffa00006477b00 error =3D vp =3D fcaps =3D cmode =3D #20 0xffff0000007e8330 in kern_openat (td=3D0x12, dirfd=3D21037404,=20 path=3D0xffff000000d09fc8 "/usr/src/sys/kern/kern_cons.c",=20 pathseg=3DUIO_USERSPACE, flags=3D115, mode=3D7572444) at /usr/src/sys/kern/vfs_syscalls.c:1316 No locals. #21 0xffff0000e68f8cac in filemon_wrapper_openat (td=3D0xffff0000b655b640,= =20 uap=3D0xffff0000b655ba40) at /usr/src/sys/dev/filemon/filemon_wrapper.c= :229 ret =3D #22 0xffff000000ac11c8 in syscallenter (td=3D0xffff0000b655b640) at /usr/src/sys/arm64/arm64/../../kern/subr_syscall.c:189 se =3D 0xffff000001002040 sa =3D 0xffff0000b655ba30 p =3D error =3D sy_thr_static =3D true traced =3D _audit_entered =3D #23 svc_handler (td=3D0xffff0000b655b640, frame=3D) at /usr/src/sys/arm64/arm64/trap.c:198 No locals. #24 do_el0_sync (td=3D0xffff0000b655b640, frame=3D) at /usr/src/sys/arm64/arm64/trap.c:658 far =3D esr =3D exception =3D bp_harden =3D dfsc =3D #25 No locals. #26 0x00001fe9c95969f0 in ?? () No symbol table info available. #27 0x00001fe9c6f48c0c in ?? () No symbol table info available. Backtrace stopped: previous frame identical to this frame (corrupt stack?) (kgdb) (kgdb) Tracing command "pagedaemon\000\000\000\000\000\000\000\000\0= 00" pid 8 tid 100107 (CPU 0) #0 0xffff000000aa7614 in ipi_stop (dummy=3D) at /usr/src/sys/arm64/arm64/mp_machdep.c:337 #1 0xffff000000a8a748 in arm_gic_intr (arg=3D0xffffa00001baf100,=20 arg@entry=3D) at /usr/src/sys/arm/arm/gic.c:582 #2 0xffff000000a84410 in intr_irq_handler (tf=3D0xffff0000bfe27240,=20 rootnum=3D) at /usr/src/sys/kern/subr_intr.c:360 #3 #4 trash_ctor (mem=3D0xffffa00107fb5000, size=3D4096, arg=3D0x0, flags=3D0= ) at /usr/src/sys/vm/uma_dbg.c:79 #5 trash_fini (mem=3D0xffffa00107fb5000, size=3D4096) at /usr/src/sys/vm/uma_dbg.c:133 #6 0xffff000000a465b4 in keg_free_slab (keg=3Dkeg@entry=3D0xffff0000c15868= 00,=20 slab=3D0xffffa000a4032558, start=3D) at /usr/src/sys/vm/uma_core.c:1621 #7 0xffff000000a464d0 in keg_drain_domain (keg=3Dkeg@entry=3D0xffff0000c15= 86800,=20 domain=3Ddomain@entry=3D0) at /usr/src/sys/vm/uma_core.c:1686 #8 0xffff000000a43220 in keg_drain (keg=3D0xffff0000c1586800,=20 domain=3D) at /usr/src/sys/vm/uma_core.c:1706 #9 zone_reclaim (zone=3Dzone@entry=3D0xffff0000c1588800, domain=3Ddomain@e= ntry=3D-1,=20 waitok=3D, waitok@entry=3D1, drain=3D) at /usr/src/sys/vm/uma_core.c:1731 #10 0xffff000000a42748 in uma_zone_reclaim_domain (zone=3D0xffff0000c158880= 0,=20 req=3D3, domain=3D-1) at /usr/src/sys/vm/uma_core.c:3090 #11 uma_reclaim_domain_cb (zone=3D0xffff0000c1588800, arg=3D= ) at /usr/src/sys/vm/uma_core.c:5310 #12 zone_foreach_unlocked (zfunc=3D, arg=3D) at /usr/src/sys/vm/uma_core.c:3091 #13 zone_foreach (zfunc=3D, arg=3D) at /usr/src/sys/vm/uma_core.c:3112 #14 uma_reclaim_domain (req=3Dreq@entry=3D3, domain=3D-1) at /usr/src/sys/vm/uma_core.c:5334 #15 0xffff000000a4266c in uma_reclaim (req=3D133910528, req@entry=3D3) at /usr/src/sys/vm/uma_core.c:5317 #16 0xffff000000a71168 in vm_pageout_lowmem () at /usr/src/sys/vm/vm_pageout.c:2041 #17 vm_pageout_worker (arg=3D) at /usr/src/sys/vm/vm_pageout.c:2133 #18 0xffff000000a70d48 in vm_pageout () at /usr/src/sys/vm/vm_pageout.c:236= 6 #19 0xffff00000068e25c in fork_exit (callout=3D0xffff000000a70b60 ,=20 arg=3D0x0, frame=3D0xffff0000bfe27a00) at /usr/src/sys/kern/kern_fork.c= :1151 #20 Tracing command "idle\000l", '\000' pid 11 tid 100004 (C= PU 1) #0 0xffff000000aa7614 in ipi_stop (dummy=3D) at /usr/src/sys/arm64/arm64/mp_machdep.c:337 #1 0xffff000000a8a748 in arm_gic_intr (arg=3D0xffffa00001baf100,=20 arg@entry=3D) at /usr/src/sys/arm/arm/gic.c:582 #2 0xffff000000a84410 in intr_irq_handler (tf=3D0xffff0000bfc1a6e0,=20 rootnum=3D) at /usr/src/sys/kern/subr_intr.c:360 #3 #4 cpu_idle (busy=3D) at /usr/src/sys/arm64/arm64/machdep.c= :282 #5 0xffff000000712680 in sched_idletd (dummy=3Ddummy@entry=3D0x0) at /usr/src/sys/kern/sched_ule.c:3058 #6 0xffff00000068e25c in fork_exit ( callout=3D0xffff0000007121e0 , arg=3D0x0,=20 frame=3D0xffff0000bfc1aa00) at /usr/src/sys/kern/kern_fork.c:1151 #7 Tracing command "cp", '\000' pid 73242 tid 100204 (CPU 2= ) #0 0xffff0000006ddb88 in doadump (textdump=3D0, textdump@entry=3D322076132= 8) at /usr/src/sys/kern/kern_shutdown.c:404 #1 0xffff0000002f84bc in db_dump (dummy=3D,=20 dummy2=3D, dummy3=3D, dummy4=3D) at /usr/src/sys/ddb/db_command.c:596 #2 0xffff0000002f8270 in db_command (last_cmdp=3D,=20 cmd_table=3D, dopager=3Dtrue) at /usr/src/sys/ddb/db_command.c:508 #3 0xffff0000002f7f34 in db_command_loop () at /usr/src/sys/ddb/db_command.c:555 #4 0xffff0000002fbfb4 in db_trap (type=3D, code=3D) at /usr/src/sys/ddb/db_main.c:267 #5 0xffff00000072fc8c in kdb_trap (type=3D60, code=3D0, tf=3D) at /usr/src/sys/kern/subr_kdb.c:790 #6 #7 kdb_enter (why=3D, msg=3D) at /usr/src/sys/kern/subr_kdb.c:556 #8 0xffff0000006dde98 in vpanic ( fmt=3D0xffff000000c4a3ca "Memory modified after free %p (%d, %s, %s) + = %d =3D %lx\n", ap=3D...) at /usr/src/sys/kern/kern_shutdown.c:967 #9 0xffff0000006ddc7c in panic ( fmt=3D0x12 ) at /usr/src/sys/kern/kern_shutdown.c:892 #10 0xffff000000a4873c in mtrash_ctor (mem=3D0xffffa00006305e60,=20 size=3D, arg=3D, flags=3D) at /usr/src/sys/vm/uma_dbg.c:179 #11 0xffff000000a4068c in item_ctor (zone=3D0xffff000040405400,=20 uz_flags=3D, size=3D16, udata=3D, flags= =3D2,=20 item=3D0xffffa00006305e60) at /usr/src/sys/vm/uma_core.c:3515 #12 0xffff0000006acf70 in malloc (size=3Dsize@entry=3D10,=20 mtp=3D0xffff000000ff4788 , flags=3Dflags@entry=3D2) at /usr/src/sys/kern/kern_malloc.c:663 #13 0xffff000000603180 in tmpfs_alloc_dirent (tmp=3D0xffffa00001bb8300,=20 