. Thread 2 (Thread 3432): #0 0x00bbb416 in __kernel_vsyscall () No symbol table info available. #1 0x001d1e06 in __poll (fds=0xb6f45204, nfds=1, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:87 resultvar = oldtype = -516 result = #2 0x002743a3 in event_wait (arg=0x0) at cpufreqd_acpi_event.c:139 rfd = {fd = 6, events = 3, revents = 0} buf = '\000' read_chars = 0 ret = __func__ = "event_wait" #3 0x00454e99 in start_thread (arg=0xb6f45b70) at pthread_create.c:304 pd = 0xb6f45b70 unwind_buf = {cancel_jmp_buf = {{jmp_buf = {4612084, 0, 4001536, -1225501544, 341403620, 1986188425}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}} not_first_call = robust = pagesize_m1 = sp = freesize = __PRETTY_FUNCTION__ = "start_thread" #4 0x001e05ce in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:130 No locals. . Thread 1 (Thread 3429): #0 0x00bbb416 in __kernel_vsyscall () No symbol table info available. #1 0x0013ae21 in raise (sig=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64 resultvar = resultvar = pid = 2543604 selftid = 3429 #2 0x0013e2fe in abort () at abort.c:92 save_stage = 2 act = {__sigaction_handler = {sa_handler = 0xd65, sa_sigaction = 0xd65}, sa_mask = {__val = {2543604, 1, 3215049340, 3215049176, 2196341, 14677220, 134539056, 134520145, 134515732, 3215049340, 1742, 3215049308, 134513476, 30, 2, 3215049176, 1934772, 4, 0, 3215049236, 2543604, 12, 3215050696, 3215049356, 2057201, 2, 3215049236, 4, 0, 0, 2, 2384792}}, sa_flags = 4, sa_restorer = 0x2488e0} sigs = {__val = {32, 0 }} #3 0x00171527 in __libc_message (do_abort=2, fmt=0x24a73c "*** glibc detected *** %s: %s: 0x%s ***\n") at ../sysdeps/unix/sysv/linux/libc_fatal.c:189 ap = 0xb6600468 "*** glibc detected *** /usr/sbin/cpufreqd: free(): invalid pointer: 0x09067b10 ***\n" ap_copy = 0xb6600468 "*** glibc detected *** /usr/sbin/cpufreqd: free(): invalid pointer: 0x09067b10 ***\n" fd = 2 on_2 = list = nlist = cp = written = #4 0x0017b911 in malloc_printerr (action=, str=, ptr=0x9067b10) at malloc.c:6283 buf = "09067b10" cp = #5 0x0017d23b in _int_free (av=, p=0x9067b08) at malloc.c:4795 size = fb = nextchunk = nextsize = nextinuse = prevsize = bck = fwd = errstr = __func__ = "_int_free" #6 0x001803cd in __libc_free (mem=0x9067b10) at malloc.c:3738 ar_ptr = 0x26e3c0 p = hook = #7 0x00e7a76c in sysfs_read_attribute (sysattr=0x9066a08) at sysfs_attr.c:178 length = pgsize = 151419664 fd = #8 0x002722a2 in read_value (attr=0x9066a08) at cpufreqd_acpi.c:156 __func__ = "read_value" #9 0x00272322 in read_int (attr=0x9066a08, value=0x2772d0) at cpufreqd_acpi.c:170 No locals. #10 0x00273b57 in acpi_battery_update () at cpufreqd_acpi_battery.c:315 i = 0 total_capacity = 0 total_remaining = 0 elapsed_time = 1299876629.2430379 current_time = 0 cinfo = __func__ = "acpi_battery_update" #11 0x00272c35 in acpi_update () at cpufreqd_acpi.c:113 No locals. #12 0x0804e1bf in update_plugin_states (plugins=0x9061444) at plugin_utils.c:262 node = 0x9061ed8 o_plugin = #13 0x0804ac7c in cpufreqd_loop (argc=3, argv=0xbfa1d084) at main.c:412 ret = i = d = #14 main (argc=3, argv=0xbfa1d084) at main.c:858 signal_action = {__sigaction_handler = {sa_handler = 0x804b950 , sa_sigaction = 0x804b950 }, sa_mask = {__val = {28675, 0 }}, sa_flags = 0, sa_restorer = 0xf0} old_sigmask = {__val = {0, 1, 14678296, 14612675, 16843008, 3077865985, 20, 3215052468, 14677308, 0, 14609008, 0, 0, 0, 0, 3215052144, 3215052112, 14615830, 3215052468, 0, 16, 14642385, 3215052503, 3215052496, 3215052492, 14678156, 15, 1011, 14675956, 3215052000, 2, 3215051968}} rfds = {fds_bits = {6, 4, 14675956, -1079914828, 0, -1079915552, 14609008, 0, 0, 0, 0, 10645256, -1079915328, 14615830, -1079914828, 0, 4, 4, -1079914793, 14642385, -1079914804, 14678156, 13116, 13116, 0, 4, 14675956, 0, 5, 3, 14610640, -1079915452}} i = cpufreqd_sock = -1 peer_sock = dirname = "\364\357\337\000\b\000\000\000\070\207t\267\002\000t\267\025\026\337\000}\215\004\bX\255u\267\364\357\337\000\274=\021\000\003\000\000\000p\315\241\277\022\267\336\000K\000\000\000\364\357\337\000\264\316\241\277\321l\337\000\030\315\241\277p\352\336\000\000\000\000\000\003", '\000' "\360, =\021\000\250\304\337\000\003\000\000\000\204\267\344\003 \317\021\000\b\000\000\000\207\360\226|\360\202t\267\005\000\000\000<\365\337\000\000\000\000\000\000\000\000\000\001\000\000\000\023\t\000\000\070\207t\267\000\200t\267\311%\336\000\360\317\021\000\064#\336\000\001\000\000\000\364\357\337\000\324\316\241\277\320\372\337\000\070\316\241\277\231\271\336\000(\316\241\277\064#\336\000\034\316\241\277t\372\337\000\000\000\000\000\070\207t\267\001\000\000\000\000\000\000\000\001\000\000\000<\365\337\000\346%\336\000\321l\337", '\000' "\210, \255u\267\364\357\337\000\020", '\000' "\324, \316\241\277\b\000\000\000<\365\337\000\311%\336\000\000\200t\267\070n\337\000p\000\000\000\364\357\337\000<\365\337\000\006\000\000\000x\316\241\277\305\034\337\000\a\000\000\000\020\000\000\000"... ret = 0 __func__ = "main"