system/4965: crash when attempting to use jumbo frames with em(4)

classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

system/4965: crash when attempting to use jumbo frames with em(4)

Jolan Luff
>Number:         4965
>Category:       system
>Synopsis:       crash when attempting to use jumbo frames with em(4)
>Confidential:   yes
>Severity:       non-critical
>Priority:       low
>Responsible:    bugs
>State:          open
>Quarter:        
>Keywords:      
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Thu Jan 05 02:00:02 GMT 2006
>Closed-Date:
>Last-Modified:
>Originator:    
>Release:        
>Organization:
net
>Environment:
       
        System      : OpenBSD 3.8
        Architecture: OpenBSD.i386
        Machine     : i386
>Description:
enabled jumbo frames via 'ifconfig em0 mtu 9000' on my i386 laptop,
i386 desktop, and amd64 desktop.  tried transferring a large file to
my i386 desktop and it crashed after receiving ~10000 bytes.  then i
tried transferring to the amd64 and it crashed as well.

panic message as captured by ddb.log and dmesg from i386/amd64 follows:

panic: pool_get(mbpl): free list modified: magic=deaf2031; page 0xd69b7000; item addr 0xd69b7000
Starting stack trace...
panic(d05a2760,d1017640,6,d69b7000,d05d5f80) at panic+0x71
panic(d050b020,d050cfe4,deaf2031,d69b7000,d69b7000) at panic+0x71
pool_get(d05d5f80,0,e7fb5ed4,d02534df) at pool_get+0x315
em_get_buf(c8,d0f71800,0,d1010046) at em_get_buf+0x108
em_process_receive_interrupts(d0f71800,fffffffd,0,1,d0f71bb8) at em_process_receive_interrupts+0x2de
em_intr(d0f71800) at em_intr+0xc3
Xrecurse_legacy5() at Xrecurse_legacy5+0xb2
--- interrupt ---
trap:
End of stack trace.
syncing disks... 3 3 done
rebooting...
OpenBSD 3.8-current (GENERIC) #0: Tue Jan  3 11:43:45 CST 2006
    [hidden email]:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: AMD Athlon(tm) XP 1500+ ("AuthenticAMD" 686-class, 256KB L2 cache) 1.34 GHz
cpu0: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR,SSE
cpu0: AMD Powernow: TS
real mem  = 536387584 (523816K)
avail mem = 482504704 (471196K)
using 4278 buffers containing 26923008 bytes (26292K) of memory
mainbus0 (root)
bios0 at mainbus0: AT/286+(00) BIOS, date 07/10/02, BIOS32 rev. 0 @ 0xfdad0
apm0 at bios0: Power Management spec V1.2
apm0: AC on, battery charge unknown
apm0: flags 30102 dobusy 0 doidle 1
pcibios0 at bios0: rev 2.1 @ 0xf0000/0x10000
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xf7f40/208 (11 entries)
pcibios0: PCI Interrupt Router at 000:17:0 ("VIA VT8235 ISA" rev 0x00)
pcibios0: PCI bus #1 is the last bus
bios0: ROM list: 0xc0000/0x8000 0xc8000/0x1000
cpu0 at mainbus0
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 "VIA VT8366 PCI" rev 0x00
ppb0 at pci0 dev 1 function 0 "VIA VT8366 AGP" rev 0x00
pci1 at ppb0 bus 1
emu0 at pci0 dev 5 function 0 "Creative Labs SoundBlaster Live" rev 0x07: irq 10
ac97: codec id 0x83847609 (SigmaTel STAC9721/23)
ac97: codec features 18 bit DAC, 18 bit ADC, SigmaTel 3D
audio0 at emu0
"Creative Labs PCI Gameport Joystick" rev 0x07 at pci0 dev 5 function 1 not configured
em0 at pci0 dev 6 function 0 "Intel PRO/1000MT (82540EM)" rev 0x02: irq 5, address 00:07:e9:0f:53:17
uhci0 at pci0 dev 7 function 0 "VIA VT83C572 USB" rev 0x61: irq 7
usb0 at uhci0: USB revision 1.0
uhub0 at usb0
uhub0: VIA UHCI root hub, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
uhci1 at pci0 dev 7 function 1 "VIA VT83C572 USB" rev 0x61: irq 11
usb1 at uhci1: USB revision 1.0
uhub1 at usb1
uhub1: VIA UHCI root hub, rev 1.00/1.00, addr 1
uhub1: 2 ports with 2 removable, self powered
ehci0 at pci0 dev 7 function 2 "VIA VT6202 USB" rev 0x63: irq 10
usb2 at ehci0: USB revision 2.0
uhub2 at usb2
uhub2: VIA EHCI root hub, rev 2.00/1.00, addr 1
uhub2: 4 ports with 4 removable, self powered
vga1 at pci0 dev 8 function 0 "Matrox MGA Millennium II 2164W" rev 0x00
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
ral0 at pci0 dev 10 function 0 "Ralink RT2560" rev 0x01: irq 5, address 00:09:f3:71:e7:7e
ral0: MAC/BBP RT2560 (rev 0x04), RF RT2525
viapm0 at pci0 dev 17 function 0 "VIA VT8233A ISA" rev 0x00
iic0 at viapm0
iic0: addr 0x2f 00=00 02=0f 03=00 04=00 06=0f 07=00 08=00 0a=06 0b=00 0c=00 0d=07 0e=84 0f=80 10=c0 11=11 12=00 13=60
pciide0 at pci0 dev 17 function 1 "VIA VT82C571 IDE" rev 0x06: ATA133, channel 0 configured to compatibility, channel 1 configured to compatibility
wd0 at pciide0 channel 0 drive 0: <Maxtor 5T030H3>
wd0: 16-sector PIO, LBA, 29311MB, 60030432 sectors
wd1 at pciide0 channel 0 drive 1: <Maxtor 6L250R0>
wd1: 16-sector PIO, LBA48, 239372MB, 490234752 sectors
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 5
wd1(pciide0:0:1): using PIO mode 4, Ultra-DMA mode 6
atapiscsi0 at pciide0 channel 1 drive 0
scsibus0 at atapiscsi0: 2 targets
cd0 at scsibus0 targ 0 lun 0: <HITACHI, DVD-ROM GD-5000, 0213> SCSI0 5/cdrom removable
atapiscsi1 at pciide0 channel 1 drive 1
scsibus1 at atapiscsi1: 2 targets
cd1 at scsibus1 targ 0 lun 0: <PLEXTOR, CD-R PX-W8432T, 1.09> SCSI0 5/cdrom removable
cd0(pciide0:1:0): using PIO mode 4, DMA mode 2
cd1(pciide0:1:1): using PIO mode 4, DMA mode 2
uhci2 at pci0 dev 17 function 2 "VIA VT83C572 USB" rev 0x23: irq 11
usb3 at uhci2: USB revision 1.0
uhub3 at usb3
uhub3: VIA UHCI root hub, rev 1.00/1.00, addr 1
uhub3: 2 ports with 2 removable, self powered
uhci3 at pci0 dev 17 function 3 "VIA VT83C572 USB" rev 0x23: irq 11
usb4 at uhci3: USB revision 1.0
uhub4 at usb4
uhub4: VIA UHCI root hub, rev 1.00/1.00, addr 1
uhub4: 2 ports with 2 removable, self powered
isa0 at mainbus0
isadma0 at isa0
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
pcppi0 at isa0 port 0x61
midi0 at pcppi0: <PC speaker>
spkr0 at pcppi0
sysbeep0 at pcppi0
lm0 at isa0 port 0x290/8: W83697HF
npx0 at isa0 port 0xf0/16: using exception 16
pccom0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
pccom1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo
fdc0 at isa0 port 0x3f0/6 irq 6 drq 2
biomask ffc5 netmask ffe5 ttymask ffe7
pctr: user-level cycle counter enabled
mtrr: Pentium Pro MTRR support
dkcsum: wd0 matches BIOS drive 0x80
dkcsum: wd1 matches BIOS drive 0x81
root on wd0a
rootdev=0x0 rrootdev=0x300 rawdev=0x302
WARNING: / was not properly unmounted

amd64:

panic: pool_get(mclpl): free list modified: magic=deaf0000; page 0xfffffe800d110000; item addr 0xfffffe800d110000
Starting stack trace...
panic() at panic+0x136
pool_get() at pool_get+0x3a4
em_get_buf() at em_get_buf+0x181
em_process_receive_interrupts() at em_process_receive_interrupts+0x304
em_intr() at em_intr+0xce
Xintr_ioapic_level11() at Xintr_ioapic_level11+0xf0
--- interrupt ---
end of kernel
end trace frame: 0x2b0000000000000, count: 251
0:
End of stack trace.
syncing disks... 4 4
OpenBSD 3.8-current (GENERIC.MP) #13: Tue Jan  3 11:52:33 CST 2006
    [hidden email]:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 1072164864 (1047036K)
avail mem = 907632640 (886360K)
using 22937 buffers containing 107425792 bytes (104908K) of memory
mainbus0 (root)
mainbus0: Intel MP Specification (Version 1.4) (OEM00000 PROD00000000)
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: AMD Opteron(tm) Processor 248, 2205.31 MHz
cpu0: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,NXE,MMXX,LONG,3DNOW2,3DNOW
cpu0: 64KB 64b/line 2-way I-cache, 64KB 64b/line 2-way D-cache, 1MB 64b/line 16-way L2 cache
cpu0: ITLB 32 4KB entries fully associative, 8 4MB entries fully associative
cpu0: DTLB 32 4KB entries fully associative, 8 4MB entries fully associative
cpu0: apic clock running at 200MHz
cpu1 at mainbus0: apid 1 (application processor)
cpu1: AMD Opteron(tm) Processor 248, 2205.00 MHz
cpu1: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,NXE,MMXX,LONG,3DNOW2,3DNOW
cpu1: 64KB 64b/line 2-way I-cache, 64KB 64b/line 2-way D-cache, 1MB 64b/line 16-way L2 cache
cpu1: ITLB 32 4KB entries fully associative, 8 4MB entries fully associative
cpu1: DTLB 32 4KB entries fully associative, 8 4MB entries fully associative
mpbios: bus 0 is type PCI  
mpbios: bus 1 is type PCI  
mpbios: bus 2 is type ISA  
ioapic0 at mainbus0 apid 2: pa 0xffff800001b9ee24, version 3, 24 pins
ioapic0: misconfigured as apic 0
ioapic0: remapped to apic 2
pci0 at mainbus0 bus 0: configuration mode 1
pchb0 at pci0 dev 0 function 0 "VIA K8HTB Host" rev 0x01
ppb0 at pci0 dev 1 function 0 "VIA K8HTB AGP" rev 0x00
pci1 at ppb0 bus 1
vga1 at pci1 dev 0 function 0 "Nvidia GeForce2 MX" rev 0xb2
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
emu0 at pci0 dev 5 function 0 "Creative Labs SoundBlaster Live" rev 0x04: apic 2 int 16 (irq 10)
ac97: codec id 0x54524103 (TriTech Microelectronics TR28023)
audio0 at emu0
"Creative Labs PCI Gameport Joystick" rev 0x01 at pci0 dev 5 function 1 not configured
em0 at pci0 dev 8 function 0 "Intel PRO/1000MT (82540EM)" rev 0x02: apic 2 int 19 (irq 11), address 00:07:e9:0f:52:fe
bge0 at pci0 dev 11 function 0 "Broadcom BCM5705" rev 0x03, BCM5705 A3 (0x3003): apic 2 int 16 (irq 10), address 00:11:09:47:9c:2a
brgphy0 at bge0 phy 1: BCM5705 10/100/1000baseT PHY, rev. 2
pciide0 at pci0 dev 15 function 0 "VIA VT82C571 IDE" rev 0x06: DMA, channel 0 configured to compatibility, channel 1 configured to compatibility
wd0 at pciide0 channel 0 drive 0: <Maxtor 6E040L0>
wd0: 16-sector PIO, LBA, 39205MB, 80293248 sectors
wd1 at pciide0 channel 0 drive 1: <Maxtor 6L250R0>
wd1: 16-sector PIO, LBA48, 239372MB, 490234752 sectors
wd0(pciide0:0:0): using PIO mode 4, DMA mode 2
wd1(pciide0:0:1): using PIO mode 4, DMA mode 2
atapiscsi0 at pciide0 channel 1 drive 0
scsibus0 at atapiscsi0: 2 targets
cd0 at scsibus0 targ 0 lun 0: <LITE-ON, DVDRW SOHW-1693S, KS04> SCSI0 5/cdrom removable
cd0(pciide0:1:0): using PIO mode 4, DMA mode 2
uhci0 at pci0 dev 16 function 0 "VIA VT83C572 USB" rev 0x81: apic 2 int 21 (irq 10)
usb0 at uhci0: USB revision 1.0
uhub0 at usb0
uhub0: VIA UHCI root hub, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
uhci1 at pci0 dev 16 function 1 "VIA VT83C572 USB" rev 0x81: apic 2 int 21 (irq 10)
usb1 at uhci1: USB revision 1.0
uhub1 at usb1
uhub1: VIA UHCI root hub, rev 1.00/1.00, addr 1
uhub1: 2 ports with 2 removable, self powered
uhci2 at pci0 dev 16 function 2 "VIA VT83C572 USB" rev 0x81: apic 2 int 21 (irq 7)
usb2 at uhci2: USB revision 1.0
uhub2 at usb2
uhub2: VIA UHCI root hub, rev 1.00/1.00, addr 1
uhub2: 2 ports with 2 removable, self powered
viapm0 at pci0 dev 17 function 0 "VIA VT8237 ISA" rev 0x00
iic0 at viapm0
iic0: addr 0x2f 00=00 01=0f 02=00 03=01 04=07 05=00 14=14 15=62 16=02 17=00
pchb1 at pci0 dev 24 function 0 "AMD AMD64 HyperTransport" rev 0x00
pchb2 at pci0 dev 24 function 1 "AMD AMD64 Address Map" rev 0x00
pchb3 at pci0 dev 24 function 2 "AMD AMD64 DRAM Cfg" rev 0x00
pchb4 at pci0 dev 24 function 3 "AMD AMD64 Misc Cfg" rev 0x00
pchb5 at pci0 dev 25 function 0 "AMD AMD64 HyperTransport" rev 0x00
pchb6 at pci0 dev 25 function 1 "AMD AMD64 Address Map" rev 0x00
pchb7 at pci0 dev 25 function 2 "AMD AMD64 DRAM Cfg" rev 0x00
pchb8 at pci0 dev 25 function 3 "AMD AMD64 Misc Cfg" rev 0x00
isa0 at mainbus0
isadma0 at isa0
com0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
com1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
pcppi0 at isa0 port 0x61
midi0 at pcppi0: <PC speaker>
spkr0 at pcppi0
sysbeep0 at pcppi0
lm0 at isa0 port 0x290/8: W83627THF
uhub3 at uhub2 port 2
uhub3: Mitsumi Electric Hub in Apple Extended USB Keyboard, rev 1.10/4.00, addr 2
uhub3: 3 ports with 2 removable, bus powered
uhidev0 at uhub3 port 1 configuration 1 interface 0
uhidev0: Microsoft Microsoft 3-Button Mouse with IntelliEye?, rev 2.00/0.00, addr 3, iclass 3/1
ums0 at uhidev0: 3 buttons and Z dir.
wsmouse0 at ums0 mux 0
uhidev1 at uhub3 port 3 configuration 1 interface 0
uhidev1: Mitsumi Electric Apple Extended USB Keyboard, rev 1.10/4.00, addr 4, iclass 3/1
ukbd0 at uhidev1: 8 modifier keys, 6 key codes
wskbd1 at ukbd0 mux 1
wskbd1: connecting to wsdisplay0
uhidev2 at uhub3 port 3 configuration 1 interface 1
uhidev2: Mitsumi Electric Apple Extended USB Keyboard, rev 1.10/4.00, addr 4, iclass 3/0
uhidev2: 3 report ids
uhid0 at uhidev2 reportid 2: input=1, output=0, feature=0
uhid1 at uhidev2 reportid 3: input=3, output=0, feature=0
dkcsum: wd0 matches BIOS drive 0x80
dkcsum: wd1 matches BIOS drive 0x81
root on wd0a
rootdev=0x0 rrootdev=0x300 rawdev=0x302
WARNING: / was not properly unmounted

>How-To-Repeat:
doesn't seem to be 100% reproducible, sometimes the transfer just stalls,
but typically for me it just crashes.
>Fix:
unknown.


>Release-Note:
>Audit-Trail:
>Unformatted: