[Bug 273438] PANIC: memory modified after free on relatively idle riscv -CURRENT

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=273438

            Bug ID: 273438
           Summary: PANIC: memory modified after free on relatively idle
                    riscv -CURRENT
           Product: Base System
           Version: CURRENT
          Hardware: riscv
                OS: Any
            Status: New
          Severity: Affects Many People
          Priority: ---
         Component: kern
          Assignee: bugs@FreeBSD.org
          Reporter: dgilbert@eicat.ca

Created attachment 244458
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=244458&action=edit
core.txt file for crash

I have an -unmatched RISCV board.  It has public v4 and v6 addresses and
answers ssh and web requests, but is "largely idle" when this happened.  Here's
the stack trace.  I will attach the core.txt

FreeBSD 14.0-CURRENT riscv64 1400093 #0 main-n264297-b03012d0b600-dirty: Wed
Jul 26 04:04:24 EDT 2023

cpuid = 2
time = 1693192346
KDB: stack backtrace:
db_trace_self() at db_trace_self
db_trace_self_wrapper() at db_trace_self_wrapper+0x36
kdb_backtrace() at kdb_backtrace+0x2c
vpanic() at vpanic+0x116
panic() at panic+0x26
trash_ctor() at trash_ctor+0x4a
item_ctor() at item_ctor+0xb8
uma_zalloc_arg() at uma_zalloc_arg+0xbc
.Lpcrel_hi1350() at .Lpcrel_hi1350+0xe
dbuf_create_bonus() at dbuf_create_bonus+0x44
.Lpcrel_hi44() at .Lpcrel_hi44+0x26
.Lpcrel_hi51() at .Lpcrel_hi51+0x26
.Lpcrel_hi284() at .Lpcrel_hi284+0x28
.Lpcrel_hi2() at .Lpcrel_hi2+0x76
.Lpcrel_hi10() at .Lpcrel_hi10+0x56
.Lpcrel_hi783() at .Lpcrel_hi783+0x3e
.Lpcrel_hi383() at .Lpcrel_hi383+0x4a
VOP_CACHEDLOOKUP_APV() at VOP_CACHEDLOOKUP_APV+0x32
vfs_cache_lookup() at vfs_cache_lookup+0xa4
VOP_LOOKUP_APV() at VOP_LOOKUP_APV+0x32
cache_fplookup_noentry() at cache_fplookup_noentry+0x1d4
cache_fplookup() at cache_fplookup+0x4e2
namei() at namei+0x144
kern_statat() at kern_statat+0xd6
sys_fstatat() at sys_fstatat+0x1c
do_trap_user() at do_trap_user+0x236
cpu_exception_handler_user() at cpu_exception_handler_user+0x72
--- syscall (552, FreeBSD ELF64, fstatat)
KDB: enter: panic

-- 
You are receiving this mail because:
You are the assignee for the bug.