Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 3 Apr 2006 18:35:58 +0100 (BST)
From:      Robert Watson <rwatson@FreeBSD.org>
To:        David Wolfskill <david@catwhisker.org>, dhw@mail-abuse.org
Cc:        current@freebsd.org
Subject:   Re: Panic "div_bind: inp == NULL" on -CURRENT from 02 Apr 2006
Message-ID:  <20060403183158.O76562@fledge.watson.org>
In-Reply-To: <20060403172611.GA83741@bunrab.catwhisker.org>
References:  <20060403172611.GA83741@bunrab.catwhisker.org>

next in thread | previous in thread | raw e-mail | index | archive | help

On Mon, 3 Apr 2006, David Wolfskill wrote:

> [I'm at least a week behind on mail -- just got back in town over the 
> weekend -- so if this has been covered, I apologize for the duplication.]
>
> I've been tracking both RELENG_6 & HEAD on my laptop on a daily basis for a 
> while; I also try to track them on a weekly basis on my desktop at work. 
> On 25 March, I had no problem doing that; on 02 April, RELENG_6 was fine, 
> but HEAD hit a panic during the transition from single-user mode to 
> multi-user mode -- but only on my work desktop (my laptop doesn't exhibit 
> the problem at all).
>
> I *suspect* -- based on the sequence of events -- that the initial panic may 
> well be associated with a NIC, and that the kbd driver gets a secondary 
> panic; regardless of what I suspect, the keyboard isn't usable once the 
> panic message spits out, but a serial console does work.
>
> The nice thing is that the panic appears to be 100% reproducible; here is a 
> cut/paste from the serial console:

You'll want to pick up ip_divert.c:1.117, which I committed earlier today:

   revision 1.117
   date: 2006/04/03 09:01:17;  author: rwatson;  state: Exp;  lines: +1 -1
   Correct incorrect assertion in div_bind(): inp must not be NULL here.

   Reported by:    tegge
   MFC after:      3 months

This was fallout from my network stack related commits over the weekend, which 
I'm in the process of sweeping up.

Robert N M Watson

>
> /boot/kernel/acpi.ko text=0x43b18 data=0x24a0+0xff0 syms=[0x4+0x7c10+0x4+0xa8bb]
> GDB: no debug ports present
> KDB: debugger backends: ddb
> KDB: current backend: ddb
> Copyright (c) 1992-2006 The FreeBSD Project.
> Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
>        The Regents of the University of California. All rights reserved.
> FreeBSD 7.0-CURRENT #41: Sun Apr  2 16:10:36 PDT 2006
>    root@catmint.mail-abuse.org:/common/S3/obj/usr/src/sys/CATMINT
> WARNING: WITNESS option enabled, expect reduced performance.
> ACPI APIC Table: <DELL   3000   >
> Timecounter "i8254" frequency 1193182 Hz quality 0
> CPU: Intel(R) Pentium(R) 4 CPU 2.80GHz (2793.02-MHz 686-class CPU)
>  Origin = "GenuineIntel"  Id = 0xf41  Stepping = 1
>  Features=0xbfebfbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE>
>  Features2=0x441d<SSE3,RSVD2,MON,DS_CPL,CNTX-ID,<b14>>
> real memory  = 535232512 (510 MB)
> avail memory = 514162688 (490 MB)
> ioapic0: Changing APIC ID to 1
> ioapic0 <Version 2.0> irqs 0-23 on motherboard
> kbd1 at kbdmux0
> npx0: [FAST]
> npx0: <math processor> on motherboard
> npx0: INT 16 interface
> acpi0: <DELL 3000   > on motherboard
> acpi0: Power Button (fixed)
> Timecounter "ACPI-fast" frequency 3579545 Hz quality 1000
> acpi_timer0: <24-bit timer at 3.579545MHz> port 0x808-0x80b on acpi0
> cpu0: <ACPI CPU> on acpi0
> acpi_button0: <Power Button> on acpi0
> pcib0: <ACPI Host-PCI bridge> port 0xcf8-0xcff on acpi0
> pci0: <ACPI PCI bus> on pcib0
> vgapci0: <VGA-compatible display> port 0xed98-0xed9f mem 0xe8000000-0xefffffff,0xfeb80000-0xfebfffff irq 16 at device 2.0 on pci0
> agp0: <Intel 82865G (865G GMCH) SVGA controller> on vgapci0
> agp0: detected 892k stolen memory
> agp0: aperture size is 128M
> uhci0: <Intel 82801EB (ICH5) USB controller USB-A> port 0xff80-0xff9f irq 16 at device 29.0 on pci0
> uhci0: [GIANT-LOCKED]
> usb0: <Intel 82801EB (ICH5) USB controller USB-A> on uhci0
> usb0: USB revision 1.0
> uhub0: <Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1> on usb0
> uhub0: 2 ports with 2 removable, self powered
> uhci1: <Intel 82801EB (ICH5) USB controller USB-B> port 0xff60-0xff7f irq 19 at device 29.1 on pci0
> uhci1: [GIANT-LOCKED]
> usb1: <Intel 82801EB (ICH5) USB controller USB-B> on uhci1
> usb1: USB revision 1.0
> uhub1: <Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1> on usb1
> uhub1: 2 ports with 2 removable, self powered
> uhci2: <Intel 82801EB (ICH5) USB controller USB-D> port 0xff20-0xff3f irq 16 at device 29.3 on pci0
> uhci2: [GIANT-LOCKED]
> usb2: <Intel 82801EB (ICH5) USB controller USB-D> on uhci2
> usb2: USB revision 1.0
> uhub2: <Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1> on usb2
> uhub2: 2 ports with 2 removable, self powered
> ehci0: <Intel 82801EB/R (ICH5) USB 2.0 controller> mem 0xffa80800-0xffa80bff irq 23 at device 29.7 on pci0
> ehci0: [GIANT-LOCKED]
> usb3: EHCI version 1.0
> usb3: wrong number of companions (4 != 3)
> usb3: companion controllers, 2 ports each: usb0 usb1 usb2
> usb3: <Intel 82801EB/R (ICH5) USB 2.0 controller> on ehci0
> usb3: USB revision 2.0
> uhub3: <Intel EHCI root hub, class 9/0, rev 2.00/1.00, addr 1> on usb3
> uhub3: 8 ports with 8 removable, self powered
> pcib1: <ACPI PCI-PCI bridge> at device 30.0 on pci0
> pci1: <ACPI PCI bus> on pcib1
> dc0: <Intel 21143 10/100BaseTX> port 0xdf00-0xdf7f mem 0xfe9fec00-0xfe9fefff irq 21 at device 0.0 on pci1
> miibus0: <MII bus> on dc0
> ukphy0: <Generic IEEE 802.3u media interface> on miibus0
> ukphy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
> dc0: Ethernet address: 00:c0:f0:3b:ea:b7
> fxp0: <Intel 82801BA (D865) Pro/100 VE Ethernet> port 0xdec0-0xdeff mem 0xfe9ff000-0xfe9fffff irq 20 at device 8.0 on pci1
> miibus1: <MII bus> on fxp0
> inphy0: <i82562ET 10/100 media interface> on miibus1
> inphy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
> fxp0: Ethernet address: 00:13:20:2d:f5:b7
> isab0: <PCI-ISA bridge> at device 31.0 on pci0
> isa0: <ISA bus> on isab0
> atapci0: <Intel ICH5 UDMA100 controller> port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xffa0-0xffaf mem 0xfeb7fc00-0xfeb7ffff irq 18 at device 31.1 on pci0
> ata0: <ATA channel 0> on atapci0
> ata1: <ATA channel 1> on atapci0
> pci0: <serial bus, SMBus> at device 31.3 (no driver attached)
> pcm0: <Intel ICH5 (82801EB)> port 0xee00-0xeeff,0xedc0-0xedff mem 0xfeb7fa00-0xfeb7fbff,0xfeb7f900-0xfeb7f9ff irq 17 at device 31.5 on pci0
> pcm0: primary codec not ready!
> pcm0: <Analog Devices AD1980 AC97 Codec>
> speaker0: <PC speaker> port 0x61 on acpi0
> atkbdc0: <Keyboard controller (i8042)> port 0x60,0x64 irq 1 on acpi0
> atkbd0: <AT Keyboard> irq 1 on atkbdc0
> kbd0 at atkbd0
> atkbd0: [GIANT-LOCKED]
> psm0: <PS/2 Mouse> irq 12 on atkbdc0
> psm0: [GIANT-LOCKED]
> psm0: model Generic PS/2 mouse, device ID 0
> sio0: <16550A-compatible COM port> port 0x3f8-0x3ff irq 4 flags 0x10 on acpi0
> sio0: type 16550A, console
> sio0: [FAST]
> ppc0: <ECP parallel printer port> port 0x378-0x37f,0x778-0x77f irq 7 on acpi0
> ppc0: SMC-like chipset (ECP/EPP/PS2/NIBBLE) in COMPATIBLE mode
> ppc0: FIFO with 16/16/8 bytes threshold
> ppbus0: <Parallel port bus> on ppc0
> plip0: <PLIP network interface> on ppbus0
> lpt0: <Printer> on ppbus0
> lpt0: Interrupt-driven port
> ppi0: <Parallel I/O> on ppbus0
> ppc0: [GIANT-LOCKED]
> pmtimer0 on isa0
> orm0: <ISA Option ROMs> at iomem 0xc0000-0xca7ff,0xca800-0xcbfff pnpid ORM0000 on isa0
> sc0: <System console> at flags 0x100 on isa0
> sc0: VGA <16 virtual consoles, flags=0x300>
> sio1: configured irq 3 not in bitmap of probed irqs 0
> sio1: port may not be enabled
> vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
> Timecounter "TSC" frequency 2793016905 Hz quality 800
> Timecounters tick every 1.000 msec
> IPv6 packet filtering initialized, unlimited logging
> ipfw2 (+ipv6) initialized, divert loadable, rule-based forwarding enabled, default to deny, logging unlimited
> ad0: 38146MB <WDC WD400BB-75JHC0 06.01C06> at ata0-master UDMA100
> acd0: CDROM <LITE-ON CD-ROM LTN-489S/8DS2> at ata1-master UDMA33
> Trying to mount root from ufs:/dev/ad0s3a
> dc0: link state changed to UP
> fxp0: link state changed to UP
> panic: div_bind: inp == NULL
> cpuid = 0
> KDB: enter: panic
> [thread pid 254 tid 100056 ]
> Stopped at      kdb_enter+0x2b: nop
> db> bt
> Tracing pid 254 tid 100056 td 0xc34236c0
> kdb_enter(c0866a2c) at kdb_enter+0x2b
> panic(c08758c6,0,c34236c0,c3680240,d568dc44) at panic+0x127
> div_bind(c367abac,c3680240,c34236c0,d568dc68,c0685f87) at div_bind+0x1d
> sobind(c367abac,c3680240,c34236c0,c35d0b40,d568dd04) at sobind+0x16
> kern_bind(c34236c0,3,c3680240,c3680240,0) at kern_bind+0x5b
> bind(c34236c0,d568dd04,c0928080,c32e4a00,0) at bind+0x2f
> syscall(3b,3b,3b,8210150,bfbfee20) at syscall+0x27e
> Xint0x80_syscall() at Xint0x80_syscall+0x1f
> --- syscall (104, FreeBSD ELF32, bind), eip = 0x28103d37, esp = 0xbfbeeb9c, ebp = 0xbfbfee48 ---
> db> panic
> panic: from debugger
> cpuid = 0
> Uptime: 5s
> Dumping 510 MB (2 chunks)
>  chunk 0: 1MB (159 pages) ... ok
>  chunk 1: 510MB (130416 pages) 494 478 462 446 430 414 398 382 366 350 334 318 302 286 270 254 238 222 206 190 174 158 142 126 110 94 78 62 46 30 14 ... ok
>
> Dump complete
> Automatic reboot in 15 seconds - press a key on the console to abort
>
>
> At this point, I'll await suggestions.  I can make the dump available, I
> expect, should that be useful.  I'm not sure how soon I will be able to
> do much with my email backlog (which was at around 1K messages), so I've
> set Reply-To to add an address for which I'll be monitoring mail more
> closely during the workday.
>
> Oh:  the local mirror from which /usr/src was updated had last been
> updated a bit before 0400 hrs US/Pacific on 02 Apr 2006.
>
> Peace,
> david
> -- 
> David H. Wolfskill				david@catwhisker.org
> Mail filters, like sewers, need to be most restrictive at the point of entry.
>
> See http://www.catwhisker.org/~david/publickey.gpg for my public key.
> _______________________________________________
> freebsd-current@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-current
> To unsubscribe, send any mail to "freebsd-current-unsubscribe@freebsd.org"
>



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20060403183158.O76562>