Re: if_bfe/uhci: storm interrupt Fatal trap 12
On 7 Mar, Doug White wrote:
Thanks for the detailed message. I didn't realize that we'd enabled DDB in
the snapshot kernel :)
Anyway this looks like a bug in the bfe driver. It appears to be trying
to free a DMA map that is either unallocated or got spammed. You may want
to repost this to freebsd-current@freebsd.org and use a subject like
Use-after-free in bfe since I think the interrupt storm message is
secondary.
A capture of boot -v might also be useful, or at minumum anything the bfe
driver output during boot ('dmesg | grep bfe' might work with the fixit
disc). A crashdump would be nice too, but you'd likely need to find a
different network adapter.
I have escalated this problem to [EMAIL PROTECTED]
I have also built a STABLE kernel with DDD and KDB options and the line
where the problem occurs is
_bus_dmamap_unload+0x16: movl 0x10(%eax),%eax
I have enable crash dumps (I think) but when booting I have savecore:
no dumps found. I think the problem is that i have 1.5Gb of memory and
only 1Gb of swap.
Well, I will add this info to the message I sent on [EMAIL PROTECTED]
Phil.
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: if_bfe/uhci: storm interrupt Fatal trap 12
On Wed, 9 Mar 2005 [EMAIL PROTECTED] wrote:
On 7 Mar, Doug White wrote:
Thanks for the detailed message. I didn't realize that we'd enabled DDB in
the snapshot kernel :)
Anyway this looks like a bug in the bfe driver. It appears to be trying
to free a DMA map that is either unallocated or got spammed. You may want
to repost this to freebsd-current@freebsd.org and use a subject like
Use-after-free in bfe since I think the interrupt storm message is
secondary.
A capture of boot -v might also be useful, or at minumum anything the bfe
driver output during boot ('dmesg | grep bfe' might work with the fixit
disc). A crashdump would be nice too, but you'd likely need to find a
different network adapter.
I have escalated this problem to [EMAIL PROTECTED]
I have also built a STABLE kernel with DDD and KDB options and the line
where the problem occurs is
_bus_dmamap_unload+0x16: movl 0x10(%eax),%eax
That was in the previous trace.
I have enable crash dumps (I think) but when booting I have savecore:
no dumps found. I think the problem is that i have 1.5Gb of memory and
only 1Gb of swap.
Yeah, that will be a problem.
--
Doug White| FreeBSD: The Power to Serve
[EMAIL PROTECTED] | www.FreeBSD.org
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: if_bfe/uhci: storm interrupt Fatal trap 12
On 4 Mar, Doug White wrote: Hm ... dunno. You might try one of the RELENG_5 snapshots that will be coming out shortly as we get into the 5.4-R release cycle. There is some improvements to interrupt routing in there. In fact I have try the CURRENT SNAP (2005 february snap) because I can get a call stack. Here is the steps I perform to get to the call stack. 1- I boot with the snapshot miniinst 2- Selecting keymap (french accent) 3- Fixit mode 4- Emergency shell 5- using Alt-F4 to go to the terminal 6- typing: ifconfig bfe0 192.168.1.1 = the shell freeze 7- using Alt-F1 to go back to the 1st terminal where there is a panic message: handwritten typescript cpuid = 0 KDB: enter: panic [thread pid 29 tid 100030 ] Stopped at kdb_enter+0x2b: nop db where -- command entered Tracing pid 29 tid 100030 td 0xc2ff1000 kdb_enter(c0823108) at kdb_enter+0x2b panic(c083ca28,deadc000,c07c9462,0,8000) at panic+0x127 vm_fault(c1459000,deadc000,1,0,c2ff1000) at vm_fault+0x1e1 trap_pfault(e5e61c50,0,deadc0ee) at trap_pfault+0x13b trap(c0830018,10,10,c3105000,c3102400) at trap+0x335 calltrap() at calltrap+0x5 --- trap 0xc, eip = 0xc07a810, esp = 0xe5e61c90, ebp = 0xe5e61c98 --- _bus_dmamap_unload(c3102400,c3104540) at _bus_dmamap_unload+0x16 bfe_rx_ring_free(c3105000,c3105000,c3105000,e5e61cd8,c04dd0a3) at bfe_rx_ring_free+0x50 bfe_stop(c3105000,400,c3105000,e5e61cf4,c04dcae7) at bfe_stop+0x45 bfe_init_locked(c3105000) at bfe_init_locked+0x33 bfe_intr(c3105000) at bfe_intr+0x9f ithread_loop(c2fe9500,e5e61d48,c2fe9500,c0601a54,0) at ithread_loop+0x120 fork_exit(c0601a54,c2fe9500,e5e61d48) at fork_exit+0xa4 fork_trampoline() at fork_trampoline+0x8 --- trap 0x1, eip = 0, esp = 0xe5e61d7c, ebp = 0 --- db I hope there is not a lot of mistakes by copying the trace by hand. Phil. ___ freebsd-stable@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-stable To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: if_bfe/uhci: storm interrupt Fatal trap 12
On Mon, 7 Mar 2005 [EMAIL PROTECTED] wrote:
On 4 Mar, Doug White wrote:
Hm ... dunno. You might try one of the RELENG_5 snapshots that will be
coming out shortly as we get into the 5.4-R release cycle. There is some
improvements to interrupt routing in there.
In fact I have try the CURRENT SNAP (2005 february snap) because I can
get a call stack.
Here is the steps I perform to get to the call stack.
1- I boot with the snapshot miniinst
2- Selecting keymap (french accent)
3- Fixit mode
4- Emergency shell
5- using Alt-F4 to go to the terminal
6- typing: ifconfig bfe0 192.168.1.1 = the shell freeze
7- using Alt-F1 to go back to the 1st terminal where there is a panic
message:
handwritten typescript
cpuid = 0
KDB: enter: panic
[thread pid 29 tid 100030 ]
Stopped at kdb_enter+0x2b: nop
db where -- command entered
Tracing pid 29 tid 100030 td 0xc2ff1000
kdb_enter(c0823108) at kdb_enter+0x2b
panic(c083ca28,deadc000,c07c9462,0,8000) at panic+0x127
vm_fault(c1459000,deadc000,1,0,c2ff1000) at vm_fault+0x1e1
trap_pfault(e5e61c50,0,deadc0ee) at trap_pfault+0x13b
trap(c0830018,10,10,c3105000,c3102400) at trap+0x335
calltrap() at calltrap+0x5
--- trap 0xc, eip = 0xc07a810, esp = 0xe5e61c90, ebp = 0xe5e61c98 ---
_bus_dmamap_unload(c3102400,c3104540) at _bus_dmamap_unload+0x16
bfe_rx_ring_free(c3105000,c3105000,c3105000,e5e61cd8,c04dd0a3) at
bfe_rx_ring_free+0x50
bfe_stop(c3105000,400,c3105000,e5e61cf4,c04dcae7) at bfe_stop+0x45
bfe_init_locked(c3105000) at bfe_init_locked+0x33
bfe_intr(c3105000) at bfe_intr+0x9f
ithread_loop(c2fe9500,e5e61d48,c2fe9500,c0601a54,0) at
ithread_loop+0x120
fork_exit(c0601a54,c2fe9500,e5e61d48) at fork_exit+0xa4
fork_trampoline() at fork_trampoline+0x8
--- trap 0x1, eip = 0, esp = 0xe5e61d7c, ebp = 0 ---
db
Thanks for the detailed message. I didn't realize that we'd enabled DDB in
the snapshot kernel :)
Anyway this looks like a bug in the bfe driver. It appears to be trying
to free a DMA map that is either unallocated or got spammed. You may want
to repost this to freebsd-current@freebsd.org and use a subject like
Use-after-free in bfe since I think the interrupt storm message is
secondary.
A capture of boot -v might also be useful, or at minumum anything the bfe
driver output during boot ('dmesg | grep bfe' might work with the fixit
disc). A crashdump would be nice too, but you'd likely need to find a
different network adapter.
--
Doug White| FreeBSD: The Power to Serve
[EMAIL PROTECTED] | www.FreeBSD.org
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: if_bfe/uhci: storm interrupt Fatal trap 12
On Wed, 2 Mar 2005 [EMAIL PROTECTED] wrote: On 1 Mar, Doug White wrote: On Tue, 1 Mar 2005 [EMAIL PROTECTED] wrote: Hi! I have a brand new Dell Inspiron 9100 laptop with a broadcom integrated NIC. I get a panic with 5.3-SNAP, 5.4-PRE and 6.0-SNAP due to a storm interrupt as soon as I assign an IP address to it (ifconfig or dhclient). The storm interrupt is reported on irq18: bfe0 uhci2. Does booting in Safe Mode from the beastie menu improve things? Booting in safe mode does not improve the behavior. There is still a page fault while in kernel mode but the storm interrupt is now on irq11: cbb0 fwohci+. Let me know if there is more information I can provide you. Sorry, I have no crash dump to give you. Hm ... dunno. You might try one of the RELENG_5 snapshots that will be coming out shortly as we get into the 5.4-R release cycle. There is some improvements to interrupt routing in there. -- Doug White| FreeBSD: The Power to Serve [EMAIL PROTECTED] | www.FreeBSD.org ___ freebsd-stable@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-stable To unsubscribe, send any mail to [EMAIL PROTECTED]
if_bfe/uhci: storm interrupt Fatal trap 12
Hi! I have a brand new Dell Inspiron 9100 laptop with a broadcom integrated NIC. I get a panic with 5.3-SNAP, 5.4-PRE and 6.0-SNAP due to a storm interrupt as soon as I assign an IP address to it (ifconfig or dhclient). The storm interrupt is reported on irq18: bfe0 uhci2. I have manage to use this laptop with NDISulator but I cannot boot LiveCD such as FreesBie. Here are many information I think might be useful, feel free to ask me more. I can manage to provide a remote access to this laptop (with NDISulator, so not sure if usable to debug if_bfe ;) ) #dmesg reports: bfe0: Broadcom BCM4401 Fast Ethernet mem 0xfaffe000-0xfaff irq 18 at device 0.0 on pci2 bfe0: Ethernet address: 00:11:43:65:ab:d1 miibus0: MII bus on bfe0 bmtphy0: BCM4401 10/100baseTX PHY on miibus0 bmtphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto #ifconfig reports: bfe0: flags=8802BROADCAST,SIMPLEX,MULTICAST mtu 1500 options=8VLAN_MTU ether 00:11:43:65:ab:d1 media: Ethernet autoselect (100baseTX full-duplex) status: active #uname -a FreeBSD littleoak 5.4-PRERELEASE FreeBSD 5.4-PRERELEASE #1: Mon Feb 28 16:07:35 UTC 2005 [EMAIL PROTECTED]:/usr/obj/usr/src/sys/LITTLEOAK i386 #vmstat -i interrupt total rate irq1: atkbd01341 2 irq8: rtc 69991127 irq9: acpi02 0 irq13: npx01 0 irq14: ata041321 75 irq15: ata1 58 0 irq16: uhci0 uhci3 998 1 irq19: cbb0 fwohci+1 0 irq0: clk 54681 99 Total 168394307 # irqs useb by uhci uhci0: Intel 82801EB (ICH5) USB controller USB-A port 0xbf80-0xbf9f irq 16 at device 29.0 on pci0 uhci1: Intel 82801EB (ICH5) USB controller USB-B port 0xbf60-0xbf7f irq 19 at device 29.1 on pci0 uhci2: Intel 82801EB (ICH5) USB controller USB-C port 0xbf40-0xbf5f irq 18 at device 29.2 on pci0 uhci3: Intel 82801EB (ICH5) USB controller USB-D port 0xbf20-0xbf3f irq 16 at device 29.3 on pci0 Not sure if it is related with but I have (mostly) random freeze of the system while browsing files with firefox/mozilla or other file browsers: but i'll report them lately. Thanks for your help. Phil. ___ freebsd-stable@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-stable To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: if_bfe/uhci: storm interrupt Fatal trap 12
On Tue, 1 Mar 2005 [EMAIL PROTECTED] wrote: Hi! I have a brand new Dell Inspiron 9100 laptop with a broadcom integrated NIC. I get a panic with 5.3-SNAP, 5.4-PRE and 6.0-SNAP due to a storm interrupt as soon as I assign an IP address to it (ifconfig or dhclient). The storm interrupt is reported on irq18: bfe0 uhci2. Does booting in Safe Mode from the beastie menu improve things? #vmstat -i interrupt total rate irq1: atkbd01341 2 irq8: rtc 69991127 irq9: acpi02 0 irq13: npx01 0 irq14: ata041321 75 irq15: ata1 58 0 irq16: uhci0 uhci3 998 1 irq19: cbb0 fwohci+1 0 irq0: clk 54681 99 Total 168394307 # irqs useb by uhci uhci0: Intel 82801EB (ICH5) USB controller USB-A port 0xbf80-0xbf9f irq 16 at device 29.0 on pci0 uhci1: Intel 82801EB (ICH5) USB controller USB-B port 0xbf60-0xbf7f irq 19 at device 29.1 on pci0 uhci2: Intel 82801EB (ICH5) USB controller USB-C port 0xbf40-0xbf5f irq 18 at device 29.2 on pci0 uhci3: Intel 82801EB (ICH5) USB controller USB-D port 0xbf20-0xbf3f irq 16 at device 29.3 on pci0 Not sure if it is related with but I have (mostly) random freeze of the system while browsing files with firefox/mozilla or other file browsers: but i'll report them lately. Thanks for your help. Phil. ___ freebsd-stable@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-stable To unsubscribe, send any mail to [EMAIL PROTECTED] -- Doug White| FreeBSD: The Power to Serve [EMAIL PROTECTED] | www.FreeBSD.org ___ freebsd-stable@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-stable To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: if_bfe/uhci: storm interrupt Fatal trap 12
On 1 Mar, Doug White wrote: On Tue, 1 Mar 2005 [EMAIL PROTECTED] wrote: Hi! I have a brand new Dell Inspiron 9100 laptop with a broadcom integrated NIC. I get a panic with 5.3-SNAP, 5.4-PRE and 6.0-SNAP due to a storm interrupt as soon as I assign an IP address to it (ifconfig or dhclient). The storm interrupt is reported on irq18: bfe0 uhci2. Does booting in Safe Mode from the beastie menu improve things? Booting in safe mode does not improve the behavior. There is still a page fault while in kernel mode but the storm interrupt is now on irq11: cbb0 fwohci+. Let me know if there is more information I can provide you. Sorry, I have no crash dump to give you. Phil. ___ freebsd-stable@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-stable To unsubscribe, send any mail to [EMAIL PROTECTED]
