From owner-freebsd-current@FreeBSD.ORG Tue Jan 31 21:22:11 2006 Return-Path: X-Original-To: freebsd-current@freebsd.org Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id E197F16A420 for ; Tue, 31 Jan 2006 21:22:11 +0000 (GMT) (envelope-from sgk@troutmask.apl.washington.edu) Received: from troutmask.apl.washington.edu (troutmask.apl.washington.edu [128.208.78.105]) by mx1.FreeBSD.org (Postfix) with ESMTP id 5FF6B43D70 for ; Tue, 31 Jan 2006 21:22:10 +0000 (GMT) (envelope-from sgk@troutmask.apl.washington.edu) Received: from troutmask.apl.washington.edu (localhost [127.0.0.1]) by troutmask.apl.washington.edu (8.13.4/8.13.4) with ESMTP id k0VLMAxk000955 for ; Tue, 31 Jan 2006 13:22:10 -0800 (PST) (envelope-from sgk@troutmask.apl.washington.edu) Received: (from sgk@localhost) by troutmask.apl.washington.edu (8.13.4/8.13.1/Submit) id k0VLMAi4000954 for freebsd-current@freebsd.org; Tue, 31 Jan 2006 13:22:10 -0800 (PST) (envelope-from sgk) Date: Tue, 31 Jan 2006 13:22:09 -0800 From: Steve Kargl To: freebsd-current@freebsd.org Message-ID: <20060131212209.GA870@troutmask.apl.washington.edu> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.4.2.1i Subject: panic: Memory modified after free X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 31 Jan 2006 21:22:12 -0000 The system is a dual proc Tyan K8S Pro with 12 GB of memory. The kernel is UP. This was recorded by hand. I have the crash dump. Memory modified after free 0xffffff02505e0c00(504) val=deadc0dd @ 0xffffff02505e0cd0 panic: Most recently used by DEVFS1 KDB: stack backtrace kdb_backtrace() at kdb_backtrace+0x37 panic() at panic+0x164 mtrash_ctor() at mtrash_ctor+0x70 uma_zalloc_arg() at uma_zalloc_arg+0x170 malloc() at malloc+0xf5 fdinit() at fdinit+0x20 fdcopy() at fdcopy+0x21 fork1() at fork1+0x624 vfork() at vork+0x1f syscall() at syscall+0x350 Xfast_syscall() at Xfast_syscall+0xa8 --- syscall(66, FreeBSD ELF64, vfork), rip = 0x2006aa6d, rsp=0x7ffffffdac0, rbp = 0 --- Hmmm.... troutmask:root[259] gdb /boot/kernel/kernel vmcore.0 GNU gdb 6.1.1 [FreeBSD] Copyright 2004 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "amd64-marcel-freebsd"... warning: "/usr/tmp/vmcore.0": no core file handler recognizes format, using defa ult Can't fetch registers from this type of core file Can't fetch registers from this type of core file #0 0x0000000000000000 in ?? () -- Steve