From nobody@FreeBSD.org Thu Nov 10 18:04:26 2005 Return-Path: Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 937A816A41F for ; Thu, 10 Nov 2005 18:04:26 +0000 (GMT) (envelope-from nobody@FreeBSD.org) Received: from www.freebsd.org (www.freebsd.org [216.136.204.117]) by mx1.FreeBSD.org (Postfix) with ESMTP id 42C8743D48 for ; Thu, 10 Nov 2005 18:04:26 +0000 (GMT) (envelope-from nobody@FreeBSD.org) Received: from www.freebsd.org (localhost [127.0.0.1]) by www.freebsd.org (8.13.1/8.13.1) with ESMTP id jAAI4PCd028554 for ; Thu, 10 Nov 2005 18:04:25 GMT (envelope-from nobody@www.freebsd.org) Received: (from nobody@localhost) by www.freebsd.org (8.13.1/8.13.1/Submit) id jAAI4P13028549; Thu, 10 Nov 2005 18:04:25 GMT (envelope-from nobody) Message-Id: <200511101804.jAAI4P13028549@www.freebsd.org> Date: Thu, 10 Nov 2005 18:04:25 GMT From: Roberto de Iriarte To: freebsd-gnats-submit@FreeBSD.org Subject: CARDBUS related kernel crash X-Send-Pr-Version: www-2.3 >Number: 88802 >Category: i386 >Synopsis: [iwi] [cardbus] CARDBUS related kernel crash (TSB43AB23, upper slot only) >Confidential: no >Severity: critical >Priority: high >Responsible: remko >State: closed >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Thu Nov 10 18:10:13 GMT 2005 >Closed-Date: Mon Jan 08 19:29:11 GMT 2007 >Last-Modified: Mon Jan 08 19:29:11 GMT 2007 >Originator: Roberto de Iriarte >Release: 6.0-RELEASE >Organization: >Environment: FreeBSD 6.0-RELEASE #0: Thu Nov 3 09:36:13 UTC 2005 root@x64.samsco.home:/usr/obj/usr/src/sys/GENERIC >Description: System dumps core if a Texas Instruments TSB43AB23 cardbus firewire adaptor is inserted in cardbus0 (upper slot), adaptor runs correctly in cardbus1 (lower slot). Under Linux (same computer and cardbus adaptor) both slots work correctly. Kernel says "page not found" and dumps core. The same happens if the system is powered on with the adaptor inserted. The problem is present under 6.0-RELEASE and 6.0-STABLE as of Nov 9 dmesg of 6.0-RELEASE Copyright (c) 1992-2005 The FreeBSD Project. Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 The Regents of the University of California. All rights reserved. FreeBSD 6.0-RELEASE #0: Thu Nov 3 09:36:13 UTC 2005 root@x64.samsco.home:/usr/obj/usr/src/sys/GENERIC Timecounter "i8254" frequency 1193182 Hz quality 0 CPU: Intel(R) Pentium(R) M processor 1.70GHz (598.06-MHz 686-class CPU) Origin = "GenuineIntel" Id = 0x6d6 Stepping = 6 Features=0xafe9f9bf Features2=0x180 real memory = 536150016 (511 MB) avail memory = 515317760 (491 MB) npx0: [FAST] npx0: on motherboard npx0: INT 16 interface acpi0: on motherboard acpi_ec0: port 0x62,0x66 on acpi0 acpi0: Power Button (fixed) pci_link0: irq 11 on acpi0 pci_link1: irq 5 on acpi0 pci_link2: irq 11 on acpi0 pci_link3: irq 11 on acpi0 pci_link4: on acpi0 pci_link5: on acpi0 pci_link6: on acpi0 pci_link7: irq 11 on acpi0 Timecounter "ACPI-fast" frequency 3579545 Hz quality 1000 acpi_timer0: <24-bit timer at 3.579545MHz> port 0x1008-0x100b on acpi0 cpu0: on acpi0 acpi_perf0: on cpu0 acpi_throttle0: on cpu0 acpi_lid0: on acpi0 acpi_button0: on acpi0 pcib0: port 0xcf8-0xcff on acpi0 pci0: on pcib0 agp0: mem 0xd0000000-0xdfffffff at device 0.0 on pci0 pcib1: at device 1.0 on pci0 pci1: on pcib1 pci1: at device 0.0 (no driver attached) uhci0: port 0x1800-0x181f irq 11 at device 29.0 on pci0 uhci0: [GIANT-LOCKED] usb0: on uhci0 usb0: USB revision 1.0 uhub0: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1 uhub0: 2 ports with 2 removable, self powered uhci1: port 0x1820-0x183f irq 11 at device 29.1 on pci0 uhci1: [GIANT-LOCKED] usb1: on uhci1 usb1: USB revision 1.0 uhub1: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1 uhub1: 2 ports with 2 removable, self powered uhci2: port 0x1840-0x185f irq 11 at device 29.2 on pci0 uhci2: [GIANT-LOCKED] usb2: on uhci2 usb2: USB revision 1.0 uhub2: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1 uhub2: 2 ports with 2 removable, self powered ehci0: mem 0xc0000000-0xc0000 3ff irq 11 at device 29.7 on pci0 ehci0: [GIANT-LOCKED] usb3: EHCI version 1.0 usb3: companion controllers, 2 ports each: usb0 usb1 usb2 usb3: on ehci0 usb3: USB revision 2.0 uhub3: Intel EHCI root hub, class 9/0, rev 2.00/1.00, addr 1 uhub3: 6 ports with 6 removable, self powered pcib2: at device 30.0 on pci0 pci2: on pcib2 cbb0: mem 0xb0000000-0xb0000fff irq 11 at device 0.0 on pc i2 cardbus0: on cbb0 pccard0: <16-bit PCCard bus> on cbb0 cbb1: mem 0xb1000000-0xb1000fff irq 5 at device 0.1 on pci 2 cardbus1: on cbb1 pccard1: <16-bit PCCard bus> on cbb1 em0: port 0x8000-0x803f mem 0xc0220000-0xc023ffff,0xc0200000-0xc020ffff irq 11 at device 1.0 on pci2 em0: Ethernet address: 00:0d:60:f9:48:5b em0: Speed:N/A Duplex:N/A pci2: at device 2.0 (no driver attached) isab0: at device 31.0 on pci0 isa0: on isab0 atapci0: port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x3 76,0x1860-0x186f at device 31.1 on pci0 ata0: on atapci0 ata1: on atapci0 pci0: at device 31.3 (no driver attached) pci0: at device 31.5 (no driver attached) pci0: at device 31.6 (no driver attached) acpi_tz0: on acpi0 atkbdc0: port 0x60,0x64 irq 1 on acpi0 atkbd0: irq 1 on atkbdc0 kbd0 at atkbd0 atkbd0: [GIANT-LOCKED] atapci0: port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x3 76,0x1860-0x186f at device 31.1 on pci0 ata0: on atapci0 ata1: on atapci0 pci0: at device 31.3 (no driver attached) pci0: at device 31.5 (no driver attached) pci0: at device 31.6 (no driver attached) acpi_tz0: on acpi0 atkbdc0: port 0x60,0x64 irq 1 on acpi0 atkbd0: irq 1 on atkbdc0 kbd0 at atkbd0 atkbd0: [GIANT-LOCKED] psm0: irq 12 on atkbdc0 psm0: [GIANT-LOCKED] psm0: model Generic PS/2 mouse, device ID 0 fdc0: port 0x3f0-0x3f5,0x3f7 irq 6 drq 2 on acp i0 fdc0: [FAST] sio0: configured irq 4 not in bitmap of probed irqs 0 sio0: port may not be enabled sio0: <16550A-compatible COM port> port 0x3f8-0x3ff irq 4 flags 0x10 on acpi0 sio0: type 8250 or not responding ppc0: port 0x3bc-0x3be irq 7 on acpi0 ppc0: Generic chipset (NIBBLE-only) in COMPATIBLE mode ppbus0: on ppc0 plip0: on ppbus0 lpt0: on ppbus0 lpt0: Interrupt-driven port ppi0: on ppbus0 sio1: configured irq 3 not in bitmap of probed irqs 0 sio1: port may not be enabled battery0: on acpi0 acpi_acad0: on acpi0 sio1: configured irq 3 not in bitmap of probed irqs 0 sio1: port may not be enabled pmtimer0 on isa0 orm0: at iomem 0xd0000-0xd0fff,0xd1000-0xd1fff,0xdc000-0xdfff f on isa0 sc0: at flags 0x100 on isa0 sc0: VGA <16 virtual consoles, flags=0x300> sio1: configured irq 3 not in bitmap of probed irqs 0 sio1: port may not be enabled vga0: at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0 Timecounter "TSC" frequency 598062567 Hz quality 800 Timecounters tick every 1.000 msec ad0: 38154MB at ata0-master UDMA100 acd0: CDRW at ata1-master UDMA33 Trying to mount root from ufs:/dev/ad0s1a Backtrace of 6.0-RELEASE Fatal trap 12: page fault while in kernel mode fault virtual address = 0x2 fault code = supervisor read, page not present instruction pointer = 0x20:0xc051689d stack pointer = 0x28:0xd5654c98 frame pointer = 0x28:0xd5654ca4 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, def32 1, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 27 (swi4: clock sio) trap number = 12 panic: page fault Uptime: 29s Dumping 510 MB (2 chunks) chunk 0: 1MB (159 pages) ... ok chunk 1: 511MB (130640 pages) 495 479 463 447 431 415 399 383 367 351 335 319 303 287 271 255 239 223 207 191 175 159 143 127 111 95 79 63 47 31 15 #0 doadump () at pcpu.h:165 165 pcpu.h: No such file or directory. in pcpu.h (kgdb) backtrace #0 doadump () at pcpu.h:165 #1 0xc0638202 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:399 #2 0xc0638498 in panic (fmt=0xc084e5a2 "%s") at /usr/src/sys/kern/kern_shutdown.c:555 #3 0xc0807c30 in trap_fatal (frame=0xd5654c58, eva=2) at /usr/src/sys/i386/i386/trap.c:831 #4 0xc080799b in trap_pfault (frame=0xd5654c58, usermode=0, eva=2) at /usr/src/sys/i386/i386/trap.c:742 #5 0xc08075d9 in trap (frame= {tf_fs = -1067188216, tf_es = 40, tf_ds = -714801112, tf_edi = 6, tf_esi 4, tf_ebp = -714781532, tf_isp = -714781564, tf_ebx = -1040920576, tf_edx = -1 41047552, tf_ecx = 1, tf_eax = 0, tf_trapno = 12, tf_err = 0, tf_eip = -1068406 27, tf_cs = 32, tf_eflags = 590466, tf_esp = -1064165088, tf_ss = 4}) at /usr/src/sys/i386/i386/trap.c:432 #6 0xc07f6dca in calltrap () at /usr/src/sys/i386/i386/exception.s:139 #7 0xc051689d in fw_bus_explore (fc=0xc1f4d000) at /usr/src/sys/dev/firewire/firewire.c:1339 #8 0xc05167dc in fw_bus_probe (fc=0xc1f2e000) at /usr/src/sys/dev/firewire/firewire.c:1293 #9 0xc0644287 in softclock (dummy=0x0) at /usr/src/sys/kern/kern_timeout.c:290 #10 0xc0623df9 in ithread_loop (arg=0xc1987480) at /usr/src/sys/kern/kern_intr.c:547 #11 0xc0623080 in fork_exit (callout=0xc0623ca0 , arg=0xc1987480, frame=0xd5654d38) at /usr/src/sys/kern/kern_fork.c:789 #12 0xc07f6e2c in fork_trampoline () at /usr/src/sys/i386/i386/exception.s:208 (kgdb) >How-To-Repeat: Use a Texas Instruments TSB43AB23 cardbus firewire adaptor on cardbus0 (upper slot) >Fix: Workaround: Avoid cardbus0 when using the adaptor >Release-Note: >Audit-Trail: From: Roberto de Iriarte To: bug-followup@FreeBSD.org, roberto@spock.cl Cc: Subject: Re: i386/88802: CARDBUS related kernel crash Date: Thu, 10 Nov 2005 15:21:17 -0300 hw.cardbus.debug=1 makes the problem go away Relevant part of dmesg: cardbus0: CIS pointer is 0! cardbus0: Resource not specified in CIS: id=10, size=800 cardbus0: Resource not specified in CIS: id=14, size=4000 cardbus0: Non-prefetchable memory at c0218000-c021c7ff fwohci0: mem 0xc021c000-0xc021c7ff,0xc0218000-0xc021bfff irq 11 at device 0.0 on cardbus0 fwohci0: OHCI version 1.10 (ROM=1) fwohci0: No. of Isochronous channels is 4. fwohci0: EUI64 08:00:28:00:00:00:01:4c fwohci0: Phy 1394a available S400, 3 ports. fwohci0: Link S400, max_rec 2048 bytes. firewire0: on fwohci0 fwe0: on firewire0 if_fwe0: Fake Ethernet address: 0a:00:28:00:01:4c fwe0: Ethernet address: 0a:00:28:00:01:4c fwe0: if_start running deferred for Giant sbp0: on firewire0 fwohci0: Initiate bus reset fwohci0: node_id=0xc000ffc0, gen=1, CYCLEMASTER mode firewire0: 1 nodes, maxhop <= 0, cable IRM = 0 (me) firewire0: bus manager 0 (me) From: Roberto de Iriarte To: bug-followup@FreeBSD.org, roberto@spock.cl Cc: Subject: Re: i386/88802: CARDBUS related kernel crash (TSB43AB23, upper slot only) Date: Wed, 23 Nov 2005 14:39:38 -0300 I've been trying several combinations of kernel modules, and it appears that the if_iwi module is the culprit. If the if_iwi module is never loaded in the kernel, the cardbus controller behaves correctly, with or without debugging. Regards. Roberto State-Changed-From-To: open->feedback State-Changed-By: remko State-Changed-When: Mon Sep 11 11:39:40 UTC 2006 State-Changed-Why: Hello, It seems that you have found a nice workaround so that the system will work. Can you tell me whether the problem is still alive without the workaround on 6.1 ? Responsible-Changed-From-To: freebsd-i386->remko Responsible-Changed-By: remko Responsible-Changed-When: Mon Sep 11 11:39:40 UTC 2006 Responsible-Changed-Why: Grab the PR http://www.freebsd.org/cgi/query-pr.cgi?pr=88802 State-Changed-From-To: feedback->closed State-Changed-By: remko State-Changed-When: Mon Jan 8 19:29:09 UTC 2007 State-Changed-Why: Feedback timeout, i never recieved any feedback so far. Please contact me if you have feedback and think this should be included in the ticket. http://www.freebsd.org/cgi/query-pr.cgi?pr=88802 >Unformatted: