From owner-freebsd-bugs Mon Jan 20 5:30:19 2003 Delivered-To: freebsd-bugs@hub.freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 2F27D37B407 for ; Mon, 20 Jan 2003 05:30:06 -0800 (PST) Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id C4B7A43E4A for ; Mon, 20 Jan 2003 05:30:02 -0800 (PST) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.12.6/8.12.6) with ESMTP id h0KDU2NS055346 for ; Mon, 20 Jan 2003 05:30:02 -0800 (PST) (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.12.6/8.12.6/Submit) id h0KDU2ac055344; Mon, 20 Jan 2003 05:30:02 -0800 (PST) Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 3705937B429 for ; Mon, 20 Jan 2003 05:25:14 -0800 (PST) Received: from 21322530218.direct.eti.at (21322530218.direct.eti.at [213.225.30.218]) by mx1.FreeBSD.org (Postfix) with ESMTP id 66E3143F43 for ; Mon, 20 Jan 2003 05:25:12 -0800 (PST) (envelope-from arved@arved.de) Received: from arved.de (arved.de [192.168.2.80]) by 21322530218.direct.eti.at (8.12.7/8.12.6) with ESMTP id h0KBRViC082814; Mon, 20 Jan 2003 12:27:31 +0100 (CET) (envelope-from arved@arved.de) Received: from arved.de (arved.de [127.0.0.1]) by arved.de (8.12.6/8.12.6) with ESMTP id h0KCkbUD001012; Mon, 20 Jan 2003 13:46:37 +0100 (CET) (envelope-from arved@arved.de) Received: (from arved@localhost) by arved.de (8.12.6/8.12.6/Submit) id h0KCkaiw001011; Mon, 20 Jan 2003 13:46:36 +0100 (CET) Message-Id: <200301201246.h0KCkaiw001011@arved.de> Date: Mon, 20 Jan 2003 13:46:36 +0100 (CET) From: Tilman Linneweh Reply-To: Tilman Linneweh To: FreeBSD-gnats-submit@FreeBSD.org Cc: arved@arved.de X-Send-Pr-Version: 3.113 Subject: kern/47253: 5.0 RELEASE, panic in mii_physubr.c (xl0 Driver) Sender: owner-freebsd-bugs@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org >Number: 47253 >Category: kern >Synopsis: 5.0 RELEASE, panic in mii_physubr.c (xl0 Driver) >Confidential: no >Severity: serious >Priority: medium >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Mon Jan 20 05:30:02 PST 2003 >Closed-Date: >Last-Modified: >Originator: Tilman Linneweh >Release: FreeBSD 5.0-RELEASE i386 >Organization: >Environment: System: FreeBSD arved.de 5.0-RELEASE FreeBSD 5.0-RELEASE #1: Mon Jan 20 13:05:13 CET 2003 root@arved.de:/usr/obj/usr/src/sys/POLLY i386 xl0: <3Com 3c905B-TX Fast Etherlink XL> port 0xd800-0xd87f mem 0xdf000000-0xdf00007f irq 9 at device 9.0 on pci0 xl0: Ethernet address: 00:50:04:33:15:8b miibus0: on xl0 xlphy0: <3Com internal media interface> on miibus0 xlphy0: Connected to a Hub. The card worked fine with DP1 >Description: # gdb -k /usr/obj/usr/src/sys/POLLY/kernel.debug /var/crash/vmcore.0 GNU gdb 5.2.1 (FreeBSD) Copyright 2002 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "i386-undermydesk-freebsd"... panic: from debugger panic messages: --- panic: invalid ife->ifm_data (0x6000) in mii_phy_setmedia panic: from debugger Uptime: 3m17s Dumping 127 MB ata0: resetting devices .. done 16 32 48 64 80 96 112 --- #0 doadump () at /usr/src/sys/kern/kern_shutdown.c:232 232 dumping++; (kgdb) where #0 doadump () at /usr/src/sys/kern/kern_shutdown.c:232 #1 0xc0257b8e in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:364 #2 0xc0257dd3 in panic () at /usr/src/sys/kern/kern_shutdown.c:517 #3 0xc0147da2 in db_panic () at /usr/src/sys/ddb/db_command.c:450 #4 0xc0147d22 in db_command (last_cmdp=0xc03fad20, cmd_table=0x0, aux_cmd_tablep=0xc03f40e4, aux_cmd_tablep_end=0xc03f40e8) at /usr/src/sys/ddb/db_command.c:346 #5 0xc0147e36 in db_command_loop () at /usr/src/sys/ddb/db_command.c:472 #6 0xc014ab2a in db_trap (type=3, code=0) at /usr/src/sys/ddb/db_trap.c:72 #7 0xc0383cd2 in kdb_trap (type=3, code=0, regs=0xc8d527d8) at /usr/src/sys/i386/i386/db_interface.c:166 #8 0xc039508f in trap (frame= {tf_fs = 24, tf_es = 16, tf_ds = 16, tf_edi = -1048218976, tf_esi = 256, tf_ebp = -925554652, tf_isp = -925554684, tf_ebx = 0, tf_edx = 0, tf_ecx = 1, tf_eax = 18, tf_trapno = 3, tf_err = 0, tf_eip = -1070055564, tf_cs = 8, tf_eflags = 646, tf_esp = -1069622067, tf_ss = -1069708535}) at /usr/src/sys/i386/i386/trap.c:603 #9 0xc03854e8 in calltrap () at {standard input}:98 #10 0xc0257dbb in panic (fmt=0x0) at /usr/src/sys/kern/kern_shutdown.c:503 #11 0xc018221b in mii_phy_setmedia (sc=0xc188ba00) at /usr/src/sys/dev/mii/mii_physubr.c:130 #12 0xc0181316 in exphy_service (sc=0xc188ba00, mii=0x0, cmd=2) at /usr/src/sys/dev/mii/exphy.c:231 #13 0xc01820a2 in mii_mediachg (mii=0xc188ba00) ---Type to continue, or q to quit--- at /usr/src/sys/dev/mii/mii.c:339 #14 0xc031f2b3 in xl_init (xsc=0xc1892000) at /usr/src/sys/pci/if_xl.c:2753 #15 0xc02beba0 in ether_ioctl (ifp=0xc1892000, command=0, data=0xc1bee800 "|h>A") at /usr/src/sys/net/if_ethersubr.c:1053 #16 0xc031f713 in xl_ioctl (ifp=0xc1892000, command=3246989312, data=0x0) at /usr/src/sys/pci/if_xl.c:2939 #17 0xc02e70f5 in in6_ifinit (ifp=0x0, ia=0xc1892000, sin6=0x0, newhost=1) at /usr/src/sys/netinet6/in6.c:1603 #18 0xc02e613a in in6_update_ifa (ifp=0xc1892000, ifra=0xc8d52a9c, ia=0xc1bee800) at /usr/src/sys/netinet6/in6.c:982 #19 0xc02e9254 in in6_ifattach_linklocal (ifp=0xc8d52a9c, altifp=0x0) at /usr/src/sys/netinet6/in6_ifattach.c:494 #20 0xc02e9ac8 in in6_ifattach (ifp=0xc1bee800, altifp=0x0) at /usr/src/sys/netinet6/in6_ifattach.c:842 #21 0xc02e7c4b in in6_if_up (ifp=0xc1892000) at /usr/src/sys/netinet6/in6.c:2328 #22 0xc02bc7c7 in if_route (ifp=0xc1892000, flag=1, fam=0) at /usr/src/sys/net/if.c:1101 #23 0xc02bc821 in if_up (ifp=0x0) at /usr/src/sys/net/if.c:1128 #24 0xc02bcc83 in ifhwioctl (cmd=2149607696, ifp=0xc1892000, data=0xc8d52c54 "xl0", td=0x0) at /usr/src/sys/net/if.c:1290 #25 0xc02bd014 in ifioctl (so=0xc1a19b00, cmd=2149607696, data=0xc8d52c54 "xl0", td=0xc18572a0) at /usr/src/sys/net/if.c:1477 #26 0xc0281d5c in soo_ioctl (fp=0x0, cmd=0, data=0x80206910, ---Type to continue, or q to quit--- active_cred=0xc1c2c600, td=0x0) at /usr/src/sys/kern/sys_socket.c:171 #27 0xc027c699 in ioctl (td=0xc18572a0, uap=0xc8d52d10) at file.h:227 #28 0xc039598e in syscall (frame= {tf_fs = 47, tf_es = 47, tf_ds = 47, tf_edi = 3, tf_esi = 1, tf_ebp = -1077937480, tf_isp = -925553292, tf_ebx = -1077937536, tf_edx = 34818, tf_ecx = 0, tf_eax = 54, tf_trapno = 12, tf_err = 2, tf_eip = 134543735, tf_cs = 31, tf_eflags = 518, tf_esp = -1077937556, tf_ss = 47}) at /usr/src/sys/i386/i386/trap.c:1033 #29 0xc038553d in Xint0x80_syscall () at {standard input}:140 ---Can't read userspace from dump, or kernel process--- (kgdb) fr 11 #11 0xc018221b in mii_phy_setmedia (sc=0xc188ba00) at /usr/src/sys/dev/mii/mii_physubr.c:130 130 ife->ifm_data)); (kgdb) list 125 * Table index is stored in the media entry. 126 */ 127 128 KASSERT(ife->ifm_data >=0 && ife->ifm_data < MII_NMEDIA, 129 ("invalid ife->ifm_data (0x%x) in mii_phy_setmedia", 130 ife->ifm_data)); 131 132 anar = mii_media_table[ife->ifm_data].mm_anar; 133 bmcr = mii_media_table[ife->ifm_data].mm_bmcr; 134 gtcr = mii_media_table[ife->ifm_data].mm_gtcr; (kgdb) p ife $1 = (struct ifmedia_entry *) 0x0 >How-To-Repeat: Interface does not go up during boot. No link LED. xl0: flags=8802 mtu 1500 options=3 ether 00:50:04:33:15:8b media: Ethernet 100baseTX (none) status: no carrier After manual doing an ifconfig xl0 up the machine panics. >Fix: >Release-Note: >Audit-Trail: >Unformatted: To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-bugs" in the body of the message