From owner-freebsd-net@FreeBSD.ORG  Mon Dec 12 19:27:18 2011
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@hub.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 0EA1D1065687;
	Mon, 12 Dec 2011 19:27:18 +0000 (UTC)
	(envelope-from yongari@FreeBSD.org)
Received: from freefall.freebsd.org (freefall.freebsd.org
	[IPv6:2001:4f8:fff6::28])
	by mx1.freebsd.org (Postfix) with ESMTP id F34628FC20;
	Mon, 12 Dec 2011 19:27:17 +0000 (UTC)
Received: from freefall.freebsd.org (localhost [127.0.0.1])
	by freefall.freebsd.org (8.14.5/8.14.5) with ESMTP id pBCJRHTS093661;
	Mon, 12 Dec 2011 19:27:17 GMT
	(envelope-from yongari@freefall.freebsd.org)
Received: (from yongari@localhost)
	by freefall.freebsd.org (8.14.5/8.14.5/Submit) id pBCJRH31093657;
	Mon, 12 Dec 2011 19:27:17 GMT (envelope-from yongari)
Date: Mon, 12 Dec 2011 19:27:17 GMT
Message-Id: <201112121927.pBCJRH31093657@freefall.freebsd.org>
To: konstantin.malov@kaspersky.com, yongari@FreeBSD.org,
	freebsd-net@FreeBSD.org, yongari@FreeBSD.org
From: yongari@FreeBSD.org
Cc: 
Subject: Re: kern/155004: [bce] [panic] kernel panic in bce0 driver
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 12 Dec 2011 19:27:18 -0000

Synopsis: [bce] [panic] kernel panic in bce0 driver

State-Changed-From-To: open->feedback
State-Changed-By: yongari
State-Changed-When: Mon Dec 12 19:26:05 UTC 2011
State-Changed-Why: 
As you see, this backtrace looks wrong. It can't generate a NULL
pointer dereference at line 5771.  Are you using stock bce(4)
without any changes?
Probably the m0 could be a NULL and it could be dereferenced later.
Could you go frame 8 and do the following?
 p m0
 p sw_rx_cons_idx
 p sc->rx_mbuf_ptr[sw_rx_cons_idx]

By chance, did the panic happen when you reboot your box or down/up
the interface?  Or if you happen to know a way to reproduce the
issue could you share it with us?


Responsible-Changed-From-To: freebsd-net->yongari
Responsible-Changed-By: yongari
Responsible-Changed-When: Mon Dec 12 19:26:05 UTC 2011
Responsible-Changed-Why: 
Grab.

http://www.freebsd.org/cgi/query-pr.cgi?pr=155004