From owner-freebsd-bugs  Mon Sep  3 19:30:18 2001
Delivered-To: freebsd-bugs@hub.freebsd.org
Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21])
	by hub.freebsd.org (Postfix) with ESMTP id 6091037B40B
	for <freebsd-bugs@hub.freebsd.org>; Mon,  3 Sep 2001 19:30:02 -0700 (PDT)
Received: (from gnats@localhost)
	by freefall.freebsd.org (8.11.4/8.11.4) id f842U2q45837;
	Mon, 3 Sep 2001 19:30:02 -0700 (PDT)
	(envelope-from gnats)
Received: from tao.org.uk (genius.tao.org.uk [212.135.162.51])
	by hub.freebsd.org (Postfix) with ESMTP id AF02A37B406
	for <FreeBSD-gnats-submit@freebsd.org>; Mon,  3 Sep 2001 19:25:56 -0700 (PDT)
Received: by tao.org.uk (Postfix, from userid 100)
	id A285980; Tue,  4 Sep 2001 03:25:54 +0100 (BST)
Message-Id: <20010904022554.A285980@tao.org.uk>
Date: Tue,  4 Sep 2001 03:25:54 +0100 (BST)
From: Joe Karthauser <joe@tao.org.uk>
Reply-To: Joe Karthauser <joe@tao.org.uk>
To: FreeBSD-gnats-submit@freebsd.org
X-Send-Pr-Version: 3.113
Subject: kern/30300: -current hang caught and crash-dump'd.
Sender: owner-freebsd-bugs@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-bugs.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-bugs>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-bugs>
X-Loop: FreeBSD.org


>Number:         30300
>Category:       kern
>Synopsis:       -current hang caught and crash-dump'd.
>Confidential:   no
>Severity:       critical
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Mon Sep 03 19:30:01 PDT 2001
>Closed-Date:
>Last-Modified:
>Originator:     Joe Karthauser
>Release:        FreeBSD 5.0-CURRENT i386
>Organization:
>Environment:
System: FreeBSD genius.tao.org.uk 5.0-CURRENT FreeBSD 5.0-CURRENT #18: Fri Aug 31 09:47:40 BST 2001 joe@genius.tao.org.uk:/usr/obj/usr/src/sys/GENIUS i386

# dmesg
usb0: host controller process error
usb0: host controller halted
panic: from debugger

syncing disks... panic: allocbuf: buffer not busy
Uptime: 1d14h38m2s
/dev/vmmon: Module vmmon: unloaded

dumping to dev ad0s2b, offset 917632
dump ata0: resetting devices .. done
63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0 succeeded
Automatic reboot in 15 seconds - press a key on the console to abort
--> Press a key on the console to reboot <--
Rebooting...
Copyright (c) 1992-2001 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
	The Regents of the University of California. All rights reserved.
FreeBSD 5.0-CURRENT #18: Fri Aug 31 09:47:40 BST 2001
    joe@genius.tao.org.uk:/usr/obj/usr/src/sys/GENIUS
Timecounter "i8254"  frequency 1193182 Hz
Timecounter "TSC"  frequency 497838438 Hz
CPU: Pentium III/Pentium III Xeon/Celeron (497.84-MHz 686-class CPU)
  Origin = "GenuineIntel"  Id = 0x681  Stepping = 1
  Features=0x383f9ff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR,SSE>
real memory  = 67043328 (65472K bytes)
avail memory = 59957248 (58552K bytes)
Preloaded elf kernel "kernel" at 0xc048c000.
Preloaded elf module "agp.ko" at 0xc048c09c.
Preloaded elf module "acpi.ko" at 0xc048c138.
ACPI debug layer 0x0  debug level 0x0
Pentium Pro MTRR support enabled
VESA: v2.0, 8128k memory, flags:0x0, mode table:0xc037d4c2 (1000022)
VESA: ATI MACH64
Using $PIR table, 7 entries at 0xc00fdf50
npx0: <math processor> on motherboard
npx0: INT 16 interface
acpi0: <DELL   I 5000 > on motherboard
Timecounter "ACPI"  frequency 3579545 Hz
acpi_cpu0: <CPU> on acpi0
acpi_tz0: <thermal zone> on acpi0
acpi_lid0: <Control Method Lid Switch> on acpi0
acpi_cmbat0: <Control method Battery> on acpi0
acpi_cmbat1: <Control method Battery> on acpi0
acpi_acad0: <AC adapter> on acpi0
acpi_pcib0: <Host-PCI bridge> port 0xcf8-0xcff on acpi0
pci0: <PCI bus> on acpi_pcib0
agp0: <Intel 82443BX (440 BX) host to PCI bridge> mem 0xe0000000-0xe3ffffff at device 0.0 on pci0
pcib1: <PCI-PCI bridge> at device 1.0 on pci0
pci1: <PCI bus> on pcib1
pci1: <display, VGA> at 0.0 (no driver attached)
acpi_pcib0: matched entry for 0.4.INTA (source \\_SB_.PCI0.PX40.LNKA)
acpi_pcib0: device is routed to IRQ 11
pcic0: <TI PCI-1225 PCI-CardBus Bridge> mem 0x44000000-0x44000fff irq 11 at device 4.0 on pci0
pcic0: TI12XX PCI Config Reg: [ring enable][speaker enable][pwr save][FUNC pci int + CSC serial isa irq]
pccard0: <PC Card bus (classic)> on pcic0
acpi_pcib0: matched entry for 0.4.INTA (source \\_SB_.PCI0.PX40.LNKA)
acpi_pcib0: device is routed to IRQ 11
pcic1: <TI PCI-1225 PCI-CardBus Bridge> mem 0x44001000-0x44001fff irq 11 at device 4.1 on pci0
pcic1: TI12XX PCI Config Reg: [ring enable][speaker enable][pwr save][FUNC pci int + CSC serial isa irq]
pccard1: <PC Card bus (classic)> on pcic1
isab0: <PCI-ISA bridge> at device 7.0 on pci0
isa0: <ISA bus> on isab0
atapci0: <Intel PIIX4 ATA33 controller> port 0x1050-0x105f at device 7.1 on pci0
ata0: at 0x1f0 irq 14 on atapci0
ata1: at 0x170 irq 15 on atapci0
uhci0: <Intel 82371AB/EB (PIIX4) USB controller> port 0x1060-0x107f irq 5 at device 7.2 on pci0
usb0: <Intel 82371AB/EB (PIIX4) USB controller> on uhci0
usb0: USB revision 1.0
uhub0: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
aue0: LINKSYS Inc. LINKSYS USB Adapter, rev 1.10/1.01, addr 2
aue0: Ethernet address: 00:e0:98:84:c5:55
miibus0: <MII bus> on aue0
ukphy0: <Generic IEEE 802.3u media interface> on miibus0
ukphy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
pci0: <bridge, PCI-unknown> at 7.3 (no driver attached)
pcm0: <ESS Technology Maestro-2E> port 0x1400-0x14ff irq 5 at device 8.0 on pci0
pci0: <simple comms> at 16.0 (no driver attached)
acpi_ec0: <embedded controller> port 0x66,0x62 on acpi0
atkbdc0: <Keyboard controller (i8042)> port 0x64,0x60 irq 1 on acpi0
atkbd0: <AT Keyboard> flags 0x1 irq 1 on atkbdc0
kbd0 at atkbd0
psm0: <PS/2 Mouse> irq 12 on atkbdc0
psm0: model Generic PS/2 mouse, device ID 0
acpi_button0: <Power Button> on acpi0
acpi_button1: <Sleep Button> on acpi0
acpi_timer0: <24-bit timer at 3.579545MHz> port 0x1008-0x100b on acpi0
orm0: <Option ROM> at iomem 0xc0000-0xcffff on isa0
fdc0: <NEC 72065B or clone> at port 0x3f0-0x3f5,0x3f7 irq 6 drq 2 on isa0
fdc0: FIFO enabled, 8 bytes threshold
fd0: <1440-KB 3.5" drive> on fdc0 drive 0
vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
sc0: <System console> at flags 0x100 on isa0
sc0: VGA <16 virtual consoles, flags=0x300>
sio0 at port 0x3f8-0x3ff irq 4 flags 0x10 on isa0
sio0: type 16550A
sio1 at port 0x2f8-0x2ff irq 3 on isa0
sio1: type 16550A
ppc0: parallel port not found.
pmtimer0 on isa0
acpi_cpu0: set speed to 100.0%
acpi_cpu: CPU throttling enabled, 8 steps from 100% to 12.5%
ad0: 19077MB <HITACHI_DK23BA-20> [38760/16/63] at ata0-master UDMA33
Mounting root from ufs:/dev/ad0s2a
WARNING: / was not properly dismounted
WARNING: /data was not properly dismounted
/data: lost blocks 4 files 2
/data: superblock summary recomputed
WARNING: /tmp was not properly dismounted
WARNING: /usr was not properly dismounted
WARNING: /var was not properly dismounted
/var: lost blocks 4 files 1
linprocfs registered
/dev/vmmon: Module vmmon: registered with major=200 minor=0 tag=$Name: build-570 $
/dev/vmmon: Module vmmon: initialized
aue0: promiscuous mode enabled
vmnet1: promiscuous mode enabled

>Description:
	I've been experiencing this hang for a while now on -current,
	never managed to catch it before.  The machine runs fine, for
	two days in this last case, and then randomly (mostly when
	I've got a lot of disk/network IO happening) something blocks
	and some processes stop working, and others continue running
	fine.  Usually I have to physically switch the machine off
	because even a shutdown doesn't complete.
	
>How-To-Repeat:
>Fix:

	I've got a core file that I managed to panic-dump by hand to
	capture the state of the machine if anyone wants to take a look.

genius# gdb -k kernel.debug.10 vmcore.10 
GNU gdb 4.18
Copyright 1998 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you
are
welcome to change it and/or distribute copies of it under certain
conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for
details.
This GDB was configured as "i386-unknown-freebsd"...
IdlePTD 4894720
initial pcb at 367480
panicstr: allocbuf: buffer not busy
panic messages:
---
panic: from debugger

syncing disks... panic: allocbuf: buffer not busy
Uptime: 1d14h38m2s
/dev/vmmon: Module vmmon: unloaded

dumping to dev ad0s2b, offset 917632
dump ata0: resetting devices .. done
63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40
39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16
15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0 
---
#0  dumpsys () at /usr/src/sys/kern/kern_shutdown.c:487
487             if (dumping++) {
(kgdb) bt
#0  dumpsys () at /usr/src/sys/kern/kern_shutdown.c:487
#1  0xc01e3e48 in boot (howto=260) at
/usr/src/sys/kern/kern_shutdown.c:330
#2  0xc01e4275 in panic (fmt=0xc02f42e8 "allocbuf: buffer not busy")
    at /usr/src/sys/kern/kern_shutdown.c:623
#3  0xc02149fc in allocbuf (bp=0xc34471dc, size=8192)
    at /usr/src/sys/kern/vfs_bio.c:2407
#4  0xc0214979 in getblk (vp=0xcc4c6d40, blkno=6225984, size=8192, slpflag=0, 
    slptimeo=0) at /usr/src/sys/kern/vfs_bio.c:2353
#5  0xc021257e in breadn (vp=0xcc4c6d40, blkno=6225984, size=8192, 
    rablkno=0x0, rabsize=0x0, cnt=0, cred=0x0, bpp=0xcc04ac5c)
    at /usr/src/sys/kern/vfs_bio.c:593
#6  0xc0212540 in bread (vp=0xcc4c6d40, blkno=6225984, size=8192, cred=0x0, 
    bpp=0xcc04ac5c) at /usr/src/sys/kern/vfs_bio.c:575
#7  0xc026f4b1 in ffs_update (vp=0xcc4c8cc0, waitfor=0)
    at /usr/src/sys/ufs/ffs/ffs_inode.c:101
#8  0xc027c676 in ffs_fsync (ap=0xcc04acdc)
    at /usr/src/sys/ufs/ffs/ffs_vnops.c:292
#9  0xc027ab9e in ffs_sync (mp=0xc2214400, waitfor=2, cred=0xc0a25c00, 
    p=0xc037e480) at vnode_if.h:441
#10 0xc021f6a1 in sync (p=0xc037e480, uap=0x0)
    at /usr/src/sys/kern/vfs_syscalls.c:622
#11 0xc01e3a8c in boot (howto=256) at /usr/src/sys/kern/kern_shutdown.c:239
#12 0xc01e4275 in panic (fmt=0xc02d419e "from debugger")
    at /usr/src/sys/kern/kern_shutdown.c:623
#13 0xc013a311 in db_panic (addr=-1070951823, have_addr=0, count=-1, 
    modif=0xcc04ad9c "") at /usr/src/sys/ddb/db_command.c:443
#14 0xc013a2b1 in db_command (last_cmdp=0xc0316cc4, cmd_table=0xc0316b04, 
    aux_cmd_tablep=0xc0310640, aux_cmd_tablep_end=0xc0310644)
    at /usr/src/sys/ddb/db_command.c:341
#15 0xc013a37b in db_command_loop () at /usr/src/sys/ddb/db_command.c:465
#16 0xc013c5ef in db_trap (type=3, code=0) at /usr/src/sys/ddb/db_trap.c:72
#17 0xc02a9000 in kdb_trap (type=3, code=0, regs=0xcc04ae90)
    at /usr/src/sys/i386/i386/db_interface.c:167
#18 0xc02b6170 in trap (frame={tf_fs = 24, tf_es = 16, tf_ds = 16, tf_edi = 0, 
      tf_esi = -1070105792, tf_ebp = -872108324, tf_isp = -872108356, 
      tf_ebx = 514, tf_edx = -1070561969, tf_ecx = 1920, tf_eax = 38, 
      tf_trapno = 3, tf_err = 0, tf_eip = -1070951823, tf_cs = 8, 
      tf_eflags = 70, tf_esp = -1070561985, tf_ss = -1070575127})
    at /usr/src/sys/i386/i386/trap.c:564
#19 0xc02a9271 in Debugger (msg=0xc03051e9 "manual escape to debugger")
    at machine/cpufunc.h:63
#20 0xc02a5e1e in scgetc (sc=0xc037d7a0, flags=2)
    at /usr/src/sys/dev/syscons/syscons.c:3248
#21 0xc02a2265 in sckbdevent (thiskbd=0xc0376240, event=0, arg=0xc037d7a0)
    at /usr/src/sys/dev/syscons/syscons.c:620
#22 0xc0299a97 in atkbd_intr (kbd=0xc0376240, arg=0x0)
    at /usr/src/sys/dev/kbd/atkbd.c:458
#23 0xc02bf21c in atkbd_isa_intr (arg=0xc0376240)
    at /usr/src/sys/isa/atkbd_isa.c:140
#24 0xc01d8248 in ithread_loop (arg=0xc21c3800)
    at /usr/src/sys/kern/kern_intr.c:520
#25 0xc01d7372 in fork_exit (callout=0xc01d80a8 <ithread_loop>, 
    arg=0xc21c3800, frame=0xcc04afa8) at /usr/src/sys/kern/kern_fork.c:723
(kgdb) 
>Release-Note:
>Audit-Trail:
>Unformatted:

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-bugs" in the body of the message