Date: Mon, 8 Sep 2003 20:47:07 +0200 From: Morten Rodal <morten@rodal.no> To: current@freebsd.org Subject: FreeBSD 5.1-CURRENT and panic in xl(4) Message-ID: <20030908184706.GB598@atlantis.rodal.no>
next in thread | raw e-mail | index | archive | help
--B4IIlcmfBL/1gGOG
Content-Type: multipart/mixed; boundary="p4qYPpj5QlsIQJ0K"
Content-Disposition: inline
--p4qYPpj5QlsIQJ0K
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Hi,
I've been hitting this panic two times now, and I thought I'd report
it in the hope that someone can tell me what might be wrong.
Not very long ago I bought a new ethernet card, a 3C905, exactly the same as
the one I already had but this one apparently has rxcsum and txcsum.
The computer is an SMP machine with two xl(4) network cards, but only
xl1 has a network cable attached to it. The kernel is from August 22.
I will keep the crash dump around for a while if anyone has any other
requests, or would like to poke around in it.
At the time of the crash there wasn't much network traffic, but I
think I maybe got some bad hardware or that the xl driver is not fully
MPSAFE?
--=20
Morten Rodal
--p4qYPpj5QlsIQJ0K
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: attachment; filename="crash.10"
Content-Transfer-Encoding: quoted-printable
Script started on Mon Sep 8 20:31:11 2003
slurp# gdb -k kernel.10 vmcore.10
GNU gdb 5.2.1 (FreeBSD)
Copyright 2002 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain condition=
s.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for details.
This GDB was configured as "i386-undermydesk-freebsd"...
panic: page fault
panic messages:
---
Fatal trap 12: page fault while in kernel mode
cpuid =3D 1; lapic.id =3D 00000000
fault virtual address =3D 0xafa0856a
fault code =3D supervisor read, page not present
instruction pointer =3D 0x8:0xc0258e3e
stack pointer =3D 0x10:0xd4ac2c64
frame pointer =3D 0x10:0xd4ac2c88
code segment =3D base 0x0, limit 0xfffff, type 0x1b
=3D DPL 0, pres 1, def32 1, gran 1
processor eflags =3D interrupt enabled, resume, IOPL =3D 0
current process =3D 29 (irq10: xl1)
trap number =3D 12
panic: page fault
cpuid =3D 1; lapic.id =3D 00000000
Stack backtrace:
boot() called on cpu#1
syncing disks, buffers remaining... 3458 3458 3458 3455 3455 3452 3452 3452=
3452 3452 3452 3452 3452 3452 3452 3452 3452 3452 3452 3452 3452 3452 3452=
3452 3452=20
giving up on 1024 buffers
Uptime: 17d0h58m39s
Dumping 447 MB
16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 256 272 288 304 320 =
336 352 368 384 400 416 432
---
Reading symbols from /usr/obj/usr/src/sys/slurp/modules/usr/src/sys/modules=
/linux/linux.ko.debug...done.
Loaded symbols for /usr/obj/usr/src/sys/slurp/modules/usr/src/sys/modules/l=
inux/linux.ko.debug
Reading symbols from /boot/kernel/snd_sb16.ko...done.
Loaded symbols for /boot/kernel/snd_sb16.ko
Reading symbols from /boot/kernel/snd_sbc.ko...done.
Loaded symbols for /boot/kernel/snd_sbc.ko
Reading symbols from /boot/kernel/snd_pcm.ko...done.
Loaded symbols for /boot/kernel/snd_pcm.ko
Reading symbols from /usr/obj/usr/src/sys/slurp/modules/usr/src/sys/modules=
/acpi/acpi.ko.debug...done.
Loaded symbols for /usr/obj/usr/src/sys/slurp/modules/usr/src/sys/modules/a=
cpi/acpi.ko.debug
Reading symbols from /boot/kernel/nvidia.ko...done.
Loaded symbols for /boot/kernel/nvidia.ko
Reading symbols from /usr/obj/usr/src/sys/slurp/modules/usr/src/sys/modules=
/if_gif/if_gif.ko.debug...done.
Loaded symbols for /usr/obj/usr/src/sys/slurp/modules/usr/src/sys/modules/i=
f_gif/if_gif.ko.debug
Reading symbols from /usr/obj/usr/src/sys/slurp/modules/usr/src/sys/modules=
/nfsserver/nfsserver.ko.debug...done.
Loaded symbols for /usr/obj/usr/src/sys/slurp/modules/usr/src/sys/modules/n=
fsserver/nfsserver.ko.debug
Reading symbols from /usr/obj/usr/src/sys/slurp/modules/usr/src/sys/modules=
/cd9660/cd9660.ko.debug...done.
Loaded symbols for /usr/obj/usr/src/sys/slurp/modules/usr/src/sys/modules/c=
d9660/cd9660.ko.debug
#0 doadump () at /usr/src/sys/kern/kern_shutdown.c:240
240 dumping++;
(kgdb) bt
#0 doadump () at /usr/src/sys/kern/kern_shutdown.c:240
#1 0xc01e40f6 in boot (howto=3D256) at /usr/src/sys/kern/kern_shutdown.c:3=
72
#2 0xc01e4548 in panic () at /usr/src/sys/kern/kern_shutdown.c:550
#3 0xc032a806 in trap_fatal (frame=3D0xd4ac2c24, eva=3D0)
at /usr/src/sys/i386/i386/trap.c:818
#4 0xc032a472 in trap_pfault (frame=3D0xd4ac2c24, usermode=3D0, eva=3D2946=
532714)
at /usr/src/sys/i386/i386/trap.c:732
#5 0xc0329fcd in trap (frame=3D
{tf_fs =3D -1053294568, tf_es =3D 16, tf_ds =3D 16, tf_edi =3D -13484=
34594, tf_esi =3D -1013325824, tf_ebp =3D -726913912, tf_isp =3D -726913968=
, tf_ebx =3D 1610646858, tf_edx =3D -1053074432, tf_ecx =3D -1053074432, tf=
_eax =3D -1053074432, tf_trapno =3D 12, tf_err =3D 0, tf_eip =3D -107128057=
8, tf_cs =3D 8, tf_eflags =3D 66066, tf_esp =3D 0, tf_ss =3D -1053139200}) =
at /usr/src/sys/i386/i386/trap.c:417
#6 0xc03125f8 in calltrap () at {standard input}:103
#7 0xc02a1f53 in xl_rxeof (sc=3D0xc399e000) at /usr/src/sys/pci/if_xl.c:21=
25
#8 0xc02a25bf in xl_intr (arg=3D0xc399e000) at /usr/src/sys/pci/if_xl.c:23=
44
#9 0xc01cdeb8 in ithread_loop (arg=3D0xc3977700)
at /usr/src/sys/kern/kern_intr.c:534
#10 0xc01ccb11 in fork_exit (callout=3D0xc01cdce0 <ithread_loop>, arg=3D0x0=
,=20
frame=3D0x0) at /usr/src/sys/kern/kern_fork.c:796
(kgdb) up 7
#7 0xc02a1f53 in xl_rxeof (sc=3D0xc399e000) at /usr/src/sys/pci/if_xl.c:21=
25
2125 (*ifp->if_input)(ifp, m);
(kgdb) list
2120 CSUM_DATA_VALID|CSUM_PSEUDO_HDR;
2121 m->m_pkthdr.csum_data =3D 0xffff;
2122 }
2123 }
2124=09
2125 (*ifp->if_input)(ifp, m);
2126 }
2127=09
2128 /*
2129 * Handle the 'end of channel' condition. When the upload
(kgdb) p ifp
$1 =3D (struct ifnet *) 0xc399e000
(kgdb) p m
$2 =3D (struct mbuf *) 0xc13b5c00
(kgdb) p *ifp
$3 =3D {if_softc =3D 0xc399e000, if_name =3D 0xc03691a3 "xl", if_link =3D {
tqe_next =3D 0xc39d0400, tqe_prev =3D 0xc396f008}, if_addrhead =3D {
tqh_first =3D 0xc1383400, tqh_last =3D 0xc553f460}, if_klist =3D {
slh_first =3D 0x0}, if_pcount =3D 0, if_bpf =3D 0xc3977680, if_index =
=3D 2,=20
if_unit =3D 1, if_timer =3D 5, if_nvlans =3D 0, if_flags =3D 34883,=20
if_capabilities =3D 11, if_capenable =3D 11, if_ipending =3D 0, if_linkmi=
b =3D 0x0,=20
if_linkmiblen =3D 0, if_data =3D {ifi_type =3D 6 '\006', ifi_physical =3D=
0 '\0',=20
ifi_addrlen =3D 6 '\006', ifi_hdrlen =3D 14 '\016', ifi_recvquota =3D 0=
'\0',=20
ifi_xmitquota =3D 0 '\0', ifi_mtu =3D 1500, ifi_metric =3D 0,=20
ifi_baudrate =3D 10000000, ifi_ipackets =3D 34327225, ifi_ierrors =3D 1=
02,=20
ifi_opackets =3D 28319723, ifi_oerrors =3D 0, ifi_collisions =3D 0,=20
ifi_ibytes =3D 64097766, ifi_obytes =3D 3079743810, ifi_imcasts =3D 729=
8635,=20
ifi_omcasts =3D 26, ifi_iqdrops =3D 0, ifi_noproto =3D 0, ifi_hwassist =
=3D 7,=20
ifi_unused =3D 0, ifi_lastchange =3D {tv_sec =3D 1061571726, tv_usec =
=3D 870699}},=20
if_multiaddrs =3D {tqh_first =3D 0xc5ecc6a0, tqh_last =3D 0xc3a532a0},=20
if_amcount =3D 0, if_output =3D 0xc0258550 <ether_output>,=20
if_input =3D 0xc0258de0 <ether_input>, if_start =3D 0xc02a2d00 <xl_start_=
90xB>,=20
if_done =3D 0, if_ioctl =3D 0xc02a3890 <xl_ioctl>,=20
if_watchdog =3D 0xc02a3ae0 <xl_watchdog>, if_poll_recv =3D 0, if_poll_xmi=
t =3D 0,=20
if_poll_intren =3D 0, if_poll_slowinput =3D 0, if_init =3D 0xc02a2f80 <xl=
_init>,=20
if_resolvemulti =3D 0xc0259600 <ether_resolvemulti>, if_snd =3D {ifq_head=
=3D 0x0,=20
ifq_tail =3D 0x0, ifq_len =3D 0, ifq_maxlen =3D 255, ifq_drops =3D 0, i=
fq_mtx =3D {
mtx_object =3D {lo_class =3D 0xc0386aec, lo_name =3D 0xc03691a3 "xl",=
=20
lo_type =3D 0xc0364b17 "if send queue", lo_flags =3D 196608, lo_lis=
t =3D {
---Type <return> to continue, or q <return> to quit---
tqe_next =3D 0x0, tqe_prev =3D 0x0}, lo_witness =3D 0x0}, mtx_loc=
k =3D 4,=20
mtx_recurse =3D 0, mtx_blocked =3D {tqh_first =3D 0x0, tqh_last =3D 0=
xc399e108},=20
mtx_contested =3D {le_next =3D 0x0, le_prev =3D 0xc138bb18}}},=20
if_poll_slowq =3D 0x0, if_prefixhead =3D {tqh_first =3D 0x0,=20
tqh_last =3D 0xc399e11c}, if_broadcastaddr =3D 0xc038e3a0 "=FF=FF=FF=FF=
=FF=FF",=20
if_label =3D {l_flags =3D 0, l_perpolicy =3D {{l_ptr =3D 0x0, l_long =3D =
0}, {
l_ptr =3D 0x0, l_long =3D 0}, {l_ptr =3D 0x0, l_long =3D 0}, {l_ptr=
=3D 0x0,=20
l_long =3D 0}}}}
(kgdb) p *m
$4 =3D {m_hdr =3D {mh_next =3D 0xc5f7e79d, mh_nextpkt =3D 0x63eb7ef1,=20
mh_data =3D 0xafa0855e---Can't read userspace from dump, or kernel proc=
ess---
(kgdb) quit
slurp# exit
exit
Script done on Mon Sep 8 20:31:59 2003
--p4qYPpj5QlsIQJ0K--
--B4IIlcmfBL/1gGOG
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (FreeBSD)
iD8DBQE/XM6qbWe1Cy11WVsRAkZVAJ45P5ND4rXCJGGfLyMTeSOfiTW+/QCfQqdE
CGwF/exMA1yaTxBhMr+wUT0=
=a02s
-----END PGP SIGNATURE-----
--B4IIlcmfBL/1gGOG--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030908184706.GB598>