Bug #1123

Network crash

Added by t-df almost 10 years ago. Updated over 9 years ago.

Target version:
Start date:
Due date:
% Done:


Estimated time:


I'm running the release version of 2.0 unpatched; not tested on prior
versions. My Dell Inspiron 8000 laptop has 3 nics: dc0 (xircom
cardbus), xl0 (built-in) and aue0 (3com usb nic). I have a dlink
wireless router attached to the 3com usb nic. The laptop is running as
a router to the internet. I can ping the dlink from a pc on the local
network, but when I try to http to its admin interface, DF crashes with
the following error:

panic: assertion: IS_SERIALIZED((ifp->if_serializer)) in if_devstart
Trace beginning at frame 0xca615c34
panic(ca615c58,ca733f44,ca733d10,ca733d10,ca615c70) at panic+0x8c
panic(c054c837,c0583098,c052cf87,c144dd00,ca733f44) at panic+0x8c
if_devstart(ca733d10) at if_devstart+0x34
aue_txeof(c13ade78,ca733f44,0) at aue_txeof+0xa7
usb_transfer_complete(c13ade78,c1307180,ffffffff,100000,c13adee8) at
uhci_idone(c94b0488,c13adf00,c13adecc) at uhci_idone+0x120
uhci_softintr(ca7868c0) at uhci_softintr+0xcd
usb_softschedintr(ca7868c0,0,c06426c8,ff800000,ca615d2c) at
uhci_intr1(ca615d84,c02ada13,ca7868c0,0,48) at uhci_intr1+0x199
uhci_intr(ca7868c0,0) at uhci_intr+0x26
ithread_handler(a,0,0,0,0) at ithread_handler+0xa2
lwkt_exit() at lwkt_exit
Stopped at Debugger+0x34: movb $0,in_Debugger.3949

OpenBSD works on this same hardware. See dmesg below and let me know if
you need anything else.


Copyright (c) 2003-2008 The DragonFly Project.
Copyright (c) 1992-2003 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
The Regents of the University of California. All rights reserved.
DragonFly 2.0.0-RELEASE #3: Mon Aug 4 19:22:16 MST 2008
TSC clock: 698429079 Hz, i8254 clock: 1193112 Hz
CPU: Intel Pentium III (698.47-MHz 686-class CPU)
Origin = "GenuineIntel" Id = 0x686 Stepping = 6

real memory = 335454208 (327592K bytes)
avail memory = 312328192 (305008K bytes)
Preloaded elf kernel "/kernel" at 0xc07cf000.
Preloaded elf module "/modules/acpi.ko" at 0xc07cf1c0.
Pentium Pro MTRR support enabled
md0: Malloc disk
pcibios: BIOS version 2.10
Using $PIR table, 10 entries at 0xc00fbc20
ACPI: RSDP @ 0x0xfde50/0x0014 (v 0 DELL )
ACPI: RSDT @ 0x0xfde64/0x0028 (v 1 DELL CPi R 0x27D40115 ASL
ACPI: FACP @ 0x0xfde90/0x0074 (v 1 DELL CPi R 0x27D40115 ASL
ACPI: DSDT @ 0x0xfffe4000/0x2B4C (v 1 INT430 SYSFexxx 0x00001001 MSFT
ACPI: FACS @ 0x0x13fff800/0x0040
npx0: <math processor> on motherboard
npx0: INT 16 interface
Using MMX optimized bcopy/copyin/copyout
acpi0: <DELL CPi R > on motherboard
Warning: ACPI is disabling APM's device. You can't run both
acpi_timer0: <24-bit timer at 3.579545MHz> port 0x808-0x80b on acpi0
cpu0: <ACPI CPU (2 Cx states)> on acpi0
acpi_tz0: <Thermal Zone> on acpi0
acpi_acad0: <AC Adapter> on acpi0
acpi_cmbat0: <Control Method Battery> on acpi0
acpi_cmbat1: <Control Method Battery> on acpi0
acpi_lid0: <Control Method Lid Switch> on acpi0
acpi_button0: <Power Button> on acpi0
acpi_button1: <Sleep Button> on acpi0
atkbdc0: <Keyboard controller (i8042)> port 0x64,0x60 irq 1 on acpi0
atkbd0: <AT Keyboard> flags 0x1 irq 1 on atkbdc0
kbd0 at atkbd0
psm0: <PS/2 Mouse> irq 12 on atkbdc0
psm0: model Generic PS/2 mouse, device ID 0
fdc0: <NEC 72065B or clone> port 0x3f7,0x3f2-0x3f5 irq 6 drq 2 on acpi0
fdc0: FIFO enabled, 8 bytes threshold
fd0: <1440-KB 3.5" drive> on fdc0 drive 0
sio0 port 0x3f8-0x3ff irq 4 on acpi0
sio0: type 16550A
ppc0 port 0x778-0x77b,0x378-0x37f irq 7 drq 3 on acpi0
ppc0: SMC-like chipset (ECP/EPP/PS2/NIBBLE) in COMPATIBLE mode
ppc0: FIFO with 16/16/8 bytes threshold
ppbus0: <Parallel port bus> on ppc0
plip0: <PLIP network interface> on ppbus0
lpt0: <Printer> on ppbus0
lpt0: Interrupt-driven port
ppi0: <Parallel I/O> on ppbus0
legacypci0 on motherboard
pcib0: <Host to PCI bridge> on legacypci0
pci0: <PCI bus> on pcib0
agp0: <Intel 82815 (i815 GMCH) host to PCI bridge> mem
0xe4000000-0xe7ffffff at device 0.0 on pci0
pcib1: <Intel 82801BA/BAM (ICH2) PCI-PCI (AGP) bridge> at device 1.0 on pci0
pci1: <PCI bus> on pcib1
pci1: <ATI model 4d46 graphics accelerator> at 0.0 irq 11
pcib2: <PCI to PCI bridge (vendor=8086 device=2448)> at device 30.0 on pci0
pci2: <PCI bus> on pcib2
pci2: <unknown card> (vendor=0x125d, dev=0x1998) at 3.0 irq 5
xl0: <3Com 3c556 Fast Etherlink XL> port 0xe800-0xe8ff mem
0xf8ffd800-0xf8ffd87f,0xf8ffdc00-0xf8ffdc7f irq 10 at device 6.0 on pci2
miibus0: <MII bus> on xl0
ukphy0: <Generic IEEE 802.3u media interface> on miibus0
ukphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
xl0: MAC address: 00:01:03:89:85:bf
pci2: <unknown card> (vendor=0x10b7, dev=0x1007) at 6.1 irq 10
cbb0: <TI4451 PCI-CardBus Bridge> at device 15.0 on pci2
cardbus0: <CardBus bus> on cbb0
pccard0: <16-bit PCCard bus> on cbb0
pci_cfgintr: 0:30 INTC routed to irq 10
pcib2: routed slot 15 INTA to irq 10
cbb1: <TI4451 PCI-CardBus Bridge> at device 15.1 on pci2
cardbus1: <CardBus bus> on cbb1
pccard1: <16-bit PCCard bus> on cbb1
pci_cfgintr: 0:30 INTC routed to irq 10
pcib2: routed slot 15 INTA to irq 10
fwohci0: <Texas Instruments PCI4451> mem
0xf8ff8000-0xf8ffbfff,0xf8ffc800-0xf8ffcfff irq 10 at device 15.2 on pci2
fwohci0: OHCI version 1.0 (ROM=1)
fwohci0: No. of Isochronous channel is 4.
fwohci0: EUI64 39:4f:c0:00:1a:82:d4:01
fwohci0: Phy 1394a available S400, 1 ports.
fwohci0: Link S400, max_rec 2048 bytes.
firewire0: <IEEE1394(FireWire) bus> on fwohci0
fwe0: <Ethernet over FireWire> on firewire0
fwe0: MAC address: 3a:4f:c0:82:d4:01
sbp0: <SBP-2/SCSI over FireWire> on firewire0
fwohci0: Initiate bus reset
fwohci0: node_id=0xc000ffc0, gen=1, CYCLEMASTER mode
firewire0: 1 nodes, maxhop <= 0, cable IRM = 0 (me)
firewire0: bus manager 0 (me)
isab0: <PCI to ISA bridge (vendor=8086 device=244c)> at device 31.0 on pci0
isa0: <ISA bus> on isab0
atapci0: <Intel ICH2 UDMA100 controller> port
0xbfa0-0xbfaf,0x376,0x170-0x177,0x3f6,0x1f0-0x1f7 at device 31.1 on pci0
ata0: <ATA channel 0> on atapci0
dc0: <Xircom X3201 10/100BaseTX> port 0xe000-0xe07f mem
0xf4002000-0xf40027ff,0xf4002800-0xf4002fff irq 10 at device 0.0 on cardbus0
miibus1: <MII bus> on dc0
ukphy1: <Generic IEEE 802.3u media interface> on miibus1
ukphy1: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
dc0: MAC address: 00:10:a4:e4:76:5f
ad0: 9590MB <IBM DJSA-210 JS2OAB8A> at ata0-master UDMA66
acd0: CDROM <TEAC CD-ROM CD-224E/3.7C> at ata0-slave UDMA33
ata1: <ATA channel 1> on atapci0
uhci0: <Intel 82801BA/BAM (ICH2) USB controller USB-A> port
0xdce0-0xdcff irq 10 at device 31.2 on pci0
usb0: <Intel 82801BA/BAM (ICH2) USB controller USB-A> on uhci0
usb0: USB revision 1.0
uhub0: <Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1> on usb0
uhub0: 2 ports with 2 removable, self powered
pmtimer0 on isa0
fdc1: cannot reserve I/O port range
vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
sc0: <System console> at flags 0x100 on isa0
sc0: VGA <16 virtual consoles, flags=0x300>
sio2: can't drain, serial port might not exist, disabling
ppc1: cannot reserve I/O port range
intr 10 at 40001/40000 hz, livelocked limit engaged!
aue0: <3Com 3C460B 10/100 Ethernet Adapter, class 255/0, rev 1.10/1.01,
addr 2> on uhub0
miibus2: <MII bus> on aue0
acphy0: <AC_UNKNOWN 10/100 media interface> on miibus2
acphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
aue0: MAC address: 00:04:76:ab:2e:83
intr 10 at 1/20000 hz, livelock removed
Mounting root from ufs:/dev/ad0s1a
cd0 at ata0 bus 0 target 1 lun 0
cd0: <TEAC CD-224E 3.7C> Removable CD-ROM SCSI-0 device
cd0: 33.000MB/s transfers
cd0: Attempt to query device size failed: NOT READY, Medium not present
pflog0: promiscuous mode enabled


#1 Updated by sepherosa almost 10 years ago

Please test following patch:

Best Regards,

#2 Updated by t-df almost 10 years ago

I tried this patch and DF no longer crashes, but if I http in either
direction through the aue0 nic, DF will lock up to the point that the
console no longer responds, nor do any of the network interfaces.


#3 Updated by sepherosa almost 10 years ago

Sorry for being late on this. Please test following patch:

Best Regards,

#4 Updated by t-df almost 10 years ago

Late? You've got to be kidding. I'm amazed at how fast you get these
out. Anyway, sorry to report that this one also locks up the machine.


#5 Updated by sepherosa almost 10 years ago

Please test following patch:

If it still deadlocked your system, I think you should be able to
break into ddb; if possible give me a coredump :). Thanks.

Best Regards,

#6 Updated by t-df almost 10 years ago

No coredump needed; it's working now! Thanks :-)


#7 Updated by sepherosa over 9 years ago


Also available in: Atom PDF