Hi.

While testing a diff for brad@ I found that vr(4) will panic under
load on a sparc64 when running iperf (after running dhclient on vr0,
if that makes any difference).  Please let me know if there's anything
other info that could help.

Boot device: /pci@1f,0/pci@1/scsi@8/disk@1,0  File and args: bsd.57
OpenBSD IEEE 1275 Bootblock 1.4
..>> OpenBSD BOOT 1.7
Booting /pci@1f,0/pci@1/scsi@8/disk@1,0:a/bsd.57
8282776@0x1000000+7528@0x17e6298+209432@0x1800000+3984872@0x1833218 
symbols @ 0xfef46380 136+458208+298978 start=0x1000000
[ using 758224 bytes of bsd ELF symbol table ]
console is /pci@1f,0/pci@1,1/isa@7/serial@0,3f8
Copyright (c) 1982, 1986, 1989, 1991, 1993
        The Regents of the University of California.  All rights reserved.
Copyright (c) 1995-2015 OpenBSD. All rights reserved.  http://www.OpenBSD.org

OpenBSD 5.7-current (GENERIC) #547: Wed May 27 14:31:12 MDT 2015
    dera...@sparc64.openbsd.org:/usr/src/sys/arch/sparc64/compile/GENERIC
real mem = 1073741824 (1024MB)
avail mem = 1039228928 (991MB)
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root: Netra T1 200 (UltraSPARC-IIe 500MHz)
cpu0 at mainbus0: SUNW,UltraSPARC-IIe (rev 1.4) @ 500 MHz
cpu0: physical 16K instruction (32 b/l), 16K data (32 b/l), 256K external (64 
b/l)
psycho0 at mainbus0: SUNW,sabre, impl 0, version 0, ign 7c0
psycho0: bus range 0-2, PCI bus 0
psycho0: dvma map c0000000-dfffffff
pci0 at psycho0
ppb0 at pci0 dev 1 function 1 "Sun Simba" rev 0x13
pci1 at ppb0 bus 1
ebus0 at pci1 dev 12 function 0 "Sun RIO EBus" rev 0x01
"flashprom" at ebus0 addr 0-fffff not configured
clock1 at ebus0 addr 0-1fff: mk48t59
lom0 at ebus0 addr 200000-200003 ivec 0x2a: LOMlite2 rev 3.12
alipm0 at pci1 dev 3 function 0 "Acer Labs M7101 Power" rev 0x00: 74KHz clock
iic0 at alipm0
"max1617" at alipm0 addr 0x18 skipped due to alipm0 bugs
spdmem0 at iic0 addr 0x54: 512MB SDRAM registered ECC PC133CL2
spdmem1 at iic0 addr 0x55: 512MB SDRAM registered ECC PC133CL2
ebus1 at pci1 dev 7 function 0 "Acer Labs M1533 ISA" rev 0x00
power0 at ebus1 addr 2000-2007 ivec 0x25
com0 at ebus1 addr 3f8-3ff ivec 0x2b: ns16550a, 16 byte fifo
com0: console
com1 at ebus1 addr 2e8-2ef ivec 0x2b: ns16550a, 16 byte fifo
gem0 at pci1 dev 12 function 1 "Sun ERI Ether" rev 0x01: ivec 0x7c6, address 
00:03:ba:13:87:35
ukphy0 at gem0 phy 1: Generic IEEE 802.3u media interface, rev. 1: OUI 
0x0010dd, model 0x0002
ohci0 at pci1 dev 12 function 3 "Sun USB" rev 0x01: ivec 0x7e4, version 1.0, 
legacy support
pciide0 at pci1 dev 13 function 0 "Acer Labs M5229 UDMA IDE" rev 0xc3: DMA, 
channel 0 configured to native-PCI, channel 1 configured to native-PCI
pciide0: using ivec 0x7cc for native-PCI interrupt
atapiscsi0 at pciide0 channel 0 drive 0
scsibus1 at atapiscsi0: 2 targets
cd0 at scsibus1 targ 0 lun 0: <TEAC, CD-224E, 1.7A> ATAPI 5/cdrom removable
cd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 2
pciide0: channel 1 disabled (no drives)
gem1 at pci1 dev 5 function 1 "Sun ERI Ether" rev 0x01interrupt_vector: 
spurious vector 7df at pil 13
: ivec 0x7dc, address 00:03:ba:13:87:36
ukphy1 at gem1 phy 1: Generic IEEE 802.3u media interface, rev. 1: OUI 
0x0010dd, model 0x0002
ohci1 at pci1 dev 5 function 3 "Sun USB" rev 0x01: ivec 0x7e6, version 1.0, 
legacy support
usb0 at ohci0: USB revision 1.0
uhub0 at usb0 "Sun OHCI root hub" rev 1.00/1.00 addr 1
usb1 at ohci1: USB revision 1.0
uhub1 at usb1 "Sun OHCI root hub" rev 1.00/1.00 addr 1
ppb1 at pci0 dev 1 function 0 "Sun Simba" rev 0x13
pci2 at ppb1 bus 2
siop0 at pci2 dev 8 function 0 "Symbios Logic 53c896" rev 0x07: ivec 0x7e0, 
using 8K of on-board RAM
scsibus2 at siop0: 16 targets, initiator 7
sym0 at scsibus2 targ 0 lun 0: <SEAGATE, ST318305LSUN18G, 0340> SCSI3 0/direct 
fixed serial.SEAGATE_ST318305LSUN18G_3JKPYHZB00002246FDXB
sd0 at scsibus0 targ 0 lun 0: <SEAGATE, ST318305LSUN18G, 0340> SCSI3 0/direct 
fixed serial.SEAGATE_ST318305LSUN18G_3JKPYHZB00002246FDXB
sym1 at scsibus2 targ 1 lun 0: <SEAGATE, ST318305LSUN18G, 0641> SCSI3 0/direct 
fixed serial.SEAGATE_ST318305LSUN18G_3JKQ5VRC0000230827Z1
sd1 at scsibus0 targ 1 lun 0: <SEAGATE, ST318305LSUN18G, 0641> SCSI3 0/direct 
fixed serial.SEAGATE_ST318305LSUN18G_3JKQ5VRC0000230827Z1
sd1: 17274MB, 512 bytes/sector, 35378533 sectors
siop1 at pci2 dev 8 function 1 "Symbios Logic 53c896" rev 0x07: ivec 0x7e0, 
using 8K of on-board RAM
scsibus3 at siop1: 16 targets, initiator 7
vr0 at pci2 dev 5 function 0 "VIA VT6105 RhineIII" rev 0x86: ivec 0x7d5, 
address 00:17:9a:07:34:e3
ukphy2 at vr0 phy 1: Generic IEEE 802.3u media interface, rev. 4: OUI 0x004063, 
model 0x0034
siop0: target 0 now using tagged 16 bit 40.0 MHz 31 REQ/ACK offset xfers
vscsi0 at root
scsibus4 at vscsi0: 256 targets
softraid0 at root
scsibus5 at softraid0: 256 targets
siop0: target 1 now using tagged 16 bit 40.0 MHz 31 REQ/ACK offset xfers
bootpath: /pci@1f,0/pci@1,0/scsi@8,0/disk@1,0
root on sd1a (c0e0da450536c5a8.a) swap on sd1b dump on sd1b
WARNING: / was not properly unmounted
Automatic boot in progress: starting file system checks.
/dev/rsd1a: 2306 files, 147911 used, 160406 free (206 frags, 20025 blocks, 0.1% 
fragmentation)
/dev/rsd1a: MARKING FILE SYSTEM CLEAN
/dev/rsd1k: 15 files, 56 used, 3364371 free (59 frags, 420539 blocks, 0.0% 
fragmentation)
/dev/rsd1k: MARKING FILE SYSTEM CLEAN
/dev/rsd1d: 4 files, 3 used, 491260 free (28 frags, 61404 blocks, 0.0% 
fragmentation)
/dev/rsd1d: MARKING FILE SYSTEM CLEAN
/dev/rsd1f: 146153 files, 1462455 used, 2006352 free (48728 frags, 244703 
blocks, 1.4% fragmentation)
/dev/rsd1f: MARKING FILE SYSTEM CLEAN
/dev/rsd1e: 623 files, 4886 used, 734727 free (103 frags, 91828 blocks, 0.0% 
fragmentation)
/dev/rsd1e: MARKING FILE SYSTEM CLEAN
setting tty flags
pf enabled
kern.bufcachepercent: 20 -> 50
starting network
starting early daemons: syslogd pflogd ntpd.
starting RPC daemons:.
savecore: no core dump
checking quotas: done.
clearing /tmp
starting pre-securelevel daemons:.
kern.securelevel: 0 -> 1
creating runtime link editor directory cache.
preserving editor files.
starting network daemons: sshd smtpd(failed) sndiod(failed).
starting local daemons:.
starting local daemons: cron.
Thu May 28 20:47:42 AEST 2015

OpenBSD/sparc64 (t1-obsd.dtucker.net) (console)

login: Overwriting valid tte entry (dva c00a2000 pa 32a1e000 &tte 0x40016f3e288 
tte 8000000032a20012)
extent `psycho0 dvma' (0xc0000000 - 0xe0000000), flags=2<NOCOALESCE>
     0xc0000000 - 0xc0005fff
     0xc0006000 - 0xc0007fff
     0xc0008000 - 0xc000dfff
     0xc000e000 - 0xc000ffff
     0xc0010000 - 0xc0011fff
     0xc0012000 - 0xc0013fff
     0xc0014000 - 0xc0015fff
     0xc0016000 - 0xc0017fff
     0xc0018000 - 0xc0019fff
     0xc001a000 - 0xc001bfff
     0xc001c000 - 0xc001dfff
     0xc001e000 - 0xc001ffff
     0xc0020000 - 0xc0021fff
     0xc0022000 - 0xc0023fff
     0xc0024000 - 0xc0025fff
     0xc0026000 - 0xc0027fff
     0xc0028000 - 0xc0029fff
     0xc002a000 - 0xc002bfff
     0xc002c000 - 0xc002dfff
     0xc002e000 - 0xc002ffff
     0xc0030000 - 0xc0031fff
     0xc0032000 - 0xc0033fff
     0xc0034000 - 0xc0035fff
     0xc0036000 - 0xc0037fff
     0xc0038000 - 0xc0039fff
     0xc003a000 - 0xc003bfff
     0xc003c000 - 0xc003dfff
     0xc003e000 - 0xc003ffff
     0xc0040000 - 0xc0041fff
     0xc0042000 - 0xc0043fff
     0xc0044000 - 0xc0045fff
     0xc0046000 - 0xc0047fff
     0xc0048000 - 0xc0049fff
     0xc004a000 - 0xc004bfff
     0xc004c000 - 0xc004dfff
     0xc004e000 - 0xc004ffff
     0xc0050000 - 0xc0051fff
     0xc0052000 - 0xc0053fff
     0xc0054000 - 0xc0055fff
     0xc0056000 - 0xc0057fff
     0xc0058000 - 0xc0059fff
     0xc005a000 - 0xc005bfff
     0xc005c000 - 0xc005dfff
     0xc005e000 - 0xc005ffff
     0xc0060000 - 0xc0061fff
     0xc0062000 - 0xc0065fff
     0xc006a000 - 0xc006dfff
     0xc006e000 - 0xc0073fff
     0xc0074000 - 0xc0077fff
     0xc0078000 - 0xc007bfff
     0xc0080000 - 0xc0085fff
     0xc0086000 - 0xc008bfff
     0xc008c000 - 0xc008ffff
     0xc0090000 - 0xc0093fff
     0xc0094000 - 0xc0099fff
     0xc009a000 - 0xc009dfff
     0xc009e000 - 0xc00a1fff
     0xc00a2000 - 0xc00a7fff
     0xc0108000 - 0xc010bfff
     0xc010c000 - 0xc0111fff
     0xc0112000 - 0xc0117fff
     0xc0118000 - 0xc011bfff
     0xc011c000 - 0xc0121fff
     0xc0122000 - 0xc0125fff
     0xc0126000 - 0xc0129fff
     0xc012a000 - 0xc012dfff
     0xc012e000 - 0xc0131fff
     0xc0132000 - 0xc0137fff
     0xc0138000 - 0xc013dfff
     0xc013e000 - 0xc0141fff
     0xc0142000 - 0xc0145fff
     0xc0146000 - 0xc014bfff
panic: IOMMU overwrite
kdb breakpoint at 155ef04
Stopped at      Debugger+0x8:   nop
RUN AT LEAST 'trace' AND 'ps' AND INCLUDE OUTPUT WHEN REPORTING THIS PANIC!
DO NOT EVEN BOTHER REPORTING THIS WITHOUT INCLUDING THAT INFORMATION!
ddb> trace
iommu_enter(40001266380, 40001268058, c00a2000, 32a1e000, 401, e0000000) at iom
mu_enter+0x114
iommu_iomap_load_map(40001266380, 4000187f4e0, c00a2000, 401, 2000, 0) at iommu
_iomap_load_map+0x94
iommu_dvmamap_load_raw(0, 0, 4000187d200, e0017798, 0, 3) at iommu_dvmamap_load
_raw+0x2f0
_bus_dmamap_load_mbuf(0, 40001266300, 4000187d200, 0, 401, 18331d0) at _bus_dma
map_load_mbuf+0x1ac
vr_encap(4000176e000, e0017c58, 40009ee2b00, 4000a1acbc0, 40017107570, 2) at vr
_encap+0x88
vr_start(4000176e060, 40009ee3000, 40009ee3000, 4000a181740, ffffffffffff8d6a, f
fff) at vr_start+0xbc
nettxintr(e0017ec8, 0, 0, 5a8, 280f0, 40000) at nettxintr+0x6c
intr_handler(e0017ec8, 4000179e000, 27a02, c, 5a8, 34) at intr_handler+0xc
sparc_interrupt(0, 40009ee2a00, 0, 4, 40009f78fb0, 4000a1acb40) at sparc_interr
upt+0x298
sosend(0, 0, 40017107bc8, 1800, 0, 0) at sosend+0x4cc
dofilewritev(4000a0f9b00, 3, 40009f2c090, 40017107cd8, 0, 0) at dofilewritev+0x
16c
sys_write(4000a0f9b00, 40017107db8, 40017107df8, fa332c9208, fa04dfd400, 14b) a
t sys_write+0x80
syscall(40017107ed0, 404, fa8550c428, fa8550c42c, 0, f9e06f44a0) at syscall+0x2
8c         
softtrap(3, f9fdf78000, 20000, fa8552585c, 0, f9e06f45a0) at softtrap+0x19c
ddb> ps
   PID   PPID   PGRP    UID  S       FLAGS  WAIT          COMMAND
 16365  25652  16365    500  3        0x83  thrsleep      iperf
* 1785  25652  16365    500  7   0x4000003                iperf
 23364  25652  16365    500  2   0x4000003                iperf
 25652  14049  25652    500  3        0x8b  pause         ksh
 14049  27404  27404    500  3        0x90  select        sshd
 27404  24028  27404      0  3        0x92  poll          sshd
 26196      1  26196     77  3        0x90  poll          dhclient
 27374      1  27374      0  3        0x80  poll          dhclient
 10066  13625  10066    500  3        0x83  ttyin         ksh
 13625  15818  15818    500  3        0x90  select        sshd
 15818  24028  15818      0  3        0x92  poll          sshd
  3825      1   3825      0  3        0x83  ttyin         getty
  7668      1   7668      0  3        0x80  poll          cron
 24028      1  24028      0  3        0x80  select        sshd
   412      1    412      0  3        0x80  poll          ntpd
 14694   6288  14694     83  3        0x90  poll          ntpd
  6288      1   6288     83  3        0x90  poll          ntpd
 24714  12631  12631     74  3        0x90  bpf           pflogd
 12631      1  12631      0  3        0x80  netio         pflogd
    76  32265  32265     73  2        0x90                syslogd
 32265      1  32265      0  3        0x80  netio         syslogd
 31185      0      0      0  2     0x14200                zerothread
   814      0      0      0  3     0x14200  aiodoned      aiodoned
 31718      0      0      0  3     0x14200  syncer        update
  7143      0      0      0  3     0x14200  cleaner       cleaner
 10923      0      0      0  3     0x14200  reaper        reaper
  2288      0      0      0  3     0x14200  pgdaemon      pagedaemon
  7775      0      0      0  3     0x14200  bored         crypto
  3555      0      0      0  3     0x14200  pftm          pfpurge
  6871      0      0      0  3     0x14200  usbtsk        usbtask
 13170      0      0      0  3     0x14200  usbatsk       usbatsk
 15447      0      0      0  3     0x14200  bored         sensors
  1989      0      0      0  2     0x14200                softnet
  9001      0      0      0  3     0x14200  bored         systqmp
 17203      0      0      0  3     0x14200  bored         systq
 28833      0      0      0  3  0x40014200                idle0
 26016      0      0      0  3     0x14200  kmalloc       kmthread
     1      0      1      0  3        0x82  wait          init
     0     -1      0      0  3     0x10200  scheduler     swapper
ddb> boot reboot
extent `psycho0 dvma' (0xc0000000 - 0xe0000000), flags=2<NOCOALESCE>
     0xc0000000 - 0xc0005fff
     0xc0006000 - 0xc0007fff
     0xc0008000 - 0xc000dfff
     0xc000e000 - 0xc000ffff
     0xc0010000 - 0xc0011fff
     0xc0012000 - 0xc0013fff
     0xc0014000 - 0xc0015fff
     0xc0016000 - 0xc0017fff
     0xc0018000 - 0xc0019fff
     0xc001a000 - 0xc001bfff
     0xc001c000 - 0xc001dfff
     0xc001e000 - 0xc001ffff
     0xc0020000 - 0xc0021fff
     0xc0022000 - 0xc0023fff
     0xc0024000 - 0xc0025fff
     0xc0026000 - 0xc0027fff
     0xc0028000 - 0xc0029fff
     0xc002a000 - 0xc002bfff
     0xc002c000 - 0xc002dfff
     0xc002e000 - 0xc002ffff
     0xc0030000 - 0xc0031fff
     0xc0032000 - 0xc0033fff
     0xc0034000 - 0xc0035fff
     0xc0036000 - 0xc0037fff
     0xc0038000 - 0xc0039fff
     0xc003a000 - 0xc003bfff
     0xc003c000 - 0xc003dfff
     0xc003e000 - 0xc003ffff
     0xc0040000 - 0xc0041fff
     0xc0042000 - 0xc0043fff
     0xc0044000 - 0xc0045fff
     0xc0046000 - 0xc0047fff
     0xc0048000 - 0xc0049fff
     0xc004a000 - 0xc004bfff
     0xc0062000 - 0xc0065fff
     0xc006a000 - 0xc006dfff
     0xc006e000 - 0xc0073fff
     0xc0074000 - 0xc0077fff
     0xc0078000 - 0xc007bfff
     0xc0080000 - 0xc0085fff
     0xc0086000 - 0xc008bfff
     0xc008c000 - 0xc008ffff
     0xc0090000 - 0xc0093fff
     0xc0094000 - 0xc0099fff
     0xc009a000 - 0xc009dfff
     0xc009e000 - 0xc00a1fff
     0xc00a2000 - 0xc00a7fff
     0xc0108000 - 0xc010bfff
     0xc010c000 - 0xc0111fff
     0xc0112000 - 0xc0117fff
     0xc0118000 - 0xc011bfff
     0xc011c000 - 0xc0121fff
     0xc0122000 - 0xc0125fff
     0xc0126000 - 0xc0129fff
     0xc012a000 - 0xc012dfff
     0xc012e000 - 0xc0131fff
     0xc0132000 - 0xc0137fff
     0xc0138000 - 0xc013dfff
     0xc013e000 - 0xc0141fff
     0xc0142000 - 0xc0145fff
     0xc0146000 - 0xc014bfff
extent_free: start 0xc00b4000, end 0xc00b9fff
panic: extent_free: region not found
kdb breakpoint at 155ef04
Stopped at      Debugger+0x8:   nop
RUN AT LEAST 'trace' AND 'ps' AND INCLUDE OUTPUT WHEN REPORTING THIS PANIC!
DO NOT EVEN BOTHER REPORTING THIS WITHOUT INCLUDING THAT INFORMATION!
ddb> 
rebooting

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
    Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.

Reply via email to