From owner-freebsd-bugs@FreeBSD.ORG Fri Dec 14 15:50:00 2007 Return-Path: Delivered-To: freebsd-bugs@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id C616416A41B for ; Fri, 14 Dec 2007 15:50:00 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 9FBDE13C4D3 for ; Fri, 14 Dec 2007 15:50:00 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.2/8.14.2) with ESMTP id lBEFo01C014325 for ; Fri, 14 Dec 2007 15:50:00 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.2/8.14.1/Submit) id lBEFo08Z014324; Fri, 14 Dec 2007 15:50:00 GMT (envelope-from gnats) Resent-Date: Fri, 14 Dec 2007 15:50:00 GMT Resent-Message-Id: <200712141550.lBEFo08Z014324@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, Travis Mikalson Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id E0FEC16A417 for ; Fri, 14 Dec 2007 15:44:36 +0000 (UTC) (envelope-from nobody@FreeBSD.org) Received: from www.freebsd.org (www.freebsd.org [IPv6:2001:4f8:fff6::21]) by mx1.freebsd.org (Postfix) with ESMTP id CDE3B13C45B for ; Fri, 14 Dec 2007 15:44:36 +0000 (UTC) (envelope-from nobody@FreeBSD.org) Received: from www.freebsd.org (localhost [127.0.0.1]) by www.freebsd.org (8.14.2/8.14.2) with ESMTP id lBEFiQqZ094353 for ; Fri, 14 Dec 2007 15:44:26 GMT (envelope-from nobody@www.freebsd.org) Received: (from nobody@localhost) by www.freebsd.org (8.14.2/8.14.1/Submit) id lBEFiQnZ094352; Fri, 14 Dec 2007 15:44:26 GMT (envelope-from nobody) Message-Id: <200712141544.lBEFiQnZ094352@www.freebsd.org> Date: Fri, 14 Dec 2007 15:44:26 GMT From: Travis Mikalson To: freebsd-gnats-submit@FreeBSD.org X-Send-Pr-Version: www-3.1 Cc: Subject: kern/118695: device polling + vlan causes panic on "em" interface X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 14 Dec 2007 15:50:01 -0000 >Number: 118695 >Category: kern >Synopsis: device polling + vlan causes panic on "em" interface >Confidential: no >Severity: serious >Priority: low >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Fri Dec 14 15:50:00 UTC 2007 >Closed-Date: >Last-Modified: >Originator: Travis Mikalson >Release: 7.0-BETA4 >Organization: TerraNovaNet >Environment: FreeBSD napmia1-border0.mia.terranova.net 7.0-BETA4 FreeBSD 7.0-BETA4 #9: Fri Dec 14 08:40:20 EST 2007 root@napmia1-border0.mia.terranova.net:/usr/obj/usr/src/sys/napmia1 i386 >Description: Enabling device polling on my em1 interface which has a VLAN (vlan0) attached to it seems to trigger either a panic or the em1/vlan0 interface becoming unresponsive to the network (ifconfig em1 down/up remedies that). The system is fine otherwise with polling enabled on all the other interfaces (including em0) which are not using VLANs. It seems to panic the same with or without txcsum, rxcsum or vlanhwtag. But, VLAN_HWCSUM and VLAN_MTU are still enabled, ifconfig em1 -vlanmtu doesn't seem to have any effect and there doesn't seem to be any documented ifconfig option to disable VLAN_HWCSUM. The problem may or may not exist without VLAN_HWCSUM but unfortunately I have no way to turn VLAN_HWCSUM off. Here are the affected NICs: em0@pci0:6:0:0: class=0x020000 card=0x11798086 chip=0x10798086 rev=0x03 hdr=0x00 vendor = 'Intel Corporation' device = '82546EB Dual Port Gigabit Ethernet Controller' class = network subclass = ethernet em1@pci0:6:0:1: class=0x020000 card=0x11798086 chip=0x10798086 rev=0x03 hdr=0x00 vendor = 'Intel Corporation' device = '82546EB Dual Port Gigabit Ethernet Controller' class = network subclass = ethernet When you trigger the problem you get one of these: em1: discard frame w/o packet header Followed shortly by a panic: panic: sbflush_internal: cc 4294967156 || mb 0 || mbcnt 0 Uptime: 1h10m48s Physical memory: 501 MB Dumping 90 MB: 75 59 43 27 11 Dump complete Automatic reboot in 15 seconds - press a key on the console to abort I'm afraid I don't have debug symbols in my kernel so the crashdump isn't very useful, sorry. But this should be an easily reproduceable problem, so anybody with an "em" NIC around who cares to work on this shouldn't have a problem making their own crashdump within 5 minutes. >How-To-Repeat: Enable device polling on an "em" interface. Attach a VLAN to an "em" interface. Pass some traffic over the VLAN interface. >Fix: >Release-Note: >Audit-Trail: >Unformatted: