>Number:         30091
>Category:       kern
>Synopsis:       Xen domU panic
>Confidential:   no
>Severity:       serious
>Priority:       low
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Fri Apr 29 11:28:00 +0000 2005
>Originator:     Martti Kuparinen
>Release:        NetBSD 3.0_BETA
>Organization:
>Environment:
System: NetBSD 3.0_BETA
Architecture: i386
Machine: i386
>Description:

One of my NetBSD 3.0_BETA (XENU) hosts got a panic under Xen. The
kernel was built from today's netbsd-3 sources.


login: kernel: page fault trap, code=0
Stopped at      netbsd:xennet_start+0x37a:      movl    0x26c(%eax,%edx,1),%edx
xennet_start(c0a41038,c04af9c8,c0a41038,2,c03e65bc) at netbsd:xennet_start+0x37a

ether_output(c0a41038,c0ac4100,c09605f0,c094e088,1) at netbsd:ether_output+0x34b

fr_fastroute(c0ac4100,c04afbc8,c04afae0,0,14) at netbsd:fr_fastroute+0x197
fr_send_ip(c04afc20,c0ac4100,c04afbc8,c0ac8f38,fffffff8) at netbsd:fr_send_ip+0x
b6
fr_send_icmp_err(3,c04afc20,1,40002011,4) at netbsd:fr_send_icmp_err+0x441
fr_check(c0ac8f38,14,c0a41038,0,c04afd38) at netbsd:fr_check+0x251
fr_check_wrapper(0,c04afd38,c0a41038,1,c04afda0) at netbsd:fr_check_wrapper+0x72

pfil_run_hooks(c03f38a0,c04afda0,c0a41038,1,c0ac8e00) at netbsd:pfil_run_hooks+0
x6e
ip_input(c0ac4100,c0353a65,c0a41038,c0ac8e00,0) at netbsd:ip_input+0x15b
ipintr(fffffffe,20,5,0,c04afe10) at netbsd:ipintr+0xa9
DDB lost frame for netbsd:Xsoftnet+0x4f, trying 0xc04afdd0
Xsoftnet() at netbsd:Xsoftnet+0x4f
--- interrupt ---
xbd_allxr(c04afe4c,0,3b9a0000,cac2ca00) at 0xc04b5000
Bad frame pointer: 0xc0320980
ds          0x11
es          0x11
fs          0x31
gs          0x11
edi         0xc0a41038
esi         0x2
ebp         0xc04af988  xbd_allxr+0x9c7f4
ebx         0xc095c100
edx         0xc0a41000
ecx         0xc0a41000
eax         0x7050c00
eip         0xc03545a6  xennet_start+0x37a
cs          0x9
eflags      0x10a07
esp         0xc04af960  xbd_allxr+0x9c7cc
ss          0x11
netbsd:xennet_start+0x37a:      movl    0x26c(%eax,%edx,1),%edx
Stopped at      netbsd:xennet_start+0x37a:      movl    0x26c(%eax,%edx,1),%edx
db>

>How-To-Repeat:
>Fix: