Memory modified after free (Most recently used by GEOM)

[Jun Kuriyama]

This is yesterday's kernel.

# This box cannot back to online until I do hardware reset at monday.


-----
Memory modified after free 0xcac80000(508) val=56204e49 @ 0xcac80000
panic: Most recently used by GEOM

cpuid = 0; 
KDB: enter: panic
[thread 100257]
Stopped at      kdb_enter+0x2b: nop
db> trace
kdb_enter(c0677962) at kdb_enter+0x2b
panic(c068d917,c0672fe3,c068d8e8,cac80000,1fc) at panic+0x131
mtrash_ctor(cac80000,200,0,2) at mtrash_ctor+0x4d
uma_zalloc_arg(c10339a0,0,2) at uma_zalloc_arg+0x14c
malloc(188,c06ad9e0,2,3,c8e41580) at malloc+0xae
elf32_load_file(c884b1bc,dcf740f4,e5b45ab0,e5b45bd0,1000) at elf32_load_file+0x45
exec_elf32_imgact(e5b45b94,c050e7ca,c06e1c00,0,0) at exec_elf32_imgact+0x4eb
kern_execve(c8e41580,80690fc,8069138,8069144,0) at kern_execve+0x34a
execve(c8e41580,e5b45d14,3,1,282) at execve+0x18
syscall(2f,2f,2f,80690fc,8069138) at syscall+0x217
Xint0x80_syscall() at Xint0x80_syscall+0x1f
--- syscall (59, FreeBSD ELF32, execve), eip = 0x2812b003, esp = 0xbfbfe2cc, ebp = 0xbfbfe2f8 ---


-- 
Jun Kuriyama <kuriyama at imgsrc.co.jp> // IMG SRC, Inc.
             <kuriyama at FreeBSD.org> // FreeBSD Project