On 9.5.2019. 10:35, Sebastien Marie wrote:
> On Thu, May 09, 2019 at 10:12:49AM +0200, Hrvoje Popovski wrote:
>> Hi all,
>>
>> i update kernel from cvs few minutes ago and i'm seeing this stack trace
>> in dmesg. i'm just reporting it.
>
> The principe of the game is to look at the free() call that still use 0
> as size, and found the right size to fill it.
>
>> free with zero size: (2)
>> Starting stack trace...
>> free(ffff800000074100,2,0,ffff800000074100,1d5a05b47900fbf4,ffffffff81d287e8)
>> at free+0xd8
>> isascan(ffff800000101200,ffff800000074100,9563e4d9af15796a,ffffffff81618690,ffff800000101200,ffffffff81d16d01)
>> at isascan+0x3f8
>
> Here, isascan() calls free() on dev (a struct device).
>
> the related malloc() call is done by config_make_softc() at line 248:
> 247 config_attach(parent, dev, &ia2, isaprint);
> 248 dev = config_make_softc(parent, cf);
>
> The size used for malloc() is :
>
> kern/subr_autoconf.c
> 417 struct device *
> 418 config_make_softc(struct device *parent, struct cfdata *cf)
> 419 {
> 420 struct device *dev;
> 421 struct cfdriver *cd;
> 422 struct cfattach *ca;
> 423
> 424 cd = cf->cf_driver;
> 425 ca = cf->cf_attach;
> 426 if (ca->ca_devsize < sizeof(struct device))
> 427 panic("config_make_softc");
> 428
> 429 /* get memory for all device vars */
> 430 dev = malloc(ca->ca_devsize, M_DEVBUF, M_NOWAIT|M_ZERO);
> 431 if (dev == NULL)
> 432 panic("config_make_softc: allocation for device softc
> failed");
>
>
> So calling free() with cf->cf_attach->ca_devsize should be fine.
> Diff below.
>
> OK ?
>
with this diff i'm getting new traces
dmesg
OpenBSD 6.5-current (GENERIC.MP) #2: Thu May 9 10:48:28 CEST 2019
[email protected]:/sys/arch/amd64/compile/GENERIC.MP
real mem = 17115840512 (16322MB)
avail mem = 16587034624 (15818MB)
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.7 @ 0xcf42c000 (99 entries)
bios0: vendor Dell Inc. version "2.7.0" date 05/23/2018
bios0: Dell Inc. PowerEdge R620
acpi0 at bios0: rev 2
acpi0: sleep states S0 S4 S5
acpi0: tables DSDT FACP APIC SPCR HPET DMAR MCFG WDAT SLIC ERST HEST
BERT EINJ TCPA PC__ SRAT SSDT
acpi0: wakeup devices PCI0(S5)
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee00000: PC-AT compat
cpu0 at mainbus0: apid 4 (boot processor)
cpu0: Intel(R) Xeon(R) CPU E5-2643 v2 @ 3.50GHz, 3600.45 MHz, 06-3e-04
cpu0:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,DCA,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,PERF,ITSC,FSGSBASE,SMEP,ERMS,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,MELTDOWN
cpu0: 256KB 64b/line 8-way L2 cache
cpu0: smt 0, core 2, package 0
mtrr: Pentium Pro MTRR support, 10 var ranges, 88 fixed ranges
cpu0: apic clock running at 99MHz
cpu0: mwait min=64, max=64, C-substates=0.2.1.1, IBE
cpu1 at mainbus0: apid 6 (application processor)
cpu1: Intel(R) Xeon(R) CPU E5-2643 v2 @ 3.50GHz, 3600.00 MHz, 06-3e-04
cpu1:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,DCA,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,PERF,ITSC,FSGSBASE,SMEP,ERMS,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,MELTDOWN
cpu1: 256KB 64b/line 8-way L2 cache
cpu1: smt 0, core 3, package 0
cpu2 at mainbus0: apid 8 (application processor)
cpu2: Intel(R) Xeon(R) CPU E5-2643 v2 @ 3.50GHz, 3600.00 MHz, 06-3e-04
cpu2:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,DCA,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,PERF,ITSC,FSGSBASE,SMEP,ERMS,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,MELTDOWN
cpu2: 256KB 64b/line 8-way L2 cache
cpu2: smt 0, core 4, package 0
cpu3 at mainbus0: apid 16 (application processor)
cpu3: Intel(R) Xeon(R) CPU E5-2643 v2 @ 3.50GHz, 3600.00 MHz, 06-3e-04
cpu3:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,DCA,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,PERF,ITSC,FSGSBASE,SMEP,ERMS,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,MELTDOWN
cpu3: 256KB 64b/line 8-way L2 cache
cpu3: smt 0, core 8, package 0
cpu4 at mainbus0: apid 18 (application processor)
cpu4: Intel(R) Xeon(R) CPU E5-2643 v2 @ 3.50GHz, 3600.00 MHz, 06-3e-04
cpu4:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,DCA,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,PERF,ITSC,FSGSBASE,SMEP,ERMS,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,MELTDOWN
cpu4: 256KB 64b/line 8-way L2 cache
cpu4: smt 0, core 9, package 0
cpu5 at mainbus0: apid 20 (application processor)
cpu5: Intel(R) Xeon(R) CPU E5-2643 v2 @ 3.50GHz, 3600.00 MHz, 06-3e-04
cpu5:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,DCA,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,PERF,ITSC,FSGSBASE,SMEP,ERMS,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,MELTDOWN
cpu5: 256KB 64b/line 8-way L2 cache
cpu5: smt 0, core 10, package 0
ioapic0 at mainbus0: apid 0 pa 0xfec00000, version 20, 24 pins
ioapic1 at mainbus0: apid 1 pa 0xfec3f000, version 20, 24 pins, remapped
acpihpet0 at acpi0: 14318179 Hz
acpimcfg0 at acpi0
acpimcfg0: addr 0xe0000000, bus 0-255
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus 1 (PEX1)
acpiprt2 at acpi0: bus -1 (PE1C)
acpiprt3 at acpi0: bus 3 (PEX2)
acpiprt4 at acpi0: bus 2 (PEX3)
acpiprt5 at acpi0: bus 4 (PEX4)
acpiprt6 at acpi0: bus -1 (PEX5)
acpiprt7 at acpi0: bus 8 (PEX6)
acpiprt8 at acpi0: bus 7 (PEX7)
acpiprt9 at acpi0: bus -1 (PEXB)
acpiprt10 at acpi0: bus -1 (PEXC)
acpiprt11 at acpi0: bus -1 (PEXD)
acpiprt12 at acpi0: bus -1 (PEXE)
acpicpu0 at acpi0: C1(@1 halt!)
acpicpu1 at acpi0: C1(@1 halt!)
acpicpu2 at acpi0: C1(@1 halt!)
acpicpu3 at acpi0: C1(@1 halt!)
acpicpu4 at acpi0: C1(@1 halt!)
acpicpu5 at acpi0: C1(@1 halt!)
acpipci0 at acpi0 PCI0: 0x00000000 0x00000011 0x00000001
acpicmos0 at acpi0
acpipci1 at acpi0 P0B1: 0x00000000 0x00000011 0x00000001
acpipci2 at acpi0 P1B1: 0x00000000 0x00000011 0x00000001
"PNP0C14" at acpi0 not configured
ipmi at mainbus0 not configured
pci0 at mainbus0 bus 0
pchb0 at pci0 dev 0 function 0 "Intel E5 v2 Host" rev 0x04
ppb0 at pci0 dev 1 function 0 "Intel E5 v2 PCIE" rev 0x04
pci1 at ppb0 bus 1
1:0:1: mem address conflict 0xd8000000/0x80000
ix0 at pci1 dev 0 function 0 "Intel 82599" rev 0x01: msi, address
ec:f4:bb:da:f7:f8
ix1 at pci1 dev 0 function 1 "Intel 82599" rev 0x01: msi, address
ec:f4:bb:da:f7:fa
ppb1 at pci0 dev 2 function 0 "Intel E5 v2 PCIE" rev 0x04: msi
pci2 at ppb1 bus 3
ppb2 at pci0 dev 2 function 2 "Intel E5 v2 PCIE" rev 0x04
pci3 at ppb2 bus 2
mfi0 at pci3 dev 0 function 0 "Symbios Logic MegaRAID SAS2008" rev 0x03:
apic 1 int 10
mfi0: "PERC H310 Mini", firmware 20.13.3-0001
scsibus1 at mfi0: 16 targets
sd0 at scsibus1 targ 0 lun 0: <DELL, PERC H310, 2.12> SCSI3 0/direct
fixed naa.6c81f660f14398001af3a49619e0d82f
sd0: 285568MB, 512 bytes/sector, 584843264 sectors
scsibus2 at mfi0: 256 targets
ppb3 at pci0 dev 3 function 0 "Intel E5 v2 PCIE" rev 0x04: msi
pci4 at ppb3 bus 4
"Intel E5 v2 I/OAT" rev 0x04 at pci0 dev 4 function 0 not configured
"Intel E5 v2 I/OAT" rev 0x04 at pci0 dev 4 function 1 not configured
"Intel E5 v2 I/OAT" rev 0x04 at pci0 dev 4 function 2 not configured
"Intel E5 v2 I/OAT" rev 0x04 at pci0 dev 4 function 3 not configured
"Intel E5 v2 I/OAT" rev 0x04 at pci0 dev 4 function 4 not configured
"Intel E5 v2 I/OAT" rev 0x04 at pci0 dev 4 function 5 not configured
"Intel E5 v2 I/OAT" rev 0x04 at pci0 dev 4 function 6 not configured
"Intel E5 v2 I/OAT" rev 0x04 at pci0 dev 4 function 7 not configured
"Intel E5 v2 Address Map" rev 0x04 at pci0 dev 5 function 0 not configured
"Intel E5 v2 IIO RAS" rev 0x04 at pci0 dev 5 function 2 not configured
ppb4 at pci0 dev 17 function 0 "Intel C600 Virtual PCIE" rev 0x05
pci5 at ppb4 bus 5
"Intel C600 MEI" rev 0x05 at pci0 dev 22 function 0 not configured
"Intel C600 MEI" rev 0x05 at pci0 dev 22 function 1 not configured
ehci0 at pci0 dev 26 function 0 "Intel C600 USB" rev 0x05: apic 0 int 23
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 configuration 1 interface 0 "Intel EHCI root hub" rev
2.00/1.00 addr 1
ppb5 at pci0 dev 28 function 0 "Intel C600 PCIE" rev 0xb5
pci6 at ppb5 bus 6
ppb6 at pci0 dev 28 function 4 "Intel C600 PCIE" rev 0xb5
pci7 at ppb6 bus 7
em0 at pci7 dev 0 function 0 "Intel I350" rev 0x01: msi, address
ec:f4:bb:da:f7:fc
em1 at pci7 dev 0 function 1 "Intel I350" rev 0x01: msi, address
ec:f4:bb:da:f7:fd
ppb7 at pci0 dev 28 function 7 "Intel C600 PCIE" rev 0xb5
pci8 at ppb7 bus 8
ppb8 at pci8 dev 0 function 0 "Renesas SH7757 PCIE Switch" rev 0x00
pci9 at ppb8 bus 9
ppb9 at pci9 dev 0 function 0 "Renesas SH7757 PCIE Switch" rev 0x00
pci10 at ppb9 bus 10
ppb10 at pci10 dev 0 function 0 "Renesas SH7757 PCIE-PCI" rev 0x00
pci11 at ppb10 bus 11
vga1 at pci11 dev 0 function 0 "Matrox MGA G200eR" rev 0x00
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
ppb11 at pci9 dev 1 function 0 "Renesas SH7757 PCIE Switch" rev 0x00
pci12 at ppb11 bus 12
ehci1 at pci0 dev 29 function 0 "Intel C600 USB" rev 0x05: apic 0 int 22
usb1 at ehci1: USB revision 2.0
uhub1 at usb1 configuration 1 interface 0 "Intel EHCI root hub" rev
2.00/1.00 addr 1
ppb12 at pci0 dev 30 function 0 "Intel 82801BA Hub-to-PCI" rev 0xa5
pci13 at ppb12 bus 13
pcib0 at pci0 dev 31 function 0 "Intel C600 LPC" rev 0x05
ahci0 at pci0 dev 31 function 2 "Intel C600 AHCI" rev 0x05: msi, AHCI 1.3
ahci0: port 4: 1.5Gb/s
scsibus3 at ahci0: 32 targets
cd0 at scsibus3 targ 4 lun 0: <TSSTcorp, DVD+-RW SU-208FB, D150> ATAPI
5/cdrom removable
isa0 at pcib0
isadma0 at isa0
com0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
com1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo
com1: console
pckbc0 at isa0 port 0x60/5 irq 1 irq 12
pcppi0 at isa0 port 0x61
spkr0 at pcppi0
pci14 at mainbus0 bus 64
pci15 at mainbus0 bus 63
"Intel E5 v2 QPI Link" rev 0x04 at pci15 dev 8 function 0 not configured
"Intel E5 v2 QPI Link" rev 0x04 at pci15 dev 9 function 0 not configured
"Intel E5 v2 PCU" rev 0x04 at pci15 dev 10 function 0 not configured
"Intel E5 v2 PCU" rev 0x04 at pci15 dev 10 function 1 not configured
"Intel E5 v2 PCU" rev 0x04 at pci15 dev 10 function 2 not configured
"Intel E5 v2 PCU" rev 0x04 at pci15 dev 10 function 3 not configured
"Intel E5 v2 UBOX" rev 0x04 at pci15 dev 11 function 0 not configured
"Intel E5 v2 UBOX" rev 0x04 at pci15 dev 11 function 3 not configured
"Intel E5 v2 Unicast" rev 0x04 at pci15 dev 12 function 0 not configured
"Intel E5 v2 Unicast" rev 0x04 at pci15 dev 12 function 1 not configured
"Intel E5 v2 Unicast" rev 0x04 at pci15 dev 12 function 2 not configured
"Intel E5 v2 Unicast" rev 0x04 at pci15 dev 12 function 3 not configured
"Intel E5 v2 Unicast" rev 0x04 at pci15 dev 12 function 4 not configured
"Intel E5 v2 Unicast" rev 0x04 at pci15 dev 13 function 0 not configured
"Intel E5 v2 Unicast" rev 0x04 at pci15 dev 13 function 1 not configured
"Intel E5 v2 Unicast" rev 0x04 at pci15 dev 13 function 2 not configured
"Intel E5 v2 Unicast" rev 0x04 at pci15 dev 13 function 3 not configured
"Intel E5 v2 Unicast" rev 0x04 at pci15 dev 13 function 4 not configured
"Intel E5 v2 Home Agent" rev 0x04 at pci15 dev 14 function 0 not configured
"Intel E5 v2 Home Agent" rev 0x04 at pci15 dev 14 function 1 not configured
"Intel E5 v2 TA" rev 0x04 at pci15 dev 15 function 0 not configured
"Intel E5 v2 RAS" rev 0x04 at pci15 dev 15 function 1 not configured
"Intel E5 v2 TAD" rev 0x04 at pci15 dev 15 function 2 not configured
"Intel E5 v2 TAD" rev 0x04 at pci15 dev 15 function 3 not configured
"Intel E5 v2 TAD" rev 0x04 at pci15 dev 15 function 4 not configured
"Intel E5 v2 TAD" rev 0x04 at pci15 dev 15 function 5 not configured
"Intel E5 v2 Thermal" rev 0x04 at pci15 dev 16 function 0 not configured
"Intel E5 v2 Thermal" rev 0x04 at pci15 dev 16 function 1 not configured
"Intel E5 v2 Error" rev 0x04 at pci15 dev 16 function 2 not configured
"Intel E5 v2 Error" rev 0x04 at pci15 dev 16 function 3 not configured
"Intel E5 v2 Thermal" rev 0x04 at pci15 dev 16 function 4 not configured
"Intel E5 v2 Thermal" rev 0x04 at pci15 dev 16 function 5 not configured
"Intel E5 v2 Error" rev 0x04 at pci15 dev 16 function 7 not configured
"Intel E5 v2 R2PCIE" rev 0x04 at pci15 dev 19 function 0 not configured
"Intel E5 v2 QPI Link Monitor" rev 0x04 at pci15 dev 19 function 1 not
configured
"Intel E5 v2 QPI" rev 0x04 at pci15 dev 19 function 4 not configured
"Intel E5 v2 QPI Link Monitor" rev 0x04 at pci15 dev 19 function 5 not
configured
"Intel E5 v2 SAD" rev 0x04 at pci15 dev 22 function 0 not configured
"Intel E5 v2 Broadcast" rev 0x04 at pci15 dev 22 function 1 not configured
"Intel E5 v2 Broadcast" rev 0x04 at pci15 dev 22 function 2 not configured
pci16 at mainbus0 bus 127
vmm0 at mainbus0: VMX/EPT
uhub2 at uhub0 port 1 configuration 1 interface 0 "Intel Rate Matching
Hub" rev 2.00/0.00 addr 2
uhub3 at uhub2 port 6 configuration 1 interface 0 "no manufacturer
Gadget USB HUB" rev 2.00/0.00 addr 3
uhidev0 at uhub3 port 1 configuration 1 interface 0 "Avocent
Keyboard/Mouse Function" rev 2.00/0.00 addr 4
free with zero size: (127)
Starting stack trace...
free(ffff80000013f800,7f,0,ffff80000013f800,cf43c4f465ef43f8,0) at free+0xd8
uhidev_attach(ffff800000071200,ffff80000014ed00,ffff8000224a40a0,ffff800000071200,89eb6e07df884e85,ffff800000071200)
at uhidev_attach+0x1b4
config_attach(ffff800000071200,ffffffff81cf6070,ffff8000224a40a0,ffffffff8170a4a0,7b6b216faf05a5db,ffff800000021340)
at config_attach+0x1ee
usbd_probe_and_attach(ffff800000071200,ffff80000014eb00,1,4,1a5dafdc5cf15461,ffff80000014eb58)
at usbd_probe_and_attach+0x306
usbd_new_device(ffff800000071200,ffff800000095000,3,3,1,ffff80000014ea00)
at usbd_new_device+0x8f5
uhub_port_connect(ffff800000071200,1,101,206,f56236d4c3d760b0,ffff800000071200)
at uhub_port_connect+0x17b
uhub_explore(ffff80000014e900,ffff80000014e900,aaee483d79d35fa5,ffff80000006d280,19,6)
at uhub_explore+0x24d
uhub_explore(ffff80000014e700,ffff80000014e700,aaee483d79d35fa5,ffff80000006e180,0,1)
at uhub_explore+0x298
uhub_explore(ffff80000007ae00,ffff80000007ae00,aaee483d799b2106,ffff80000007ad80,ffff80000007ad00,ffffffff81db4fa8)
at uhub_explore+0x298
usb_explore(ffff80000007ad00,ffff80000007ad00,1f185e1e10be07c4,0,0,1) at
usb_explore+0x12b
usb_task_thread(ffff8000ffff9070,ffff8000ffff9070,0,0,ffff8000ffff9070,ffffffff815cd230)
at usb_task_thread+0x106
end trace frame: 0x0, count: 246
End of stack trace.
uhidev0: iclass 3/1
free with zero size: (127)
Starting stack trace...
free(ffff80000013f800,7f,0,ffff80000013f800,cf43c4f465284bc3,0) at free+0xd8
hid_report_size(ffff800000070c00,41,0,0,764c887b264d079f,0) at
hid_report_size+0x10f
uhidev_attach(ffff800000071200,ffff80000014ed00,ffff8000224a40a0,ffff800000071200,89eb6e07df884e85,ffff800000071200)
at uhidev_attach+0x288
config_attach(ffff800000071200,ffffffff81cf6070,ffff8000224a40a0,ffffffff8170a4a0,7b6b216faf05a5db,ffff800000021340)
at config_attach+0x1ee
usbd_probe_and_attach(ffff800000071200,ffff80000014eb00,1,4,1a5dafdc5cf15461,ffff80000014eb58)
at usbd_probe_and_attach+0x306
usbd_new_device(ffff800000071200,ffff800000095000,3,3,1,ffff80000014ea00)
at usbd_new_device+0x8f5
uhub_port_connect(ffff800000071200,1,101,206,f56236d4c3d760b0,ffff800000071200)
at uhub_port_connect+0x17b
uhub_explore(ffff80000014e900,ffff80000014e900,aaee483d79d35fa5,ffff80000006d280,19,6)
at uhub_explore+0x24d
uhub_explore(ffff80000014e700,ffff80000014e700,aaee483d79d35fa5,ffff80000006e180,0,1)
at uhub_explore+0x298
uhub_explore(ffff80000007ae00,ffff80000007ae00,aaee483d799b2106,ffff80000007ad80,ffff80000007ad00,ffffffff81db4fa8)
at uhub_explore+0x298
usb_explore(ffff80000007ad00,ffff80000007ad00,1f185e1e10be07c4,0,0,1) at
usb_explore+0x12b
usb_task_thread(ffff8000ffff9070,ffff8000ffff9070,0,0,ffff8000ffff9070,ffffffff815cd230)
at usb_task_thread+0x106
end trace frame: 0x0, count: 245
End of stack trace.
free with zero size: (127)
Starting stack trace...
free(ffff80000013f800,7f,0,ffff80000013f800,cf43c4f465284185,0) at free+0xd8
hid_is_collection(ffff800000070c00,41,ff,10006,a6cb281b8426ee7e,ffffffff81cf60e0)
at hid_is_collection+0xe9
ukbd_match(ffff80000014ed00,ffffffff81cf60e0,ffff8000224a3f28,ffff80000014ed00,2c99d3d29f676b59,ffff8000224a3e48)
at ukbd_match+0x45
mapply(ffff8000224a3e48,ffffffff81cf60e0,2fda689c431db833,ffffffff81cf60e0,ffff80000014ed00,1a)
at mapply+0xbf
config_search(ffffffff81877300,ffff80000014ed00,ffff8000224a3f28,ffffffff81877300,9ce98f88a5365b2b,ffff8000224a3f28)
at config_search+0xc0
config_found_sm(ffff80000014ed00,ffff8000224a3f28,0,ffffffff81877300,d9ea00cd67e63fde,0)
at config_found_sm+0x32
uhidev_attach(ffff800000071200,ffff80000014ed00,ffff8000224a40a0,ffff800000071200,89eb6e07df884e85,ffff800000071200)
at uhidev_attach+0x2ec
config_attach(ffff800000071200,ffffffff81cf6070,ffff8000224a40a0,ffffffff8170a4a0,7b6b216faf05a5db,ffff800000021340)
at config_attach+0x1ee
usbd_probe_and_attach(ffff800000071200,ffff80000014eb00,1,4,1a5dafdc5cf15461,ffff80000014eb58)
at usbd_probe_and_attach+0x306
usbd_new_device(ffff800000071200,ffff800000095000,3,3,1,ffff80000014ea00)
at usbd_new_device+0x8f5
uhub_port_connect(ffff800000071200,1,101,206,f56236d4c3d760b0,ffff800000071200)
at uhub_port_connect+0x17b
uhub_explore(ffff80000014e900,ffff80000014e900,aaee483d79d35fa5,ffff80000006d280,19,6)
at uhub_explore+0x24d
uhub_explore(ffff80000014e700,ffff80000014e700,aaee483d79d35fa5,ffff80000006e180,0,1)
at uhub_explore+0x298
uhub_explore(ffff80000007ae00,ffff80000007ae00,aaee483d799b2106,ffff80000007ad80,ffff80000007ad00,ffffffff81db4fa8)
at uhub_explore+0x298
usb_explore(ffff80000007ad00,ffff80000007ad00,1f185e1e10be07c4,0,0,1) at
usb_explore+0x12b
usb_task_thread(ffff8000ffff9070,ffff8000ffff9070,0,0,ffff8000ffff9070,ffffffff815cd230)
at usb_task_thread+0x106
end trace frame: 0x0, count: 241
End of stack trace.
free with zero size: (127)
Starting stack trace...
free(ffff80000013f800,7f,0,ffff80000013f800,cf43c4f465284185,0) at free+0xd8
hid_is_collection(ffff800000070c00,41,ff,10001,a6cb281b844568dc,ffffffff81cf6118)
at hid_is_collection+0xe9
ums_match(ffff80000014ed00,ffffffff81cf6118,ffff8000224a3f28,ffff80000014ed00,764c887b26fcedf8,ffffffff81cf6118)
at ums_match+0x47
mapply(ffff8000224a3e48,ffffffff81cf6118,2fda689c431db833,ffffffff81cf6118,ffff80000014ed00,1a)
at mapply+0xbf
config_search(ffffffff81877300,ffff80000014ed00,ffff8000224a3f28,ffffffff81877300,9ce98f88a5365b2b,ffff8000224a3f28)
at config_search+0xc0
config_found_sm(ffff80000014ed00,ffff8000224a3f28,0,ffffffff81877300,d9ea00cd67e63fde,0)
at config_found_sm+0x32
uhidev_attach(ffff800000071200,ffff80000014ed00,ffff8000224a40a0,ffff800000071200,89eb6e07df884e85,ffff800000071200)
at uhidev_attach+0x2ec
config_attach(ffff800000071200,ffffffff81cf6070,ffff8000224a40a0,ffffffff8170a4a0,7b6b216faf05a5db,ffff800000021340)
at config_attach+0x1ee
usbd_probe_and_attach(ffff800000071200,ffff80000014eb00,1,4,1a5dafdc5cf15461,ffff80000014eb58)
at usbd_probe_and_attach+0x306
usbd_new_device(ffff800000071200,ffff800000095000,3,3,1,ffff80000014ea00)
at usbd_new_device+0x8f5
uhub_port_connect(ffff800000071200,1,101,206,f56236d4c3d760b0,ffff800000071200)
at uhub_port_connect+0x17b
uhub_explore(ffff80000014e900,ffff80000014e900,aaee483d79d35fa5,ffff80000006d280,19,6)
at uhub_explore+0x24d
uhub_explore(ffff80000014e700,ffff80000014e700,aaee483d79d35fa5,ffff80000006e180,0,1)
at uhub_explore+0x298
uhub_explore(ffff80000007ae00,ffff80000007ae00,aaee483d799b2106,ffff80000007ad80,ffff80000007ad00,ffffffff81db4fa8)
at uhub_explore+0x298
usb_explore(ffff80000007ad00,ffff80000007ad00,1f185e1e10be07c4,0,0,1) at
usb_explore+0x12b
usb_task_thread(ffff8000ffff9070,ffff8000ffff9070,0,0,ffff8000ffff9070,ffffffff815cd230)
at usb_task_thread+0x106
end trace frame: 0x0, count: 241
End of stack trace.
free with zero size: (127)
Starting stack trace...
free(ffff80000013f800,7f,0,ffff80000013f800,cf43c4f465284185,0) at free+0xd8
hid_is_collection(ffff800000070c00,41,ff,10002,a6cb281b844568fc,3) at
hid_is_collection+0xe9
ums_match(ffff80000014ed00,ffffffff81cf6118,ffff8000224a3f28,ffff80000014ed00,764c887b26fcedf8,ffffffff81cf6118)
at ums_match+0x67
mapply(ffff8000224a3e48,ffffffff81cf6118,2fda689c431db833,ffffffff81cf6118,ffff80000014ed00,1a)
at mapply+0xbf
config_search(ffffffff81877300,ffff80000014ed00,ffff8000224a3f28,ffffffff81877300,9ce98f88a5365b2b,ffff8000224a3f28)
at config_search+0xc0
config_found_sm(ffff80000014ed00,ffff8000224a3f28,0,ffffffff81877300,d9ea00cd67e63fde,0)
at config_found_sm+0x32
uhidev_attach(ffff800000071200,ffff80000014ed00,ffff8000224a40a0,ffff800000071200,89eb6e07df884e85,ffff800000071200)
at uhidev_attach+0x2ec
config_attach(ffff800000071200,ffffffff81cf6070,ffff8000224a40a0,ffffffff8170a4a0,7b6b216faf05a5db,ffff800000021340)
at config_attach+0x1ee
usbd_probe_and_attach(ffff800000071200,ffff80000014eb00,1,4,1a5dafdc5cf15461,ffff80000014eb58)
at usbd_probe_and_attach+0x306
usbd_new_device(ffff800000071200,ffff800000095000,3,3,1,ffff80000014ea00)
at usbd_new_device+0x8f5
uhub_port_connect(ffff800000071200,1,101,206,f56236d4c3d760b0,ffff800000071200)
at uhub_port_connect+0x17b
uhub_explore(ffff80000014e900,ffff80000014e900,aaee483d79d35fa5,ffff80000006d280,19,6)
at uhub_explore+0x24d
uhub_explore(ffff80000014e700,ffff80000014e700,aaee483d79d35fa5,ffff80000006e180,0,1)
at uhub_explore+0x298
uhub_explore(ffff80000007ae00,ffff80000007ae00,aaee483d799b2106,ffff80000007ad80,ffff80000007ad00,ffffffff81db4fa8)
at uhub_explore+0x298
usb_explore(ffff80000007ad00,ffff80000007ad00,1f185e1e10be07c4,0,0,1) at
usb_explore+0x12b
usb_task_thread(ffff8000ffff9070,ffff8000ffff9070,0,0,ffff8000ffff9070,ffffffff815cd230)
at usb_task_thread+0x106
end trace frame: 0x0, count: 241
End of stack trace.
ukbd0 at uhidev0: 8 variable keys, 6 key codes
wskbd0 at ukbd0: console keyboard, using wsdisplay0
uhidev1 at uhub3 port 1 configuration 1 interface 1 "Avocent
Keyboard/Mouse Function" rev 2.00/0.00 addr 4
uhidev1: iclass 3/1
ums0 at uhidev1: 3 buttons, Z dir
wsmouse0 at ums0 mux 0
uhidev2 at uhub3 port 1 configuration 1 interface 2 "Avocent
Keyboard/Mouse Function" rev 2.00/0.00 addr 4
uhidev2: iclass 3/1
ums1 at uhidev2: 3 buttons, Z dir
wsmouse1 at ums1 mux 0
uhub4 at uhub1 port 1 configuration 1 interface 0 "Intel Rate Matching
Hub" rev 2.00/0.00 addr 2
vscsi0 at root
scsibus4 at vscsi0: 256 targets
softraid0 at root
scsibus5 at softraid0: 256 targets
root on sd0a (01d374f3e9bfb055.a) swap on sd0b dump on sd0b
ukbd0: was console keyboard
wskbd0 detached
ukbd0 detached
uhidev0 detached
wsmouse0 detached
ums0 detached
uhidev1 detached
wsmouse1 detached
ums1 detached
uhidev2 detached
uhidev0 at uhub3 port 1 configuration 1 interface 0 "Avocent
Keyboard/Mouse Function" rev 2.00/0.00 addr 4
uhidev0: iclass 3/1
ukbd0 at uhidev0: 8 variable keys, 6 key codes
wskbd0 at ukbd0: console keyboard, using wsdisplay0
uhidev1 at uhub3 port 1 configuration 1 interface 1 "Avocent
Keyboard/Mouse Function" rev 2.00/0.00 addr 4
uhidev1: iclass 3/1
ums0 at uhidev1: 3 buttons, Z dir
wsmouse0 at ums0 mux 0
uhidev2 at uhub3 port 1 configuration 1 interface 2 "Avocent
Keyboard/Mouse Function" rev 2.00/0.00 addr 4
uhidev2: iclass 3/1
ums1 at uhidev2: 3 buttons, Z dir
wsmouse1 at ums1 mux 0
