>Number:         13924
>Category:       kern
>Synopsis:       kernel panic, seems related to tl driver
>Confidential:   no
>Severity:       critical
>Priority:       high
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Mon Sep 10 21:55:00 PDT 2001
>Closed-Date:
>Last-Modified:
>Originator:     
>Release:        20010910
>Organization:
	
>Environment:
	Pentium III Celeron 533mhz, 512MB ram, 19GB(approx) ATA66 disk.
	Compaq Dual Port Netelligent 10/100 TX Ethernet
System: NetBSD eros.endersgame.net 1.5X NetBSD 1.5X (EROS) #140: Mon Sep 10 23:54:13 EDT 2001 dive@eros.endersgame.net:/current/src/sys/arch/i386/compile/EROS i386
Architecture: i386
Machine: i386
>Description:
	I was in X, playing mp3s with mpg123, when the kernel paniced. I am
not knowledgable at all in low-level kernel stuff, but it seems to me to be
related to the tl driver from the traceback info i got. Here's my gdb
output:
<dive@eros(/var/crash){2}> # gdb /netbsd
GNU gdb 4.17
Copyright 1998 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386--netbsd"...(no debugging symbols found)...
(gdb) symbol-file /netbsd.gdb
Reading symbols from /netbsd.gdb...done.
(gdb) target kcore netbsd.3.core
panic: trap
#0  0xc02277bb in i386_soft_intr_to_ssir ()
(gdb) bt
#0  0xc02277bb in i386_soft_intr_to_ssir ()
#1  0xb024000 in ?? ()
#2  0xc01bec43 in cpu_reboot (howto=256, bootstr=0x0)
    at ../../../../arch/i386/i386/machdep.c:1864
#3  0xc0139149 in panic () at ../../../../kern/subr_prf.c:250
#4  0xc01c2b62 in trap (frame={tf_gs = 16, tf_fs = -1061224432,
      tf_es = -384499696, tf_ds = -1072234480, tf_edi = -1071379840,
      tf_esi = 0, tf_ebp = -384435212, tf_ebx = -1071379836, tf_edx = 0,
      tf_ecx = 0, tf_eax = 65554, tf_trapno = 6, tf_err = 0,
      tf_eip = -1072519933, tf_cs = 8, tf_eflags = 66118,
      tf_esp = -1071379704, tf_ss = -1071379836, tf_vm86_es = -1071379840,
      tf_vm86_ds = -1071950814, tf_vm86_fs = -1073680436, tf_vm86_gs = 0})
    at ../../../../arch/i386/i386/trap.c:226
#5  0xc0100b7f in calltrap ()
#6  0xc01ad2bd in uvm_map (map=0xc0240a80, startp=0xe915fc60, size=4096,
    uobj=0xc0240a00, uoffset=-1, align=0, flags=5927)
    at ../../../../uvm/uvm_map.h:356
#7  0xc01ac075 in uvm_km_valloc_align (map=0xc0240a80, size=4096, align=0)
    at ../../../../uvm/uvm_km.c:752
#8  0xc01ac032 in uvm_km_valloc (map=0xc0240a80, size=4096)
    at ../../../../uvm/uvm_km.c:730
#9  0xc01b95ba in _bus_dmamem_map (t=0xc023a940, segs=0xc0b84e40, nsegs=1,
    size=4096, kvap=0xe915fcfc, flags=4)
    at ../../../../arch/i386/i386/bus_machdep.c:803
---Type <return> to continue, or q <return> to quit---
#10 0xc01dbffe in tl_init (sc=0xc0b84c00) at ../../../../dev/pci/if_tl.c:623
#11 0xc01ddf70 in tl_ifwatchdog (ifp=0xc0b84c40)
    at ../../../../dev/pci/if_tl.c:1491
#12 0xc0167fc7 in if_slowtimo (arg=0x0) at ../../../../net/if.c:1125
#13 0xc0124eaa in softclock (v=0x0) at ../../../../kern/kern_clock.c:973
#14 0xc0124cd8 in hardclock (frame=0xe915fd80)
    at ../../../../kern/kern_clock.c:897
#15 0xc01edb64 in clockintr (arg=0xe915fd80)
    at ../../../../arch/i386/isa/clock.c:409
#16 0xc0100cd4 in Xintr0 ()
(gdb)

here's the dmesg of the machine:

NetBSD 1.5X (EROS) #140: Mon Sep 10 23:54:13 EDT 2001
    dive@eros.endersgame.net:/current/src/sys/arch/i386/compile/EROS
cpu0: Intel Pentium III (Coppermine) Celeron (686-class), 534.58 MHz
cpu0: I-cache 16 KB 32b/line 4-way, D-cache 16 KB 32b/line 2-way
cpu0: L2 cache 128 KB 32b/line 4-way
cpu0: features 383f9ff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR>
cpu0: features 383f9ff<PGE,MCA,CMOV,FGPAT,PSE36,MMX,FXSR,SSE>
total memory = 511 MB
avail memory = 472 MB
using 6574 buffers containing 26296 KB of memory
BIOS32 rev. 0 found at 0xfb300
PCI BIOS rev. 2.1 found at 0xfb330
PCI IRQ Routing Table rev. 1.0 found at 0xfdee0, size 176 bytes (9 entries)
PCI Interrupt Router at 000:07:0 (vendor 0x8086 product 0x7000)
PCI Exclusive IRQs: 7 9 11
mainbus0 (root)
pci0 at mainbus0 bus 0: configuration mode 1
pci0: i/o space, memory space enabled
pchb0 at pci0 dev 0 function 0
pchb0: vendor 0x8086 product 0x7190 (rev. 0x03)
agp0 at pchb0: aperture at 0xd0000000, size 0x4000000
ppb0 at pci0 dev 1 function 0: vendor 0x8086 product 0x7191 (rev. 0x03)
pci1 at ppb0 bus 1
pci1: i/o space, memory space enabled
vga0 at pci1 dev 0 function 0: vendor 0x10de product 0x002c (rev. 0x15)
wsdisplay0 at vga0: console (80x25, vt100 emulation)
pcib0 at pci0 dev 7 function 0
pcib0: vendor 0x8086 product 0x7110 (rev. 0x02)
pciide0 at pci0 dev 7 function 1: Intel 82371AB IDE controller (PIIX4) (rev. 0x01)
pciide0: bus-master DMA support present
pciide0: primary channel wired to compatibility mode
atapibus0 at pciide0 channel 0: 2 targets
cd0 at atapibus0 drive 0: <ASUS CD-S500/A, , V3.4H> type 5 cdrom removable
cd0: 32-bit data port
cd0: drive supports PIO mode 4, DMA mode 2, Ultra-DMA mode 2 (Ultra/33)
cd1 at atapibus0 drive 1: <Pioneer DVD-ROM ATAPIModel DVD-104S 012, , E1.25> type 5 cdrom removable
cd1: 32-bit data port
cd1: drive supports PIO mode 4, DMA mode 2, Ultra-DMA mode 2 (Ultra/33)
pciide0: primary channel interrupting at irq 14
cd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 2 (Ultra/33) (using DMA data transfers)
cd1(pciide0:0:1): using PIO mode 4, Ultra-DMA mode 2 (Ultra/33) (using DMA data transfers)
pciide0: secondary channel wired to compatibility mode
atapibus1 at pciide0 channel 1: 2 targets
cd2 at atapibus1 drive 0: <MATSHITA CD-RW CW-7585, , 1.04> type 5 cdrom removable
cd2: 32-bit data port
cd2: drive supports PIO mode 4, DMA mode 2
pciide0: secondary channel interrupting at irq 15
cd2(pciide0:1:0): using PIO mode 4, DMA mode 2 (using DMA data transfers)
vendor 0x8086 product 0x7112 (USB serial bus, revision 0x01) at pci0 dev 7 function 2 not configured
vendor 0x8086 product 0x7113 (miscellaneous bridge, revision 0x02) at pci0 dev 7 function 3 not configured
ppb1 at pci0 dev 11 function 0: vendor 0x1014 product 0x0022 (rev. 0x01)
pci2 at ppb1 bus 2
pci2: i/o space, memory space enabled
tl0 at pci2 dev 0 function 0
tl0: Compaq Dual Port Netelligent 10/100 TX
tl0: Ethernet address 00:08:c7:a4:a9:40
tl0: interrupting at irq 9
nsphy0 at tl0 phy 1: DP83840 10/100 media interface, rev. 1
nsphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
tlphy0 at tl0 phy 31: ThunderLAN 10BASE-T media interface, rev. 5
tlphy0: 10base5
tl1 at pci2 dev 1 function 0
tl1: Compaq Dual Port Netelligent 10/100 TX
tl1: Ethernet address 00:08:c7:a4:a9:c0
tl1: interrupting at irq 7
nsphy1 at tl1 phy 1: DP83840 10/100 media interface, rev. 1
nsphy1: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
tlphy1 at tl1 phy 31: ThunderLAN 10BASE-T media interface, rev. 5
tlphy1: 10base5
pciide1 at pci0 dev 19 function 0: Triones/Highpoint HPT366 IDE Controller
pciide1: bus-master DMA support present
pciide1: primary channel wired to native-PCI mode
pciide1: using irq 11 for native-PCI interrupt
wd0 at pciide1 channel 0 drive 0: <IBM-DPTA-372050>
wd0: drive supports 16-sector PIO transfers, LBA addressing
wd0: 19574 MB, 16383 cyl, 16 head, 63 sec, 512 bytes/sect x 40088160 sectors
wd0: 32-bit data port
wd0: drive supports PIO mode 4, DMA mode 2, Ultra-DMA mode 4 (Ultra/66)
wd0(pciide1:0:0): using PIO mode 4, Ultra-DMA mode 4 (Ultra/66) (using DMA data transfers)
pciide2 at pci0 dev 19 function 1: Triones/Highpoint HPT366 IDE Controller
pciide2: bus-master DMA support present
pciide2: primary channel wired to native-PCI mode
pciide2: using irq 11 for native-PCI interrupt
isa0 at pcib0
com0 at isa0 port 0x3f8-0x3ff irq 4: ns16550a, working fifo
pckbc0 at isa0 port 0x60-0x64
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
pmsi0 at pckbc0 (aux slot)
pckbc0: using irq 12 for aux slot
wsmouse0 at pmsi0 mux 0
pcppi0 at isa0 port 0x61
midi2 at pcppi0: PC speaker
sysbeep0 at pcppi0
isapnp0 at isa0 port 0x279: ISA Plug 'n Play device support
npx0 at isa0 port 0xf0-0xff: using exception 16
isapnp0: read port 0x203
isapnp0: No current device for tag, card 1
sb0 at isapnp0 port 0x220/16,0x330/2,0x388/4 irq 5 drq 1,5
sb0: Creative SB AWE64  PnP Audio: dsp v4.16
audio0 at sb0: full duplex, mmap, independent
mpu0 at sb0
midi0 at mpu0: SB MPU-401 MIDI UART
opl0 at sb0: model OPL3
midi1 at opl0: SB Yamaha OPL3
isapnp0: <Creative SB AWE64  PnP, CTL7002, PNPB02F, Game> port 0x200/8 not configured
isapnp0: <Creative SB AWE64  PnP, CTL0022, , WaveTable> port 0x620/4 not configured
biomask ed4d netmask efcd ttymask ffcf
boot device: wd0
root on wd0a dumps on wd0b
init: copying out path `/sbin/init' 11
XFree86 aperture driver version 2.0
Pentium Pro MTRR support enabled
IP Filter: v3.4.16 initialized.  Default = pass all, Logging = disabled
wsdisplay0: screen 1 added (80x25, vt100 emulation)
wsdisplay0: screen 2 added (80x25, vt100 emulation)
wsdisplay0: screen 3 added (80x25, vt100 emulation)
wsdisplay0: screen 4 added (80x25, vt100 emulation)
wsdisplay0: screen 5 added (80x25, vt100 emulation)
wsdisplay0: screen 6 added (80x25, vt100 emulation)
wsdisplay0: screen 7 added (80x25, vt100 emulation)
wsmux1: connecting to wsdisplay0
arp info overwritten for 66.61.48.1 by 00:d0:63:2e:64:70
arp info overwritten for 66.61.48.1 by 00:d0:63:2e:64:54

And heres my kernel config file:

machine		i386

ident		"EROS"

maxusers	64

makeoptions	COPTS="-O3 -pipe -mcpu=pentiumpro -march=pentiumpro"
makeoptions	DEBUG="-g"
options		I686_CPU
options		DUMMY_NOPS
options		UCONSOLE
options		EXEC_ELF32
options		EXEC_AOUT
options		EXEC_SCRIPT
options		RTC_OFFSET=0
options		NTP
options		LKM
options		SYSVMSG
options		SYSVSEM
options		SYSVSHM
options		PCIBIOS
options		COMPAT_15
options		COMPAT_43
options		SOFTDEP
options		NEW_PIPE
options		COMPAT_LINUX
options		GATEWAY
options		INET
options		DDB
options		PCDISPLAY_SOFTCURSOR
options		WSEMUL_VT100
options		DEBUG
options		WS_KERNEL_FG=WSCOL_GREEN
options		WSDISPLAY_COMPAT_PCVT
options		WSDISPLAY_COMPAT_SYSCONS
options		WSDISPLAY_COMPAT_USL
options		WSDISPLAY_COMPAT_RAWKBD

file-system	FFS
file-system	MFS
file-system	KERNFS
file-system	PROCFS
file-system	CD9660

config		netbsd root on wd0a type ffs

mainbus0	at root
pci0		at mainbus0 bus 0
pchb0		at pci0 dev 0 function 0
agp0		at pchb0
ppb0		at pci0 dev 1 function 0
ppb1		at pci0 dev 11 function 0
pci1		at ppb0 bus 1
pci2		at ppb1 bus 2
pcib0		at pci0 dev 7 function 0
isa0		at pcib0
isapnp0		at isa0
vga0		at pci1 dev 0 function 0
npx0		at isa0 port 0xf0 irq 13
pckbc0		at isa0
pckbd0		at pckbc0
pmsi0		at pckbc0
pcdisplay0	at isa0
wsdisplay0	at vga0 console ?
wskbd0		at pckbd0 console ?
wsmouse0	at pmsi0 mux 0
pcppi0		at isa0 port 0x61
sysbeep0	at pcppi0
com0		at isa0 port 0x3f8 irq 4
pciide0		at pci0 dev 7 function 1 flags 0x0000
pciide1		at pci0 dev 19 function 0 flags 0x0000
pciide2		at pci0 dev 19 function 1 flags 0x0000
atapibus0	at pciide0 channel 0
atapibus1	at pciide0 channel 1
cd0		at atapibus0 drive 0 flags 0x0000
cd1		at atapibus0 drive 1 flags 0x0000
cd2		at atapibus1 drive 0 flags 0x0000
wd0		at pciide1 channel 0 drive 0 flags 0x0000
wd1		at pciide2 channel 0 drive 0 flags 0x0000
tl0		at pci2 dev 0 function 0
tl1		at pci2 dev 1 function 0
nsphy0		at tl0 phy 1
nsphy1		at tl1 phy 1
tlphy0		at tl0 phy 31
tlphy1		at tl1 phy 31
sb0		at isapnp0
audio0		at sb0
mpu0		at sb0
opl0		at sb0
midi0		at mpu0
midi1		at opl0
midi2		at pcppi0

pseudo-device	bpfilter	2
pseudo-device	ipfilter
pseudo-device	loop
pseudo-device	pty
pseudo-device	rnd
pseudo-device	wsmux		2
pseudo-device	vnd		2
pseudo-device	md		2

>How-To-Repeat:
	play mp3s in X while network traffic is going on? not sure. It
seemed pretty random to me, but this happened twice before on a previous
kernel (two days ago, IIRC) and stopped after i rebuilt the kernel. I've no
clue what exactly is causing it.

>Fix:
	
>Release-Note:
>Audit-Trail:
>Unformatted: