kern/38630: panic: uvm_pglistalloc: page not on freelist

[kardel%netbsd.org@localhost]

>Number:         38630
>Category:       kern
>Synopsis:       panic: uvm_pglistalloc: page not on freelist
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Sun May 11 17:40:00 +0000 2008
>Originator:     Frank Kardel
>Release:        NetBSD 4.99.62-20080511140000
>Organization:
>Environment:
System: NetBSD pip.kardel.name 4.99.62 NetBSD 4.99.62 (PIP) #2: Sun May 11 
15:25:01 MEST 2008 
kardel%pip.kardel.name@localhost:/fs/raid1a/src/NetBSD/current/src/sys/arch/i386/compile/obj.i386/PIP
 i386
Architecture: i386
Machine: i386
>Description:
        NetBSD-current panics when using auvia audio with uvm_pglistalloc: page 
not on freelist
        Machine Athlon 64 X2 4400+, MP, current 20080511140000

        Stacktrace (core available on request)

        #0  0xc05b10a2 in cpu_reboot (howto=256, bootstr=0x0)
            at 
/fs/raid1a/src/NetBSD/current/src/sys/arch/i386/i386/machdep.c:891
        #1  0xc04fa27d in panic (
            fmt=0xc0a78f4c "uvm_pglistalloc: page not on freelist")
            at /fs/raid1a/src/NetBSD/current/src/sys/kern/subr_prf.c:260
        #2  0xc047c727 in uvm_pglist_add (pg=0xc0e5bf80, rlist=0xd0292968)
            at /fs/raid1a/src/NetBSD/current/src/sys/uvm/uvm_pglist.c:107
        #3  0xc047cd24 in uvm_pglistalloc (size=4096, low=0, high=2147123200, 
            alignment=4096, boundary=0, rlist=0xd0292968, nsegs=1, waitok=0)
            at /fs/raid1a/src/NetBSD/current/src/sys/uvm/uvm_pglist.c:314
        #4  0xc0596b9b in _bus_dmamem_alloc_range (t=0xc0b0cdc0, size=104, 
            alignment=4096, boundary=0, segs=0xc394d4b0, nsegs=1, 
rsegs=0xd02929ec, 
            flags=1, low=0, high=2147123200)
            at /fs/raid1a/src/NetBSD/current/src/sys/arch/x86/x86/bus_dma.c:165
        #5  0xc0596cc6 in _bus_dmamem_alloc (t=0x0, size=104, alignment=4096, 
            boundary=0, segs=0xc394d4b0, nsegs=1, rsegs=0xd02929ec, flags=1)
            at /fs/raid1a/src/NetBSD/current/src/sys/arch/x86/x86/bus_dma.c:864
        #6  0xc064c64f in auvia_malloc (addr=0xc3106800, direction=0, size=104, 
            pool=0xc0aeee60, flags=0)
            at /fs/raid1a/src/NetBSD/current/src/sys/dev/pci/auvia.c:845
        #7  0xc064c867 in auvia_build_dma_ops (sc=0xc3106800, ch=0xc31068d4, 
            p=<value optimized out>, start=0xcdceb000, end=0xcdcfa3c0, 
blksize=4800)
            at /fs/raid1a/src/NetBSD/current/src/sys/dev/pci/auvia.c:975
        #8  0xc064cb12 in auvia_trigger_output (addr=0xc3106800, 
start=0xcdceb000, 
            end=0xcdcfa3c0, blksize=4800, intr=0xc0487bb0 <audio_pint>, 
            arg=0xc3106000, param=0xc3106250)
            at /fs/raid1a/src/NetBSD/current/src/sys/dev/pci/auvia.c:1034
        #9  0xc0484468 in audiostartp (sc=0xc3106000)
            at /fs/raid1a/src/NetBSD/current/src/sys/dev/audio.c:2529
        #10 0xc048908b in audio_write (sc=0xc3106000, uio=0xd0292c7c, ioflag=16)
            at /fs/raid1a/src/NetBSD/current/src/sys/dev/audio.c:2082
        #11 0xc0489140 in audiowrite (dev=10752, uio=0xd0292c7c, ioflag=16)
            at /fs/raid1a/src/NetBSD/current/src/sys/dev/audio.c:1120
        #12 0xc04edf90 in cdev_write (dev=10752, uio=0xd0292c7c, flag=16)
            at /fs/raid1a/src/NetBSD/current/src/sys/kern/subr_devsw.c:796
        #13 0xc054e2d0 in spec_write (v=0xd0292c04)
            at 
/fs/raid1a/src/NetBSD/current/src/sys/miscfs/specfs/spec_vnops.c:579
        #14 0xc054640c in VOP_WRITE (vp=0xce8f5d0c, uio=0xd0292c7c, ioflag=16, 
            cred=0xd02a16c0)
            at /fs/raid1a/src/NetBSD/current/src/sys/kern/vnode_if.c:517
        #15 0xc05430b1 in vn_write (fp=0xd099f8c0, offset=0xd099f8c0, 
uio=0xd0292c7c, 
            cred=0xd02a16c0, flags=1)
            at /fs/raid1a/src/NetBSD/current/src/sys/kern/vfs_vnops.c:476
        #16 0xc05026a5 in dofilewrite (fd=3, fp=0x0, buf=0xbbaec030, 
nbyte=12574, 
            offset=0xd099f8c0, flags=1, retval=0xd0292d28)
            at /fs/raid1a/src/NetBSD/current/src/sys/kern/sys_generic.c:355
        #17 0xc05027cf in sys_write (l=0xd099d5c0, uap=0xd0292d00, 
retval=0xd0292d28)
            at /fs/raid1a/src/NetBSD/current/src/sys/kern/sys_generic.c:323
        #18 0xc05b5021 in syscall (frame=0xd0292d48)
            at 
/fs/raid1a/src/NetBSD/current/src/sys/arch/i386/i386/syscall.c:102
        #19 0xc010056d in syscall1 ()

        Dmesg:

Copyright (c) 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005,
    2006, 2007, 2008
    The NetBSD Foundation, Inc.  All rights reserved.
Copyright (c) 1982, 1986, 1989, 1991, 1993
    The Regents of the University of California.  All rights reserved.

NetBSD 4.99.62 (PIP) #2: Sun May 11 15:25:01 MEST 2008
        
kardel%pip.kardel.name@localhost:/fs/raid1a/src/NetBSD/current/src/sys/arch/i386/compile/obj.i386/PIP
total memory = 2047 MB
avail memory = 1997 MB
timecounter: Timecounters tick every 10.000 msec
timecounter: Timecounter "i8254" frequency 1193182 Hz quality 100
To Be Filled By O.E.M. To Be Filled By O.E.M. (To Be Filled By O.E.M.)
mainbus0 (root)
cpu0 at mainbus0 apid 0: (boot processor)
cpu0: AMD Dual-Core Opteron or Athlon 64 X2 (686-class), 2202.93 MHz, id 0x20f32
cpu0: features f7dbfbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR>
cpu0: features f7dbfbff<PGE,MCA,CMOV,PAT,PSE36,MPC,NOX,MMXX,MMX>
cpu0: features f7dbfbff<FXSR,SSE,SSE2,HTT,LONG,3DNOW2,3DNOW>
cpu0: features2 1<SSE3>
cpu0: "AMD Athlon(tm) 64 X2 Dual Core Processor 4400+"
cpu0: I-cache 64 KB 64B/line 2-way, D-cache 64 KB 64B/line 2-way
cpu0: L2 cache 1 MB 64B/line 16-way
cpu0: ITLB 32 4 KB entries fully associative, 8 4 MB entries fully associative
cpu0: DTLB 32 4 KB entries fully associative, 8 4 MB entries fully associative
cpu0: Initial APIC ID 0
cpu0: calibrating local timer
cpu0: apic clock running at 200 MHz
cpu0: 16 page colors
cpu1 at mainbus0 apid 1: (application processor)
cpu1: AMD Dual-Core Opteron or Athlon 64 X2 (686-class), 2203.08 MHz, id 0x20f32
cpu1: features f7dbfbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR>
cpu1: features f7dbfbff<PGE,MCA,CMOV,PAT,PSE36,MPC,NOX,MMXX,MMX>
cpu1: features f7dbfbff<FXSR,SSE,SSE2,HTT,LONG,3DNOW2,3DNOW>
cpu1: features2 1<SSE3>
cpu1: "AMD Athlon(tm) 64 X2 Dual Core Processor 4400+"
cpu1: I-cache 64 KB 64B/line 2-way, D-cache 64 KB 64B/line 2-way
cpu1: L2 cache 1 MB 64B/line 16-way
cpu1: ITLB 32 4 KB entries fully associative, 8 4 MB entries fully associative
cpu1: DTLB 32 4 KB entries fully associative, 8 4 MB entries fully associative
cpu1: Initial APIC ID 1
ioapic0 at mainbus0 apid 2: pa 0xfec00000, version 3, 24 pins
acpi0 at mainbus0: Advanced Configuration and Power Interface
acpi0: using Intel ACPI CA subsystem version 20080321
acpi0: X/RSDT: OemId <A M I ,OEMXSDT ,05000519>, AslId <MSFT,00000097>
acpi0: SCI interrupting at int 9
acpi0: fixed-feature power button present
timecounter: Timecounter "ACPI-Fast" frequency 3579545 Hz quality 1000
ACPI-Fast 24-bit timer
CPU1 (ACPI Object Type 'Processor' [0x0c]) at acpi0 not configured
CPU2 (ACPI Object Type 'Processor' [0x0c]) at acpi0 not configured
PCI0 (PNP0A03) at acpi0 not configured
PIC (PNP0000) at acpi0 not configured
DMAD (PNP0200) at acpi0 not configured
attimer1 at acpi0 (TMR, PNP0100): AT Timer
attimer1: io 0x40-0x43 irq 0
RTC0 (PNP0B00) at acpi0 not configured
pckbc1 at acpi0 (PS2K, PNP0303): kbd port
pckbc1: io 0x60,0x64 irq 1
pcppi1 at acpi0 (SPKR, PNP0800)
pcppi1: io 0x61
midi0 at pcppi1: PC speaker (CPU-intensive output)
sysbeep0 at pcppi1
npx1 at acpi0 (COPR, PNP0C04)
npx1: io 0xf0-0xff irq 13
npx1: reported by CPUID; using exception 16
FDC (PNP0700) at acpi0 not configured
LPTE (PNP0400) at acpi0 not configured
SIOR (PNP0C02) at acpi0 not configured
RMSC (PNP0C02) at acpi0 not configured
OMSC (PNP0C02) at acpi0 not configured
UAR2 (PNP0501) at acpi0 not configured
UAR1 (PNP0501) at acpi0 not configured
RMEM (PNP0C01) at acpi0 not configured
acpibut0 at acpi0 (PWRB, PNP0C0C-170): ACPI Power Button
LNKA (PNP0C0F) at acpi0 not configured
LNKB (PNP0C0F) at acpi0 not configured
LNKC (PNP0C0F) at acpi0 not configured
LNKD (PNP0C0F) at acpi0 not configured
acpibut1 at acpi0 (SLPB, PNP0C0E): ACPI Sleep Button
apm0 at acpi0: Power Management spec V1.2
pckbd0 at pckbc1 (kbd slot)
pckbc1: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard
pmsprobe: reset error 5
attimer1: attached to pcppi1
pci0 at mainbus0 bus 0: configuration mode 1
pci0: i/o space, memory space enabled, rd/line, rd/mult, wr/inv ok
pchb0 at pci0 dev 0 function 0
pchb0: vendor 0x1106 product 0x0282 (rev. 0x00)
agp0 at pchb0: 1 Miscellaneous Control unit(s) found.
agp0: aperture at 0xd0000000, size 0x10000000
pchb1 at pci0 dev 0 function 1
pchb1: vendor 0x1106 product 0x1282 (rev. 0x00)
pchb2 at pci0 dev 0 function 2
pchb2: vendor 0x1106 product 0x2282 (rev. 0x00)
pchb3 at pci0 dev 0 function 3
pchb3: vendor 0x1106 product 0x3282 (rev. 0x00)
pchb4 at pci0 dev 0 function 4
pchb4: vendor 0x1106 product 0x4282 (rev. 0x00)
pchb5 at pci0 dev 0 function 7
pchb5: vendor 0x1106 product 0x7282 (rev. 0x00)
ppb0 at pci0 dev 1 function 0: vendor 0x1106 product 0xb188 (rev. 0x00)
pci1 at ppb0 bus 1
pci1: i/o space, memory space enabled
vga1 at pci1 dev 0 function 0: vendor 0x1002 product 0x4150 (rev. 0x00)
wsdisplay0 at vga1 kbdmux 1: console (80x25, vt100 emulation), using wskbd0
wsmux1: connecting to wsdisplay0
drm at vga1 not configured
vendor 0x1002 product 0x4170 (miscellaneous display) at pci1 dev 0 function 1 
not configured
fwohci0 at pci0 dev 7 function 0: vendor 0x1106 product 0x3044 (rev. 0x80)
fwohci0: interrupting at ioapic0 pin 16 (irq 5)
fwohci0: OHCI version 1.0 (ROM=1)
fwohci0: No. of Isochronous channels is 4.
fwohci0: EUI64 00:11:d8:00:00:58:8f:51
fwohci0: Phy 1394a available S400, 2 ports.
fwohci0: Link S400, max_rec 2048 bytes.
ieee1394if0 at fwohci0: IEEE1394 bus
fwip0 at ieee1394if0: IP over IEEE1394
fwohci0: Initiate bus reset
pdcsata0 at pci0 dev 8 function 0
pdcsata0: Promise PDC20378 SATA150 controller (rev. 0x02)
pdcsata0: interrupting at ioapic0 pin 18 (irq 10)
pdcsata0: bus-master DMA support present
atabus0 at pdcsata0 channel 0
atabus1 at pdcsata0 channel 1
atabus2 at pdcsata0 channel 2
ex0 at pci0 dev 9 function 0: 3Com 3c905C-TX 10/100 Ethernet with mngmt (rev. 
0x6c)
ex0: interrupting at ioapic0 pin 16 (irq 5)
ex0: MAC address 00:50:da:ee:ca:2e
bmtphy0 at ex0 phy 24: Broadcom 3c905C internal PHY, rev. 4
bmtphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
skc0 at pci0 dev 10 function 0: ioapic0 pin 17 (irq 11)
skc0: interrupt moderation is 0 us
skc0: Marvell Yukon Lite Gigabit Ethernet rev. (0x9)
sk0 at skc0 port A: Ethernet address 00:13:d4:9b:67:09
makphy0 at sk0 phy 0: Marvell 88E1011 Gigabit PHY, rev. 5
makphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 
1000baseT-FDX, auto
ahc1 at pci0 dev 11 function 0: Adaptec 2940 Pro Ultra SCSI adapter
ahc1: interrupting at ioapic0 pin 16 (irq 5)
ahc1: aic7880: Ultra Wide Channel A, SCSI Id=7, 16/253 SCBs
scsibus0 at ahc1: 16 targets, 8 luns per target
ath0 at pci0 dev 12 function 0
ath0: interrupting at ioapic0 pin 17 (irq 11)
ath0: 11b rates: 1Mbps 2Mbps 5.5Mbps 11Mbps
ath0: 11g rates: 1Mbps 2Mbps 5.5Mbps 11Mbps 6Mbps 9Mbps 12Mbps 18Mbps 24Mbps 
36Mbps 48Mbps 54Mbps
ath0: mac 5.9 phy 4.3 radio 4.6
puc0 at pci0 dev 13 function 0: NetMos NM9845 6 UART (com, com, com, com, com, 
com)
com3 at puc0 port 0: interrupting at ioapic0 pin 18 (irq 10)
com3: ns16550a, working fifo
com4 at puc0 port 1: interrupting at ioapic0 pin 18 (irq 10)
com4: ns16550a, working fifo
com5 at puc0 port 2: interrupting at ioapic0 pin 18 (irq 10)
com5: ns16550a, working fifo
com6 at puc0 port 3: interrupting at ioapic0 pin 18 (irq 10)
com6: ns16550a, working fifo
com7 at puc0 port 4: interrupting at ioapic0 pin 18 (irq 10)
com7: ns16550a, working fifo
com8 at puc0 port 5: interrupting at ioapic0 pin 18 (irq 10)
com8: ns16550a, working fifo
pdcide0 at pci0 dev 14 function 0
pdcide0: Promise Ultra133/ATA Bus Master IDE Accelerator (rev. 0x02)
pdcide0: bus-master DMA support present
pdcide0: primary channel configured to native-PCI mode
pdcide0: using ioapic0 pin 19 (irq 10) for native-PCI interrupt
atabus3 at pdcide0 channel 0
pdcide0: secondary channel configured to native-PCI mode
atabus4 at pdcide0 channel 1
pci_mem_find: expected type mem, found i/o
viaide0 at pci0 dev 15 function 0
viaide0: VIA Technologies VT8237 SATA Controller (rev. 0x80)
viaide0: bus-master DMA support present
viaide0: primary channel wired to native-PCI mode
viaide0: using ioapic0 pin 20 (irq 11) for native-PCI interrupt
atabus5 at viaide0 channel 0
viaide0: secondary channel wired to native-PCI mode
atabus6 at viaide0 channel 1
viaide1 at pci0 dev 15 function 1
viaide1: VIA Technologies VT8237 ATA133 controller
viaide1: bus-master DMA support present
viaide1: primary channel configured to compatibility mode
viaide1: primary channel interrupting at ioapic0 pin 14 (irq 14)
atabus7 at viaide1 channel 0
viaide1: secondary channel configured to compatibility mode
viaide1: secondary channel interrupting at ioapic0 pin 15 (irq 15)
atabus8 at viaide1 channel 1
uhci0 at pci0 dev 16 function 0: vendor 0x1106 product 0x3038 (rev. 0x81)
uhci0: interrupting at ioapic0 pin 21 (irq 5)
usb0 at uhci0: USB revision 1.0
uhci1 at pci0 dev 16 function 1: vendor 0x1106 product 0x3038 (rev. 0x81)
uhci1: interrupting at ioapic0 pin 21 (irq 5)
usb1 at uhci1: USB revision 1.0
uhci2 at pci0 dev 16 function 2: vendor 0x1106 product 0x3038 (rev. 0x81)
uhci2: interrupting at ioapic0 pin 21 (irq 11)
usb2 at uhci2: USB revision 1.0
uhci3 at pci0 dev 16 function 3: vendor 0x1106 product 0x3038 (rev. 0x81)
uhci3: interrupting at ioapic0 pin 21 (irq 11)
usb3 at uhci3: USB revision 1.0
ehci0 at pci0 dev 16 function 4: vendor 0x1106 product 0x3104 (rev. 0x86)
ehci0: interrupting at ioapic0 pin 21 (irq 10)
ehci0: dropped intr workaround enabled
ehci0: BIOS has given up ownership
ehci0: EHCI version 1.0
ehci0: companion controllers, 2 ports each: uhci0 uhci1 uhci2 uhci3
usb4 at ehci0: USB revision 2.0
pcib0 at pci0 dev 17 function 0
pcib0: vendor 0x1106 product 0x3227 (rev. 0x00)
auvia0 at pci0 dev 17 function 5: VIA Technologies VT8237 AC'97 Audio (rev 0x60)
auvia0: interrupting at ioapic0 pin 22 (irq 10)
auvia0: ac97: Avance Logic ALC850 codec; no 3D stereo
auvia0: ac97: ext id 9c6<AC97_23,LDAC,SDAC,CDAC,SPDIF,DRA>
audio0 at auvia0: full duplex, independent
pchb6 at pci0 dev 24 function 0
pchb6: vendor 0x1022 product 0x1100 (rev. 0x00)
pchb7 at pci0 dev 24 function 1
pchb7: vendor 0x1022 product 0x1101 (rev. 0x00)
pchb8 at pci0 dev 24 function 2
pchb8: vendor 0x1022 product 0x1102 (rev. 0x00)
pchb9 at pci0 dev 24 function 3
pchb9: vendor 0x1022 product 0x1103 (rev. 0x00)
isa0 at pcib0
lpt0 at isa0 port 0x378-0x37b irq 7
com0 at isa0 port 0x3f8-0x3ff irq 4: ns16550a, working fifo
com1 at isa0 port 0x2f8-0x2ff irq 3: ns16550a, working fifo
fdc0 at isa0 port 0x3f0-0x3f7 irq 6 drq 2
fwohci0: BUS reset
fwohci0: node_id=0xc800ffc0, gen=1, CYCLEMASTER mode
ieee1394if0: 1 nodes, maxhop <= 0, cable IRM = 0 (me)
ieee1394if0: bus manager 0 (me)
timecounter: Timecounter "clockinterrupt" frequency 100 Hz quality 0
scsibus0: waiting 2 seconds for devices to settle...
fd0 at fdc0 drive 0: 1.44MB, 80 cyl, 2 head, 18 sec
...

>How-To-Repeat:
        attempt to use audioplay to play an audiofile
>Fix:
        avoid using auvia. :-(