NetBSD Problem Report #45833

From asau@inbox.ru  Sat Jan 14 07:46:24 2012
Return-Path: <asau@inbox.ru>
Received: from mail.netbsd.org (mail.netbsd.org [204.152.190.11])
	by www.NetBSD.org (Postfix) with ESMTP id 09A2E63B84C
	for <gnats-bugs@gnats.NetBSD.org>; Sat, 14 Jan 2012 07:46:24 +0000 (UTC)
Message-Id: <871ur2iv5k.fsf@inbox.ru>
Date: Sat, 14 Jan 2012 11:46:15 +0400
From: Aleksej Saushev <asau@inbox.ru>
Reply-To: asau@inbox.ru
To: gnats-bugs@gnats.NetBSD.org
Subject: Occasional crash of 5.99.59: SPL NOT LOWERED ON TRAP EXIT

>Number:         45833
>Category:       kern
>Synopsis:       Occasional crash of 5.99.59: SPL NOT LOWERED ON TRAP EXIT
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Sat Jan 14 07:50:00 +0000 2012
>Closed-Date:    
>Last-Modified:  Sun Dec 30 07:53:27 +0000 2012
>Originator:     asau@inbox.ru
>Release:        NetBSD 5.99.59, 6.0_BETA
>Organization:
>Environment:
System: NetBSD asaushev 5.99.59 NetBSD 5.99.59 (GENERIC) #1: Wed Jan 11 11:21:15 MSK 2012
Architecture: i386
Machine: i386
>Description:
	NetBSD 5.99.56-59 occasionally crashes producing the following (or similar):

$ crash -M netbsd.44.core -N netbsd.44
Crash version 5.99.59, image version 5.99.59.
System panicked: SPL NOT LOWERED ON TRAP EXIT

Backtrace from time of crash is available.
crash> bt
_KERNEL_OPT_NAPMBIOS(e0ed4a80,104,c05ad453,8,5,0,0,e0f00ce8,0,0) at 0
_KERNEL_OPT_IPX(104,0,ffff,c0c06e8f,c07a7995,e0ed4a80,bfbfc668,c010d01f,e0f00d08
,b3) at e0f00d48
vpanic(c010d0c9,e0f00d48,0,0,4,8c,e0f00cfc,c010d0b8,c010d0c9,b3) at c07a7bea
printf_nolog(c010d0c9,b3,ab,bfbf0023,8060023,0,bfa00000,bfbfc668,bb9da178,0) at c
07a7c8f
Bad frame pointer: 0xe0f00cfc

	It may be that the following factors contribute: X11, mplayer
	At least I haven't seen the crash without running mplayer,
	and crashes frequently occur when pausing mplayer.
>How-To-Repeat:
	Run NetBSD 5.99.59 for some time with X11 and mplayer,
	pause music (or video), continue, repeat again. Wait few days.
>Fix:
	None.

>Release-Note:

>Audit-Trail:
From: "Jonathan A. Kollasch" <jakllsch@kollasch.net>
To: gnats-bugs@NetBSD.org
Cc: 
Subject: Re: kern/45833: Occasional crash of 5.99.59: SPL NOT LOWERED ON
 TRAP EXIT
Date: Sat, 4 Feb 2012 12:10:02 -0600

 Is there an ath(4) in this machine?

State-Changed-From-To: open->feedback
State-Changed-By: tron@NetBSD.org
State-Changed-When: Sun, 12 Feb 2012 13:49:07 +0000
State-Changed-Why:
Could you please provide "dmesg" output from the machine on which you see
this problem?


From: Aleksej Saushev <asau@inbox.ru>
To: gnats-bugs@netbsd.org
Cc: 
Subject: Re: PR/45833
Date: Mon, 16 Apr 2012 22:42:22 +0400

 The problem is still reproduced on 6.0_BETA;
 one of systems exhibiting it is this one:


 Copyright (c) 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005,
     2006, 2007, 2008, 2009, 2010, 2011, 2012
     The NetBSD Foundation, Inc.  All rights reserved.
 Copyright (c) 1982, 1986, 1989, 1991, 1993
     The Regents of the University of California.  All rights reserved.

 NetBSD 6.0_BETA (GENERIC) #8: Tue Apr 10 13:41:42 MSK 2012
 	asau@localhost:/usr/obj/sys/arch/i386/compile/GENERIC
 total memory = 3566 MB
 avail memory = 3494 MB
 timecounter: Timecounters tick every 10.000 msec
 RTC BIOS diagnostic error 0x80<clock_battery>
 timecounter: Timecounter "i8254" frequency 1193182 Hz quality 100
                                                                   (                        )
 mainbus0 (root)
 cpu0 at mainbus0 apid 0: Intel(R) Core(TM)2 Duo CPU     E6550  @ 2.33GHz, id 0x6fb
 cpu1 at mainbus0 apid 1: Intel(R) Core(TM)2 Duo CPU     E6550  @ 2.33GHz, id 0x6fb
 ioapic0 at mainbus0 apid 2: pa 0xfec00000, version 20, 24 pins
 acpi0 at mainbus0: Intel ACPICA 20110623
 acpi0: X/RSDT: OemId <INTEL ,DQ3510J ,000003ba>, AslId <    ,01000013>
 acpi0: SCI interrupting at int 9
 timecounter: Timecounter "ACPI-Fast" frequency 3579545 Hz quality 1000
 acpibut0 at acpi0 (SLPB, PNP0C0E): ACPI Sleep Button
 IOCM (PNP0C02) at acpi0 not configured
 npx1 at acpi0 (FPU, PNP0C04): io 0xf0 irq 13
 npx1: reported by CPUID; using exception 16
 attimer1 at acpi0 (TMR, PNP0100): io 0x40-0x43,0x50-0x53 irq 0
 pcppi1 at acpi0 (SPKR, PNP0800): io 0x61
 midi0 at pcppi1: PC speaker
 sysbeep0 at pcppi1
 XTRA (PNP0C02) at acpi0 not configured
 TPM (WEC1000) at acpi0 not configured
 XTR2 (PNP0C02) at acpi0 not configured
 APIC (PNP0003) at acpi0 not configured
 IEIT (INT5400) at acpi0 not configured
 apm0 at acpi0: Power Management spec V1.2
 attimer1: attached to pcppi1
 pci0 at mainbus0 bus 0: configuration mode 1
 pci0: i/o space, memory space enabled, rd/line, rd/mult, wr/inv ok
 pchb0 at pci0 dev 0 function 0: vendor 0x8086 product 0x29b0 (rev. 0x02)
 agp0 at pchb0: detected 6140k stolen memory
 agp0: aperture at 0xe0000000, size 0x10000000
 ppb0 at pci0 dev 1 function 0: vendor 0x8086 product 0x29b1 (rev. 0x02)
 ppb0: PCI Express 1.0 <Root Port of PCI-E Root Complex>
 pci1 at ppb0 bus 1
 pci1: i/o space, memory space enabled, rd/line, wr/inv ok
 vga1 at pci0 dev 2 function 0: vendor 0x8086 product 0x29b2 (rev. 0x02)
 wsdisplay0 at vga1 kbdmux 1: console (80x25, vt100 emulation)
 wsmux1: connecting to wsdisplay0
 i915drm0 at vga1: Intel Q35
 i915drm0: AGP at 0xe0000000 128MB
 i915drm0: Initialized i915 1.6.0 20080730
 vendor 0x8086 product 0x29b4 (miscellaneous communications, revision 0x02) at pci0 dev 3 function 0 not configured
 wm0 at pci0 dev 25 function 0: 82801I (AMT) LAN Controller (rev. 0x02)
 wm0: interrupting at ioapic0 pin 20
 wm0: PCI-Express bus
 wm0: FLASH
 wm0: Ethernet address 00:19:d1:a4:83:03
 igphy0 at wm0 phy 1: i82566 10/100/1000 media interface, rev. 0
 igphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-FDX, auto
 uhci0 at pci0 dev 26 function 0: vendor 0x8086 product 0x2937 (rev. 0x02)
 uhci0: interrupting at ioapic0 pin 18
 usb0 at uhci0: USB revision 1.0
 uhci1 at pci0 dev 26 function 1: vendor 0x8086 product 0x2938 (rev. 0x02)
 uhci1: interrupting at ioapic0 pin 21
 usb1 at uhci1: USB revision 1.0
 uhci2 at pci0 dev 26 function 2: vendor 0x8086 product 0x2939 (rev. 0x02)
 uhci2: interrupting at ioapic0 pin 17
 usb2 at uhci2: USB revision 1.0
 ehci0 at pci0 dev 26 function 7: vendor 0x8086 product 0x293c (rev. 0x02)
 ehci0: interrupting at ioapic0 pin 17
 ehci0: EHCI version 1.0
 ehci0: companion controllers, 2 ports each: uhci0 uhci1 uhci2
 usb3 at ehci0: USB revision 2.0
 hdaudio0 at pci0 dev 27 function 0: HD Audio Controller
 hdaudio0: interrupting at ioapic0 pin 22
 hdafg0 at hdaudio0: Realtek ALC268
 hdafg0: DAC00 2ch: Speaker [Jack]
 hdafg0: ADC01 2ch: Line In [Jack], Mic In [Jack]
 hdafg0: DAC02 2ch: HP Out [Jack]
 hdafg0: 2ch/2ch 44100Hz 48000Hz 96000Hz 192000Hz PCM16 PCM20 PCM24 AC3
 audio0 at hdafg0: full duplex, playback, capture, independent
 ppb1 at pci0 dev 28 function 0: vendor 0x8086 product 0x2940 (rev. 0x02)
 ppb1: PCI Express 1.0 <Root Port of PCI-E Root Complex>
 pci2 at ppb1 bus 2
 pci2: i/o space, memory space enabled, rd/line, wr/inv ok
 ppb2 at pci0 dev 28 function 1: vendor 0x8086 product 0x2942 (rev. 0x02)
 ppb2: PCI Express 1.0 <Root Port of PCI-E Root Complex>
 pci3 at ppb2 bus 3
 pci3: i/o space, memory space enabled, rd/line, wr/inv ok
 ppb3 at pci0 dev 28 function 2: vendor 0x8086 product 0x2944 (rev. 0x02)
 ppb3: PCI Express 1.0 <Root Port of PCI-E Root Complex>
 pci4 at ppb3 bus 4
 pci4: i/o space, memory space enabled, rd/line, wr/inv ok
 pciide0 at pci4 dev 0 function 0: vendor 0x11ab product 0x6101 (rev. 0xb1)
 pciide0: bus-master DMA support present, but unused (no driver support)
 pciide0: primary channel configured to native-PCI mode
 pciide0: using ioapic0 pin 18 for native-PCI interrupt
 atabus0 at pciide0 channel 0
 pciide0: secondary channel configured to native-PCI mode
 atabus1 at pciide0 channel 1
 ppb4 at pci0 dev 28 function 3: vendor 0x8086 product 0x2946 (rev. 0x02)
 ppb4: PCI Express 1.0 <Root Port of PCI-E Root Complex>
 pci5 at ppb4 bus 5
 pci5: i/o space, memory space enabled, rd/line, wr/inv ok
 ppb5 at pci0 dev 28 function 4: vendor 0x8086 product 0x2948 (rev. 0x02)
 ppb5: PCI Express 1.0 <Root Port of PCI-E Root Complex>
 pci6 at ppb5 bus 6
 pci6: i/o space, memory space enabled, rd/line, wr/inv ok
 uhci3 at pci0 dev 29 function 0: vendor 0x8086 product 0x2934 (rev. 0x02)
 uhci3: interrupting at ioapic0 pin 23
 usb4 at uhci3: USB revision 1.0
 uhci4 at pci0 dev 29 function 1: vendor 0x8086 product 0x2935 (rev. 0x02)
 uhci4: interrupting at ioapic0 pin 19
 usb5 at uhci4: USB revision 1.0
 uhci5 at pci0 dev 29 function 2: vendor 0x8086 product 0x2936 (rev. 0x02)
 uhci5: interrupting at ioapic0 pin 18
 usb6 at uhci5: USB revision 1.0
 ehci1 at pci0 dev 29 function 7: vendor 0x8086 product 0x293a (rev. 0x02)
 ehci1: interrupting at ioapic0 pin 23
 ehci1: EHCI version 1.0
 ehci1: companion controllers, 2 ports each: uhci3 uhci4 uhci5
 usb7 at ehci1: USB revision 2.0
 ppb6 at pci0 dev 30 function 0: vendor 0x8086 product 0x244e (rev. 0x92)
 pci7 at ppb6 bus 7
 pci7: i/o space, memory space enabled
 ichlpcib0 at pci0 dev 31 function 0: vendor 0x8086 product 0x2914 (rev. 0x02)
 timecounter: Timecounter "ichlpcib0" frequency 3579545 Hz quality 1000
 ichlpcib0: 24-bit timer
 ichlpcib0: TCO (watchdog) timer configured.
 ichlpcib0: can't map general purpose i/o space
 piixide0 at pci0 dev 31 function 2: Intel 82801I Serial ATA Controller (ICH9) (rev. 0x02)
 piixide0: bus-master DMA support present
 piixide0: primary channel configured to native-PCI mode
 piixide0: using ioapic0 pin 21 for native-PCI interrupt
 atabus2 at piixide0 channel 0
 piixide0: secondary channel configured to native-PCI mode
 atabus3 at piixide0 channel 1
 ichsmb0 at pci0 dev 31 function 3: vendor 0x8086 product 0x2930 (rev. 0x02)
 ichsmb0: interrupting at ioapic0 pin 18
 iic0 at ichsmb0: I2C bus
 piixide1 at pci0 dev 31 function 5: Intel 82801I Serial ATA Controller (ICH9) (rev. 0x02)
 piixide1: bus-master DMA support present
 piixide1: primary channel wired to native-PCI mode
 piixide1: using ioapic0 pin 21 for native-PCI interrupt
 atabus4 at piixide1 channel 0
 piixide1: secondary channel wired to native-PCI mode
 atabus5 at piixide1 channel 1
 isa0 at ichlpcib0
 tpm0 at isa0 iomem 0xfed40000-0xfed44fff irq 7: WEC WPCT200 rev 0x46
 pckbc0 at isa0 port 0x60-0x64
 acpicpu0 at cpu0: ACPI CPU
 acpicpu0: C1: HLT, lat   1 us, pow  1000 mW
 acpicpu0: T0: I/O, lat   1 us, pow     0 mW, 100 %
 acpicpu0: T1: I/O, lat   1 us, pow     0 mW,  88 %
 acpicpu0: T2: I/O, lat   1 us, pow     0 mW,  76 %
 acpicpu0: T3: I/O, lat   1 us, pow     0 mW,  64 %
 acpicpu0: T4: I/O, lat   1 us, pow     0 mW,  52 %
 acpicpu0: T5: I/O, lat   1 us, pow     0 mW,  40 %
 acpicpu0: T6: I/O, lat   1 us, pow     0 mW,  28 %
 acpicpu0: T7: I/O, lat   1 us, pow     0 mW,  16 %
 acpicpu1 at cpu1: ACPI CPU
 timecounter: Timecounter "clockinterrupt" frequency 100 Hz quality 0
 timecounter: Timecounter "TSC" frequency 2327587920 Hz quality 3000
 uhub0 at usb0: vendor 0x8086 UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
 uhub0: 2 ports with 2 removable, self powered
 uhub1 at usb1: vendor 0x8086 UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
 uhub1: 2 ports with 2 removable, self powered
 uhub2 at usb2: vendor 0x8086 UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
 uhub2: 2 ports with 2 removable, self powered
 uhub3 at usb3: vendor 0x8086 EHCI root hub, class 9/0, rev 2.00/1.00, addr 1
 uhub3: 6 ports with 6 removable, self powered
 uhub4 at usb4: vendor 0x8086 UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
 uhub4: 2 ports with 2 removable, self powered
 uhub5 at usb5: vendor 0x8086 UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
 uhub5: 2 ports with 2 removable, self powered
 uhub6 at usb6: vendor 0x8086 UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
 uhub6: 2 ports with 2 removable, self powered
 uhub7 at usb7: vendor 0x8086 EHCI root hub, class 9/0, rev 2.00/1.00, addr 1
 uhub7: 6 ports with 6 removable, self powered
 atapibus0 at atabus0: 2 targets
 cd0 at atapibus0 drive 1: <ATAPI   DVD D  DH16D2P, , HP56> cdrom removable
 cd0: drive supports PIO mode 4, DMA mode 2, Ultra-DMA mode 2 (Ultra/33)
 ehci1: handing over low speed device on port 3 to uhci4
 ehci1: handing over low speed device on port 5 to uhci5
 umass0 at uhub3 port 3 configuration 1 interface 0
 umass0: Western Digital External HDD, rev 2.00/1.04, addr 2
 umass0: using SCSI over Bulk-Only
 scsibus0 at umass0: 2 targets, 1 lun per target
 sd0 at scsibus0 target 0 lun 0: <WD, 2500BEA External, 1.04> disk fixed
 sd0: 232 GB, 16383 cyl, 16 head, 63 sec, 512 bytes/sect x 488397168 sectors
 uhidev0 at uhub5 port 1 configuration 1 interface 0
 wd0 at atabus2 drive 0
 wd0: <WDC WD5000AAKS-00Z7B0>
 wd0: drive supports 16-sector PIO transfers, LBA48 addressing
 wd0: 465 GB, 969021 cyl, 16 head, 63 sec, 512 bytes/sect x 976773168 sectors
 uhidev0: Logitech USB-PS/2 Optical Mouse, rev 2.00/27.20, addr 2, iclass 3/1
 ums0 at uhidev0: 8 buttons, W and Z dirs
 wsmouse0 at ums0 mux 0
 wd0: 32-bit data port
 wd0: drive supports PIO mode 4, DMA mode 2, Ultra-DMA mode 6 (Ultra/133)
 wd0(piixide0:0:0): using PIO mode 4, Ultra-DMA mode 6 (Ultra/133) (using DMA)
 Kernelized RAIDframe activated
 uhidev1 at uhub6 port 1 configuration 1 interface 0
 uhidev1: vendor 0x03ee product 0x8801, rev 2.00/1.12, addr 2, iclass 3/1
 ukbd0 at uhidev1: 8 modifier keys, 6 key codes
 boot device: wd0
 root on wd0a dumps on wd0b
 wskbd0 at ukbd0: console keyboard, using wsdisplay0
 uhidev2 at uhub6 port 1 configuration 1 interface 1
 uhidev2: vendor 0x03ee product 0x8801, rev 2.00/1.12, addr 2, iclass 3/0
 uhidev2: 2 report ids
 uhid0 at uhidev2 reportid 1: input=1, output=0, feature=0
 uhid1 at uhidev2 reportid 2: input=2, output=0, feature=0
 /: replaying log to memory
 root file system type: ffs
 /: replaying log to disk
 wsdisplay0: screen 1 added (80x25, vt100 emulation)
 wsdisplay0: screen 2 added (80x25, vt100 emulation)
 wsdisplay0: screen 3 added (80x25, vt100 emulation)
 wsdisplay0: screen 4 added (80x25, vt100 emulation)

From: David Holland <dholland-bugs@netbsd.org>
To: gnats-bugs@netbsd.org
Cc: 
Subject: Re: kern/45833 (Occasional crash of 5.99.59: SPL NOT LOWERED ON TRAP
 EXIT)
Date: Tue, 17 Apr 2012 16:57:18 +0000

 This was not filed in gnats. Neither were two mails containing dmesg
 dumps, which can be found in the netbsd-bugs mailing list archive from
 February if they become needed. The one posted today is probably
 sufficient though.

    ------

 From: Aleksej Saushev <asau@inbox.ru>
 To: netbsd-bugs@netbsd.org
 Subject: Re: kern/45833 (Occasional crash of 5.99.59: SPL NOT LOWERED ON TRAP
 	EXIT)
 Date: Mon, 09 Apr 2012 21:53:55 +0400

 Aleksej Saushev <asau@inbox.ru> writes:

 > tron@NetBSD.org writes:
 >
 >> Could you please provide "dmesg" output from the machine on which you see
 >> this problem?
 >
 > (Kernel was updated since PR was filed.)

 The problem is reproducable (though with much less frequency)
 on NetBSD 6.0_BETA i386 as of Thu Mar 29 20:03:07 MSK 2012
 This, I think, rules "random crash" cause out (among some others).

    ------

 -- 
 David A. Holland
 dholland@netbsd.org

From: Martin Husemann <martin@duskware.de>
To: gnats-bugs@NetBSD.org
Cc: 
Subject: Re: kern/45833: Occasional crash of 5.99.59: SPL NOT LOWERED ON TRAP EXIT
Date: Sat, 5 May 2012 11:19:29 +0200

 Can you reproduce the crash if you use mplayer without sound? (I think
 it has a -nosound option).

 Can you trigger it by only playing sound (i.e. with mpg123 or whatever)?

 Martin

State-Changed-From-To: feedback->open
State-Changed-By: dholland@NetBSD.org
State-Changed-When: Sun, 30 Dec 2012 07:53:27 +0000
State-Changed-Why:
Feedback was provided in May, and I forgot to change the PR state.


>Unformatted:

NetBSD Home
NetBSD PR Database Search

(Contact us) $NetBSD: query-full-pr,v 1.39 2013/11/01 18:47:49 spz Exp $
$NetBSD: gnats_config.sh,v 1.8 2006/05/07 09:23:38 tsutsui Exp $
Copyright © 1994-2007 The NetBSD Foundation, Inc. ALL RIGHTS RESERVED.