kern/49968: ixg(4) related panic on Dom0

[Hauke Fath <hf%spg.tu-darmstadt.de@localhost>]

>Number:         49968
>Category:       kern
>Synopsis:       ixg(4) related panic on Dom0
>Confidential:   no
>Severity:       critical
>Priority:       high
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Fri Jun 12 16:05:00 +0000 2015
>Originator:     Hauke Fath
>Release:        NetBSD 7.0_BETA
>Organization:
	
>Environment:
	
	
System: NetBSD Feuerkogel 7.0_BETA NetBSD 7.0_BETA (FEUERKOGEL_DOM0-$Revision$) #0: Fri Jun 12 16:49:04 CEST 2015 hf@Hochstuhl:/var/obj/netbsd-builds/7/amd64/sys/arch/amd64/compile/FEUERKOGEL_DOM0 amd64
Architecture: x86_64
Machine: amd64
>Description:

	On the above machine, a Dom0 kernel configured with 

ixg* at pci? dev ? function ?  # Intel 10 GbE NIC

	panics during autoconfiguration.

[...]
pci4 at ppb3 bus 4
ixg0 at pci4 dev 0 function 0: Intel(R) PRO/10GbE PCI-Express Network Driver, Version - 2.5.8 - HEAD
ixg0: clearing prefetchable bit
ixg0: Unable to create TX DMA map (12)
ixg0: Critical Failure setting up transmit buffers
uvm_fault(0xffffffff80c56360, 0x0, 1) -> e
fatal page fault in supervisor mode
trap type 6 code 0 rip ffffffff8024a9f5 cs e030 rflags 10246 cr2 4 ilevel 8 rsp ffffffff81024660
curlwp 0xffffffff80c0c780 pid 0.1 lowest kstack 0xffffffff810222c0
kernel: page fault trap, code=0
Stopped in pid 0.1 (system) at  netbsd:pirq_disestablish+0x8:   movl    4(%rdi),
%edi
pirq_disestablish() at netbsd:pirq_disestablish+0x8
ixgbe_free_pci_resourccccces() at netbsd:ixgbe_free_pci_resources+0x1b
ixgbe_attach() at netbsd:ixgbe_attach+0x4c4
config_attach_loc() at netbsd:config_attach_loc+0x16e
pci_probe_device() at netbsd:pci_probe_device+0x4ac
pci_enumerate_bus() at netbsd:pci_enumerate_bus+0x168
pcirescan() at netbsd:pcirescan+0x1c
pciattach() at netbsd:pciattach+0x193
config_attach_loc() at netbsd:config_attach_loc+0x16e
ppbattach() at netbsd:ppbattach+0x10a
config_attach_loc() at netbsd:config_attach_loc+0x16e
pci_probe_device() at netbsd:pci_probe_device+0x4ac
pci_enumerate_bus() at netbsd:pci_enumerate_bus+0x168
pcirescan() at netbsd:pcirescan+0x1c
pciattach() at netbsd:pciattach+0x193
config_attach_loc() at netbsd:config_attach_loc+0x16e
mp_pci_scan() at netbsd:mp_pci_scan+0xa4
hypervisor_attach() at netbsd:hypervisor_attach+0x186
config_attach_loc() at netbsd:config_attach_loc+0x16e
mainbus_attach() at netbsd:mainbus_attach+0xbf
config_attach_loc() at netbsd:config_attach_loc+0x16e
cpu_configure() at netbsd:cpu_configure+0x21
main() at netbsd:main+0x2a3
ds          3900
es          ec00
fs          0
gs          37d5
rdi         0
rsi         0
rbp         ffffffff81024668
rbx         0
rdx         1
rcx         ffffa00000e33900
rax         ffffffff80bac440    cpu_info_primary
r8          ffffa00001e59c20
r9          ffffa00000e33900
r10         7ff0
r11         73
r12         ffffa00001046008
r13         ffffa00000eba000
r14         ffffa00001f6b4a0
r15         586
rip         ffffffff8024a9f5    pirq_disestablish+0x8
cs          e030
rflags      10246
rsp         ffffffff81024660
ss          e02b
netbsd:pirq_disestablish+0x8:   movl    4(%rdi),%edi
db> t
pirq_disestablish() at netbsd:pirq_disestablish+0x8
ixgbe_free_pci_resources() at netbsd:ixgbe_free_pci_resources+0x1b
ixgbe_attach() at netbsd:ixgbe_attach+0x4c4
config_attach_loc() at netbsd:config_attach_loc+0x16e
pci_probe_device() at netbsd:pci_probe_device+0x4ac
pci_enumerate_bus() at netbsd:pci_enumerate_bus+0x168
pcirescan() at netbsd:pcirescan+0x1c
pciattach() at netbsd:pciattach+0x193
config_attach_loc() at netbsd:config_attach_loc+0x16e
ppbattach() at netbsd:ppbattach+0x10a
config_attach_loc() at netbsd:config_attach_loc+0x16e
pci_probe_device() at netbsd:pci_probe_device+0x4ac
pci_enumerate_bus() at netbsd:pci_enumerate_bus+0x168
pcirescan() at netbsd:pcirescan+0x1c
pciattach() at netbsd:pciattach+0x193
config_attach_loc() at netbsd:config_attach_loc+0x16e
mp_pci_scan() at netbsd:mp_pci_scan+0xa4
hypervisor_attach() at netbsd:hypervisor_attach+0x186
config_attach_loc() at netbsd:config_attach_loc+0x16e
mainbus_attach() at netbsd:mainbus_attach+0xbf
config_attach_loc() attttt netbsd:config_attach_loc+0x16e
cpu_configure() at netbsd:cpu_configure+0x21
main() at netbsd:main+0x2a3
db> 

	Interesting enough, with a GENERIC kernel, the interface
	configures properly

[...]
pci4 at ppb3 bus 4
ixg0 at pci4 dev 0 function 0: Intel(R) PRO/10GbE PCI-Express Network Driver, Version - 2.5.8 - HEAD
ixg0: clearing prefetchable bit
ixg0: interrupting at ioapic1 pin 8
ixg0: PCI Express Bus: Speed 5.0Gb/s Width x8
[...]

	and shows up in ifconfig output. In both cases, the interface
	was unplugged,

	
>How-To-Repeat:

	Augment a xen dom0 kernel config with 

ixg* at pci? dev ? function ?  # Intel 10 GbE NIC

	and watch it panic.

	
>Fix:

	Yes, please.
	

>Unformatted: