kern/157287: re0: INVARIANTS panic (Memory modified after free)

[Joerg Wunsch]

Here's a stack trace:

db> bt
Tracing pid 0 tid 100000 td 0xc088c130
kdb_enter(c07f7e81,c07f7e81,c08173ce,c0c206f8,0,...) at kdb_enter+0x3a
panic(c08173ce,c07ef54a,ffc,3403c04e,c6eec880,...) at panic+0x134
mtrash_ctor(c6eec000,1000,0,102,c6f10700,...) at mtrash_ctor+0x77
uma_zalloc_arg(c118a700,0,102,2,102,...) at uma_zalloc_arg+0x109
malloc(1000,c0849170,102,c077cabc,44,...) at malloc+0xe4
bus_dmamem_alloc(c6f10700,c6f230c8,c,c6f230c4,ffffffff,...) at bus_dmamem_alloc+0x8a
re_attach(c6f10c00,c6e04860,c0842288,c07faafa,80000000,...) at re_attach+0x118a
device_attach(c6f10c00,4,c07fa9dc,a79) at device_attach+0x36f
device_probe_and_attach(c6f10c00,c6e5cb00,c0c20900,c0b57614,c6f10c80,...) at device_probe_and_attach+0x4e
bus_generic_attach(c6f10c80,c6e2f160,1,c0b57050,0,...) at bus_generic_attach+0x19
acpi_pci_attach(c6f10c80,c6f10c80,ffffffff,c07faafa,80000000,...) at acpi_pci_attach+0x194
device_attach(c6f10c80,4,c07fa9dc,a79) at device_attach+0x36f
device_probe_and_attach(c6f10c80,c6e4c380,c0c20998,c0b57944,c6e5cb00,...) at device_probe_and_attach+0x4e
bus_generic_attach(c6e5cb00,c0b73688,3,c0c20988,c6e2f160,...) at bus_generic_attach+0x19
acpi_pcib_attach(c6e5cb00,c6f10dd0,3,c0c209b0,c6e2f160,...) at acpi_pcib_attach+0x194
acpi_pcib_pci_attach(c6e5cb00,c6e5cb00,ffffffff,c07faafa,80000000,...) at acpi_pcib_pci_attach+0x9d
device_attach(c6e5cb00,4,c07fa9dc,a79) at device_attach+0x36f
device_probe_and_attach(c6e5cb00,c6e42680,c0c20a64,c0b57614,c6e4c380,...) at device_probe_and_attach+0x4e
bus_generic_attach(c6e4c380,c6e29900,1,c0b57050,0,...) at bus_generic_attach+0x19
acpi_pci_attach(c6e4c380,c6dfe860,c0842288,c07faafa,80000000,...) at acpi_pci_attach+0x194
device_attach(c6e4c380,4,c07fa9dc,a79) at device_attach+0x36f
device_probe_and_attach(c6e4c380,c6dae600,c0c20afc,c0b57944,c6e42680,...) at device_probe_and_attach+0x4e
bus_generic_attach(c6e42680,c0b73688,0,c0c20aec,c6e29900,...) at bus_generic_attach+0x19
acpi_pcib_attach(c6e42680,c6e544b4,0,c0c20b1c,2,...) at acpi_pcib_attach+0x194
acpi_pcib_acpi_attach(c6e42680,c6e0c860,c0842288,c07faafa,80000000,...) at acpi_pcib_acpi_attach+0x246
device_attach(c6e42680,4,c07fa9dc,a79) at device_attach+0x36f
device_probe_and_attach(c6e42680,3,c0c20c18,c0b550d7,c6dae600,...) at device_probe_and_attach+0x4e
bus_generic_attach(c6dae600,c0b72e09,100000,dff00000,3,...) at bus_generic_attach+0x19
acpi_attach(c6dae600,c6e00860,c0842288,c07faafa,80000000,...) at acpi_attach+0xc87
device_attach(c6dae600,4,c07fa9dc,a79) at device_attach+0x36f
device_probe_and_attach(c6dae600,c6daec00,c0c20ca4,c0b6821e,c6daec00,...) at device_probe_and_attach+0x4e
bus_generic_attach(c6daec00,a,c0b730be,0,c6cff435,...) at bus_generic_attach+0x19
nexus_acpi_attach(c6daec00,c6e1e060,c0842288,c07faafa,80000000,...) at nexus_acpi_attach+0x7e
device_attach(c6daec00,4,c07fa9dc,a79) at device_attach+0x36f
device_probe_and_attach(c6daec00,c6d2a600,c6d2a600,c6d00520,c6d2a600,...) at device_probe_and_attach+0x4e
bus_generic_new_pass(c6d2a600,c6dad000,c08421b8,c6cdfd74,fffffff,...) at bus_generic_new_pass+0xc5
bus_set_pass(7fffffff,c0c20d5c,c077a80c,c07f9ced,c0c20d78,...) at bus_set_pass+0x81
root_bus_configure(c07f9ced,c0c20d78,c053425c,0,c1ec00,...) at root_bus_configure+0x12
configure(0,c1ec00,c1ec00,c1e000,c25000,...) at configure+0xc
mi_startup() at mi_startup+0xac
begin() at begin+0x2c

(Taking a coredump for analysis in kgdb is not possible as the dump
device has not been configured yet at that point.)

-- 
cheers, J"org               .-.-.   --... ...--   -.. .  DL8DTL

http://www.sax.de/~joerg/                        NIC: JW11-RIPE
Never trust an operating system you don't have sources for. ;-)