i386/122048: 6.3-RELEASE kernel crashes on high-volume & high-speed scp

[True Entropy]

The following reply was made to PR i386/122048; it has been noted by GNATS.

From: True Entropy <unexpectedvalue at yahoo.com>
To: bug-followup at FreeBSD.org
Cc: remko at elvandar.org
Subject: Re: i386/122048: 6.3-RELEASE kernel crashes on high-volume & high-speed scp
Date: Tue, 25 Mar 2008 07:41:08 -0700 (PDT)

 Kernel backtrace follows. Looks like interrupt handling problem in nve driver.
 
 
 # kgdb kernel.debug /var/crash/vmcore.0
 kgdb: kvm_nlist(_stopped_cpus):
 kgdb: kvm_nlist(_stoppcbs):
 [GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so: Undefined
 symbol "ps_pglobal_lookup"]
 GNU gdb 6.1.1 [FreeBSD]
 Copyright 2004 Free Software Foundation, Inc.
 GDB is free software, covered by the GNU General Public License, and you are
 welcome to change it and/or distribute copies of it under certain conditions.
 Type "show copying" to see the conditions.
 There is absolutely no warranty for GDB.  Type "show warranty" for details.
 This GDB was configured as "i386-marcel-freebsd".
 
 Unread portion of the kernel message buffer:
 
 Fatal double fault:
 eip = 0xc090a41a
 esp = 0xe07f9000
 ebp = 0xe07f9008
 panic: double fault
 Uptime: 8h24m13s
 Dumping 894 MB (2 chunks)
   chunk 0: 1MB (159 pages) ... ok
   chunk 1: 894MB (228848 pages) 878 862 846 830 814 798 782 766 750 734 718 702 686 670
 654 638 622 606 590 574 558 542 526 510 494 478 462 446 430 414 398 382 366 350 334 318
 302 286 270 254 238 222 206 190 174 158 142 126 110 94 78 62 46 30 14
 
 #0  doadump () at pcpu.h:165
 165             __asm __volatile("movl %%fs:0,%0" : "=r" (td));
 (kgdb) backtrace
 #0  doadump () at pcpu.h:165
 #1  0xc06af3a2 in boot (howto=260) at ../../../kern/kern_shutdown.c:409
 #2  0xc06af638 in panic (fmt=0xc09d96f8 "double fault") at
 ../../../kern/kern_shutdown.c:565
 #3  0xc09388c2 in dblfault_handler () at ../../../i386/i386/trap.c:867
 #4  0xc090a41a in nve_dmamap_tx_cb (arg=0xe22ea894, segs=0xc4d08b00, nsegs=-500258640,
 mapsize=162, error=0)
     at ../../../dev/nve/if_nve.c:280
 #5  0xc0923752 in bus_dmamap_load_mbuf (dmat=0xc4de7500, map=0xc4d07e00, m0=0xc4deea00,
 callback=0xc090a400 <nve_dmamap_tx_cb>,
     callback_arg=0xe22ea894, flags=1) at ../../../i386/i386/busdma_machdep.c:787
 #6  0xc090b70e in nve_ifstart_locked (ifp=0xc4d0ac00) at ../../../dev/nve/if_nve.c:889
 #7  0xc090c6fa in nve_ospackettx (ctx=0xc4d0f200, id=0xe22ea8b0, success=1) at
 ../../../dev/nve/if_nve.c:1559
 #8  0xc0872307 in UpdateTransmitDescRingData ()
 #9  0xe22e7238 in ?? ()
 #10 0x00000001 in ?? ()
 #11 0xe24eb000 in ?? ()
 #12 0x00000000 in ?? ()
 #13 0x00000000 in ?? ()
 #14 0xe22e6000 in ?? ()
 #15 0xc08718c7 in ADAPTER_HandleInterruptThroughput ()
 #16 0x00000000 in ?? ()
 #17 0x00000010 in ?? ()
 #18 0xe22ea894 in ?? ()
 #19 0xc4d0ac00 in ?? ()
 #20 0xc4d0f200 in ?? ()
 #21 0xe07f9388 in ?? ()
 #22 0xc090b6de in nve_ifstart_locked (ifp=0xe22e7238) at ../../../dev/nve/if_nve.c:884
 Previous frame inner to this frame (corrupt stack?)
 (kgdb)
 
 .
 
 
 end
 
 
 
 .
 
 (spam starts here)
 
 
       ____________________________________________________________________________________
 Looking for last minute shopping deals?  
 Find them fast with Yahoo! Search.  http://tools.search.yahoo.com/newsearch/category.php?category=shopping