From owner-freebsd-bugs@FreeBSD.ORG Mon Sep 5 06:40:17 2005 Return-Path: X-Original-To: freebsd-bugs@hub.freebsd.org Delivered-To: freebsd-bugs@hub.freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 5020C16A41F for ; Mon, 5 Sep 2005 06:40:17 +0000 (GMT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id B6A9843D49 for ; Mon, 5 Sep 2005 06:40:16 +0000 (GMT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.13.3/8.13.3) with ESMTP id j856eGWl046015 for ; Mon, 5 Sep 2005 06:40:16 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.13.3/8.13.1/Submit) id j856eGUw046014; Mon, 5 Sep 2005 06:40:16 GMT (envelope-from gnats) Resent-Date: Mon, 5 Sep 2005 06:40:16 GMT Resent-Message-Id: <200509050640.j856eGUw046014@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, Chris Jones Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id EE50C16A41F for ; Mon, 5 Sep 2005 06:39:44 +0000 (GMT) (envelope-from nobody@FreeBSD.org) Received: from www.freebsd.org (www.freebsd.org [216.136.204.117]) by mx1.FreeBSD.org (Postfix) with ESMTP id A673D43D48 for ; Mon, 5 Sep 2005 06:39:44 +0000 (GMT) (envelope-from nobody@FreeBSD.org) Received: from www.freebsd.org (localhost [127.0.0.1]) by www.freebsd.org (8.13.1/8.13.1) with ESMTP id j856dili060234 for ; Mon, 5 Sep 2005 06:39:44 GMT (envelope-from nobody@www.freebsd.org) Received: (from nobody@localhost) by www.freebsd.org (8.13.1/8.13.1/Submit) id j856diIq060233; Mon, 5 Sep 2005 06:39:44 GMT (envelope-from nobody) Message-Id: <200509050639.j856diIq060233@www.freebsd.org> Date: Mon, 5 Sep 2005 06:39:44 GMT From: Chris Jones To: freebsd-gnats-submit@FreeBSD.org X-Send-Pr-Version: www-2.3 Cc: Subject: kern/85728: Crashes on 6.0 when copying data between filesystems X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Sep 2005 06:40:17 -0000 >Number: 85728 >Category: kern >Synopsis: Crashes on 6.0 when copying data between filesystems >Confidential: no >Severity: serious >Priority: medium >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Mon Sep 05 06:40:16 GMT 2005 >Closed-Date: >Last-Modified: >Originator: Chris Jones >Release: RELENG_6 as of 4 Sept 2005 >Organization: >Environment: FreeBSD ishtar.novusordo.net 6.0-BETA4 FreeBSD 6.0-BETA4 #0: Sun Sep 4 21:11:48 MDT 2005 root@ishtar.novusordo.net:/usr/obj/usr/src/sys/GENERIC i386 >Description: When copying data from one filesystem to another (in this particular case, it happens to be with either dd or rsync from /usr to a filesystem living on a gvinum volume, but gvinum doesn't seem to be implicated), machine crashes with following trace. First two lines are through dmesg, then the debugger kicks in: subdisk4: detached ad4: detached Fatal trap 12: page fault while in kernel mode cpuid = 0; apic id = 00 fault virtual address = 0xdeadc0f2 fault code = supervisor read, page not present instruction pointer = 0x20:0xc0646a1a stack pointer = 0x20:0xd108fc38 frame pointer = 0x20:0xd108fc38 code segment = base 0x0, limit 0xfffff, type=0x1b = DPL 0, pres 1, def32 1, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 36 (swi4: clock sio) [thread pid 36 tid 100037 ] Stopped at devclass_get_name+0x6: movl 0x14(%eax),%eax db> where Tracing pid 36 tid 100037 td 0xc17f0c00 devclass_get_name(deadc0de) at devclass_get_name+0x6 device_get_name(c1909e80) at device_get_name+0x18 device_print_prettyname(c1909e80,c1986400,d108fc8c,c04d52a8,c1909e80) at device_print_prettyname+0xe device_printf(c1909e80,c082f517,c082fa9e) at device_printf+0xc ata_completed(c1c544b0,0) at ata_completed+0xec ata_finish(c1c544b0) at ata_finish+0x30 ata_timeout(c1c544b0) at ata_timeout+0x8e softclock(0) at softclock+0x1e7 ithread_loop(c17d6500,d108fd38,c17d6500,c0620c08,0) at ithread_loop+0x11c fork_exit(c0620c08,c17d6500,d108fd38) at fork_exit+0xa0 fork_trampoline() at fork_trampoline+0x8 --- trap 0x1, eip = 0, esp = 0xd108fd6c, ebp = 0 --- Unfortunately, I haven't been able to get a crash dump: calling doadump prints a claim that it's outputting to disk, but no data actually gets written. I haven't looked into this deeply, yet. System dmesg: FreeBSD ishtar.novusordo.net 6.0-BETA4 FreeBSD 6.0-BETA4 #0: Sun Sep 4 21:11:48 MDT 2005 root@ishtar.novusordo.net:/usr/obj/usr/src/sys/GENERIC i386 cdjones@ishtar$ dmesg Copyright (c) 1992-2005 The FreeBSD Project. Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 The Regents of the University of California. All rights reserved. FreeBSD 6.0-BETA4 #0: Sun Sep 4 21:11:48 MDT 2005 root@ishtar.novusordo.net:/usr/obj/usr/src/sys/GENERIC WARNING: WITNESS option enabled, expect reduced performance. ACPI APIC Table: Timecounter "i8254" frequency 1193182 Hz quality 0 CPU: AMD Duron(tm) processor (1199.43-MHz 686-class CPU) Origin = "AuthenticAMD" Id = 0x671 Stepping = 1 Features=0x383fbff AMD Features=0xc0480800 real memory = 402587648 (383 MB) avail memory = 384348160 (366 MB) MADT: Forcing active-low polarity and level trigger for SCI ioapic0 irqs 0-23 on motherboard npx0: [FAST] npx0: on motherboard npx0: INT 16 interface acpi0: on motherboard acpi0: Power Button (fixed) pci_link0: irq 9 on acpi0 pci_link1: irq 10 on acpi0 pci_link2: irq 5 on acpi0 pci_link3: irq 11 on acpi0 Timecounter "ACPI-fast" frequency 3579545 Hz quality 1000 acpi_timer0: <24-bit timer at 3.579545MHz> port 0x4008-0x400b on acpi0 cpu0: on acpi0 acpi_button0: on acpi0 acpi_button1: on acpi0 pcib0: port 0xcf8-0xcff,0x4000-0x407f,0x4080-0x40ff,0x5000-0x500f,0x6000-0x607f on acpi0 pci0: on pcib0 agp0: mem 0xdf000000-0xdf7fffff at device 0.0 on pci0 pcib1: at device 1.0 on pci0 pci1: on pcib1 pci1: at device 0.0 (no driver attached) isab0: at device 7.0 on pci0 isa0: on isab0 atapci0: port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xa000-0xa00f at device 7.1 on pci0 atapci0: Correcting VIA config for southbridge data corruption bug ata0: on atapci0 ata1: on atapci0 uhci0: port 0xa400-0xa41f irq 11 at device 7.2 on pci0 uhci0: [GIANT-LOCKED] usb0: on uhci0 usb0: USB revision 1.0 uhub0: VIA UHCI root hub, class 9/0, rev 1.00/1.00, addr 1 uhub0: 2 ports with 2 removable, self powered uhci1: port 0xa800-0xa81f irq 11 at device 7.3 on pci0 uhci1: [GIANT-LOCKED] usb1: on uhci1 usb1: USB revision 1.0 uhub1: VIA UHCI root hub, class 9/0, rev 1.00/1.00, addr 1 uhub1: 2 ports with 2 removable, self powered pci0: at device 7.5 (no driver attached) atapci1: port 0xbc00-0xbc07,0xc000-0xc003,0xc400-0xc407,0xc800-0xc803,0xcc00-0xcc0f mem 0xdf800000-0xdf8001ff irq 17 at device 8.0 on pci0 ata2: on atapci1 ata3: on atapci1 pci0: at device 9.0 (no driver attached) atapci2: port 0xd000-0xd007,0xd400-0xd403,0xd800-0xd807,0xdc00-0xdc03,0xe000-0xe00f mem 0xdf801000-0xdf8011ff irq 19 at device 10.0 on pci0 ata4: on atapci2 ata5: on atapci2 vr0: port 0xe400-0xe47f mem 0xdf802000-0xdf80207f irq 17 at device 12.0 on pci0 miibus0: on vr0 amphy0: on miibus0 amphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto vr0: Ethernet address: 00:80:c8:e1:84:e2 dc0: port 0xe800-0xe8ff mem 0xdf803000-0xdf8033ff irq 18 at device 13.0 on pci0 miibus1: on dc0 ukphy0: on miibus1 ukphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto dc0: Ethernet address: 00:50:bf:af:8f:ef fdc0: port 0x3f0-0x3f5,0x3f7 irq 6 drq 2 on acpi0 fdc0: [FAST] sio0: <16550A-compatible COM port> port 0x3f8-0x3ff irq 4 flags 0x10 on acpi0 sio0: type 16550A sio1: <16550A-compatible COM port> port 0x2f8-0x2ff irq 3 on acpi0 sio1: type 16550A ppc0: port 0x378-0x37f irq 7 on acpi0 ppc0: Generic chipset (EPP/NIBBLE) in COMPATIBLE mode ppbus0: on ppc0 plip0: on ppbus0 lpt0: on ppbus0 lpt0: Interrupt-driven port ppi0: on ppbus0 atkbdc0: port 0x60,0x64 irq 1 on acpi0 atkbd0: irq 1 on atkbdc0 kbd0 at atkbd0 atkbd0: [GIANT-LOCKED] psm0: irq 12 on atkbdc0 psm0: [GIANT-LOCKED] psm0: model IntelliMouse, device ID 3 pmtimer0 on isa0 orm0: at iomem 0xc0000-0xcbfff,0xcc000-0xd07ff,0xd1000-0xd57ff on isa0 sc0: at flags 0x100 on isa0 sc0: VGA <16 virtual consoles, flags=0x300> vga0: at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0 Timecounter "TSC" frequency 1199434999 Hz quality 800 Timecounters tick every 1.000 msec acd0: DVDR at ata0-master UDMA33 ad4: 38146MB at ata2-master SATA150 ad6: 114473MB at ata3-master SATA150 ad8: 114473MB at ata4-master SATA150 >How-To-Repeat: Copy data from one filesystem to another. Reliably fails on an 8-GB transfer, but does not seem to occur at any particular point in the fs or after any particular interval. This happened under 6.0-BETA3, so I tried updating to the latest RELENG_6 CVS and rebuilt the kernel, to no avail. >Fix: >Release-Note: >Audit-Trail: >Unformatted: