Date: Mon, 31 Dec 2001 09:35:46 -0800 (PST) From: Robin Breathe <robin@isometry.net> To: freebsd-gnats-submit@FreeBSD.org Subject: kern/33397: "panic: unknown/reserved trap" with moderate network usage and recent -STABLE Message-ID: <200112311735.fBVHZkL58320@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 33397 >Category: kern >Synopsis: "panic: unknown/reserved trap" with moderate network usage and recent -STABLE >Confidential: no >Severity: critical >Priority: high >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Mon Dec 31 09:40:01 PST 2001 >Closed-Date: >Last-Modified: >Originator: Robin Breathe >Release: 4.5-PRERELEASE (~20011230) >Organization: isometry.net >Environment: [root@quadric ~]# uname -a FreeBSD quadric.iso 4.5-PRERELEASE FreeBSD 4.5-PRERELEASE #0: Mon Dec 31 16:30:27 UTC 2001 root@quadric.iso:/usr/src/sys/compile/QUADRIC i386 >Description: Under moderate to heavy network load, the kernel panics. For further output files, see http://isometry.net/freebsd/ (uploading@17:30GMT) ################ a) kernel panic: mp_lock = 00000002; cpuid = 0; lapic.id = 00000000 instruction pointer = 0x8:0xc01669e3 ^^^^^^ --> nm -n /kernel | grep c01669 c01669fc t kmeminit --> nm -n /kernel | grep c0166 c01668b0 T free c01669fc t kmeminit (amongst others out of range) stack pointer = 0x10:0xd644fe18 frame pointer = 0x10:0xd644fe30 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, def32 1, gran 1 processor eflags = interrupt enabled, IOPL = 0 current process = 229 (ping) interrupt mask = net tty bio cam <- SMP: XXX trap number = 30 panic: unknown/reserved trap mp_lock = 00000002; cpuid = 0; lapic.id = 00000000 boot() called on cpu#0 syncing disks... 11 2 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 giving up on 1 buffers Uptime: 3m46s dumping to dev #ad/0x20001, offset 983040 dump ata0: resetting devices .. done 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 succeeded Automatic reboot in 15 seconds - press a key on the console to abort ################ b) gdb trace: [root@quadric ~]# gdb -q -k /sys/compile/QUADRIC/kernel.debug /var/crash/vmcore.1 SMP 2 cpus IdlePTD at phsyical address 0x002fc000 initial pcb at physical address 0x00276500 panicstr: unknown/reserved trap panic messages: --- panic: unknown/reserved trap mp_lock = 00000002; cpuid = 0; lapic.id = 00000000 boot() called on cpu#0 syncing disks... 11 2 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 giving up on 1 buffers Uptime: 3m46s dumping to dev #ad/0x20001, offset 983040 dump ata0: resetting devices .. done 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 --- #0 dumpsys () at ../../kern/kern_shutdown.c:473 473 if (dumping++) { (kgdb) where #0 dumpsys () at ../../kern/kern_shutdown.c:473 #1 0xc016adb8 in boot (howto=256) at ../../kern/kern_shutdown.c:313 #2 0xc016b1d0 in poweroff_wait (junk=0xc024f0dc, howto=30) at ../../kern/kern_shutdown.c:581 #3 0xc021ab2a in trap_fatal (frame=0xd644fdd8, eva=0) at ../../i386/i386/trap.c:958 #4 0xc021a467 in trap (frame={tf_fs = 24, tf_es = -1071251440, tf_ds = -700186608, tf_edi = -1068452376, tf_esi = -1071161904, tf_ebp = -700121552, tf_isp = -700121596, tf_ebx = -1071240576, tf_edx = -865562752, tf_ecx = 4, tf_eax = -865562784, tf_trapno = 30, tf_err = 0, tf_eip = -1072272925, tf_cs = 8, tf_eflags = 646, tf_esp = 20, tf_ss = -700121332}) at ../../i386/i386/trap.c:618 #5 0xc01669e3 in free (addr=0xcc688f80, type=0xc0262a80) at ../../kern/kern_malloc.c:399 #6 0xc018dd35 in recvit (p=0xd6439780, s=3, mp=0xd644ff0c, namelenp=0x0) at ../../kern/uipc_syscalls.c:891 #7 0xc018dfc3 in recvmsg (p=0xd6439780, uap=0xd644ff80) at ../../kern/uipc_syscalls.c:1051 #8 0xc021ae59 in syscall2 (frame={tf_fs = -1071120337, tf_es = 47, tf_ds = -1078001617, tf_edi = 0, tf_esi = 1, tf_ebp = -1077937036, tf_isp = -700121132, tf_ebx = -1077937736, tf_edx = -1077937872, tf_ecx = -1077937872, tf_eax = 27, tf_trapno = 22, tf_err = 2, tf_eip = 134530520, tf_cs = 31, tf_eflags = 659, tf_esp = -1077938024, ---Type <return> to continue, or q <return> to quit--- tf_ss = 47}) at ../../i386/i386/trap.c:1155 #9 0xc02087cb in Xint0x80_syscall () #10 0x8048135 in ?? () (kgdb) ################ c) kernel config: machine i386 cpu I686_CPU ident QUADRIC maxusers 256 options NMBCLUSTERS=65536 #makeoptions DEBUG=-g #Build kernel with gdb(1) debug symbols options MAXMEM=32768 #options DDB options INET #InterNETworking options FFS #Berkeley Fast Filesystem options FFS_ROOT #FFS usable as root device [keep this!] options SOFTUPDATES #Enable FFS soft updates support options MFS #Memory Filesystem options CD9660 #ISO 9660 Filesystem options PROCFS #Process filesystem options COMPAT_43 #Compatible with BSD 4.3 [KEEP THIS!] options SCSI_DELAY=4000 #Delay (in ms) before probing SCSI options UCONSOLE #Allow users to grab the console options KTRACE #ktrace(1) support options SYSVSHM #SYSV-style shared memory options SYSVMSG #SYSV-style message queues options SYSVSEM #SYSV-style semaphores options P1003_1B #Posix P1003_1B real-time extensions options _KPOSIX_PRIORITY_SCHEDULING options ICMP_BANDLIM #Rate limit bad replies options KBD_INSTALL_CDEV # install a CDEV entry in /dev # To make an SMP kernel, the next two are needed options SMP # Symmetric MultiProcessor Kernel options APIC_IO # Symmetric (APIC) I/O device isa #device eisa device pci # Floppy drives #device fdc0 at isa? port IO_FD1 irq 6 drq 2 #device fd0 at fdc0 drive 0 # ATA and ATAPI devices device ata0 at isa? port IO_WD1 irq 14 device ata1 at isa? port IO_WD2 irq 15 device ata device atadisk # ATA disk drives device atapicd # ATAPI CDROM drives options ATA_STATIC_ID #Static device numbering # SCSI Controllers device ahc # AHA2940 and onboard AIC7xxx devices # SCSI peripherals device scbus # SCSI bus (required) device da # Direct Access (disks) device sa # Sequential Access (tape etc) device cd # CD device pass # Passthrough device (direct SCSI access) # atkbdc0 controls both the keyboard and the PS/2 mouse device atkbdc0 at isa? port IO_KBD device atkbd0 at atkbdc? irq 1 flags 0x1 device psm0 at atkbdc? irq 12 device vga0 at isa? # syscons is the default console driver, resembling an SCO console device sc0 at isa? flags 0x100 # Floating point support - do not disable. device npx0 at nexus? port IO_NPX irq 13 # Power management support (see LINT for more options) #device apm0 at nexus? disable flags 0x20 # Advanced Power Management # Serial (COM) ports device sio0 at isa? port IO_COM1 flags 0x10 irq 4 options CONSPEED=115200 # Parallel port #device ppc0 at isa? irq 7 #device ppbus # Parallel port bus (required) #device lpt # Printer #device plip # TCP/IP over parallel #device ppi # Parallel port interface device #device vpo # Requires scbus and da # PCI Ethernet NICs that use the common MII bus controller code. # NOTE: Be sure to keep the 'device miibus' line in order to use these NICs! device miibus # MII bus support device fxp # Intel EtherExpress PRO/100B (82557, 82558) # Pseudo devices - the number indicates how many units to allocate. pseudo-device loop # Network loopback pseudo-device ether # Ethernet support pseudo-device pty # Pseudo-ttys (telnet etc) #pseudo-device md # Memory "disks" #pseudo-device gif # IPv6 and IPv4 tunneling #pseudo-device faith 1 # IPv6-to-IPv4 relaying (translation) # The `bpf' pseudo-device enables the Berkeley Packet Filter. # Be aware of the administrative consequences of enabling this! pseudo-device bpf #Berkeley packet filter # IPFilter support options IPFILTER #ipfilter support options IPFILTER_LOG #ipfilter logging ################ d) `dmesg -a`: Copyright (c) 1992-2001 The FreeBSD Project. Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 The Regents of the University of California. All rights reserved. FreeBSD 4.5-PRERELEASE #0: Mon Dec 31 16:30:27 UTC 2001 root@quadric.iso:/usr/src/sys/compile/QUADRIC Timecounter "i8254" frequency 1193182 Hz CPU: Pentium II/Pentium II Xeon/Celeron (400.91-MHz 686-class CPU) Origin = "GenuineIntel" Id = 0x665 Stepping = 5 Features=0x183fbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR> real memory = 33554432 (32768K bytes) avail memory = 29130752 (28448K bytes) Programming 24 pins in IOAPIC #0 IOAPIC #0 intpin 2 -> irq 0 FreeBSD/SMP: Multiprocessor motherboard cpu0 (BSP): apic id: 0, version: 0x00040011, at 0xfee00000 cpu1 (AP): apic id: 1, version: 0x00040011, at 0xfee00000 io0 (APIC): apic id: 2, version: 0x00170011, at 0xfec00000 Preloaded elf kernel "kernel" at 0xc02dd000. Preloaded userconfig_script "/boot/kernel.conf" at 0xc02dd09c. Pentium Pro MTRR support enabled Using $PIR table, 8 entries at 0xc00f8100 npx0: <math processor> on motherboard npx0: INT 16 interface pcib0: <Intel 82443BX (440 BX) host to PCI bridge> on motherboard IOAPIC #0 intpin 19 -> irq 2 pci0: <PCI bus> on pcib0 pcib1: <Intel 82443BX (440 BX) PCI-PCI (AGP) bridge> at device 1.0 on pci0 pci1: <PCI bus> on pcib1 isab0: <Intel 82371AB PCI to ISA bridge> at device 7.0 on pci0 isa0: <ISA bus> on isab0 atapci0: <Intel PIIX4 ATA33 controller> port 0xffa0-0xffaf at device 7.1 on pci0 ata0: at 0x1f0 irq 14 on atapci0 ata1: at 0x170 irq 15 on atapci0 pci0: <Intel 82371AB/EB (PIIX4) USB controller> at 7.2 irq 2 Timecounter "PIIX" frequency 3579545 Hz chip1: <Intel 82371AB Power management controller> port 0x440-0x44f at device 7.3 on pci0 pcib2: <DEC 21154 PCI-PCI bridge> at device 14.0 on pci0 IOAPIC #0 intpin 17 -> irq 16 IOAPIC #0 intpin 18 -> irq 17 pci2: <PCI bus> on pcib2 fxp0: <Intel Pro 10/100B/100+ Ethernet> port 0xcc00-0xcc3f mem 0xefd00000-0xefdfffff,0xefeff000-0xefefffff irq 16 at device 4.0 on pci2 fxp0: Ethernet address 00:02:a5:5c:7e:78 inphy0: <i82555 10/100 media interface> on miibus0 inphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto fxp1: <Intel Pro 10/100B/100+ Ethernet> port 0xc800-0xc83f mem 0xefc00000-0xefcfffff,0xefefe000-0xefefefff irq 17 at device 5.0 on pci2 fxp1: Ethernet address 00:02:a5:5c:7e:79 inphy1: <i82555 10/100 media interface> on miibus1 inphy1: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto atkbdc0: <Keyboard controller (i8042)> at port 0x60,0x64 on isa0 sio0 at port 0x3f8-0x3ff irq 4 flags 0x10 on isa0 sio0: type 16550A, console RTC BIOS diagnostic error 20<config_unit> APIC_IO: Testing 8254 interrupt delivery APIC_IO: routing 8254 via IOAPIC #0 intpin 2 IP Filter: v3.4.20 initialized. Default = pass all, Logging = enabled SMP: AP CPU #1 Launched! ad0: 38166MB <ST340823A> [77545/16/63] at ata0-master UDMA33 Mounting root from ufs:/dev/ad0s1a swapon: adding /dev/ad0s1b as swap device Automatic boot in progress... /dev/ad0s1a: FILESYSTEM CLEAN; SKIPPING CHECKS /dev/ad0s1a: clean, 194141 free (661 frags, 24185 blocks, 0.3% fragmentation) /dev/ad0s1e: FILESYSTEM CLEAN; SKIPPING CHECKS /dev/ad0s1e: clean, 198303 free (767 frags, 24692 blocks, 0.3% fragmentation) /dev/ad0s1f: FILESYSTEM CLEAN; SKIPPING CHECKS /dev/ad0s1f: clean, 875746 free (90 frags, 109457 blocks, 0.0% fragmentation) /dev/ad0s1g: FILESYSTEM CLEAN; SKIPPING CHECKS /dev/ad0s1g: clean, 3270285 free (51261 frags, 402378 blocks, 1.3% fragmentation) /dev/ad0s1h: FILESYSTEM CLEAN; SKIPPING CHECKS /dev/ad0s1h: clean, 1856477 free (2941 frags, 231692 blocks, 0.1% fragmentation) /dev/ad0s1d: FILESYSTEM CLEAN; SKIPPING CHECKS /dev/ad0s1d: clean, 4044086 free (222 frags, 505483 blocks, 0.0% fragmentation) Doing initial network setup: hostname ipmon ipfilter ipnat 0 entries flushed from NAT table 0 entries flushed from NAT list . fxp0: flags=8802<BROADCAST,SIMPLEX,MULTICAST> mtu 1500 ether 00:02:a5:5c:7e:78 media: Ethernet autoselect (none) status: no carrier fxp1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500 inet 192.168.0.1 netmask 0xffffff00 broadcast 192.168.0.255 ether 00:02:a5:5c:7e:79 media: Ethernet autoselect (100baseTX <full-duplex>) status: active lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384 inet 127.0.0.1 netmask 0xff000000 filter sync'd Additional routing options: IP gateway=YES TCP keepalive=YES . Routing daemons: . Additional daemons: syslogd . dumpon: crash dumps to /dev/ad0s1b (116, 131073) Checking for core dump: savecore: no core dump Doing additional network setup: . Starting final network daemons: . ELF ldconfig path: /usr/lib /usr/lib/compat /usr/local/lib a.out ldconfig path: /usr/lib/aout /usr/lib/compat/aout Starting standard daemons: cron sshd usbd uhci0: <Intel 82371AB/EB (PIIX4) USB controller> port 0xdc00-0xdc1f irq 2 at device 7.2 on pci0 usb0: <Intel 82371AB/EB (PIIX4) USB controller> on uhci0 usb0: USB revision 1.0 uhub0: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1 uhub0: 2 ports with 2 removable, self powered . Initial rc.i386 initialization: . Configuring syscons: keymap /etc/rc.syscons: cannot open /dev/ttyv0: no such device or address blanktime /etc/rc.syscons: cannot open /dev/ttyv0: no such device or address . Additional ABI support: . Local package initialization: Starting services: svscan dnscache tinydns . postfix Samba socks5 xinetd zebedee-timmy . Additional TCP options: . Mon Dec 31 16:42:17 UTC 2001 ################ e) `mptable`: =============================================================================== MPTable, version 2.0.15 ------------------------------------------------------------------------------- MP Floating Pointer Structure: location: BIOS physical address: 0x000fb4b0 signature: '_MP_' length: 16 bytes version: 1.4 checksum: 0xff mode: Virtual Wire ------------------------------------------------------------------------------- MP Config Table Header: physical address: 0x000f7220 signature: 'PCMP' base table length: 308 version: 1.4 checksum: 0xb5 OEM ID: 'MSI ' Product ID: '440BX ' OEM table pointer: 0x00000000 OEM table size: 0 entry count: 30 local APIC address: 0xfee00000 extended table length: 0 extended table checksum: 0 ------------------------------------------------------------------------------- MP Config Base Table Entries: -- Processors: APIC ID Version State Family Model Step Flags 0 0x11 BSP, usable 6 6 5 0x183fbff 1 0x11 AP, usable 6 6 5 0x183fbff -- Bus: Bus ID Type 0 PCI 1 PCI 2 PCI 3 ISA -- I/O APICs: APIC ID Version State Address 2 0x11 usable 0xfec00000 -- I/O Ints: Type Polarity Trigger Bus ID IRQ APIC ID PIN# ExtINT conforms conforms 3 0 2 0 INT conforms conforms 3 1 2 1 INT conforms conforms 3 0 2 2 INT conforms conforms 3 3 2 3 INT conforms conforms 3 4 2 4 INT conforms conforms 3 5 2 5 INT conforms conforms 3 6 2 6 INT conforms conforms 3 7 2 7 INT active-hi edge 3 8 2 8 INT conforms conforms 3 9 2 9 INT conforms conforms 3 10 2 10 INT conforms conforms 3 11 2 11 INT conforms conforms 3 12 2 12 INT conforms conforms 3 13 2 13 INT conforms conforms 3 14 2 14 INT conforms conforms 3 15 2 15 INT active-lo level 2 4:A 2 17 INT active-lo level 2 5:A 2 18 INT active-lo level 0 7:D 2 19 INT active-lo conforms 3 9 2 20 SMI conforms conforms 3 0 2 23 -- Local Ints: Type Polarity Trigger Bus ID IRQ APIC ID PIN# ExtINT conforms conforms 0 0:A 255 0 NMI conforms conforms 0 0:A 255 1 =============================================================================== ################ >How-To-Repeat: do anything which puts reasonable strain on the networking code. e.g. ping -f <lan_machine2> e.g. ftp download across ipnat'd connection >Fix: Unknown >Release-Note: >Audit-Trail: >Unformatted: To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-bugs" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200112311735.fBVHZkL58320>