Date: Sat, 8 Oct 2011 22:14:56 +0200 From: Alexey Shuvaev <shuvaev@physik.uni-wuerzburg.de> To: freebsd-current@freebsd.org Cc: Alexander Motin <mav@FreeBSD.org> Subject: Panics after AHCI timeouts Message-ID: <20111008201456.GA3529@lexx.ifp.tuwien.ac.at>
next in thread | raw e-mail | index | archive | help
Hello list! In the view of upcoming RELEASE-9.0 I should have reported it earlier, but it is better later than never... Every time I wanted to report this, the system was ~one month old and I tried to upgrade it to see, if the problem was still there, waiting for the next panic... and when it finally paniced it was one month old again. For some time (around half a year actually :) under some heavy disk load my desktop panics. The panics are not 100% reproducible, two situations which could lead to a panic are: - svn up in /usr/src - last stage of openoffice building (I think, during the packaging stage) Updating the sources is less probable to panic the system (I would give ~30% of probability), but building OOO is close to 100% to cause the panic. The root cause seems to be the Samsung hard drive in use - it times out on some NCQ slots under heavy load. Same problem is reported, for example here: http://www.freebsd.org/cgi/query-pr.cgi?pr=kern/157397 Earlier this year (I would say March - May), AHCI handled these timeouts, at least to the point when the disk (and, possibly, the controlled too) were completely wedged (only power cycling had brought them back again, reset was not sufficient). From ~June, however, the system paniced right after the first timeout. So it is this panic immediately after ahci timeout which could be hopefully fixed. Some info about the system: ~> uname -a FreeBSD lexx.ifp.tuwien.ac.at 9.0-BETA2 FreeBSD 9.0-BETA2 #0 r225311: Thu Sep 1 17:17:57 CEST 2011 root@lexx.ifp.tuwien.ac.at:/usr/obj/usr/src/sys/GENERIC amd64 >From dmesg.boot: [snip] ahci0: <ATI IXP700 AHCI SATA controller> port 0xb000-0xb007,0xa000-0xa003,0x9000-0x9007,0x8000-0x8003,0x7000-0x700f mem 0xfe5ffc00-0xfe5fffff irq 19 at device 17.0 on pci0 ahci0: AHCI v1.20 with 6 6Gbps ports, Port Multiplier supported ahcich0: <AHCI channel> at channel 0 on ahci0 ahcich1: <AHCI channel> at channel 1 on ahci0 ahcich2: <AHCI channel> at channel 2 on ahci0 ahcich3: <AHCI channel> at channel 3 on ahci0 ahcich4: <AHCI channel> at channel 4 on ahci0 ahcich5: <AHCI channel> at channel 5 on ahci0 [snip] ada0 at ahcich0 bus 0 scbus1 target 0 lun 0 ada0: <SAMSUNG HD204UI 1AQ10001> ATA-8 SATA 2.x device ada0: 300.000MB/s transfers (SATA 2.x, UDMA6, PIO 8192bytes) ada0: Command Queueing enabled ada0: 1907729MB (3907029168 512 byte sectors: 16H 63S/T 16383C) ada0: Previously was known as ad4 [snip] ~> cat /etc/rc.local #!/bin/sh ddb script kdb.enter.panic="capture on; show pcpu; trace; ps; show locks; alltrace; show alllocks; show lockedvnods; call doadump; reset" sysctl debug.debugger_on_panic=0 I have two cores: ~> ll /var/crash/ total 2628524 -rw-r--r-- 1 root wheel 2 Oct 7 15:12 bounds -rw-r----- 1 root wheel 224897 Aug 5 18:07 core.txt.3 -rw-r----- 1 root wheel 151478 Oct 7 15:13 core.txt.5 -rw-r----- 1 root wheel 475 Aug 5 18:06 info.3 -rw-r----- 1 root wheel 478 Oct 7 15:12 info.5 -rw-r--r-- 1 root wheel 5 Jan 26 2011 minfree -rw-r----- 1 root wheel 1390616576 Aug 5 18:07 vmcore.3 -rw-r----- 1 root wheel 1371832320 Oct 7 15:13 vmcore.5 However, I do not have the old kernel for the core N 3 anymore (but the current kernel is the one which produced core N 5). >From core.txt.3: [snip] Unread portion of the kernel message buffer: Fatal trap 9: general protection fault while in kernel mode cpuid = 0; apic id = 00 instruction pointer = 0x20:0xffffffff8092988e stack pointer = 0x28:0xffffff8000256a80 frame pointer = 0x28:0xffffff8000256aa0 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, long 1, def32 0, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 12 (swi4: clock) trap number = 9 panic: general protection fault cpuid = 0 VNASSERT failed Uptime: 0xfffffe0073591780: 3dtag ufs, type VDIR 7h59m usecount 1, writecount 0, refcount 4 mountedhere 0 45s flags () v_object 0xfffffe00888501b0 ref 0 pages 1 lock type ufs: UNLOCKED ino 2709060, on dev ada0p6 VNASSERT failed 0xfffffe0073591780: tag ufs, type VDIR usecount 1, writecount 0, refcount 4 mountedhere 0 flags () v_object 0xfffffe00888501b0 ref 0 pages 1 lock type ufs: UNLOCKED ino 2709060, on dev ada0p6 Dumping 1326 out of 7914 MB:..2%..11%..21%..31%..42%..51%..61%..72%..81%..91% [snip] #0 doadump (textdump=1) at /usr/src/sys/kern/kern_shutdown.c:252 252 if (textdump && textdump_pending) { (kgdb) #0 doadump (textdump=1) at /usr/src/sys/kern/kern_shutdown.c:252 #1 0xffffffff8081f3ca in kern_reboot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:430 #2 0xffffffff8081ee61 in panic (fmt=Variable "fmt" is not available. ) at /usr/src/sys/kern/kern_shutdown.c:595 #3 0xffffffff80b04b70 in trap_fatal (frame=0x9, eva=Variable "eva" is not available. ) at /usr/src/sys/amd64/amd64/trap.c:805 #4 0xffffffff80b05145 in trap (frame=0xffffff80002569d0) at /usr/src/sys/amd64/amd64/trap.c:616 #5 0xffffffff80aef91f in calltrap () at /usr/src/sys/amd64/amd64/exception.S:228 #6 0xffffffff8092988e in igmp_slowtimo () at /usr/src/sys/netinet/igmp.c:2088 #7 0xffffffff8088648b in pfslowtimo (arg=0xffffffff8130b440) at /usr/src/sys/kern/uipc_domain.c:518 #8 0xffffffff80832e0a in softclock (arg=Variable "arg" is not available. ) at /usr/src/sys/kern/kern_timeout.c:564 #9 0xffffffff807f6676 in intr_event_execute_handlers (p=Variable "p" is not available. ) at /usr/src/sys/kern/kern_intr.c:1257 #10 0xffffffff807f74b2 in ithread_loop (arg=0xfffffe0005144be0) at /usr/src/sys/kern/kern_intr.c:1270 #11 0xffffffff807f3b85 in fork_exit ( callout=0xffffffff807f7400 <ithread_loop>, arg=0xfffffe0005144be0, frame=0xffffff8000256c50) at /usr/src/sys/kern/kern_fork.c:941 #12 0xffffffff80aefe4e in fork_trampoline () at /usr/src/sys/amd64/amd64/exception.S:603 [snip] [last message in dmesg] ahcich0: Timeout on slot 29 port 0 ahcich0: is 00000000 cs 00000000 ss ffffffff rs ffffffff tfd 40 serr 00000000 cmd 0000fc17 [snip] >From core.txt.5: [snip] Unread portion of the kernel message buffer: Memory modified after free 0xfffffe000416e200(248) val=79e8800 @ 0xfffffe000416e200 panic: Most recently used by cred cpuid = 2 Uptime: 20h11m1s Dumping 1308 out of 7914 MB:..2%..12%..21%..31%..41%..51%..62%..71%..81%..91% [snip] #0 doadump (textdump=1) at /usr/src/sys/kern/kern_shutdown.c:252 252 if (textdump && textdump_pending) { (kgdb) #0 doadump (textdump=1) at /usr/src/sys/kern/kern_shutdown.c:252 #1 0xffffffff808234aa in kern_reboot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:430 #2 0xffffffff80822f41 in panic (fmt=Variable "fmt" is not available. ) at /usr/src/sys/kern/kern_shutdown.c:595 #3 0xffffffff80a6f7b4 in mtrash_ctor (mem=Variable "mem" is not available. ) at /usr/src/sys/vm/uma_dbg.c:137 #4 0xffffffff80a6f01c in uma_zalloc_arg (zone=0xfffffe021ffe0700, udata=0x0, flags=258) at /usr/src/sys/vm/uma_core.c:2018 #5 0xffffffff808108be in malloc (size=Variable "size" is not available. ) at uma.h:305 #6 0xffffffff8081c21f in crget () at /usr/src/sys/kern/kern_prot.c:1809 #7 0xffffffff8081c269 in crdup (cr=0xfffffe0143103300) at /usr/src/sys/kern/kern_prot.c:1911 #8 0xffffffff808c5ca6 in kern_accessat (td=0xfffffe0007dd7000, fd=-100, path=0x80065c000 <Address 0x80065c000 out of bounds>, pathseg=UIO_USERSPACE, flags=Variable "flags" is not available. ) at /usr/src/sys/kern/vfs_syscalls.c:2201 #9 0xffffffff8086719a in syscallenter (td=0xfffffe0007dd7000, sa=0xffffff8223f67bb0) at /usr/src/sys/kern/subr_trap.c:344 #10 0xffffffff80b0b43c in syscall (frame=0xffffff8223f67c50) at /usr/src/sys/amd64/amd64/trap.c:910 #11 0xffffffff80af617d in Xfast_syscall () at /usr/src/sys/amd64/amd64/exception.S:384 #12 0x000000080062dbdc in ?? () Previous frame inner to this frame (corrupt stack?) [snip] [last message in dmesg] ahcich0: Timeout on slot 29 port 0 ahcich0: is 00000000 cs 00000000 ss ffffffff rs ffffffff tfd 40 serr 00000000 cm d 0000fc17 [snip] HTH, Alexey.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20111008201456.GA3529>