Date: Fri, 24 Jan 2003 15:04:42 +0300 (MSK) From: Polina Soloviova <linas@vzljot.ru> To: FreeBSD-gnats-submit@FreeBSD.org Subject: kern/47432: Fatal trap 12 when enabling promiscuous mode on fxp interface Message-ID: <200301241204.h0OC4gM04727@unix1.jinr.dubna.su>
index | next in thread | raw e-mail
>Number: 47432
>Category: kern
>Synopsis: Fatal trap 12 when enabling promiscuous mode on fxp interface
>Confidential: no
>Severity: serious
>Priority: medium
>Responsible: freebsd-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: sw-bug
>Submitter-Id: current-users
>Arrival-Date: Fri Jan 24 04:10:03 PST 2003
>Closed-Date:
>Last-Modified:
>Originator: Polina Soloviova <linas@vzljot.ru>
>Release: FreeBSD 4.7-RELEASE-p2 i386
>Organization:
>Environment:
System: FreeBSD linas.stroimontazh.spb.ru 4.7-RELEASE-p2 FreeBSD 4.7-RELEASE-p2 #0: Fri Jan 24 11:09:05 MSK 2003 root@linas.stroimontazh.spb.ru:/usr/obj/usr/local/syssrc/src/sys/KERNEL_CD_DEBUG i386
###########################
# kernel configuration file
machine i386
cpu I386_CPU
cpu I486_CPU
cpu I586_CPU
cpu I686_CPU
ident KERNEL_CD_DEBUG
maxusers 512
option NMBCLUSTERS=65536
options DDB
makeoptions DEBUG=-g #Build kernel with gdb(1) debug symbols
options MATH_EMULATE #Support for x87 emulation
options INET #InterNETworking
options IPFIREWALL
options IPDIVERT
options IPFIREWALL_VERBOSE
options IPFIREWALL_VERBOSE_LIMIT=100 #limit verbosity
options DUMMYNET
options FFS #Berkeley Fast Filesystem
options FFS_ROOT #FFS usable as root device [keep this!]
options SOFTUPDATES #Enable FFS soft updates support
options UFS_DIRHASH
options MFS #Memory Filesystem
options MD_ROOT #MD is a potential root device
options MSDOSFS #MSDOS Filesystem
options CD9660 #ISO 9660 Filesystem
options CD9660_ROOT #CD-ROM usable as root, CD9660 required
options ROOTDEVNAME=\"cd9660:/dev/acd0a\"
options PROCFS #Process filesystem
options COMPAT_43 #Compatible with BSD 4.3 [KEEP THIS!]
options SCSI_DELAY=5000 #Delay (in ms) before probing SCSI
options UCONSOLE #Allow users to grab the console
options USERCONFIG #boot -c editor
options VISUAL_USERCONFIG #visual boot -c editor
options KTRACE #ktrace(1) support
options SYSVSHM #SYSV-style shared memory
options SYSVMSG #SYSV-style message queues
options SYSVSEM #SYSV-style semaphores
options P1003_1B #Posix P1003_1B real-time extensions
options _KPOSIX_PRIORITY_SCHEDULING
options ICMP_BANDLIM #Rate limit bad replies
options KBD_INSTALL_CDEV # install a CDEV entry in /dev
options HZ=1000
device isa
device pci
device fdc0 at isa? port IO_FD1 irq 6 drq 2
device fd0 at fdc0 drive 0
device fd1 at fdc0 drive 1
device ata0 at isa? port IO_WD1 irq 14
device ata1 at isa? port IO_WD2 irq 15
device ata
device atadisk # ATA disk drives
device atapicd # ATAPI CDROM drives
device atapifd # ATAPI floppy drives
device atapist # ATAPI tape drives
options ATA_STATIC_ID #Static device numbering
device atkbdc0 at isa? port IO_KBD
device atkbd0 at atkbdc? irq 1 flags 0x1
device psm0 at atkbdc? irq 12
device vga0 at isa?
pseudo-device splash
device sc0 at isa? flags 0x100
device npx0 at nexus? port IO_NPX irq 13
device sio0 at isa? port IO_COM1 flags 0x10 irq 4
device sio1 at isa? port IO_COM2 irq 3
options CONSPEED=115200
device puc
device ppc0 at isa? irq 7
device ppbus # Parallel port bus (required)
device lpt # Printer
device plip # TCP/IP over parallel
device ppi # Parallel port interface device
device miibus # MII bus support
device fxp # Intel EtherExpress PRO/100B (82557, 82558)
device xl
pseudo-device vlan 1 #VLAN support
pseudo-device loop # Network loopback
pseudo-device ether # Ethernet support
pseudo-device pty # Pseudo-ttys (telnet etc)
pseudo-device md # Memory "disks"
pseudo-device bpf
# END of kernel configuration file
###################################
###################################
# dmesg output
Copyright (c) 1992-2002 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
The Regents of the University of California. All rights reserved.
FreeBSD 4.7-RELEASE-p2 #0: Fri Jan 24 11:09:05 MSK 2003
root@linas.stroimontazh.spb.ru:/usr/obj/usr/local/syssrc/src/sys/KERNEL_CD_D
EBUG
Timecounter "i8254" frequency 1193182 Hz
Timecounter "TSC" frequency 669889366 Hz
CPU: Pentium III/Pentium III Xeon/Celeron (669.89-MHz 686-class CPU)
Origin = "GenuineIntel" Id = 0x686 Stepping = 6
Features=0x387f9ff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PA
T,PSE36,PN,MMX,FXSR,SSE>
real memory = 268369920 (262080K bytes)
avail memory = 257486848 (251452K bytes)
Preloaded elf kernel "kernel" at 0xc02db000.
Preloaded userconfig_script "/boot/kernel.conf" at 0xc02db09c.
Pentium Pro MTRR support enabled
md0: Malloc disk
Using $PIR table, 10 entries at 0xc00fdec0
npx0: <math processor> on motherboard
npx0: INT 16 interface
pcib0: <Host to PCI bridge> on motherboard
pci0: <PCI bus> on pcib0
pcib1: <Intel 82801BA/BAM (ICH2) PCI-PCI (AGP) bridge> at device 1.0 on pci0
pci1: <PCI bus> on pcib1
pci1: <NVidia Riva Ultra Vanta TNT2 graphics accelerator> at 0.0 irq 11
pcib2: <Intel 82801BA/BAM (ICH2) Hub to PCI bridge> at device 30.0 on pci0
pci2: <PCI bus> on pcib2
fxp0: <Intel Pro 10/100B/100+ Ethernet> port 0x9000-0x903f mem 0xd9000000-0xd901
ffff,0xd9020000-0xd9020fff irq 11 at device 1.0 on pci2
fxp0: Ethernet address 00:02:b3:a3:7e:3f
inphy0: <i82555 10/100 media interface> on miibus0
inphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
xl0: <3Com 3c905-TX Fast Etherlink XL> port 0x9400-0x943f irq 5 at device 3.0 on
pci2
xl0: Ethernet address: 00:60:97:5b:34:e4
miibus1: <MII bus> on xl0
nsphy0: <DP83840 10/100 media interface> on miibus1
nsphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
isab0: <Intel 82801BA/BAM (ICH2) PCI to LPC bridge> at device 31.0 on pci0
isa0: <ISA bus> on isab0
atapci0: <Intel ICH2 ATA100 controller> port 0xf000-0xf00f at device 31.1 on pci
0
ata0: at 0x1f0 irq 14 on atapci0
ata1: at 0x170 irq 15 on atapci0
pci0: <Intel 82801BA/BAM (ICH2) USB controller USB-A> at 31.2 irq 5
pci0: <unknown card> (vendor=0x8086, dev=0x2443) at 31.3 irq 0
pci0: <Intel 82801BA/BAM (ICH2) USB controller USB-B> at 31.4 irq 11
orm0: <Option ROMs> at iomem 0xc0000-0xca7ff,0xcc000-0xcd7ff on isa0
fdc0: <NEC 72065B or clone> at port 0x3f0-0x3f5,0x3f7 irq 6 drq 2 on isa0
fdc0: FIFO enabled, 8 bytes threshold
fd0: <1440-KB 3.5" drive> on fdc0 drive 0
atkbdc0: <Keyboard controller (i8042)> at port 0x60,0x64 on isa0
atkbd0: <AT Keyboard> flags 0x1 irq 1 on atkbdc0
kbd0 at atkbd0
psm0: <PS/2 Mouse> irq 12 on atkbdc0
psm0: model NetMouse/NetScroll Optical, device ID 0
vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
sc0: <System console> at flags 0x100 on isa0
sc0: VGA <16 virtual consoles, flags=0x300>
sio0 at port 0x3f8-0x3ff irq 4 flags 0x10 on isa0
sio0: type 16550A
sio1 at port 0x2f8-0x2ff irq 3 on isa0
sio1: type 16550A
IP packet filtering initialized, divert enabled, rule-based forwarding enabled,
default to deny, logging limited to 100 packets/entry by default
DUMMYNET initialized (011031)
ata1-slave: ATAPI identify retries exceeded
ad0: 19464MB <SAMSUNG SV2044D> [39546/16/63] at ata0-master PIO4
acd0: CD-RW <CD-W516EB> at ata1-master PIO4
Mounting root from ufs:/dev/ad0s1a
# END of dmesg output
################################
>Description:
Promiscuous mode on fxp interface (e.g, running tcpdump or trafshow) when it's under network load causes fatal trap 12 message:
Fatal trap 12: page fault while in kernel mode
fault virtual address = 0xc0c2b017
fault code = supervisor write, page not present
instruction pointer = 0x8:0xc017442f
stack pointer = 0x10:0xe667df04
frame pointer = 0x10:0xe667df18
code segment = base 0x0, limit 0xfffff, type 0x1b
= DPL 0, pres 1, def32 1, gran 1
processor eflags = interrupt enabled, resume, IOPL = 0
current process = Idle
interrupt mask = net
kernel: type 12 trap, code = 0
Stopped at m_getcl+0x203: incb 0(%eax, %edx, 1)
db>
db> trace
m_getcl(1,1,2,c0b0d200,c0a9c802) at m_getcl+0x203
fxp_add_rfabuf(ccaaec00,c0b0d200) at fxp_add_rfabuf+0x17
fxp_intr_body(ccaaec00,40,ffffffff) at fxp_intr_body+0xdc
fxp_intr(ccaaec00,660820,94,b27d402e,40001000) at fxp_intr+0x65
intr_mux(c0a63880,0,2f,2f,2f) at intr_mux+0x1d
Xresume11() at Xresume11+0x2b
---interrupt, eip=0x280d59ce, esp=0xe667dfe0, ebp=0x4000100---
db>
db> panic
panic: from debugger
Debugger("panic")
Fatal trap 3: breakpoint instruction fault while in kernel mode
instruction pointer = 0x8:0xc01fe4d0
stack pointer = 0x10:0xe667dd18
frame pointer = 0x10:0xe667dd20
code segment = base 0x0, limit 0xfffff, type 0x1b
= DPL 0, pres 1, def32 1, gran 1
processor eflags = interrupt enabled, resume, IOPL = 0
current process = Idle
interrupt mask = net
Stopped at m_getcl+0x203: incb 0(%eax, %edx, 1)
db>
db> continue
Fatal trap 12: page fault while in kernel mode
fault virtual address = 0xc0c2b017
fault code = supervisor write, page not present
instruction pointer = 0x8:0xc017442f
stack pointer = 0x10:0xe667df04
frame pointer = 0x10:0xe667df18
code segment = base 0x0, limit 0xfffff, type 0x1b
= DPL 0, pres 1, def32 1, gran 1
processor eflags = interrupt enabled, resume, IOPL = 0
current process = Idle
interrupt mask = net
kernel: type 12 trap, code = 0
Stopped at m_getcl+0x203: incb 0(%eax, %edx, 1)
db>
db>
As a result I have no kernel coredump after reboot
This happens almost every time I run tcpdump or trafshow on fxp0 interface, but never on xl0 interface.
>How-To-Repeat:
1. Run tcpdump on fxp interface
2. Perform some network activity on it (e.g, run 'scp some_big_file problem.host.com:' )
3. If there is no effect, repeat steps 1 and 2 one or more times.
>Fix:
unknown
>Release-Note:
>Audit-Trail:
>Unformatted:
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-bugs" in the body of the message
help
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200301241204.h0OC4gM04727>