Date: Mon, 20 Jan 2003 13:46:36 +0100 (CET) From: Tilman Linneweh <arved@arved.de> To: FreeBSD-gnats-submit@FreeBSD.org Cc: arved@arved.de Subject: kern/47253: 5.0 RELEASE, panic in mii_physubr.c (xl0 Driver) Message-ID: <200301201246.h0KCkaiw001011@arved.de>
next in thread | raw e-mail | index | archive | help
>Number: 47253
>Category: kern
>Synopsis: 5.0 RELEASE, panic in mii_physubr.c (xl0 Driver)
>Confidential: no
>Severity: serious
>Priority: medium
>Responsible: freebsd-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: sw-bug
>Submitter-Id: current-users
>Arrival-Date: Mon Jan 20 05:30:02 PST 2003
>Closed-Date:
>Last-Modified:
>Originator: Tilman Linneweh
>Release: FreeBSD 5.0-RELEASE i386
>Organization:
>Environment:
System: FreeBSD arved.de 5.0-RELEASE FreeBSD 5.0-RELEASE #1: Mon Jan 20 13:05:13 CET 2003 root@arved.de:/usr/obj/usr/src/sys/POLLY i386
xl0: <3Com 3c905B-TX Fast Etherlink XL> port 0xd800-0xd87f mem 0xdf000000-0xdf00007f irq 9 at device 9.0 on pci0
xl0: Ethernet address: 00:50:04:33:15:8b
miibus0: <MII bus> on xl0
xlphy0: <3Com internal media interface> on miibus0
xlphy0:
Connected to a Hub. The card worked fine with DP1
>Description:
# gdb -k /usr/obj/usr/src/sys/POLLY/kernel.debug /var/crash/vmcore.0
GNU gdb 5.2.1 (FreeBSD)
Copyright 2002 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for details.
This GDB was configured as "i386-undermydesk-freebsd"...
panic: from debugger
panic messages:
---
panic: invalid ife->ifm_data (0x6000) in mii_phy_setmedia
panic: from debugger
Uptime: 3m17s
Dumping 127 MB
ata0: resetting devices ..
done
16 32 48 64 80 96 112
---
#0 doadump () at /usr/src/sys/kern/kern_shutdown.c:232
232 dumping++;
(kgdb) where
#0 doadump () at /usr/src/sys/kern/kern_shutdown.c:232
#1 0xc0257b8e in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:364
#2 0xc0257dd3 in panic () at /usr/src/sys/kern/kern_shutdown.c:517
#3 0xc0147da2 in db_panic () at /usr/src/sys/ddb/db_command.c:450
#4 0xc0147d22 in db_command (last_cmdp=0xc03fad20, cmd_table=0x0,
aux_cmd_tablep=0xc03f40e4, aux_cmd_tablep_end=0xc03f40e8)
at /usr/src/sys/ddb/db_command.c:346
#5 0xc0147e36 in db_command_loop () at /usr/src/sys/ddb/db_command.c:472
#6 0xc014ab2a in db_trap (type=3, code=0) at /usr/src/sys/ddb/db_trap.c:72
#7 0xc0383cd2 in kdb_trap (type=3, code=0, regs=0xc8d527d8)
at /usr/src/sys/i386/i386/db_interface.c:166
#8 0xc039508f in trap (frame=
{tf_fs = 24, tf_es = 16, tf_ds = 16, tf_edi = -1048218976, tf_esi = 256, tf_ebp = -925554652, tf_isp = -925554684, tf_ebx = 0, tf_edx = 0, tf_ecx = 1, tf_eax = 18, tf_trapno = 3, tf_err = 0, tf_eip = -1070055564, tf_cs = 8, tf_eflags = 646, tf_esp = -1069622067, tf_ss = -1069708535})
at /usr/src/sys/i386/i386/trap.c:603
#9 0xc03854e8 in calltrap () at {standard input}:98
#10 0xc0257dbb in panic (fmt=0x0) at /usr/src/sys/kern/kern_shutdown.c:503
#11 0xc018221b in mii_phy_setmedia (sc=0xc188ba00)
at /usr/src/sys/dev/mii/mii_physubr.c:130
#12 0xc0181316 in exphy_service (sc=0xc188ba00, mii=0x0, cmd=2)
at /usr/src/sys/dev/mii/exphy.c:231
#13 0xc01820a2 in mii_mediachg (mii=0xc188ba00)
---Type <return> to continue, or q <return> to quit---
at /usr/src/sys/dev/mii/mii.c:339
#14 0xc031f2b3 in xl_init (xsc=0xc1892000) at /usr/src/sys/pci/if_xl.c:2753
#15 0xc02beba0 in ether_ioctl (ifp=0xc1892000, command=0,
data=0xc1bee800 "|h>A") at /usr/src/sys/net/if_ethersubr.c:1053
#16 0xc031f713 in xl_ioctl (ifp=0xc1892000, command=3246989312, data=0x0)
at /usr/src/sys/pci/if_xl.c:2939
#17 0xc02e70f5 in in6_ifinit (ifp=0x0, ia=0xc1892000, sin6=0x0, newhost=1)
at /usr/src/sys/netinet6/in6.c:1603
#18 0xc02e613a in in6_update_ifa (ifp=0xc1892000, ifra=0xc8d52a9c,
ia=0xc1bee800) at /usr/src/sys/netinet6/in6.c:982
#19 0xc02e9254 in in6_ifattach_linklocal (ifp=0xc8d52a9c, altifp=0x0)
at /usr/src/sys/netinet6/in6_ifattach.c:494
#20 0xc02e9ac8 in in6_ifattach (ifp=0xc1bee800, altifp=0x0)
at /usr/src/sys/netinet6/in6_ifattach.c:842
#21 0xc02e7c4b in in6_if_up (ifp=0xc1892000)
at /usr/src/sys/netinet6/in6.c:2328
#22 0xc02bc7c7 in if_route (ifp=0xc1892000, flag=1, fam=0)
at /usr/src/sys/net/if.c:1101
#23 0xc02bc821 in if_up (ifp=0x0) at /usr/src/sys/net/if.c:1128
#24 0xc02bcc83 in ifhwioctl (cmd=2149607696, ifp=0xc1892000,
data=0xc8d52c54 "xl0", td=0x0) at /usr/src/sys/net/if.c:1290
#25 0xc02bd014 in ifioctl (so=0xc1a19b00, cmd=2149607696,
data=0xc8d52c54 "xl0", td=0xc18572a0) at /usr/src/sys/net/if.c:1477
#26 0xc0281d5c in soo_ioctl (fp=0x0, cmd=0, data=0x80206910,
---Type <return> to continue, or q <return> to quit---
active_cred=0xc1c2c600, td=0x0) at /usr/src/sys/kern/sys_socket.c:171
#27 0xc027c699 in ioctl (td=0xc18572a0, uap=0xc8d52d10) at file.h:227
#28 0xc039598e in syscall (frame=
{tf_fs = 47, tf_es = 47, tf_ds = 47, tf_edi = 3, tf_esi = 1, tf_ebp = -1077937480, tf_isp = -925553292, tf_ebx = -1077937536, tf_edx = 34818, tf_ecx = 0, tf_eax = 54, tf_trapno = 12, tf_err = 2, tf_eip = 134543735, tf_cs = 31, tf_eflags = 518, tf_esp = -1077937556, tf_ss = 47})
at /usr/src/sys/i386/i386/trap.c:1033
#29 0xc038553d in Xint0x80_syscall () at {standard input}:140
---Can't read userspace from dump, or kernel process---
(kgdb) fr 11
#11 0xc018221b in mii_phy_setmedia (sc=0xc188ba00)
at /usr/src/sys/dev/mii/mii_physubr.c:130
130 ife->ifm_data));
(kgdb) list
125 * Table index is stored in the media entry.
126 */
127
128 KASSERT(ife->ifm_data >=0 && ife->ifm_data < MII_NMEDIA,
129 ("invalid ife->ifm_data (0x%x) in mii_phy_setmedia",
130 ife->ifm_data));
131
132 anar = mii_media_table[ife->ifm_data].mm_anar;
133 bmcr = mii_media_table[ife->ifm_data].mm_bmcr;
134 gtcr = mii_media_table[ife->ifm_data].mm_gtcr;
(kgdb) p ife
$1 = (struct ifmedia_entry *) 0x0
>How-To-Repeat:
Interface does not go up during boot. No link LED.
xl0: flags=8802<BROADCAST,SIMPLEX,MULTICAST> mtu 1500
options=3<RXCSUM,TXCSUM>
ether 00:50:04:33:15:8b
media: Ethernet 100baseTX <hw-loopback> (none)
status: no carrier
After manual doing an ifconfig xl0 up the machine panics.
>Fix:
>Release-Note:
>Audit-Trail:
>Unformatted:
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-bugs" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200301201246.h0KCkaiw001011>