KASSERT(ci->ci_ilevel < IPL_HIGH) failed when running a linux binary

[Arnaud Lacombe <lacombar%gmail.com@localhost>]

Hi *,

On a -current kernel from CVS of April 2nd, my machine is crashing on
following assertion:

KASSERT(ci->ci_ilevel < IPL_HIGH) in arch/x86/x86/pmap.c

It is fairly easy to reproduce: after a fresh reboot, while running
grep in background, starting a linux binary in a loop is enough
trigger the issue. Running the grep alone is fine. Running the
binary's loop and pure CPU load too. Starting the binary loop alone is
also fine, even after the grep pass. Starting the grep while the
binary loop is running trigger the issue within a couple of seconds.
If the desktop has more uptime, running the same binary once, without
much (apparent) load, is enough to crash the machine. About the latter
scenario, this is a (fairly certain) guess as I'm running X, but the
trigger is the same. Please note that I tested this with only a single
linux binary. dmesg(8) of an older previous kernel attached.

any idea ?

Thanks,
 - Arnaud

ps: I've not been able to get a core. The traceback trigger a fault.

ps2: I would have been happy to bissect that issue :(

multiboot: Information structure flags: 0x000003e7
multiboot: Boot loader: GNU GRUB 0.97
multiboot: Command line: /netbsd
multiboot: 635 KB lower memory, 3109568 KB upper memory
multiboot: Symbol table at 0xc075c8bc, length 364512 bytes
multiboot: String table at 0xc07b589c, length 365918 bytes
Copyright (c) 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005,
    2006, 2007, 2008, 2009
    The NetBSD Foundation, Inc.  All rights reserved.
Copyright (c) 1982, 1986, 1989, 1991, 1993
    The Regents of the University of California.  All rights reserved.

NetBSD 5.99.13 (GENERIC) #14: Sun Jun 21 22:34:42 EDT 2009
        al@nybbas:/nbsd/src/build/obj/sys/arch/i386/compile/GENERIC
total memory = 3037 MB
avail memory = 2977 MB
timecounter: Timecounters tick every 10.000 msec
timecounter: Timecounter "i8254" frequency 1193182 Hz quality 100
LENOVO.                        2743CTO (ThinkPad SL400)
mainbus0 (root)
cpu0 at mainbus0 apid 0: Intel 686-class, 1795MHz, id 0x6fd
cpu1 at mainbus0 apid 1: Intel 686-class, 1795MHz, id 0x6fd
ioapic0 at mainbus0 apid 2: pa 0xfec00000, version 20, 24 pins
acpi0 at mainbus0: Intel ACPICA 20080321
acpi0: X/RSDT: OemId <LENOVO,TP-6A   ,00000460>, AslId <MSFT,00000097>
acpiecdt0 at acpi0: ACPI Embedded Controller via ECDT
acpi0: SCI interrupting at int 9
acpi0: fixed-feature power button present
timecounter: Timecounter "ACPI-Fast" frequency 3579545 Hz quality 1000
ACPI-Fast 24-bit timer
attimer1 at acpi0 (TMR, PNP0100): io 0x40-0x43 irq 0
pckbc1 at acpi0 (PS2K, PNP0303) (kbd port): io 0x60,0x64 irq 1
pckbc2 at acpi0 (PS2M, LEN0013) (aux port): irq 12
pcppi1 at acpi0 (SPKR, PNP0800): io 0x61
midi0 at pcppi1: PC speaker (CPU-intensive output)
sysbeep0 at pcppi1
npx1 at acpi0 (COPR, PNP0C04): io 0xf0-0xff irq 13
npx1: reported by CPUID; using exception 16
hpet0 at acpi0 (HPET, PNP0103): mem 0xfed00000-0xfed003ff
timecounter: Timecounter "hpet0" frequency 14318179 Hz quality 2000
acpiec0 at acpi0 (EC0, PNP0C09): using acpiecdt0
HKEY (LEN0014) at acpi0 not configured
acpiacad0 at acpi0 (AC0, ACPI0003): ACPI AC Adapter
acpibat0 at acpi0 (BAT0, PNP0C0A-0): ACPI Battery (Control Method)
acpibat0: battery info: SANYO, LIon, 42T4513  
ATKD (ATK0101) at acpi0 not configured
acpibut0 at acpi0 (SLPB, PNP0C0E): ACPI Sleep Button
acpilid0 at acpi0 (LID, PNP0C0D): ACPI Lid Switch
acpitz0 at acpi0 (THRM): critical 110.0C passive 55.0C, passive cooling
apm0 at acpi0: Power Management spec V1.2
pckbd0 at pckbc1 (kbd slot)
pckbc1: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard
pms0 at pckbc1 (aux slot)
pms0: Synaptics touchpad version 7.0
pms0: Palm detect
pckbc1: using irq 12 for aux slot
wsmouse0 at pms0 mux 0
attimer1: attached to pcppi1
pci0 at mainbus0 bus 0: configuration mode 1
pci0: i/o space, memory space enabled, rd/line, rd/mult, wr/inv ok
pchb0 at pci0 dev 0 function 0
pchb0: Intel 82GM45 Host Bridge (rev. 0x07)
agp0 at pchb0: detected 32764k stolen memory
agp0: aperture at 0xd0000000, size 0x10000000
vga0 at pci0 dev 2 function 0: Intel 82GM45 Integrated Graphics Device (rev. 
0x07)
vga0: WARNING: ignoring 64-bit BAR @ 0x10
vga0: WARNING: ignoring 64-bit BAR @ 0x18
wsdisplay0 at vga0 kbdmux 1: console (80x25, vt100 emulation), using wskbd0
wsmux1: connecting to wsdisplay0
drm at vga0 not configured
Intel 82GM45 Integrated Graphics Device (miscellaneous display, revision 0x07) 
at pci0 dev 2 function 1 not configured
uhci0 at pci0 dev 26 function 0: Intel 82801I USB UHCI Controller (rev. 0x03)
uhci0: interrupting at ioapic0 pin 16
usb0 at uhci0: USB revision 1.0
uhci1 at pci0 dev 26 function 1: Intel 82801I USB UHCI Controller (rev. 0x03)
uhci1: interrupting at ioapic0 pin 21
usb1 at uhci1: USB revision 1.0
uhci2 at pci0 dev 26 function 2: Intel 82801I USB UHCI Controller (rev. 0x03)
uhci2: interrupting at ioapic0 pin 19
usb2 at uhci2: USB revision 1.0
ehci0 at pci0 dev 26 function 7: Intel 82801I USB EHCI Controller (rev. 0x03)
ehci0: interrupting at ioapic0 pin 18
ehci0: EHCI version 1.0
ehci0: companion controllers, 2 ports each: uhci0 uhci1 uhci2
usb3 at ehci0: USB revision 2.0
azalia0 at pci0 dev 27 function 0: Generic High Definition Audio Controller
azalia0: interrupting at ioapic0 pin 22
azalia0: host: Intel 82801I High Definition Audio Controller (rev. 3), HDA rev. 
1.0
ppb0 at pci0 dev 28 function 0: Intel 82801I PCI Express Port #1 (rev. 0x03)
pci1 at ppb0 bus 1
pci1: no spaces enabled!
ppb1 at pci0 dev 28 function 1: Intel 82801I PCI Express Port #2 (rev. 0x03)
pci2 at ppb1 bus 2
pci2: memory space enabled, rd/line, wr/inv ok
ath0 at pci2 dev 0 function 0
ath0: interrupting at ioapic0 pin 17
ath0: 11b rates: 1Mbps 2Mbps 5.5Mbps 11Mbps
ath0: 11g rates: 1Mbps 2Mbps 5.5Mbps 11Mbps 6Mbps 9Mbps 12Mbps 18Mbps 24Mbps 
36Mbps 48Mbps 54Mbps
ath0: mac 14.2 phy 7.0 radio 10.2
ppb2 at pci0 dev 28 function 2: Intel 82801I PCI Express Port #3 (rev. 0x03)
ppb2: disabling notification events
pci3 at ppb2 bus 3
pci3: i/o space, memory space enabled, rd/line, wr/inv ok
ppb3 at pci0 dev 28 function 3: Intel 82801I PCI Express Port #4 (rev. 0x03)
pci4 at ppb3 bus 12
pci4: i/o space, memory space enabled, rd/line, wr/inv ok
re0 at pci4 dev 0 function 0: RealTek 8168/8111 PCIe Gigabit Ethernet (rev. 
0x02)
re0: interrupting at ioapic0 pin 19
re0: Ethernet address 00:22:15:b1:4b:2b
re0: using 256 tx descriptors
rgephy0 at re0 phy 7: RTL8169S/8110S/8211 1000BASE-T media interface, rev. 2
rgephy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 
1000baseT-FDX, auto
uhci3 at pci0 dev 29 function 0: Intel 82801I USB UHCI Controller (rev. 0x03)
uhci3: interrupting at ioapic0 pin 23
usb4 at uhci3: USB revision 1.0
uhci4 at pci0 dev 29 function 1: Intel 82801I USB UHCI Controller (rev. 0x03)
uhci4: interrupting at ioapic0 pin 19
usb5 at uhci4: USB revision 1.0
uhci5 at pci0 dev 29 function 2: Intel 82801I USB UHCI Controller (rev. 0x03)
uhci5: interrupting at ioapic0 pin 18
usb6 at uhci5: USB revision 1.0
ehci1 at pci0 dev 29 function 7: Intel 82801I USB EHCI Controller (rev. 0x03)
ehci1: interrupting at ioapic0 pin 23
ehci1: EHCI version 1.0
ehci1: companion controllers, 2 ports each: uhci3 uhci4 uhci5
usb7 at ehci1: USB revision 2.0
ppb4 at pci0 dev 30 function 0: Intel 82801BAM Hub-PCI Bridge (rev. 0x93)
pci5 at ppb4 bus 13
pci5: memory space enabled
fwohci0 at pci5 dev 0 function 0: Ricoh 5C832 PCI-SD/MMC/MMC+/MS/xD/Firewire 
(rev. 0x05)
fwohci0: interrupting at ioapic0 pin 16
fwohci0: OHCI version 1.0 (ROM=0)
fwohci0: No. of Isochronous channels is 4.
fwohci0: EUI64 00:06:1b:00:00:82:09:21
fwohci0: Phy 1394a available S400, 1 ports.
fwohci0: Link S400, max_rec 2048 bytes.
ieee1394if0 at fwohci0: IEEE1394 bus
fwip0 at ieee1394if0: IP over IEEE1394
fwohci0: Initiate bus reset
sdhc0 at pci5 dev 0 function 1: Ricoh 5C822 PCI-CardBus Bridge/MS/SD/MMC/SC 
(rev. 0x22)
sdhc0: interrupting at ioapic0 pin 17
sdmmc0 at sdhc0
Ricoh 5C843 PCI-CardBus Bridge/SD/MMC/MMC+/MS/xD/Firewire (miscellaneous 
system, revision 0x12) at pci5 dev 0 function 2 not configured
Ricoh 5C592 PCI-CardBus Bridge/MS/SD/Firewire (miscellaneous system, revision 
0x12) at pci5 dev 0 function 3 not configured
Ricoh xD-Picture Card Controller (miscellaneous system, revision 0x12) at pci5 
dev 0 function 4 not configured
pcib0 at pci0 dev 31 function 0
pcib0: Intel 82801IM LPC Interface Bridge (rev. 0x03)
ahcisata0 at pci0 dev 31 function 2: Intel 82801I Mobile AHCI SATA Controller 
with 4 ports
ahcisata0: interrupting at ioapic0 pin 19
ahcisata0: AHCI revision 1.2, 4 ports, 32 command slots, features 0xef20e0e0
atabus0 at ahcisata0 channel 0
atabus1 at ahcisata0 channel 1
atabus2 at ahcisata0 channel 4
atabus3 at ahcisata0 channel 5
isa0 at pcib0
fwohci0: BUS reset
fwohci0: node_id=0xc800ffc0, gen=1, CYCLEMASTER mode
ieee1394if0: 1 nodes, maxhop <= 0, cable IRM = 0 (me)
ieee1394if0: bus manager 0 (me)
timecounter: Timecounter "clockinterrupt" frequency 100 Hz quality 0
timecounter: Timecounter "TSC" frequency 1795596750 Hz quality 3000
acpiacad0: AC adapter online.
azalia0: codec[0]: 0x14f1/0x5051 (rev. 0.0), HDA rev. 1.0
azalia0: codec[2]: 0x8086/0x2802 (rev. 0.0), HDA rev. 1.0
audio0 at azalia0: full duplex, independent
uhub0 at usb0: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
uhub1 at usb1: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub1: 2 ports with 2 removable, self powered
uhub2 at usb2: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub2: 2 ports with 2 removable, self powered
uhub3 at usb3: Intel EHCI root hub, class 9/0, rev 2.00/1.00, addr 1
uhub3: 6 ports with 6 removable, self powered
uhub4 at usb4: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub4: 2 ports with 2 removable, self powered
uhub5 at usb5: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub5: 2 ports with 2 removable, self powered
uhub6 at usb6: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub6: 2 ports with 2 removable, self powered
uhub7 at usb7: Intel EHCI root hub, class 9/0, rev 2.00/1.00, addr 1
uhub7: 6 ports with 6 removable, self powered
ahcisata0 port 0: device present, speed: 1.5Gb/s
ahcisata0 port 1: device present, speed: 1.5Gb/s
wd0 at atabus0 drive 0: <HITACHI HTS542580K9SA00>
wd0: drive supports 16-sector PIO transfers, LBA48 addressing
wd0: 76319 MB, 155061 cyl, 16 head, 63 sec, 512 bytes/sect x 156301488 sectors
wd0: drive supports PIO mode 4, DMA mode 2, Ultra-DMA mode 6 (Ultra/133)
wd0(ahcisata0:0:0): using PIO mode 4, DMA mode 2, Ultra-DMA mode 6 (Ultra/133) 
(using DMA)
atapibus0 at atabus1: 1 targets
cd0 at atapibus0 drive 0: <DVD/CDRW UJDA782, HE46  001488, VB23> cdrom removable
cd0: drive supports PIO mode 4, DMA mode 2, Ultra-DMA mode 2 (Ultra/33)
cd0(ahcisata0:1:0): using PIO mode 4, DMA mode 2, Ultra-DMA mode 2 (Ultra/33) 
(using DMA)
Kernelized RAIDframe activated
pad0: outputs: 44100Hz, 16-bit, stereo
audio1 at pad0: half duplex
boot device: wd0
root on wd0a dumps on wd0b
mountroot: trying udf...
mountroot: trying nfs...
mountroot: trying msdos...
mountroot: trying lfs...
mountroot: trying ext2fs...
mountroot: trying ffs...
root file system type: ffs
init: copying out path `/sbin/init' 11
wsdisplay0: screen 1 added (80x25, vt100 emulation)
wsdisplay0: screen 2 added (80x25, vt100 emulation)
wsdisplay0: screen 3 added (80x25, vt100 emulation)
wsdisplay0: screen 4 added (80x25, vt100 emulation)
ath0: device timeout (txq 1, txintrperiod 5)
ath0: device timeout (txq 1, txintrperiod 4)
ath0: device timeout (txq 1, txintrperiod 3)
ath0: device timeout (txq 1, txintrperiod 2)