Extracts from dmesg:

atapci0: <Intel PIIX4 ATA33 controller> port 0x1050-0x105f at device 7.1 on pci0
ata0: at 0x1f0 irq 14 on atapci0
ata1: at 0x170 irq 15 on atapci0
...
ad0: 17301MB <TOSHIBA MK1814GAV> [35152/16/63] at ata0-master UDMA33
acd0: CDROM <TOSHIBA CD-ROM XM-7102B> at ata1-master PIO4
...
acpi_lid0: Lid closed
ata0: resetting devices .. done
ata1: resetting devices .. done
pcm0: ac97 codec failed to reset extended mode (0, got 80)
acpi_lid0: Lid opened
...
psmintr: out of sync (00c0 != 0000).
psmintr: out of sync (00c0 != 0000).
...
psmintr: out of sync (00c0 != 0000).
psmintr: out of sync (00c0 != 0000).
ad0: WRITE command timeout tag=0 serv=0 - resetting
ata0: resetting devices .. 
psmintr: out of sync (00c0 != 0000).
psmintr: out of sync (00c0 != 0000).
ata0-slave: ATA identify retries exceeded
done
psmintr: out of sync (0080 != 0000).
psmintr: out of sync (00c0 != 0000).
...
psmintr: out of sync (00c0 != 0000).
psmintr: out of sync (00c0 != 0000).
ad0: READ command timeout tag=0 serv=0 - resetting
ata0: resetting devices .. 
panic: free: address 0 out of range


syncing disks... panic: bremfree: bp 0xc3b76f68 not locked

(kgdb) where
#0  dumpsys () at ../../../kern/kern_shutdown.c:488
#1  0xc0202443 in boot (howto=260) at ../../../kern/kern_shutdown.c:331
#2  0xc0202869 in panic (fmt=0xc03337d9 "bremfree: bp %p not locked")
    at ../../../kern/kern_shutdown.c:628
#3  0xc0230f6d in bremfree (bp=0xc3b76f68) at ../../../kern/vfs_bio.c:535
#4  0xc0232551 in vfs_bio_awrite (bp=0xc3b76f68)
    at ../../../kern/vfs_bio.c:1528
#5  0xc02ac94c in ffs_fsync (ap=0xc83eabfc) at ../../../ufs/ffs/ffs_vnops.c:239
#6  0xc02ab1b6 in ffs_sync (mp=0xc141f600, waitfor=2, cred=0xc0b63e00, 
    td=0xc03e7624) at vnode_if.h:441
#7  0xc023d4a1 in sync (td=0xc03e7624, uap=0x0)
    at ../../../kern/vfs_syscalls.c:640
#8  0xc020208c in boot (howto=256) at ../../../kern/kern_shutdown.c:240
#9  0xc0202869 in panic (fmt=0xc032bb9c "free: address %p out of range")
    at ../../../kern/kern_shutdown.c:628
#10 0xc01fae92 in free (addr=0x0, type=0xc035b000)
    at ../../../kern/kern_malloc.c:297
#11 0xc0160051 in ata_reinit (scp=0xc13b1300) at ../../../dev/ata/ata-all.c:841
#12 0xc0169605 in ad_timeout (request=0xc161d6c0)
    at ../../../dev/ata/ata-disk.c:927
#13 0xc020b35a in softclock (dummy=0x0) at ../../../kern/kern_timeout.c:187
#14 0xc01f593e in ithread_loop (arg=0xc0b69c80)
    at ../../../kern/kern_intr.c:532
(kgdb) frame 11
#11 0xc0160051 in ata_reinit (scp=0xc13b1300) at ../../../dev/ata/ata-all.c:841
841                 free(scp->dev_param[SLAVE], M_ATA);
(kgdb) list
836             if (misdev & ATA_ATA_MASTER || misdev & ATA_ATAPI_MASTER) {
837                 free(scp->dev_param[MASTER], M_ATA);
838                 scp->dev_param[MASTER] = NULL;
839             }
840             if (misdev & ATA_ATA_SLAVE || misdev & ATA_ATAPI_SLAVE) {
841                 free(scp->dev_param[SLAVE], M_ATA);
842                 scp->dev_param[SLAVE] = NULL;
843             }
844         }
845         if ((newdev = ~devices & scp->devices)) {
(kgdb) p misdev
$1 = 2

I got a crashdump, so more info available on request.

-- 

John Baldwin <[EMAIL PROTECTED]> -- http://www.FreeBSD.org/~jhb/
PGP Key: http://www.baldwin.cx/~john/pgpkey.asc
"Power Users Use the Power to Serve!"  -  http://www.FreeBSD.org/

To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message

Reply via email to