kern/121274: Panic in ether_input() with different NIC's.

[Sean Farley]

>Number:         121274
>Category:       kern
>Synopsis:       Panic in ether_input() with different NIC's.
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sun Mar 02 01:10:01 UTC 2008
>Closed-Date:
>Last-Modified:
>Originator:     Sean Farley
>Release:        FreeBSD 7.0-STABLE i386
>Organization:
>Environment:
System: FreeBSD thor.farley.org 7.0-STABLE FreeBSD 7.0-STABLE #0: Thu Feb 28 19:10:50 CST 2008 sean at thor.farley.org:/usr/FreeBSD/RELENG_7/obj/usr/FreeBSD/RELENG_7/src/sys/THOR i386

        Athlon XP 2100, Asus A7V880, Netgear FA311-TX (sis driver)

>Description:
I have received two panics at ether_input():545 (frame #7).  One panic was
concerning the sis(4), and the other with sk(4).  This hardware has worked
well in the past as a desktop.  I recently configured it to be my gateway
server replacing an older system.

The setup is basically the same as the old system with the jails, ipfilter
and ipnat as they were before.

Panic message:
Fatal trap 12: page fault while in kernel mode
cpuid = 0; apic id = 00
fault virtual address   = 0x3000c
fault code              = supervisor read, page not present
instruction pointer     = 0x20:0xc05f4825
stack pointer           = 0x28:0xdda4fc1c
frame pointer           = 0x28:0xdda4fc3c
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, def32 1, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 22 (irq18: skc0)
trap number             = 12
panic: page fault
cpuid = 0
Uptime: 6h58m0s
Physical memory: 758 MB
Dumping 115 MB: 100 84 68 52 36 20 4

The stack trace:
(kgdb) where
#0  doadump () at pcpu.h:195
#1  0xc055d3b7 in boot (howto=260) at /usr/FreeBSD/RELENG_7/src/sys/kern/kern_shutdown.c:409
#2  0xc055d679 in panic (fmt=Variable "fmt" is not available.) at /usr/FreeBSD/RELENG_7/src/sys/kern/kern_shutdown.c:563
#3  0xc0782bec in trap_fatal (frame=0xdda4fbdc, eva=196620) at /usr/FreeBSD/RELENG_7/src/sys/i386/i386/trap.c:899
#4  0xc0782e50 in trap_pfault (frame=0xdda4fbdc, usermode=0, eva=196620) at /usr/FreeBSD/RELENG_7/src/sys/i386/i386/trap.c:812
#5  0xc07837d2 in trap (frame=0xdda4fbdc) at /usr/FreeBSD/RELENG_7/src/sys/i386/i386/trap.c:490
#6  0xc076a14b in calltrap () at /usr/FreeBSD/RELENG_7/src/sys/i386/i386/exception.s:139
#7  0xc05f4825 in ether_input (ifp=0xc371a800, m=0xc42e0200) at /usr/FreeBSD/RELENG_7/src/sys/net/if_ethersubr.c:545
#8  0xc04c2c56 in sk_rxeof (sc_if=0xc371c000) at /usr/FreeBSD/RELENG_7/src/sys/dev/sk/if_sk.c:2917
#9  0xc04c2e18 in sk_intr (xsc=0xc370eb00) at /usr/FreeBSD/RELENG_7/src/sys/dev/sk/if_sk.c:3246
#10 0xc05405eb in ithread_loop (arg=0xc3729b30) at /usr/FreeBSD/RELENG_7/src/sys/kern/kern_intr.c:1036
#11 0xc053d3e9 in fork_exit (callout=0xc0540440 <ithread_loop>, arg=0xc3729b30, frame=0xdda4fd38) at /usr/FreeBSD/RELENG_7/src/sys/kern/kern_fork.c:781
#12 0xc076a1c0 in fork_trampoline () at /usr/FreeBSD/RELENG_7/src/sys/i386/i386/exception.s:205

A few more details can be found here:
http://www.farley.org/freebsd/tmp/panic/

I still have the second core and kernel if more information is needed.

>How-To-Repeat:
In both panics, it looks like it was while the regex milter was processing
an E-mail.

>Fix:
>Release-Note:
>Audit-Trail:
>Unformatted: