if_bfe/uhci: storm interrupt Fatal trap 12

Doug White dwhite at gumbysoft.com
Thu Mar 10 03:24:09 GMT 2005


On Wed, 9 Mar 2005 pcasidy at casidy.com wrote:

> On  7 Mar, Doug White wrote:
> > Thanks for the detailed message. I didn't realize that we'd enabled DDB in
> > the snapshot kernel :)
> >
> > Anyway this looks like a bug in the bfe driver.  It appears to be trying
> > to free a DMA map that is either unallocated or got spammed.  You may want
> > to repost this to freebsd-current at freebsd.org and use a subject like
> > "Use-after-free in bfe" since I think the interrupt storm message is
> > secondary.
> >
> > A capture of boot -v might also be useful, or at minumum anything the bfe
> > driver output during boot ('dmesg | grep bfe' might work with the fixit
> > disc). A crashdump would be nice too, but you'd likely need to find a
> > different network adapter.
> >
>
> I have escalated this problem to current at .
>
> I have also built a STABLE kernel with DDD and KDB options and the line
> where the problem occurs is
>
> _bus_dmamap_unload+0x16: movl 0x10(%eax),%eax

That was in the previous trace.

> I have enable crash dumps (I think) but when booting I have "savecore:
> no dumps found". I think the problem is that i have 1.5Gb of memory and
> only 1Gb of swap.

Yeah, that will be a problem.

-- 
Doug White                    |  FreeBSD: The Power to Serve
dwhite at gumbysoft.com          |  www.FreeBSD.org


More information about the freebsd-stable mailing list