https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=267028
--- Comment #237 from Mark Millard <marklmi26-f...@yahoo.com> --- (In reply to Mark Millard from comment #235) Old comments that reference one or both of: 0xFFFFF80000000000 (also known as 18446735277616529408) 0xFFFFF80000000007 comment #44 comment #94 comment #148 Example from 44 (that 94 references): #8 vtozoneslab (va=18446735277616529408, zone=<optimized out>, slab=<optimized out>) at /usr/src/sys/vm/uma_int.h:635 #9 free (addr=0xfffff80000000007, mtp=0xffffffff824332b0 <M_SOLARIS>) at /usr/src/sys/kern/kern_malloc.c:911 #10 0xffffffff8214d251 in nv_mem_free (nvp=<optimized out>, buf=0xfffff80000000007, size=16688648) at /usr/src/sys/contrib/openzfs/module/nvpair/nvpair.c:216 Example from 148 (an nfsd process context): #7 0xffffffff80c895cb in atomic_fcmpset_long (src=18446741877726026240, dst=<optimized out>, expect=<optimized out>) at /usr/src/sys/amd64/include/atomic.h:225 #8 selfdfree (stp=stp@entry=0xfffff80012aa8080, sfp=0xfffff80000000007) at /usr/src/sys/kern/sys_generic.c:1755 #9 0xffffffff80c8866b in seltdclear (td=td@entry=0xfffffe00b52e9a00) at /usr/src/sys/kern/sys_generic.c:1967 [I'll note that 18446741877726026240 = 0xFFFFFE00B52E9A00 but is likely from use of dereferencing something based on the 0xfffff80000000007 in some way.] The history suggests that 0xfffff80000000007 (or 0xfffff80000000000) corruption is not limited to a specific place. -- You are receiving this mail because: You are the assignee for the bug.