From owner-freebsd-bugs@FreeBSD.ORG Sat Mar 22 12:20:01 2008 Return-Path: Delivered-To: freebsd-bugs@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 6E3AE106566C for ; Sat, 22 Mar 2008 12:20:01 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 4EB1C8FC1A for ; Sat, 22 Mar 2008 12:20:01 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.2/8.14.2) with ESMTP id m2MCK14F007458 for ; Sat, 22 Mar 2008 12:20:01 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.2/8.14.1/Submit) id m2MCK13B007457; Sat, 22 Mar 2008 12:20:01 GMT (envelope-from gnats) Resent-Date: Sat, 22 Mar 2008 12:20:01 GMT Resent-Message-Id: <200803221220.m2MCK13B007457@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, Dmitry Demidov Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id DC8DF106566B for ; Sat, 22 Mar 2008 12:14:23 +0000 (UTC) (envelope-from nobody@FreeBSD.org) Received: from www.freebsd.org (www.freebsd.org [IPv6:2001:4f8:fff6::21]) by mx1.freebsd.org (Postfix) with ESMTP id CE7FC8FC21 for ; Sat, 22 Mar 2008 12:14:23 +0000 (UTC) (envelope-from nobody@FreeBSD.org) Received: from www.freebsd.org (localhost [127.0.0.1]) by www.freebsd.org (8.14.2/8.14.2) with ESMTP id m2MCEH9K087103 for ; Sat, 22 Mar 2008 12:14:17 GMT (envelope-from nobody@www.freebsd.org) Received: (from nobody@localhost) by www.freebsd.org (8.14.2/8.14.1/Submit) id m2MCEHTF087102; Sat, 22 Mar 2008 12:14:17 GMT (envelope-from nobody) Message-Id: <200803221214.m2MCEHTF087102@www.freebsd.org> Date: Sat, 22 Mar 2008 12:14:17 GMT From: Dmitry Demidov To: freebsd-gnats-submit@FreeBSD.org X-Send-Pr-Version: www-3.1 Cc: Subject: kern/121962: Kernel panics with device polling and snd_emu10k1.ko enabled and network load X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 22 Mar 2008 12:20:01 -0000 >Number: 121962 >Category: kern >Synopsis: Kernel panics with device polling and snd_emu10k1.ko enabled and network load >Confidential: no >Severity: non-critical >Priority: medium >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Sat Mar 22 12:20:00 UTC 2008 >Closed-Date: >Last-Modified: >Originator: Dmitry Demidov >Release: 7.0-RELEASE FreeBSD 7.0-RELEASE #0 >Organization: >Environment: uname -a: FreeBSD hius.local.home 7.0-RELEASE FreeBSD 7.0-RELEASE #0: Sat Mar 22 12:08:01 EET 2008 root@hius.local.home:/usr/obj/usr/src/sys/HIUS i386 --- dmesg Copyright (c) 1992-2008 The FreeBSD Project. Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 The Regents of the University of California. All rights reserved. FreeBSD is a registered trademark of The FreeBSD Foundation. FreeBSD 7.0-RELEASE #0: Sat Mar 22 12:08:01 EET 2008 root@hius.local.home:/usr/obj/usr/src/sys/HIUS Timecounter "i8254" frequency 1193182 Hz quality 0 CPU: Intel(R) Pentium(R) 4 CPU 2.53GHz (2545.58-MHz 686-class CPU) Origin = "GenuineIntel" Id = 0xf27 Stepping = 7 Features=0xbfebfbff Features2=0x400 real memory = 1073676288 (1023 MB) avail memory = 1037107200 (989 MB) ACPI APIC Table: ioapic0 irqs 0-23 on motherboard kbd1 at kbdmux0 acpi0: on motherboard acpi0: [ITHREAD] acpi0: Power Button (fixed) Timecounter "ACPI-fast" frequency 3579545 Hz quality 1000 acpi_timer0: <24-bit timer at 3.579545MHz> port 0x4008-0x400b on acpi0 cpu0: on acpi0 p4tcc0: on cpu0 acpi_button0: on acpi0 acpi_button1: on acpi0 pcib0: port 0xcf8-0xcff,0x4000-0x40bf on acpi0 pci0: on pcib0 agp0: on hostb0 pcib1: at device 1.0 on pci0 pci1: on pcib1 nvidia0: mem 0xd8000000-0xd8ffffff,0xd0000000-0xd7ffffff irq 16 at device 0.0 on