kern/50372: nouveau panic with GeForce 210 on amd64

[okuyama%flex.phys.tohoku.ac.jp@localhost]

>Number:         50372
>Category:       kern
>Synopsis:       nouveau panic with GeForce 210 on amd64
>Confidential:   no
>Severity:       critical
>Priority:       medium
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Tue Oct 27 06:20:00 +0000 2015
>Originator:     Rin Okuyama
>Release:        7.99.21
>Organization:
Department of Physics, Tohoku University
>Environment:
NetBSD XXX 7.99.21 NetBSD 7.99.21 (NOUVEAU) #2: Tue Oct 27 13:50:33 JST 2015  root@XXX:XXX amd64
>Description:
Panic occurs during attachment of nouveau with GeForce 210 on amd64.
As this machine does not have physical COM ports, information below
can be not enough for you, and there are possibly some typos.

* kernel configuration file

========
include "arch/amd64/conf/GENERIC"

nouveau*	at pci? dev ? function ?
nouveaufb*	at nouveaufbbus?
========

* last few lines of kernel messages

========
drm kern debug: nouveau D[  BARCTL][nouveau0][0x00000000][0xfffffe811d398d48] created
drm kern debug: nouveau T[ INSTMEM][nouveau0][0x04000000][0xfffffe841df41290] dec() == 1
drm kern debug: nouveau T[  BARCTL][nouveau0][0x00000000][0xfffffe811d398d48] inc() == 2
drm kern debug: nouveau T[   PDISP][nouveau0] inc() == 2
drm kern debug: nouveau T[  BARCTL][nouveau0][0x00000000][0xfffffe811d398d48] dec() == 1
drm kern debug: nouveau T[   PDISP][nouveau0][0x03005023][0xfffffe811d259210] created
drm kern debug: nouveau T[   PDISP][nouveau0][0x03005023][0xfffffe811d259210] inc() == 2
drm kern debug: nouveau T[   PDISP][nouveau0] inc() == 3
drm kern debug: nouveau T[   PDISP][nouveau0][0x80008570][0xfffffe811d398ca8] inc() == 3
drm kern debug: nouveau T[   PDISP][nouveau0] inc() == 4
drm kern debug: nouveau T[   PDISP][nouveau0][0x80008570][0xfffffe811d398ca8] dec() == 2
uvm_fault(0xffffffff813de100, 0xffff80021e344000, 2) -> e
fatal page fault in supervisor mode
trap type 6 code 2 rip ffffffff80114548 cs 8 rflags 10202 cr2 ffff80021e344000 ilevel 8 rsp ffffffff815d8488
curlwp 0xffffffff8131e6e0 pid 0.1 lowest kstack 0xffffffff815d52c0
========

* backtrace

========
bus_space_write_4() at netbsd:bus_space_write_4+0x8
nouveau_ramht_new() at netbsd:nouveau_ramht_new+0x4c
nv50_disp_base_ctor() at netbsd:nv50_disp_base_ctor+0xa3
nouveau_object_ctor() at netbsd:nouveau_object_ctor+0x2d
nouveau_object_new() at netbsd:nouveau_object_new+0x19d
nouveau_display_create() at netbsd:nouveau_display_create+0x599
nouveau_drm_load() at netbsd:nouveau_drm_load+0x57f
drm_dev_register() at netbsd:drm_dev_register+0x87
drm_pci_attach() at netbsd:drm_pci_attach+0x2db
nouveau_pci_attach() at netbsd:nouveau_pci_attach+0x103
config_attach_loc() at netbsd:config_attach_loc+0x17a
pci_probe_device() at netbsd:pci_probe_device+0x4fa
pci_enumerate_bus() at netbsd:pci_enumerate_bus+0x168
pcirescan() at netbsd:pcirescan+0x43
pciattach() at netbsd:pciattach+0x193
config_attach_loc() at netbsd:config_attach_loc+0x17a
ppbattach() at netbsd:ppbattach+0x10a
config_attach_loc() at netbsd:config_attach_loc+0x17a
pci_probe_device() at netbsd:pci_probe_device+0x4fa
pci_enumerate_bus() at netbsd:pci_enumerate_bus+0x168
pcirescan() at netbsd:pcirescan+0x43
pciattach() at netbsd:pciattach+0x193
config_attach_loc() at netbsd:config_attach_loc+0x17a
mp_pci_scan() at netbsd:mp_pci_scan+0xa4
mainbus_attach() at netbsd:mainbus_attach+0x2fa
config_attach_loc() at netbsd:config_attach_loc+0x17a
cpu_configure() at netbsd:cpu_configure+0x26
main() at netbsd:main+0x2a2
========

* "pcictl pci0 list"

========
000:00:0: Intel Haswell Host Bridge, DRAM (host bridge, revision 0x06)
000:01:0: Intel Haswell PCI-E x16 Controller (PCI bridge, revision 0x06)
000:20:0: Intel 8 Series USB xHCI (USB serial bus, xHCI, revision 0x04)
000:22:0: Intel 8 Series MEI Controller (miscellaneous communications, revision 0x04)
000:26:0: Intel 8 Series USB EHCI (USB serial bus, EHCI, revision 0x04)
000:28:0: Intel 8 Series PCIE (PCI bridge, revision 0xd4)
000:28:2: Intel 8 Series PCIE (PCI bridge, revision 0xd4)
000:29:0: Intel 8 Series USB EHCI (USB serial bus, EHCI, revision 0x04)
000:31:0: Intel Z87 LPC (ISA bridge, revision 0x04)
000:31:2: Intel 8 Series (desktop) SATA Controller (AHCI) (SATA mass storage, AHCI 1.0, revision 0x04)
000:31:3: Intel 8 Series SMBus Controller (SMBus serial bus, revision 0x04)
001:00:0: NVIDIA GeForce 210 (VGA display, revision 0xa2)
001:00:1: NVIDIA GeForce 210 High Definition Audio Controller (mixed mode multimedia, revision 0xa1)
003:00:0: Realtek Semiconductor 8168/8111 10/100/1000 Ethernet (ethernet network, revision 0x11)
========

* dmesg with "userconf disable nouveau"

========
Copyright (c) 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005,
    2006, 2007, 2008, 2009, 2010, 2011, 2012, 2013, 2014, 2015
    The NetBSD Foundation, Inc.  All rights reserved.
Copyright (c) 1982, 1986, 1989, 1991, 1993
    The Regents of the University of California.  All rights reserved.

