Date: Mon, 06 Sep 2004 21:23:18 +0900 From: =?ISO-8859-1?Q?Tommi_L=E4tti?= <sty@iki.fi> To: freebsd-current@freebsd.org Subject: Re: strange crashes Message-ID: <413C56B6.70508@iki.fi> In-Reply-To: <4136CF5A.5010600@iki.fi> References: <4136CE19.5020804@iki.fi> <4136CF5A.5010600@iki.fi>
next in thread | previous in thread | raw e-mail | index | archive | help
I was now able to get some backtraces from 2 separate crashes:
This first one is when I was dd:ing a 37 gig file from a gdbe'd partition.
--- clip ---
Sammael [15:09] [/usr/obj/usr/src/sys/SAMMAEL]# gdb -k kernel.debug
/var/crash/vmcore.0
GNU gdb 5.2.1 (FreeBSD)
Copyright 2002 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain
conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for details.
This GDB was configured as "i386-unknown-freebsd"...
panic: Illegal sector state (JUNK ?)
panic messages:
---
panic: Illegal sector state (JUNK ?)
syncing disks, buffers remaining... 3867 3867 3867 3867 3867 3867 3867
3867 3867 3867 3867 3867 3867 3867 3867 ad6: WARNING - READ_DMA
interrupt was seen but timeout fired LBA=16215349
3867 3867 3867 3867 3867
giving up on 42 buffers
Uptime: 1h42m40s
ad6: WARNING - READ_DMA interrupt was seen but timeout fired LBA=16215349
Dumping 511 MB
16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 256 272 288 304
320 336 352 368 384 400 416 432 448 464 480 496
---
Reading symbols from
/usr/obj/usr/src/sys/SAMMAEL/modules/usr/src/sys/modules/acpi/acpi.ko.debug...done.
Loaded symbols for
/usr/obj/usr/src/sys/SAMMAEL/modules/usr/src/sys/modules/acpi/acpi.ko.debug
Reading symbols from /boot/kernel/daemon_saver.ko...done.
Loaded symbols for /boot/kernel/daemon_saver.ko
Reading symbols from
/usr/obj/usr/src/sys/SAMMAEL/modules/usr/src/sys/modules/linux/linux.ko.debug...done.
Loaded symbols for
/usr/obj/usr/src/sys/SAMMAEL/modules/usr/src/sys/modules/linux/linux.ko.debug
#0 doadump () at /usr/src/sys/kern/kern_shutdown.c:240
240 dumping++;
(kgdb) backtrace
#0 doadump () at /usr/src/sys/kern/kern_shutdown.c:240
#1 0xc04c7477 in boot (howto=256) at /usr/src/sys/kern/kern_shutdown.c:372
#2 0xc04c77c8 in panic () at /usr/src/sys/kern/kern_shutdown.c:550
#3 0xc048d735 in g_bde_worker (arg=0x0) at
/usr/src/sys/geom/bde/g_bde_work.c:605
#4 0xc04b30d4 in fork_exit (callout=0xc048d530 <g_bde_worker>, arg=0x0,
frame=0x0)
at /usr/src/sys/kern/kern_fork.c:793
(kgdb) list *0xc048d530
0xc048d530 is in g_bde_worker (/usr/src/sys/geom/bde/g_bde_work.c:537).
532 * XXX: using a thread here is probably not needed.
533 */
534
535 void
536 g_bde_worker(void *arg)
537 {
538 struct g_bde_softc *sc;
539 struct g_bde_work *wp;
540 struct g_geom *gp;
541 int busy, error;
--- clip ---
And this second one is from a yet another stange crash occured during
the weekend. I have a nasty feeling now that the Mylex raid controller
might be the culprit:
--- clip ---
Sammael [15:12] [/usr/obj/usr/src/sys/SAMMAEL]# gdb -k kernel.debug
/var/crash/vmcore.1
GNU gdb 5.2.1 (FreeBSD)
Copyright 2002 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain
conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for details.
This GDB was configured as "i386-unknown-freebsd"...
panic: free: address 0xcf81f000(0xcf81f000) has not been allocated.
panic messages:
---
panic: free: address 0xcf81f000(0xcf81f000) has not been allocated.
syncing disks, buffers remaining... 3867 3865 3864 3864 3864 3864 3864
3864 3864 3864 3864 3864 3864 3864 3864 3864 3864 3864 3864 3864 3864 3864
giving up on 1725 buffers
Uptime: 17h3m31s
Dumping 511 MB
16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 256 272 288 304
320 336 352 368 384 400 416 432 448 464 480 496
---
Reading symbols from
/usr/obj/usr/src/sys/SAMMAEL/modules/usr/src/sys/modules/acpi/acpi.ko.debug...done.
Loaded symbols for
/usr/obj/usr/src/sys/SAMMAEL/modules/usr/src/sys/modules/acpi/acpi.ko.debug
Reading symbols from /boot/kernel/daemon_saver.ko...done.
Loaded symbols for /boot/kernel/daemon_saver.ko
Reading symbols from
/usr/obj/usr/src/sys/SAMMAEL/modules/usr/src/sys/modules/linux/linux.ko.debug...done.
Loaded symbols for
/usr/obj/usr/src/sys/SAMMAEL/modules/usr/src/sys/modules/linux/linux.ko.debug
#0 doadump () at /usr/src/sys/kern/kern_shutdown.c:240
240 dumping++;
(kgdb) backtrace
#0 doadump () at /usr/src/sys/kern/kern_shutdown.c:240
#1 0xc04c7477 in boot (howto=256) at /usr/src/sys/kern/kern_shutdown.c:372
#2 0xc04c77c8 in panic () at /usr/src/sys/kern/kern_shutdown.c:550
#3 0xc04bc2f7 in free (addr=0xcf81f000, type=0xc0658b00) at
/usr/src/sys/kern/kern_malloc.c:306
#4 0xc047478f in mlx_enquire (sc=0xc43c4000, command=0, bufsize=12,
complete=0xc0474290 <mlx_periodic_rebuild>) at
/usr/src/sys/dev/mlx/mlx.c:1559
#5 0xc0473bf4 in mlx_periodic (data=0xc43c4000) at
/usr/src/sys/dev/mlx/mlx.c:1059
#6 0xc04d7d08 in softclock (dummy=0x0) at
/usr/src/sys/kern/kern_timeout.c:225
#7 0xc04b40e2 in ithread_loop (arg=0xc1913580) at
/usr/src/sys/kern/kern_intr.c:544
#8 0xc04b30d4 in fork_exit (callout=0xc04b3f50 <ithread_loop>, arg=0x0,
frame=0x0)
at /usr/src/sys/kern/kern_fork.c:793
(kgdb) list *0xc0474290
0xc0474290 is in mlx_periodic_rebuild (/usr/src/sys/dev/mlx/mlx.c:1347).
1342
/********************************************************************************
1343 * Handle check/rebuild operations in progress.
1344 */
1345 static void
1346 mlx_periodic_rebuild(struct mlx_command *mc)
1347 {
1348 struct mlx_softc *sc = mc->mc_sc;
1349 struct mlx_rebuild_status *mr = (struct mlx_rebuild_status
*)mc->mc_data;
1350
1351 switch(mc->mc_status) {
(kgdb) list *0xc04b3f50
0xc04b3f50 is in ithread_loop (/usr/src/sys/kern/kern_intr.c:483).
478 /*
479 * This is the main code for interrupt threads.
480 */
481 static void
482 ithread_loop(void *arg)
483 {
484 struct ithd *ithd; /* our thread context */
485 struct intrhand *ih; /* and our interrupt
handler chain */
486 struct thread *td;
487 struct proc *p;
--- clip ---
any thoughts?
--
br,
Tommi
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?413C56B6.70508>