DragonFly/x86_64 (dfbsd) (ttyd0) login: link_elf_obj_obj: symbol sndstat_unregisterfile undefined linker_load_file: Unsupported file type df5023: feeder_register("feeder_volume") df5023: loaded (DF-5022 feeder_volume double-free harness) df5023: control OK: feeder_volume init'd on 0x00200010 (f->data=0xfffff8004f164338), destroying cleanly df5023: control allocs: 0xfffff8004f164338 != 0xfffff8004f164370 (expected distinct) df5023: TRIGGER: desc.in=0x00000010 AFMT_CHANNEL=0 feeder_init(0xfffff8008d9fc750) on feeder_volume returned 22 panic: memory chunk 0xfffff8004f164370 is already free! cpuid = 0 Trace beginning at frame 0xfffff8011810c6e8 chunk_mark_free() at chunk_mark_free+0xae 0xffffffff80655dbe chunk_mark_free() at chunk_mark_free+0xae 0xffffffff80655dbe _kfree() at _kfree+0x262 0xffffffff806580e2 feed_volume_free() at feed_volume_free+0x21 0xffffffff826006b1 feeder_create() at feeder_create+0xf8 0xffffffff826000f8 df5023_modevent() at df5023_modevent+0x1f1 0xffffffff82600301 Debugger("panic") CPU0 stopping CPUs: 0x0000003e stopped Stopped at Debugger+0x7c: movb $0,0xbdaf09(%rip)