From owner-freebsd-sparc64@FreeBSD.ORG  Tue Sep 21 06:44:42 2004
Return-Path: <owner-freebsd-sparc64@FreeBSD.ORG>
Delivered-To: freebsd-sparc64@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id BD5AC16A4CE
	for <sparc64@freeBSD.org>; Tue, 21 Sep 2004 06:44:42 +0000 (GMT)
Received: from obsecurity.dyndns.org
	(CPE0050040655c8-CM00111ae02aac.cpe.net.cable.rogers.com [69.194.102.143])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 989F643D1F
	for <sparc64@freeBSD.org>; Tue, 21 Sep 2004 06:44:42 +0000 (GMT)
	(envelope-from kris@obsecurity.org)
Received: by obsecurity.dyndns.org (Postfix, from userid 1000)
	id A64CF514AE; Mon, 20 Sep 2004 23:44:50 -0700 (PDT)
Date: Mon, 20 Sep 2004 23:44:50 -0700
From: Kris Kennaway <kris@obsecurity.org>
To: sparc64@freeBSD.org
Message-ID: <20040921064450.GA54998@xor.obsecurity.org>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="k+w/mQv8wyuph6w0"
Content-Disposition: inline
User-Agent: Mutt/1.4.2.1i
Subject: Memory modified after free 0xfffff8001b210e00(504) val=deadc0dd @
	0xfffff8001b21
X-BeenThere: freebsd-sparc64@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Porting FreeBSD to the Sparc <freebsd-sparc64.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-sparc64>,
	<mailto:freebsd-sparc64-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-sparc64>
List-Post: <mailto:freebsd-sparc64@freebsd.org>
List-Help: <mailto:freebsd-sparc64-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-sparc64>,
	<mailto:freebsd-sparc64-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 21 Sep 2004 06:44:42 -0000


--k+w/mQv8wyuph6w0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

I just got this panic on an SMP sparc package machine running 6.0:

Memory modified after free 0xfffff8001b210e00(504) val=deadc0dd @ 0xfffff8001b210f20
panic: Most recently used by file desc
cpuid = 0
KDB: enter: panic
[thread 100195]
Stopped at      kdb_enter+0x38: ta              %xcc, 1
db> trace
panic() at panic+0x19c
mtrash_ctor() at mtrash_ctor+0x7c
uma_zalloc_arg() at uma_zalloc_arg+0x3e8
malloc() at malloc+0xa8
fdinit() at fdinit+0x40
fdcopy() at fdcopy+0x28
fork1() at fork1+0x770
fork() at fork+0x10
syscall() at syscall+0x220
-- syscall (2, FreeBSD ELF64, fork) %o7=0x10fe00 --
userland() at 0x40643008
user trace: trap %o7=0x10fe00
pc 0x40643008, sp 0x7fdffffc3d1
pc 0x106e6c, sp 0x7fdffffc491
pc 0x1067d0, sp 0x7fdffffc561
pc 0x107110, sp 0x7fdffffc621
pc 0x10a3b4, sp 0x7fdffffc711
pc 0x109c78, sp 0x7fdffffc8a1
Dumping 512 MB (1 chunks)
  chunk at 0: 536870912 bytes panic: trap: fast data access mmu miss
cpuid = 0
KDB: enter: panic
[thread 100195]
Stopped at      kdb_enter+0x38: ta              %xcc, 1
db>

Kris

--k+w/mQv8wyuph6w0
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (FreeBSD)

iD8DBQFBT83iWry0BWjoQKURAiSeAKC+VUsVlCKs9BoVCXiPlzJCSQzPSACg+Orh
Jl2NrzCIYrXRppLUXr6d650=
=CD+p
-----END PGP SIGNATURE-----

--k+w/mQv8wyuph6w0--