Repeated crash on 9.99.76 in audio

[Paul Goyette <paul%whooppee.com@localhost>]

Twice today I have experienced a panic on my amd64 9.99.76 (built from
yesterday's sources).  In both cases, the display remains on wsdisplay
vt04 - the X session.  And in both cases, the crash was immediately
following a switch in firefox tabs.

The first time, I did not wait long enough for the crash dump to be
completely written.

Luckily, I waited longer for the second occurrence.

Here's the backtrace, as recorded in the dmesg (retrived via crash(8)):

(there are _hundreds_ of the following ''table is full'' message for
at least 3 full seconds)

[ 37928.6031590] file: table is full - increase kern.maxfiles or MAXFILES
[ 37928.6031590] file: table is full - increase kern.maxfiles or MAXFILES
[ 37928.6231664] file: table is full - increase kern.maxfiles or MAXFILES
[ 37928.6231664] file: table is full - increase kern.maxfiles or MAXFILES
[ 37928.6231664] panic: kernel diagnostic assertion "sc->sc_rbusy == false" failed: file "/build/netbsd-local/src_ro/sys/dev/audio/audio.c", line 5587
[ 37928.6231664] cpu1: Begin traceback...
[ 37928.6231664] vpanic() at netbsd:vpanic+0x156
[ 37928.6231664] __x86_indirect_thunk_rax() at netbsd:__x86_indirect_thunk_rax
[ 37928.6231664] audio_rmixer_start() at audio:audio_rmixer_start+0xe7
[ 37928.6231664] audio_open.isra.0() at audio:audio_open.isra.0+0x2ad
[ 37928.6231664] audioopen() at audio:audioopen+0x18f
[ 37928.6231664] spec_open() at netbsd:spec_open+0x176
[ 37928.6231664] VOP_OPEN() at netbsd:VOP_OPEN+0x3c
[ 37928.6231664] vn_open() at netbsd:vn_open+0x130
[ 37928.6231664] do_open() at netbsd:do_open+0x119
[ 37928.6231664] do_sys_openat() at netbsd:do_sys_openat+0x74
[ 37928.6231664] sys_open() at netbsd:sys_open+0x24
[ 37928.6231664] syscall() at netbsd:syscall+0x23e
[ 37928.6231664] --- syscall (number 5) ---
[ 37928.6231664] netbsd:syscall+0x23e:
[ 37928.6231664] cpu1: End traceback...


Using gdb on the crash file, I get

(gdb) bt
#0  0xffffffff80223945 in cpu_reboot (howto=howto@entry=256,
    bootstr=bootstr@entry=0x0)
    at /build/netbsd-local/src_ro/sys/arch/amd64/amd64/machdep.c:713
#1  0xffffffff8060e5c5 in kern_reboot (howto=256, bootstr=bootstr@entry=0x0)
    at /build/netbsd-local/src_ro/sys/kern/kern_reboot.c:73
#2  0xffffffff8054de29 in db_reboot_cmd (addr=<optimized out>,
    have_addr=<optimized out>, count=<optimized out>, modif=<optimized out>)
    at /build/netbsd-local/src_ro/sys/ddb/db_command.c:1471
#3  0xffffffff8054e637 in db_command (
    last_cmdp=last_cmdp@entry=0xffff8b892c18c6a8)
    at /build/netbsd-local/src_ro/sys/ddb/db_command.c:955
#4  0xffffffff8054e9ea in db_execute_commandlist (
    cmdlist=0xffffffff80a2b5c0 <db_cmd_on_enter> "bt; reboot 0x100")
    at /build/netbsd-local/src_ro/sys/ddb/db_command.c:452
#5  db_command_loop () at /build/netbsd-local/src_ro/sys/ddb/db_command.c:604
#6  0xffffffff80552503 in db_trap (type=type@entry=1, code=code@entry=0)
    at /build/netbsd-local/src_ro/sys/ddb/db_trap.c:91
#7  0xffffffff80220b4f in kdb_trap (type=type@entry=1, code=code@entry=0,
    regs=regs@entry=0xffff8b892c18c960)
    at /build/netbsd-local/src_ro/sys/arch/amd64/amd64/db_interface.c:249
#8  0xffffffff80225c76 in trap (frame=0xffff8b892c18c960)
    at /build/netbsd-local/src_ro/sys/arch/amd64/amd64/trap.c:315
#9  0xffffffff8021ead3 in alltraps ()
#10 0x0000000000000000 in ?? ()
(gdb)


(I've previously encountered the maxfiles limitation, and had set it to
5120 (vs old default of 3,000-ish).  I see that there is a new default
of 20000, but I forgot to remove it from /etc/sysctl.conf so it was
being _reduced_ to 5120!)

So, I'm going to run now with maxfiles left at the 20k default.

HOWEVER, it seems to me that the system should not panic here!  It
feels like the audio driver is mishandling an error return from what-
ever it is doing that requires a new file.  I suspect that systems
with less memory than I have will probably have a lower limit and are
thus likely to hit this same error.

Has anyone else ever seen this?


+--------------------+--------------------------+-----------------------+
| Paul Goyette       | PGP Key fingerprint:     | E-mail addresses:     |
| (Retired)          | FA29 0E3B 35AF E8AE 6651 | paul%whooppee.com@localhost     |
| Software Developer | 0786 F758 55DE 53BA 7731 | pgoyette%netbsd.org@localhost   |
+--------------------+--------------------------+-----------------------+