Re: strange crashes

From: Tommi Lätti <sty_at_iki.fi>
Date: Mon, 06 Sep 2004 21:23:18 +0900
I was now able to get some backtraces from 2 separate crashes:


This first one is when I was dd:ing a 37 gig file from a gdbe'd partition.

--- clip ---
Sammael [15:09] [/usr/obj/usr/src/sys/SAMMAEL]# gdb -k kernel.debug 
/var/crash/vmcore.0
GNU gdb 5.2.1 (FreeBSD)
Copyright 2002 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain 
conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-unknown-freebsd"...
panic: Illegal sector state (JUNK ?)
panic messages:
---
panic: Illegal sector state (JUNK ?)

syncing disks, buffers remaining... 3867 3867 3867 3867 3867 3867 3867 
3867 3867 3867 3867 3867 3867 3867 3867 ad6: WARNING - READ_DMA 
interrupt was seen but timeout fired LBA=16215349
3867 3867 3867 3867 3867
giving up on 42 buffers
Uptime: 1h42m40s
ad6: WARNING - READ_DMA interrupt was seen but timeout fired LBA=16215349
Dumping 511 MB
  16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 256 272 288 304 
320 336 352 368 384 400 416 432 448 464 480 496
---
Reading symbols from 
/usr/obj/usr/src/sys/SAMMAEL/modules/usr/src/sys/modules/acpi/acpi.ko.debug...done.
Loaded symbols for 
/usr/obj/usr/src/sys/SAMMAEL/modules/usr/src/sys/modules/acpi/acpi.ko.debug
Reading symbols from /boot/kernel/daemon_saver.ko...done.
Loaded symbols for /boot/kernel/daemon_saver.ko
Reading symbols from 
/usr/obj/usr/src/sys/SAMMAEL/modules/usr/src/sys/modules/linux/linux.ko.debug...done.
Loaded symbols for 
/usr/obj/usr/src/sys/SAMMAEL/modules/usr/src/sys/modules/linux/linux.ko.debug
#0  doadump () at /usr/src/sys/kern/kern_shutdown.c:240
240             dumping++;
(kgdb) backtrace
#0  doadump () at /usr/src/sys/kern/kern_shutdown.c:240
#1  0xc04c7477 in boot (howto=256) at /usr/src/sys/kern/kern_shutdown.c:372
#2  0xc04c77c8 in panic () at /usr/src/sys/kern/kern_shutdown.c:550
#3  0xc048d735 in g_bde_worker (arg=0x0) at 
/usr/src/sys/geom/bde/g_bde_work.c:605
#4  0xc04b30d4 in fork_exit (callout=0xc048d530 <g_bde_worker>, arg=0x0, 
frame=0x0)
     at /usr/src/sys/kern/kern_fork.c:793
(kgdb) list *0xc048d530
0xc048d530 is in g_bde_worker (/usr/src/sys/geom/bde/g_bde_work.c:537).
532      * XXX: using a thread here is probably not needed.
533      */
534
535     void
536     g_bde_worker(void *arg)
537     {
538             struct g_bde_softc *sc;
539             struct g_bde_work *wp;
540             struct g_geom *gp;
541             int busy, error;
--- clip ---

And this second one is from a yet another stange crash occured during 
the weekend. I have a nasty feeling now that the Mylex raid controller 
might be the culprit:

--- clip ---
Sammael [15:12] [/usr/obj/usr/src/sys/SAMMAEL]# gdb -k kernel.debug 
/var/crash/vmcore.1
GNU gdb 5.2.1 (FreeBSD)
Copyright 2002 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain 
conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-unknown-freebsd"...
panic: free: address 0xcf81f000(0xcf81f000) has not been allocated.

panic messages:
---
panic: free: address 0xcf81f000(0xcf81f000) has not been allocated.


syncing disks, buffers remaining... 3867 3865 3864 3864 3864 3864 3864 
3864 3864 3864 3864 3864 3864 3864 3864 3864 3864 3864 3864 3864 3864 3864
giving up on 1725 buffers
Uptime: 17h3m31s
Dumping 511 MB
  16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 256 272 288 304 
320 336 352 368 384 400 416 432 448 464 480 496
---
Reading symbols from 
/usr/obj/usr/src/sys/SAMMAEL/modules/usr/src/sys/modules/acpi/acpi.ko.debug...done.
Loaded symbols for 
/usr/obj/usr/src/sys/SAMMAEL/modules/usr/src/sys/modules/acpi/acpi.ko.debug
Reading symbols from /boot/kernel/daemon_saver.ko...done.
Loaded symbols for /boot/kernel/daemon_saver.ko
Reading symbols from 
/usr/obj/usr/src/sys/SAMMAEL/modules/usr/src/sys/modules/linux/linux.ko.debug...done.
Loaded symbols for 
/usr/obj/usr/src/sys/SAMMAEL/modules/usr/src/sys/modules/linux/linux.ko.debug
#0  doadump () at /usr/src/sys/kern/kern_shutdown.c:240
240             dumping++;
(kgdb) backtrace
#0  doadump () at /usr/src/sys/kern/kern_shutdown.c:240
#1  0xc04c7477 in boot (howto=256) at /usr/src/sys/kern/kern_shutdown.c:372
#2  0xc04c77c8 in panic () at /usr/src/sys/kern/kern_shutdown.c:550
#3  0xc04bc2f7 in free (addr=0xcf81f000, type=0xc0658b00) at 
/usr/src/sys/kern/kern_malloc.c:306
#4  0xc047478f in mlx_enquire (sc=0xc43c4000, command=0, bufsize=12,
     complete=0xc0474290 <mlx_periodic_rebuild>) at 
/usr/src/sys/dev/mlx/mlx.c:1559
#5  0xc0473bf4 in mlx_periodic (data=0xc43c4000) at 
/usr/src/sys/dev/mlx/mlx.c:1059
#6  0xc04d7d08 in softclock (dummy=0x0) at 
/usr/src/sys/kern/kern_timeout.c:225
#7  0xc04b40e2 in ithread_loop (arg=0xc1913580) at 
/usr/src/sys/kern/kern_intr.c:544
#8  0xc04b30d4 in fork_exit (callout=0xc04b3f50 <ithread_loop>, arg=0x0, 
frame=0x0)
     at /usr/src/sys/kern/kern_fork.c:793
(kgdb) list *0xc0474290
0xc0474290 is in mlx_periodic_rebuild (/usr/src/sys/dev/mlx/mlx.c:1347).
1342 
/********************************************************************************
1343     * Handle check/rebuild operations in progress.
1344     */
1345    static void
1346    mlx_periodic_rebuild(struct mlx_command *mc)
1347    {
1348        struct mlx_softc            *sc = mc->mc_sc;
1349        struct mlx_rebuild_status   *mr = (struct mlx_rebuild_status 
*)mc->mc_data;
1350
1351        switch(mc->mc_status) {
(kgdb) list *0xc04b3f50
0xc04b3f50 is in ithread_loop (/usr/src/sys/kern/kern_intr.c:483).
478     /*
479      * This is the main code for interrupt threads.
480      */
481     static void
482     ithread_loop(void *arg)
483     {
484             struct ithd *ithd;              /* our thread context */
485             struct intrhand *ih;            /* and our interrupt 
handler chain */
486             struct thread *td;
487             struct proc *p;
--- clip ---

any thoughts?

-- 
br,
Tommi
Received on Mon Sep 06 2004 - 10:22:55 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:38:10 UTC