Subject: kern/13979: kernel panic, seems to be something to do with tl driver
To: None <gnats-bugs@gnats.netbsd.org>
From: None <dive@endersgame.net>
List: netbsd-bugs
Date: 09/16/2001 18:32:21
>Number:         13979
>Category:       kern
>Synopsis:       kernel panic'ed while in X, playing mp3s. tl driver seems involved.
>Confidential:   no
>Severity:       critical
>Priority:       high
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Sun Sep 16 15:33:00 PDT 2001
>Closed-Date:
>Last-Modified:
>Originator:     
>Release:        20010916
>Organization:
	
>Environment:
	Pentium III Celeron @ 533mhz, 512MB ram, 19GB disk.
	tl0: Compaq Dual Port Netelligent 10/100 TX
	tl1: Compaq Dual Port Netelligent 10/100 TX
System: NetBSD eros.endersgame.net 1.5Y NetBSD 1.5Y (EROS) #144: Sun Sep 16 00:36:02 EDT 2001 dive@eros.endersgame.net:/current/src/sys/arch/i386/compile/EROS i386
Architecture: i386
Machine: i386
>Description:
	I was in X, playing mp3s (with mpg123), and the system kernel
paniced, dumped, and rebooted. From what I can tell from the stack trace
(which follows), it looks like the tl driver is causing it.

#0  0x104 in ?? ()
#1  0xc01a772f in cpu_reboot (howto=260, bootstr=0x0)
    at ../../../../arch/i386/i386/machdep.c:1864
#2  0xc0130489 in panic () at ../../../../kern/subr_prf.c:250
#3  0xc01ac120 in trap (frame={tf_gs = 42729488, tf_fs = 8912912,
      tf_es = 67633168, tf_ds = 524304, tf_edi = -1069357964, tf_esi = 96,
      tf_ebp = -378017204, tf_ebx = 2097151, tf_edx = -378017292, tf_ecx =
0,
      tf_eax = -384091376, tf_trapno = 6, tf_err = 0, tf_eip = -1072359737,
      tf_cs = 8, tf_eflags = 66050, tf_esp = 2097312, tf_ss = 655360,
      tf_vm86_es = 264, tf_vm86_ds = 1081344, tf_vm86_fs = 8,
      tf_vm86_gs = 32896}) at ../../../../arch/i386/i386/trap.c:226
#4  0xc0100b7f in calltrap ()
#5  0xc014f87a in VOP_PUTPAGES (vp=0xe91b3b10, offlo=0, offhi=0, flags=17)
    at ../../../../kern/vnode_if.c:1632
#6  0xc01a24c2 in uvn_put (uobj=0xe91b3b10, off=0, len=0, flags=17)
    at ../../../../uvm/uvm_vnode.c:265
#7  0xc018daa0 in ffs_full_fsync (v=0xe977eb68)
    at ../../../../ufs/ffs/ffs_vnops.c:345
#8  0xc018d856 in ffs_fsync (v=0xe977eb68)
    at ../../../../ufs/ffs/ffs_vnops.c:257
#9  0xc014f11e in VOP_FSYNC (vp=0xe91b3b10, cred=0xc0a92f00, flags=0,
offlo=0,
    offhi=0, p=0xc0240860) at ../../../../kern/vnode_if.c:658
#10 0xc018c25f in ffs_sync (mp=0xc0be3c00, waitfor=2, cred=0xc0a92f00,
    p=0xc0240860) at ../../../../ufs/ffs/ffs_vfsops.c:988
#11 0xc014b07a in sys_sync (p=0xc0240860, v=0x0, retval=0x0)
    at ../../../../kern/vfs_syscalls.c:581
#12 0xc014a070 in vfs_shutdown () at ../../../../kern/vfs_subr.c:2451
#13 0xc01a7707 in cpu_reboot (howto=256, bootstr=0x0)
    at ../../../../arch/i386/i386/machdep.c:1851
#14 0xc0130489 in panic () at ../../../../kern/subr_prf.c:250
#15 0xc01ac120 in trap (frame={tf_gs = 16, tf_fs = -1061486576, tf_es = 16,
      tf_ds = -1072562160, tf_edi = -1071527100, tf_esi = 0,
      tf_ebp = -378016524, tf_ebx = -1071527100, tf_edx = 0, tf_ecx = 0,
      tf_eax = 65554, tf_trapno = 6, tf_err = 0, tf_eip = -1072551477,
      tf_cs = 8, tf_eflags = 66118, tf_esp = 0, tf_ss = -1071526968,
      tf_vm86_es = -1071527100, tf_vm86_ds = 8816, tf_vm86_fs = -400316592,
      tf_vm86_gs = 0}) at ../../../../arch/i386/i386/trap.c:226
#16 0xc0100b7f in calltrap ()
#17 0xc01997b7 in uvm_map (map=0xc021cb40, startp=0xe977ed5c, size=4096,
    uobj=0xc021cac0, uoffset=-1, align=0, flags=5927)
    at ../../../../uvm/uvm_map.h:356
#18 0xc019861b in uvm_km_valloc_align (map=0xc021cb40, size=4096, align=0)
    at ../../../../uvm/uvm_km.c:643
#19 0xc01985dc in uvm_km_valloc (map=0xc021cb40, size=4096)
    at ../../../../uvm/uvm_km.c:621
#20 0xc01a3b66 in _bus_dmamem_map (t=0xc0215f80, segs=0xc0b2de40, nsegs=1,
    size=4096, kvap=0xe977edec, flags=4)
    at ../../../../arch/i386/i386/bus_machdep.c:803
#21 0xc01c106d in tl_init (sc=0xc0b2dc00) at ../../../../dev/pci/if_tl.c:623
#22 0xc01c2730 in tl_ifwatchdog (ifp=0xc0b2dc40)
    at ../../../../dev/pci/if_tl.c:1491
#23 0xc015ad23 in if_slowtimo (arg=0x0) at ../../../../net/if.c:1125
#24 0xc011d951 in softclock (v=0x0) at ../../../../kern/kern_clock.c:989
#25 0xc011d72f in hardclock (frame=0xe977ee74)
    at ../../../../kern/kern_clock.c:902
#26 0xc01cf6b3 in clockintr (arg=0xe977ee74)
    at ../../../../arch/i386/isa/clock.c:409
#27 0xc0100cd4 in Xintr0 ()

dmesg:
NetBSD 1.5Y (EROS) #144: Sun Sep 16 00:36:02 EDT 2001
    dive@eros.endersgame.net:/current/src/sys/arch/i386/compile/EROS
cpu0: Intel Pentium III (Coppermine) Celeron (686-class), 534.58 MHz
cpu0: I-cache 16 KB 32b/line 4-way, D-cache 16 KB 32b/line 2-way
cpu0: L2 cache 128 KB 32b/line 4-way
cpu0: features 383f9ff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR>
cpu0: features 383f9ff<PGE,MCA,CMOV,FGPAT,PSE36,MMX,FXSR,SSE>
total memory = 511 MB
avail memory = 472 MB
using 6574 buffers containing 26296 KB of memory
BIOS32 rev. 0 found at 0xfb300
PCI BIOS rev. 2.1 found at 0xfb330
PCI IRQ Routing Table rev. 1.0 found at 0xfdee0, size 176 bytes (9 entries)
PCI Interrupt Router at 000:07:0 (vendor 0x8086 product 0x7000)
PCI Exclusive IRQs: 7 9 11
mainbus0 (root)
pci0 at mainbus0 bus 0: configuration mode 1
pci0: i/o space, memory space enabled
pchb0 at pci0 dev 0 function 0
pchb0: vendor 0x8086 product 0x7190 (rev. 0x03)
agp0 at pchb0: aperture at 0xd0000000, size 0x4000000
ppb0 at pci0 dev 1 function 0: vendor 0x8086 product 0x7191 (rev. 0x03)
pci1 at ppb0 bus 1
pci1: i/o space, memory space enabled
vga0 at pci1 dev 0 function 0: vendor 0x10de product 0x002c (rev. 0x15)
wsdisplay0 at vga0: console (80x25, vt100 emulation)
pcib0 at pci0 dev 7 function 0
pcib0: vendor 0x8086 product 0x7110 (rev. 0x02)
pciide0 at pci0 dev 7 function 1: Intel 82371AB IDE controller (PIIX4) (rev. 0x01)
pciide0: bus-master DMA support present
pciide0: primary channel wired to compatibility mode
atapibus0 at pciide0 channel 0: 2 targets
cd0 at atapibus0 drive 0: <ASUS CD-S500/A, , V3.4H> type 5 cdrom removable
cd0: 32-bit data port
cd0: drive supports PIO mode 4, DMA mode 2, Ultra-DMA mode 2 (Ultra/33)
cd1 at atapibus0 drive 1: <Pioneer DVD-ROM ATAPIModel DVD-104S 012, , E1.25> type 5 cdrom removable
cd1: 32-bit data port
cd1: drive supports PIO mode 4, DMA mode 2, Ultra-DMA mode 2 (Ultra/33)
pciide0: primary channel interrupting at irq 14
cd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 2 (Ultra/33) (using DMA data transfers)
cd1(pciide0:0:1): using PIO mode 4, Ultra-DMA mode 2 (Ultra/33) (using DMA data transfers)
pciide0: secondary channel wired to compatibility mode
atapibus1 at pciide0 channel 1: 2 targets
cd2 at atapibus1 drive 0: <MATSHITA CD-RW CW-7585, , 1.04> type 5 cdrom removable
cd2: 32-bit data port
cd2: drive supports PIO mode 4, DMA mode 2
pciide0: secondary channel interrupting at irq 15
cd2(pciide0:1:0): using PIO mode 4, DMA mode 2 (using DMA data transfers)
vendor 0x8086 product 0x7112 (USB serial bus, revision 0x01) at pci0 dev 7 function 2 not configured
vendor 0x8086 product 0x7113 (miscellaneous bridge, revision 0x02) at pci0 dev 7 function 3 not configured
ppb1 at pci0 dev 11 function 0: vendor 0x1014 product 0x0022 (rev. 0x01)
pci2 at ppb1 bus 2
pci2: i/o space, memory space enabled
tl0 at pci2 dev 0 function 0
tl0: Compaq Dual Port Netelligent 10/100 TX
tl0: Ethernet address 00:08:c7:a4:a9:40
tl0: interrupting at irq 9
nsphy0 at tl0 phy 1: DP83840 10/100 media interface, rev. 1
nsphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
tlphy0 at tl0 phy 31: ThunderLAN 10BASE-T media interface, rev. 5
tlphy0: 10base5
tl1 at pci2 dev 1 function 0
tl1: Compaq Dual Port Netelligent 10/100 TX
tl1: Ethernet address 00:08:c7:a4:a9:c0
tl1: interrupting at irq 7
nsphy1 at tl1 phy 1: DP83840 10/100 media interface, rev. 1
nsphy1: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
tlphy1 at tl1 phy 31: ThunderLAN 10BASE-T media interface, rev. 5
tlphy1: 10base5
pciide1 at pci0 dev 19 function 0: Triones/Highpoint HPT366 IDE Controller
pciide1: bus-master DMA support present
pciide1: primary channel wired to native-PCI mode
pciide1: using irq 11 for native-PCI interrupt
wd0 at pciide1 channel 0 drive 0: <IBM-DPTA-372050>
wd0: drive supports 16-sector PIO transfers, LBA addressing
wd0: 19574 MB, 16383 cyl, 16 head, 63 sec, 512 bytes/sect x 40088160 sectors
wd0: 32-bit data port
wd0: drive supports PIO mode 4, DMA mode 2, Ultra-DMA mode 4 (Ultra/66)
wd0(pciide1:0:0): using PIO mode 4, Ultra-DMA mode 4 (Ultra/66) (using DMA data transfers)
pciide2 at pci0 dev 19 function 1: Triones/Highpoint HPT366 IDE Controller
pciide2: bus-master DMA support present
pciide2: primary channel wired to native-PCI mode
pciide2: using irq 11 for native-PCI interrupt
isa0 at pcib0
com0 at isa0 port 0x3f8-0x3ff irq 4: ns16550a, working fifo
pckbc0 at isa0 port 0x60-0x64
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
pmsi0 at pckbc0 (aux slot)
pckbc0: using irq 12 for aux slot
wsmouse0 at pmsi0 mux 0
pcppi0 at isa0 port 0x61
sysbeep0 at pcppi0
isapnp0 at isa0 port 0x279: ISA Plug 'n Play device support
npx0 at isa0 port 0xf0-0xff: using exception 16
isapnp0: read port 0x203
isapnp0: No current device for tag, card 1
sb0 at isapnp0 port 0x220/16,0x330/2,0x388/4 irq 5 drq 1,5
sb0: Creative SB AWE64  PnP Audio: dsp v4.16
audio0 at sb0: full duplex, mmap, independent
mpu0 at sb0
midi at mpu0 not configured
opl at sb0 not configured
isapnp0: <Creative SB AWE64  PnP, CTL7002, PNPB02F, Game> port 0x200/8 not configured
isapnp0: <Creative SB AWE64  PnP, CTL0022, , WaveTable> port 0x620/4 not configured
biomask ed4d netmask efcd ttymask ffcf
boot device: wd0
root on wd0a dumps on wd0b
init: copying out path `/sbin/init' 11
XFree86 aperture driver version 2.0
Pentium Pro MTRR support enabled
IP Filter: v3.4.16 initialized.  Default = pass all, Logging = disabled
wsdisplay0: screen 1 added (80x25, vt100 emulation)
wsdisplay0: screen 2 added (80x25, vt100 emulation)
wsdisplay0: screen 3 added (80x25, vt100 emulation)
wsdisplay0: screen 4 added (80x25, vt100 emulation)
wsdisplay0: screen 5 added (80x25, vt100 emulation)
wsdisplay0: screen 6 added (80x25, vt100 emulation)
wsdisplay0: screen 7 added (80x25, vt100 emulation)
wsmux1: connecting to wsdisplay0

config:
machine		i386

ident		"EROS"

maxusers	64

#makeoptions	COPTS="-O3 -pipe -mcpu=pentiumpro -march=pentiumpro"
makeoptions	DEBUG="-g"
options		I686_CPU
options		DUMMY_NOPS
options		UCONSOLE
options		EXEC_ELF32
options		EXEC_AOUT
options		EXEC_SCRIPT
options		RTC_OFFSET=0
options		NTP
options		LKM
options		SYSVMSG
options		SYSVSEM
options		SYSVSHM
options		PCIBIOS
#options		COMPAT_15
options		COMPAT_43
options		SOFTDEP
options		NEW_PIPE
options		COMPAT_LINUX
options		GATEWAY
options		INET
options		DDB
options		PCDISPLAY_SOFTCURSOR
options		WSEMUL_VT100
options		DEBUG
options		WS_KERNEL_FG=WSCOL_GREEN
options		WSDISPLAY_COMPAT_PCVT
options		WSDISPLAY_COMPAT_SYSCONS
options		WSDISPLAY_COMPAT_USL
options		WSDISPLAY_COMPAT_RAWKBD

file-system	FFS
file-system	MFS
file-system	KERNFS
file-system	PROCFS
file-system	CD9660

config		netbsd root on wd0a type ffs

mainbus0	at root
pci0		at mainbus0 bus 0
pchb0		at pci0 dev 0 function 0
agp0		at pchb0
ppb0		at pci0 dev 1 function 0
ppb1		at pci0 dev 11 function 0
pci1		at ppb0 bus 1
pci2		at ppb1 bus 2
pcib0		at pci0 dev 7 function 0
isa0		at pcib0
isapnp0		at isa0
vga0		at pci1 dev 0 function 0
npx0		at isa0 port 0xf0 irq 13
pckbc0		at isa0
pckbd0		at pckbc0
pmsi0		at pckbc0
pcdisplay0	at isa0
wsdisplay0	at vga0 console ?
wskbd0		at pckbd0 console ?
wsmouse0	at pmsi0 mux 0
pcppi0		at isa0 port 0x61
sysbeep0	at pcppi0
com0		at isa0 port 0x3f8 irq 4
pciide0		at pci0 dev 7 function 1 flags 0x0000
pciide1		at pci0 dev 19 function 0 flags 0x0000
pciide2		at pci0 dev 19 function 1 flags 0x0000
atapibus0	at pciide0 channel 0
atapibus1	at pciide0 channel 1
cd0		at atapibus0 drive 0 flags 0x0000
cd1		at atapibus0 drive 1 flags 0x0000
cd2		at atapibus1 drive 0 flags 0x0000
wd0		at pciide1 channel 0 drive 0 flags 0x0000
wd1		at pciide2 channel 0 drive 0 flags 0x0000
tl0		at pci2 dev 0 function 0
tl1		at pci2 dev 1 function 0
nsphy0		at tl0 phy 1
nsphy1		at tl1 phy 1
tlphy0		at tl0 phy 31
tlphy1		at tl1 phy 31
sb0		at isapnp0
audio0		at sb0
mpu0		at sb0

pseudo-device	bpfilter	2
pseudo-device	ipfilter
pseudo-device	loop
pseudo-device	pty
pseudo-device	rnd
pseudo-device	wsmux		2
pseudo-device	vnd		2
pseudo-device	md		2

>How-To-Repeat:
	I'm not really sure as to what exact combination of circumstances is
causing it. It happened while I was in X (4.1.0, built from xsrc) playing
mp3s with mpg123.
>Fix:
	Unknown
>Release-Note:
>Audit-Trail:
>Unformatted: