kern/132646: Recent DRM kernel crash in 7.1-STABLE

[Miroslav Drbal]

>Number:         132646
>Category:       kern
>Synopsis:       Recent DRM kernel crash in 7.1-STABLE
>Confidential:   no
>Severity:       critical
>Priority:       high
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sat Mar 14 22:50:07 UTC 2009
>Closed-Date:
>Last-Modified:
>Originator:     Miroslav Drbal
>Release:        7.1-STABLE
>Organization:
>Environment:
FreeBSD devil 7.1-STABLE FreeBSD 7.1-STABLE #2: Sat Mar 14 12:54:56 CET 2009     apoc at devil:/usr/obj/usr/src/sys/DEVIL  i386
>Description:
Unread portion of the kernel message buffer:
<118>Mar 13 23:24:17 devil syslogd: exiting on signal 15
info: [drm] Num pipes: 1


Fatal trap 12: page fault while in kernel mode
cpuid = 0; apic id = 00
fault virtual address   = 0x10
fault code              = supervisor read, page not present
instruction pointer     = 0x20:0xc4a39d69
stack pointer           = 0x28:0xc3ea1c3c
frame pointer           = 0x28:0xc3ea1c4c
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, def32 1, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 12 (swi4: clock sio)
trap number             = 12
panic: page fault
cpuid = 0
Uptime: 7m0s
Physical memory: 1010 MB
Dumping 150 MB: 135 119 103 87 71 55 39 23 7

Reading symbols from /boot/kernel/acpi.ko...Reading symbols from /boot/kernel/acpi.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/acpi.ko
Reading symbols from /boot/kernel/linux.ko...Reading symbols from /boot/kernel/linux.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/linux.ko
Reading symbols from /usr/local/modules/rtc.ko...done.
Loaded symbols for /usr/local/modules/rtc.ko
Reading symbols from /boot/kernel/radeon.ko...Reading symbols from /boot/kernel/radeon.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/radeon.ko
Reading symbols from /boot/kernel/drm.ko...Reading symbols from /boot/kernel/drm.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/drm.ko
#0  doadump () at pcpu.h:196
196             __asm __volatile("movl %%fs:0,%0" : "=r" (td));
(kgdb) bt full
#0  doadump () at pcpu.h:196
No locals.
#1  0xc07d6706 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:418
        _giantcnt = Variable "_giantcnt" is not available.
(kgdb) backtrace
#0  doadump () at pcpu.h:196
#1  0xc07d6706 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:418
#2  0xc07d69ee in panic (fmt=Variable "fmt" is not available.
) at /usr/src/sys/kern/kern_shutdown.c:574
#3  0xc0a606ac in trap_fatal (frame=0xc3ea1bfc, eva=16)
    at /usr/src/sys/i386/i386/trap.c:939
#4  0xc0a6091b in trap_pfault (frame=0xc3ea1bfc, usermode=0, eva=16)
    at /usr/src/sys/i386/i386/trap.c:852
#5  0xc0a61312 in trap (frame=0xc3ea1bfc) at /usr/src/sys/i386/i386/trap.c:530
#6  0xc0a45deb in calltrap () at /usr/src/sys/i386/i386/exception.s:159
#7  0xc4a39d69 in radeon_get_vblank_counter (dev=0xc4354400, crtc=0)
    at /usr/src/sys/modules/drm/radeon/../../../dev/drm/radeon_irq.c:308
#8  0xc4a6114e in vblank_disable_fn (arg=0xc4354400)
    at /usr/src/sys/modules/drm/drm/../../../dev/drm/drm_irq.c:91
#9  0xc07e9576 in softclock (dummy=0x0) at /usr/src/sys/kern/kern_timeout.c:274
#10 0xc07b42cb in ithread_loop (arg=0xc408b280)
    at /usr/src/sys/kern/kern_intr.c:1088
#11 0xc07b0d74 in fork_exit (callout=0xc07b40f0 <ithread_loop>,
    arg=0xc408b280, frame=0xc3ea1d38) at /usr/src/sys/kern/kern_fork.c:810
#12 0xc0a45e60 in fork_trampoline () at /usr/src/sys/i386/i386/exception.s:264
>How-To-Repeat:
I used radeondriver on my X600 Mobility card, after some work in X server i did server shutdown from menu. Kernel crashed.
>Fix:


>Release-Note:
>Audit-Trail:
>Unformatted: