From owner-freebsd-bugs@FreeBSD.ORG Sat Jun 19 08:40:26 2004 Return-Path: Delivered-To: freebsd-bugs@hub.freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id DD1B716A4CE for ; Sat, 19 Jun 2004 08:40:26 +0000 (GMT) Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id D0B0843D45 for ; Sat, 19 Jun 2004 08:40:26 +0000 (GMT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.12.11/8.12.11) with ESMTP id i5J8eM6E044072 for ; Sat, 19 Jun 2004 08:40:22 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.12.11/8.12.11/Submit) id i5J8eMT5044071; Sat, 19 Jun 2004 08:40:22 GMT (envelope-from gnats) Resent-Date: Sat, 19 Jun 2004 08:40:22 GMT Resent-Message-Id: <200406190840.i5J8eMT5044071@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, chifung Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 5B4FF16A4CE for ; Sat, 19 Jun 2004 08:37:20 +0000 (GMT) Received: from www.freebsd.org (www.freebsd.org [216.136.204.117]) by mx1.FreeBSD.org (Postfix) with ESMTP id 5420843D31 for ; Sat, 19 Jun 2004 08:37:20 +0000 (GMT) (envelope-from nobody@FreeBSD.org) Received: from www.freebsd.org (localhost [127.0.0.1]) by www.freebsd.org (8.12.11/8.12.11) with ESMTP id i5J8anFv061034 for ; Sat, 19 Jun 2004 08:36:49 GMT (envelope-from nobody@www.freebsd.org) Received: (from nobody@localhost) by www.freebsd.org (8.12.11/8.12.11/Submit) id i5J8anPE061033; Sat, 19 Jun 2004 08:36:49 GMT (envelope-from nobody) Message-Id: <200406190836.i5J8anPE061033@www.freebsd.org> Date: Sat, 19 Jun 2004 08:36:49 GMT From: chifung To: freebsd-gnats-submit@FreeBSD.org X-Send-Pr-Version: www-2.3 Subject: kern/68103: kernel panic on ASUS P4P8X mb (builtin 3Com Gigabit LOM 3C940) X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 19 Jun 2004 08:40:27 -0000 >Number: 68103 >Category: kern >Synopsis: kernel panic on ASUS P4P8X mb (builtin 3Com Gigabit LOM 3C940) >Confidential: no >Severity: critical >Priority: high >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Sat Jun 19 08:40:21 GMT 2004 >Closed-Date: >Last-Modified: >Originator: chifung >Release: 4.10 >Organization: na >Environment: FreeBSD xxx 4.10-STABLE FreeBSD 4.10-STABLE #0: Sun Jun 6 17:38:11 HKT 2004 xxx:/usr/obj/usr/src/sys/KOYO_DEBUG i386 >Description: I'm getting kernel panics from a 4.10-stable box. This kernel panic happens about once a week, and the coredump always shows the same backtrace (shown below). I couldn't find how to reproduce this panic yet. cat /etc/make.conf #CPUTYPE=i686 CPUTYPE=p4 CFLAGS= -O -pipe NOPROFILE= true (kgdb) bt #0 dumpsys () at /usr/src/sys/kern/kern_shutdown.c:487 #1 0xc024a2cc in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:316 #2 0xc024a74d in panic (fmt=0xc04d73f9 "%s") at /usr/src/sys/kern/kern_shutdown.c:595 #3 0xc042f706 in trap_fatal (frame=0xffc11710, eva=48) at /usr/src/sys/i386/i386/trap.c:974 #4 0xc042f359 in trap_pfault (frame=0xffc11710, usermode=0, eva=48) at /usr/src/sys/i386/i386/trap.c:867 #5 0xc042ee9f in trap (frame={tf_fs = 266862616, tf_es = 16, tf_ds = 374145040, tf_edi = -1021967232, tf_esi = -4122668, tf_ebp = -4122792, tf_isp = -4122820, tf_ebx = -1068377316, tf_edx = 1744880740, tf_ecx = 18, tf_eax = 0, tf_trapno = 12, tf_err = 0, tf_eip = -1070063767, tf_cs = 8, tf_eflags = 78338, tf_esp = -1021967232, tf_ss = -4122668}) at /usr/src/sys/i386/i386/trap.c:466 #6 0xc0381f69 in acquire_lock (lk=0xc051db1c) at machine/globals.h:116 #7 0xc03852ea in initiate_write_filepage (pagedep=0xc3160480, bp=0xcc6fe0cc) at /usr/src/sys/ufs/ffs/ffs_softdep.c:3039 #8 0xc03851af in softdep_disk_io_initiation (bp=0xcc6fe0cc) at /usr/src/sys/ufs/ffs/ffs_softdep.c:2961 #9 0xc0285a77 in spec_strategy (ap=0xffc117d4) at /usr/src/sys/miscfs/specfs/spec_vnops.c:453 #10 0xc02854e5 in spec_vnoperate (ap=0xffc117d4) at /usr/src/sys/miscfs/specfs/spec_vnops.c:119 #11 0xc0391d0d in ufs_vnoperatespec (ap=0xffc117d4) at /usr/src/sys/ufs/ufs/ufs_vnops.c:2394 #12 0xc0391575 in ufs_strategy (ap=0xffc11818) at vnode_if.h:944 #13 0xc0391cd5 in ufs_vnoperate (ap=0xffc11818) at /usr/src/sys/ufs/ufs/ufs_vnops.c:2376 #14 0xc02716ac in bwrite (bp=0xcc6fe0cc) at vnode_if.h:944 #15 0xc0277333 in vop_stdbwrite (ap=0xffc11854) at /usr/src/sys/kern/vfs_default.c:344 #16 0xc0277131 in vop_defaultop (ap=0xffc11854) at /usr/src/sys/kern/vfs_default.c:152 #17 0xc0391cd5 in ufs_vnoperate (ap=0xffc11854) at /usr/src/sys/ufs/ufs/ufs_vnops.c:2376 #18 0xc0271a16 in bawrite (bp=0xcc6fe0cc) at vnode_if.h:1193 #19 0xc038ada6 in ffs_fsync (ap=0xffc118cc) at /usr/src/sys/ufs/ffs/ffs_vnops.c:198 #20 0xc0389702 in ffs_sync (mp=0xc2287e00, waitfor=2, cred=0xc12b7700, p=0xc057e160) at vnode_if.h:558 #21 0xc027cab3 in sync (p=0xc057e160, uap=0x0) at /usr/src/sys/kern/vfs_syscalls.c:583 #22 0xc024a087 in boot (howto=256) at /usr/src/sys/kern/kern_shutdown.c:235 #23 0xc024a74d in panic (fmt=0xc04d73f9 "%s") at /usr/src/sys/kern/kern_shutdown.c:595 #24 0xc042f706 in trap_fatal (frame=0xffc119ec, eva=3894675017) at /usr/src/sys/i386/i386/trap.c:974 #25 0xc042f359 in trap_pfault (frame=0xffc119ec, usermode=0, eva=3894675017) at /usr/src/sys/i386/i386/trap.c:867 #26 0xc042ee9f in trap (frame={tf_fs = -1636171752, tf_es = -389677040, tf_ds = -624951280, tf_edi = 0, tf_esi = 0, tf_ebp = -4121976, tf_isp = -4122088, tf_ebx = -1022976460, tf_edx = -4121932, tf_ecx = 9, tf_eax = -400292288, tf_trapno = 12, tf_err = 0, tf_eip = -1036322574, tf_cs = 8, tf_eflags = 78467, tf_esp = -1026109696, tf_ss = -4121932}) at /usr/src/sys/i386/i386/trap.c:466 #27 0xc23af8f2 in ?? () ---Type to continue, or q to quit--- #28 0xc23af49d in ?? () #29 0xc2397349 in ?? () #30 0xc23a7db0 in ?? () #31 0xc2397349 in ?? () #32 0xc23b3893 in ?? () #33 0xc2397349 in ?? () #34 0xc23a80db in ?? () #35 0xc23a7d9a in ?? () #36 0xc2397349 in ?? () #37 0xc23f4f71 in ?? () #38 0xc2397349 in ?? () #39 0xc23a80db in ?? () #40 0xc23a7af4 in ?? () #41 0xc2397349 in ?? () #42 0xc23ebacc in ?? () #43 0xc23eb251 in ?? () #44 0xc2397349 in ?? () #45 0xc23f1104 in ?? () #46 0xc026c2f2 in sowakeup (so=0xd9d75240, sb=0xd9d75288) at /usr/src/sys/kern/uipc_socket2.c:316 #47 0xc02b146c in rip_input (m=0xc12c8c00, off=20, proto=47) at /usr/src/sys/netinet/raw_ip.c:231 #48 0xc02a8d8b in encap4_input (m=0xc12c8c00, off=20, proto=47) at /usr/src/sys/netinet/ip_encap.c:213 #49 0xc02adc74 in ip_input (m=0xc12c8c00) at /usr/src/sys/netinet/ip_input.c:934 #50 0xc02adcd3 in ipintr () at /usr/src/sys/netinet/ip_input.c:955 #51 0xc041dc01 in swi_net_next () dmesg netsmb_dev: loaded Fatal trap 12: page fault while in kernel mode mp_lock = 01000002; cpuid = 1; lapic.id = 01000000 fault virtual address = 0xe8240649 fault code = supervisor read, page not present instruction pointer = 0x8:0xc23af8f2 stack pointer = 0x10:0xffc11a2c frame pointer = 0x10:0xffc11a88 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, def32 1, gran 1 processor eflags = interrupt enabled, resume, IOPL = 3 current process = Idle interrupt mask = <- SMP: XXX trap number = 12 panic: page fault mp_lock = 01000002; cpuid = 1; lapic.id = 01000000 boot() called on cpu#1 syncing disks... Fatal trap 12: page fault while in kernel mode mp_lock = 01000003; cpuid = 1; lapic.id = 01000000 fault virtual address = 0x30 fault code = supervisor read, page not present instruction pointer = 0x8:0xc0381f69 stack pointer = 0x10:0xffc11750 frame pointer = 0x10:0xffc11758 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, def32 1, gran 1 processor eflags = interrupt enabled, resume, IOPL = 3 current process = Idle interrupt mask = bio <- SMP: XXX trap number = 12 panic: page fault mp_lock = 01000003; cpuid = 1; lapic.id = 01000000 boot() called on cpu#1 Uptime: 7d18h17m52s dumping to dev #ad/0x20001, offset 4195968 dump ata0: resetting devices .. done 511 510 509 508 507 506 505 504 503 502 501 500 499 498 497 496 495 494 493 492 491 490 489 488 487 486 485 484 483 482 481 480 479 478 47b:6aff:fef3:f4a5%sk0 prefixlen 64 tentative scopeid 0x1 Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 The Regents of the University of California. All rights reserved. FreeBSD 4.10-STABLE #0: Sun Jun 6 17:38:11 HKT 2004 chifung@koyo.rice.net:/usr/obj/usr/src/sys/KOYO_DEBUG Timecounter "i8254" frequency 1193182 Hz CPU: Intel(R) Pentium(R) 4 CPU 2.60GHz (2605.92-MHz 686-class CPU) Origin = "GenuineIntel" Id = 0xf29 Stepping = 9 Features=0xbfebfbff Hyperthreading: 2 logical CPUs real memory = 536018944 (523456K bytes) config> di bt0 config> di aic0 config> di aha0 config> di adv0 config> q avail memory = 515088384 (503016K bytes) Programming 24 pins in IOAPIC #0 IOAPIC #0 intpin 2 -> irq 0 FreeBSD/SMP: Multiprocessor motherboard: 2 CPUs cpu0 (BSP): apic id: 0, version: 0x00050014, at 0xfee00000 cpu1 (AP): apic id: 1, version: 0x00050014, at 0xfee00000 io0 (APIC): apic id: 2, version: 0x00178020, at 0xfec00000 Preloaded elf kernel "kernel" at 0xc0642000. Preloaded userconfig_script "/boot/kernel.conf" at 0xc064209c. Warning: Pentium 4 CPU: PSE disabled Pentium Pro MTRR support enabled md0: Malloc disk Using $PIR table, 14 entries at 0xc00f5230 npx0: on motherboard npx0: INT 16 interface pcib0: on motherboard IOAPIC #0 intpin 16 -> irq 2 IOAPIC #0 intpin 19 -> irq 5 IOAPIC #0 intpin 18 -> irq 10 IOAPIC #0 intpin 23 -> irq 11 IOAPIC #0 intpin 17 -> irq 16 pci0: on pcib0 agp0: mem 0xf8000000-0xfbffffff at device 0.0 on pci0 pcib1: at device 1.0 on pci0 pci1: on pcib1 pci1: at 0.0 irq 2 uhci0: port 0xef00-0xef1f irq 2 at device 29.0 on pci0 usb0: on uhci0 usb0: USB revision 1.0 uhub0: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1 uhub0: 2 ports with 2 removable, self powered uhid0: American Power Conversion Back-UPS RS 500 FW:30.j4.I USB FW:j4, rev 1.10/0.06, addr 2, iclass 3/0 uhci1: port 0xef20-0xef3f irq 5 at device 29.1 on pci0 usb1: on uhci1 usb1: USB revision 1.0 uhub1: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1 uhub1: 2 ports with 2 removable, self powered uhci2: port 0xef40-0xef5f irq 10 at device 29.2 on pci0 usb2: on uhci2 usb2: USB revision 1.0 uhub2: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1 uhub2: 2 ports with 2 removable, self powered uhci3: port 0xef80-0xef9f irq 2 at device 29.3 on pci0 usb3: on uhci3 usb3: USB revision 1.0 uhub3: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1 uhub3: 2 ports with 2 removable, self powered pci0: at 29.7 irq 11 pcib2: at device 30.0 on pci0 IOAPIC #0 intpin 22 -> irq 17 pci2: on pcib2 skc0: <3Com 3C940 Gigabit Ethernet> port 0xd800-0xd8ff mem 0xfeafc000-0xfeafffff irq 17 at device 5.0 on pci2 skc0: 3Com Gigabit LOM (3C940) sk0: on skc0 sk0: Ethernet address: 00:0b:6a:f3:f4:a5 miibus0: on sk0 e1000phy0: on miibus0 e1000phy0: 1000baseTX-FDX, 100baseTX-FDX, 100baseTX, 10baseTX-FDX, 10baseTX, auto isab0: at device 31.0 on pci0 isa0: on isab0 atapci0: port 0xfc00-0xfc0f,0-0x3,0-0x7,0-0x3,0-0x7 irq 10 at device 31.1 on pci0 ata0: at 0x1f0 irq 14 on atapci0 ata1: at 0x170 irq 15 on atapci0 pci0: (vendor=0x8086, dev=0x24d3) at 31.3 irq 16 pcm0: port 0xee80-0xeebf,0xe800-0xe8ff mem 0xfebff400-0xfebff4ff,0xfebff800-0xfebff9ff irq 16 at device 31.5 on pci0 pcm0: orm0: