From owner-freebsd-current@FreeBSD.ORG  Tue Feb 10 15:59:55 2015
Return-Path: <owner-freebsd-current@FreeBSD.ORG>
Delivered-To: freebsd-current@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id 02329D20
 for <freebsd-current@freebsd.org>; Tue, 10 Feb 2015 15:59:55 +0000 (UTC)
Received: from mail-ie0-f181.google.com (mail-ie0-f181.google.com
 [209.85.223.181])
 (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
 (Client CN "smtp.gmail.com",
 Issuer "Google Internet Authority G2" (verified OK))
 by mx1.freebsd.org (Postfix) with ESMTPS id C8696F31
 for <freebsd-current@freebsd.org>; Tue, 10 Feb 2015 15:59:54 +0000 (UTC)
Received: by iecar1 with SMTP id ar1so2812758iec.0
 for <freebsd-current@freebsd.org>; Tue, 10 Feb 2015 07:59:48 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;
 h=mime-version:from:date:message-id:subject:to:content-type;
 bh=SH4tcqBbxheedZMqPza9+E4Jc2onHGNe6lJ2el9le5Q=;
 b=xy9b97v9+APCz+6sE1UeQ9fnWPxBVdfbOCSzSI81O3FoWmya6mO1crJnswuwQ8KKPE
 JiZdfYSVm96BNmJ8q+MKRt3uE9c/KsHkXxVqoe6ensKgy+7kB/sXimx6zrXZ97xxtNrC
 WI+hMqifF0qOzm4+FWUOoOBFJd5jv1pRhjx7yTPHE57Ub+fM/QUV13LfU81raTlKT02b
 ZYAW5ew4sM51I+MKt0X3P52fdZ5RvCNeFY3wTuqqj3r96JjR9i5nWtmwqEHpEHXjDuPb
 /9bQPXndT1Bojrw8pAhiuXsVB6B9WP5TPr/O/zA0/gu+/zB0Q+9AkzH6JS3YkOfTI62D
 Ttzg==
X-Received: by 10.50.50.142 with SMTP id c14mr23678971igo.42.1423583988158;
 Tue, 10 Feb 2015 07:59:48 -0800 (PST)
MIME-Version: 1.0
Received: by 10.64.107.138 with HTTP; Tue, 10 Feb 2015 07:59:28 -0800 (PST)
From: Luca Pizzamiglio <luca.pizzamiglio@gmail.com>
Date: Tue, 10 Feb 2015 16:59:28 +0100
Message-ID: <CAB88xy_9xhyjCB_tvbrHvqWXDUWDya1M_5Y4BJRVz6jdBH9Kcw@mail.gmail.com>
Subject: Memory modified after free & Kernel panic with current (r278031)
To: FreeBSD Current <freebsd-current@freebsd.org>
Content-Type: text/plain; charset=UTF-8
X-BeenThere: freebsd-current@freebsd.org
X-Mailman-Version: 2.1.18-1
Precedence: list
List-Id: Discussions about the use of FreeBSD-current
 <freebsd-current.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-current>, 
 <mailto:freebsd-current-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-current/>
List-Post: <mailto:freebsd-current@freebsd.org>
List-Help: <mailto:freebsd-current-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
 <mailto:freebsd-current-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 10 Feb 2015 15:59:55 -0000

Hallo,

I'm still fighting with MinnowBoard...
When I set the network interface I get a bunch of "Memory modified
after free" messages.
If I wait long enough (a couple of minutes) I get a kernel panic.

Here an example with the dmesg (https://pastebin.mozilla.org/8657938)

I've tested it using 10.1-STABLE, same messages after ifconfig, but
the kernel panic is different.
Here a verbose example of it (https://pastebin.mozilla.org/8658082)

On 10, I see really often the value 0x3201c040 causing segmentation
fault (!), but I don't know where it comes from.

I'm still debugging it, but it could be that the init procedure of
re(4) cannot correctly stop the device (a normal Realtek 8168) and the
dma address are rewritten by receiving packets.

Has someone some tip/ideas?

thanks in advance for the help

Best regards,
pizzamig