NetBSD Problem Report #50728

From www@NetBSD.org  Sat Jan 30 14:50:02 2016
Return-Path: <www@NetBSD.org>
Received: from mail.netbsd.org (mail.NetBSD.org [199.233.217.200])
	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
	(Client CN "mail.netbsd.org", Issuer "Postmaster NetBSD.org" (verified OK))
	by mollari.NetBSD.org (Postfix) with ESMTPS id B5AD27A20F
	for <gnats-bugs@gnats.NetBSD.org>; Sat, 30 Jan 2016 14:50:02 +0000 (UTC)
Message-Id: <20160130145000.6E8E47ACA3@mollari.NetBSD.org>
Date: Sat, 30 Jan 2016 14:50:00 +0000 (UTC)
From: joseyluis@gmail.com
Reply-To: joseyluis@gmail.com
To: gnats-bugs@NetBSD.org
Subject: X DRM pineview hangs 
X-Send-Pr-Version: www-1.0

>Number:         50728
>Category:       kern
>Synopsis:       X DRM pineview hangs
>Confidential:   no
>Severity:       critical
>Priority:       medium
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Sat Jan 30 14:55:00 +0000 2016
>Last-Modified:  Wed Nov 29 23:20:00 +0000 2017
>Originator:     Jose Luis Rodriguez Garcia
>Release:        7.0 amd64 and current amd64
>Organization:
>Environment:
NetBSD pc2.bigmail.com 7.0 NetBSD 7.0 (GENERIC.debug) #2: Wed Jan 27 21:24:04 CET 2016  jose@pc2.bigmail.com:/usr/src/sys/arch/amd64/compile/GENERIC.debug amd64

>Description:
X hangs, the display is frozen and the mouse don't move.
I can connect with ssh. Sometimes ps hangs and others not.

It happens to me since using X with DRM in pinewion from NetBSD 7.0 release candidates.

I have tried different versions of 7.0 and current as from since 5-10 days. It happens the same.

The hangs produces more fast if there is many I/O activity (it can be to disk or NFS). It crashes fast with firefox with a lot of tabs.

If I execute some heave I/O program it hangs in less of 5 minutes. In other case with ligth browsing it can last for 24 hours of uptime.

This dump is from a NetBSD 7.0 amd 64 kernel with -g , DIAGNOSTICS, DEBUG, LOCKDEBUG and KMEMSTATS.
I produced the dump with reboot -dnq

The assertion failure from the begin of the crash isn't related to this crash. It happens if the kernel is compiled with some of the three options: DIAGNOSTICS/LOCKDEBUG/KMEMSTATS

pc2# crash -M netbsd.13.core -N /netbsd.DEBUG.old
Crash version 7.0, image version 7.0.
System panicked: kernel diagnostic assertion "panicstr != NULL" failed: file "../../../../arch/x86/x86/pmap.c", line 1281 
Backtrace from time of crash is available.
crash> ps|egrep 'X|ps'
3052     1 3   0   9020000   fffffe81175800c0                 ps tstile
1723     2 4   0   9020000   fffffe813d71db60               Xorg
1723     1 3   3   9020000   fffffe813b674b80               Xorg uao_getpage
crash> bt/t 0t1723
trace: pid 1723 lid 2 at 0xfffffe804148ddb8
sigswitch() at sigswitch+0xbd
issignal() at issignal+0x127
sleepq_block() at sleepq_block+0x144
lwp_park() at lwp_park+0x107
sys____lwp_park60() at sys____lwp_park60+0x52
syscall() at syscall+0x9a
--- syscall (number 478) ---
7f7ff429f65a:
crash> bt 0t3052
crash: kvm_read(0xbf4, 8): invalid translation (invalid PTE)
crash> 


The full dmesg output:
crash> dmesg
Copyright (c) 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005,
    2006, 2007, 2008, 2009, 2010, 2011, 2012, 2013, 2014, 2015
    The NetBSD Foundation, Inc.  All rights reserved.
Copyright (c) 1982, 1986, 1989, 1991, 1993
    The Regents of the University of California.  All rights reserved.

NetBSD 7.0 (GENERIC.debug) #2: Wed Jan 27 21:24:04 CET 2016
        jose@pc2.bigmail.com:/usr/src/sys/arch/amd64/compile/GENERIC.debug
total memory = 4086 MB
avail memory = 3949 MB
kern.module.path=/stand/amd64/7.0/modules
timecounter: Timecounters tick every 10.000 msec
timecounter: Timecounter "i8254" frequency 1193182 Hz quality 100
Standard XS35 (To Be Filled By O.E.M.)
mainbus0 (root)
ACPI: RSDP 0xf9ed0 000024 (v02 ACPIAM)
ACPI: XSDT 0xbf6b0100 00005C (v01 Shuttl Shuttle  20110321 MSFT 00000097)
ACPI: FACP 0xbf6b0290 0000F4 (v04 032111 FACP1608 20110321 MSFT 00000097)
ACPI: DSDT 0xbf6b05c0 006645 (v02  XS35V  XS35V10 00000200 INTL 20051117)
ACPI: FACS 0xbf6be000 000040
ACPI: APIC 0xbf6b0390 00006C (v02 032111 APIC1608 20110321 MSFT 00000097)
ACPI: MCFG 0xbf6b0400 00003C (v01 032111 OEMMCFG  20110321 MSFT 00000097)
ACPI: SLIC 0xbf6b0440 000176 (v01 Shuttl Shuttle  20110321 MSFT 00000097)
ACPI: OEMB 0xbf6be040 000072 (v01 032111 OEMB1608 20110321 MSFT 00000097)
ACPI: HPET 0xbf6ba5c0 000038 (v01 032111 OEMHPET  20110321 MSFT 00000097)
ACPI: GSCI 0xbf6be0c0 002024 (v01 032111 GMCHSCI  20110321 MSFT 00000097)
ACPI: All ACPI Tables successfully acquired
ioapic0 at mainbus0 apid 4: pa 0xfec00000, version 0x20, 24 pins
cpu0 at mainbus0 apid 0: Intel(R) Atom(TM) CPU D525   @ 1.80GHz, id 0x106ca
cpu1 at mainbus0 apid 2: Intel(R) Atom(TM) CPU D525   @ 1.80GHz, id 0x106ca
cpu2 at mainbus0 apid 1: Intel(R) Atom(TM) CPU D525   @ 1.80GHz, id 0x106ca
cpu3 at mainbus0 apid 3: Intel(R) Atom(TM) CPU D525   @ 1.80GHz, id 0x106ca
acpi0 at mainbus0: Intel ACPICA 20131218
acpi0: X/RSDT: OemId <Shuttl,Shuttle ,20110321>, AslId <MSFT,00000097>
ACPI Error: No handler for Region [ECRM] (0xfffffe813ecd6e68) [EmbeddedControl] (20131218/evregion-181)
ACPI Error: Region EmbeddedControl (ID=3) has no handler (20131218/exfldio-323)
ACPI Error: Method parse/execution failed [\_SB_.PCI0.SBRG.EC0_._REG] (Node 0xfffffe813ece3bd0), AE_NOT_EXIST (20131218/psparse-553)
acpi0: SCI interrupting at int 9
timecounter: Timecounter "ACPI-Fast" frequency 3579545 Hz quality 1000
hpet0 at acpi0: high precision event timer (mem 0xfed00000-0xfed00400)
timecounter: Timecounter "hpet0" frequency 14318180 Hz quality 2000
acpiec0 at acpi0 (EC0, PNP0C09)
: io 0x62,0x66
MCH (PNP0C01) WARNING: module error: vfs load failed for `acpiverbose', error 45
at acpi0 not configured
attimer1 at acpi0 (TMR, PNP0100): io 0x40-0x43 irq 0
pckbc1 at acpi0 (PS2K, PNP0303) (kbd port): io 0x60,0x64 irq 1
pckbc2 at acpi0 (PS2M, PNP0F03) (aux port): irq 12
pcppi1 at acpi0 (SPKR, PNP0800): io 0x61
midi0 at pcppi1: PC speaker
sysbeep0 at pcppi1
RMSC (PNP0C02) WARNING: module error: vfs load failed for `acpiverbose', error 45
at acpi0 not configured
FWH (INT0800) WARNING: module error: vfs load failed for `acpiverbose', error 45
at acpi0 not configured
FWHE (PNP0C02) WARNING: module error: vfs load failed for `acpiverbose', error 45
at acpi0 not configured
OMSC (PNP0C02) WARNING: module error: vfs load failed for `acpiverbose', error 45
at acpi0 not configured
PCIE (PNP0C02) WARNING: module error: vfs load failed for `acpiverbose', error 45
at acpi0 not configured
acpivga0 at acpi0 (GFX0): ACPI Display Adapter
acpiout0 at acpivga0 (CRT, 0x0100): ACPI Display Output Device
acpiout1 at acpivga0 (LCD, 0x0410): ACPI Display Output Device
acpiout1: brightness levels: 0 1 2 3 4 5 6 7
acpivga0: connected output devices:
acpivga0:   0x0100 (acpiout0): VGA Analog Monitor, index 0, port 0, head 0, bios detect
acpivga0:   0x0410 (acpiout1): Int. Digital Flat Panel, index 0, port 1, head 0, bios detect
acpibut0 at acpi0 (SLPB, PNP0C0E): ACPI Sleep Button
RMEM (PNP0C01) WARNING: module error: vfs load failed for `acpiverbose', error 45
at acpi0 not configured
acpibut1 at acpi0 (PWRB, PNP0C0C-170): ACPI Power Button
acpiwmi0 at acpi0 (AMW0, PNP0C14-1): ACPI WMI Interface
wmieeepc0 at acpiwmi0: Asus Eee PC WMI mappings
acpitz0 at acpi0 (TZ00)
acpitz0: levels: critical 104.0 C, passive cooling
ACPI: Enabled 3 GPEs in block 00 to 1F
ACPI Exception: AE_NOT_FOUND, While evaluating Sleep State [\_S1_] (20131218/hwxface-646)
ACPI Exception: AE_NOT_FOUND, While evaluating Sleep State [\_S2_] (20131218/hwxface-646)
WARNING: module error: vfs load failed for `acpiverbose', error 45
pckbd0 at pckbc1 (kbd slot)
pckbc1: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard
attimer1: attached to pcppi1
pci0 at mainbus0 bus 0: configuration mode 1
pci0: i/o space, memory space enabled, rd/line, rd/mult, wr/inv ok
pchb0 at pci0 dev 0 function 0WARNING: module error: vfs load failed for `pciverbose', error 45
WARNING: module error: vfs load failed for `pciverbose', error 45
: vendor 0x8086 product 0xa000 (rev. 0x02)
agp0 at pchb0: i915-family chipset
agp0: detected 7932k stolen memory
agp0: BAR size 100000 mismatches detected GTT size 40000; trusting BAR
agp0: aperture at 0xd0000000, size 0x10000000
i915drmkms0 at pci0 dev 2 function 0WARNING: module error: vfs load failed for `pciverbose', error 45
WARNING: module error: vfs load failed for `pciverbose', error 45
: vendor 0x8086 product 0xa001 (rev. 0x02)
drm: Memory usable by graphics device = 1024M
drm: Supports vblank timestamp caching Rev 2 (21.10.2013).
drm: Driver supports precise vblank timestamp query.
i915drmkms0: interrupting at ioapic0 pin 16 (i915)
drm: initialized overlay support
intelfb0 at i915drmkms0
i915drmkms0: info: registered panic notifier
intelfb0: framebuffer at 0xffff800048e16000, size 1920x1080, depth 32, stride 7680
wsdisplay0 at intelfb0 kbdmux 1: console (default, vt100 emulation), using wskbd0
wsmux1: connecting to wsdisplay0
WARNING: module error: vfs load failed for `pciverbose', error 45
WARNING: module error: vfs load failed for `pciverbose', error 45
vendor 0x8086 product 0xa002 (miscellaneous display, revision 0x02) at pci0 dev 2 function 1 not configured
hdaudio0 at pci0 dev 27 function 0: HD Audio Controller
hdaudio0: interrupting at ioapic0 pin 16
hdafg0 at hdaudio0: Sigmatel 92HD81B1X5
hdafg0: DAC00 2ch: Speaker [Built-In], HP Out [Jack]
hdafg0: ADC01 2ch: Mic In [Jack]
hdafg0: ADC02 2ch: Mic In [Built-In]
hdafg0: 2ch/2ch 44100Hz 48000Hz 88200Hz 96000Hz 192000Hz PCM16 PCM20 PCM24 AC3
audio0 at hdafg0: full duplex, playback, capture, mmap, independent
ppb0 at pci0 dev 28 function 0WARNING: module error: vfs load failed for `pciverbose', error 45
WARNING: module error: vfs load failed for `pciverbose', error 45
: vendor 0x8086 product 0x27d0 (rev. 0x02)
ppb0: PCI Express capability version 1 <Root Port of PCI-E Root Complex> x1 @ 2.5GT/s
pci1 at ppb0 bus 1
pci1: i/o space, memory space enabled, rd/line, wr/inv ok
ppb1 at pci0 dev 28 function 1WARNING: module error: vfs load failed for `pciverbose', error 45
WARNING: module error: vfs load failed for `pciverbose', error 45
: vendor 0x8086 product 0x27d2 (rev. 0x02)
ppb1: PCI Express capability version 1 <Root Port of PCI-E Root Complex> x1 @ 2.5GT/s
pci2 at ppb1 bus 2
pci2: i/o space, memory space enabled, rd/line, wr/inv ok
WARNING: module error: vfs load failed for `pciverbose', error 45
WARNING: module error: vfs load failed for `pciverbose', error 45
vendor 0x197b product 0x2382 (miscellaneous system, revision 0x80) at pci2 dev 0 function 0 not configured
sdhc0 at pci2 dev 0 function 2WARNING: module error: vfs load failed for `pciverbose', error 45
WARNING: module error: vfs load failed for `pciverbose', error 45
: vendor 0x197b product 0x2381 (rev. 0x80)
sdhc0: interrupting at ioapic0 pin 18
sdhc0: SD Host Specification 2.0, rev.176
sdhc0: using DMA transfer
sdmmc0 at sdhc0 slot 0
WARNING: module error: vfs load failed for `pciverbose', error 45
WARNING: module error: vfs load failed for `pciverbose', error 45
vendor 0x197b product 0x2383 (miscellaneous system, revision 0x80) at pci2 dev 0 function 3 not configured
jme0 at pci2 dev 0 function 5
jme0: JMicron JMC250 Gigabit Ethernet Controller
jme0: PCI device revision : 0x3, Chip revision: 0x23
jme0: Ethernet address 80:ee:73:13:66:4f
jme0: interrupting at ioapic0 pin 17
ukphy0 at jme0 phy 1WARNING: module error: vfs load failed for `miiverbose', error 45
: OUI 0x00d831, model 0x0021, rev. 1
ukphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-FDX, auto
ppb2 at pci0 dev 28 function 3WARNING: module error: vfs load failed for `pciverbose', error 45
WARNING: module error: vfs load failed for `pciverbose', error 45
: vendor 0x8086 product 0x27d6 (rev. 0x02)
ppb2: PCI Express capability version 1 <Root Port of PCI-E Root Complex> x1 @ 2.5GT/s
pci3 at ppb2 bus 3
pci3: i/o space, memory space enabled, rd/line, wr/inv ok
WARNING: module error: vfs load failed for `pciverbose', error 45
WARNING: module error: vfs load failed for `pciverbose', error 45
vendor 0x10ec product 0x8176 (miscellaneous network, revision 0x01) at pci3 dev 0 function 0 not configured
uhci0 at pci0 dev 29 function 0WARNING: module error: vfs load failed for `pciverbose', error 45
WARNING: module error: vfs load failed for `pciverbose', error 45
: vendor 0x8086 product 0x27c8 (rev. 0x02)
uhci0: interrupting at ioapic0 pin 23
WARNING: module error: vfs load failed for `pciverbose', error 45
usb0 at uhci0: USB revision 1.0
uhci1 at pci0 dev 29 function 1WARNING: module error: vfs load failed for `pciverbose', error 45
WARNING: module error: vfs load failed for `pciverbose', error 45
: vendor 0x8086 product 0x27c9 (rev. 0x02)
uhci1: interrupting at ioapic0 pin 19
WARNING: module error: vfs load failed for `pciverbose', error 45
usb1 at uhci1: USB revision 1.0
uhci2 at pci0 dev 29 function 2WARNING: module error: vfs load failed for `pciverbose', error 45
WARNING: module error: vfs load failed for `pciverbose', error 45
: vendor 0x8086 product 0x27ca (rev. 0x02)
uhci2: interrupting at ioapic0 pin 18
WARNING: module error: vfs load failed for `pciverbose', error 45
usb2 at uhci2: USB revision 1.0
uhci3 at pci0 dev 29 function 3WARNING: module error: vfs load failed for `pciverbose', error 45
WARNING: module error: vfs load failed for `pciverbose', error 45
: vendor 0x8086 product 0x27cb (rev. 0x02)
uhci3: interrupting at ioapic0 pin 16
WARNING: module error: vfs load failed for `pciverbose', error 45
usb3 at uhci3: USB revision 1.0
ehci0 at pci0 dev 29 function 7WARNING: module error: vfs load failed for `pciverbose', error 45
WARNING: module error: vfs load failed for `pciverbose', error 45
: vendor 0x8086 product 0x27cc (rev. 0x02)
ehci0: interrupting at ioapic0 pin 23
WARNING: module error: vfs load failed for `pciverbose', error 45
ehci0: EHCI version 1.0
ehci0: companion controllers, 2 ports each: uhci0 uhci1 uhci2 uhci3
usb4 at ehci0: USB revision 2.0
ppb3 at pci0 dev 30 function 0WARNING: module error: vfs load failed for `pciverbose', error 45
WARNING: module error: vfs load failed for `pciverbose', error 45
: vendor 0x8086 product 0x2448 (rev. 0xe2)
pci4 at ppb3 bus 4
pci4: i/o space, memory space enabled
ichlpcib0 at pci0 dev 31 function 0WARNING: module error: vfs load failed for `pciverbose', error 45
WARNING: module error: vfs load failed for `pciverbose', error 45
: vendor 0x8086 product 0x27bc (rev. 0x02)
timecounter: Timecounter "ichlpcib0" frequency 3579545 Hz quality 1000
ichlpcib0: 24-bit timer
ichlpcib0: TCO (watchdog) timer configured.
ahcisata0 at pci0 dev 31 function 2WARNING: module error: vfs load failed for `pciverbose', error 45
WARNING: module error: vfs load failed for `pciverbose', error 45
: vendor 0x8086 product 0x27c1 (rev. 0x02)
ahcisata0: interrupting at ioapic0 pin 19
ahcisata0: 64-bit DMA
ahcisata0: AHCI revision 1.10, 4 ports, 32 slots, CAP 0xc720ff03<PSC,SSC,PMD,ISS=0x2=Gen2,SCLO,SAL,SALP,SNCQ,S64A>
atabus0 at ahcisata0 channel 0
atabus1 at ahcisata0 channel 1
atabus2 at ahcisata0 channel 2
atabus3 at ahcisata0 channel 3
ichsmb0 at pci0 dev 31 function 3WARNING: module error: vfs load failed for `pciverbose', error 45
WARNING: module error: vfs load failed for `pciverbose', error 45
: vendor 0x8086 product 0x27da (rev. 0x02)
ichsmb0: interrupting at ioapic0 pin 19
iic0 at ichsmb0: I2C bus
isa0 at ichlpcib0
acpicpu0 at cpu0: ACPI CPU
acpicpu0: C1: HLT, lat   0 us, pow     0 mW
coretemp0 at cpu0: thermal sensor, 1 C resolution, Tjmax=100
acpicpu1 at cpu1: ACPI CPU
coretemp1 at cpu1: thermal sensor, 1 C resolution, Tjmax=100
acpicpu2 at cpu2: ACPI CPU
acpicpu3 at cpu3: ACPI CPU
timecounter: Timecounter "clockinterrupt" frequency 100 Hz quality 0
uhub0 at usb1: vendor 0x8086 UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
uhub1 at usb0: vendor 0x8086 UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub1: 2 ports with 2 removable, self powered
uhub2 at usb4: vendor 0x8086 EHCI root hub, class 9/0, rev 2.00/1.00, addr 1
uhub2: 8 ports with 8 removable, self powered
uhub3 at usb2: vendor 0x8086 UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub3: 2 ports with 2 removable, self powered
uhub4 at usb3: vendor 0x8086 UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub4: 2 ports with 2 removable, self powered
IPsec: Initialized Security Association Processing.
ahcisata0 port 0: device present, speed: 3.0Gb/s
ahcisata0 port 1: device present, speed: 1.5Gb/s
ehci0: handing over low speed device on port 1 to uhci0
wd0 at atabus0 drive 0
wd0: <TOSHIBA MQ01ABD100>
wd0: drive supports 16-sector PIO transfers, LBA48 addressing
wd0: 931 GB, 1938021 cyl, 16 head, 63 sec, 512 bytes/sect x 1953525168 sectors
wd0: drive supports PIO mode 4, DMA mode 2, Ultra-DMA mode 5 (Ultra/100)
wd0(ahcisata0:0:0): using PIO mode 4, DMA mode 2, Ultra-DMA mode 5 (Ultra/100) (using DMA)
atapibus0 at atabus1: 1 targets
cd0 at atapibus0 drive 0: <HL-DT-STDVDRAM GT32N, KZ7B2I13217, 1.00> cdrom removable
cd0: drive supports PIO mode 4, DMA mode 2, Ultra-DMA mode 5 (Ultra/100)
cd0(ahcisata0:1:0): using PIO mode 4, DMA mode 2, Ultra-DMA mode 5 (Ultra/100) (using DMA)
ulpt0 at uhub2 port 5 configuration 1 interface 0
ulpt0: Kyocera Kyocera FS-1300D, rev 2.00/0.00, addr 2, iclass 7/1
ulpt0: using bi-directional mode
ehci0: handing over low speed device on port 8 to uhci3
Kernelized RAIDframe activated
pad0: outputs: 44100Hz, 16-bit, stereo
audio1 at pad0: half duplex, playback, capture
WARNING: module error: vfs load failed for `usbverbose', error 45
uhidev0 at uhub1 port 1 configuration 1 interface 0
WARNING: module error: vfs load failed for `usbverbose', error 45
uhidev0: vendor 0x1bcf USB Optical Mouse, rev 2.00/0.61, addr 2, iclass 3/1
uhidev0: 3 report ids
ukbd0 at uhidev0 reportid 1: 8 modifier keys, 6 key codes
boot device: wd0
root on wd0a dumps on wd0b
dump_misc_init: max_paddr = 0x140000000
mountroot: trying smbfs...
mountroot: trying ntfs...
mountroot: trying nfs...
mountroot: trying msdos...
mountroot: trying lfs...
mountroot: trying ext2fs...
mountroot: trying ffs...
root file system type: ffs
wskbd1 at ukbd0 mux 1
wskbd1: connecting to wsdisplay0
ums0 at uhidev0 reportid 2: 5 buttons and Z dir
wsmouse0 at ums0 mux 0
uhid0 at uhidev0 reportid 3: input=2, output=0, feature=0
init: copying out path `/sbin/init' 11
uhidev1 at uhub4 port 2 configuration 1 interface 0
uhidev1: Semi Tech Semi Tech PS/2 Keyboard - PS/2 Mouse, rev 1.01/0.01, addr 2, iclass 3/1
ukbd1 at uhidev1: 8 modifier keys, 6 key codes
wskbd2 at ukbd1 mux 1
wskbd2: connecting to wsdisplay0
uhidev2 at uhub4 port 2 configuration 1 interface 1
uhidev2: Semi Tech Semi Tech PS/2 Keyboard - PS/2 Mouse, rev 1.01/0.01, addr 2, iclass 3/1
ums1 at uhidev2: 3 buttons and Z dir
wsmouse1 at ums1 mux 0
jme0: link state UP (was UNKNOWN)
wsdisplay0: screen 1 added (default, vt100 emulation)
wsdisplay0: screen 2 added (default, vt100 emulation)
wsdisplay0: screen 3 added (default, vt100 emulation)
wsdisplay0: screen 4 added (default, vt100 emulation)
wmieeepc0: unknown key 0x02 for event 0xD2
set{u,g}id pid 2285 (gnome-pty-helper) was invoked by uid 1004 ppid 330 (xfce4-terminal) with fd 2 closed

dumping to dev 0,1 (offset=8410383, size=1046094):
dump panic: kernel diagnostic assertion "panicstr != NULL" failed: file "../../../../arch/x86/x86/pmap.c", line 1281
cpu0: Begin traceback...
vpanic() at netbsd:vpanic+0x13c
kern_assert() at netbsd:kern_assert+0x4f
pmap_kremove_local() at netbsd:pmap_kremove_local+0x17c
dumpsys_seg() at netbsd:dumpsys_seg+0xd9
dump_seg_iter() at netbsd:dump_seg_iter+0xce
dodumpsys() at netbsd:dodumpsys+0x24c
dumpsys() at netbsd:dumpsys+0x1d
sys_reboot() at netbsd:sys_reboot+0x7e
syscall() at netbsd:syscall+0x9a
--- syscall (number 208) ---
7f7ff703c96a:
cpu0: End traceback...

dumping to dev 0,1 (offset=8410383, size=233407):
dump
crash> 

>How-To-Repeat:
The problem happens in a few minutes wit heavy I/O output (to disk or NFS).

It happens (in 10-20 minutes) with a lot of tabs in the browser.
>Fix:
Not known

>Audit-Trail:
From: Jose Luis Rodriguez Garcia <joseyluis@gmail.com>
To: gnats-bugs@netbsd.org
Cc: 
Subject: Re: kern/50728: X DRM pineview hangs
Date: Mon, 1 Feb 2016 01:02:06 +0100

 pc2# crash -M netbsd.13.core -N netbsd.13
 Crash version 7.0, image version 7.0.
 System panicked: kernel diagnostic assertion "panicstr != NULL"
 failed: file "../../../../arch/x86/x86/pmap.c", line 1281
 Backtrace from time of crash is available.
 crash> ps |egrep 'X|ps'
 3052     1 3   0   9020000   fffffe81175800c0                 ps tstile
 1723     2 4   0   9020000   fffffe813d71db60               Xorg
 1723     1 3   3   9020000   fffffe813b674b80               Xorg uao_getpage

 backtrace from ps:

 crash> bt/t 0t3052
 trace: pid 3052 lid 1 at 0xfffffe80480a4a70
 sleepq_block() at sleepq_block+0xa2
 turnstile_block() at turnstile_block+0x346
 rw_enter() at rw_enter+0x37b
 vm_map_lock() at vm_map_lock+0x62
 uvm_map_extract() at uvm_map_extract+0x8f
 uvm_io() at uvm_io+0xc1
 copyin_vmspace() at copyin_vmspace+0x8f
 copyin_proc() at copyin_proc+0x35
 copyin_psstrings() at copyin_psstrings+0x5b
 sysctl_kern_proc_args() at sysctl_kern_proc_args+0x23b
 sysctl_dispatch() at sysctl_dispatch+0xc4
 sys___sysctl() at sys___sysctl+0xd0
 syscall() at syscall+0x9a
 --- syscall (number 202) ---
 7f7ff6d00a7a:

 backtrace from the threads of Xorg:
 crash> t/a fffffe813d71db60
 trace: pid 1723 lid 2 at 0xfffffe804148ddb8
 sigswitch() at sigswitch+0xbd
 issignal() at issignal+0x127
 sleepq_block() at sleepq_block+0x144
 lwp_park() at lwp_park+0x107
 sys____lwp_park60() at sys____lwp_park60+0x52
 syscall() at syscall+0x9a
 --- syscall (number 478) ---
 7f7ff429f65a:

 crash> t/a fffffe813b674b80
 trace: pid 1723 lid 1 at 0xfffffe8041499908
 sleepq_block() at sleepq_block+0xa2
 mtsleep() at mtsleep+0x155
 uao_get() at uao_get+0x2de
 uvm_obj_wirepages() at uvm_obj_wirepages+0xa3
 i915_gem_object_get_pages_gtt() at i915_gem_object_get_pages_gtt+0xc7
 i915_gem_object_get_pages() at i915_gem_object_get_pages+0x48
 i915_gem_object_pin() at i915_gem_object_pin+0x3b7
 i915_gem_fault() at i915_gem_fault+0x135
 uvm_fault_internal() at uvm_fault_internal+0x828
 trap() at trap+0x253
 --- trap (number 6) ---
 7f7ff430db6f:

 Backtrace from i915 kernel thread. It can be usefull.
 crash> ps|grep i915
 0       37 3   0       200   fffffe81074a0160               i915 i915
 crash> t/a fffffe81074a0160
 trace: pid 0 lid 37 at 0xfffffe8040091e78
 sleepq_block() at sleepq_block+0xa2
 cv_wait() at cv_wait+0x116
 workqueue_worker() at workqueue_worker+0x53

 I copy all the process that have waits . I don't know well what waits
 I must look for.
 crash> ps
 PID    LID S CPU     FLAGS       STRUCT LWP *               NAME WAIT
 3052     1 3   0   9020000   fffffe81175800c0                 ps tstile
 331      1 3   1   8020080   fffffe812c204120            firefox select
 1723     2 4   0   9020000   fffffe813d71db60               Xorg
 1723     1 3   3   9020000   fffffe813b674b80               Xorg uao_getpage
 0       78 3   0       200   fffffe813b8ad780              nfsio nfsiod
 0       77 3   0       200   fffffe813b8adba0              nfsio nfsiod
 0       76 3   0       200   fffffe813b674340              nfsio nfsiod
 0       75 3   0       200   fffffe813b674760              nfsio nfsiod
 0       74 3   0       200   fffffe813eb92ac0            physiod physiod
 0       73 3   0       200   fffffe813eba3ae0           aiodoned aiodoned
 0       68 3   0       200   fffffe8107c60260          atapibus0 sccomp
 0       65 3   0       200   fffffe8107bf6600               usb4 usbevt
 0       64 2   0       200   fffffe8107bf6a20               usb2
 0       63 3   0       200   fffffe8107bf61e0               usb1 usbevt
 0       62 3   0       200   fffffe8107b5c1c0               usb3 usbevt
 0       61 3   0       200   fffffe8107bc7200               usb0 usbevt
 0       60 3   0       200   fffffe8107c60680          cryptoret crypto_w
 0       59 3   0       200   fffffe8107bfc240              unpgc unpgc
 0       58 3   0       200   fffffe8107bf8a60        vmem_rehash vmem_rehash
 0       57 3   0       200   fffffe8107bfc660             sdmmc0 mmctaskq
 0       56 3   0       200   fffffe8107bfca80          coretemp1 coretemp1
 0       55 3   0       200   fffffe8107bf8220          coretemp0 coretemp0
 0       54 3   0       200   fffffe8107bf8640            acpitz0 acpitz0
 0       45 3   0       200   fffffe8107b5c5e0               iic0 iicintr
 0       44 3   0       200   fffffe8107b5ca00            atabus3 atath
 0       43 3   0       200   fffffe8107b3d1a0            atabus2 atath
 0       42 3   0       200   fffffe8107b3d5c0            atabus1 atath
 0       41 3   0       200   fffffe8107b3d9e0            atabus0 atath
 0       40 3   0       200   fffffe810770a180         usbtask-dr usbtsk
 0       39 3   0       200   fffffe810770a5a0         usbtask-hc usbtsk
 0       38 3   0       200   fffffe810770a9c0            intelfb intelfb
 0       37 3   0       200   fffffe81074a0160               i915 i915
 0       36 3   0       200   fffffe81074a0580           lnxsyswq lnxsyswq
 0       35 3   0       200   fffffe81074a09a0    acpiec sci thre ecsci
 0       34 3   3       200   fffffe8107450140            xcall/3 xcall
 0       28 3   2       200   fffffe810743d100            xcall/2 xcall
 0       22 3   1       200   fffffe81074090c0            xcall/1 xcall
 0       16 3   0       200   fffffe813ece4080             sysmon smtaskq
 0       15 3   0       200   fffffe813ece44a0         pmfsuspend pmfsuspend
 0       14 3   0       200   fffffe813ece48c0           pmfevent pmfevent
 0       13 3   0       200   fffffe813f504060         sopendfree sopendfr
 0       12 3   0       200   fffffe813f504480           nfssilly nfssilly
 0       11 3   0       200   fffffe813f5048a0            cachegc cachegc
 0        8 3   0       200   fffffe813fb11880          modunload mod_unld
 0        7 3   0       200   fffffe813fb16020            xcall/0 xcall
 0        1 3   0       200   ffffffff810d25a0            swapper uvm

From: Jose Luis Rodriguez Garcia <joseyluis@gmail.com>
To: gnats-bugs@netbsd.org
Cc: kern-bug-people@netbsd.org, gnats-admin@netbsd.org, netbsd-bugs@netbsd.org
Subject: Re: kern/50728: X DRM pineview hangs
Date: Thu, 11 Feb 2016 19:40:23 +0100

 I copy the output of the backtrace from the Xorg and ps processes.

 # gdb /netbsd.DEBUG.old
 ...
 Xorg backtrace:
 (gdb) kvm proc 0xfffffe813b674b80
 0xffffffff80616be6 in mi_switch (l=l@entry=0xfffffe813b674b80)
     at ../../../../kern/kern_synch.c:719
 719            prevlwp = cpu_switchto(l, newl, returning);
 (gdb) bt
 #0  0xffffffff80616be6 in mi_switch (l=l@entry=0xfffffe813b674b80)
     at ../../../../kern/kern_synch.c:719
 #1  0xffffffff80613c03 in sleepq_block (timo=timo@entry=0,
     catch=catch@entry=false) at ../../../../kern/kern_sleepq.c:264
 #2  0xffffffff8061666e in mtsleep (ident=0xffffffff8119b650 <uvmexp+16>,
     priority=priority@entry=516,
     wmesg=wmesg@entry=0xffffffff80ddd29a "uao_getpage", timo=timo@entry=0,
     mtx=0xffffffff8119b610 <uvm_fpageqlock>)
     at ../../../../kern/kern_synch.c:210
 #3  0xffffffff809cf012 in uvm_wait (
     wmsg=wmsg@entry=0xffffffff80ddd29a "uao_getpage")
     at ../../../../uvm/uvm_pdaemon.c:162
 #4  0xffffffff809b7c5a in uao_get (uobj=0xfffffe8051274400,
     offset=<optimized out>, pps=<optimized out>, npagesp=<optimized out>,
     centeridx=0, access_type=<optimized out>, advice=2, flags=18)
     at ../../../../uvm/uvm_aobj.c:1013
 #5  0xffffffff809ca396 in uvm_obj_wirepages (
     uobj=uobj@entry=0xfffffe8051274400, start=start@entry=0,
     end=end@entry=12713984, list=list@entry=0xfffffe80540679f0)
     at ../../../../uvm/uvm_object.c:142
 #6  0xffffffff8039f181 in bus_dmamem_wire_uvm_object (start=0, alignment=4096,
     tag=<optimized out>, boundary=0, flags=1, rsegs=0xfffffe8054067a08,
     nsegs=3104, segs=0xffff80000b49b000, pages=0xfffffe80540679f0,
     size=12713984, uobj=0xfffffe8051274400)
     at ../../../../external/bsd/drm2/include/drm/bus_dma_hacks.h:81
 #7  i915_gem_object_get_pages_gtt (obj=0xfffffe80540678c0)
     at ../../../../external/bsd/drm2/dist/drm/i915/i915_gem.c:2580
 #8  0xffffffff803a024b in i915_gem_object_get_pages (obj=0xfffffe80540678c0)
     at ../../../../external/bsd/drm2/dist/drm/i915/i915_gem.c:2761
 #9  0xffffffff803a3c1c in i915_gem_object_bind_to_vm (flags=5,
     alignment=<optimized out>, vm=0xffff800007410400, obj=0xfffffe80540678c0)
     at ../../../../external/bsd/drm2/dist/drm/i915/i915_gem.c:4012
 #10 i915_gem_object_pin (obj=obj@entry=0xfffffe80540678c0,
     vm=0xffff800007410400, alignment=alignment@entry=0, flags=flags@entry=5)
     at ../../../../external/bsd/drm2/dist/drm/i915/i915_gem.c:4666
 #11 0xffffffff803a644e in i915_gem_obj_ggtt_pin (flags=1, alignment=0,
     obj=0xfffffe80540678c0)
     at ../../../../external/bsd/drm2/dist/drm/i915/i915_drv.h:2555
 #12 i915_gem_fault (ufi=0xfffffe8041499ce0, vaddr=140186832396288,
     pps=0xfffffe8041499d98, npages=1, centeridx=0,
     access_type=<optimized out>, flags=66)
     at ../../../../external/bsd/drm2/dist/drm/i915/i915_gem.c:1845
 #13 0xffffffff809bc751 in uvm_fault_internal (
     orig_map=orig_map@entry=0xfffffe813e575e68,
     vaddr=vaddr@entry=140186832396288, access_type=access_type@entry=2,
     fault_flag=fault_flag@entry=0) at ../../../../uvm/uvm_fault.c:865
 ---Type <return> to continue, or q <return> to quit---
 #14 0xffffffff80917ace in trap (frame=0xfffffe8041499f00)
     at ../../../../arch/amd64/amd64/trap.c:556
 #15 0xffffffff80100fde in alltraps ()


 Backtrace ps process:

 (gdb) kvm proc 0xfffffe81175800c0
 0xffffffff80616be6 in mi_switch (l=l@entry=0xfffffe81175800c0)
     at ../../../../kern/kern_synch.c:719
 719            prevlwp = cpu_switchto(l, newl, returning);
 (gdb) bt
 #0  0xffffffff80616be6 in mi_switch (l=l@entry=0xfffffe81175800c0)
     at ../../../../kern/kern_synch.c:719
 #1  0xffffffff80613c03 in sleepq_block (timo=timo@entry=0,
     catch=catch@entry=false) at ../../../../kern/kern_sleepq.c:264
 #2  0xffffffff80621886 in turnstile_block (ts=<optimized out>, ts@entry=0x0,
     q=q@entry=1, obj=obj@entry=0xfffffe813e575e70,
     sobj=sobj@entry=0xffffffff810d3000 <rw_syncobj>)
     at ../../../../kern/kern_turnstile.c:430
 #3  0xffffffff8060ecdb in rw_vector_enter (rw=0xfffffe813e575e70, op=RW_WRITER)
     at ../../../../kern/kern_rwlock.c:387
 #4  0xffffffff809c24c9 in vm_map_lock (map=map@entry=0xfffffe813e575e68)
     at ../../../../uvm/uvm_map.c:627
 #5  0xffffffff809c6e87 in uvm_map_extract (
     srcmap=srcmap@entry=0xfffffe813e575e68, start=start@entry=140187732537344,
     len=len@entry=4096, dstmap=0xffffffff8119cd00 <kernel_map_store>,
     dstaddrp=dstaddrp@entry=0xfffffe80480a4c58, flags=flags@entry=14)
     at ../../../../uvm/uvm_map.c:2601
 #6  0xffffffff809be689 in uvm_io (map=0xfffffe813e575e68,
     uio=uio@entry=0xfffffe80480a4cb0) at ../../../../uvm/uvm_io.c:99
 #7  0xffffffff808b44fa in copyin_vmspace (vm=<optimized out>,
     uaddr=<optimized out>, kaddr=<optimized out>, len=<optimized out>)
     at ../../../../kern/subr_copy.c:229
 #8  0xffffffff808b474d in copyin_proc (p=<optimized out>,
     uaddr=0x7f7fffffffe0, kaddr=kaddr@entry=0xfffffe80480a4d78,
     len=len@entry=32) at ../../../../kern/subr_copy.c:280
 #9  0xffffffff80604dd3 in copyin_psstrings (p=<optimized out>,
     arginfo=0xfffffe80480a4d78) at ../../../../kern/kern_proc.c:1862
 #10 0xffffffff806053c1 in sysctl_kern_proc_args (name=<optimized out>,
     namelen=<optimized out>, oldp=0x7f7fffffd3c4, oldlenp=0xfffffe80480a4e48,
     newp=<optimized out>, newlen=<optimized out>, oname=0xfffffe80480a4e50,
     l=0xfffffe81175800c0, rnode=0xffff80000740bf60)
     at ../../../../kern/kern_proc.c:1959
 #11 0xffffffff8061a543 in sysctl_dispatch (name=name@entry=0xfffffe80480a4e50,
     namelen=4, oldp=0x7f7fffffd3c4, oldlenp=oldlenp@entry=0xfffffe80480a4e48,
     newp=0x0, newlen=0, oname=oname@entry=0xfffffe80480a4e50,
     l=l@entry=0xfffffe81175800c0, rnode=0xffff80000740bf60, rnode@entry=0x0)
     at ../../../../kern/kern_sysctl.c:451
 #12 0xffffffff8061a786 in sys___sysctl (l=0xfffffe81175800c0,
     uap=0xfffffe80480a4f00, retval=<optimized out>)
     at ../../../../kern/kern_sysctl.c:307
 #13 0xffffffff808e68fa in sy_call (rval=0xfffffe80480a4eb8,
     uap=0xfffffe80480a4f00, l=0xfffffe81175800c0,
     sy=0xffffffff810ce4c0 <sysent+3232>) at ../../../../sys/syscallvar.h:61
 #14 sy_invoke (code=202, rval=0xfffffe80480a4eb8, uap=0xfffffe80480a4f00,
     l=0xfffffe81175800c0, sy=0xffffffff810ce4c0 <sysent+3232>)
     at ../../../../sys/syscallvar.h:85
 #15 syscall (frame=0xfffffe80480a4f00)
     at ../../../../arch/x86/x86/syscall.c:156
 #16 0xffffffff80100691 in Xsyscall ()
 (gdb)

From: Jose Luis Rodriguez Garcia <joseyluis@gmail.com>
To: gnats-bugs@netbsd.org
Cc: kern-bug-people@netbsd.org, gnats-admin@netbsd.org, netbsd-bugs@netbsd.org
Subject: Re: kern/50728: X DRM pineview hangs
Date: Tue, 1 Nov 2016 20:01:41 +0100

 Doing a top -t when the X hangs I can see the cpu is consumed in two
 processes: system, in thread pgdaemon and Xorg usually in uao_getpage.

 It seems related to memory. Any idea how to see that zone of memory is
 exhausted or continue?

 If I kill some x process usually the problem is resolved.

   PID   LID USERNAME PRI STATE      TIME   WCPU    CPU NAME      COMMAND
  1691     1 root      82 uao_ge/1   8:54 32.57% 32.57% -         Xorg
     0    71 root     126 RUN/2      5:32 30.42% 30.42% pgdaemon  [system]
  3000    92 jose      84 select/3  13:34 14.01% 14.01% -         firefox
  1677     2 jose      85 select/0   0:54  3.47%  3.47% -         pulseaudio
  3000    38 jose      43 parked/0   2:59  0.24%  0.24% DOM Worke firefox

From: mlelstv@serpens.de (Michael van Elst)
To: gnats-bugs@netbsd.org
Cc: 
Subject: Re: kern/50728: X DRM pineview hangs
Date: Tue, 1 Nov 2016 19:36:25 +0000 (UTC)

 joseyluis@gmail.com (Jose Luis Rodriguez Garcia) writes:

 >Doing a top -t when the X hangs I can see the cpu is consumed in two
 >processes: system, in thread pgdaemon and Xorg usually in uao_getpage.

 Is that really pgdaemon? Do you run top in thread mode?

 -- 
 -- 
                                 Michael van Elst
 Internet: mlelstv@serpens.de
                                 "A potential Snark may lurk in every tree."

From: David Holland <dholland-bugs@netbsd.org>
To: gnats-bugs@netbsd.org
Cc: 
Subject: Re: kern/50728: X DRM pineview hangs
Date: Sun, 13 Nov 2016 23:41:39 +0000

 (not sent to gnats)

    ------

 From: Jose Luis Rodriguez Garcia <joseyluis@gmail.com>
 Cc: kern-bug-people@netbsd.org, gnats-admin@netbsd.org, netbsd-bugs@netbsd.org
 Subject: Re: kern/50728: X DRM pineview hangs
 Date: Tue, 1 Nov 2016 22:27:08 +0100

 Yes, with top -t. I did several captures, and always appears pgdaemon.

 Do you see something strange?

 In the captures that I did with crash pgdaemon didn't appear. May be that
  I have to repeat the crash capture for confirm it.

From: David Holland <dholland-bugs@netbsd.org>
To: gnats-bugs@netbsd.org
Cc: 
Subject: Re: kern/50728: X DRM pineview hangs
Date: Mon, 14 Nov 2016 05:44:51 +0000

 also not sent to gnats (to send to gnats, send to gnats-bugs@, not
 gnats-admin@)

    ------

 From: Jose Luis Rodriguez Garcia <joseyluis@gmail.com>
 To: Jose Luis Rodriguez Garcia <joseyluis@gmail.com>
 Cc: kern-bug-people@netbsd.org, gnats-admin@netbsd.org, netbsd-bugs@netbsd.org
 Subject: Re: kern/50728: X DRM pineview hangs
 Date: Tue, 1 Nov 2016 22:32:08 +0100

 I think that it can be similar to 50448 http://gnats.netbsd.org/50448

From: Jose Luis Rodriguez Garcia <joseyluis@gmail.com>
To: gnats-bugs@netbsd.org
Cc: kern-bug-people@netbsd.org, gnats-admin@netbsd.org, netbsd-bugs@netbsd.org
Subject: Re: kern/50728: X DRM pineview hangs
Date: Thu, 30 Nov 2017 00:15:45 +0100

 This problem can be similar to the 50448 and 49452

 On Mon, Nov 14, 2016 at 6:45 AM, David Holland <dholland-bugs@netbsd.org> wrote:
 > The following reply was made to PR kern/50728; it has been noted by GNATS.
 >
 > From: David Holland <dholland-bugs@netbsd.org>
 > To: gnats-bugs@netbsd.org
 > Cc:
 > Subject: Re: kern/50728: X DRM pineview hangs
 > Date: Mon, 14 Nov 2016 05:44:51 +0000
 >
 >  also not sent to gnats (to send to gnats, send to gnats-bugs@, not
 >  gnats-admin@)
 >
 >     ------
 >
 >  From: Jose Luis Rodriguez Garcia <joseyluis@gmail.com>
 >  To: Jose Luis Rodriguez Garcia <joseyluis@gmail.com>
 >  Cc: kern-bug-people@netbsd.org, gnats-admin@netbsd.org, netbsd-bugs@netbsd.org
 >  Subject: Re: kern/50728: X DRM pineview hangs
 >  Date: Tue, 1 Nov 2016 22:32:08 +0100
 >
 >  I think that it can be similar to 50448 http://gnats.netbsd.org/50448
 >

NetBSD Home
NetBSD PR Database Search

(Contact us) $NetBSD: query-full-pr,v 1.39 2013/11/01 18:47:49 spz Exp $
$NetBSD: gnats_config.sh,v 1.8 2006/05/07 09:23:38 tsutsui Exp $
Copyright © 1994-2014 The NetBSD Foundation, Inc. ALL RIGHTS RESERVED.