From owner-freebsd-stable@FreeBSD.ORG Thu Mar 10 03:24:09 2005 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 483C516A4CE for ; Thu, 10 Mar 2005 03:24:09 +0000 (GMT) Received: from carver.gumbysoft.com (carver.gumbysoft.com [66.220.23.50]) by mx1.FreeBSD.org (Postfix) with ESMTP id 04A6C43D4C for ; Thu, 10 Mar 2005 03:24:09 +0000 (GMT) (envelope-from dwhite@gumbysoft.com) Received: by carver.gumbysoft.com (Postfix, from userid 1000) id F1C6672DD4; Wed, 9 Mar 2005 19:24:08 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by carver.gumbysoft.com (Postfix) with ESMTP id F015A72DCB; Wed, 9 Mar 2005 19:24:08 -0800 (PST) Date: Wed, 9 Mar 2005 19:24:08 -0800 (PST) From: Doug White To: pcasidy@casidy.com In-Reply-To: <20050309155825.2B6F6B86C@smtp.casidy.net> Message-ID: <20050309192326.A53002@carver.gumbysoft.com> References: <20050309155825.2B6F6B86C@smtp.casidy.net> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII cc: freebsd-stable@freebsd.org Subject: Re: if_bfe/uhci: storm interrupt Fatal trap 12 X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 Mar 2005 03:24:09 -0000 On Wed, 9 Mar 2005 pcasidy@casidy.com wrote: > On 7 Mar, Doug White wrote: > > Thanks for the detailed message. I didn't realize that we'd enabled DDB in > > the snapshot kernel :) > > > > Anyway this looks like a bug in the bfe driver. It appears to be trying > > to free a DMA map that is either unallocated or got spammed. You may want > > to repost this to freebsd-current@freebsd.org and use a subject like > > "Use-after-free in bfe" since I think the interrupt storm message is > > secondary. > > > > A capture of boot -v might also be useful, or at minumum anything the bfe > > driver output during boot ('dmesg | grep bfe' might work with the fixit > > disc). A crashdump would be nice too, but you'd likely need to find a > > different network adapter. > > > > I have escalated this problem to current@. > > I have also built a STABLE kernel with DDD and KDB options and the line > where the problem occurs is > > _bus_dmamap_unload+0x16: movl 0x10(%eax),%eax That was in the previous trace. > I have enable crash dumps (I think) but when booting I have "savecore: > no dumps found". I think the problem is that i have 1.5Gb of memory and > only 1Gb of swap. Yeah, that will be a problem. -- Doug White | FreeBSD: The Power to Serve dwhite@gumbysoft.com | www.FreeBSD.org