From owner-freebsd-stable@FreeBSD.ORG Sun Aug 12 18:59:17 2007 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 839CD16A420 for ; Sun, 12 Aug 2007 18:59:17 +0000 (UTC) (envelope-from johnson.peter@gmail.com) Received: from wa-out-1112.google.com (wa-out-1112.google.com [209.85.146.182]) by mx1.freebsd.org (Postfix) with ESMTP id 5BFEC13C465 for ; Sun, 12 Aug 2007 18:59:17 +0000 (UTC) (envelope-from johnson.peter@gmail.com) Received: by wa-out-1112.google.com with SMTP id k17so1712155waf for ; Sun, 12 Aug 2007 11:59:17 -0700 (PDT) DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition; b=nERko/XMcUf1kkuKKCHKeCX0YdlN0VsKHV2/KPPJcaM+Pp+3lsVCZOOGtEB3xC5voyy5hfsUfM0VggWpqViKifrnzqRc5/GbpNLw0iu0EGTPNB4tGNnxafPCfzsJH7VNLaW4Y/l1Hy+j9wXTO8wY9ju/EAiwQRKhlHyTqNqsKcw= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition; b=OPjKQYShB5i7cx+AyZfXoHp4Vs4tegITDxM/Y8uEtCXRGAJ1SdhTf6VHGaYp4nxqQEXlyJgR4CHILL3CAnhU7zbOU1POZ9rQZ2m4/G4BCEDJCPvTd+SdVmYVz+YmLsn6SyBXzVfQLU6l4cmPHzAQDnuSSaMmrx0VwIGjwitE99w= Received: by 10.114.57.1 with SMTP id f1mr575659waa.1186943422470; Sun, 12 Aug 2007 11:30:22 -0700 (PDT) Received: by 10.114.56.4 with HTTP; Sun, 12 Aug 2007 11:30:22 -0700 (PDT) Message-ID: <1233f1b60708121130y791afbf0ma1fcc02dbaa69718@mail.gmail.com> Date: Sun, 12 Aug 2007 11:30:22 -0700 From: "Peter Johnson" To: freebsd-stable@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline Subject: Crash in ata (owner=0x4) X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 12 Aug 2007 18:59:17 -0000 Not doing anything special, just browsing in Firefox. I've had a couple of different panics, but all have this weird owner=0x4. The panic is in ata; maybe because I boot from da disks, my system (usually) manages to stay up for a while before panicing... not in this crash however. I have the core available for further debugging if necessary. Thanks, Peter # sudo kgdb kernel.debug /work/vmcore.3 kgdb: kvm_nlist(_stopped_cpus): kgdb: kvm_nlist(_stoppcbs): [GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"] GNU gdb 6.1.1 [FreeBSD] Copyright 2004 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "i386-marcel-freebsd". Unread portion of the kernel message buffer: acd0: WARNING - PREVENT_ALLOW read data overrun 18>0 kernel trap 12 with interrupts disabled Fatal trap 12: page fault while in kernel mode fault virtual address = 0x78 fault code = supervisor read, page not present instruction pointer = 0x20:0xc055027d stack pointer = 0x28:0xe3967be0 frame pointer = 0x28:0xe3967be4 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, def32 1, gran 1 processor eflags = resume, IOPL = 0 current process = 16 (swi6: task queue) trap number = 12 panic: page fault Uptime: 4m50s Dumping 1023 MB (2 chunks) chunk 0: 1MB (159 pages) ... ok chunk 1: 1023MB (261868 pages) 1007 991 975 959 943 927 911 895 879 863 847 831 815 799 783 767 751 735 719 703 687 671 655 639 623 607 591 575 559 543 527 511 495 479 463 447 431 415 399 383 367 351 335 319 303 287 271 255 239 223 207 191 175 159 143 127 111 95 79 63 47 31 15 #0 doadump () at pcpu.h:165 165 __asm __volatile("movl %%fs:0,%0" : "=r" (td)); (kgdb) bt #0 doadump () at pcpu.h:165 #1 0xc0529294 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:409 #2 0xc05295c6 in panic (fmt=0xc06f9eb1 "%s") at /usr/src/sys/kern/kern_shutdown.c:565 #3 0xc06de87c in trap_fatal (frame=0xe3967ba0, eva=0) at /usr/src/sys/i386/i386/trap.c:837 #4 0xc06ddf54 in trap (frame= {tf_fs = 8, tf_es = 40, tf_ds = 40, tf_edi = -987230208, tf_esi = -991219328, tf_ebp = -476677148, tf_isp = -476677172, tf_ebx = -991291328, tf_edx = -991219328, tf_ecx = 4, tf_eax = 4, tf_trapno = 12, tf_err = 0, tf_eip = -1068170627, tf_cs = 32, tf_eflags = 589831, tf_esp = -991219328, tf_ss = -476677112}) at /usr/src/sys/i386/i386/trap.c:270 #5 0xc06c93ba in calltrap () at /usr/src/sys/i386/i386/exception.s:139 #6 0xc055027d in turnstile_setowner (ts=0xc4ea1840, owner=0x4) at /usr/src/sys/kern/subr_turnstile.c:434 #7 0xc05505da in turnstile_wait (lock=0xc528104c, owner=0x4) at /usr/src/sys/kern/subr_turnstile.c:593 #8 0xc051e974 in _mtx_lock_sleep (m=0xc528104c, tid=3303747968, opts=0, file=0x0, line=0) at /usr/src/sys/kern/kern_mutex.c:579 #9 0xc05285f8 in _sema_post (sema=0xc528104c, file=0x0, line=0) at /usr/src/sys/kern/kern_sema.c:79 #10 0xc0488b11 in ata_completed (context=0xc5281000, dummy=1) at /usr/src/sys/dev/ata/ata-queue.c:481 #11 0xc054ee3d in taskqueue_run (queue=0xc4ef0e00) at /usr/src/sys/kern/subr_taskqueue.c:257 #12 0xc054f0d3 in taskqueue_swi_run (dummy=0x0) at /usr/src/sys/kern/subr_taskqueue.c:299 #13 0xc050f5fc in ithread_execute_handlers (p=0xc4eb1a78, ie=0xc4ef0d80) at /usr/src/sys/kern/kern_intr.c:682 #14 0xc050f756 in ithread_loop (arg=0xc4f25590) at /usr/src/sys/kern/kern_intr.c:765 #15 0xc050e13f in fork_exit (callout=0xc050f6f0 , arg=0x4, frame=0x4) at /usr/src/sys/kern/kern_fork.c:830 #16 0xc06c941c in fork_trampoline () at /usr/src/sys/i386/i386/exception.s:208 (kgdb) list *0xc055027d 0xc055027d is in turnstile_setowner (/usr/src/sys/kern/subr_turnstile.c:435). 430 431 mtx_assert(&td_contested_lock, MA_OWNED); 432 MPASS(owner->td_proc->p_magic == P_MAGIC); 433 MPASS(ts->ts_owner == NULL); 434 ts->ts_owner = owner; 435 LIST_INSERT_HEAD(&owner->td_contested, ts, ts_link); 436 } 437 438 /* 439 * Malloc a turnstile for a new thread, initialize it and return it. (kgdb) up 8 #8 0xc051e974 in _mtx_lock_sleep (m=0xc528104c, tid=3303747968, opts=0, file=0x0, line=0) at /usr/src/sys/kern/kern_mutex.c:579 579 turnstile_wait(&m->mtx_object, mtx_owner(m)); (kgdb) list 574 #endif 575 576 /* 577 * Block on the turnstile. 578 */ 579 turnstile_wait(&m->mtx_object, mtx_owner(m)); 580 } 581 582 #ifdef KTR 583 if (cont_logged) { (kgdb) print *m $1 = {mtx_object = {lo_class = 0xc073a044, lo_name = 0xc06ff5f2 "ATA request done", lo_type = 0xc0709820 "sema backing lock", lo_flags = 262144, lo_list = { tqe_next = 0x0, tqe_prev = 0x0}, lo_witness = 0x0}, mtx_lock = 6, mtx_recurse = 0} (kgdb) # dmesg Copyright (c) 1992-2007 The FreeBSD Project. Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 The Regents of the University of California. All rights reserved. FreeBSD is a registered trademark of The FreeBSD Foundation. FreeBSD 6.2-STABLE #2: Sat Aug 11 22:55:00 PDT 2007 root@XXX.XXX.XXX:/work/obj/usr/src/sys/WORKSTATION ACPI APIC Table: Timecounter "i8254" frequency 1193182 Hz quality 0 CPU: AMD Athlon(TM) MP 1800+ (1533.40-MHz 686-class CPU) Origin = "AuthenticAMD" Id = 0x662 Stepping = 2 Features=0x383fbff AMD Features=0xc0480800 real memory = 1073659904 (1023 MB) avail memory = 1037479936 (989 MB) ioapic0 irqs 0-23 on motherboard kbd1 at kbdmux0 acpi0: on motherboard acpi0: Power Button (fixed) acpi0: Sleep Button (fixed) Timecounter "ACPI-fast" frequency 3579545 Hz quality 1000 acpi_timer0: <24-bit timer at 3.579545MHz> port 0xe408-0xe40b on acpi0 cpu0: on acpi0 acpi_button0: on acpi0 pcib0: port 0xcf8-0xcff on acpi0 pci0: on pcib0 pcib1: at device 1.0 on pci0 pci1: on pcib1 nvidia0: mem 0xe6000000-0xe6ffffff,0xe8000000-0xefffffff,0xe5000000-0xe5ffffff irq 16 at device 5.0 on pci1 nvidia0: [GIANT-LOCKED] isab0: at device 7.0 on pci0 isa0: on isab0 atapci0: port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xd800-0xd80f at device 7.1 on pci0 ata0: on atapci0 ata1: on atapci0 pci0: at device 7.3 (no driver attached) em0: port 0xd400-0xd43f mem 0xe4800000-0xe481ffff,0xe4000000-0xe403ffff irq 20 at device 8.0 on pci0 em0: Ethernet address: 00:04:23:b5:a8:07 ahc0: port 0xd000-0xd0ff mem 0xe3800000-0xe3800fff irq 21 at device 9.0 on pci0 ahc0: [GIANT-LOCKED] aic7892: Ultra160 Wide Channel A, SCSI Id=7, 32/253 SCBs pcib2: at device 16.0 on pci0 pci2: on pcib2 pci2: at device 4.0 (no driver attached) fwohci0: port 0xb400-0xb47f mem 0xe2800000-0xe28007ff irq 18 at device 5.0 on pci2 fwohci0: OHCI version 1.0 (ROM=1) fwohci0: No. of Isochronous channels is 8. fwohci0: EUI64 00:01:08:00:37:00:b4:9e fwohci0: Phy 1394a available S400, 3 ports. fwohci0: Link S400, max_rec 2048 bytes. firewire0: on fwohci0 sbp0: on firewire0 fwe0: on firewire0 if_fwe0: Fake Ethernet address: 02:01:08:00:b4:9e fwe0: Ethernet address: 02:01:08:00:b4:9e fwe0: if_start running deferred for Giant fwohci0: Initiate bus reset fwohci0: BUS reset fwohci0: node_id=0xc000ffc0, gen=1, CYCLEMASTER mode firewire0: 1 nodes, maxhop <= 0, cable IRM = 0 (me) firewire0: bus manager 0 (me) pcm0: port 0xb000-0xb01f irq 17 at device 6.0 on pci2 pcm0: fdc0: port 0x3f2-0x3f5,0x3f7 irq 6 drq 2 on acpi0 fdc0: [FAST] fd0: <1440-KB 3.5" drive> on fdc0 drive 0 ppc0: port 0x378-0x37f,0x778-0x77f irq 7 drq 3 on acpi0 ppc0: SMC-like chipset (ECP/EPP/PS2/NIBBLE) in COMPATIBLE mode ppc0: FIFO with 16/16/9 bytes threshold ppbus0: on ppc0 lpt0: on ppbus0 lpt0: Interrupt-driven port ppi0: on ppbus0 sio0: <16550A-compatible COM port> port 0x3f8-0x3ff irq 4 flags 0x10 on acpi0 sio0: type 16550A sio1: <16550A-compatible COM port> port 0x2f8-0x2ff irq 3 on acpi0 sio1: type 16550A atkbdc0: port 0x60,0x64 irq 1 on acpi0 atkbd0: irq 1 on atkbdc0 kbd0 at atkbd0 atkbd0: [GIANT-LOCKED] psm0: irq 12 on atkbdc0 psm0: [GIANT-LOCKED] psm0: model IntelliMouse Explorer, device ID 4 pmtimer0 on isa0 orm0: at iomem 0xc0000-0xce7ff on isa0 sc0: at flags 0x100 on isa0 sc0: VGA <16 virtual consoles, flags=0x300> vga0: at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0 Timecounter "TSC" frequency 1533400777 Hz quality 800 Timecounters tick every 1.000 msec Waiting 5 seconds for SCSI devices to settle acd0: DVDR at ata0-master UDMA33 sa0 at ahc0 bus 0 target 4 lun 0 sa0: Removable Sequential Access SCSI-2 device sa0: 10.000MB/s transfers (10.000MHz, offset 15) da0 at ahc0 bus 0 target 0 lun 0 da0: Fixed Direct Access SCSI-3 device da0: 160.000MB/s transfers (80.000MHz, offset 63, 16bit), Tagged Queueing Enabled da0: 35003MB (71687372 512 byte sectors: 255H 63S/T 4462C) da1 at ahc0 bus 0 target 1 lun 0 da1: Fixed Direct Access SCSI-3 device da1: 160.000MB/s transfers (80.000MHz, offset 63, 16bit), Tagged Queueing Enabled da1: 17501MB (35843671 512 byte sectors: 255H 63S/T 2231C) da2 at ahc0 bus 0 target 5 lun 0 da2: Removable Direct Access SCSI-2 device da2: 3.300MB/s transfers da2: 96MB (196608 512 byte sectors: 64H 32S/T 96C) cd0 at ahc0 bus 0 target 3 lun 0 cd0: Removable CD-ROM SCSI-2 device cd0: 20.000MB/s transfers (20.000MHz, offset 15) cd0: Attempt to query device size failed: NOT READY, Medium not present Trying to mount root from ufs:/dev/da0s2a fuse4bsd: version 0.3.0, FUSE ABI 7.8