kern/82442: Fatal trap 12 in em driver on 4.11-RC2 containing Cyclades E1 card (hdlc)

[dunc]

>Number:         82442
>Category:       kern
>Synopsis:       Fatal trap 12 in em driver on 4.11-RC2 containing Cyclades E1 card (hdlc)
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Mon Jun 20 13:30:22 GMT 2005
>Closed-Date:
>Last-Modified:
>Originator:     Duncan Lockwood <dunc at thebunker.net>
>Release:        FreeBSD 4.11-RC2 i386
>Organization:
The Bunker
>Environment:
System: FreeBSD mc-civpn-bromborough 4.11-RC2 FreeBSD 4.11-RC2 #0: Tue Jun 14 10:22:03 GMT 2005 root at mc-civpn-bromborough:/usr/obj/usr/src/sys/MCCIVPNTESTDEBUG i386

>Description:
	Sporadic kernel panic on machine functioning as router between an
ethernet network and an E1 line. We have been experiencing this problem for
almost a year now. Hardware has been swapped twice, and still the problem
persists. On average about once a week. The previous hardware did not contain
an Intel em network card, so it probably isn't specific to that driver, however
seeing as how this is where the crash happens (as seen in backtrace) I thought
I should mention it. The box is on a UPS with other kit that is not affected,
in an environment where other machines, run happily. Initially we suspected the
E1 line, but have had several tests done on it, and they have all reported no
problems. The full crash dump is available.

>How-To-Repeat:

>Fix:

	Unknown
--- backtrace.txt begins here ---
(kgdb) bt
#0  dumpsys () at /usr/src/sys/kern/kern_shutdown.c:487
#1  0xc021afff in boot (howto=256) at /usr/src/sys/kern/kern_shutdown.c:316
#2  0xc021b424 in poweroff_wait (junk=0xc03e5c2c, howto=-1069656273)
    at /usr/src/sys/kern/kern_shutdown.c:595
#3  0xc0368ede in trap_fatal (frame=0xc03ef42c, eva=3240684557)
    at /usr/src/sys/i386/i386/trap.c:974
#4  0xc0368bb1 in trap_pfault (frame=0xc03ef42c, usermode=0, eva=3240684557)
    at /usr/src/sys/i386/i386/trap.c:867
#5  0xc036879b in trap (frame={tf_fs = -1054998512, tf_es = -1069678576, 
      tf_ds = -1071185904, tf_edi = -1055274752, tf_esi = 6758042, 
      tf_ebp = -1069616004, tf_isp = -1069616040, tf_ebx = -1055274752, 
      tf_edx = -1055653888, tf_ecx = 1752468566, tf_eax = 1371149, 
      tf_trapno = 12, tf_err = 2, tf_eip = -1071976693, tf_cs = 8, 
      tf_eflags = 66051, tf_esp = -1043058688, tf_ss = -1055497984})
    at /usr/src/sys/i386/i386/trap.c:466
#6  0xc01aef0b in em_get_buf (i=136, adapter=0xc1d43000, nmp=0x0)
    at /usr/src/sys/dev/em/if_em.c:2276
#7  0xc01af60a in em_process_receive_interrupts (adapter=0xc1d43000, count=-2)
    at /usr/src/sys/dev/em/if_em.c:2555
#8  0xc01ad272 in em_intr (arg=0xc1d43000) at /usr/src/sys/dev/em/if_em.c:988
#9  0xc036044a in cpu_idle () at /usr/src/sys/i386/i386/machdep.c:1000
(kgdb) quit
--- backtrace.txt ends here ---

--- dmesg.boot begins here ---
Copyright (c) 1992-2005 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
	The Regents of the University of California. All rights reserved.
FreeBSD 4.11-RC2 #0: Tue Jun 14 10:22:03 GMT 2005
    root at mc-civpn-bromborough:/usr/obj/usr/src/sys/MCCIVPNTESTDEBUG
Timecounter "i8254"  frequency 1193182 Hz
CPU: Intel(R) Celeron(R) CPU 2.40GHz (2400.41-MHz 686-class CPU)
  Origin = "GenuineIntel"  Id = 0xf29  Stepping = 9
  Features=0xbfebfbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE>
real memory  = 528416768 (516032K bytes)
avail memory = 510070784 (498116K bytes)
Preloaded elf kernel "kernel" at 0xc04ef000.
Warning: Pentium 4 CPU: PSE disabled
Pentium Pro MTRR support enabled
md0: Malloc disk
Using $PIR table, 12 entries at 0xc00fde90
npx0: <math processor> on motherboard
npx0: INT 16 interface
pcib0: <Host to PCI bridge> on motherboard
pci0: <PCI bus> on pcib0
agp0: <Intel 82845G (845G GMCH) SVGA controller> mem 0xdc100000-0xdc17ffff,0xd0000000-0xd7ffffff irq 5 at device 2.0 on pci0
agp0: detected 8060k stolen memory
agp0: aperture size is 128M
pci0: <UHCI USB controller> at 29.0 irq 5
pci0: <UHCI USB controller> at 29.1 irq 10
pci0: <UHCI USB controller> at 29.2 irq 11
pci0: <USB controller> at 29.7 irq 10
pcib1: <Intel 82801BA/BAM (ICH2) Hub to PCI bridge> at device 30.0 on pci0
pci1: <PCI bus> on pcib1
cpc0: <Cyclades-PC300/TE 1-channel Adapter> port 0xa000-0xa07f mem 0xc0040000-0xc00400ff,0xc0043000-0xc00433ff,0xdc000000-0xdc07ffff,0xc0042000-0xc00423ff,0xc0041000-0xc004107f irq 9 at device 0.0 on pci1
hdlc0: PC300/TE  #1, 256KB of RAM at 0xdc000000, IRQ9, channel 1.
cpc0: driver is using old-style compatibility shims
em0: <Intel(R) PRO/1000 Network Connection, Version - 1.7.35> port 0xa400-0xa43f mem 0xc0000000-0xc001ffff irq 11 at device 5.0 on pci1
em0:  Speed:N/A  Duplex:N/A
em1: <Intel(R) PRO/1000 Network Connection, Version - 1.7.35> port 0xa800-0xa83f mem 0xc0020000-0xc003ffff irq 10 at device 6.0 on pci1
em1:  Speed:N/A  Duplex:N/A
isab0: <PCI to ISA bridge (vendor=8086 device=24c0)> at device 31.0 on pci0
isa0: <ISA bus> on isab0
atapci0: <Intel ICH4 ATA100 controller> port 0xcc00-0xcc0f,0xc800-0xc803,0xc400-0xc407,0xc000-0xc003,0xbc00-0xbc07 mem 0xdc181000-0xdc1813ff at device 31.1 on pci0
ata0: at 0x1f0 irq 14 on atapci0
ata1: at 0x170 irq 15 on atapci0
pci0: <unknown card> (vendor=0x8086, dev=0x24c3) at 31.3 irq 9
orm0: <Option ROMs> at iomem 0xcc000-0xcd7ff,0xce000-0xcf7ff on isa0
pmtimer0 on isa0
fdc0: <NEC 72065B or clone> at port 0x3f0-0x3f5,0x3f7 irq 6 drq 2 on isa0
atkbdc0: <Keyboard controller (i8042)> at port 0x60,0x64 on isa0
atkbd0: <AT Keyboard> irq 1 on atkbdc0
kbd0 at atkbd0
psm0: <PS/2 Mouse> irq 12 on atkbdc0
psm0: model Generic PS/2 mouse, device ID 0
vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
sc0: <System console> at flags 0x100 on isa0
sc0: VGA <16 virtual consoles, flags=0x300>
sio0 at port 0x3f8-0x3ff irq 4 flags 0x10 on isa0
sio0: type 16550A
sio1 at port 0x2f8-0x2ff irq 3 on isa0
sio1: type 16550A
ppc0: <Parallel port> at port 0x378-0x37f irq 7 on isa0
ppc0: SMC-like chipset (ECP/EPP/PS2/NIBBLE) in COMPATIBLE mode
ppc0: FIFO with 16/16/9 bytes threshold
plip0: <PLIP network interface> on ppbus0
lpt0: <Printer> on ppbus0
lpt0: Interrupt-driven port
ppi0: <Parallel I/O> on ppbus0
IP packet filtering initialized, divert enabled, rule-based forwarding enabled, default to deny, logging limited to 100 packets/entry by default
BRIDGE 020214 loaded
ad0: 38204MB <SAMSUNG SP0411N> [77622/16/63] at ata0-master UDMA100
Mounting root from ufs:/dev/ad0s1a
WARNING: / was not properly dismounted
--- dmesg.boot ends here ---


>Release-Note:
>Audit-Trail:
>Unformatted: