Crashes on X7SPE-HF with em

Philipp Wuensche cryx-freebsd at h3q.com
Tue Aug 24 23:21:44 UTC 2010


Hi,

I'm having trouble with a system on a Supermicro X7SPE-HF, it crashes
about once a day. I haven't found a way to trigger this yet.

The system has a bunch of VLANs on em1, it does routing between them.

Currently its running 8-STABLE but it happend with 8.1-RELEASE too.

greetings,
Philipp

# kgdb kernel.debug /var/crash/vmcore.0
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain
conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "amd64-marcel-freebsd"...

Unread portion of the kernel message buffer:


Fatal trap 9: general protection fault while in kernel mode
cpuid = 0; apic id = 00
instruction pointer	= 0x20:0xffffffff8061f5a8
stack pointer	        = 0x28:0xffffff80000e64d0
frame pointer	        = 0x28:0xffffff80000e64e0
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags	= interrupt enabled, resume, IOPL = 0
current process		= 0 (em1 taskq)
trap number		= 9
panic: general protection fault
cpuid = 0
Uptime: 13h24m39s
Physical memory: 4079 MB
Dumping 1349 MB: 1334 1318 1302 1286 1270 1254 1238 1222 1206 1190 1174
1158 1142 1126 1110 1094 1078 1062 1046 1030 1014 998 982 966 950 934
918 902 886 870 854 838 822 806 790 774 758 742 726 710 694 678 662 646
630 614 598 582 566 550 534 518 502 486 470 454 438 422 406 390 374 358
342 326 310 294 278 262 246 230 214 198 182 166 150 134 118 102 86 70 54
38 22 6

Reading symbols from /boot/kernel/zfs.ko...Reading symbols from
/boot/kernel/zfs.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/zfs.ko
Reading symbols from /boot/kernel/opensolaris.ko...Reading symbols from
/boot/kernel/opensolaris.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/opensolaris.ko
Reading symbols from /boot/kernel/coretemp.ko...Reading symbols from
/boot/kernel/coretemp.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/coretemp.ko
Reading symbols from /boot/kernel/ahci.ko...Reading symbols from
/boot/kernel/ahci.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/ahci.ko
Reading symbols from /boot/kernel/ipmi.ko...Reading symbols from
/boot/kernel/ipmi.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/ipmi.ko
Reading symbols from /boot/kernel/smbus.ko...Reading symbols from
/boot/kernel/smbus.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/smbus.ko
Reading symbols from /boot/kernel/pflog.ko...Reading symbols from
/boot/kernel/pflog.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/pflog.ko
Reading symbols from /boot/kernel/pf.ko...Reading symbols from
/boot/kernel/pf.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/pf.ko
#0  doadump () at pcpu.h:224
224		__asm("movq %%gs:0,%0" : "=r" (td));
(kgdb) list *0xffffffff8061f5a8
0xffffffff8061f5a8 is in m_tag_locate (/usr/src/sys/kern/uipc_mbuf2.c:389).
384		if (t == NULL)
385			p = SLIST_FIRST(&m->m_pkthdr.tags);
386		else
387			p = SLIST_NEXT(t, m_tag_link);
388		while (p != NULL) {
389			if (p->m_tag_cookie == cookie && p->m_tag_id == type)
390				return p;
391			p = SLIST_NEXT(p, m_tag_link);
392		}
393		return NULL;
(kgdb) backtrace
#0  doadump () at pcpu.h:224
#1  0xffffffff805c25ce in boot (howto=260)
    at /usr/src/sys/kern/kern_shutdown.c:416
#2  0xffffffff805c29dc in panic (fmt=0x0)
    at /usr/src/sys/kern/kern_shutdown.c:590
#3  0xffffffff808d40bd in trap_fatal (frame=0xffffffff80c8af60,
eva=Variable "eva" is not available.
)
    at /usr/src/sys/amd64/amd64/trap.c:777
#4  0xffffffff808d4a8b in trap (frame=0xffffff80000e6420)
    at /usr/src/sys/amd64/amd64/trap.c:588
#5  0xffffffff808b9d64 in calltrap ()
    at /usr/src/sys/amd64/amd64/exception.S:224
#6  0xffffffff8061f5a8 in m_tag_locate (m=0xffffff010bb45c00, cookie=0,
    type=6, t=Variable "t" is not available.
) at /usr/src/sys/kern/uipc_mbuf2.c:388
#7  0xffffffff806d7c56 in ip_ipsec_output (m=0xffffff80000e6598,
    inp=0xffffff010be43150, flags=0xffffff80000e6594,
    error=0xffffff80000e65a8, ifp=Variable "ifp" is not available.
) at mbuf.h:1006
#8  0xffffffff806d97ef in ip_output (m=0xffffff010bb45c00, opt=Variable
"opt" is not available.
)
    at /usr/src/sys/netinet/ip_output.c:483
#9  0xffffffff8073ef13 in tcp_output (tp=0xffffff000a9eb370)
    at /usr/src/sys/netinet/tcp_output.c:1190
#10 0xffffffff8073a42d in tcp_do_segment (m=0xffffff000a4cd800,
    th=0xffffff000a4df824, so=0xffffff000a9037f8, tp=0xffffff000a9eb370,
    drop_hdrlen=52, tlen=0, iptos=0 '\0', ti_locked=2)
    at /usr/src/sys/netinet/tcp_input.c:1484
#11 0xffffffff8073cf7b in tcp_input (m=0xffffff000a4cd800, off0=Variable
"off0" is not available.
)
    at /usr/src/sys/netinet/tcp_input.c:1029
#12 0xffffffff806d7660 in ip_input (m=0xffffff000a4cd800)
    at /usr/src/sys/netinet/ip_input.c:793
#13 0xffffffff8067bd3e in netisr_dispatch_src (proto=1, source=Variable
"source" is not available.
)
    at /usr/src/sys/net/netisr.c:917
#14 0xffffffff806720fd in ether_demux (ifp=0xffffff0004fd4000,
    m=0xffffff000a4cd800) at /usr/src/sys/net/if_ethersubr.c:901
#15 0xffffffff806724c7 in ether_input (ifp=0xffffff0004fd4000,
    m=0xffffff000a4cd800) at /usr/src/sys/net/if_ethersubr.c:760
#16 0xffffffff8067201f in ether_demux (ifp=0xffffff0002686800,
    m=0xffffff000a4cd800) at /usr/src/sys/net/if_ethersubr.c:810
#17 0xffffffff806724c7 in ether_input (ifp=0xffffff0002686800,
    m=0xffffff000a4cd800) at /usr/src/sys/net/if_ethersubr.c:760
#18 0xffffffff8033a00b in em_rxeof (rxr=0xffffff00026f7400, count=100,
    done=0x0) at /usr/src/sys/dev/e1000/if_em.c:4196
#19 0xffffffff8033aab8 in em_handle_que (context=Variable "context" is
not available.
)
    at /usr/src/sys/dev/e1000/if_em.c:1451
#20 0xffffffff805ff704 in taskqueue_run (queue=0xffffff0002727b80)
    at /usr/src/sys/kern/subr_taskqueue.c:239
#21 0xffffffff805ff976 in taskqueue_thread_loop (arg=Variable "arg" is
not available.
)
    at /usr/src/sys/kern/subr_taskqueue.c:360
#22 0xffffffff805985a8 in fork_exit (
    callout=0xffffffff805ff930 <taskqueue_thread_loop>,
    arg=0xffffff80003c1740, frame=0xffffff80000e6c80)
    at /usr/src/sys/kern/kern_fork.c:844
#23 0xffffffff808ba23e in fork_trampoline ()
    at /usr/src/sys/amd64/amd64/exception.S:566
#24 0x0000000000000000 in ?? ()
#25 0x0000000000000000 in ?? ()
#26 0x0000000000000000 in ?? ()
#27 0x0000000000000000 in ?? ()
#28 0x0000000000000000 in ?? ()
#29 0x0000000000000000 in ?? ()
#30 0x0000000000000000 in ?? ()
#31 0x0000000000000000 in ?? ()
#32 0x0000000000000000 in ?? ()
#33 0x0000000000000000 in ?? ()
#34 0x0000000000000000 in ?? ()
#35 0x0000000000000000 in ?? ()
#36 0x0000000000000000 in ?? ()
#37 0x0000000000000000 in ?? ()
#38 0x0000000000000000 in ?? ()
#39 0x0000000000000000 in ?? ()
#40 0x0000000000000000 in ?? ()
#41 0x0000000000000000 in ?? ()
#42 0x0000000000000000 in ?? ()
#43 0x0000000000000000 in ?? ()
#44 0x0000000000000000 in ?? ()
#45 0x0000000000000000 in ?? ()
#46 0x0000000000000000 in ?? ()
#47 0x0000000000000000 in ?? ()
#48 0x00000000010d1000 in ?? ()
#49 0x0000000000000000 in ?? ()
#50 0x0000000000000000 in ?? ()
#51 0xffffffff80cb0fa0 in sleepq_chains ()
#52 0xffffff00025087c0 in ?? ()
#53 0xffffff80000e6b20 in ?? ()
#54 0xffffff80000e6ad8 in ?? ()
#55 0xffffff00026877c0 in ?? ()
#56 0xffffffff805e64fa in sched_switch (td=0xffffff80003c1740,
    newtd=0xffffffff805ff930, flags=Variable "flags" is not available.
) at /usr/src/sys/kern/sched_ule.c:1844
Previous frame inner to this frame (corrupt stack?)


More information about the freebsd-stable mailing list