node=3D0xffffa000ec5472d0, name=3D0xffffa00051cb7030 "LC_COLLATE", len= =3D10,=20 de=3D) at /usr/src/sys/fs/tmpfs/tmpfs_subr.c:914 #14 tmpfs_alloc_file (dvp=3Ddvp@entry=3D0xffffa0004a40c6e0,=20 vpp=3Dvpp@entry=3D0xffff0000bff8f708, vap=3D,=20 cnp=3Dcnp@entry=3D0xffff0000bff8f730, target=3D,=20 target@entry=3D0xffff0000bff8f4c0 "\360", ) at /usr/src/sys/fs/tmpfs/tmpfs_subr.c:1245 #15 0xffff0000005fc344 in tmpfs_create (v=3D) at /usr/src/sys/fs/tmpfs/tmpfs_vnops.c:269 #16 0xffff000000bdf7d0 in VOP_CREATE_APV ( vop=3D0xffff000000ff3f20 ,=20 a=3Da@entry=3D0xffff0000bff8f600) at vnode_if.c:242 #17 0xffff0000007f19d0 in VOP_CREATE (dvp=3D0xffff00000141015c ,=20 vpp=3D0xffff0000bff8f708, cnp=3D0xffff0000bff8f730, vap=3D0xffff0000bff= 8f540) at ./vnode_if.h:131 #18 vn_open_cred (ndp=3Dndp@entry=3D0xffff0000bff8f6b0, flagp=3D,=20 flagp@entry=3D0xffff0000bff8f784, cmode=3D292,=20 vn_open_flags=3Dvn_open_flags@entry=3D16, cred=3D0xffffa0001f692400,=20 fp=3D) at /usr/src/sys/kern/vfs_vnops.c:285 #19 0xffff0000007e85b0 in openatfp (td=3D0xffff0000b655b640,=20 dirfd=3D,=20 path=3D0x1fe942f24678 , pathseg=3DUIO_USERSPACE, pathseg@entry=3D(unknown: 0xbff8f800), fla= gs=3D1538,=20 mode=3D33060, fpp=3D0x0, fpp@entry=3D0xffff0000bff8f800) at /usr/src/sys/kern/vfs_syscalls.c:1211 #20 0xffff0000007e8330 in kern_openat (td=3D0x12, dirfd=3D21037404,=20 path=3D0xffff000000d09fc8 "/usr/src/sys/kern/kern_cons.c",=20 pathseg=3DUIO_USERSPACE, flags=3D115, mode=3D7572444) at /usr/src/sys/kern/vfs_syscalls.c:1316 #21 0xffff0000e68f8cac in filemon_wrapper_openat (td=3D0xffff0000b655b640,= =20 uap=3D0xffff0000b655ba40) at /usr/src/sys/dev/filemon/filemon_wrapper.c= :229 #22 0xffff000000ac11c8 in syscallenter (td=3D0xffff0000b655b640) at /usr/src/sys/arm64/arm64/../../kern/subr_syscall.c:189 #23 svc_handler (td=3D0xffff0000b655b640, frame=3D) at /usr/src/sys/arm64/arm64/trap.c:198 #24 do_el0_sync (td=3D0xffff0000b655b640, frame=3D) at /usr/src/sys/arm64/arm64/trap.c:658 #25 #26 0x00001fe9c95969f0 in ?? () #27 0x00001fe9c6f48c0c in ?? () Backtrace stopped: previous frame identical to this frame (corrupt stack?) Tracing command "idle\000l", '\000' pid 11 tid 100006 (C= PU 3) #0 0xffff000000aa7614 in ipi_stop (dummy=3D) at /usr/src/sys/arm64/arm64/mp_machdep.c:337 #1 0xffff000000a8a748 in arm_gic_intr (arg=3D0xffffa00001baf100,=20 arg@entry=3D) at /usr/src/sys/arm/arm/gic.c:582 #2 0xffff000000a84410 in intr_irq_handler (tf=3D0xffff0000bfc106e0,=20 rootnum=3D) at /usr/src/sys/kern/subr_intr.c:360 #3 #4 cpu_idle (busy=3D) at /usr/src/sys/arm64/arm64/machdep.c= :282 #5 0xffff000000712680 in sched_idletd (dummy=3Ddummy@entry=3D0x0) at /usr/src/sys/kern/sched_ule.c:3058 #6 0xffff00000068e25c in fork_exit ( callout=3D0xffff0000007121e0 , arg=3D0x0,=20 frame=3D0xffff0000bfc10a00) at /usr/src/sys/kern/kern_fork.c:1151 #7