Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 22 Mar 2008 12:14:17 GMT
From:      Dmitry Demidov <dima_bsd@inbox.lv>
To:        freebsd-gnats-submit@FreeBSD.org
Subject:   kern/121962: Kernel panics with device polling and snd_emu10k1.ko enabled and network load
Message-ID:  <200803221214.m2MCEHTF087102@www.freebsd.org>
Resent-Message-ID: <200803221220.m2MCK13B007457@freefall.freebsd.org>

next in thread | raw e-mail | index | archive | help

>Number:         121962
>Category:       kern
>Synopsis:       Kernel panics with device polling and snd_emu10k1.ko enabled and network load
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sat Mar 22 12:20:00 UTC 2008
>Closed-Date:
>Last-Modified:
>Originator:     Dmitry Demidov
>Release:        7.0-RELEASE FreeBSD 7.0-RELEASE #0
>Organization:
>Environment:
uname -a:
FreeBSD hius.local.home 7.0-RELEASE FreeBSD 7.0-RELEASE #0: Sat Mar 22 12:08:01 EET 2008     root@hius.local.home:/usr/obj/usr/src/sys/HIUS  i386
---

dmesg
Copyright (c) 1992-2008 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
        The Regents of the University of California. All rights reserved.
FreeBSD is a registered trademark of The FreeBSD Foundation.
FreeBSD 7.0-RELEASE #0: Sat Mar 22 12:08:01 EET 2008
    root@hius.local.home:/usr/obj/usr/src/sys/HIUS
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: Intel(R) Pentium(R) 4 CPU 2.53GHz (2545.58-MHz 686-class CPU)
  Origin = "GenuineIntel"  Id = 0xf27  Stepping = 7
  Features=0xbfebfbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE>
  Features2=0x400<CNXT-ID>
real memory  = 1073676288 (1023 MB)
avail memory = 1037107200 (989 MB)
ACPI APIC Table: <GBT    AWRDACPI>
ioapic0 <Version 2.0> irqs 0-23 on motherboard
kbd1 at kbdmux0
acpi0: <GBT AWRDACPI> on motherboard
acpi0: [ITHREAD]
acpi0: Power Button (fixed)
Timecounter "ACPI-fast" frequency 3579545 Hz quality 1000
acpi_timer0: <24-bit timer at 3.579545MHz> port 0x4008-0x400b on acpi0
cpu0: <ACPI CPU> on acpi0
p4tcc0: <CPU Frequency Thermal Control> on cpu0
acpi_button0: <Power Button> on acpi0
acpi_button1: <Sleep Button> on acpi0
pcib0: <ACPI Host-PCI bridge> port 0xcf8-0xcff,0x4000-0x40bf on acpi0
pci0: <ACPI PCI bus> on pcib0
agp0: <Intel 82845G host to AGP bridge> on hostb0
pcib1: <PCI-PCI bridge> at device 1.0 on pci0
pci1: <PCI bus> on pcib1
nvidia0: <GeForce4 Ti 4200 with AGP8X> mem 0xd8000000-0xd8ffffff,0xd0000000-0xd7ffffff irq 16 at device 0.0 on pci1
nvidia0: [GIANT-LOCKED]
nvidia0: [ITHREAD]
uhci0: <Intel 82801DB (ICH4) USB controller USB-A> port 0xb800-0xb81f irq 16 at device 29.0 on pci0
uhci0: [GIANT-LOCKED]
uhci0: [ITHREAD]
usb0: <Intel 82801DB (ICH4) USB controller USB-A> on uhci0
usb0: USB revision 1.0
uhub0: <Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1> on usb0
uhub0: 2 ports with 2 removable, self powered
uhci1: <Intel 82801DB (ICH4) USB controller USB-B> port 0xb000-0xb01f irq 19 at device 29.1 on pci0
uhci1: [GIANT-LOCKED]
uhci1: [ITHREAD]
usb1: <Intel 82801DB (ICH4) USB controller USB-B> on uhci1
usb1: USB revision 1.0
uhub1: <Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1> on usb1
uhub1: 2 ports with 2 removable, self powered
uhci2: <Intel 82801DB (ICH4) USB controller USB-C> port 0xb400-0xb41f irq 18 at device 29.2 on pci0
uhci2: [GIANT-LOCKED]
uhci2: [ITHREAD]
usb2: <Intel 82801DB (ICH4) USB controller USB-C> on uhci2
usb2: USB revision 1.0
uhub2: <Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1> on usb2
uhub2: 2 ports with 2 removable, self powered
ehci0: <Intel 82801DB/L/M (ICH4) USB 2.0 controller> mem 0xdc100000-0xdc1003ff irq 23 at device 29.7 on pci0
ehci0: [GIANT-LOCKED]
ehci0: [ITHREAD]
usb3: EHCI version 1.0
usb3: companion controllers, 2 ports each: usb0 usb1 usb2
usb3: <Intel 82801DB/L/M (ICH4) USB 2.0 controller> on ehci0
usb3: USB revision 2.0
uhub3: <Intel EHCI root hub, class 9/0, rev 2.00/1.00, addr 1> on usb3
uhub3: 6 ports with 6 removable, self powered
pcib2: <ACPI PCI-PCI bridge> at device 30.0 on pci0
pci2: <ACPI PCI bus> on pcib2
pcm0: <Creative EMU10K1> port 0x9000-0x901f irq 21 at device 1.0 on pci2
pcm0: <TriTech TR28602 AC97 Codec>
pcm0: [ITHREAD]
fxp0: <Intel 82558 Pro/100 Ethernet> port 0x9800-0x981f mem 0xdc000000-0xdc000fff,0xdb000000-0xdb0fffff irq 22 at device 2.0 on pci2
miibus0: <MII bus> on fxp0
inphy0: <i82555 10/100 media interface> PHY 1 on miibus0
inphy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
fxp0: Ethernet address: 00:90:27:1a:c5:a3
fxp0: [ITHREAD]
fwohci0: <VIA Fire II (VT6306)> port 0x9c00-0x9c7f mem 0xdb120000-0xdb1207ff irq 16 at device 7.0 on pci2
fwohci0: [FILTER]
fwohci0: OHCI version 1.0 (ROM=1)
fwohci0: No. of Isochronous channels is 8.
fwohci0: EUI64 00:00:20:ed:00:77:6d:65
fwohci0: Phy 1394a available S400, 3 ports.
fwohci0: Link S400, max_rec 2048 bytes.
firewire0: <IEEE1394(FireWire) bus> on fwohci0
fwe0: <Ethernet over FireWire> on firewire0
if_fwe0: Fake Ethernet address: 02:00:20:77:6d:65
fwe0: Ethernet address: 02:00:20:77:6d:65
fwip0: <IP over FireWire> on firewire0
fwip0: Firewire address: 00:00:20:ed:00:77:6d:65 @ 0xfffe00000000, S400, maxrec 2048
dcons_crom0: <dcons configuration ROM> on firewire0
dcons_crom0: bus_addr 0x1370000
sbp0: <SBP-2/SCSI over FireWire> on firewire0
fwohci0: Initiate bus reset
fwohci0: BUS reset
fwohci0: node_id=0xc800ffc0, gen=1, CYCLEMASTER mode
em0: <Intel(R) PRO/1000 Network Connection Version - 6.7.3> port 0xa000-0xa03f mem 0xdb100000-0xdb11ffff irq 21 at device 9.0 on pci2
em0: Ethernet address: 00:20:ed:33:35:13
em0: [FILTER]
isab0: <PCI-ISA bridge> at device 31.0 on pci0
isa0: <ISA bus> on isab0
atapci0: <Intel ICH4 UDMA100 controller> port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xf000-0xf00f at device 31.1 on pci0
ata0: <ATA channel 0> on atapci0
ata0: [ITHREAD]
ata1: <ATA channel 1> on atapci0
ata1: [ITHREAD]
pci0: <serial bus, SMBus> at device 31.3 (no driver attached)
fdc0: <floppy drive controller> port 0x3f0-0x3f5,0x3f7 irq 6 drq 2 on acpi0
fdc0: [FILTER]
fd0: <1440-KB 3.5" drive> on fdc0 drive 0
sio0: <16550A-compatible COM port> port 0x3f8-0x3ff irq 4 flags 0x10 on acpi0
sio0: type 16550A
sio0: [FILTER]
sio1: <Generic IRDA-compatible device> port 0x2f8-0x2ff irq 3 on acpi0
sio1: type 16550A
sio1: [FILTER]
atkbdc0: <Keyboard controller (i8042)> port 0x60,0x64 irq 1 on acpi0
atkbd0: <AT Keyboard> irq 1 on atkbdc0
kbd0 at atkbd0
atkbd0: [GIANT-LOCKED]
atkbd0: [ITHREAD]
pmtimer0 on isa0
orm0: <ISA Option ROM> at iomem 0xd0000-0xd7fff pnpid ORM0000 on isa0
ppc0: <Parallel port> at port 0x378-0x37f irq 7 on isa0
ppc0: SMC-like chipset (ECP/EPP/PS2/NIBBLE) in COMPATIBLE mode
ppc0: FIFO with 16/16/16 bytes threshold
ppbus0: <Parallel port bus> on ppc0
ppbus0: [ITHREAD]
plip0: <PLIP network interface> on ppbus0
lpt0: <Printer> on ppbus0
lpt0: Interrupt-driven port
ppi0: <Parallel I/O> on ppbus0
ppc0: [GIANT-LOCKED]
ppc0: [ITHREAD]
sc0: <System console> at flags 0x100 on isa0
sc0: VGA <16 virtual consoles, flags=0x300>
vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
ugen0: <American Power Conversion Back-UPS CS 500 FW:808.q5.I USB FW:q5, class 0/0, rev 1.10/0.06, addr 2> on uhub0
ums0: <Microsoft Basic Optical Mouse, class 0/0, rev 1.10/0.00, addr 2> on uhub2
ums0: 3 buttons and Z dir.
Timecounter "TSC" frequency 2545584048 Hz quality 800
Timecounters tick every 1.000 msec
ipfw2 initialized, divert loadable, rule-based forwarding disabled, default to deny, logging limited to 10 packets/entry by default
firewire0: 1 nodes, maxhop <= 0, cable IRM = 0 (me)
firewire0: bus manager 0 (me)
ad0: 114498MB <SAMSUNG SP1213N TL100-24> at ata0-master UDMA100
acd0: DVDR <DVDRW DRW-3S167/JSG7> at ata1-master UDMA66
ad3: 19130MB <SAMSUNG SP2001H QT100-61> at ata1-slave UDMA33
cd0 at ata1 bus 0 target 0 lun 0
cd0: <DVDRW DRW-3S167 JSG7> Removable CD-ROM SCSI-0 device
cd0: 66.000MB/s transfers
Trying to mount root from ufs:/dev/ad0s2a
>Description:
I met 100% reproducible kernel panic when DEVICE_POLLING is enabled and sound sustem is active.

If I enable polling for my em0 using ifconfig/rc.conf, start playing audio, and in parallel, start to download some stuff with full speed of my internet connection - there is always the same result - kernel panics. All this conditions (polling+audio+download) should be achieved in one time to generate panic.

My sound card is SB Live and I use snd_emu10k1 driver (compiled in or loaded as module). To test this problem, I have builded GENERIC kernel with this set of options:
options         DEVICE_POLLING
options         HZ="1000"

kldstat:
Id Refs Address    Size     Name
 1   10 0xc0400000 b51968   kernel
 2    1 0xc0f52000 85a4     snd_emu10k1.ko
 3    3 0xc0f5b000 4836c    sound.ko
 4    1 0xc0fa4000 6722c    acpi.ko
 5    1 0xc4b31000 2000     rtc.ko
 6    1 0xc4b33000 21000    linux.ko


my make.conf is:
PERL_VER=5.8.8
PERL_VERSION=5.8.8
CPUTYPE=pentium4
CFLAGS+= -pipe
COPTFLAGS+= -pipe

mp3 audio playing has been done using XMMS from KDE, and mocp/mpg321 from console. Audio has been played from regular user account.
xmms-1.2.11_2
moc-2.4.1_3
mpg321-0.2.10_7

My Internet connection is DSL line with 230KB/64KB speed. Panics occur then I fill up this channel with http download trafic. There is no firewall in kernel/modules loaded during tests.


/var/crash:

cat ./info.7
Dump header from device /dev/ad0s2b
  Architecture: i386
  Architecture Version: 2
  Dump Length: 65011712B (62 MB)
  Blocksize: 512
  Dumptime: Sat Mar 22 11:53:24 2008
  Hostname: hius.local.home
  Magic: FreeBSD Kernel Dump
  Version String: FreeBSD 7.0-RELEASE #0: Sat Mar 22 11:12:14 EET 2008
    root@hius.local.home:/usr/obj/usr/src/sys/GENERIC_COPY
  Panic String: sbflush_internal: cc 4294967230 || mb 0 || mbcnt 0
  Dump Parity: 2072778861
  Bounds: 7
  Dump Status: good

cat ./info.6
Dump header from device /dev/ad0s2b
  Architecture: i386
  Architecture Version: 2
  Dump Length: 121036800B (115 MB)
  Blocksize: 512
  Dumptime: Sat Mar 22 10:56:41 2008
  Hostname: hius.local.home
  Magic: FreeBSD Kernel Dump
  Version String: FreeBSD 7.0-RELEASE #0: Fri Mar 21 22:20:44 EET 2008
    root@hius.local.home:/usr/obj/usr/src/sys/GENERIC_COPY
  Panic String: sbflush_internal: cc 4294967230 || mb 0 || mbcnt 0
  Dump Parity: 2808929151
  Bounds: 6
  Dump Status: good

cat ./info.5
Dump header from device /dev/ad0s2b
  Architecture: i386
  Architecture Version: 2
  Dump Length: 65126400B (62 MB)
  Blocksize: 512
  Dumptime: Sat Mar 22 10:48:35 2008
  Hostname: hius.local.home
  Magic: FreeBSD Kernel Dump
  Version String: FreeBSD 7.0-RELEASE #0: Fri Mar 21 22:20:44 EET 2008
    root@hius.local.home:/usr/obj/usr/src/sys/GENERIC_COPY
  Panic String: sbflush_internal: cc 4294967230 || mb 0 || mbcnt 0
  Dump Parity: 2369916027
  Bounds: 5
  Dump Status: good
>How-To-Repeat:
1) Build/install GENERIC kernel with options:
options         DEVICE_POLLING
options         HZ="1000"

2) /boot/loader.conf
snd_emu10k1_load="YES"

3) ifconfig em0 polling

4) mpg321 ./some_nice_audio.mp3

5) fetch http://some.site.com/some_big_file
5) links net.apollo.lv/download_meter

>Fix:


>Release-Note:
>Audit-Trail:
>Unformatted:



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200803221214.m2MCEHTF087102>