panic #2: Memory modified after free

Got another one.

Memory modified after free 0xc24a0000(256) val=c122b200 _at_ 0xc24a0000

(kgdb) bt
#0  doadump () at pcpu.h:165
#1  0xc049c602 in boot (howto=260) at ../../../kern/kern_shutdown.c:397
#2  0xc049c93d in panic (
    fmt=0xc05f6bb2 "Memory modified after free %p(%d) val=%x _at_ %p\n")
    at ../../../kern/kern_shutdown.c:553
#3  0xc057b616 in trash_ctor (mem=0xc24a0000, size=0, arg=0x0, flags=0)
    at ../../../vm/uma_dbg.c:72
#4  0xc057b6a8 in trash_fini (mem=0x0, size=0) at 
../../../vm/uma_dbg.c:117
#5  0xc05780d6 in zone_drain (zone=0xc0c4dae0) at 
../../../vm/uma_core.c:725
#6  0xc05793b5 in zone_foreach (zfunc=0xc0577f30 <zone_drain>)
    at ../../../vm/uma_core.c:1478
#7  0xc057ae37 in uma_reclaim () at ../../../vm/uma_core.c:2649
#8  0xc058e189 in vm_pageout_scan (pass=0) at ../../../vm/vm_pageout.c:674
#9  0xc058f53b in vm_pageout () at ../../../vm/vm_pageout.c:1476
#10 0xc04848f1 in fork_exit (callout=0xc058f220 <vm_pageout>, arg=0x0,
    frame=0x0) at ../../../kern/kern_fork.c:789
#11 0xc05b8dac in fork_trampoline () at ../../../i386/i386/exception.s:208

-- 
http://ache.pp.ru/