pci1 nvidia0: [GIANT-LOCKED] nvidia0: [ITHREAD] uhci0: port 0xb800-0xb81f irq 16 at device 29.0 on pci0 uhci0: [GIANT-LOCKED] uhci0: [ITHREAD] usb0: on uhci0 usb0: USB revision 1.0 uhub0: on usb0 uhub0: 2 ports with 2 removable, self powered uhci1: port 0xb000-0xb01f irq 19 at device 29.1 on pci0 uhci1: [GIANT-LOCKED] uhci1: [ITHREAD] usb1: on uhci1 usb1: USB revision 1.0 uhub1: on usb1 uhub1: 2 ports with 2 removable, self powered uhci2: port 0xb400-0xb41f irq 18 at device 29.2 on pci0 uhci2: [GIANT-LOCKED] uhci2: [ITHREAD] usb2: on uhci2 usb2: USB revision 1.0 uhub2: on usb2 uhub2: 2 ports with 2 removable, self powered ehci0: mem 0xdc100000-0xdc1003ff irq 23 at device 29.7 on pci0 ehci0: [GIANT-LOCKED] ehci0: [ITHREAD] usb3: EHCI version 1.0 usb3: companion controllers, 2 ports each: usb0 usb1 usb2 usb3: on ehci0 usb3: USB revision 2.0 uhub3: on usb3 uhub3: 6 ports with 6 removable, self powered pcib2: at device 30.0 on pci0 pci2: on pcib2 pcm0: port 0x9000-0x901f irq 21 at device 1.0 on pci2 pcm0: pcm0: [ITHREAD] fxp0: port 0x9800-0x981f mem 0xdc000000-0xdc000fff,0xdb000000-0xdb0fffff irq 22 at device 2.0 on pci2 miibus0: on fxp0 inphy0: PHY 1 on miibus0 inphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto fxp0: Ethernet address: 00:90:27:1a:c5:a3 fxp0: [ITHREAD] fwohci0: port 0x9c00-0x9c7f mem 0xdb120000-0xdb1207ff irq 16 at device 7.0 on pci2 fwohci0: [FILTER] fwohci0: OHCI version 1.0 (ROM=1) fwohci0: No. of Isochronous channels is 8. fwohci0: EUI64 00:00:20:ed:00:77:6d:65 fwohci0: Phy 1394a available S400, 3 ports. fwohci0: Link S400, max_rec 2048 bytes. firewire0: on fwohci0 fwe0: on firewire0 if_fwe0: Fake Ethernet address: 02:00:20:77:6d:65 fwe0: Ethernet address: 02:00:20:77:6d:65 fwip0: on firewire0 fwip0: Firewire address: 00:00:20:ed:00:77:6d:65 @ 0xfffe00000000, S400, maxrec 2048 dcons_crom0: on firewire0 dcons_crom0: bus_addr 0x1370000 sbp0: on firewire0 fwohci0: Initiate bus reset fwohci0: BUS reset fwohci0: node_id=0xc800ffc0, gen=1, CYCLEMASTER mode em0: port 0xa000-0xa03f mem 0xdb100000-0xdb11ffff irq 21 at device 9.0 on pci2 em0: Ethernet address: 00:20:ed:33:35:13 em0: [FILTER] isab0: at device 31.0 on pci0 isa0: on isab0 atapci0: port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xf000-0xf00f at device 31.1 on pci0 ata0: on atapci0 ata0: [ITHREAD] ata1: on atapci0 ata1: [ITHREAD] pci0: at device 31.3 (no driver attached) fdc0: port 0x3f0-0x3f5,0x3f7 irq 6 drq 2 on acpi0 fdc0: [FILTER] fd0: <1440-KB 3.5" drive> on fdc0 drive 0 sio0: <16550A-compatible COM port> port 0x3f8-0x3ff irq 4 flags 0x10 on acpi0 sio0: type 16550A sio0: [FILTER] sio1: port 0x2f8-0x2ff irq 3 on acpi0 sio1: type 16550A sio1: [FILTER] atkbdc0: port 0x60,0x64 irq 1 on acpi0 atkbd0: irq 1 on atkbdc0 kbd0 at atkbd0 atkbd0: [GIANT-LOCKED] atkbd0: [ITHREAD] pmtimer0 on isa0 orm0: at iomem 0xd0000-0xd7fff pnpid ORM0000 on isa0 ppc0: at port 0x378-0x37f irq 7 on isa0 ppc0: SMC-like chipset (ECP/EPP/PS2/NIBBLE) in COMPATIBLE mode ppc0: FIFO with 16/16/16 bytes threshold ppbus0: on ppc0 ppbus0: [ITHREAD] plip0: on ppbus0 lpt0: on ppbus0 lpt0: Interrupt-driven port ppi0: on ppbus0 ppc0: [GIANT-LOCKED] ppc0: [ITHREAD] sc0: at flags 0x100 on isa0 sc0: VGA <16 virtual consoles, flags=0x300> vga0: at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0 ugen0: on uhub0 ums0: on uhub2 ums0: 3 buttons and Z dir. Timecounter "TSC" frequency 2545584048 Hz quality 800 Timecounters tick every 1.000 msec ipfw2 initialized, divert loadable, rule-based forwarding disabled, default to deny, logging limited to 10 packets/entry by default firewire0: 1 nodes, maxhop <= 0, cable IRM = 0 (me) firewire0: bus manager 0 (me) ad0: 114498MB at ata0-master UDMA100 acd0: DVDR at ata1-master UDMA66 ad3: 19130MB at ata1-slave UDMA33 cd0 at ata1 bus 0 target 0 lun 0 cd0: Removable CD-ROM SCSI-0 device cd0: 66.000MB/s transfers Trying to mount root from ufs:/dev/ad0s2a >Description: I met 100% reproducible kernel panic when DEVICE_POLLING is enabled and sound sustem is active. If I enable polling for my em0 using ifconfig/rc.conf, start playing audio, and in parallel, start to download some stuff with full speed of my internet connection - there is always the same result - kernel panics. All this conditions (polling+audio+download) should be achieved in one time to generate panic. My sound card is SB Live and I use snd_emu10k1 driver (compiled in or loaded as module). To test this problem, I have builded GENERIC kernel with this set of options: options DEVICE_POLLING options HZ="1000" kldstat: Id Refs Address Size Name 1 10 0xc0400000 b51968 kernel 2 1 0xc0f52000 85a4 snd_emu10k1.ko 3 3 0xc0f5b000 4836c sound.ko 4 1 0xc0fa4000 6722c acpi.ko 5 1 0xc4b31000 2000 rtc.ko 6 1 0xc4b33000 21000 linux.ko my make.conf is: PERL_VER=5.8.8 PERL_VERSION=5.8.8 CPUTYPE=pentium4 CFLAGS+= -pipe COPTFLAGS+= -pipe mp3 audio playing has been done using XMMS from KDE, and mocp/mpg321 from console. Audio has been played from regular user account. xmms-1.2.11_2 moc-2.4.1_3 mpg321-0.2.10_7 My Internet connection is DSL line with 230KB/64KB speed. Panics occur then I fill up this channel with http download trafic. There is no firewall in kernel/modules loaded during tests. /var/crash: cat ./info.7 Dump header from device /dev/ad0s2b Architecture: i386 Architecture Version: 2 Dump Length: 65011712B (62 MB) Blocksize: 512 Dumptime: Sat Mar 22 11:53:24 2008 Hostname: hius.local.home Magic: FreeBSD Kernel Dump Version String: FreeBSD 7.0-RELEASE #0: Sat Mar 22 11:12:14 EET 2008 root@hius.local.home:/usr/obj/usr/src/sys/GENERIC_COPY Panic String: sbflush_internal: cc 4294967230 || mb 0 || mbcnt 0 Dump Parity: 2072778861 Bounds: 7 Dump Status: good cat ./info.6 Dump header from device /dev/ad0s2b Architecture: i386 Architecture Version: 2 Dump Length: 121036800B (115 MB) Blocksize: 512 Dumptime: Sat Mar 22 10:56:41 2008 Hostname: hius.local.home Magic: FreeBSD Kernel Dump Version String: FreeBSD 7.0-RELEASE #0: Fri Mar 21 22:20:44 EET 2008 root@hius.local.home:/usr/obj/usr/src/sys/GENERIC_COPY Panic String: sbflush_internal: cc 4294967230 || mb 0 || mbcnt 0 Dump Parity: 2808929151 Bounds: 6 Dump Status: good cat ./info.5 Dump header from device /dev/ad0s2b Architecture: i386 Architecture Version: 2 Dump Length: 65126400B (62 MB) Blocksize: 512 Dumptime: Sat Mar 22 10:48:35 2008 Hostname: hius.local.home Magic: FreeBSD Kernel Dump Version String: FreeBSD 7.0-RELEASE #0: Fri Mar 21 22:20:44 EET 2008 root@hius.local.home:/usr/obj/usr/src/sys/GENERIC_COPY Panic String: sbflush_internal: cc 4294967230 || mb 0 || mbcnt 0 Dump Parity: 2369916027 Bounds: 5 Dump Status: good >How-To-Repeat: 1) Build/install GENERIC kernel with options: options DEVICE_POLLING options HZ="1000" 2) /boot/loader.conf snd_emu10k1_load="YES" 3) ifconfig em0 polling 4) mpg321 ./some_nice_audio.mp3 5) fetch http://some.site.com/some_big_file 5) links net.apollo.lv/download_meter >Fix: >Release-Note: >Audit-Trail: >Unformatted: