On 2011-11-14, Brad <[email protected]> wrote: > On 14/11/11 6:26 PM, Stuart Henderson wrote: >> Is there a reason why this is in the vlc thread on ports@? > > I thought that at first until I read the sendbug link. It's > posted here because using VLC exposes this bug with the NFS > or related code. >
Oh. Well to save anyone else hassle let's just paste it here since it's clearly relevant information. I will skip the acpi tables and pcidump. rd, does this happen with the previous version of VLC as well or not? >From [email protected] Mon Nov 14 16:16:16 2011 To: [email protected] Subject: panic: pool_do_get(mcl2k): free list modified: ... From: [email protected] Cc: [email protected] Reply-To: [email protected] Message-Id: <[email protected]> Date: Mon, 14 Nov 2011 16:04:22 -0500 (EST) >Synopsis: VLC 1.1.12 open file triggers kernel panic >Category: kernel >Environment: System : OpenBSD 5.0 Details : OpenBSD 5.0-current (GENERIC.MP) #126: Thu Nov 10 10:57:34 MST 2011 [email protected]:/usr/src/sys/arch/amd64/compile/GENERIC.MP Architecture: OpenBSD.amd64 Machine : amd64 >Description: Using VLC to open an nfs-mounted directory that contains video panic's the kernel. Both this snapshot and the previous one #125 crash with this scenario. >How-To-Repeat: Build VLC 1.1.12 per Brad's patch <[email protected]>. pkg_add, invoke VLC and use the dialog to navigate to a video file. The kernel panic's when a directory containing video is opened. The directory contents are not displayed before the crash. I've appended trace, ps & show registers result. A fuller ddb session is available at <http://arp.thrush.com/openbsd/x4/ddb.out>. Here's what shows up on the terminal where VLC was invoked: x4:logs/amd64 2184>vlc VLC media player 1.1.12 The Luggage (revision exported) [0x205b67f70] main interface error: no suitable interface module [0x207e12470] main libvlc: Running vlc with the default interface. Use 'cvlc' to use vlc without interface. Blocked: call to setlocale(0, "") [0x205b66770] qt4 interface error: Unable to load extensions module >Fix: Dunno. ############################################################# panic: pool_do_get(mcl2k): free list modified: page 0xfffffe80cb99d000; item addr 0xfffffe80cb99d000; offset 0x0=0x3000000 Stopped at Debugger+0x5: leave RUN AT LEAST 'trace' AND 'ps' AND INCLUDE OUTPUT WHEN REPORTING THIS PANIC! IF RUNNING SMP, USE 'mach ddbcpu <#>' AND 'trace' ON OTHER PROCESSORS, TOO. DO NOT EVEN BOTHER REPORTING THIS WITHOUT INCLUDING THAT INFORMATION! ddb{0}> trace Debugger() at Debugger+0x5 panic() at panic+0xe4 pool_do_get() at pool_do_get+0x401 pool_get() at pool_get+0x4a m_clget() at m_clget+0x95 re_newbuf() at re_newbuf+0x37 re_rx_list_fill() at re_rx_list_fill+0x21 re_rxeof() at re_rxeof+0x36c re_intr() at re_intr+0x18b Xintr_ioapic_level19() at Xintr_ioapic_level19+0xec --- interrupt --- Bad frame pointer: 0xffff800022133f10 end trace frame: 0xffff800022133f10, count: -10 cpu_idle_cycle+0x13: ddb{0}> ps PID PPID PGRP UID S FLAGS WAIT COMMAND 22325 18433 22325 1000 3 0x80 ttyin bash 18433 6716 6716 1000 3 0x80 select sshd 6716 16269 6716 0 3 0x80 poll sshd 12901 7248 12901 1000 3 0 netio vlc 31897 1 31897 0 3 0x80 select sendmail 7248 18453 7248 1000 3 0x80 wait bash 18453 23914 23914 1000 3 0x80 select sshd 23914 16269 23914 0 3 0x80 poll sshd 25221 1 25221 0 3 0x80 ttyin getty 4666 1 4666 0 3 0x80 ttyin getty 30917 1 30917 0 3 0x80 ttyin getty 20168 1 20168 0 3 0x80 ttyin getty 22257 1 22257 0 3 0x80 ttyin getty 19855 1 19855 0 3 0x80 ttyin getty 11012 8203 8203 0 3 0x80 nanosleep perl 15471 17539 17539 0 3 0x80 poll smbd 8203 8931 8203 0 3 0x88 pause sh 8931 17435 17435 0 3 0x80 piperd cron 17435 1 17435 0 3 0x80 select cron 4201 1 4201 0 3 0x80 poll nmbd 17539 1 17539 0 3 0x80 poll smbd 29385 1 29385 0 3 0x80 select inetd 12021 23879 23879 67 3 0x80 netcon httpd 7015 23879 23879 67 3 0x80 netcon httpd 7059 23879 23879 67 3 0x80 netcon httpd 25860 23879 23879 67 3 0x80 netcon httpd 22934 23879 23879 67 3 0x80 netcon httpd 23879 1 23879 67 3 0x80 select httpd 5038 1 5038 0 3 0x80 select lpd 16269 1 16269 0 3 0x80 select sshd 7325 0 0 0 3 0x100280 nfsidl nfsio 2104 0 0 0 3 0x100280 nfsidl nfsio 24971 0 0 0 3 0x100280 nfsidl nfsio 29488 0 0 0 3 0x100280 nfsidl nfsio 22097 1 22097 0 3 0x80 poll rpc.statd 10607 1 10607 0 3 0x80 poll rpc.lockd 31967 24948 24948 0 3 0x80 nfsd nfsd 6221 24948 24948 0 3 0x80 nfsd nfsd 18098 24948 24948 0 3 0x80 nfsd nfsd 32438 24948 24948 0 3 0x80 nfsd nfsd 24948 1 24948 0 3 0x80 netcon nfsd 17855 1 17855 0 3 0x80 select mountd 26823 1 26823 28 3 0x80 poll portmap 5132 1 5132 0 3 0x80 poll ntpd 10049 6829 10049 83 3 0x80 poll ntpd 6829 1 6829 83 3 0x80 poll ntpd 2252 31343 31343 70 3 0x80 select named 31343 1 31343 0 3 0x80 netio named 9272 23075 23075 74 3 0x80 bpf pflogd 23075 1 23075 0 3 0x80 netio pflogd 1436 14766 14766 73 3 0x80 poll syslogd 14766 1 14766 0 3 0x80 netio syslogd 18993 1 18993 77 3 0x80 poll dhclient 22754 1 28322 0 3 0x80 poll dhclient 21699 1 21699 0 3 0x80 mfsidl mount_mfs 16 0 0 0 3 0x100200 aiodoned aiodoned 15 0 0 0 3 0x100200 syncer update 14 0 0 0 3 0x100200 cleaner cleaner 13 0 0 0 3 0x100200 reaper reaper 12 0 0 0 3 0x100200 pgdaemon pagedaemon 11 0 0 0 3 0x100200 bored crypto 10 0 0 0 3 0x100200 pftm pfpurge 9 0 0 0 3 0x100200 usbtsk usbtask 8 0 0 0 3 0x100200 usbatsk usbatsk 7 0 0 0 3 0x100200 acpi0 acpi0 6 0 0 0 7 0x40100200 idle3 5 0 0 0 7 0x40100200 idle2 4 0 0 0 7 0x40100200 idle1 3 0 0 0 3 0x100200 bored syswq * 2 0 0 0 7 0x40100200 idle0 1 0 1 0 3 0x80 wait init 0 -1 0 0 3 0x200 scheduler swapper ddb{0}> show registers ds 0xd es 0x3b28 mp_pdirpa+0x1a41 fs 0x5bb0 acpi_pdirpa+0x17b8 gs 0x10 rdi 0x1 rsi 0x282 rbp 0xffff800022133b18 rbx 0xffffffff807e5bb0 addrmask+0x2470 rdx 0x7 rcx 0xffffffff80a0b640 cpu_info_primary rax 0x1 r8 0xffff800022133a38 r9 0 r10 0xffff800022133ac0 r11 0xffffffff801b26e0 comcnputc r12 0x100 r13 0xffff800022133b28 r14 0 r15 0xffff800022133c3c rip 0xffffffff80431445 Debugger+0x5 cs 0x8 rflags 0x202 rsp 0xffff800022133b18 ss 0x10 Debugger+0x5: leave ddb{0}> mach ddbcpu 1 Stopped at Debugger+0x5: leave RUN AT LEAST 'trace' AND 'ps' AND INCLUDE OUTPUT WHEN REPORTING THIS PANIC! IF RUNNING SMP, USE 'mach ddbcpu <#>' AND 'trace' ON OTHER PROCESSORS, TOO. DO NOT EVEN BOTHER REPORTING THIS WITHOUT INCLUDING THAT INFORMATION! ddb{1}> trace Debugger() at Debugger+0x5 x86_ipi_handler() at x86_ipi_handler+0x64 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x1b --- interrupt --- Bad frame pointer: 0xffff80002213df10 end trace frame: 0xffff80002213df10, count: -3 cpu_idle_cycle+0x13: ddb{1}> show registers ds 0x6728 acpi_pdirpa+0x2330 es 0xdd98 acpi_pdirpa+0x99a0 fs 0x3660 mp_pdirpa+0x1579 gs 0x5000 acpi_pdirpa+0xc08 rdi 0xffff800000105000 rsi 0x2 rbp 0xffff80002213ddc8 rbx 0x7 rdx 0xffff800000197801 rcx 0x7 rax 0xffffff7f r8 0 r9 0xffff8000222198b8 r10 0 r11 0xffff8000222194d0 r12 0 r13 0xffff800000105000 r14 0xfffffe821fcb3660 r15 0 rip 0xffffffff80431445 Debugger+0x5 cs 0x8 rflags 0x246 rsp 0xffff80002213ddc8 ss 0x10 Debugger+0x5: leave ddb{1}> mach ddbcpu 0 Stopped at Debugger+0x5: leave RUN AT LEAST 'trace' AND 'ps' AND INCLUDE OUTPUT WHEN REPORTING THIS PANIC! IF RUNNING SMP, USE 'mach ddbcpu <#>' AND 'trace' ON OTHER PROCESSORS, TOO. DO NOT EVEN BOTHER REPORTING THIS WITHOUT INCLUDING THAT INFORMATION! ddb{0}> ############################################################# dmesg: OpenBSD 5.0-current (GENERIC.MP) #126: Thu Nov 10 10:57:34 MST 2011 [email protected]:/usr/src/sys/arch/amd64/compile/GENERIC.MP real mem = 8319926272 (7934MB) avail mem = 8084312064 (7709MB) mainbus0 at root bios0 at mainbus0: SMBIOS rev. 2.5 @ 0x9f000 (72 entries) bios0: vendor American Megatrends Inc. version "1902" date 07/14/2009 bios0: ASUSTeK Computer INC. M3A78-EM acpi0 at bios0: rev 2 acpi0: sleep states S0 S1 S3 S4 S5 acpi0: tables DSDT FACP APIC MCFG OEMB HPET SSDT acpi0: wakeup devices PCE2(S4) PCE3(S4) PCE4(S4) PCE5(S4) PCE6(S4) RLAN(S4) PCE7(S4) PCE9(S4) PCEA(S4) PCEB(S4) PCEC(S4) SBAZ(S4) PS2M(S4) PS2K(S4) UAR1(S4) P0PC(S4) UHC1(S4) UHC2(S4) UHC3(S4) USB4(S4) UHC5(S4) UHC6(S4) UHC7(S4) acpitimer0 at acpi0: 3579545 Hz, 32 bits acpimadt0 at acpi0 addr 0xfee00000: PC-AT compat cpu0 at mainbus0: apid 0 (boot processor) cpu0: AMD Phenom(tm) 9550 Quad-Core Processor, 2212.22 MHz cpu0: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,HTT,SSE3,MWAIT,CX16,POPCNT,NXE,MMXX,FFXSR,LONG,3DNOW2,3DNOW cpu0: 64KB 64b/line 2-way I-cache, 64KB 64b/line 2-way D-cache, 512KB 64b/line 16-way L2 cache cpu0: ITLB 32 4KB entries fully associative, 16 4MB entries fully associative cpu0: DTLB 48 4KB entries fully associative, 48 4MB entries fully associative cpu0: apic clock running at 201MHz cpu1 at mainbus0: apid 1 (application processor) cpu1: AMD Phenom(tm) 9550 Quad-Core Processor, 2211.90 MHz cpu1: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,HTT,SSE3,MWAIT,CX16,POPCNT,NXE,MMXX,FFXSR,LONG,3DNOW2,3DNOW cpu1: 64KB 64b/line 2-way I-cache, 64KB 64b/line 2-way D-cache, 512KB 64b/line 16-way L2 cache cpu1: ITLB 32 4KB entries fully associative, 16 4MB entries fully associative cpu1: DTLB 48 4KB entries fully associative, 48 4MB entries fully associative cpu2 at mainbus0: apid 2 (application processor) cpu2: AMD Phenom(tm) 9550 Quad-Core Processor, 2211.90 MHz cpu2: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,HTT,SSE3,MWAIT,CX16,POPCNT,NXE,MMXX,FFXSR,LONG,3DNOW2,3DNOW cpu2: 64KB 64b/line 2-way I-cache, 64KB 64b/line 2-way D-cache, 512KB 64b/line 16-way L2 cache cpu2: ITLB 32 4KB entries fully associative, 16 4MB entries fully associative cpu2: DTLB 48 4KB entries fully associative, 48 4MB entries fully associative cpu3 at mainbus0: apid 3 (application processor) cpu3: AMD Phenom(tm) 9550 Quad-Core Processor, 2211.90 MHz cpu3: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,HTT,SSE3,MWAIT,CX16,POPCNT,NXE,MMXX,FFXSR,LONG,3DNOW2,3DNOW cpu3: 64KB 64b/line 2-way I-cache, 64KB 64b/line 2-way D-cache, 512KB 64b/line 16-way L2 cache cpu3: ITLB 32 4KB entries fully associative, 16 4MB entries fully associative cpu3: DTLB 48 4KB entries fully associative, 48 4MB entries fully associative ioapic0 at mainbus0: apid 4 pa 0xfec00000, version 21, 24 pins acpimcfg0 at acpi0 addr 0xe0000000, bus 0-255 acpihpet0 at acpi0: 14318180 Hz acpiprt0 at acpi0: bus 0 (PCI0) acpiprt1 at acpi0: bus 1 (P0P1) acpiprt2 at acpi0: bus -1 (PCE2) acpiprt3 at acpi0: bus -1 (PCE3) acpiprt4 at acpi0: bus 2 (PCE4) acpiprt5 at acpi0: bus 3 (PCE5) acpiprt6 at acpi0: bus 4 (PCE6) acpiprt7 at acpi0: bus 5 (P0PC) acpicpu0 at acpi0: PSS acpicpu1 at acpi0: PSS acpicpu2 at acpi0: PSS acpicpu3 at acpi0: PSS aibs0 at acpi0: RTMP RVLT RFAN GGRP GITM SITM acpibtn0 at acpi0: PWRB cpu0: 2211 MHz: speeds: 2200 1100 MHz pci0 at mainbus0 bus 0 pchb0 at pci0 dev 0 function 0 "AMD RS780 Host" rev 0x00 ppb0 at pci0 dev 1 function 0 vendor "Asustek", unknown product 0x9602 rev 0x00 pci1 at ppb0 bus 1 vga1 at pci1 dev 5 function 0 "ATI Radeon HD 3200" rev 0x00 wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation) wsdisplay0: screen 1-5 added (80x25, vt100 emulation) radeondrm0 at vga1: apic 4 int 18 drm0 at radeondrm0 azalia0 at pci1 dev 5 function 1 "ATI RS780 HD Audio" rev 0x00: msi azalia0: no supported codecs ppb1 at pci0 dev 4 function 0 "AMD RS780 PCIE" rev 0x00: msi pci2 at ppb1 bus 2 mskc0 at pci2 dev 0 function 0 "Marvell Yukon 88E8053" rev 0x20, Yukon-2 EC rev. A3 (0x2): apic 4 int 16 msk0 at mskc0 port A: address 00:50:43:00:7c:9a eephy0 at msk0 phy 0: 88E1111 Gigabit PHY, rev. 2 ppb2 at pci0 dev 5 function 0 "AMD RS780 PCIE" rev 0x00: msi pci3 at ppb2 bus 3 "JMicron FireWire" rev 0x00 at pci3 dev 0 function 0 not configured ppb3 at pci0 dev 6 function 0 "AMD RS780 PCIE" rev 0x00: msi pci4 at ppb3 bus 4 re0 at pci4 dev 0 function 0 "Realtek 8168" rev 0x02: RTL8168C/8111C (0x3c00), apic 4 int 18, address 00:22:15:2c:7d:0b rgephy0 at re0 phy 7: RTL8169S/8110S PHY, rev. 2 ahci0 at pci0 dev 17 function 0 "ATI SBx00 SATA" rev 0x00: apic 4 int 22, AHCI 1.1 scsibus0 at ahci0: 32 targets sd0 at scsibus0 targ 0 lun 0: <ATA, ST3500320AS, SD15> SCSI3 0/direct fixed naa.5000c500099f8c18 sd0: 476940MB, 512 bytes/sector, 976773168 sectors sd1 at scsibus0 targ 1 lun 0: <ATA, SAMSUNG HD502IJ, 1AA0> SCSI3 0/direct fixed naa.50000f000b170183 sd1: 476940MB, 512 bytes/sector, 976773168 sectors sd2 at scsibus0 targ 2 lun 0: <ATA, WDC WD740ADFD-00, 21.0> SCSI3 0/direct fixed t10.ATA_WDC_WD740ADFD-00NLR5_WD-WMANS2500775 sd2: 70911MB, 512 bytes/sector, 145226112 sectors cd0 at scsibus0 targ 4 lun 0: <LITE-ON, DVDRW LH-20A1L, BL05> ATAPI 5/cdrom removable sd3 at scsibus0 targ 5 lun 0: <ATA, WDC WD1001FALS-0, 05.0> SCSI3 0/direct fixed naa.50014ee0ac0a4aec sd3: 953869MB, 512 bytes/sector, 1953525168 sectors ohci0 at pci0 dev 18 function 0 "ATI SB700 USB" rev 0x00: apic 4 int 16, version 1.0, legacy support ohci1 at pci0 dev 18 function 1 "ATI SB700 USB" rev 0x00: apic 4 int 16, version 1.0, legacy support ehci0 at pci0 dev 18 function 2 "ATI SB700 USB2" rev 0x00: apic 4 int 17 usb0 at ehci0: USB revision 2.0 uhub0 at usb0 "ATI EHCI root hub" rev 2.00/1.00 addr 1 ohci2 at pci0 dev 19 function 0 "ATI SB700 USB" rev 0x00: apic 4 int 18, version 1.0, legacy support ohci3 at pci0 dev 19 function 1 "ATI SB700 USB" rev 0x00: apic 4 int 18, version 1.0, legacy support ehci1 at pci0 dev 19 function 2 "ATI SB700 USB2" rev 0x00: apic 4 int 19 usb1 at ehci1: USB revision 2.0 uhub1 at usb1 "ATI EHCI root hub" rev 2.00/1.00 addr 1 piixpm0 at pci0 dev 20 function 0 "ATI SBx00 SMBus" rev 0x3a: SMI iic0 at piixpm0 spdmem0 at iic0 addr 0x50: 2GB DDR2 SDRAM ECC PC2-5300CL5 spdmem1 at iic0 addr 0x51: 2GB DDR2 SDRAM ECC PC2-5300CL5 spdmem2 at iic0 addr 0x52: 2GB DDR2 SDRAM ECC PC2-5300CL5 spdmem3 at iic0 addr 0x53: 2GB DDR2 SDRAM ECC PC2-5300CL5 pciide0 at pci0 dev 20 function 1 "ATI SB700 IDE" rev 0x00: DMA, channel 0 configured to compatibility, channel 1 configured to compatibility azalia1 at pci0 dev 20 function 2 "ATI SBx00 HD Audio" rev 0x00: apic 4 int 16 azalia1: codecs: Realtek ALC888 audio0 at azalia1 pcib0 at pci0 dev 20 function 3 "ATI SB700 ISA" rev 0x00 ppb4 at pci0 dev 20 function 4 "ATI SB600 PCI" rev 0x00 pci5 at ppb4 bus 5 ohci4 at pci0 dev 20 function 5 "ATI SB700 USB" rev 0x00: apic 4 int 18, version 1.0, legacy support pchb1 at pci0 dev 24 function 0 "AMD AMD64 10h HyperTransport" rev 0x00 pchb2 at pci0 dev 24 function 1 "AMD AMD64 10h Address Map" rev 0x00 pchb3 at pci0 dev 24 function 2 "AMD AMD64 10h DRAM Cfg" rev 0x00 km0 at pci0 dev 24 function 3 "AMD AMD64 10h Misc Cfg" rev 0x00 pchb4 at pci0 dev 24 function 4 "AMD AMD64 10h Link Cfg" rev 0x00 usb2 at ohci0: USB revision 1.0 uhub2 at usb2 "ATI OHCI root hub" rev 1.00/1.00 addr 1 usb3 at ohci1: USB revision 1.0 uhub3 at usb3 "ATI OHCI root hub" rev 1.00/1.00 addr 1 usb4 at ohci2: USB revision 1.0 uhub4 at usb4 "ATI OHCI root hub" rev 1.00/1.00 addr 1 usb5 at ohci3: USB revision 1.0 uhub5 at usb5 "ATI OHCI root hub" rev 1.00/1.00 addr 1 isa0 at pcib0 isadma0 at isa0 com0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo com0: console pckbc0 at isa0 port 0x60/5 pckbd0 at pckbc0 (kbd slot) pckbc0: using irq 1 for kbd slot wskbd0 at pckbd0: console keyboard, using wsdisplay0 pcppi0 at isa0 port 0x61 spkr0 at pcppi0 lpt0 at isa0 port 0x378/4 irq 7 it0 at isa0 port 0x2e/2: IT8712F rev 8, EC port 0x290 fdc0 at isa0 port 0x3f0/6 irq 6 drq 2 usb6 at ohci4: USB revision 1.0 uhub6 at usb6 "ATI OHCI root hub" rev 1.00/1.00 addr 1 mtrr: Pentium Pro MTRR support uhub7 at uhub0 port 2 "Genesys Logic USB2.0 Hub" rev 2.00/7.02 addr 2 uhub7: device problem, disabling port 2 uhidev0 at uhub3 port 2 configuration 1 interface 0 "CHESEN PS2 to USB Converter" rev 1.10/0.10 addr 2 uhidev0: iclass 3/1 ukbd0 at uhidev0: 8 modifier keys, 6 key codes wskbd1 at ukbd0 mux 1 wskbd1: connecting to wsdisplay0 uhidev1 at uhub3 port 2 configuration 1 interface 1 "CHESEN PS2 to USB Converter" rev 1.10/0.10 addr 2 uhidev1: iclass 3/1, 3 report ids ums0 at uhidev1 reportid 1: 5 buttons, Z dir wsmouse0 at ums0 mux 0 uhid0 at uhidev1 reportid 2: input=1, output=0, feature=0 uhid1 at uhidev1 reportid 3: input=3, output=0, feature=0 vscsi0 at root scsibus1 at vscsi0: 256 targets softraid0 at root scsibus2 at softraid0: 256 targets root on sd0a swap on sd0b dump on sd0b WARNING: / was not properly unmounted
