Date: Tue, 2 Dec 2008 17:51:11 GMT From: Mel Flynn <mel@rachie.is-a-geek.net> To: freebsd-gnats-submit@FreeBSD.org Subject: kern/129373: Panic in ata-queue, VIA CLE266, 7.1-BETA2 Message-ID: <200812021751.mB2HpBZV066290@www.freebsd.org> Resent-Message-ID: <200812021800.mB2I026g091231@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 129373
>Category: kern
>Synopsis: Panic in ata-queue, VIA CLE266, 7.1-BETA2
>Confidential: no
>Severity: critical
>Priority: medium
>Responsible: freebsd-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: sw-bug
>Submitter-Id: current-users
>Arrival-Date: Tue Dec 02 18:00:01 UTC 2008
>Closed-Date:
>Last-Modified:
>Originator: Mel Flynn
>Release: 7.1-BETA2
>Organization:
>Environment:
FreeBSD small.rachie.is-a-geek.net 7.1-BETA2 FreeBSD 7.1-BETA2 #0: Mon Oct 13 04:23:28 UTC 2008 root@logan.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC i386
>Description:
Fatal trap 12: page fault while in kernel mode
cpuid = 0; apic id = 00
fault virtual address = 0x188
fault code = supervisor read, page not present
instruction pointer = 0x20:0xc07827b4
stack pointer = 0x28:0xd3dfec00
frame pointer = 0x28:0xd3dfec18
code segment = base 0x0, limit 0xfffff, type 0x1b
= DPL 0, pres 1, def32 1, gran 1
processor eflags = interrupt enabled, resume, IOPL = 0
current process = 17 (swi6: task queue)
trap number = 12
panic: page fault
cpuid = 0
Uptime: 11h38m48s
Physical memory: 467 MB
Dumping 109 MB: 94 78 62 46 30 14
Reading symbols from /boot/kernel/linux.ko...Reading symbols from /boot/kernel/linux.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/linux.ko
Reading symbols from /boot/kernel/snd_via8233.ko...Reading symbols from /boot/kernel/snd_via8233.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/snd_via8233.ko
Reading symbols from /boot/kernel/sound.ko...Reading symbols from /boot/kernel/sound.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/sound.ko
Reading symbols from /boot/kernel/geom_journal.ko...Reading symbols from /boot/kernel/geom_journal.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/geom_journal.ko
Reading symbols from /boot/kernel/acpi.ko...Reading symbols from /boot/kernel/acpi.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/acpi.ko
Reading symbols from /boot/kernel/linprocfs.ko...Reading symbols from /boot/kernel/linprocfs.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/linprocfs.ko
Reading symbols from /boot/kernel/daemon_saver.ko...Reading symbols from /boot/kernel/daemon_saver.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/daemon_saver.ko
#0 doadump () at pcpu.h:196
196 pcpu.h: No such file or directory.
in pcpu.h
(kgdb) bt
#0 doadump () at pcpu.h:196
#1 0xc078fb87 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:418
#2 0xc078fe59 in panic (fmt=Variable "fmt" is not available.
) at /usr/src/sys/kern/kern_shutdown.c:574
#3 0xc0aa1a3c in trap_fatal (frame=0xd3dfebc0, eva=392)
at /usr/src/sys/i386/i386/trap.c:939
#4 0xc0aa1cc0 in trap_pfault (frame=0xd3dfebc0, usermode=0, eva=392)
at /usr/src/sys/i386/i386/trap.c:852
#5 0xc0aa267c in trap (frame=0xd3dfebc0) at /usr/src/sys/i386/i386/trap.c:530
#6 0xc0a884fb in calltrap () at /usr/src/sys/i386/i386/exception.s:159
#7 0xc07827b4 in _mtx_lock_sleep (m=0xc443f88c, tid=3267548256, opts=0,
file=0x0, line=0) at /usr/src/sys/kern/kern_mutex.c:339
#8 0xc078ee06 in _sema_post (sema=0xc443f88c, file=0x0, line=0)
at /usr/src/sys/kern/kern_sema.c:79
#9 0xc0513300 in ata_completed (context=0xc443f840, dummy=1)
at /usr/src/sys/dev/ata/ata-queue.c:481
#10 0xc07c2ed5 in taskqueue_run (queue=0xc2d02c00)
at /usr/src/sys/kern/subr_taskqueue.c:282
#11 0xc07c31e3 in taskqueue_swi_run (dummy=0x0)
at /usr/src/sys/kern/subr_taskqueue.c:324
#12 0xc076f97b in ithread_loop (arg=0xc2d01150)
at /usr/src/sys/kern/kern_intr.c:1088
#13 0xc076c4e9 in fork_exit (callout=0xc076f7c0 <ithread_loop>, arg=0xc2d01150,
frame=0xd3dfed38) at /usr/src/sys/kern/kern_fork.c:804
#14 0xc0a88570 in fork_trampoline () at /usr/src/sys/i386/i386/exception.s:264
(kgdb) frame 7
#7 0xc07827b4 in _mtx_lock_sleep (m=0xc443f88c, tid=3267548256, opts=0,
file=0x0, line=0) at /usr/src/sys/kern/kern_mutex.c:339
339 owner = (struct thread *)(v & ~MTX_FLAGMASK);
(kgdb) print *m
$1 = {lock_object = {lo_name = 0x0, lo_type = 0x0, lo_flags = 0,
lo_witness_data = {lod_list = {stqe_next = 0x0}, lod_witness = 0x0}},
mtx_lock = 0, mtx_recurse = 0}
(kgdb) frame 9
#9 0xc0513300 in ata_completed (context=0xc443f840, dummy=1)
at /usr/src/sys/dev/ata/ata-queue.c:481
481 sema_post(&request->done);
(kgdb) list
476
477 /* get results back to the initiator for this request */
478 if (request->callback)
479 (request->callback)(request);
480 else
481 sema_post(&request->done);
482
483 /* only call ata_start if channel is present */
484 if (ch)
485 ata_start(ch->dev);
(kgdb) print *request
$3 = {dev = 0xc2f36680, parent = 0xc2e41800, u = {ata = {command = 202 'ت',
feature = 0, count = 128, lba = 4108598}, atapi = {
ccb = "ت\000\000\000\200\000\000\0006�>\000\000\000\000", sense = {
error = 0 '\0', segment = 0 '\0', key = 0 '\0', cmd_info = 0,
sense_length = 0 '\0', cmd_specific_info = 0, asc = 0 '\0',
ascq = 0 '\0', replaceable_unit_code = 0 '\0', specific = 0 '\0',
specific1 = 0 '\0', specific2 = 0 '\0'}, saved_cmd = 0 '\0'}},
bytecount = 65536, transfersize = 8192,
data = 0xc1422000 <Address 0xc1422000 out of bounds>, flags = 276,
status = 80 'P', error = 0 '\0', dmastat = 0 '\0', donecount = 65536,
result = 0, callback = 0xc050d570 <ad_done>, done = {sema_mtx = {
lock_object = {lo_name = 0x0, lo_type = 0x0, lo_flags = 0,
lo_witness_data = {lod_list = {stqe_next = 0x0}, lod_witness = 0x0}},
mtx_lock = 0, mtx_recurse = 0}, sema_cv = {cv_description = 0x0,
cv_waiters = 0}, sema_waiters = 0, sema_value = 0}, retries = 2,
timeout = 5, callout = {c_links = {sle = {sle_next = 0x0}, tqe = {
tqe_next = 0x0, tqe_prev = 0xcc4d7d40}}, c_time = 41937334,
c_arg = 0xc443f840, c_func = 0xc0513820 <ata_timeout>, c_mtx = 0xc2e474f4,
c_flags = 16}, task = {ta_link = {stqe_next = 0x0}, ta_pending = 0,
ta_priority = 0, ta_func = 0, ta_context = 0x0}, bio = 0xd3dfe7e4,
this = 0, composite = 0x0, driver = 0x0, chain = {tqe_next = 0x0,
tqe_prev = 0xc2e47528}}
(kgdb) print request->done
$4 = {sema_mtx = {lock_object = {lo_name = 0x0, lo_type = 0x0, lo_flags = 0,
lo_witness_data = {lod_list = {stqe_next = 0x0}, lod_witness = 0x0}},
mtx_lock = 0, mtx_recurse = 0}, sema_cv = {cv_description = 0x0,
cv_waiters = 0}, sema_waiters = 0, sema_value = 0}
dmesg:
Copyright (c) 1992-2008 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
The Regents of the University of California. All rights reserved.
FreeBSD is a registered trademark of The FreeBSD Foundation.
FreeBSD 7.1-BETA2 #0: Mon Oct 13 04:23:28 UTC 2008
root@logan.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: VIA Nehemiah (997.17-MHz 686-class CPU)
Origin = "CentaurHauls" Id = 0x698 Stepping = 8
Features=0x381b03f<FPU,VME,DE,PSE,TSC,MSR,MTRR,PGE,CMOV,PAT,MMX,FXSR,SSE>
VIA Padlock Features=0xdd<RNG,AES>
real memory = 503250944 (479 MB)
avail memory = 478425088 (456 MB)
kbd1 at kbdmux0
ath_hal: 0.9.20.3 (AR5210, AR5211, AR5212, RF5111, RF5112, RF2413, RF5413)
acpi0: <CLE266 AWRDACPI> on motherboard
acpi0: [ITHREAD]
acpi0: Power Button (fixed)
acpi0: reservation of 0, a0000 (3) failed
acpi0: reservation of 100000, 1def0000 (3) failed
Timecounter "ACPI-fast" frequency 3579545 Hz quality 1000
acpi_timer0: <24-bit timer at 3.579545MHz> port 0x4008-0x400b on acpi0
acpi_button0: <Power Button> on acpi0
pcib0: <ACPI Host-PCI bridge> port 0xcf8-0xcff on acpi0
pci_link2: BIOS IRQ 5 for 0.16.INTC is invalid
pci_link2: BIOS IRQ 5 for 0.17.INTC is invalid
pci0: <ACPI PCI bus> on pcib0
agp0: <VIA 862x (CLE266) host to PCI bridge> on hostb0
agp0: Invalid aperture setting 0x0agp0: Invalid aperture setting 0x0agp0: bad aperture size
agp0: Invalid aperture setting 0x0agp0: Invalid aperture size (0Mb)
device_attach: agp0 attach returned 12
pcib1: <PCI-PCI bridge> at device 1.0 on pci0
pci1: <PCI bus> on pcib1
vgapci0: <VGA-compatible display> mem 0xe8000000-0xebffffff,0xec000000-0xecffffff irq 11 at device 0.0 on pci1
fwohci0: <VIA Fire II (VT6306)> port 0xeb00-0xeb7f mem 0xee000000-0xee0007ff irq 10 at device 10.0 on pci0
fwohci0: [FILTER]
fwohci0: OHCI version 1.10 (ROM=1)
fwohci0: No. of Isochronous channels is 4.
fwohci0: EUI64 00:30:18:00:00:a0:13:ca
fwohci0: Phy 1394a available S400, 2 ports.
fwohci0: Link S400, max_rec 2048 bytes.
firewire0: <IEEE1394(FireWire) bus> on fwohci0
fwe0: <Ethernet over FireWire> on firewire0
if_fwe0: Fake Ethernet address: 02:30:18:a0:13:ca
fwe0: Ethernet address: 02:30:18:a0:13:ca
fwip0: <IP over FireWire> on firewire0
fwip0: Firewire address: 00:30:18:00:00:a0:13:ca @ 0xfffe00000000, S400, maxrec 2048
sbp0: <SBP-2/SCSI over FireWire> on firewire0
dcons_crom0: <dcons configuration ROM> on firewire0
dcons_crom0: bus_addr 0x1240000
fwohci0: Initiate bus reset
fwohci0: BUS reset
fwohci0: node_id=0xc800ffc0, gen=1, CYCLEMASTER mode
uhci0: <VIA 83C572 USB controller> port 0xec00-0xec1f irq 11 at device 16.0 on pci0
uhci0: [GIANT-LOCKED]
uhci0: [ITHREAD]
usb0: <VIA 83C572 USB controller> on uhci0
usb0: USB revision 1.0
uhub0: <VIA UHCI root hub, class 9/0, rev 1.00/1.00, addr 1> on usb0
uhub0: 2 ports with 2 removable, self powered
uhci1: <VIA 83C572 USB controller> port 0xe800-0xe81f irq 12 at device 16.1 on pci0
uhci1: [GIANT-LOCKED]
uhci1: [ITHREAD]
usb1: <VIA 83C572 USB controller> on uhci1
usb1: USB revision 1.0
uhub1: <VIA UHCI root hub, class 9/0, rev 1.00/1.00, addr 1> on usb1
uhub1: 2 ports with 2 removable, self powered
uhci2: <VIA 83C572 USB controller> port 0xe900-0xe91f irq 9 at device 16.2 on pci0
uhci2: [GIANT-LOCKED]
uhci2: [ITHREAD]
usb2: <VIA 83C572 USB controller> on uhci2
usb2: USB revision 1.0
uhub2: <VIA UHCI root hub, class 9/0, rev 1.00/1.00, addr 1> on usb2
uhub2: 2 ports with 2 removable, self powered
ehci0: <VIA VT6202 USB 2.0 controller> mem 0xee001000-0xee0010ff irq 10 at device 16.3 on pci0
ehci0: [GIANT-LOCKED]
ehci0: [ITHREAD]
usb3: EHCI version 1.0
usb3: companion controllers, 2 ports each: usb0 usb1 usb2
usb3: <VIA VT6202 USB 2.0 controller> on ehci0
usb3: USB revision 2.0
uhub3: <VIA EHCI root hub, class 9/0, rev 2.00/1.00, addr 1> on usb3
uhub3: 6 ports with 6 removable, self powered
umass0: <Generic USB2.0-CRW, class 0/0, rev 2.00/11.22, addr 2> on uhub3
rum0: <Ralink 802.11 bg WLAN, class 0/0, rev 2.00/0.01, addr 3> on uhub3
rum0: MAC/BBP RT2573 (rev 0x2573a), RF RT2528
rum0: WARNING: using obsoleted IFF_NEEDSGIANT flag
rum0: Ethernet address: 00:c0:a8:f1:e9:44
isab0: <PCI-ISA bridge> at device 17.0 on pci0
isa0: <ISA bus> on isab0
atapci0: <VIA 8235 UDMA133 controller> port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xea00-0xea0f at device 17.1 on pci0
ata0: <ATA channel 0> on atapci0
ata0: [ITHREAD]
ata1: <ATA channel 1> on atapci0
ata1: [ITHREAD]
pcm0: <VIA VT8235> port 0xe000-0xe0ff irq 9 at device 17.5 on pci0
pcm0: [ITHREAD]
pcm0: <Avance Logic ALC655 AC97 Codec>
pcm0: <VIA DXS Enabled: DXS 4 / SGD 1 / REC 1>
vr0: <VIA VT6102 Rhine II 10/100BaseTX> port 0xe400-0xe4ff mem 0xee002000-0xee0020ff irq 11 at device 18.0 on pci0
vr0: Quirks: 0x0
vr0: Revision: 0x74
miibus0: <MII bus> on vr0
ukphy0: <Generic IEEE 802.3u media interface> PHY 1 on miibus0
ukphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
vr0: Ethernet address: 00:30:18:ac:13:5c
vr0: [ITHREAD]
acpi_tz0: <Thermal Zone> on acpi0
fdc0: <floppy drive controller> port 0x3f0-0x3f5,0x3f7 irq 6 drq 2 on acpi0
fdc0: [FILTER]
sio0: configured irq 4 not in bitmap of probed irqs 0
sio0: port may not be enabled
sio0: <16550A-compatible COM port> port 0x3f8-0x3ff irq 4 flags 0x10 on acpi0
sio0: type 16550A
atpic: Mismatched config for IRQ4: trigger edge, polarity low
sio0: [FILTER]
sio1: configured irq 3 not in bitmap of probed irqs 0
sio1: port may not be enabled
sio1: <16550A-compatible COM port> port 0x2f8-0x2ff irq 3 on acpi0
sio1: type 16550A
atpic: Mismatched config for IRQ3: trigger edge, polarity low
sio1: [FILTER]
atkbdc0: <Keyboard controller (i8042)> port 0x60,0x64 irq 1 on acpi0
atkbd0: <AT Keyboard> irq 1 on atkbdc0
kbd0 at atkbd0
atkbd0: [GIANT-LOCKED]
atkbd0: [ITHREAD]
cpu0: <ACPI CPU> on acpi0
acpi_throttle0: <ACPI CPU Throttling> on cpu0
pmtimer0 on isa0
ppc0: <Parallel port> at port 0x378-0x37f irq 7 on isa0
ppc0: Generic chipset (NIBBLE-only) in COMPATIBLE mode
ppbus0: <Parallel port bus> on ppc0
ppbus0: [ITHREAD]
plip0: <PLIP network interface> on ppbus0
plip0: WARNING: using obsoleted IFF_NEEDSGIANT flag
lpt0: <Printer> on ppbus0
lpt0: Interrupt-driven port
ppi0: <Parallel I/O> on ppbus0
ppc0: [GIANT-LOCKED]
ppc0: [ITHREAD]
sc0: <System console> at flags 0x100 on isa0
sc0: VGA <16 virtual consoles, flags=0x300>
vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
ums0: <Logitech USB RECEIVER, class 0/0, rev 1.10/25.10, addr 2> on uhub1
ums0: 16 buttons and Z dir.
Timecounter "TSC" frequency 997167015 Hz quality 800
Timecounters tick every 1.000 msec
firewire0: 1 nodes, maxhop <= 0, cable IRM = 0 (me)
firewire0: bus manager 0 (me)
ad0: 114440MB <WDC WD1200JB-75CRA0 16.06V16> at ata0-master UDMA100
acd0: DVDR <HL-DT-ST DVD+/-RW GWA4164B/D108> at ata1-master UDMA33
GEOM_JOURNAL: Journal 2270434254: ad0s1f contains journal.
GEOM_JOURNAL: Journal 2270434254: ad0s1g contains data.
GEOM_JOURNAL: Journal ad0s1g consistent.
GEOM_JOURNAL: BIO_FLUSH not supported by ad0s1f.
GEOM_JOURNAL: BIO_FLUSH not supported by ad0s1g.
da0 at umass-sim0 bus 0 target 0 lun 0
da0: <Generic- Compact Flash 1.00> Removable Direct Access SCSI-0 device
da0: 40.000MB/s transfers
da0: Attempt to query device size failed: NOT READY, Medium not present
da1 at umass-sim0 bus 0 target 0 lun 1
da1: <Generic- SM/xD-Picture 1.00> Removable Direct Access SCSI-0 device
da1: 40.000MB/s transfers
da1: Attempt to query device size failed: NOT READY, Medium not present
da2 at umass-sim0 bus 0 target 0 lun 2
da2: <Generic- SD/MMC 1.00> Removable Direct Access SCSI-0 device
da2: 40.000MB/s transfers
da2: Attempt to query device size failed: NOT READY, Medium not present
da3 at umass-sim0 bus 0 target 0 lun 3
da3: <Generic- MS/MS-Pro 1.00> Removable Direct Access SCSI-0 device
da3: 40.000MB/s transfers
da3: Attempt to query device size failed: NOT READY, Medium not present
>How-To-Repeat:
Seems unprovoked. Nothing spectacular was going on, some network IO from net/skype and irc/konversation. No newsyslog compression, no finds, nothing.
>Fix:
>Release-Note:
>Audit-Trail:
>Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200812021751.mB2HpBZV066290>