kern/94307: [bge] kernel panics when passing trafffic through bge1

Byron L. Hicks bhicks at nmsu.edu
Thu Mar 16 23:21:11 UTC 2006


The following reply was made to PR kern/94307; it has been noted by GNATS.

From: "Byron L. Hicks" <bhicks at nmsu.edu>
To: bug-followup at FreeBSD.org, bhicks at nmsu.edu
Cc:  
Subject: Re: kern/94307: [bge] kernel panics when passing trafffic through
 bge1
Date: Thu, 16 Mar 2006 08:35:42 -0700

 -----BEGIN PGP SIGNED MESSAGE-----
 Hash: SHA1
 
 Here is the latest crash.  I recompiled world and kernel, and it crashes
 in the same spot.
 
 > monitor-temp# kgdb kernel.debug /usr/crash/vmcore.0
 > [GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"]
 > GNU gdb 6.1.1 [FreeBSD]
 > Copyright 2004 Free Software Foundation, Inc.
 > GDB is free software, covered by the GNU General Public License, and you are
 > welcome to change it and/or distribute copies of it under certain conditions.
 > Type "show copying" to see the conditions.
 > There is absolutely no warranty for GDB.  Type "show warranty" for details.
 > This GDB was configured as "i386-marcel-freebsd".
 > 
 > Unread portion of the kernel message buffer:
 > bge1: discard frame w/o leading ethernet header (len 4294967292 pkt len 4294967292)
 > 
 > 
 > Fatal trap 12: page fault while in kernel mode
 > fault virtual address   = 0xc
 > fault code              = supervisor write, page not present
 > instruction pointer     = 0x20:0xc04ed93b
 > stack pointer           = 0x28:0xe500cca8
 > frame pointer           = 0x28:0xe500ccd0
 > code segment            = base 0x0, limit 0xfffff, type 0x1b
 >                         = DPL 0, pres 1, def32 1, gran 1
 > processor eflags        = interrupt enabled, resume, IOPL = 0
 > current process         = 28 (irq17: bge1 uhci1+)
 > trap number             = 12
 > panic: page fault
 > Uptime: 58s
 > Dumping 1023 MB (2 chunks)
 >   chunk 0: 1MB (159 pages) ... ok
 >   chunk 1: 1023MB (261848 pages) 1007 991 975 959 943 927 911 895 879 863 847 831 815 799 783 767 751 735 719 703 687 671 655 639 623 607 591 575 559 543 527 511 495 479 463 447 431 415 399 383 367 351 335 319 303 287 271 255 239 223 207 191 175 159 143 127 111 95 79 63 47 31 15
 > 
 > #0  doadump () at pcpu.h:165
 > 165             __asm __volatile("movl %%fs:0,%0" : "=r" (td));
 > (kgdb) list *0xc04ed93b
 > 0xc04ed93b is in bge_rxeof (/usr/src/sys/dev/bge/if_bge.c:2626).
 > 2621                                cur_rx->bge_len);
 > 2622                            m->m_data += ETHER_ALIGN;
 > 2623                    }
 > 2624    #endif
 > 2625                    eh = mtod(m, struct ether_header *);
 > 2626                    m->m_pkthdr.len = m->m_len = cur_rx->bge_len - ETHER_CRC_LEN;
 > 2627                    m->m_pkthdr.rcvif = ifp;
 > 2628    
 > 2629                    if (ifp->if_capenable & IFCAP_RXCSUM) {
 > 2630                            if (cur_rx->bge_flags & BGE_RXBDFLAG_IP_CSUM) {
 > (kgdb) backtrace
 > #0  doadump () at pcpu.h:165
 > #1  0xc063f6b2 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:399
 > #2  0xc063f948 in panic (fmt=0xc08367d7 "%s")
 >     at /usr/src/sys/kern/kern_shutdown.c:555
 > #3  0xc07ee6b4 in trap_fatal (frame=0xe500cc68, eva=12)
 >     at /usr/src/sys/i386/i386/trap.c:836
 > #4  0xc07ee41b in trap_pfault (frame=0xe500cc68, usermode=0, eva=12)
 >     at /usr/src/sys/i386/i386/trap.c:744
 > #5  0xc07ee079 in trap (frame=
 >       {tf_fs = -994312184, tf_es = 822280232, tf_ds = -994312152, tf_edi = -452247520, tf_esi = -994267136, tf_ebp = -452932400, tf_isp = -452932460, tf_ebx = 0, tf_edx = 0, tf_ecx = -994290688, tf_eax = -4, tf_trapno = 12, tf_err = 2, tf_eip = -1068574405, tf_cs = 32, tf_eflags = 590487, tf_esp = 1014144642, tf_ss = 0}) at /usr/src/sys/i386/i386/trap.c:434
 > #6  0xc07ddfca in calltrap () at /usr/src/sys/i386/i386/exception.s:139
 > #7  0xc04ed93b in bge_rxeof (sc=0xc4bcb000)
 >     at /usr/src/sys/dev/bge/if_bge.c:2626
 > #8  0xc04edd6c in bge_intr (xsc=0xc4bcb000)
 >     at /usr/src/sys/dev/bge/if_bge.c:2818
 > #9  0xc062ae2d in ithread_loop (arg=0xc4a87400)
 >     at /usr/src/sys/kern/kern_intr.c:547
 > #10 0xc062a0b4 in fork_exit (callout=0xc062acd4 <ithread_loop>, 
 >     arg=0xc4a87400, frame=0xe500cd38) at /usr/src/sys/kern/kern_fork.c:789
 > ---Type <return> to continue, or q <return> to quit---
 > #11 0xc07de02c in fork_trampoline () at /usr/src/sys/i386/i386/exception.s:208
 > (kgdb) quit
 
 If it helps, here is my dmesg.boot:
 
 > Copyright (c) 1992-2006 The FreeBSD Project.
 > Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
 >         The Regents of the University of California. All rights reserved.
 > FreeBSD 6.1-PRERELEASE #0: Wed Mar 15 19:48:08 MST 2006
 >     root@:/usr/obj/usr/src/sys/DL320
 > Timecounter "i8254" frequency 1193182 Hz quality 0
 > CPU: Intel(R) Pentium(R) D CPU 2.80GHz (2793.02-MHz 686-class CPU)
 >   Origin = "GenuineIntel"  Id = 0xf44  Stepping = 4
 >   Features=0xbfebfbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE>
 >   Features2=0x641d<SSE3,RSVD2,MON,DS_CPL,CNTX-ID,CX16,<b14>>
 >   AMD Features=0x20000000<LM>
 >   Hyperthreading: 2 logical CPUs
 > real memory  = 1073577984 (1023 MB)
 > avail memory = 1041752064 (993 MB)
 > ACPI APIC Table: <HP     00000083>
 > ioapic0 <Version 2.0> irqs 0-23 on motherboard
 > npx0: [FAST]
 > npx0: <math processor> on motherboard
 > npx0: INT 16 interface
 > acpi0: <HP D20> on motherboard
 > acpi0: Power Button (fixed)
 > Timecounter "ACPI-fast" frequency 3579545 Hz quality 1000
 > acpi_timer0: <24-bit timer at 3.579545MHz> port 0x908-0x90b on acpi0
 > cpu0: <ACPI CPU> on acpi0
 > pcib0: <ACPI Host-PCI bridge> on acpi0
 > pci0: <ACPI PCI bus> on pcib0
 > pcib0: no PRT entry for 0.31.INTA
 > pcib1: <ACPI PCI-PCI bridge> at device 1.0 on pci0
 > pci4: <ACPI PCI bus> on pcib1
 > pcib2: <ACPI PCI-PCI bridge> at device 0.0 on pci4
 > pci5: <ACPI PCI bus> on pcib2
 > bge0: <Broadcom BCM5714C Gigabit Ethernet, ASIC rev. 0x9001> mem 0xfdff0000-0xfdffffff,0xfdfe0000-0xfdfeffff irq 16 at device 4.0 on pci5
 > miibus0: <MII bus> on bge0
 > brgphy0: <BCM5714 10/100/1000baseTX PHY> on miibus0
 > brgphy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseTX, 1000baseTX-FDX, auto
 > bge0: Ethernet address: 00:16:35:5a:9d:35
 > bge1: <Broadcom BCM5714C Gigabit Ethernet, ASIC rev. 0x9001> mem 0xfdfd0000-0xfdfdffff,0xfdfc0000-0xfdfcffff irq 17 at device 4.1 on pci5
 > miibus1: <MII bus> on bge1
 > brgphy1: <BCM5714 10/100/1000baseTX PHY> on miibus1
 > brgphy1:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseTX, 1000baseTX-FDX, auto
 > bge1: Ethernet address: 00:16:35:5a:9d:36
 > pcib3: <ACPI PCI-PCI bridge> at device 8.0 on pci5
 > pci6: <ACPI PCI bus> on pcib3
 > pcib4: <ACPI PCI-PCI bridge> at device 28.0 on pci0
 > pci2: <ACPI PCI bus> on pcib4
 > pcib5: <ACPI PCI-PCI bridge> at device 28.4 on pci0
 > pci3: <ACPI PCI bus> on pcib5
 > uhci0: <UHCI (generic) USB controller> port 0x1000-0x101f irq 16 at device 29.0 on pci0
 > uhci0: [GIANT-LOCKED]
 > usb0: <UHCI (generic) USB controller> on uhci0
 > usb0: USB revision 1.0
 > uhub0: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
 > uhub0: 2 ports with 2 removable, self powered
 > uhci1: <UHCI (generic) USB controller> port 0x1020-0x103f irq 17 at device 29.1 on pci0
 > uhci1: [GIANT-LOCKED]
 > usb1: <UHCI (generic) USB controller> on uhci1
 > usb1: USB revision 1.0
 > uhub1: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
 > uhub1: 2 ports with 2 removable, self powered
 > uhci2: <UHCI (generic) USB controller> port 0x1040-0x105f irq 18 at device 29.2 on pci0
 > uhci2: [GIANT-LOCKED]
 > usb2: <UHCI (generic) USB controller> on uhci2
 > usb2: USB revision 1.0
 > uhub2: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
 > uhub2: 2 ports with 2 removable, self powered
 > uhci3: <UHCI (generic) USB controller> port 0x1060-0x107f irq 19 at device 29.3 on pci0
 > uhci3: [GIANT-LOCKED]
 > usb3: <UHCI (generic) USB controller> on uhci3
 > usb3: USB revision 1.0
 > uhub3: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
 > uhub3: 2 ports with 2 removable, self powered
 > ehci0: <Intel 82801GB/R (ICH7) USB 2.0 controller> at device 29.7 on pci0
 > ehci0: [GIANT-LOCKED]
 > usb4: EHCI version 1.0
 > usb4: companion controllers, 2 ports each: usb0 usb1 usb2 usb3
 > usb4: <Intel 82801GB/R (ICH7) USB 2.0 controller> on ehci0
 > usb4: USB revision 2.0
 > uhub4: Intel EHCI root hub, class 9/0, rev 2.00/1.00, addr 1
 > uhub4: 8 ports with 8 removable, self powered
 > pcib6: <ACPI PCI-PCI bridge> at device 30.0 on pci0
 > pci1: <ACPI PCI bus> on pcib6
 > pci1: <display, VGA> at device 3.0 (no driver attached)
 > pci1: <base peripheral> at device 4.0 (no driver attached)
 > pci1: <base peripheral> at device 4.2 (no driver attached)
 > uhci4: <UHCI (generic) USB controller> port 0x3800-0x381f irq 23 at device 4.4 on pci1
 > uhci4: [GIANT-LOCKED]
 > usb5: <UHCI (generic) USB controller> on uhci4
 > usb5: USB revision 1.0
 > uhub5: (0x103c) UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
 > uhub5: 2 ports with 2 removable, self powered
 > isab0: <PCI-ISA bridge> at device 31.0 on pci0
 > isa0: <ISA bus> on isab0
 > atapci0: <Intel ICH7 UDMA100 controller> port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0x500-0x50f irq 7 at device 31.1 on pci0
 > ata0: <ATA channel 0> on atapci0
 > ata1: <ATA channel 1> on atapci0
 > atapci1: <Intel ICH7 SATA300 controller> port 0x1080-0x1087,0x1088-0x108b,0x1090-0x1097,0x1098-0x109b,0x10a0-0x10af mem 0xfddf0000-0xfddf03ff irq 17 at device 31.2 on pci0
 > ata2: <ATA channel 0> on atapci1
 > ata3: <ATA channel 1> on atapci1
 > acpi_tz0: <Thermal Zone> on acpi0
 > atkbdc0: <Keyboard controller (i8042)> port 0x60,0x64 irq 1 on acpi0
 > atkbd0: <AT Keyboard> irq 1 on atkbdc0
 > kbd0 at atkbd0
 > atkbd0: [GIANT-LOCKED]
 > psm0: <PS/2 Mouse> irq 12 on atkbdc0
 > psm0: [GIANT-LOCKED]
 > psm0: model Generic PS/2 mouse, device ID 0
 > sio0: <Standard PC COM port> port 0x3f8-0x3ff irq 4 flags 0x10 on acpi0
 > sio0: type 16550A, console
 > fdc0: <floppy drive controller (FDE)> port 0x3f2-0x3f5 irq 6 drq 2 on acpi0
 > fdc0: does not respond
 > device_attach: fdc0 attach returned 6
 > fdc0: <floppy drive controller (FDE)> port 0x3f2-0x3f5 irq 6 drq 2 on acpi0
 > fdc0: does not respond
 > device_attach: fdc0 attach returned 6
 > pmtimer0 on isa0
 > orm0: <ISA Option ROMs> at iomem 0xc0000-0xcafff,0xee000-0xeffff on isa0
 > ppc0: parallel port not found.
 > sc0: <System console> at flags 0x100 on isa0
 > sc0: VGA <16 virtual consoles, flags=0x100>
 > sio1: configured irq 3 not in bitmap of probed irqs 0
 > sio1: port may not be enabled
 > vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
 > ukbd0: HP Virtual Keyboard, rev 1.10/0.01, addr 2, iclass 3/1
 > kbd1 at ukbd0
 > ums0: HP Virtual Keyboard, rev 1.10/0.01, addr 2, iclass 3/1
 > ums0: 3 buttons.
 > uhub6: HP Virtual Hub, class 9/0, rev 1.10/0.01, addr 3
 > uhub6: 7 ports with 7 removable, self powered
 > Timecounter "TSC" frequency 2793019754 Hz quality 800
 > Timecounters tick every 1.000 msec
 > acd0: DVDROM <DV-28E-C/B.4F> at ata0-master PIO4
 > ad4: 76319MB <Maxtor 6L080M0 BANC1G10> at ata2-master SATA150
 > Trying to mount root from ufs:/dev/ad4s1a
 > WARNING: /tmp was not properly dismounted
 > WARNING: /usr was not properly dismounted
 > WARNING: /var was not properly dismounted
 
 I'm using bge1 because bge0 locks the machine with no crash dump.  bge1
 just kernel panics and gives me a kernel dump file.
 
 - --
 Byron L. Hicks
 Network Engineer
 NMSU ICT/CHECS-NET
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v1.4.1 (Darwin)
 Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
 
 iD8DBQFEGYXOIuuK+iJ+1EMRAtiWAJ4qaHObqXRlQ6DupI4TNuT+YOlV7QCfZ9dX
 2FeONdiUhQqh+EgMaQmToNQ=
 =KMZa
 -----END PGP SIGNATURE-----


More information about the freebsd-bugs mailing list