From owner-freebsd-stable@FreeBSD.ORG  Thu Feb 25 15:58:50 2010
Return-Path: <owner-freebsd-stable@FreeBSD.ORG>
Delivered-To: freebsd-stable@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id EBE00106564A;
	Thu, 25 Feb 2010 15:58:50 +0000 (UTC) (envelope-from jhb@freebsd.org)
Received: from cyrus.watson.org (cyrus.watson.org [65.122.17.42])
	by mx1.freebsd.org (Postfix) with ESMTP id BD4658FC13;
	Thu, 25 Feb 2010 15:58:50 +0000 (UTC)
Received: from bigwig.baldwin.cx (66.111.2.69.static.nyinternet.net
	[66.111.2.69])
	by cyrus.watson.org (Postfix) with ESMTPSA id 6F23946B2E;
	Thu, 25 Feb 2010 10:58:50 -0500 (EST)
Received: from jhbbsd.localnet (smtp.hudson-trading.com [209.249.190.9])
	by bigwig.baldwin.cx (Postfix) with ESMTPA id C32D58A021;
	Thu, 25 Feb 2010 10:58:49 -0500 (EST)
From: John Baldwin <jhb@freebsd.org>
To: freebsd-stable@freebsd.org
Date: Thu, 25 Feb 2010 07:56:49 -0500
User-Agent: KMail/1.12.1 (FreeBSD/7.3-CBSD-20100217; KDE/4.3.1; amd64; ; )
References: <hjg291$tvj$1@ger.gmane.org> <hm4fug$vku$1@dough.gmane.org>
In-Reply-To: <hm4fug$vku$1@dough.gmane.org>
MIME-Version: 1.0
Content-Type: Text/Plain;
  charset="utf-8"
Content-Transfer-Encoding: 7bit
Message-Id: <201002250756.49757.jhb@freebsd.org>
X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.0.1
	(bigwig.baldwin.cx); Thu, 25 Feb 2010 10:58:49 -0500 (EST)
X-Virus-Scanned: clamav-milter 0.95.1 at bigwig.baldwin.cx
X-Virus-Status: Clean
X-Spam-Status: No, score=-1.4 required=4.2 tests=AWL,BAYES_00,
	DATE_IN_PAST_03_06 autolearn=no version=3.2.5
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on bigwig.baldwin.cx
Cc: freebsd-net@freebsd.org, Ivan Voras <ivoras@freebsd.org>
Subject: Re: 8-stable crashes in vmware (possible em driver issue?)
X-BeenThere: freebsd-stable@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Production branch of FreeBSD source code <freebsd-stable.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>, 
	<mailto:freebsd-stable-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-stable>
List-Post: <mailto:freebsd-stable@freebsd.org>
List-Help: <mailto:freebsd-stable-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 25 Feb 2010 15:58:51 -0000

On Wednesday 24 February 2010 7:23:44 pm Ivan Voras wrote:
> Ivan Voras wrote:
> > I have a fairly recent 8-stable machine running under VMWare ESXi 3.5 
> > (amd64 guest), which apparently crashes every few days from the same 
> > causes:
> > 
> > em0: discard frame w/o packet header
> > em0: discard frame w/o packet header
> > em0: discard frame w/o packet header
> > Panic string: sbsndptr: sockbuf 0xffffff007cca8c20 and mbuf 
> > 0xffffff00490a6400 clashing
> 
> In case someone is interested or has an idea - on this machine I have 
> multiple crashed cores with similarily strange problems all connected 
> with networking and/or the em driver:
> 
> 1)
> em0: watchdog timeout -- resetting
> Fatal trap 12: page fault while in kernel mode
> current process         = 0 (em0 taskq)
> 
> 2)
> em0: watchdog timeout -- resetting
> Fatal trap 9: general protection fault while in kernel mode
> current process         = 1219 (slapd)
> 
> 3)
> em0: discard frame w/o packet header
> panic: sbdrop
> 
> I'm scratching my head about the #2 above - I don't think trap#9 is usual.

Certain bad pointer values on amd64 trigger a GP# rather than a PF#, so for 
those you would get trap 9 instead of trap 12.  Specifically, the top N bits 
of a pointer in amd64 have to either be all 0 or all 1.  If there is a mix, 
then you get a GP# instead of a PF#.

-- 
John Baldwin