kern/51577: 7.99.40 (and older) i386 kernels freeze when nouveau is enabled

[dhgutteridge%sympatico.ca@localhost]

>Number:         51577
>Category:       kern
>Synopsis:       7.99.40 (and older) i386 kernels freeze when nouveau is enabled
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Tue Oct 25 20:30:00 +0000 2016
>Originator:     David H. Gutteridge
>Release:        NetBSD 7.99.40 (GENERIC.201610250000Z)
>Organization:
>Environment:
As above, off a releng build from earlier today.
>Description:
When attempting to boot an i386 GENERIC kernel from HEAD (7.99.39 or
7.99.40), I consistently get a hang when the nouveau driver tries to
attach. I'm not able to get a ddb prompt; I have to power the machine
off to get out of it.

I tried building a kernel with DEBUG enabled, and this made no
difference. No additional output was generated when it hangs.

The dmesg looks like:

total memory = 511 MB
avail memory = 483 MB
timecounter: Timecounters tick every 10.000 msec
Kernelized RAIDframe activated
timecounter: Timecounter "i8254" frequency 1193182 Hz quality 100
MICRO-STAR INTERNATIONAL CO., LTD AMD761/VIA686 ( )
mainbus0 (root)
ACPI: RSDP 0x00000000000F7330 000014 (v00 761686)
ACPI: RSDT 0x000000001FFF3000 000028 (v01 761686 MSI ACPI 42302E31 AWRD 00000000)
ACPI: FACP 0x000000001FFF3040 000074 (v01 761686 MSI ACPI 42302E31 AWRD 00000000)
ACPI: DSDT 0x000000001FFF30C0 0023FD (v01 761686 AWRDACPI 00001000 MSFT 0100000C)
ACPI: FACS 0x000000001FFF0000 000040
ACPI: 1 ACPI AML tables successfully acquired and loaded

cpu0 at mainbus0
cpu0: AMD Athlon(tm) Processor, id 0x644
acpi0 at mainbus0: Intel ACPICA 20160527
acpi0: X/RSDT: OemId <761686,MSI ACPI,42302e31>, AslId <AWRD,00000000>
LNKC: ACPI: Found matching pin for 0.11.INTA at func 0: 11
LNKA: ACPI: Found matching pin for 0.13.INTA at func 0: 5
LNKD: ACPI: Found matching pin for 0.7.INTD at func 2: 11
acpi0: SCI interrupting at int 9
timecounter: Timecounter "ACPI-Fast" frequency 3579545 Hz quality 1000
acpibut0 at acpi0 (PWRB, PNP0C0C): ACPI Power Button
acpibut1 at acpi0 (SLPB, PNP0C0E): ACPI Sleep Button
MEM (PNP0C01) at acpi0 not configured
SYSR (PNP0C02) at acpi0 not configured
attimer1 at acpi0 (TMR, PNP0100): io 0x40-0x43 irq 0
pcppi1 at acpi0 (SPKR, PNP0800): io 0x61
midi0 at pcppi1: PC speaker
sysbeep0 at pcppi1
COPR (PNP0C04) at acpi0 not configured
FDC0 (PNP0700) at acpi0 not configured
UAR1 (PNP0501) at acpi0 not configured
UAR2 (PNP0501) at acpi0 not configured
LPT1 (PNP0400) at acpi0 not configured
pckbc1 at acpi0 (PS2M, PNP0F13) (aux port): irq 12
pckbc2 at acpi0 (PS2K, PNP0303) (kbd port): io 0x60,0x64 irq 1
apm0 at acpi0: Power Management spec V1.2
attimer1: attached to pcppi1
pckbd0 at pckbc2 (kbd slot)
pckbc2: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard
pms0 at pckbc2 (aux slot)
pckbc2: using irq 12 for aux slot
wsmouse0 at pms0 mux 0
pci0 at mainbus0 bus 0: configuration mode 1
pci0: This pci host supports neither MSI nor MSI-X.
pci0: i/o space, memory space enabled, rd/line, rd/mult, wr/inv ok
pchb0 at pci0 dev 0 function 0: vendor 1022 product 700e (rev. 0x13)
agp0 at pchb0: aperture at 0xd0000000, size 0x8000000
ppb0 at pci0 dev 1 function 0: vendor 1022 product 700f (rev. 0x00)
pci1 at ppb0 bus 1
nouveau0 at pci1 dev 5 function 0: vendor 10de product 0110 (rev. 0xb2)

At which point dmesg output stops and the machine is frozen.

Full dmesg generated after disabling nouveau via the bootloader:

NetBSD 7.99.40 (GENERIC.201610250000Z)
total memory = 511 MB
avail memory = 483 MB
timecounter: Timecounters tick every 10.000 msec
Kernelized RAIDframe activated
[429] nouveau* disabled
timecounter: Timecounter "i8254" frequency 1193182 Hz quality 100
MICRO-STAR INTERNATIONAL CO., LTD AMD761/VIA686 ( )
mainbus0 (root)
ACPI: RSDP 0x00000000000F7330 000014 (v00 761686)
ACPI: RSDT 0x000000001FFF3000 000028 (v01 761686 MSI ACPI 42302E31 AWRD 00000000)
ACPI: FACP 0x000000001FFF3040 000074 (v01 761686 MSI ACPI 42302E31 AWRD 00000000)
ACPI: DSDT 0x000000001FFF30C0 0023FD (v01 761686 AWRDACPI 00001000 MSFT 0100000C)
ACPI: FACS 0x000000001FFF0000 000040
ACPI: 1 ACPI AML tables successfully acquired and loaded

cpu0 at mainbus0
cpu0: AMD Athlon(tm) Processor, id 0x644
acpi0 at mainbus0: Intel ACPICA 20160527
acpi0: X/RSDT: OemId <761686,MSI ACPI,42302e31>, AslId <AWRD,00000000>
LNKC: ACPI: Found matching pin for 0.11.INTA at func 0: 11
LNKA: ACPI: Found matching pin for 0.13.INTA at func 0: 5
LNKD: ACPI: Found matching pin for 0.7.INTD at func 2: 11
acpi0: SCI interrupting at int 9
timecounter: Timecounter "ACPI-Fast" frequency 3579545 Hz quality 1000
acpibut0 at acpi0 (PWRB, PNP0C0C): ACPI Power Button
acpibut1 at acpi0 (SLPB, PNP0C0E): ACPI Sleep Button
MEM (PNP0C01) at acpi0 not configured
SYSR (PNP0C02) at acpi0 not configured
attimer1 at acpi0 (TMR, PNP0100): io 0x40-0x43 irq 0
pcppi1 at acpi0 (SPKR, PNP0800): io 0x61
midi0 at pcppi1: PC speaker
sysbeep0 at pcppi1
COPR (PNP0C04) at acpi0 not configured
FDC0 (PNP0700) at acpi0 not configured
UAR1 (PNP0501) at acpi0 not configured
UAR2 (PNP0501) at acpi0 not configured
LPT1 (PNP0400) at acpi0 not configured
pckbc1 at acpi0 (PS2M, PNP0F13) (aux port): irq 12
pckbc2 at acpi0 (PS2K, PNP0303) (kbd port): io 0x60,0x64 irq 1
apm0 at acpi0: Power Management spec V1.2
attimer1: attached to pcppi1
pckbd0 at pckbc2 (kbd slot)
pckbc2: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard
pms0 at pckbc2 (aux slot)
pckbc2: using irq 12 for aux slot
wsmouse0 at pms0 mux 0
pci0 at mainbus0 bus 0: configuration mode 1
pci0: This pci host supports neither MSI nor MSI-X.
pci0: i/o space, memory space enabled, rd/line, rd/mult, wr/inv ok
pchb0 at pci0 dev 0 function 0: vendor 1022 product 700e (rev. 0x13)
agp0 at pchb0: aperture at 0xd0000000, size 0x8000000
ppb0 at pci0 dev 1 function 0: vendor 1022 product 700f (rev. 0x00)
pci1 at ppb0 bus 1
pci1: This pci host supports neither MSI nor MSI-X.
pci1: i/o space, memory space enabled
vga0 at pci1 dev 5 function 0: vendor 10de product 0110 (rev. 0xb2)
wsdisplay0 at vga0 kbdmux 1: console (80x25, vt100 emulation), using wskbd0
wsmux1: connecting to wsdisplay0
drm at vga0 not configured
pcib0 at pci0 dev 7 function 0: vendor 1106 product 0686 (rev. 0x40)
viaide0 at pci0 dev 7 function 1
viaide0: VIA Technologies VT82C686A (Apollo KX133) ATA100 controller
viaide0: bus-master DMA support present
viaide0: primary channel configured to compatibility mode
viaide0: primary channel interrupting at irq 14
atabus0 at viaide0 channel 0
viaide0: secondary channel configured to compatibility mode
viaide0: secondary channel interrupting at irq 15
atabus1 at viaide0 channel 1
uhci0 at pci0 dev 7 function 2: vendor 1106 product 3038 (rev. 0x16)
uhci0: interrupting at irq 11
usb0 at uhci0: USB revision 1.0
uhci1 at pci0 dev 7 function 3: vendor 1106 product 3038 (rev. 0x16)
uhci1: interrupting at irq 11
usb1 at uhci1: USB revision 1.0
vendor 1106 product 3057 (SMBus serial bus, revision 0x40) at pci0 dev 7 function 4 not configured
ex0 at pci0 dev 11 function 0: 3Com 3c905B-TX 10/100 Ethernet (rev. 0x30)
ex0: interrupting at irq 11
ex0: MAC address 00:01:02:ec:2c:1a
exphy0 at ex0 phy 24: 3Com internal media interface
exphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
emuxki0 at pci0 dev 13 function 0: vendor 1102 product 0002 (rev. 0x05)
emuxki0: interrupting at irq 5
emuxki0: ac97: TriTech TR28602 codec; no 3D stereo
audio0 at emuxki0: full duplex, playback, capture, mmap, independent
joy0 at pci0 dev 13 function 1: vendor 1102 product 7002 (rev. 0x05)
joy0: joystick not connected
isa0 at pcib0
lpt0 at isa0 port 0x378-0x37b irq 7
com0 at isa0 port 0x3f8-0x3ff irq 4: ns16550a, working fifo
com1 at isa0 port 0x2f8-0x2ff irq 3: ns16550a, working fifo
fdc0 at isa0 port 0x3f0-0x3f7 irq 6 drq 2
timecounter: Timecounter "clockinterrupt" frequency 100 Hz quality 0
IPsec: Initialized Security Association Processing.
uhub0 at usb0: vendor 1106 UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
uhub1 at usb1: vendor 1106 UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub1: 2 ports with 2 removable, self powered
wd0 at atabus0 drive 0
wd0: <IC35L060AVER07-0>
wd0: drive supports 16-sector PIO transfers, LBA addressing
wd0: 58644 MB, 119150 cyl, 16 head, 63 sec, 512 bytes/sect x 120103200 sectors
wd0: 32-bit data port
wd0: drive supports PIO mode 4, DMA mode 2, Ultra-DMA mode 5 (Ultra/100)
wd1 at atabus0 drive 1
wd1: <IC35L060AVER07-0>
wd1: drive supports 16-sector PIO transfers, LBA addressing
wd1: 58644 MB, 119150 cyl, 16 head, 63 sec, 512 bytes/sect x 120103200 sectors
wd1: 32-bit data port
wd1: drive supports PIO mode 4, DMA mode 2, Ultra-DMA mode 5 (Ultra/100)
wd0(viaide0:0:0): using PIO mode 4, Ultra-DMA mode 5 (Ultra/100) (using DMA)
wd1(viaide0:0:1): using PIO mode 4, Ultra-DMA mode 5 (Ultra/100) (using DMA)
atapibus0 at atabus1: 2 targets
cd0 at atapibus0 drive 0: <MATSHITADVD-ROM SR-8586, , 3Z24> cdrom removable
cd0: 32-bit data port
cd0: drive supports PIO mode 4, DMA mode 2, Ultra-DMA mode 2 (Ultra/33)
cd1 at atapibus0 drive 1: <LG CD-RW CED-8120B, , 1.03> cdrom removable
cd1: 32-bit data port
cd1: drive supports PIO mode 4, DMA mode 2
cd0(viaide0:1:0): using PIO mode 4, Ultra-DMA mode 2 (Ultra/33) (using DMA)
cd1(viaide0:1:1): using PIO mode 4, DMA mode 2 (using DMA)
boot device: wd1
root on wd1a dumps on wd1b
root file system type: ffs
kern.module.path=/stand/i386/7.99.40/modules
wsdisplay0: screen 1 added (80x25, vt100 emulation)
wsdisplay0: screen 2 added (80x25, vt100 emulation)
wsdisplay0: screen 3 added (80x25, vt100 emulation)
wsdisplay0: screen 4 added (80x25, vt100 emulation)

This is a rather old machine with a GeForce 2 MX400 card. (I don't
actually run X on it normally, but was just trying out a current
kernel to see what happens.)

>How-To-Repeat:
Boot with nouveau drivers enabled.
>Fix: