if_dc.c causes page fault while in kernel mode; coredump; reproducible

[Martin P. Hansen]

On Sun, 25 Dec 2005, Xin LI wrote:
> Would you please provide output from GDB's "bt full"?  That would help
> us to track down the issue.

Sure, it got trimmed away in my attempt to balance the information.

(kgdb) bt full
#0  doadump () at pcpu.h:165
No locals.
#1  0xc063a55e in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:399
        first_buf_printf = 1
#2  0xc063a7f4 in panic (fmt=0xc08539cc "%s")
    at /usr/src/sys/kern/kern_shutdown.c:555
        td = (struct thread *) 0xc36db600
        bootopt = 260
        newpanic = 0
        ap = 0xc36db600 "$\226mÃ"
        buf = "page fault", '\0' <repeats 245 times>
#3  0xc080b484 in trap_fatal (frame=0xd5865c74, eva=24)
    at /usr/src/sys/i386/i386/trap.c:836
        code = 40
        type = 12
        ss = 40
        esp = 0
        softseg = {ssd_base = 0, ssd_limit = 1048575, ssd_type = 27, 
  ssd_dpl = 0, ssd_p = 1, ssd_xx = 6, ssd_xx1 = 1, ssd_def32 = 1, ssd_gran = 1}
        msg = 0x0
#4  0xc080b1eb in trap_pfault (frame=0xd5865c74, usermode=0, eva=24)
    at /usr/src/sys/i386/i386/trap.c:744
        va = 0
        vm = (struct vmspace *) 0x0
        map = 0xc0925ec0
        rv = 1
        ftype = 1 '\001'
        td = (struct thread *) 0xc36db600
        p = (struct proc *) 0xc36d9624
#5  0xc080ae29 in trap (frame=
      {tf_fs = 8, tf_es = -1012793304, tf_ds = -1066205144, tf_edi = -4, tf_esi = 16, tf_ebp = -712614708, tf_isp = -712614752, tf_ebx = 0, tf_edx = -712183808, tf_ecx = 0, tf_eax = -1015383040, tf_trapno = 12, tf_err = 2, tf_eip = -1066150784, tf_cs = 32, tf_eflags = 590406, tf_esp = -712183552, tf_ss = -1015383040})
    at /usr/src/sys/i386/i386/trap.c:434
        td = (struct thread *) 0xc36db600
        p = (struct proc *) 0xc36d9624
        sticks = 406607872
        i = 0
        ucode = 0
        type = 12
        code = 2
        eva = 24
#6  0xc07fa5da in calltrap () at /usr/src/sys/i386/i386/exception.s:139
No locals.
#7  0xc073d480 in dc_rxeof (sc=0xc379c000) at /usr/src/sys/pci/if_dc.c:2779
        m = (struct mbuf *) 0x0
        ifp = (struct ifnet *) 0xc37a7c00
        cur_rx = (struct dc_desc *) 0xd58cf100
        i = 16
        total_len = -4
        rxstat = 0
#8  0xc073dbbe in dc_intr (arg=0xc379c000) at /usr/src/sys/pci/if_dc.c:3142
        curpkts = 11281
        sc = (struct dc_softc *) 0xc379c000
        ifp = (struct ifnet *) 0xc37a7c00
        status = 4026532162
#9  0xc06260f5 in ithread_loop (arg=0xc367f480)
    at /usr/src/sys/kern/kern_intr.c:547
        ithd = (struct ithd *) 0xc367f480
        ih = (struct intrhand *) 0xc3809400
        td = (struct thread *) 0xc36db600
        p = (struct proc *) 0xc36d9624
        count = 0
        warned = 0
#10 0xc062537c in fork_exit (callout=0xc0625f9c <ithread_loop>, 
    arg=0xc367f480, frame=0xd5865d38) at /usr/src/sys/kern/kern_fork.c:789
        p = (struct proc *) 0xc36d9624
        td = (struct thread *) 0xd58cf000
#11 0xc07fa63c in fork_trampoline () at /usr/src/sys/i386/i386/exception.s:208
No locals.
(kgdb)

-- 
Martin P. Hansen
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-current/attachments/20051225/94b46711/attachment.bin