From owner-freebsd-current@freebsd.org  Tue Sep  1 19:40:59 2015
Return-Path: <owner-freebsd-current@freebsd.org>
Delivered-To: freebsd-current@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 596579C8BA4
 for <freebsd-current@mailman.ysv.freebsd.org>;
 Tue,  1 Sep 2015 19:40:59 +0000 (UTC) (envelope-from jhb@freebsd.org)
Received: from bigwig.baldwin.cx (bigwig.baldwin.cx [IPv6:2001:470:1f11:75::1])
 (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits))
 (Client did not present a certificate)
 by mx1.freebsd.org (Postfix) with ESMTPS id 330C6A0B;
 Tue,  1 Sep 2015 19:40:59 +0000 (UTC) (envelope-from jhb@freebsd.org)
Received: from ralph.baldwin.cx (c-73-231-226-104.hsd1.ca.comcast.net
 [73.231.226.104])
 by bigwig.baldwin.cx (Postfix) with ESMTPSA id 47781B9B8;
 Tue,  1 Sep 2015 15:40:58 -0400 (EDT)
From: John Baldwin <jhb@freebsd.org>
To: freebsd-current@freebsd.org, cem@freebsd.org
Subject: Re: Panic on boot during scan with pmspcv
Date: Mon, 31 Aug 2015 18:20:31 -0700
Message-ID: <1907622.HsVbIIOtmz@ralph.baldwin.cx>
User-Agent: KMail/4.14.3 (FreeBSD/10.2-PRERELEASE; KDE/4.14.3; amd64; ; )
In-Reply-To: <CAG6CVpU4dP3jFag8A1fLaYpPwqSeErL54iERL5iFMAKbmW=Bdw@mail.gmail.com>
References: <CAG6CVpU4dP3jFag8A1fLaYpPwqSeErL54iERL5iFMAKbmW=Bdw@mail.gmail.com>
MIME-Version: 1.0
Content-Transfer-Encoding: 7Bit
Content-Type: text/plain; charset="us-ascii"
X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.2.7
 (bigwig.baldwin.cx); Tue, 01 Sep 2015 15:40:58 -0400 (EDT)
X-BeenThere: freebsd-current@freebsd.org
X-Mailman-Version: 2.1.20
Precedence: list
List-Id: Discussions about the use of FreeBSD-current
 <freebsd-current.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-current>, 
 <mailto:freebsd-current-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-current/>
List-Post: <mailto:freebsd-current@freebsd.org>
List-Help: <mailto:freebsd-current-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-current>, 
 <mailto:freebsd-current-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 01 Sep 2015 19:40:59 -0000

On Tuesday, August 25, 2015 02:27:42 PM Conrad Meyer wrote:
> For some reason, it only crops up on UEFI boot. "Legacy" boot "just works."
> 
> It looks like we're locking a mutex in a struct at NULL.
> 
> (trap)
> __mtx_assert+0xdb
> agtiapi_cam_action+0x45
> xpt_action_default+0xbe3(?)
> scsi_scan_bus+0x1cd
> xpt_scanner_thread+0x15c
> ...
> 
> 
> Fault is at 0x18.
> 
> http://i.imgur.com/615PC6b.jpg
> 
> (kgdb) l *(agtiapi_cam_action+0x45)
> 0xffffffff806d4ef5 is in agtiapi_cam_action
> (/usr/src/sys/dev/pms/freebsd/driver/ini/src/agtiapi.c:1818).
> 
> Possibly here?
> 
> 1814   mtx_assert( &(pmcsc->pCardInfo->pmIOLock), MA_OWNED );

Probably pCardInfo is NULL.

Looking at the pms driver source is making my stomach churn, but I don't
see anything obvious.  The field is set during attach, so it shouldn't be
NULL when the intrhook runs.  Do you have any other storage devices on
this box?  If so, I would try to kldload the pms driver after you have
booted far enough to setup dumps (either that or setup remote kgdb).

-- 
John Baldwin