From owner-freebsd-scsi@FreeBSD.ORG  Wed Oct 15 10:12:52 2003
Return-Path: <owner-freebsd-scsi@FreeBSD.ORG>
Delivered-To: freebsd-scsi@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id EE3CB16A4B3
	for <freebsd-scsi@freebsd.org>; Wed, 15 Oct 2003 10:12:52 -0700 (PDT)
Received: from rootlabs.com (root.org [67.118.192.226])
	by mx1.FreeBSD.org (Postfix) with SMTP id BA89643FE0
	for <freebsd-scsi@freebsd.org>; Wed, 15 Oct 2003 10:12:51 -0700 (PDT)
	(envelope-from nate@rootlabs.com)
Received: (qmail 34617 invoked by uid 1000); 15 Oct 2003 17:12:49 -0000
Date: Wed, 15 Oct 2003 10:12:49 -0700 (PDT)
From: Nate Lawson <nate@root.org>
To: David Sze <dsze@alumni.uwaterloo.ca>
In-Reply-To: <6.0.0.22.2.20031015080310.03ac9b88@mail.distrust.net>
Message-ID: <20031015100215.U34498@root.org>
References: <6.0.0.22.2.20031014232154.03a0b990@mail.distrust.net>
	<6.0.0.22.2.20031015080310.03ac9b88@mail.distrust.net>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
cc: freebsd-scsi@freebsd.org
Subject: Re: Dell PowerEdge 1750 and mpt
X-BeenThere: freebsd-scsi@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: SCSI subsystem <freebsd-scsi.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-scsi>,
	<mailto:freebsd-scsi-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-scsi>
List-Post: <mailto:freebsd-scsi@freebsd.org>
List-Help: <mailto:freebsd-scsi-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-scsi>,
	<mailto:freebsd-scsi-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 15 Oct 2003 17:12:53 -0000

On Wed, 15 Oct 2003, David Sze wrote:
> At 11:30 PM 14/10/2003 -0700, Nate Lawson wrote this to All:
> >This shows that an invalid CCB is being passed through the pass(4) driver.
>
> The application talks to pass(4) to periodically retrieve the serial
> numbers of all devices on the bus (the code is basically copied from
> "camcontrol inquiry -S", plus some code to enumerate the bus).  So that is
> consistent with how often we are seeing the crashes.  I'll go over the code
> to make sure there are no blatant errors on my part.  The only puzzling
> thing is that the same code runs flawlessly on a variety of similar
> hardware, some machines also with mpt(4), but mostly ahc(4) and ahd(4)
> controllers.

Try running camcontrol inquiry -S on the same device in a loop and see if
it gets the same panic.

> > > pass3 at mpt0 bus 0 target 6 lun 0
> > > pass3: <PE/PV 1x3 SCSI BP 1.1> Fixed Processor SCSI-2 device
> > > pass3: 3.300MB/s transfers
> >
> >This is the device you're trying to talk to.  I'm really suspicious your
> >program is sending a garbage pointer in the CCB to the pass(4) driver.  On
> >the above core, please send the output of "fr 7" and then "print *ccb".
>
> (kgdb) fr 7
> #7  0x80174507 in mpt_action (sim=0x923867c0, ccb=0x961a0000) at
> ../../dev/mpt/mpt_freebsd.c:1311
> 1311      if (mpt_read_cfg_page(mpt, tgt, &tmp.Header)) {
> (kgdb) print *ccb
>          stqe_next = 0x0}}, retry_count = 4, cbfcnp = 0x80129a94
> <passdone>, func_code = XPT_GET_TRAN_SETTINGS, status = 0,

Why are you sending a XPT_GET_TRAN_SETTINGS CCB?  That's not even needed
to get the serial number.  In any case, I need the output of
print ccb->cts.

-Nate