NetBSD 7.99.21 (NOUVEAU) #2: Tue Oct 27 13:50:33 JST 2015
	root@XXX:XXX
total memory = 16319 MB
avail memory = 15825 MB
rnd: seeded with 128 bits
timecounter: Timecounters tick every 10.000 msec
[334] nouveau* disabled
timecounter: Timecounter "i8254" frequency 1193182 Hz quality 100
ASUS All Series (System Version)
mainbus0 (root)
ACPI: RSDP 0x00000000000F0490 000024 (v02 ALASKA)
ACPI: XSDT 0x00000000DD96C088 000084 (v01 ALASKA A M I    01072009 AMI  00010013)
ACPI: FACP 0x00000000DD97A4D0 00010C (v05 ALASKA A M I    01072009 AMI  00010013)
ACPI: DSDT 0x00000000DD96C1A0 00E32F (v02 ALASKA A M I    00000031 INTL 20091112)
ACPI: FACS 0x00000000DDEBC080 000040
ACPI: APIC 0x00000000DD97A5E0 000092 (v03 ALASKA A M I    01072009 AMI  00010013)
ACPI: FPDT 0x00000000DD97A678 000044 (v01 ALASKA A M I    01072009 AMI  00010013)
ACPI: LPIT 0x00000000DD97A6C0 00005C (v01 ALASKA A M I    00000000 AMI. 00000005)
ACPI: SSDT 0x00000000DD97A720 000539 (v01 PmRef  Cpu0Ist  00003000 INTL 20091112)
ACPI: SSDT 0x00000000DD97AC60 000AD8 (v01 PmRef  CpuPm    00003000 INTL 20091112)
ACPI: MCFG 0x00000000DD97B738 00003C (v01 ALASKA A M I    01072009 MSFT 00000097)
ACPI: HPET 0x00000000DD97B778 000038 (v01 ALASKA A M I    01072009 AMI. 00000005)
ACPI: SSDT 0x00000000DD97B7B0 00036D (v01 SataRe SataTabl 00001000 INTL 20091112)
ACPI: SSDT 0x00000000DD97BB20 0034E1 (v01 SaSsdt SaSsdt   00003000 INTL 20091112)
ACPI: BGRT 0x00000000DD97FA88 000038 (v00 ALASKA A M I    01072009 AMI  00010013)
ACPI: SSDT 0x00000000DD97F060 000A26 (v01 Intel_ IsctTabl 00001000 INTL 20091112)
ACPI: All ACPI Tables successfully acquired
ioapic0 at mainbus0 apid 8: pa 0xfec00000, version 0x20, 24 pins
cpu0 at mainbus0 apid 0
cpu0: Intel(R) Core(TM) i7-4770S CPU @ 3.10GHz, id 0x306c3
cpu1 at mainbus0 apid 2
cpu1: Intel(R) Core(TM) i7-4770S CPU @ 3.10GHz, id 0x306c3
cpu2 at mainbus0 apid 4
cpu2: Intel(R) Core(TM) i7-4770S CPU @ 3.10GHz, id 0x306c3
cpu3 at mainbus0 apid 6
cpu3: Intel(R) Core(TM) i7-4770S CPU @ 3.10GHz, id 0x306c3
cpu4 at mainbus0 apid 1
cpu4: Intel(R) Core(TM) i7-4770S CPU @ 3.10GHz, id 0x306c3
cpu5 at mainbus0 apid 3
cpu5: Intel(R) Core(TM) i7-4770S CPU @ 3.10GHz, id 0x306c3
cpu6 at mainbus0 apid 5
cpu6: Intel(R) Core(TM) i7-4770S CPU @ 3.10GHz, id 0x306c3
cpu7 at mainbus0 apid 7
cpu7: Intel(R) Core(TM) i7-4770S CPU @ 3.10GHz, id 0x306c3
acpi0 at mainbus0: Intel ACPICA 20150717
acpi0: X/RSDT: OemId <ALASKA,   A M I,01072009>, AslId <AMI ,00010013>
acpi0: MCFG: segment 0, bus 0-63, address 0x00000000f8000000
ACPI: Dynamic OEM Table Load:
ACPI: SSDT 0xFFFFFE811D26BC10 0003D3 (v01 PmRef  Cpu0Cst  00003001 INTL 20091112)
ACPI: Dynamic OEM Table Load:
ACPI: SSDT 0xFFFFFE811D313810 0005AA (v01 PmRef  ApIst    00003000 INTL 20091112)
ACPI: Dynamic OEM Table Load:
ACPI: SSDT 0xFFFFFE811D248850 000119 (v01 PmRef  ApCst    00003000 INTL 20091112)
acpi0: SCI interrupting at int 9
timecounter: Timecounter "ACPI-Fast" frequency 3579545 Hz quality 1000
hpet0 at acpi0: high precision event timer (mem 0xfed00000-0xfed00400)
timecounter: Timecounter "hpet0" frequency 14318180 Hz quality 2000
acpiec0 at acpi0 (H_EC, PNP0C09-1)
acpiec0: unable to evaluate _GPE: AE_NOT_FOUND
TPMX (PNP0C01) at acpi0 not configured
FWHD (INT0800) at acpi0 not configured
LDRC (PNP0C02) at acpi0 not configured
attimer1 at acpi0 (TIMR, PNP0100): io 0x40-0x43,0x50-0x53 irq 0
CWDT (INT3F0D) at acpi0 not configured
SIO1 (PNP0C02) at acpi0 not configured
RMSC (PNP0C02) at acpi0 not configured
UAR1 (PNP0501) at acpi0 not configured
pckbc1 at acpi0 (PS2K, PNP0303) (kbd port): io 0x60,0x64 irq 1
PDRC (PNP0C02) at acpi0 not configured
acpibut0 at acpi0 (PWRB, PNP0C0C-170): ACPI Power Button
IAOE (INT33A0) at acpi0 not configured
acpifan0 at acpi0 (FAN0, PNP0C0B-0): ACPI Fan
acpifan1 at acpi0 (FAN1, PNP0C0B-1): ACPI Fan
acpifan2 at acpi0 (FAN2, PNP0C0B-2): ACPI Fan
acpifan3 at acpi0 (FAN3, PNP0C0B-3): ACPI Fan
acpifan4 at acpi0 (FAN4, PNP0C0B-4): ACPI Fan
acpitz0 at acpi0 (TZ00)
acpitz0: active cooling level 0: 86.0C
acpitz0: active cooling level 1: 55.0C
acpitz0: active cooling level 2: 0.0C
acpitz0: active cooling level 3: 0.0C
acpitz0: active cooling level 4: 0.0C
acpitz0: levels: critical 97.0 C
acpitz1 at acpi0 (TZ01): cpu0 cpu1 cpu2 cpu3 cpu4 cpu5 cpu6 cpu7
acpitz1: levels: critical 97.0 C, passive 100.0 C, passive cooling
acpiwmi0 at acpi0 (AMW0, PNP0C14-ASUSWMI): ACPI WMI Interface
wmieeepc0 at acpiwmi0: Asus Eee PC WMI mappings
ACPI: Enabled 5 GPEs in block 00 to 3F
ACPI Exception: AE_NOT_FOUND, While evaluating Sleep State [\_S1_] (20150717/hwxface-646)
ACPI Exception: AE_NOT_FOUND, While evaluating Sleep State [\_S2_] (20150717/hwxface-646)
pckbd0 at pckbc1 (kbd slot)
pckbc1: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard
pci0 at mainbus0 bus 0: configuration mode 1
pci0: i/o space, memory space enabled, rd/line, rd/mult, wr/inv ok
pchb0 at pci0 dev 0 function 0: vendor 8086 product 0c00 (rev. 0x06)
ppb0 at pci0 dev 1 function 0: vendor 8086 product 0c01 (rev. 0x06)
ppb0: PCI Express capability version 2 <Root Port of PCI-E Root Complex> x16 @ 8.0GT/s
pci1 at ppb0 bus 1
pci1: i/o space, memory space enabled, rd/line, wr/inv ok
vga0 at pci1 dev 0 function 0: vendor 10de product 0a65 (rev. 0xa2)
wsdisplay0 at vga0 kbdmux 1: console (80x25, vt100 emulation), using wskbd0
wsmux1: connecting to wsdisplay0
drm at vga0 not configured
hdaudio0 at pci1 dev 0 function 1: HD Audio Controller
hdaudio0: interrupting at ioapic0 pin 17
hdafg0 at hdaudio0: vendor 10de product 000b
hdafg0: DP00 8ch: Digital Out [Jack]
hdafg0: 8ch/0ch 48000Hz PCM16*
hdafg1 at hdaudio0: vendor 10de product 000b
hdafg1: DP00 8ch: Digital Out [Jack]
hdafg1: 8ch/0ch 48000Hz PCM16*
hdafg2 at hdaudio0: vendor 10de product 000b
hdafg2: DP00 8ch: Digital Out [Jack]
hdafg2: 8ch/0ch 48000Hz PCM16*
hdafg3 at hdaudio0: vendor 10de product 000b
hdafg3: DP00 8ch: Digital Out [Jack]
hdafg3: 8ch/0ch 48000Hz PCM16*
vendor 8086 product 8c31 (USB serial bus, xHCI, revision 0x04) at pci0 dev 20 function 0 not configured
vendor 8086 product 8c3a (miscellaneous communications, revision 0x04) at pci0 dev 22 function 0 not configured
ehci0 at pci0 dev 26 function 0: vendor 8086 product 8c2d (rev. 0x04)
ehci0: interrupting at ioapic0 pin 20
ehci0: BIOS has given up ownership
ehci0: EHCI version 1.0
usb0 at ehci0: USB revision 2.0
ppb1 at pci0 dev 28 function 0: vendor 8086 product 8c10 (rev. 0xd4)
ppb1: PCI Express capability version 2 <Root Port of PCI-E Root Complex> x1 @ 5.0GT/s
pci2 at ppb1 bus 2
pci2: i/o space, memory space enabled, rd/line, wr/inv ok
ppb2 at pci0 dev 28 function 2: vendor 8086 product 8c14 (rev. 0xd4)
ppb2: PCI Express capability version 2 <Root Port of PCI-E Root Complex> x1 @ 5.0GT/s
ppb2: link is x1 @ 2.5GT/s
pci3 at ppb2 bus 3
pci3: i/o space, memory space enabled, rd/line, wr/inv ok
re0 at pci3 dev 0 function 0: RealTek 8168/8111 PCIe Gigabit Ethernet (rev. 0x11)
re0: interrupting at ioapic0 pin 18
re0: Ethernet address 74:d0:2b:7d:79:f8
re0: using 256 tx descriptors
rgephy0 at re0 phy 7: RTL8251 1000BASE-T media interface, rev. 0
rgephy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT-FDX, auto
ehci1 at pci0 dev 29 function 0: vendor 8086 product 8c26 (rev. 0x04)
ehci1: interrupting at ioapic0 pin 23
ehci1: BIOS has given up ownership
ehci1: EHCI version 1.0
usb1 at ehci1: USB revision 2.0
ichlpcib0 at pci0 dev 31 function 0: vendor 8086 product 8c44 (rev. 0x04)
timecounter: Timecounter "ichlpcib0" frequency 3579545 Hz quality 1000
ichlpcib0: 24-bit timer
tco0 at ichlpcib0: TCO (watchdog) timer configured.
tco0: Min/Max interval 1/367 seconds
gpio0 at ichlpcib0: 64 pins
ahcisata0 at pci0 dev 31 function 2: vendor 8086 product 8c02 (rev. 0x04)
ahcisata0: interrupting at ioapic0 pin 19
ahcisata0: 64-bit DMA
ahcisata0: AHCI revision 1.30, 6 ports, 32 slots, CAP 0xc330ff45<EMS,PSC,SSC,PMD,ISS=0x3=Gen3,SCLO,SAL,SNCQ,S64A>
atabus0 at ahcisata0 channel 0
ichsmb0 at pci0 dev 31 function 3: vendor 8086 product 8c22 (rev. 0x04)
ichsmb0: interrupting at ioapic0 pin 18
iic0 at ichsmb0: I2C bus
isa0 at ichlpcib0
com0 at isa0 port 0x3f8-0x3ff irq 4: ns16550a, working fifo
pcppi0 at isa0 port 0x61
midi0 at pcppi0: PC speaker
sysbeep0 at pcppi0
attimer1: attached to pcppi0
acpicpu0 at cpu0: ACPI CPU
acpicpu0: C1: FFH, lat   1 us, pow  1000 mW
acpicpu0: C2: FFH, lat 148 us, pow   200 mW
acpicpu0: P0: FFH, lat  10 us, pow 65000 mW, 3101 MHz, turbo boost
acpicpu0: P1: FFH, lat  10 us, pow 65000 mW, 3100 MHz
acpicpu0: P2: FFH, lat  10 us, pow 59079 mW, 2900 MHz
acpicpu0: P3: FFH, lat  10 us, pow 56516 mW, 2800 MHz
acpicpu0: P4: FFH, lat  10 us, pow 50918 mW, 2600 MHz
acpicpu0: P5: FFH, lat  10 us, pow 46145 mW, 2400 MHz
acpicpu0: P6: FFH, lat  10 us, pow 43822 mW, 2300 MHz
acpicpu0: P7: FFH, lat  10 us, pow 38735 mW, 2100 MHz
