Attachment 239310 Details for Bug 267704 – realtek-re-kmod v1.97 panics

realtek-re-kmod v1.97 panics

realtek_panics.txt (text/plain), 18.65 KB, created by Austin Shafer on 2023-01-06 18:26:58 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Austin Shafer

Created: 2023-01-06 18:26:58 UTC

Size: 18.65 KB

patch

obsolete

>mick dumped core - see /var/crash/vmcore.0
>
>Fri Jan  6 12:07:27 EST 2023
>
>FreeBSD mick 14.0-CURRENT FreeBSD 14.0-CURRENT #18 main-n259955-45396fda8b73: Fri Jan  6 11:14:38 EST 2023     root@mick:/usr/obj/usr/freebsd-src/amd64.amd64/sys/GENERIC  amd64
>
>panic: Memory modified after free 0xfffff802d0430800(256) val=deadf5ee @ 0xfffff802d0430808
>
>GNU gdb (GDB) 12.1 [GDB v12.1 for FreeBSD]
>Copyright (C) 2022 Free Software Foundation, Inc.
>License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
>This is free software: you are free to change and redistribute it.
>There is NO WARRANTY, to the extent permitted by law.
>Type "show copying" and "show warranty" for details.
>This GDB was configured as "x86_64-portbld-freebsd14.0".
>Type "show configuration" for configuration details.
>For bug reporting instructions, please see:
><https://www.gnu.org/software/gdb/bugs/>.
>Find the GDB manual and other documentation resources online at:
>    <http://www.gnu.org/software/gdb/documentation/>.
>
>For help, type "help".
>Type "apropos word" to search for commands related to "word"...
>Reading symbols from /boot/kernel/kernel...
>Reading symbols from /usr/lib/debug//boot/kernel/kernel.debug...
>
>Unread portion of the kernel message buffer:
>panic: Memory modified after free 0xfffff802d0430800(256) val=deadf5ee @ 0xfffff802d0430808
>
>cpuid = 18
>time = 1673024801
>KDB: stack backtrace:
>db_trace_self_wrapper() at db_trace_self_wrapper+0x2b/frame 0xfffffe0108c22620
>vpanic() at vpanic+0x151/frame 0xfffffe0108c22670
>panic() at panic+0x43/frame 0xfffffe0108c226d0
>trash_ctor() at trash_ctor+0x49/frame 0xfffffe0108c226e0
>item_ctor() at item_ctor+0x108/frame 0xfffffe0108c22730
>tcp_default_output() at tcp_default_output+0x127d/frame 0xfffffe0108c22920
>tcp_output() at tcp_output+0x34/frame 0xfffffe0108c22940
>tcp_do_segment() at tcp_do_segment+0x25e1/frame 0xfffffe0108c22a30
>tcp_input_with_port() at tcp_input_with_port+0x114b/frame 0xfffffe0108c22b80
>tcp_input() at tcp_input+0xb/frame 0xfffffe0108c22b90
>ip_input() at ip_input+0x26c/frame 0xfffffe0108c22bf0
>netisr_dispatch_src() at netisr_dispatch_src+0xaf/frame 0xfffffe0108c22c50
>ether_demux() at ether_demux+0x162/frame 0xfffffe0108c22c80
>ether_nh_input() at ether_nh_input+0x402/frame 0xfffffe0108c22ce0
>netisr_dispatch_src() at netisr_dispatch_src+0xaf/frame 0xfffffe0108c22d40
>ether_input() at ether_input+0x99/frame 0xfffffe0108c22da0
>re_rxeof() at re_rxeof+0x442/frame 0xfffffe0108c22e00
>re_int_task_8125() at re_int_task_8125+0x137/frame 0xfffffe0108c22e40
>taskqueue_run_locked() at taskqueue_run_locked+0xaa/frame 0xfffffe0108c22ec0
>taskqueue_thread_loop() at taskqueue_thread_loop+0xc2/frame 0xfffffe0108c22ef0
>fork_exit() at fork_exit+0x80/frame 0xfffffe0108c22f30
>fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe0108c22f30
>--- trap 0, rip = 0, rsp = 0, rbp = 0 ---
>Uptime: 3m24s
>Dumping 1658 out of 32635 MB:..1%..11%..21%..31%..41%..51%..61%..71%..81%..91%
>
>__curthread () at /usr/freebsd-src/sys/amd64/include/pcpu_aux.h:59
>59		__asm("movq %%gs:%P1,%0" : "=r" (td) : "n" (offsetof(struct pcpu,
>(kgdb) #0  __curthread () at /usr/freebsd-src/sys/amd64/include/pcpu_aux.h:59
>#1  dump_savectx () at /usr/freebsd-src/sys/kern/kern_shutdown.c:405
>#2  0xffffffff80c15295 in dumpsys (di=0x0)
>    at /usr/freebsd-src/sys/x86/include/dump.h:87
>#3  doadump (textdump=<optimized out>)
>    at /usr/freebsd-src/sys/kern/kern_shutdown.c:434
>#4  kern_reboot (howto=260) at /usr/freebsd-src/sys/kern/kern_shutdown.c:541
>#5  0xffffffff80c156de in vpanic (fmt=<optimized out>, 
>    ap=ap@entry=0xfffffe0108c226b0)
>    at /usr/freebsd-src/sys/kern/kern_shutdown.c:979
>#6  0xffffffff80c15443 in panic (fmt=<unavailable>)
>    at /usr/freebsd-src/sys/kern/kern_shutdown.c:903
>#7  0xffffffff80f97ad9 in trash_ctor (mem=<unavailable>, size=<unavailable>, 
>    arg=<optimized out>, flags=<optimized out>)
>    at /usr/freebsd-src/sys/vm/uma_dbg.c:82
>#8  0xffffffff80f8fef8 in item_ctor (zone=0xfffffe003a3e5800, 
>    uz_flags=1124139008, size=256, udata=0xfffffe0108c227d8, flags=1, 
>    item=0xfffff802d0430800) at /usr/freebsd-src/sys/vm/uma_core.c:3450
>#9  0xffffffff80e0b17d in m_gethdr (how=1, type=1)
>    at /usr/freebsd-src/sys/sys/mbuf.h:1026
>#10 tcp_default_output (tp=<optimized out>, 
>    tp@entry=<error reading variable: value is not available>)
>    at /usr/freebsd-src/sys/netinet/tcp_output.c:1133
>#11 0xffffffff80e02e74 in tcp_output (tp=tp@entry=0xfffff8015ce47000)
>    at /usr/freebsd-src/sys/netinet/tcp_var.h:419
>#12 0xffffffff80e01951 in tcp_do_segment (m=0xfffff8016bae5000, 
>    m@entry=<error reading variable: value is not available>, 
>    th=<optimized out>, 
>    th@entry=<error reading variable: value is not available>, 
>    so=0xfffff80053457000, 
>    so@entry=<error reading variable: value is not available>, 
>    tp=0xfffff8015ce47000, 
>    tp@entry=<error reading variable: value is not available>, 
>    drop_hdrlen=52, 
>    drop_hdrlen@entry=<error reading variable: value is not available>, 
>    tlen=<optimized out>, 
>    tlen@entry=<error reading variable: value is not available>, 
>    iptos=0 '\000', 
>    iptos@entry=<error reading variable: value is not available>)
>    at /usr/freebsd-src/sys/netinet/tcp_input.c:1904
>#13 0xffffffff80dfe93b in tcp_input_with_port (mp=<optimized out>, 
>    offp=<optimized out>, proto=<optimized out>, port=port@entry=0)
>    at /usr/freebsd-src/sys/netinet/tcp_input.c:1137
>#14 0xffffffff80dff35b in tcp_input (mp=<unavailable>, offp=<unavailable>, 
>    proto=<unavailable>) at /usr/freebsd-src/sys/netinet/tcp_input.c:1469
>#15 0xffffffff80decdfc in ip_input (m=0x0, 
>    m@entry=<error reading variable: value is not available>)
>    at /usr/freebsd-src/sys/netinet/ip_input.c:839
>#16 0xffffffff80d6917f in netisr_dispatch_src (proto=proto@entry=1, 
>    source=source@entry=0, m=0xfffff8016bae5000)
>    at /usr/freebsd-src/sys/net/netisr.c:1153
>#17 0xffffffff80d694df in netisr_dispatch (proto=<unavailable>, 
>    proto@entry=1, m=<unavailable>) at /usr/freebsd-src/sys/net/netisr.c:1244
>#18 0xffffffff80d4acb2 in ether_demux (ifp=ifp@entry=0xfffff80002be8800, 
>    m=<unavailable>) at /usr/freebsd-src/sys/net/if_ethersubr.c:927
>#19 0xffffffff80d4c2a2 in ether_input_internal (ifp=0xfffff80002be8800, 
>    m=<unavailable>) at /usr/freebsd-src/sys/net/if_ethersubr.c:711
>#20 ether_nh_input (m=<optimized out>, 
>    m@entry=<error reading variable: value is not available>)
>    at /usr/freebsd-src/sys/net/if_ethersubr.c:741
>#21 0xffffffff80d6917f in netisr_dispatch_src (proto=proto@entry=5, 
>    source=source@entry=0, m=m@entry=0xfffff8016bae5000)
>    at /usr/freebsd-src/sys/net/netisr.c:1153
>#22 0xffffffff80d694df in netisr_dispatch (proto=<unavailable>, 
>    proto@entry=5, m=<unavailable>, m@entry=0xfffff8016bae5000)
>    at /usr/freebsd-src/sys/net/netisr.c:1244
>#23 0xffffffff80d4b0c9 in ether_input (ifp=0xfffff80002be8800, 
>    m=0xfffff8016bae5000) at /usr/freebsd-src/sys/net/if_ethersubr.c:832
>#24 0xffffffff82b6aea2 in re_rxeof () from /boot/modules/if_re.ko
>#25 0xffffffff82b57ad7 in re_int_task_8125 () from /boot/modules/if_re.ko
>#26 0xffffffff80c7a3aa in taskqueue_run_locked (
>    queue=queue@entry=0xfffff80002a05700)
>    at /usr/freebsd-src/sys/kern/subr_taskqueue.c:514
>#27 0xffffffff80c7b492 in taskqueue_thread_loop (
>    arg=arg@entry=0xfffffe003a297238)
>    at /usr/freebsd-src/sys/kern/subr_taskqueue.c:826
>#28 0xffffffff80bcb4d0 in fork_exit (
>    callout=0xffffffff80c7b3d0 <taskqueue_thread_loop>, 
>    arg=0xfffffe003a297238, frame=0xfffffe0108c22f40)
>    at /usr/freebsd-src/sys/kern/kern_fork.c:1102
>#29 <signal handler called>
>(kgdb) 
>
>
>panic: Memory modified after free 0xfffff802d0430800(256) val=deadf5ee @ 0xfffff802d0430808
>
>cpuid = 18
>time = 1673024801
>KDB: stack backtrace:
>db_trace_self_wrapper() at db_trace_self_wrapper+0x2b/frame 0xfffffe0108c22620
>vpanic() at vpanic+0x151/frame 0xfffffe0108c22670
>panic() at panic+0x43/frame 0xfffffe0108c226d0
>trash_ctor() at trash_ctor+0x49/frame 0xfffffe0108c226e0
>item_ctor() at item_ctor+0x108/frame 0xfffffe0108c22730
>tcp_default_output() at tcp_default_output+0x127d/frame 0xfffffe0108c22920
>tcp_output() at tcp_output+0x34/frame 0xfffffe0108c22940
>tcp_do_segment() at tcp_do_segment+0x25e1/frame 0xfffffe0108c22a30
>tcp_input_with_port() at tcp_input_with_port+0x114b/frame 0xfffffe0108c22b80
>tcp_input() at tcp_input+0xb/frame 0xfffffe0108c22b90
>ip_input() at ip_input+0x26c/frame 0xfffffe0108c22bf0
>netisr_dispatch_src() at netisr_dispatch_src+0xaf/frame 0xfffffe0108c22c50
>ether_demux() at ether_demux+0x162/frame 0xfffffe0108c22c80
>ether_nh_input() at ether_nh_input+0x402/frame 0xfffffe0108c22ce0
>netisr_dispatch_src() at netisr_dispatch_src+0xaf/frame 0xfffffe0108c22d40
>ether_input() at ether_input+0x99/frame 0xfffffe0108c22da0
>re_rxeof() at re_rxeof+0x442/frame 0xfffffe0108c22e00
>re_int_task_8125() at re_int_task_8125+0x137/frame 0xfffffe0108c22e40
>taskqueue_run_locked() at taskqueue_run_locked+0xaa/frame 0xfffffe0108c22ec0
>taskqueue_thread_loop() at taskqueue_thread_loop+0xc2/frame 0xfffffe0108c22ef0
>fork_exit() at fork_exit+0x80/frame 0xfffffe0108c22f30
>fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe0108c22f30
>--- trap 0, rip = 0, rsp = 0, rbp = 0 ---
>Uptime: 3m24s
>Dumping 1658 out of 32635 MB:..1%..11%..21%..31%..41%..51%..61%..71%..81%..91%
>
>panic: Memory modified after free 0xfffff8004ab8fc00(256) val=deadf5ee @ 0xfffff8004ab8fc08
>
>cpuid = 18
>time = 1673024976
>KDB: stack backtrace:
>db_trace_self_wrapper() at db_trace_self_wrapper+0x2b/frame 0xfffffe0108c3ac50
>vpanic() at vpanic+0x151/frame 0xfffffe0108c3aca0
>panic() at panic+0x43/frame 0xfffffe0108c3ad00
>trash_ctor() at trash_ctor+0x49/frame 0xfffffe0108c3ad10
>item_ctor() at item_ctor+0x108/frame 0xfffffe0108c3ad60
>m_getjcl() at m_getjcl+0x8e/frame 0xfffffe0108c3ada0
>re_rxeof() at re_rxeof+0x137/frame 0xfffffe0108c3ae00
>re_int_task_8125() at re_int_task_8125+0x137/frame 0xfffffe0108c3ae40
>taskqueue_run_locked() at taskqueue_run_locked+0xaa/frame 0xfffffe0108c3aec0
>taskqueue_thread_loop() at taskqueue_thread_loop+0xc2/frame 0xfffffe0108c3aef0
>fork_exit() at fork_exit+0x80/frame 0xfffffe0108c3af30
>fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe0108c3af30
>--- trap 0, rip = 0, rsp = 0, rbp = 0 ---
>Uptime: 2m29s
>Dumping 2356 out of 32635 MB:..1%..11%..21%..31%..41%..51%..61%..71%..81%..91%
>
>panic: Memory modified after free 0xfffff80031592400(256) val=deadf5ee @ 0xfffff80031592408
>
>cpuid = 0
>time = 1673025104
>KDB: stack backtrace:
>db_trace_self_wrapper() at db_trace_self_wrapper+0x2b/frame 0xfffffe0151ff4a10
>vpanic() at vpanic+0x151/frame 0xfffffe0151ff4a60
>panic() at panic+0x43/frame 0xfffffe0151ff4ac0
>trash_ctor() at trash_ctor+0x49/frame 0xfffffe0151ff4ad0
>item_ctor() at item_ctor+0x108/frame 0xfffffe0151ff4b20
>m_getm2() at m_getm2+0x123/frame 0xfffffe0151ff4b90
>m_uiotombuf() at m_uiotombuf+0x69/frame 0xfffffe0151ff4c20
>sosend_generic() at sosend_generic+0x53d/frame 0xfffffe0151ff4ce0
>sousrsend() at sousrsend+0x7b/frame 0xfffffe0151ff4d40
>dofilewrite() at dofilewrite+0x81/frame 0xfffffe0151ff4d90
>sys_write() at sys_write+0xc0/frame 0xfffffe0151ff4e00
>amd64_syscall() at amd64_syscall+0x12e/frame 0xfffffe0151ff4f30
>fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe0151ff4f30
>--- syscall (4, FreeBSD ELF64, write), rip = 0x133133b6d43a, rsp = 0x13312ef5d398, rbp = 0x13312ef5d3d0 ---
>Uptime: 1m37s
>Dumping 1491 out of 32635 MB:..2%..11%..21%..31%..41%..51%..61%..71%..81%..91%
>
>panic: Memory modified after free 0xfffff8002ba8fc00(256) val=deadf5ee @ 0xfffff8002ba8fc08
>
>cpuid = 0
>time = 1673025199
>KDB: stack backtrace:
>db_trace_self_wrapper() at db_trace_self_wrapper+0x2b/frame 0xfffffe01083e5b20
>vpanic() at vpanic+0x151/frame 0xfffffe01083e5b70
>panic() at panic+0x43/frame 0xfffffe01083e5bd0
>trash_ctor() at trash_ctor+0x49/frame 0xfffffe01083e5be0
>item_ctor() at item_ctor+0x108/frame 0xfffffe01083e5c30
>m_get2() at m_get2+0x3d/frame 0xfffffe01083e5c60
>nlmsg_get_ns_mbuf() at nlmsg_get_ns_mbuf+0x2c/frame 0xfffffe01083e5c90
>nlmsg_get_group_writer() at nlmsg_get_group_writer+0x62/frame 0xfffffe01083e5cc0
>rtnl_lle_event() at rtnl_lle_event+0xc2/frame 0xfffffe01083e5d70
>arptimer() at arptimer+0x357/frame 0xfffffe01083e5e00
>softclock_call_cc() at softclock_call_cc+0x151/frame 0xfffffe01083e5ec0
>softclock_thread() at softclock_thread+0xc6/frame 0xfffffe01083e5ef0
>fork_exit() at fork_exit+0x80/frame 0xfffffe01083e5f30
>fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe01083e5f30
>--- trap 0xc985b289, rip = 0x41c2bb214d82bb25, rsp = 0xe6f5206deab52069, rbp = 0x5aca0c43568a0c47 ---
>Uptime: 59s
>Dumping 1457 out of 32634 MB:..2%..11%..21%..31%..41%..51%..61%..71%..81%..91%
>
>panic: Memory modified after free 0xfffff80069f9ca00(256) val=deadf5ee @ 0xfffff80069f9ca08
>
>cpuid = 9
>time = 1673022955
>KDB: stack backtrace:
>db_trace_self_wrapper() at db_trace_self_wrapper+0x2b/frame 0xfffffe0154ac6880
>vpanic() at vpanic+0x151/frame 0xfffffe0154ac68d0
>panic() at panic+0x43/frame 0xfffffe0154ac6930
>trash_ctor() at trash_ctor+0x49/frame 0xfffffe0154ac6940
>item_ctor() at item_ctor+0x108/frame 0xfffffe0154ac6990
>tcp_default_output() at tcp_default_output+0x13bb/frame 0xfffffe0154ac6b80
>tcp_usr_send() at tcp_usr_send+0x3ae/frame 0xfffffe0154ac6c20
>sosend_generic() at sosend_generic+0x62f/frame 0xfffffe0154ac6ce0
>sousrsend() at sousrsend+0x7b/frame 0xfffffe0154ac6d40
>dofilewrite() at dofilewrite+0x81/frame 0xfffffe0154ac6d90
>sys_write() at sys_write+0xc0/frame 0xfffffe0154ac6e00
>amd64_syscall() at amd64_syscall+0x12e/frame 0xfffffe0154ac6f30
>fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe0154ac6f30
>--- syscall (4, FreeBSD ELF64, write), rip = 0x94be364b43a, rsp = 0x94be1d90b08, rbp = 0x94be1d90b70 ---
>Uptime: 1m18s
>Dumping 1481 out of 32635 MB:..2%..11%..21%..31%..42%..51%..61%..71%..82%..91%
>
>panic: Memory modified after free 0xfffff80002bbf100(256) val=deadf5ee @ 0xfffff80002bbf108
>
>cpuid = 0
>time = 1673023201
>KDB: stack backtrace:
>db_trace_self_wrapper() at db_trace_self_wrapper+0x2b/frame 0xfffffe01083e5b20
>vpanic() at vpanic+0x151/frame 0xfffffe01083e5b70
>panic() at panic+0x43/frame 0xfffffe01083e5bd0
>trash_ctor() at trash_ctor+0x49/frame 0xfffffe01083e5be0
>item_ctor() at item_ctor+0x108/frame 0xfffffe01083e5c30
>m_get2() at m_get2+0x3d/frame 0xfffffe01083e5c60
>nlmsg_get_ns_mbuf() at nlmsg_get_ns_mbuf+0x2c/frame 0xfffffe01083e5c90
>nlmsg_get_group_writer() at nlmsg_get_group_writer+0x62/frame 0xfffffe01083e5cc0
>rtnl_lle_event() at rtnl_lle_event+0xc2/frame 0xfffffe01083e5d70
>arptimer() at arptimer+0x357/frame 0xfffffe01083e5e00
>softclock_call_cc() at softclock_call_cc+0x151/frame 0xfffffe01083e5ec0
>softclock_thread() at softclock_thread+0xc6/frame 0xfffffe01083e5ef0
>fork_exit() at fork_exit+0x80/frame 0xfffffe01083e5f30
>fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe01083e5f30
>--- trap 0xc985b289, rip = 0x41c2bb214d82bb25, rsp = 0xe6f5206deab52069, rbp = 0x5aca0c43568a0c47 ---
>Uptime: 3m39s
>Dumping 1486 out of 32635 MB:..2%..11%..21%..31%..41%..51%..61%..72%..81%..91%
>
>panic: Memory modified after free 0xfffff8018fcd0a00(256) val=deadf5ee @ 0xfffff8018fcd0a08
>
>cpuid = 18
>time = 1673023344
>KDB: stack backtrace:
>db_trace_self_wrapper() at db_trace_self_wrapper+0x2b/frame 0xfffffe0108c3ac50
>vpanic() at vpanic+0x151/frame 0xfffffe0108c3aca0
>panic() at panic+0x43/frame 0xfffffe0108c3ad00
>trash_ctor() at trash_ctor+0x49/frame 0xfffffe0108c3ad10
>item_ctor() at item_ctor+0x108/frame 0xfffffe0108c3ad60
>m_getjcl() at m_getjcl+0x8e/frame 0xfffffe0108c3ada0
>re_rxeof() at re_rxeof+0x137/frame 0xfffffe0108c3ae00
>re_int_task_8125() at re_int_task_8125+0x137/frame 0xfffffe0108c3ae40
>taskqueue_run_locked() at taskqueue_run_locked+0xaa/frame 0xfffffe0108c3aec0
>taskqueue_thread_loop() at taskqueue_thread_loop+0xc2/frame 0xfffffe0108c3aef0
>fork_exit() at fork_exit+0x80/frame 0xfffffe0108c3af30
>fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe0108c3af30
>--- trap 0, rip = 0, rsp = 0, rbp = 0 ---
>Uptime: 1m56s
>Dumping 1484 out of 32635 MB:..2%..11%..21%..31%..41%..51%..61%..71%..81%..91%
>
>
>Fatal trap 12: page fault while in kernel mode
>cpuid = 18; apic id = 16
>fault virtual address	= 0xd49c
>fault code		= supervisor read data, page not present
>instruction pointer	= 0x20:0xffffffff80d4b0a0
>stack pointer	        = 0x28:0xfffffe0108c3ad50
>frame pointer	        = 0x28:0xfffffe0108c3ada0
>code segment		= base 0x0, limit 0xfffff, type 0x1b
>			= DPL 0, pres 1, long 1, def32 0, gran 1
>processor eflags	= interrupt enabled, resume, IOPL = 0
>current process		= 0 (re0 taskq)
>rdi:                0 rsi: ffffffff81f2c510 rdx: ffffffff812894cf
>rcx:                1  r8: fffff80001313f00  r9:            10000
>rax:                0 rbx:             d494 rbp: fffffe0108c3ada0
>r10:                1 r11: fffffe01084a8500 r12: fffffe01084a83a0
>r13:             8903 r14:             d494 r15: fffff80002be5800
>trap number		= 12
>panic: page fault
>cpuid = 18
>time = 1673024041
>KDB: stack backtrace:
>db_trace_self_wrapper() at db_trace_self_wrapper+0x2b/frame 0xfffffe0108c3ab10
>vpanic() at vpanic+0x151/frame 0xfffffe0108c3ab60
>panic() at panic+0x43/frame 0xfffffe0108c3abc0
>trap_fatal() at trap_fatal+0x407/frame 0xfffffe0108c3ac20
>trap_pfault() at trap_pfault+0xab/frame 0xfffffe0108c3ac80
>calltrap() at calltrap+0x8/frame 0xfffffe0108c3ac80
>--- trap 0xc, rip = 0xffffffff80d4b0a0, rsp = 0xfffffe0108c3ad50, rbp = 0xfffffe0108c3ada0 ---
>ether_input() at ether_input+0x70/frame 0xfffffe0108c3ada0
>re_rxeof() at re_rxeof+0x442/frame 0xfffffe0108c3ae00
>re_int_task_8125() at re_int_task_8125+0x137/frame 0xfffffe0108c3ae40
>taskqueue_run_locked() at taskqueue_run_locked+0xaa/frame 0xfffffe0108c3aec0
>taskqueue_thread_loop() at taskqueue_thread_loop+0xc2/frame 0xfffffe0108c3aef0
>fork_exit() at fork_exit+0x80/frame 0xfffffe0108c3af30
>fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe0108c3af30
>--- trap 0, rip = 0, rsp = 0, rbp = 0 ---
>Uptime: 11m10s
>Dumping 1488 out of 32635 MB:..2%..11%..21%..31%..41%..51%..61%..71%..81%..91%
>
>
>panic: Memory modified after free 0xfffff80002afac00(256) val=deadf5ee @ 0xfffff80002afac08
>
>cpuid = 8
>time = 1673024441
>KDB: stack backtrace:
>db_trace_self_wrapper() at db_trace_self_wrapper+0x2b/frame 0xfffffe0154c2c880
>vpanic() at vpanic+0x151/frame 0xfffffe0154c2c8d0
>panic() at panic+0x43/frame 0xfffffe0154c2c930
>trash_ctor() at trash_ctor+0x49/frame 0xfffffe0154c2c940
>item_ctor() at item_ctor+0x108/frame 0xfffffe0154c2c990
>tcp_default_output() at tcp_default_output+0x13bb/frame 0xfffffe0154c2cb80
>tcp_usr_send() at tcp_usr_send+0x3ae/frame 0xfffffe0154c2cc20
>sosend_generic() at sosend_generic+0x62f/frame 0xfffffe0154c2cce0
>sousrsend() at sousrsend+0x7b/frame 0xfffffe0154c2cd40
>dofilewrite() at dofilewrite+0x81/frame 0xfffffe0154c2cd90
>sys_write() at sys_write+0xc0/frame 0xfffffe0154c2ce00
>amd64_syscall() at amd64_syscall+0x12e/frame 0xfffffe0154c2cf30
>fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe0154c2cf30
>--- syscall (4, FreeBSD ELF64, write), rip = 0x3ec5cac5643a, rsp = 0x3ec5c3404ef8, rbp = 0x3ec5c3404f30 ---
>Uptime: 1m49s
>Dumping 2455 out of 32635 MB:..1%..11%..21%..31%..41%..51%..61%..71%..81%..91%
>
>

Actions: View

Attachments on bug 267704: 239310 | 239499