>Synopsis: kernel hangs when forwarding/backwarding on mplayer
>Category: amd64 kernel
>Environment:
System : OpenBSD 4.8
Details : OpenBSD 4.8-current (GENERIC.MP) #644: Sun Nov 21
11:19:23 MST 2010
[email protected]:/usr/src/sys/arch/amd64/compile/GENERIC.MP
Architecture: OpenBSD.amd64
Machine : amd64
>Description:
The kernel hangs and falls into ddb when forwarding/backwarding
a movie file on mplayer. It happens on .mp4 and .avi(divx) file.
Mailed to edd@ and jake...@. (jakemsr@ asked me to file the PR)
>How-To-Repeat:
'mplayer <file>' and keep pressing arrow keys to do
forwarding/backwarding,
switching forwarding/backwarding randomly until the kernel hangs.
>Fix:
Not yet available.
dmesg:
OpenBSD 4.8-current (GENERIC.MP) #644: Sun Nov 21 11:19:23 MST 2010
[email protected]:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 1063911424 (1014MB)
avail mem = 1021669376 (974MB)
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.6 @ 0xef800 (56 entries)
bios0: vendor Phoenix Technologies LTD version "1.0.4109" date 08/23/2010
bios0: NEC Express5800/GT110b [N8100-1592Y]
acpi0 at bios0: rev 2
acpi0: sleep states S0 S1 S4 S5
acpi0: tables DSDT FACP TCPA SSDT DMAR APIC MCFG HPET BOOT BERT
acpi0: wakeup devices PEG_(S5) P0P3(S5) P0P5(S3) PEX1(S4) PEX5(S4) PEX8(S4)
EHI1(S3) EHI2(S3) COM1(S5) COM2(S5) LAN_(S5) PCIB(S5)
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee00000: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Intel(R) Celeron(R) CPU G1101 @ 2.27GHz, 2261.26 MHz
cpu0:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,POPCNT,NXE,LONG
cpu0: 256KB 64b/line 8-way L2 cache
cpu0: apic clock running at 132MHz
cpu1 at mainbus0: apid 4 (application processor)
cpu1: Intel(R) Celeron(R) CPU G1101 @ 2.27GHz, 2260.97 MHz
cpu1:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,POPCNT,NXE,LONG
cpu1: 256KB 64b/line 8-way L2 cache
ioapic0 at mainbus0: apid 1 pa 0xfec00000, version 20, 24 pins
acpihpet0 at acpi0: 14318179 Hz
acpiprt0 at acpi0: bus 1 (PEG_)
acpiprt1 at acpi0: bus -1 (PEG2)
acpiprt2 at acpi0: bus -1 (P0P3)
acpiprt3 at acpi0: bus -1 (P0P5)
acpiprt4 at acpi0: bus 0 (PCI0)
acpiprt5 at acpi0: bus 5 (PEX1)
acpiprt6 at acpi0: bus 13 (PEX5)
acpiprt7 at acpi0: bus 14 (PEX8)
acpiprt8 at acpi0: bus 17 (PCIB)
acpicpu0 at acpi0: C3, C3, C1, PSS
acpicpu1 at acpi0: C3, C3, C1, PSS
acpibtn0 at acpi0: PWRB
cpu0: Enhanced SpeedStep 2260 MHz: speeds: 2261, 2128, 1995, 1862, 1729, 1596,
1463, 1330, 1197 MHz
pci0 at mainbus0 bus 0
pchb0 at pci0 dev 0 function 0 vendor "Intel", unknown product 0x0048 rev 0x12
ppb0 at pci0 dev 1 function 0 vendor "Intel", unknown product 0x0049 rev 0x12:
apic 1 int 16 (irq 11)
pci1 at ppb0 bus 1
vga1 at pci1 dev 0 function 0 "ATI Radeon HD 4350" rev 0x00
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
radeondrm0 at vga1: apic 1 int 16 (irq 11)
drm0 at radeondrm0
azalia0 at pci1 dev 0 function 1 "ATI Radeon HD 4000 HD Audio" rev 0x00: apic 1
int 17 (irq 11)
azalia0: no supported codecs
azalia0: initialization failure, detaching
ehci0 at pci0 dev 26 function 0 "Intel 3400 USB" rev 0x05: apic 1 int 16 (irq
11)
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 "Intel EHCI root hub" rev 2.00/1.00 addr 1
ppb1 at pci0 dev 28 function 0 "Intel 3400 PCIE" rev 0x05: apic 1 int 17 (irq
11)
pci2 at ppb1 bus 5
ppb2 at pci0 dev 28 function 4 "Intel 3400 PCIE" rev 0x05: apic 1 int 17 (irq
11)
pci3 at ppb2 bus 13
ppb3 at pci0 dev 28 function 7 "Intel 3400 PCIE" rev 0x05: apic 1 int 19 (irq
10)
pci4 at ppb3 bus 14
em0 at pci4 dev 0 function 0 "Intel PRO/1000 MT (82574L)" rev 0x00: apic 1 int
19 (irq 10), address 6c:f0:49:c6:ed:3d
ehci1 at pci0 dev 29 function 0 "Intel 3400 USB" rev 0x05: apic 1 int 23 (irq 9)
usb1 at ehci1: USB revision 2.0
uhub1 at usb1 "Intel EHCI root hub" rev 2.00/1.00 addr 1
ppb4 at pci0 dev 30 function 0 "Intel 82801BA Hub-to-PCI" rev 0xa5
pci5 at ppb4 bus 17
cmpci0 at pci5 dev 0 function 0 "C-Media Electronics CMI8738/C3DX Audio" rev
0x10: apic 1 int 16 (irq 11)
audio0 at cmpci0
opl at cmpci0 not configured
mpu at cmpci0 not configured
"XGI Technology Volari Z9s/Z9m" rev 0x00 at pci5 dev 3 function 0 not configured
pcib0 at pci0 dev 31 function 0 "Intel 3420 LPC" rev 0x05
pciide0 at pci0 dev 31 function 2 "Intel 3400 SATA" rev 0x05: DMA, channel 0
configured to native-PCI, channel 1 configured to native-PCI
pciide0: using apic 1 int 19 (irq 10) for native-PCI interrupt
wd0 at pciide0 channel 0 drive 0: <WDC WD1602ABYS-19B7A0>
wd0: 16-sector PIO, LBA48, 152587MB, 312500160 sectors
wd1 at pciide0 channel 0 drive 1: <ST31000333AS>
wd1: 16-sector PIO, LBA48, 953869MB, 1953525168 sectors
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 6
wd1(pciide0:0:1): using PIO mode 4, Ultra-DMA mode 6
wd2 at pciide0 channel 1 drive 0: <Hitachi HDT721010SLA360>
wd2: 16-sector PIO, LBA48, 953869MB, 1953525168 sectors
wd2(pciide0:1:0): using PIO mode 4, Ultra-DMA mode 6
ichiic0 at pci0 dev 31 function 3 "Intel 3400 SMBus" rev 0x05: apic 1 int 18
(irq 10)
iic0 at ichiic0
lm1 at iic0 addr 0x2d: W83627DHG
iic0: addr 0x2e 1a=80 1b=80 1c=80 1d=03 1e=7c 1f=e0 20=56 21=5e 22=c4 25=1e
26=1f 27=20 28=de 29=0a 2a=78 2b=0f 2c=ff 2d=ff 2e=ff 2f=ff 30=5e 31=1e 32=cc
33=bc 34=81 38=ff 39=ff 3a=cc 3b=e6 3c=b0 3d=80 3e=41 3f=6f 40=15 41=88 42=11
45=ff 47=ff 49=ff 4b=ff 4d=ff 4e=05 4f=36 50=81 51=7f 52=05 53=69 54=22 55=1e
56=34 57=16 58=50 59=46 5a=ff 5b=ff 5c=0a 5d=02 5e=02 5f=ac 60=cc 61=cc 62=e0
64=5e 65=1e 66=cc 67=2b 68=5a 69=5a 6a=80 6b=80 6c=80 6d=44 6e=44 76=d1 77=ff
78=02 7b=55 7c=01 7d=03 7f=02 86=ff 87=ff 8a=fb 8b=64 8c=64 8d=64 91=5d 92=5d
93=5d words 00=00e5 01=00e5 02=00e5 03=00e5 04=00e5 05=00e5 06=00e5 07=00e5
spdmem0 at iic0 addr 0x50: 1GB DDR3 SDRAM ECC PC3-10600 with thermal sensor
pciide1 at pci0 dev 31 function 5 "Intel 3400 SATA" rev 0x05: DMA, channel 0
wired to native-PCI, channel 1 wired to native-PCI
pciide1: using apic 1 int 18 (irq 10) for native-PCI interrupt
isa0 at pcib0
isadma0 at isa0
com0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
com1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
pcppi0 at isa0 port 0x61
spkr0 at pcppi0
wbsio0 at isa0 port 0x4e/2: W83627DHG-P rev 0x73
lm2 at wbsio0 port 0x290/8: W83627DHG
lm1 detached
mtrr: Pentium Pro MTRR support
uhub2 at uhub0 port 1 "Intel Rate Matching Hub" rev 2.00/0.00 addr 2
uhub3 at uhub1 port 1 "Intel Rate Matching Hub" rev 2.00/0.00 addr 2
uhub4 at uhub3 port 3 "Genesys Logic USB2.0 Hub" rev 2.00/9.01 addr 3
uhub5 at uhub4 port 3 "Genesys Logic USB2.0 Hub" rev 2.00/9.01 addr 4
uhidev0 at uhub5 port 4 configuration 1 interface 0 "Lite-On Technology Corp.
ThinkPad USB Keyboard with TrackPoint" rev 1.10/1.22 addr 5
uhidev0: iclass 3/1
ukbd0 at uhidev0: 8 modifier keys, 6 key codes
wskbd1 at ukbd0 mux 1
wskbd1: connecting to wsdisplay0
uhidev1 at uhub5 port 4 configuration 1 interface 1 "Lite-On Technology Corp.
ThinkPad USB Keyboard with TrackPoint" rev 1.10/1.22 addr 5
uhidev1: iclass 3/0, 4 report ids
ums0 at uhidev1 reportid 1: 3 buttons
wsmouse0 at ums0 mux 0
uhid0 at uhidev1 reportid 2: input=1, output=0, feature=0
uhid1 at uhidev1 reportid 3: input=3, output=1, feature=0
uhid2 at uhidev1 reportid 4: input=0, output=0, feature=4
uhidev2 at uhub3 port 6 configuration 1 interface 0 "Logitech USB Receiver" rev
2.00/12.01 addr 6
uhidev2: iclass 3/1
ukbd1 at uhidev2: 8 modifier keys, 6 key codes
wskbd2 at ukbd1 mux 1
wskbd2: connecting to wsdisplay0
uhidev3 at uhub3 port 6 configuration 1 interface 1 "Logitech USB Receiver" rev
2.00/12.01 addr 6
uhidev3: iclass 3/1, 8 report ids
ums1 at uhidev3 reportid 2: 16 buttons, Z dir
wsmouse1 at ums1 mux 0
uhid3 at uhidev3 reportid 3: input=4, output=0, feature=0
uhid4 at uhidev3 reportid 4: input=1, output=0, feature=0
uhid5 at uhidev3 reportid 8: input=1, output=0, feature=0
uhidev4 at uhub3 port 6 configuration 1 interface 2 "Logitech USB Receiver" rev
2.00/12.01 addr 6
uhidev4: iclass 3/0, 33 report ids
uhid6 at uhidev4 reportid 16: input=6, output=6, feature=0
uhid7 at uhidev4 reportid 17: input=19, output=19, feature=0
uhid8 at uhidev4 reportid 32: input=14, output=14, feature=0
uhid9 at uhidev4 reportid 33: input=31, output=31, feature=0
vscsi0 at root
scsibus0 at vscsi0: 256 targets
softraid0 at root
root on wd0a swap on wd0b dump on wd0b
1st ddb trace(sorry, didn't switch cpu!):
NMI ... going to debugger
Stopped at lapic_delay+0x4c: cmpl %edx,%eax
ddb{1}> ps
PID PPID PGRP UID S FLAGS WAIT COMMAND
* 5225 2394 5225 1000 7 0x2004000 mplayer
2394 20763 2394 1000 3 0x2004080 pause zsh
20763 1 20763 1000 3 0x2000080 kqread tmux
24649 21314 24649 1000 3 0x2004080 kqread tmux
31652 26905 31652 1000 3 0x2004080 ttyin uim-el-agent
28184 26905 28184 1000 3 0x2004080 select uim-el-helper-ag
21314 22612 21314 1000 3 0x2004080 pause zsh
31315 1 31315 1000 3 0x2000080 poll synergys
26905 6839 6839 1000 3 0x2004080 select emacs
22612 6703 6703 1000 3 0x2044180 select xterm
6839 8887 6839 1000 3 0x2004080 pause sh
6703 8887 6703 1000 3 0x2004080 pause sh
21580 1 8887 1000 3 0x2004080 select uim-helper-serve
9338 8887 8887 1000 3 0x2004080 select uim-xim
8887 3219 8887 1000 3 0x2004080 select ratpoison
18450 5731 5731 1000 3 0x2040180 netio Xorg
5731 3219 5731 1000 7 0x44100 Xorg
3219 20193 20193 1000 3 0x2004080 wait xinit
20193 12292 20193 1000 3 0x2004080 pause sh
32032 1 32032 0 3 0x2040180 select sendmail
17898 1 17898 0 3 0x2004080 ttyin getty
21444 1 21444 0 3 0x2004080 ttyin getty
6862 1 6862 0 3 0x2004080 ttyin getty
18791 1 18791 0 3 0x2004080 ttyin getty
5170 1 5170 0 3 0x2004080 ttyin getty
12292 1 12292 1000 3 0x2004080 pause zsh
6655 1 6655 0 3 0x2000080 select cron
25246 1 25246 0 3 0x2000080 kqread apmd
24314 1 24314 0 3 0x2000180 select inetd
4676 1 4676 0 3 0x2000080 select sshd
22481 29319 12604 83 3 0x2000180 poll ntpd
29319 12604 12604 83 3 0x2000180 poll ntpd
12604 1 12604 0 3 0x2000080 poll ntpd
22299 4199 4199 74 3 0x2000180 bpf pflogd
4199 1 4199 0 3 0x2000080 netio pflogd
27008 11193 11193 73 2 0x2000180 syslogd
11193 1 11193 0 3 0x2000088 netio syslogd
12145 1 12145 77 3 0x2000180 poll dhclient
18017 1 25915 0 3 0x2000080 poll dhclient
14 0 0 0 3 0x2100200 aiodoned aiodoned
13 0 0 0 3 0x2100200 syncer update
12 0 0 0 3 0x2100200 cleaner cleaner
11 0 0 0 3 0x100200 reaper reaper
10 0 0 0 3 0x2100200 pgdaemon pagedaemon
9 0 0 0 3 0x2100200 bored crypto
8 0 0 0 3 0x2100200 pftm pfpurge
7 0 0 0 3 0x2100200 usbtsk usbtask
6 0 0 0 3 0x2100200 usbatsk usbatsk
5 0 0 0 3 0x2100200 acpi0 acpi0
4 0 0 0 3 0x40100200 idle1
3 0 0 0 3 0x2100200 bored syswq
2 0 0 0 3 0x40100200 idle0
1 0 1 0 3 0x2004080 wait init
0 -1 0 0 3 0x2080200 scheduler swapper
32408 24649 24649 1000 5 0x2000 tmux
ddb{1}> trace
lapic_delay() at lapic_delay+0x4c
cmpci_halt_output() at cmpci_halt_output+0x77
audio_clear() at audio_clear+0x68
audiosetinfo() at audiosetinfo+0x988
audio_ioctl() at audio_ioctl+0xd0
audioioctl() at audioioctl+0x75
VOP_IOCTL() at VOP_IOCTL+0x39
vn_ioctl() at vn_ioctl+0x71
sys_ioctl() at sys_ioctl+0x111
syscall() at syscall+0x235
--- syscall (number 54) ---
end of kernel
end trace frame: 0x7, count: -10
0x205c84d8a:
ddb{1}>
2nd take:
Tried with a local copy of the file on this website:
http://groups.csail.mit.edu/mac/classes/6.001/abelson-sussman-lectures/
The file name was "Lecture-1a.avi" (divx)
SHA256 (Lecture-1a.avi) =
ffc566351f23d82450799f1a723a26c6109ecaa064eec98a282f03de11763752
ddb{1}> trace
cpu_idle_cycle() at cpu_idle_cycle+0x13
end trace frame: 0x0, count: -1
ddb{1}> machine ddbcpu 0
Stopped at Debugger+0x5: leave
ddb{0}> trace
Debugger() at Debugger+0x5
x86_ipi_handler() at x86_ipi_handler+0x64
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x1b
--- interrupt ---
Bad frame pointer: 0xffff80001102d5f0
end trace frame: 0xffff80001102d5f0, count: -3
bus_space_read_1+0x17:
3rd take(with the same file as the 1st ddb trace):
ddb{1}> trace
__mp_lock() at __mp_lock+0x59
_kernel_proc_lock() at _kernel_proc_lock+0x28
syscall() at syscall+0x223
--- syscall (number 93) ---
end of kernel
end trace frame: 0x20fdb4000, count: -3
0x20dba50aa:
ddb{1}> machine ddbcpu 0
Stopped at Debugger+0x5: leave
ddb{0}> trace
Debugger() at Debugger+0x5
x86_ipi_handler() at x86_ipi_handler+0x64
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x1b
--- interrupt ---
Bad frame pointer: 0xffff800010f56770
end trace frame: 0xffff800010f56770, count: -3
kprintf+0x14d:
The video(the 1st and the 3rd one) was taken by Nokia N95 mobile phone.
Here is the result of 'mplayer -identify':
Playing 01092008016.mp4.
libavformat file format detected.
ID_VIDEO_ID=0
[lavf] stream 0: video (mpeg4), -vid 0
ID_AUDIO_ID=0
[lavf] stream 1: audio (aac), -aid 0, -alang und
VIDEO: [MP4V] 640x480 24bpp 30000.000 fps 2966.8 kbps (362.2 kbyte/s)
Clip info:
major_brand: mp42
ID_CLIP_INFO_NAME0=major_brand
ID_CLIP_INFO_VALUE0=mp42
minor_version: 0
ID_CLIP_INFO_NAME1=minor_version
ID_CLIP_INFO_VALUE1=0
compatible_brands: mp423gp4isom
ID_CLIP_INFO_NAME2=compatible_brands
ID_CLIP_INFO_VALUE2=mp423gp4isom
ID_CLIP_INFO_N=3
ID_FILENAME=01092008016.mp4
ID_DEMUXER=lavfpref
ID_VIDEO_FORMAT=MP4V
ID_VIDEO_BITRATE=2966800
ID_VIDEO_WIDTH=640
ID_VIDEO_HEIGHT=480
ID_VIDEO_FPS=30000.000
ID_VIDEO_ASPECT=1.3333
ID_AUDIO_FORMAT=MP4A
ID_AUDIO_BITRATE=96000
ID_AUDIO_RATE=48000
ID_AUDIO_NCH=1
ID_START_TIME=0.00
ID_LENGTH=356.50
ID_SEEKABLE=1
ID_CHAPTERS=0
Thank you,
--
yoshi