acpicpu0: P8: FFH, lat  10 us, pow 34426 mW, 1900 MHz
acpicpu0: P9: FFH, lat  10 us, pow 32333 mW, 1800 MHz
acpicpu0: P10: FFH, lat  10 us, pow 27735 mW, 1600 MHz
acpicpu0: P11: FFH, lat  10 us, pow 25779 mW, 1500 MHz
acpicpu0: P12: FFH, lat  10 us, pow 21476 mW, 1300 MHz
acpicpu0: P13: FFH, lat  10 us, pow 17870 mW, 1100 MHz
acpicpu0: P14: FFH, lat  10 us, pow 16129 mW, 1000 MHz
acpicpu0: P15: FFH, lat  10 us, pow 12279 mW,  800 MHz
coretemp0 at cpu0: thermal sensor, 1 C resolution, Tjmax=92
acpicpu1 at cpu1: ACPI CPU
coretemp1 at cpu1: thermal sensor, 1 C resolution, Tjmax=92
acpicpu2 at cpu2: ACPI CPU
coretemp2 at cpu2: thermal sensor, 1 C resolution, Tjmax=92
acpicpu3 at cpu3: ACPI CPU
coretemp3 at cpu3: thermal sensor, 1 C resolution, Tjmax=92
acpicpu4 at cpu4: ACPI CPU
acpicpu5 at cpu5: ACPI CPU
acpicpu6 at cpu6: ACPI CPU
acpicpu7 at cpu7: ACPI CPU
timecounter: Timecounter "clockinterrupt" frequency 100 Hz quality 0
timecounter: Timecounter "TSC" frequency 3098386800 Hz quality 3000
IPsec: Initialized Security Association Processing.
uhub0 at usb0: vendor 8086 EHCI root hub, class 9/0, rev 2.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
uhub1 at usb1: vendor 8086 EHCI root hub, class 9/0, rev 2.00/1.00, addr 1
uhub1: 2 ports with 2 removable, self powered
ahcisata0 port 0: device present, speed: 3.0Gb/s
wd0 at atabus0 drive 0
wd0: <Hitachi HDS721010CLA332>
wd0: drive supports 16-sector PIO transfers, LBA48 addressing
wd0: 931 GB, 1938021 cyl, 16 head, 63 sec, 512 bytes/sect x 1953525168 sectors
wd0: drive supports PIO mode 4, DMA mode 2, Ultra-DMA mode 6 (Ultra/133)
wd0(ahcisata0:0:0): using PIO mode 4, DMA mode 2, Ultra-DMA mode 6 (Ultra/133) (using DMA)
uhub2 at uhub0 port 1: vendor 8087 product 8008, class 9/0, rev 2.00/0.04, addr 2
uhub2: single transaction translator
uhub3 at uhub1 port 1: vendor 8087 product 8000, class 9/0, rev 2.00/0.04, addr 2
uhub3: single transaction translator
uhub2: 6 ports with 6 removable, self powered
uhub3: 8 ports with 8 removable, self powered
uhidev0 at uhub3 port 7 configuration 1 interface 0
uhidev0: vendor 1dd8 Buffalo USB Laser Mouse, rev 2.00/0.20, addr 3, iclass 3/1
ums0 at uhidev0: 3 buttons and Z dir
wsmouse0 at ums0 mux 0
Kernelized RAIDframe activated
pad0: outputs: 44100Hz, 16-bit, stereo
audio0 at pad0: half duplex, playback, capture
boot device: wd0
root on wd0a dumps on wd0b
root file system type: ffs
kern.module.path=/stand/amd64/7.99.21/modules
cpu 0: ucode 0x19->0x1c
cpu 1: ucode 0x19->0x1c
cpu 2: ucode 0x19->0x1c
cpu 3: ucode 0x19->0x1c
========
>How-To-Repeat:
I also have a laptop with GeForce 9400M, on which similar panic
takes place. Both 210 and 9400M are categorized as NV50 family:

  http://nouveau.freedesktop.org/wiki/CodeNames/

This machine does not have COM ports, too. To make matters worse,
I cannot obtain backtrace because panic occurs before attachment
of wskbd.
>Fix:
N/A