From nobody@FreeBSD.org  Mon Feb  4 18:47:01 2008
Return-Path: <nobody@FreeBSD.org>
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id D32DD16A419
	for <freebsd-gnats-submit@FreeBSD.org>; Mon,  4 Feb 2008 18:47:01 +0000 (UTC)
	(envelope-from nobody@FreeBSD.org)
Received: from www.freebsd.org (www.freebsd.org [IPv6:2001:4f8:fff6::21])
	by mx1.freebsd.org (Postfix) with ESMTP id C227D13C4F8
	for <freebsd-gnats-submit@FreeBSD.org>; Mon,  4 Feb 2008 18:47:01 +0000 (UTC)
	(envelope-from nobody@FreeBSD.org)
Received: from www.freebsd.org (localhost [127.0.0.1])
	by www.freebsd.org (8.14.2/8.14.2) with ESMTP id m14Ij2Lm015596
	for <freebsd-gnats-submit@FreeBSD.org>; Mon, 4 Feb 2008 18:45:02 GMT
	(envelope-from nobody@www.freebsd.org)
Received: (from nobody@localhost)
	by www.freebsd.org (8.14.2/8.14.1/Submit) id m14Ij2T7015595;
	Mon, 4 Feb 2008 18:45:02 GMT
	(envelope-from nobody)
Message-Id: <200802041845.m14Ij2T7015595@www.freebsd.org>
Date: Mon, 4 Feb 2008 18:45:02 GMT
From: Oleg Borovkov <oleg@bal.ru>
To: freebsd-gnats-submit@FreeBSD.org
Subject: double fault in freebsd 7.0
X-Send-Pr-Version: www-3.1
X-GNATS-Notify:

>Number:         120264
>Category:       i386
>Synopsis:       double fault in freebsd 7.0
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-net
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Mon Feb 04 18:50:00 UTC 2008
>Closed-Date:    Tue Feb 05 11:02:22 UTC 2008
>Last-Modified:  Tue Feb 05 11:02:22 UTC 2008
>Originator:     Oleg Borovkov
>Release:        7
>Organization:
LAI
>Environment:
vpn9# uname -a
FreeBSD vpn 7.0-BETA4 FreeBSD 7.0-BETA4 #0: Sun Feb  3 23:11:52 MSK 2008     root@vpn.lai:/usr/src/sys/i386/compile/my  i386

>Description:
Comp reboot after panic...

backtrace of kernel's vmcore:

(kgdb) bt
#0  doadump () at pcpu.h:195
#1  0xc0531107 in boot (howto=260) at ../../../kern/kern_shutdown.c:409
#2  0xc05313c9 in panic (fmt=Variable "fmt" is not available.
) at ../../../kern/kern_shutdown.c:563
#3  0xc0760b9b in dblfault_handler () at ../../../i386/i386/trap.c:901
#4  0xc05c64b6 in ether_vlanencap (m=0x0, tag=192)
    at ../../../net/if_ethersubr.c:1273
#5  0xc05c99a6 in vlan_start (ifp=0xc1e48400) at ../../../net/if_vlan.c:853
#6  0xc05bfca9 in if_start (ifp=0xc1e48400) at ../../../net/if.c:2704
#7  0xc05c63db in ether_output_frame (ifp=0xc1e48400, m=0xc1ee2d00)
    at ../../../net/if_ethersubr.c:405
#8  0xc20204f7 in ?? ()
#9  0xc1e48400 in ?? ()
#10 0xc1ee2d00 in ?? ()
#11 0x02570000 in ?? ()
#12 0x98c0ee98 in ?? ()
#13 0x000010e4 in ?? ()
#14 0xda7a0000 in ?? ()
#15 0x00006400 in ?? ()
#16 0xc1d28a50 in ?? ()
#17 0xc1d28a50 in ?? ()
#18 0xc1ee0b00 in ?? ()
#19 0xcbb210f8 in ?? ()
#20 0xc054ca50 in sched_add (td=0xc206a450, flags=4)
---Type <return> to continue, or q <return> to quit---(kgdb) bt
    at ../../../kern/sched_4bsd.c:1150
#21 0xc201f490 in ?? ()
#22 0xc1f7ab54 in ?? ()
#23 0x00000004 in ?? ()
#24 0xcbb211a4 in ?? ()
#25 0xc0746c85 in bus_dmamap_load (dmat=0xc206a450, map=0x0, buf=0xc1faec00,
    buflen=0, callback=0xc1faed00, callback_arg=0xc1e23680, flags=-1042720768)
    at ../../../i386/i386/busdma_machdep.c:765
#26 0xc208775f in ?? ()
#27 0xc206a450 in ?? ()
#28 0x00000000 in ?? ()
#29 0xc1faec00 in ?? ()
#30 0x00000000 in ?? ()
#31 0xc1faed00 in ?? ()
#32 0xc1e23680 in ?? ()
#33 0xc1d95800 in ?? ()
#34 0xcbb211e0 in ?? ()
#35 0x00000000 in ?? ()
#36 0xc1df7800 in ?? ()
#37 0xc08152e0 in bounce_map_callbacklist ()
#38 0xc1ee4834 in ?? ()
#39 0x00000000 in ?? ()
#40 0xc06c3380 in rl_start () at ../../../pci/if_rl.c:1435
---Type <return> to continue, or q <return> to quit---#0  doadump () at pcpu.h:195
#41 0xc20204f7 in ?? ()
#42 0xc21f2d80 in ?? ()
#43 0xc206a450 in ?? ()
#44 0xcbb21224 in ?? ()
#45 0x00000000 in ?? ()
#46 0xc1fb2de8 in ?? ()
#47 0xc05c64ca in ether_vlanencap (m=0xc21e36c0, tag=49658)
    at ../../../net/if_ethersubr.c:1273
#48 0xc201f490 in ?? ()
#49 0xc1faed54 in ?? ()
#50 0x00000004 in ?? ()
#51 0xc206a450 in ?? ()
#52 0xc2204e80 in ?? ()
#53 0xc1faed00 in ?? ()
#54 0x00000000 in ?? ()
#55 0x00000000 in ?? ()
#56 0x00000016 in ?? ()
#57 0xc21dfe00 in ?? ()
#58 0xc206a450 in ?? ()
#59 0xc21e1100 in ?? ()
#60 0xcbb21384 in ?? ()
#61 0xc20204f7 in ?? ()
#62 0xc206a450 in ?? ()
---Type <return> to continue, or q <return> to quit---#1  0xc0531107 in boot (howto=260) at ../../../kern/kern_shutdown.c:409
#63 0x00000000 in ?? ()
#64 0xcbb21394 in ?? ()
#65 0xc2020440 in ?? ()
#66 0xc1f7ab54 in ?? ()
#67 0x00000004 in ?? ()
#68 0xc10523c0 in ?? ()
#69 0xcbb2131c in ?? ()
#70 0xc05c63db in ether_output_frame (ifp=0xc1faed00, m=0x0)
    at ../../../net/if_ethersubr.c:405
Previous frame inner to this frame (corrupt stack?)
(kgdb) #2  0xc05313c9 in panic (fmt=Variable "fmt" is not available.
(kgdb) ) at ../../../kern/kern_shutdown.c:563
Undefined command: "".  Try "help".
(kgdb) #3  0xc0760b9b in dblfault_handler () at ../../../i386/i386/trap.c:901
(kgdb) #4  0xc05c64b6 in ether_vlanencap (m=0x0, tag=192)
(kgdb)     at ../../../net/if_ethersubr.c:1273
Illegal process-id: ../../../net/if_ethersubr.c:1273

(kgdb) #5  0xc05c99a6 in vlan_start (ifp=0xc1e48400) at ../../../net/if_vlan.c:853
(kgdb) #6  0xc05bfca9 in if_start (ifp=0xc1e48400) at ../../../net/if.c:2704
(kgdb) #7  0xc05c63db in ether_output_frame (ifp=0xc1e48400, m=0xc1ee2d00)
(kgdb)     at ../../../net/if_ethersubr.c:405
Illegal process-id: ../../../net/if_ethersubr.c:405
>How-To-Repeat:
approx every hour
>Fix:
don't know :-((

>Release-Note:
>Audit-Trail:
Responsible-Changed-From-To: freebsd-i386->freebsd-net 
Responsible-Changed-By: remko 
Responsible-Changed-When: Tue Feb 5 06:32:56 UTC 2008 
Responsible-Changed-Why:  
From the backtrace this appears to be something in the networking code 
(as far as I am able to interpret) 

http://www.freebsd.org/cgi/query-pr.cgi?pr=120264 

From: Kris Kennaway <kris@FreeBSD.org>
To: bug-followup@FreeBSD.org, oleg@bal.ru
Cc:  
Subject: Re: i386/120264: double fault in freebsd 7.0
Date: Tue, 05 Feb 2008 11:58:26 +0100

 Submitter forgot to give us any useful details about their system 
 configuration, but using my magical telepathy hat I sense that they are 
 using the nve driver, which is known to be broken.  A quick tarot card 
 reading predicts that the nfe driver will avoid the panic.
 
 Kris
State-Changed-From-To: open->closed 
State-Changed-By: kris 
State-Changed-When: Tue Feb 5 11:02:08 UTC 2008 
State-Changed-Why:  
Submitter rejects inbound email 

http://www.freebsd.org/cgi/query-pr.cgi?pr=120264 
>Unformatted:
